* Linux 5.10.152
@ 2022-10-30 9:03 5% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2022-10-30 9:03 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 5.10.152 kernel.
All users of the 5.10 kernel series must upgrade.
The updated 5.10.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/arm64/silicon-errata.rst | 4
Makefile | 6 -
arch/arm64/Kconfig | 16 +++
arch/arm64/boot/dts/qcom/sc7180-trogdor-lte-sku.dtsi | 4
arch/arm64/boot/dts/qcom/sc7180-trogdor.dtsi | 2
arch/arm64/include/asm/cpucaps.h | 3
arch/arm64/kernel/cpu_errata.c | 16 +++
arch/arm64/kernel/cpufeature.c | 13 ++
arch/arm64/kernel/topology.c | 40 --------
arch/arm64/kvm/vgic/vgic-its.c | 5 -
arch/riscv/Kconfig | 2
arch/riscv/kernel/setup.c | 13 ++
arch/riscv/kernel/smpboot.c | 4
arch/x86/Kconfig | 1
arch/x86/events/intel/pt.c | 63 ++++++++++--
arch/x86/include/asm/iommu.h | 4
arch/x86/kernel/cpu/microcode/amd.c | 16 ++-
block/blk-wbt.c | 11 --
drivers/acpi/acpi_extlog.c | 33 ++++--
drivers/acpi/video_detect.c | 64 ++++++++++++
drivers/ata/ahci.h | 2
drivers/ata/ahci_imx.c | 2
drivers/base/arch_topology.c | 19 +++
drivers/cpufreq/qcom-cpufreq-nvmem.c | 10 +-
drivers/dma/mxs-dma.c | 48 +--------
drivers/gpu/drm/virtio/virtgpu_plane.c | 6 -
drivers/hid/hid-magicmouse.c | 2
drivers/hwmon/coretemp.c | 56 ++++++++---
drivers/i2c/busses/i2c-qcom-cci.c | 13 +-
drivers/iommu/intel/iommu.c | 5 +
drivers/media/platform/qcom/venus/vdec.c | 2
drivers/media/rc/mceusb.c | 2
drivers/mmc/core/block.c | 7 +
drivers/mmc/core/card.h | 6 +
drivers/mmc/core/quirks.h | 6 +
drivers/mmc/host/sdhci-tegra.c | 2
drivers/net/ethernet/hisilicon/hns/hnae.c | 4
drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 3
drivers/net/ethernet/intel/i40e/i40e_main.c | 16 +--
drivers/net/ethernet/intel/i40e/i40e_txrx.c | 13 +-
drivers/net/ethernet/intel/i40e/i40e_txrx.h | 1
drivers/net/ethernet/intel/i40e/i40e_xsk.c | 67 +++++++++++--
drivers/net/ethernet/intel/i40e/i40e_xsk.h | 2
drivers/net/ethernet/pensando/ionic/ionic_lif.c | 12 +-
drivers/net/ethernet/sfc/ef10.c | 58 ++++-------
drivers/net/ethernet/sfc/filter.h | 3
drivers/net/ethernet/sfc/rx_common.c | 10 +-
drivers/net/hyperv/hyperv_net.h | 3
drivers/net/hyperv/netvsc.c | 4
drivers/net/hyperv/netvsc_drv.c | 20 ++++
drivers/net/phy/dp83822.c | 3
drivers/net/phy/dp83867.c | 8 +
drivers/net/usb/cdc_ether.c | 7 +
drivers/net/usb/r8152.c | 1
drivers/nvme/host/core.c | 7 +
drivers/nvme/host/hwmon.c | 58 ++++++++---
drivers/nvme/host/nvme.h | 8 +
drivers/xen/gntdev-common.h | 3
drivers/xen/gntdev.c | 94 +++++--------------
fs/btrfs/backref.c | 46 ++++++---
fs/cifs/cifsfs.c | 7 +
fs/cifs/file.c | 11 +-
fs/cifs/sess.c | 1
fs/fcntl.c | 32 ++++--
fs/ocfs2/namei.c | 23 ++--
fs/proc/task_mmu.c | 2
include/linux/kvm_host.h | 2
include/linux/mmc/card.h | 1
include/net/sch_generic.h | 1
include/net/sock_reuseport.h | 11 +-
kernel/trace/trace.c | 12 +-
net/atm/mpoa_proc.c | 3
net/core/sock_reuseport.c | 16 +++
net/hsr/hsr_forward.c | 12 +-
net/ipv4/datagram.c | 2
net/ipv4/udp.c | 2
net/ipv6/datagram.c | 2
net/ipv6/udp.c | 2
net/sched/sch_api.c | 5 -
net/sched/sch_atm.c | 1
net/sched/sch_cake.c | 4
net/sched/sch_cbq.c | 1
net/sched/sch_choke.c | 2
net/sched/sch_drr.c | 2
net/sched/sch_dsmark.c | 2
net/sched/sch_etf.c | 3
net/sched/sch_ets.c | 2
net/sched/sch_fq_codel.c | 2
net/sched/sch_fq_pie.c | 3
net/sched/sch_hfsc.c | 2
net/sched/sch_htb.c | 2
net/sched/sch_multiq.c | 1
net/sched/sch_prio.c | 2
net/sched/sch_qfq.c | 2
net/sched/sch_red.c | 2
net/sched/sch_sfb.c | 5 -
net/sched/sch_skbprio.c | 3
net/sched/sch_taprio.c | 2
net/sched/sch_tbf.c | 2
net/sched/sch_teql.c | 1
net/tipc/discover.c | 2
net/tipc/topsrv.c | 2
security/selinux/ss/services.c | 5 -
security/selinux/ss/sidtab.c | 4
security/selinux/ss/sidtab.h | 2
tools/perf/util/parse-events.c | 6 +
tools/perf/util/pmu.c | 50 ++++++++++
tools/perf/util/pmu.h | 5 +
tools/perf/util/pmu.l | 2
tools/perf/util/pmu.y | 15 ---
virt/kvm/kvm_main.c | 11 ++
111 files changed, 802 insertions(+), 454 deletions(-)
Adrian Hunter (1):
perf/x86/intel/pt: Relax address filter validation
Alexander Graf (1):
kvm: Add support for arch compat vm ioctls
Alexander Potapenko (1):
tipc: fix an information leak in tipc_topsrv_kern_subscr
Alexander Stein (1):
ata: ahci-imx: Fix MODULE_ALIAS
Avri Altman (1):
mmc: core: Add SD card quirk for broken discard
Borislav Petkov (1):
x86/microcode/AMD: Apply the patch early on every logical thread
Brett Creeley (1):
ionic: catch NULL pointer issue on reconfig
Bryan O'Donoghue (2):
i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter
media: venus: dec: Handle the case where find_format fails
Charlotte Tan (1):
iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check()
Christoph Hellwig (1):
nvme-hwmon: consistently ignore errors from nvme_hwmon_init
Conor Dooley (2):
arm64: topology: move store_cpu_topology() to shared code
riscv: topology: fix default topology reporting
Daniel Wagner (1):
nvme-hwmon: Return error code when registration fails
Dario Binacchi (1):
dmaengine: mxs: use platform_driver_register
Desmond Cheong Zhi Xi (1):
fcntl: fix potential deadlocks for &fown_struct.lock
Dmitry Osipenko (1):
drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb()
Eric Dumazet (2):
net: hsr: avoid possible NULL deref in skb_clone()
net: sched: fix race condition in qdisc_graft()
Eric Ren (1):
KVM: arm64: vgic: Fix exit condition in scan_its_table()
Fabien Parent (2):
cpufreq: qcom: fix writes in read-only memory region
cpufreq: qcom: fix memory leak in error path
Fabio Estevam (1):
dmaengine: mxs-dma: Remove the unused .id_table
Felix Riemann (1):
net: phy: dp83822: disable MDI crossover status change interrupt
Filipe Manana (2):
btrfs: fix processing of delayed data refs during backref walking
btrfs: fix processing of delayed tree block refs during backref walking
GONG, Ruiqi (1):
selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()
Gaurav Kohli (1):
hv_netvsc: Fix race between VF offering and VF association message from host
Greg Kroah-Hartman (1):
Linux 5.10.152
Hannes Reinecke (1):
nvme-hwmon: rework to avoid devm allocation
Harini Katakam (1):
net: phy: dp83867: Extend RX strap quirk for SGMII mode
James Morse (1):
arm64: errata: Remove AES hwcap for COMPAT tasks
Jan Sokolowski (1):
i40e: Fix DMA mappings leak
Jean-Francois Le Fillatre (1):
r8152: add PID for the Lenovo OneLink+ Dock
Jerry Snitselaar (1):
iommu/vt-d: Clean up si_domain in the init_dmars() error path
Jin Yao (1):
perf pmu: Validate raw event with sysfs exported format bits
Jonathan Cooper (1):
sfc: Change VF mac via PF as first preference if available.
Joseph Qi (2):
ocfs2: clear dinode links count in case of error
ocfs2: fix BUG when iput after ocfs2_mknod fails
José Expósito (1):
HID: magicmouse: Do not set BTN_MOUSE on double report
Juergen Gross (1):
xen: assume XENFEAT_gnttab_map_avail_bits being set for pv guests
Kai-Heng Feng (1):
ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS
Kefeng Wang (1):
riscv: Add machine name to kernel boot log and stack dump output
Kuniyuki Iwashima (1):
udp: Update reuse->has_conns under reuseport_lock.
Lei Chen (1):
block: wbt: Remove unnecessary invoking of wbt_update_limits in wbt_init
M. Vefa Bicakci (1):
xen/gntdev: Accommodate VMA splitting
Mark Tomlinson (1):
tipc: Fix recognition of trial period
Nathan Chancellor (1):
x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB
Nick Desaulniers (1):
Makefile.debug: re-enable debug info for .S files
Pavel Tikhomirov (1):
fcntl: make F_GETOWN(EX) return 0 on dead owner task
Pieter Jansen van Vuuren (1):
sfc: include vport_id in filter spec hash and equal()
Prathamesh Shete (1):
mmc: sdhci-tegra: Use actual clock rate for SW tuning correction
Rob Herring (1):
perf: Skip and warn on unknown format 'configN' attrs
Sean Young (1):
media: mceusb: set timeout to at least timeout provided
Serge Semin (1):
nvme-hwmon: kmalloc the NVME SMART log buffer
Seth Jenkins (1):
mm: /proc/pid/smaps_rollup: fix no vma's null-deref
Sibi Sankar (1):
arm64: dts: qcom: sc7180-trogdor: Fixup modem memory region
Steven Rostedt (Google) (1):
tracing: Do not free snapshot if tracer is on cmdline
Tony Luck (1):
ACPI: extlog: Handle multiple records
Wenting Zhang (1):
riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb
Werner Sembach (1):
ACPI: video: Force backlight native for more TongFang devices
Xiaobo Liu (1):
net/atm: fix proc_mpc_write incorrect return value
Yang Yingliang (1):
net: hns: fix possible memory leak in hnae_ae_register()
Yu Kuai (2):
blk-wbt: call rq_qos_add() after wb_normal is initialized
blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init()
Zhang Rui (1):
hwmon/coretemp: Handle large core ID value
Zhang Xiaoxu (3):
cifs: Fix xid leak in cifs_copy_file_range()
cifs: Fix xid leak in cifs_flock()
cifs: Fix xid leak in cifs_ses_add_channel()
Zhengchao Shao (3):
net: sched: cake: fix null pointer access issue when cake_init() fails
net: sched: delete duplicate cleanup of backlog and qlen
net: sched: sfb: fix null pointer access issue when sfb_init() fails
sunliming (1):
tracing: Simplify conditional compilation code in tracing_set_tracer()
^ permalink raw reply [relevance 5%]
* [PATCH 5.10 00/73] 5.10.152-rc1 review
@ 2022-10-28 12:02 4% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2022-10-28 12:02 UTC (permalink / raw)
To: stable
Cc: Greg Kroah-Hartman, patches, linux-kernel, torvalds, akpm, linux,
shuah, patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, srw
This is the start of the stable review cycle for the 5.10.152 release.
There are 73 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sun, 30 Oct 2022 12:02:13 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.152-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.10.152-rc1
Seth Jenkins <sethjenkins@google.com>
mm: /proc/pid/smaps_rollup: fix no vma's null-deref
Yu Kuai <yukuai3@huawei.com>
blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init()
Avri Altman <avri.altman@wdc.com>
mmc: core: Add SD card quirk for broken discard
Nick Desaulniers <ndesaulniers@google.com>
Makefile.debug: re-enable debug info for .S files
Nathan Chancellor <nathan@kernel.org>
x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB
Werner Sembach <wse@tuxedocomputers.com>
ACPI: video: Force backlight native for more TongFang devices
Gaurav Kohli <gauravkohli@linux.microsoft.com>
hv_netvsc: Fix race between VF offering and VF association message from host
Adrian Hunter <adrian.hunter@intel.com>
perf/x86/intel/pt: Relax address filter validation
Conor Dooley <conor.dooley@microchip.com>
riscv: topology: fix default topology reporting
Conor Dooley <conor.dooley@microchip.com>
arm64: topology: move store_cpu_topology() to shared code
Sibi Sankar <sibis@codeaurora.org>
arm64: dts: qcom: sc7180-trogdor: Fixup modem memory region
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
fcntl: fix potential deadlocks for &fown_struct.lock
Pavel Tikhomirov <ptikhomirov@virtuozzo.com>
fcntl: make F_GETOWN(EX) return 0 on dead owner task
Rob Herring <robh@kernel.org>
perf: Skip and warn on unknown format 'configN' attrs
Jin Yao <yao.jin@linux.intel.com>
perf pmu: Validate raw event with sysfs exported format bits
Wenting Zhang <zephray@outlook.com>
riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb
Kefeng Wang <wangkefeng.wang@huawei.com>
riscv: Add machine name to kernel boot log and stack dump output
Prathamesh Shete <pshete@nvidia.com>
mmc: sdhci-tegra: Use actual clock rate for SW tuning correction
M. Vefa Bicakci <m.v.b@runbox.com>
xen/gntdev: Accommodate VMA splitting
Juergen Gross <jgross@suse.com>
xen: assume XENFEAT_gnttab_map_avail_bits being set for pv guests
Steven Rostedt (Google) <rostedt@goodmis.org>
tracing: Do not free snapshot if tracer is on cmdline
sunliming <sunliming@kylinos.cn>
tracing: Simplify conditional compilation code in tracing_set_tracer()
Dario Binacchi <dario.binacchi@amarulasolutions.com>
dmaengine: mxs: use platform_driver_register
Fabio Estevam <festevam@gmail.com>
dmaengine: mxs-dma: Remove the unused .id_table
Dmitry Osipenko <dmitry.osipenko@collabora.com>
drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb()
Jerry Snitselaar <jsnitsel@redhat.com>
iommu/vt-d: Clean up si_domain in the init_dmars() error path
Charlotte Tan <charlotte@extrahop.com>
iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check()
Felix Riemann <felix.riemann@sma.de>
net: phy: dp83822: disable MDI crossover status change interrupt
Eric Dumazet <edumazet@google.com>
net: sched: fix race condition in qdisc_graft()
Yang Yingliang <yangyingliang@huawei.com>
net: hns: fix possible memory leak in hnae_ae_register()
Pieter Jansen van Vuuren <pieter.jansen-van-vuuren@amd.com>
sfc: include vport_id in filter spec hash and equal()
Zhengchao Shao <shaozhengchao@huawei.com>
net: sched: sfb: fix null pointer access issue when sfb_init() fails
Zhengchao Shao <shaozhengchao@huawei.com>
net: sched: delete duplicate cleanup of backlog and qlen
Zhengchao Shao <shaozhengchao@huawei.com>
net: sched: cake: fix null pointer access issue when cake_init() fails
Serge Semin <Sergey.Semin@baikalelectronics.ru>
nvme-hwmon: kmalloc the NVME SMART log buffer
Christoph Hellwig <hch@lst.de>
nvme-hwmon: consistently ignore errors from nvme_hwmon_init
Daniel Wagner <dwagner@suse.de>
nvme-hwmon: Return error code when registration fails
Hannes Reinecke <hare@suse.de>
nvme-hwmon: rework to avoid devm allocation
Brett Creeley <brett@pensando.io>
ionic: catch NULL pointer issue on reconfig
Eric Dumazet <edumazet@google.com>
net: hsr: avoid possible NULL deref in skb_clone()
Zhang Xiaoxu <zhangxiaoxu5@huawei.com>
cifs: Fix xid leak in cifs_ses_add_channel()
Zhang Xiaoxu <zhangxiaoxu5@huawei.com>
cifs: Fix xid leak in cifs_flock()
Zhang Xiaoxu <zhangxiaoxu5@huawei.com>
cifs: Fix xid leak in cifs_copy_file_range()
Kuniyuki Iwashima <kuniyu@amazon.com>
udp: Update reuse->has_conns under reuseport_lock.
Kuniyuki Iwashima <kuniyu@amazon.co.jp>
tcp: Add num_closed_socks to struct sock_reuseport.
Harini Katakam <harini.katakam@amd.com>
net: phy: dp83867: Extend RX strap quirk for SGMII mode
Xiaobo Liu <cppcoffee@gmail.com>
net/atm: fix proc_mpc_write incorrect return value
Jonathan Cooper <jonathan.s.cooper@amd.com>
sfc: Change VF mac via PF as first preference if available.
José Expósito <jose.exposito89@gmail.com>
HID: magicmouse: Do not set BTN_MOUSE on double report
Jan Sokolowski <jan.sokolowski@intel.com>
i40e: Fix DMA mappings leak
Alexander Potapenko <glider@google.com>
tipc: fix an information leak in tipc_topsrv_kern_subscr
Mark Tomlinson <mark.tomlinson@alliedtelesis.co.nz>
tipc: Fix recognition of trial period
Tony Luck <tony.luck@intel.com>
ACPI: extlog: Handle multiple records
Filipe Manana <fdmanana@suse.com>
btrfs: fix processing of delayed tree block refs during backref walking
Filipe Manana <fdmanana@suse.com>
btrfs: fix processing of delayed data refs during backref walking
Jean-Francois Le Fillatre <jflf_kernel@gmx.com>
r8152: add PID for the Lenovo OneLink+ Dock
James Morse <james.morse@arm.com>
arm64: errata: Remove AES hwcap for COMPAT tasks
Yu Kuai <yukuai3@huawei.com>
blk-wbt: call rq_qos_add() after wb_normal is initialized
Lei Chen <lennychen@tencent.com>
block: wbt: Remove unnecessary invoking of wbt_update_limits in wbt_init
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
media: venus: dec: Handle the case where find_format fails
Sean Young <sean@mess.org>
media: mceusb: set timeout to at least timeout provided
Eric Ren <renzhengeek@gmail.com>
KVM: arm64: vgic: Fix exit condition in scan_its_table()
Alexander Graf <graf@amazon.com>
kvm: Add support for arch compat vm ioctls
Fabien Parent <fabien.parent@linaro.org>
cpufreq: qcom: fix memory leak in error path
Kai-Heng Feng <kai.heng.feng@canonical.com>
ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS
Alexander Stein <alexander.stein@ew.tq-group.com>
ata: ahci-imx: Fix MODULE_ALIAS
Zhang Rui <rui.zhang@intel.com>
hwmon/coretemp: Handle large core ID value
Borislav Petkov <bp@suse.de>
x86/microcode/AMD: Apply the patch early on every logical thread
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter
Fabien Parent <fabien.parent@linaro.org>
cpufreq: qcom: fix writes in read-only memory region
GONG, Ruiqi <gongruiqi1@huawei.com>
selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: fix BUG when iput after ocfs2_mknod fails
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: clear dinode links count in case of error
-------------
Diffstat:
Documentation/arm64/silicon-errata.rst | 4 +
Makefile | 8 +-
arch/arm64/Kconfig | 16 ++++
.../boot/dts/qcom/sc7180-trogdor-lte-sku.dtsi | 4 +
arch/arm64/boot/dts/qcom/sc7180-trogdor.dtsi | 2 +-
arch/arm64/include/asm/cpucaps.h | 3 +-
arch/arm64/kernel/cpu_errata.c | 16 ++++
arch/arm64/kernel/cpufeature.c | 13 ++-
arch/arm64/kernel/topology.c | 40 ---------
arch/arm64/kvm/vgic/vgic-its.c | 5 +-
arch/riscv/Kconfig | 2 +-
arch/riscv/kernel/setup.c | 13 ++-
arch/riscv/kernel/smpboot.c | 4 +-
arch/x86/Kconfig | 1 -
arch/x86/events/intel/pt.c | 63 ++++++++++++---
arch/x86/include/asm/iommu.h | 4 +-
arch/x86/kernel/cpu/microcode/amd.c | 16 +++-
block/blk-wbt.c | 11 +--
drivers/acpi/acpi_extlog.c | 33 +++++---
drivers/acpi/video_detect.c | 64 +++++++++++++++
drivers/ata/ahci.h | 2 +-
drivers/ata/ahci_imx.c | 2 +-
drivers/base/arch_topology.c | 19 +++++
drivers/cpufreq/qcom-cpufreq-nvmem.c | 10 ++-
drivers/dma/mxs-dma.c | 48 +++--------
drivers/gpu/drm/virtio/virtgpu_plane.c | 6 +-
drivers/hid/hid-magicmouse.c | 2 +-
drivers/hwmon/coretemp.c | 56 +++++++++----
drivers/i2c/busses/i2c-qcom-cci.c | 13 +--
drivers/iommu/intel/iommu.c | 5 ++
drivers/media/platform/qcom/venus/vdec.c | 2 +
drivers/media/rc/mceusb.c | 2 +-
drivers/mmc/core/block.c | 7 +-
drivers/mmc/core/card.h | 6 ++
drivers/mmc/core/quirks.h | 6 ++
drivers/mmc/host/sdhci-tegra.c | 2 +-
drivers/net/ethernet/hisilicon/hns/hnae.c | 4 +-
drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 3 -
drivers/net/ethernet/intel/i40e/i40e_main.c | 16 ++--
drivers/net/ethernet/intel/i40e/i40e_txrx.c | 13 ++-
drivers/net/ethernet/intel/i40e/i40e_txrx.h | 1 -
drivers/net/ethernet/intel/i40e/i40e_xsk.c | 67 +++++++++++++--
drivers/net/ethernet/intel/i40e/i40e_xsk.h | 2 +-
drivers/net/ethernet/pensando/ionic/ionic_lif.c | 12 ++-
drivers/net/ethernet/sfc/ef10.c | 58 ++++++-------
drivers/net/ethernet/sfc/filter.h | 3 +-
drivers/net/ethernet/sfc/rx_common.c | 10 +--
drivers/net/hyperv/hyperv_net.h | 3 +-
drivers/net/hyperv/netvsc.c | 4 +
drivers/net/hyperv/netvsc_drv.c | 20 +++++
drivers/net/phy/dp83822.c | 3 +-
drivers/net/phy/dp83867.c | 8 ++
drivers/net/usb/cdc_ether.c | 7 ++
drivers/net/usb/r8152.c | 1 +
drivers/nvme/host/core.c | 7 +-
drivers/nvme/host/hwmon.c | 58 +++++++++----
drivers/nvme/host/nvme.h | 8 ++
drivers/xen/gntdev-common.h | 3 +-
drivers/xen/gntdev.c | 94 +++++++---------------
fs/btrfs/backref.c | 46 +++++++----
fs/cifs/cifsfs.c | 7 +-
fs/cifs/file.c | 11 ++-
fs/cifs/sess.c | 1 +
fs/fcntl.c | 32 +++++---
fs/ocfs2/namei.c | 23 +++---
fs/proc/task_mmu.c | 2 +-
include/linux/kvm_host.h | 2 +
include/linux/mmc/card.h | 1 +
include/net/sch_generic.h | 1 -
include/net/sock_reuseport.h | 16 ++--
kernel/trace/trace.c | 12 +--
net/atm/mpoa_proc.c | 3 +-
net/core/sock_reuseport.c | 91 ++++++++++++++++-----
net/hsr/hsr_forward.c | 12 +--
net/ipv4/datagram.c | 2 +-
net/ipv4/udp.c | 2 +-
net/ipv6/datagram.c | 2 +-
net/ipv6/udp.c | 2 +-
net/sched/sch_api.c | 5 +-
net/sched/sch_atm.c | 1 -
net/sched/sch_cake.c | 4 +
net/sched/sch_cbq.c | 1 -
net/sched/sch_choke.c | 2 -
net/sched/sch_drr.c | 2 -
net/sched/sch_dsmark.c | 2 -
net/sched/sch_etf.c | 3 -
net/sched/sch_ets.c | 2 -
net/sched/sch_fq_codel.c | 2 -
net/sched/sch_fq_pie.c | 3 -
net/sched/sch_hfsc.c | 2 -
net/sched/sch_htb.c | 2 -
net/sched/sch_multiq.c | 1 -
net/sched/sch_prio.c | 2 -
net/sched/sch_qfq.c | 2 -
net/sched/sch_red.c | 2 -
net/sched/sch_sfb.c | 5 +-
net/sched/sch_skbprio.c | 3 -
net/sched/sch_taprio.c | 2 -
net/sched/sch_tbf.c | 2 -
net/sched/sch_teql.c | 1 -
net/tipc/discover.c | 2 +-
net/tipc/topsrv.c | 2 +-
security/selinux/ss/services.c | 5 +-
security/selinux/ss/sidtab.c | 4 +-
security/selinux/ss/sidtab.h | 2 +-
tools/perf/util/parse-events.c | 6 ++
tools/perf/util/pmu.c | 50 ++++++++++++
tools/perf/util/pmu.h | 5 ++
tools/perf/util/pmu.l | 2 -
tools/perf/util/pmu.y | 15 +---
virt/kvm/kvm_main.c | 11 +++
111 files changed, 863 insertions(+), 475 deletions(-)
^ permalink raw reply [relevance 4%]
* [PATCH 5.10 00/79] 5.10.151-rc1 review
@ 2022-10-27 16:55 4% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2022-10-27 16:55 UTC (permalink / raw)
To: stable
Cc: Greg Kroah-Hartman, patches, linux-kernel, torvalds, akpm, linux,
shuah, patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, srw
This is the start of the stable review cycle for the 5.10.151 release.
There are 79 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 29 Oct 2022 16:50:35 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.151-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.10.151-rc1
Seth Jenkins <sethjenkins@google.com>
mm: /proc/pid/smaps_rollup: fix no vma's null-deref
Yu Kuai <yukuai3@huawei.com>
blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init()
Avri Altman <avri.altman@wdc.com>
mmc: core: Add SD card quirk for broken discard
Nick Desaulniers <ndesaulniers@google.com>
Makefile.debug: re-enable debug info for .S files
Nathan Chancellor <nathan@kernel.org>
x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB
Werner Sembach <wse@tuxedocomputers.com>
ACPI: video: Force backlight native for more TongFang devices
Gaurav Kohli <gauravkohli@linux.microsoft.com>
hv_netvsc: Fix race between VF offering and VF association message from host
Adrian Hunter <adrian.hunter@intel.com>
perf/x86/intel/pt: Relax address filter validation
Conor Dooley <conor.dooley@microchip.com>
riscv: topology: fix default topology reporting
Conor Dooley <conor.dooley@microchip.com>
arm64: topology: move store_cpu_topology() to shared code
Sibi Sankar <sibis@codeaurora.org>
arm64: dts: qcom: sc7180-trogdor: Fixup modem memory region
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
fcntl: fix potential deadlocks for &fown_struct.lock
Pavel Tikhomirov <ptikhomirov@virtuozzo.com>
fcntl: make F_GETOWN(EX) return 0 on dead owner task
Rob Herring <robh@kernel.org>
perf: Skip and warn on unknown format 'configN' attrs
Jin Yao <yao.jin@linux.intel.com>
perf pmu: Validate raw event with sysfs exported format bits
Wenting Zhang <zephray@outlook.com>
riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb
Kefeng Wang <wangkefeng.wang@huawei.com>
riscv: Add machine name to kernel boot log and stack dump output
Prathamesh Shete <pshete@nvidia.com>
mmc: sdhci-tegra: Use actual clock rate for SW tuning correction
M. Vefa Bicakci <m.v.b@runbox.com>
xen/gntdev: Accommodate VMA splitting
Juergen Gross <jgross@suse.com>
xen: assume XENFEAT_gnttab_map_avail_bits being set for pv guests
Steven Rostedt (Google) <rostedt@goodmis.org>
tracing: Do not free snapshot if tracer is on cmdline
sunliming <sunliming@kylinos.cn>
tracing: Simplify conditional compilation code in tracing_set_tracer()
Dario Binacchi <dario.binacchi@amarulasolutions.com>
dmaengine: mxs: use platform_driver_register
Fabio Estevam <festevam@gmail.com>
dmaengine: mxs-dma: Remove the unused .id_table
Dmitry Osipenko <dmitry.osipenko@collabora.com>
drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb()
Jerry Snitselaar <jsnitsel@redhat.com>
iommu/vt-d: Clean up si_domain in the init_dmars() error path
Charlotte Tan <charlotte@extrahop.com>
iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check()
Felix Riemann <felix.riemann@sma.de>
net: phy: dp83822: disable MDI crossover status change interrupt
Eric Dumazet <edumazet@google.com>
net: sched: fix race condition in qdisc_graft()
Yang Yingliang <yangyingliang@huawei.com>
net: hns: fix possible memory leak in hnae_ae_register()
Pieter Jansen van Vuuren <pieter.jansen-van-vuuren@amd.com>
sfc: include vport_id in filter spec hash and equal()
Zhengchao Shao <shaozhengchao@huawei.com>
net: sched: sfb: fix null pointer access issue when sfb_init() fails
Zhengchao Shao <shaozhengchao@huawei.com>
net: sched: delete duplicate cleanup of backlog and qlen
Zhengchao Shao <shaozhengchao@huawei.com>
net: sched: cake: fix null pointer access issue when cake_init() fails
Serge Semin <Sergey.Semin@baikalelectronics.ru>
nvme-hwmon: kmalloc the NVME SMART log buffer
Christoph Hellwig <hch@lst.de>
nvme-hwmon: consistently ignore errors from nvme_hwmon_init
Daniel Wagner <dwagner@suse.de>
nvme-hwmon: Return error code when registration fails
Hannes Reinecke <hare@suse.de>
nvme-hwmon: rework to avoid devm allocation
Brett Creeley <brett@pensando.io>
ionic: catch NULL pointer issue on reconfig
Eric Dumazet <edumazet@google.com>
net: hsr: avoid possible NULL deref in skb_clone()
Zhang Xiaoxu <zhangxiaoxu5@huawei.com>
cifs: Fix xid leak in cifs_ses_add_channel()
Zhang Xiaoxu <zhangxiaoxu5@huawei.com>
cifs: Fix xid leak in cifs_flock()
Zhang Xiaoxu <zhangxiaoxu5@huawei.com>
cifs: Fix xid leak in cifs_copy_file_range()
Kuniyuki Iwashima <kuniyu@amazon.com>
udp: Update reuse->has_conns under reuseport_lock.
Kuniyuki Iwashima <kuniyu@amazon.co.jp>
tcp: Add num_closed_socks to struct sock_reuseport.
Harini Katakam <harini.katakam@amd.com>
net: phy: dp83867: Extend RX strap quirk for SGMII mode
Xiaobo Liu <cppcoffee@gmail.com>
net/atm: fix proc_mpc_write incorrect return value
Jonathan Cooper <jonathan.s.cooper@amd.com>
sfc: Change VF mac via PF as first preference if available.
José Expósito <jose.exposito89@gmail.com>
HID: magicmouse: Do not set BTN_MOUSE on double report
Jan Sokolowski <jan.sokolowski@intel.com>
i40e: Fix DMA mappings leak
Alexander Potapenko <glider@google.com>
tipc: fix an information leak in tipc_topsrv_kern_subscr
Mark Tomlinson <mark.tomlinson@alliedtelesis.co.nz>
tipc: Fix recognition of trial period
Tony Luck <tony.luck@intel.com>
ACPI: extlog: Handle multiple records
Filipe Manana <fdmanana@suse.com>
btrfs: fix processing of delayed tree block refs during backref walking
Filipe Manana <fdmanana@suse.com>
btrfs: fix processing of delayed data refs during backref walking
Jean-Francois Le Fillatre <jflf_kernel@gmx.com>
r8152: add PID for the Lenovo OneLink+ Dock
James Morse <james.morse@arm.com>
arm64: errata: Remove AES hwcap for COMPAT tasks
Yu Kuai <yukuai3@huawei.com>
blk-wbt: call rq_qos_add() after wb_normal is initialized
Lei Chen <lennychen@tencent.com>
block: wbt: Remove unnecessary invoking of wbt_update_limits in wbt_init
Martin Rodriguez Reboredo <yakoyoku@gmail.com>
kbuild: Add skip_encoding_btf_enum64 option to pahole
Jiri Olsa <jolsa@redhat.com>
kbuild: Unify options for BTF generation for vmlinux and modules
Andrii Nakryiko <andrii@kernel.org>
kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
Javier Martinez Canillas <javierm@redhat.com>
kbuild: Quote OBJCOPY var to avoid a pahole call break the build
Ilya Leoshkevich <iii@linux.ibm.com>
bpf: Generate BTF_KIND_FLOAT when linking vmlinux
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
media: venus: dec: Handle the case where find_format fails
Sean Young <sean@mess.org>
media: mceusb: set timeout to at least timeout provided
Eric Ren <renzhengeek@gmail.com>
KVM: arm64: vgic: Fix exit condition in scan_its_table()
Alexander Graf <graf@amazon.com>
kvm: Add support for arch compat vm ioctls
Fabien Parent <fabien.parent@linaro.org>
cpufreq: qcom: fix memory leak in error path
Kai-Heng Feng <kai.heng.feng@canonical.com>
ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS
Alexander Stein <alexander.stein@ew.tq-group.com>
ata: ahci-imx: Fix MODULE_ALIAS
Zhang Rui <rui.zhang@intel.com>
hwmon/coretemp: Handle large core ID value
Borislav Petkov <bp@suse.de>
x86/microcode/AMD: Apply the patch early on every logical thread
Jon Hunter <jonathanh@nvidia.com>
cpufreq: tegra194: Fix module loading
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter
Fabien Parent <fabien.parent@linaro.org>
cpufreq: qcom: fix writes in read-only memory region
GONG, Ruiqi <gongruiqi1@huawei.com>
selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: fix BUG when iput after ocfs2_mknod fails
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: clear dinode links count in case of error
-------------
Diffstat:
Documentation/arm64/silicon-errata.rst | 4 +
Makefile | 11 ++-
arch/arm64/Kconfig | 16 ++++
.../boot/dts/qcom/sc7180-trogdor-lte-sku.dtsi | 4 +
arch/arm64/boot/dts/qcom/sc7180-trogdor.dtsi | 2 +-
arch/arm64/include/asm/cpucaps.h | 3 +-
arch/arm64/kernel/cpu_errata.c | 16 ++++
arch/arm64/kernel/cpufeature.c | 13 ++-
arch/arm64/kernel/topology.c | 40 ---------
arch/arm64/kvm/vgic/vgic-its.c | 5 +-
arch/riscv/Kconfig | 2 +-
arch/riscv/kernel/setup.c | 13 ++-
arch/riscv/kernel/smpboot.c | 4 +-
arch/x86/Kconfig | 1 -
arch/x86/events/intel/pt.c | 63 ++++++++++++---
arch/x86/include/asm/iommu.h | 4 +-
arch/x86/kernel/cpu/microcode/amd.c | 16 +++-
block/blk-wbt.c | 11 +--
drivers/acpi/acpi_extlog.c | 33 +++++---
drivers/acpi/video_detect.c | 64 +++++++++++++++
drivers/ata/ahci.h | 2 +-
drivers/ata/ahci_imx.c | 2 +-
drivers/base/arch_topology.c | 19 +++++
drivers/cpufreq/qcom-cpufreq-nvmem.c | 10 ++-
drivers/cpufreq/tegra194-cpufreq.c | 1 +
drivers/dma/mxs-dma.c | 48 +++--------
drivers/gpu/drm/virtio/virtgpu_plane.c | 6 +-
drivers/hid/hid-magicmouse.c | 2 +-
drivers/hwmon/coretemp.c | 56 +++++++++----
drivers/i2c/busses/i2c-qcom-cci.c | 13 +--
drivers/iommu/intel/iommu.c | 5 ++
drivers/media/platform/qcom/venus/vdec.c | 2 +
drivers/media/rc/mceusb.c | 2 +-
drivers/mmc/core/block.c | 7 +-
drivers/mmc/core/card.h | 6 ++
drivers/mmc/core/quirks.h | 6 ++
drivers/mmc/host/sdhci-tegra.c | 2 +-
drivers/net/ethernet/hisilicon/hns/hnae.c | 4 +-
drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 3 -
drivers/net/ethernet/intel/i40e/i40e_main.c | 16 ++--
drivers/net/ethernet/intel/i40e/i40e_txrx.c | 13 ++-
drivers/net/ethernet/intel/i40e/i40e_txrx.h | 1 -
drivers/net/ethernet/intel/i40e/i40e_xsk.c | 67 +++++++++++++--
drivers/net/ethernet/intel/i40e/i40e_xsk.h | 2 +-
drivers/net/ethernet/pensando/ionic/ionic_lif.c | 12 ++-
drivers/net/ethernet/sfc/ef10.c | 58 ++++++-------
drivers/net/ethernet/sfc/filter.h | 3 +-
drivers/net/ethernet/sfc/rx_common.c | 10 +--
drivers/net/hyperv/hyperv_net.h | 3 +-
drivers/net/hyperv/netvsc.c | 4 +
drivers/net/hyperv/netvsc_drv.c | 20 +++++
drivers/net/phy/dp83822.c | 3 +-
drivers/net/phy/dp83867.c | 8 ++
drivers/net/usb/cdc_ether.c | 7 ++
drivers/net/usb/r8152.c | 1 +
drivers/nvme/host/core.c | 7 +-
drivers/nvme/host/hwmon.c | 58 +++++++++----
drivers/nvme/host/nvme.h | 8 ++
drivers/xen/gntdev-common.h | 3 +-
drivers/xen/gntdev.c | 94 +++++++---------------
fs/btrfs/backref.c | 46 +++++++----
fs/cifs/cifsfs.c | 7 +-
fs/cifs/file.c | 11 ++-
fs/cifs/sess.c | 1 +
fs/fcntl.c | 32 +++++---
fs/ocfs2/namei.c | 23 +++---
fs/proc/task_mmu.c | 2 +-
include/linux/kvm_host.h | 2 +
include/linux/mmc/card.h | 1 +
include/net/sch_generic.h | 1 -
include/net/sock_reuseport.h | 16 ++--
kernel/trace/trace.c | 12 +--
net/atm/mpoa_proc.c | 3 +-
net/core/sock_reuseport.c | 91 ++++++++++++++++-----
net/hsr/hsr_forward.c | 12 +--
net/ipv4/datagram.c | 2 +-
net/ipv4/udp.c | 2 +-
net/ipv6/datagram.c | 2 +-
net/ipv6/udp.c | 2 +-
net/sched/sch_api.c | 5 +-
net/sched/sch_atm.c | 1 -
net/sched/sch_cake.c | 4 +
net/sched/sch_cbq.c | 1 -
net/sched/sch_choke.c | 2 -
net/sched/sch_drr.c | 2 -
net/sched/sch_dsmark.c | 2 -
net/sched/sch_etf.c | 3 -
net/sched/sch_ets.c | 2 -
net/sched/sch_fq_codel.c | 2 -
net/sched/sch_fq_pie.c | 3 -
net/sched/sch_hfsc.c | 2 -
net/sched/sch_htb.c | 2 -
net/sched/sch_multiq.c | 1 -
net/sched/sch_prio.c | 2 -
net/sched/sch_qfq.c | 2 -
net/sched/sch_red.c | 2 -
net/sched/sch_sfb.c | 5 +-
net/sched/sch_skbprio.c | 3 -
net/sched/sch_taprio.c | 2 -
net/sched/sch_tbf.c | 2 -
net/sched/sch_teql.c | 1 -
net/tipc/discover.c | 2 +-
net/tipc/topsrv.c | 2 +-
scripts/link-vmlinux.sh | 2 +-
scripts/pahole-flags.sh | 21 +++++
security/selinux/ss/services.c | 5 +-
security/selinux/ss/sidtab.c | 4 +-
security/selinux/ss/sidtab.h | 2 +-
tools/perf/util/parse-events.c | 6 ++
tools/perf/util/pmu.c | 50 ++++++++++++
tools/perf/util/pmu.h | 5 ++
tools/perf/util/pmu.l | 2 -
tools/perf/util/pmu.y | 15 +---
virt/kvm/kvm_main.c | 11 +++
114 files changed, 889 insertions(+), 476 deletions(-)
^ permalink raw reply [relevance 4%]
* Re: possible deadlock in rfcomm_sk_state_change
2022-08-30 17:41 11% ` Luiz Augusto von Dentz
@ 2022-08-30 19:23 4% ` Luiz Augusto von Dentz
0 siblings, 0 replies; 200+ results
From: Luiz Augusto von Dentz @ 2022-08-30 19:23 UTC (permalink / raw)
To: Desmond Cheong Zhi Xi
Cc: Jiacheng Xu, linux-bluetooth, Jakub Kicinski,
open list:NETWORKING [GENERAL],
Eric Dumazet, Linux Kernel Mailing List, Marcel Holtmann,
Johan Hedberg, David Miller, Paolo Abeni
Hi Desmond,
On Tue, Aug 30, 2022 at 10:41 AM Luiz Augusto von Dentz
<luiz.dentz@gmail.com> wrote:
>
> Hi Desmond,
>
> On Mon, Aug 29, 2022 at 11:48 PM Desmond Cheong Zhi Xi
> <desmondcheongzx@gmail.com> wrote:
> >
> > +cc Bluetooth and Networking maintainers
> >
> > Hi Jiacheng,
> >
> > On 28/8/22 04:03, Jiacheng Xu wrote:
> > > Hi,
> > >
> > > I believe the deadlock is more than possible but actually real.
> > > I got a poc that could stably trigger the deadlock.
> > >
> > > poc: https://drive.google.com/file/d/1PjqvMtHsrrGM1MIRGKl_zJGR-teAMMQy/view?usp=sharing
> > >
> > > Description/Root cause:
> > > In rfcomm_sock_shutdown(), lock_sock() is called when releasing and
> > > shutting down socket.
> > > However, lock_sock() has to be called once more when the sk_state is
> > > changed because the
> > > lock is not always held when rfcomm_sk_state_change() is called. One
> > > such call stack is:
> > >
> > > rfcomm_sock_shutdown():
> > > lock_sock();
> > > __rfcomm_sock_close():
> > > rfcomm_dlc_close():
> > > __rfcomm_dlc_close():
> > > rfcomm_dlc_lock();
> > > rfcomm_sk_state_change():
> > > lock_sock();
> > >
> > > Besides the recursive deadlock, there is also an
> > > issue of a lock hierarchy inversion between rfcomm_dlc_lock() and
> > > lock_sock() if the socket is locked in rfcomm_sk_state_change().
> >
> >
> > Thanks for the poc and for following the trail all the way to the root
> > cause - this was a known issue and I didn't realize the patch wasn't
> > applied.
> >
> > > > Reference:
> > https://lore.kernel.org/all/20211004180734.434511-1-desmondcheongzx@gmail.com/
> > >
> >
> > Fwiw, I tested the patch again with syzbot. It still applies cleanly to
> > the head of bluetooth-next and seems to address the root cause.
> >
> > Any thoughts from the maintainers on this issue and the proposed fix?
>
> We probably need to introduce a test to rfcomm-tester to reproduce
> this sort of problem, I also would like to avoid introducing a work
> just to trigger a state change since we don't have such problem on the
> likes of L2CAP socket so perhaps we need to rework the code a little
> bit to avoid the locking problems.
It looks like for L2CAP we use lock_sock_nested on teardown, we don't
have the exact same behavior in RFCOMM but I think that might be worth
a try if we can use that instead of introducing yet another work item.
> > Best,
> > Desmond
>
>
>
> --
> Luiz Augusto von Dentz
--
Luiz Augusto von Dentz
^ permalink raw reply [relevance 4%]
* Re: possible deadlock in rfcomm_sk_state_change
2022-08-30 6:48 15% ` Desmond Cheong Zhi Xi
@ 2022-08-30 17:41 11% ` Luiz Augusto von Dentz
2022-08-30 19:23 4% ` Luiz Augusto von Dentz
0 siblings, 1 reply; 200+ results
From: Luiz Augusto von Dentz @ 2022-08-30 17:41 UTC (permalink / raw)
To: Desmond Cheong Zhi Xi
Cc: Jiacheng Xu, linux-bluetooth, Jakub Kicinski,
open list:NETWORKING [GENERAL],
Eric Dumazet, Linux Kernel Mailing List, Marcel Holtmann,
Johan Hedberg, David Miller, Paolo Abeni
Hi Desmond,
On Mon, Aug 29, 2022 at 11:48 PM Desmond Cheong Zhi Xi
<desmondcheongzx@gmail.com> wrote:
>
> +cc Bluetooth and Networking maintainers
>
> Hi Jiacheng,
>
> On 28/8/22 04:03, Jiacheng Xu wrote:
> > Hi,
> >
> > I believe the deadlock is more than possible but actually real.
> > I got a poc that could stably trigger the deadlock.
> >
> > poc: https://drive.google.com/file/d/1PjqvMtHsrrGM1MIRGKl_zJGR-teAMMQy/view?usp=sharing
> >
> > Description/Root cause:
> > In rfcomm_sock_shutdown(), lock_sock() is called when releasing and
> > shutting down socket.
> > However, lock_sock() has to be called once more when the sk_state is
> > changed because the
> > lock is not always held when rfcomm_sk_state_change() is called. One
> > such call stack is:
> >
> > rfcomm_sock_shutdown():
> > lock_sock();
> > __rfcomm_sock_close():
> > rfcomm_dlc_close():
> > __rfcomm_dlc_close():
> > rfcomm_dlc_lock();
> > rfcomm_sk_state_change():
> > lock_sock();
> >
> > Besides the recursive deadlock, there is also an
> > issue of a lock hierarchy inversion between rfcomm_dlc_lock() and
> > lock_sock() if the socket is locked in rfcomm_sk_state_change().
>
>
> Thanks for the poc and for following the trail all the way to the root
> cause - this was a known issue and I didn't realize the patch wasn't
> applied.
>
> > > Reference:
> https://lore.kernel.org/all/20211004180734.434511-1-desmondcheongzx@gmail.com/
> >
>
> Fwiw, I tested the patch again with syzbot. It still applies cleanly to
> the head of bluetooth-next and seems to address the root cause.
>
> Any thoughts from the maintainers on this issue and the proposed fix?
We probably need to introduce a test to rfcomm-tester to reproduce
this sort of problem, I also would like to avoid introducing a work
just to trigger a state change since we don't have such problem on the
likes of L2CAP socket so perhaps we need to rework the code a little
bit to avoid the locking problems.
> Best,
> Desmond
--
Luiz Augusto von Dentz
^ permalink raw reply [relevance 11%]
* Re: possible deadlock in rfcomm_sk_state_change
@ 2022-08-30 6:48 15% ` Desmond Cheong Zhi Xi
2022-08-30 17:41 11% ` Luiz Augusto von Dentz
0 siblings, 1 reply; 200+ results
From: Desmond Cheong Zhi Xi @ 2022-08-30 6:48 UTC (permalink / raw)
To: Jiacheng Xu
Cc: netdev, linux-bluetooth, Jakub Kicinski,
open list:NETWORKING [GENERAL],
Eric Dumazet, linux-kernel, marcel, johan.hedberg, David Miller,
luiz.dentz, Paolo Abeni
+cc Bluetooth and Networking maintainers
Hi Jiacheng,
On 28/8/22 04:03, Jiacheng Xu wrote:
> Hi,
>
> I believe the deadlock is more than possible but actually real.
> I got a poc that could stably trigger the deadlock.
>
> poc: https://drive.google.com/file/d/1PjqvMtHsrrGM1MIRGKl_zJGR-teAMMQy/view?usp=sharing
>
> Description/Root cause:
> In rfcomm_sock_shutdown(), lock_sock() is called when releasing and
> shutting down socket.
> However, lock_sock() has to be called once more when the sk_state is
> changed because the
> lock is not always held when rfcomm_sk_state_change() is called. One
> such call stack is:
>
> rfcomm_sock_shutdown():
> lock_sock();
> __rfcomm_sock_close():
> rfcomm_dlc_close():
> __rfcomm_dlc_close():
> rfcomm_dlc_lock();
> rfcomm_sk_state_change():
> lock_sock();
>
> Besides the recursive deadlock, there is also an
> issue of a lock hierarchy inversion between rfcomm_dlc_lock() and
> lock_sock() if the socket is locked in rfcomm_sk_state_change().
Thanks for the poc and for following the trail all the way to the root
cause - this was a known issue and I didn't realize the patch wasn't
applied.
> > Reference:
https://lore.kernel.org/all/20211004180734.434511-1-desmondcheongzx@gmail.com/
>
Fwiw, I tested the patch again with syzbot. It still applies cleanly to
the head of bluetooth-next and seems to address the root cause.
Any thoughts from the maintainers on this issue and the proposed fix?
Best,
Desmond
^ permalink raw reply [relevance 15%]
* Re: [syzbot] KASAN: use-after-free Write in sco_sock_timeout
@ 2022-02-23 16:15 5% ` syzbot
0 siblings, 0 replies; 200+ results
From: syzbot @ 2022-02-23 16:15 UTC (permalink / raw)
To: davem, desmondcheongzx, gregkh, hdanton, johan.hedberg, kuba,
linux-bluetooth, linux-kernel-mentees, linux-kernel, luiz.dentz,
luiz.von.dentz, marcel, netdev, skhan, syzkaller-bugs
syzbot has found a reproducer for the following issue on:
HEAD commit: 922ea87ff6f2 ionic: use vmalloc include
git tree: net-next
console output: https://syzkaller.appspot.com/x/log.txt?x=177984ea700000
kernel config: https://syzkaller.appspot.com/x/.config?x=d63ad23bb09039e8
dashboard link: https://syzkaller.appspot.com/bug?extid=2bef95d3ab4daa10155b
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=16678596700000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=152b93e8700000
The issue was bisected to:
commit e1dee2c1de2b4dd00eb44004a4bda6326ed07b59
Author: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Date: Tue Aug 10 04:14:10 2021 +0000
Bluetooth: fix repeated calls to sco_sock_kill
bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=15030c91300000
final oops: https://syzkaller.appspot.com/x/report.txt?x=17030c91300000
console output: https://syzkaller.appspot.com/x/log.txt?x=13030c91300000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+2bef95d3ab4daa10155b@syzkaller.appspotmail.com
Fixes: e1dee2c1de2b ("Bluetooth: fix repeated calls to sco_sock_kill")
==================================================================
BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
BUG: KASAN: use-after-free in atomic_fetch_add_relaxed include/linux/atomic/atomic-instrumented.h:116 [inline]
BUG: KASAN: use-after-free in __refcount_add include/linux/refcount.h:193 [inline]
BUG: KASAN: use-after-free in __refcount_inc include/linux/refcount.h:250 [inline]
BUG: KASAN: use-after-free in refcount_inc include/linux/refcount.h:267 [inline]
BUG: KASAN: use-after-free in sock_hold include/net/sock.h:726 [inline]
BUG: KASAN: use-after-free in sco_sock_timeout+0x64/0x290 net/bluetooth/sco.c:89
Write of size 4 at addr ffff88801e1f5080 by task kworker/0:0/6
CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 5.17.0-rc4-syzkaller-01424-g922ea87ff6f2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events sco_sock_timeout
Call Trace:
<TASK>
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
print_address_description.constprop.0.cold+0x8d/0x336 mm/kasan/report.c:255
__kasan_report mm/kasan/report.c:442 [inline]
kasan_report.cold+0x83/0xdf mm/kasan/report.c:459
check_region_inline mm/kasan/generic.c:183 [inline]
kasan_check_range+0x13d/0x180 mm/kasan/generic.c:189
instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
atomic_fetch_add_relaxed include/linux/atomic/atomic-instrumented.h:116 [inline]
__refcount_add include/linux/refcount.h:193 [inline]
__refcount_inc include/linux/refcount.h:250 [inline]
refcount_inc include/linux/refcount.h:267 [inline]
sock_hold include/net/sock.h:726 [inline]
sco_sock_timeout+0x64/0x290 net/bluetooth/sco.c:89
process_one_work+0x9ac/0x1650 kernel/workqueue.c:2307
worker_thread+0x657/0x1110 kernel/workqueue.c:2454
kthread+0x2e9/0x3a0 kernel/kthread.c:377
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
</TASK>
Allocated by task 3621:
kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38
kasan_set_track mm/kasan/common.c:45 [inline]
set_alloc_info mm/kasan/common.c:436 [inline]
____kasan_kmalloc mm/kasan/common.c:515 [inline]
____kasan_kmalloc mm/kasan/common.c:474 [inline]
__kasan_kmalloc+0xa9/0xd0 mm/kasan/common.c:524
kmalloc include/linux/slab.h:586 [inline]
sk_prot_alloc+0x110/0x290 net/core/sock.c:1936
sk_alloc+0x32/0xa80 net/core/sock.c:1989
sco_sock_alloc.constprop.0+0x31/0x330 net/bluetooth/sco.c:483
sco_sock_create+0xd5/0x1b0 net/bluetooth/sco.c:522
bt_sock_create+0x17c/0x340 net/bluetooth/af_bluetooth.c:130
__sock_create+0x353/0x790 net/socket.c:1468
sock_create net/socket.c:1519 [inline]
__sys_socket+0xef/0x200 net/socket.c:1561
__do_sys_socket net/socket.c:1570 [inline]
__se_sys_socket net/socket.c:1568 [inline]
__x64_sys_socket+0x6f/0xb0 net/socket.c:1568
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
Freed by task 3622:
kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38
kasan_set_track+0x21/0x30 mm/kasan/common.c:45
kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:370
____kasan_slab_free mm/kasan/common.c:366 [inline]
____kasan_slab_free+0x126/0x160 mm/kasan/common.c:328
kasan_slab_free include/linux/kasan.h:236 [inline]
slab_free_hook mm/slub.c:1728 [inline]
slab_free_freelist_hook+0x8b/0x1c0 mm/slub.c:1754
slab_free mm/slub.c:3509 [inline]
kfree+0xd0/0x390 mm/slub.c:4562
sk_prot_free net/core/sock.c:1972 [inline]
__sk_destruct+0x6c0/0x920 net/core/sock.c:2058
sk_destruct+0x131/0x180 net/core/sock.c:2076
__sk_free+0xef/0x3d0 net/core/sock.c:2087
sk_free+0x78/0xa0 net/core/sock.c:2098
sock_put include/net/sock.h:1926 [inline]
sco_sock_kill+0x18d/0x1b0 net/bluetooth/sco.c:403
sco_sock_release+0x155/0x2c0 net/bluetooth/sco.c:1259
__sock_release+0xcd/0x280 net/socket.c:650
sock_close+0x18/0x20 net/socket.c:1318
__fput+0x286/0x9f0 fs/file_table.c:317
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
get_signal+0x1de2/0x2490 kernel/signal.c:2631
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:868
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:207
__syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:300
do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
The buggy address belongs to the object at ffff88801e1f5000
which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 128 bytes inside of
2048-byte region [ffff88801e1f5000, ffff88801e1f5800)
The buggy address belongs to the page:
page:ffffea0000787c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e1f0
head:ffffea0000787c00 order:3 compound_mapcount:0 compound_pincount:0
flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888010c42000
raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3614, ts 122880165805, free_ts 122869063806
prep_new_page mm/page_alloc.c:2434 [inline]
get_page_from_freelist+0xa72/0x2f50 mm/page_alloc.c:4165
__alloc_pages+0x1b2/0x500 mm/page_alloc.c:5389
alloc_pages+0x1aa/0x310 mm/mempolicy.c:2271
alloc_slab_page mm/slub.c:1799 [inline]
allocate_slab+0x27f/0x3c0 mm/slub.c:1944
new_slab mm/slub.c:2004 [inline]
___slab_alloc+0xbe1/0x12b0 mm/slub.c:3018
__slab_alloc.constprop.0+0x4d/0xa0 mm/slub.c:3105
slab_alloc_node mm/slub.c:3196 [inline]
slab_alloc mm/slub.c:3238 [inline]
kmem_cache_alloc_trace+0x2f8/0x3d0 mm/slub.c:3255
kmalloc include/linux/slab.h:581 [inline]
kzalloc include/linux/slab.h:715 [inline]
ipv6_add_dev+0xfe/0x12a0 net/ipv6/addrconf.c:378
addrconf_notify+0x614/0x1ba0 net/ipv6/addrconf.c:3521
notifier_call_chain+0xb5/0x200 kernel/notifier.c:84
call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1939
call_netdevice_notifiers_extack net/core/dev.c:1951 [inline]
call_netdevice_notifiers net/core/dev.c:1965 [inline]
register_netdevice+0x1102/0x15a0 net/core/dev.c:9696
register_netdev+0x2d/0x50 net/core/dev.c:9789
ip6gre_init_net+0x3cd/0x630 net/ipv6/ip6_gre.c:1610
ops_init+0xaf/0x470 net/core/net_namespace.c:134
setup_net+0x5d1/0xc50 net/core/net_namespace.c:325
page last free stack trace:
reset_page_owner include/linux/page_owner.h:24 [inline]
free_pages_prepare mm/page_alloc.c:1352 [inline]
free_pcp_prepare+0x374/0x870 mm/page_alloc.c:1404
free_unref_page_prepare mm/page_alloc.c:3325 [inline]
free_unref_page+0x19/0x690 mm/page_alloc.c:3404
__unfreeze_partials+0x320/0x340 mm/slub.c:2536
qlink_free mm/kasan/quarantine.c:157 [inline]
qlist_free_all+0x6d/0x160 mm/kasan/quarantine.c:176
kasan_quarantine_reduce+0x180/0x200 mm/kasan/quarantine.c:283
__kasan_slab_alloc+0xa2/0xc0 mm/kasan/common.c:446
kasan_slab_alloc include/linux/kasan.h:260 [inline]
slab_post_alloc_hook mm/slab.h:732 [inline]
slab_alloc_node mm/slub.c:3230 [inline]
slab_alloc mm/slub.c:3238 [inline]
kmem_cache_alloc_trace+0x258/0x3d0 mm/slub.c:3255
kmalloc include/linux/slab.h:581 [inline]
kzalloc include/linux/slab.h:715 [inline]
ref_tracker_alloc+0x14c/0x550 lib/ref_tracker.c:85
__netdev_tracker_alloc include/linux/netdevice.h:3860 [inline]
dev_hold_track include/linux/netdevice.h:3889 [inline]
dev_hold_track include/linux/netdevice.h:3884 [inline]
netdev_queue_add_kobject net/core/net-sysfs.c:1650 [inline]
netdev_queue_update_kobjects+0x1a7/0x4e0 net/core/net-sysfs.c:1705
register_queue_kobjects net/core/net-sysfs.c:1766 [inline]
netdev_register_kobject+0x35a/0x430 net/core/net-sysfs.c:2012
register_netdevice+0xd9d/0x15a0 net/core/dev.c:9663
__ip_tunnel_create+0x398/0x5c0 net/ipv4/ip_tunnel.c:267
ip_tunnel_init_net+0x2e4/0x9d0 net/ipv4/ip_tunnel.c:1070
ops_init+0xaf/0x470 net/core/net_namespace.c:134
setup_net+0x5d1/0xc50 net/core/net_namespace.c:325
copy_net_ns+0x318/0x760 net/core/net_namespace.c:471
Memory state around the buggy address:
ffff88801e1f4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
ffff88801e1f5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88801e1f5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff88801e1f5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff88801e1f5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
^ permalink raw reply [relevance 5%]
* Linux 4.14.263
@ 2022-01-27 13:31 3% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2022-01-27 13:31 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 4.14.263 kernel.
All users of the 4.14 kernel series must upgrade.
The updated 4.14.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.14.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/hw-vuln/spectre.rst | 2
Makefile | 2
arch/arm64/boot/dts/nvidia/tegra186.dtsi | 2
arch/arm64/boot/dts/qcom/msm8916.dtsi | 4
arch/mips/bcm63xx/clk.c | 6
arch/mips/cavium-octeon/octeon-platform.c | 2
arch/mips/cavium-octeon/octeon-usb.c | 1
arch/mips/include/asm/octeon/cvmx-bootinfo.h | 4
arch/mips/lantiq/clk.c | 6
arch/mips/mm/gup.c | 9
arch/parisc/kernel/traps.c | 2
arch/powerpc/boot/dts/fsl/qoriq-fman3l-0.dtsi | 2
arch/powerpc/kernel/btext.c | 4
arch/powerpc/kernel/prom_init.c | 2
arch/powerpc/kernel/smp.c | 2
arch/powerpc/kernel/watchdog.c | 41 +
arch/powerpc/platforms/cell/iommu.c | 1
arch/powerpc/platforms/cell/pervasive.c | 1
arch/powerpc/platforms/embedded6xx/hlwd-pic.c | 1
arch/powerpc/platforms/powernv/opal-lpc.c | 1
arch/s390/mm/gup.c | 9
arch/sh/mm/gup.c | 9
arch/sparc/mm/gup.c | 9
arch/um/include/shared/registers.h | 4
arch/um/os-Linux/registers.c | 4
arch/um/os-Linux/start_up.c | 2
arch/x86/kernel/cpu/mcheck/mce-inject.c | 2
arch/x86/um/syscalls_64.c | 3
drivers/acpi/acpica/exoparg1.c | 3
drivers/acpi/acpica/hwesleep.c | 4
drivers/acpi/acpica/hwsleep.c | 4
drivers/acpi/acpica/hwxfsleep.c | 2
drivers/acpi/acpica/utdelete.c | 1
drivers/block/floppy.c | 6
drivers/bluetooth/bfusb.c | 3
drivers/char/mwave/3780i.h | 2
drivers/char/random.c | 61 +-
drivers/char/tpm/tpm_tis_core.c | 8
drivers/clk/bcm/clk-bcm2835.c | 13
drivers/crypto/qce/sha.c | 2
drivers/crypto/stm32/stm32_crc32.c | 4
drivers/dma/at_xdmac.c | 32 -
drivers/dma/mmp_pdma.c | 6
drivers/dma/pxa_dma.c | 7
drivers/firmware/google/Kconfig | 6
drivers/gpio/gpiolib-acpi.c | 15
drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 6
drivers/gpu/drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 40 +
drivers/gpu/drm/i915/intel_pm.c | 6
drivers/gpu/drm/nouveau/nouveau_sgdma.c | 9
drivers/gpu/drm/nouveau/nvkm/subdev/pmu/base.c | 37 -
drivers/gpu/drm/radeon/radeon_kms.c | 42 +
drivers/gpu/drm/ttm/ttm_tt.c | 2
drivers/hid/hid-apple.c | 2
drivers/hid/uhid.c | 29 +
drivers/hid/wacom_wac.c | 33 +
drivers/hsi/hsi_core.c | 1
drivers/i2c/busses/i2c-designware-pcidrv.c | 8
drivers/i2c/busses/i2c-i801.c | 15
drivers/i2c/busses/i2c-mpc.c | 23 -
drivers/infiniband/core/device.c | 3
drivers/infiniband/hw/cxgb4/qp.c | 1
drivers/infiniband/hw/hns/hns_roce_main.c | 5
drivers/infiniband/sw/rxe/rxe_opcode.c | 2
drivers/iommu/iova.c | 3
drivers/md/persistent-data/dm-btree.c | 8
drivers/md/persistent-data/dm-space-map-common.c | 5
drivers/media/common/saa7146/saa7146_fops.c | 2
drivers/media/dvb-core/dmxdev.c | 18
drivers/media/dvb-frontends/dib8000.c | 4
drivers/media/pci/b2c2/flexcop-pci.c | 3
drivers/media/pci/saa7146/hexium_gemini.c | 7
drivers/media/pci/saa7146/hexium_orion.c | 8
drivers/media/pci/saa7146/mxb.c | 8
drivers/media/platform/mtk-vcodec/mtk_vcodec_enc_drv.c | 2
drivers/media/rc/igorplugusb.c | 4
drivers/media/rc/mceusb.c | 8
drivers/media/rc/redrat3.c | 22
drivers/media/tuners/msi001.c | 7
drivers/media/tuners/si2157.c | 2
drivers/media/usb/b2c2/flexcop-usb.c | 10
drivers/media/usb/b2c2/flexcop-usb.h | 12
drivers/media/usb/cpia2/cpia2_usb.c | 4
drivers/media/usb/dvb-usb/dib0700_core.c | 2
drivers/media/usb/dvb-usb/dw2102.c | 338 +++++++++------
drivers/media/usb/dvb-usb/m920x.c | 12
drivers/media/usb/em28xx/em28xx-cards.c | 18
drivers/media/usb/em28xx/em28xx-core.c | 4
drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 8
drivers/media/usb/s2255/s2255drv.c | 4
drivers/media/usb/stk1160/stk1160-core.c | 4
drivers/media/usb/uvc/uvc_video.c | 4
drivers/media/usb/uvc/uvcvideo.h | 2
drivers/mfd/intel-lpss-acpi.c | 7
drivers/misc/lattice-ecp3-config.c | 12
drivers/mmc/core/sdio.c | 4
drivers/net/bonding/bond_main.c | 6
drivers/net/can/softing/softing_cs.c | 2
drivers/net/can/softing/softing_fw.c | 11
drivers/net/can/usb/gs_usb.c | 5
drivers/net/can/xilinx_can.c | 7
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 10
drivers/net/ethernet/chelsio/libcxgb/libcxgb_cm.c | 3
drivers/net/ethernet/freescale/fman/mac.c | 21
drivers/net/ethernet/freescale/gianfar.c | 38 -
drivers/net/ethernet/freescale/xgmac_mdio.c | 3
drivers/net/ethernet/i825xx/sni_82596.c | 3
drivers/net/ethernet/mellanox/mlxsw/pci.c | 1
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 14
drivers/net/phy/marvell.c | 6
drivers/net/phy/mdio_bus.c | 2
drivers/net/ppp/ppp_generic.c | 7
drivers/net/usb/mcs7830.c | 12
drivers/net/wireless/ath/ar5523/ar5523.c | 4
drivers/net/wireless/ath/ath10k/htt_tx.c | 3
drivers/net/wireless/ath/ath10k/txrx.c | 2
drivers/net/wireless/ath/ath9k/hif_usb.c | 7
drivers/net/wireless/ath/wcn36xx/smd.c | 4
drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 17
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 17
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2
drivers/net/wireless/marvell/mwifiex/usb.c | 3
drivers/net/wireless/realtek/rtlwifi/rtl8192cu/hw.c | 1
drivers/parisc/pdc_stable.c | 4
drivers/pci/quirks.c | 3
drivers/pcmcia/cs.c | 8
drivers/pcmcia/rsrc_nonstatic.c | 6
drivers/power/supply/bq25890_charger.c | 4
drivers/rtc/rtc-cmos.c | 3
drivers/scsi/sr.c | 2
drivers/scsi/sr_vendor.c | 4
drivers/scsi/ufs/tc-dwc-g210-pci.c | 1
drivers/scsi/ufs/ufshcd-pltfrm.c | 2
drivers/scsi/ufs/ufshcd.c | 7
drivers/spi/spi-meson-spifc.c | 1
drivers/staging/wlan-ng/hfa384x_usb.c | 22
drivers/tty/serial/amba-pl010.c | 3
drivers/tty/serial/amba-pl011.c | 27 -
drivers/tty/serial/atmel_serial.c | 14
drivers/tty/serial/serial_core.c | 7
drivers/usb/core/hcd.c | 9
drivers/usb/core/hub.c | 7
drivers/usb/gadget/function/f_fs.c | 4
drivers/usb/host/uhci-platform.c | 3
drivers/usb/misc/ftdi-elan.c | 1
drivers/w1/slaves/w1_ds28e04.c | 26 -
fs/btrfs/backref.c | 21
fs/dlm/lock.c | 9
fs/ext4/ioctl.c | 2
fs/ext4/mballoc.c | 8
fs/ext4/migrate.c | 23 -
fs/ext4/super.c | 12
fs/fuse/acl.c | 6
fs/fuse/dir.c | 40 +
fs/fuse/file.c | 27 -
fs/fuse/fuse_i.h | 13
fs/fuse/inode.c | 2
fs/fuse/xattr.c | 9
fs/jffs2/file.c | 40 +
fs/nfs/nfs4client.c | 82 +--
fs/orangefs/orangefs-bufmap.c | 7
fs/ubifs/super.c | 1
include/acpi/actypes.h | 10
include/net/sch_generic.h | 5
kernel/sched/cputime.c | 4
kernel/sched/rt.c | 23 -
mm/shmem.c | 37 -
net/bluetooth/cmtp/core.c | 4
net/bluetooth/hci_core.c | 1
net/bluetooth/hci_event.c | 8
net/bluetooth/sco.c | 34 +
net/bridge/br_netfilter_hooks.c | 7
net/core/filter.c | 6
net/core/net_namespace.c | 4
net/mac80211/rx.c | 2
net/nfc/llcp_sock.c | 5
net/sched/sch_generic.c | 1
net/unix/garbage.c | 14
net/unix/scm.c | 6
scripts/dtc/dtx_diff | 8
sound/core/jack.c | 3
sound/core/oss/pcm_oss.c | 2
sound/core/pcm.c | 6
sound/core/seq/seq_queue.c | 14
sound/pci/hda/hda_codec.c | 3
sound/soc/mediatek/mt8173/mt8173-max98090.c | 3
sound/soc/mediatek/mt8173/mt8173-rt5650-rt5514.c | 2
sound/soc/mediatek/mt8173/mt8173-rt5650-rt5676.c | 2
sound/soc/mediatek/mt8173/mt8173-rt5650.c | 2
sound/soc/samsung/idma.c | 2
190 files changed, 1346 insertions(+), 689 deletions(-)
Alan Stern (2):
USB: core: Fix bug in resuming hub's handling of wakeup requests
USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
Alexander Aring (1):
fs: dlm: filter user dlm messages for kernel locks
Amir Goldstein (1):
fuse: fix live lock in fuse_iget()
Anders Roxell (1):
powerpc/cell: Fix clang -Wimplicit-fallthrough warning
Andrey Ryabinin (1):
cputime, cpuacct: Include guest time in user time in cpuacct.stat
Andy Shevchenko (1):
mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
Andy Spencer (1):
gianfar: simplify FCS handling and fix memory leak
Anton Vasilyev (1):
media: dw2102: Fix use after free
Arnd Bergmann (1):
dmaengine: pxa/mmp: stop referencing config->slave_id
Avihai Horon (1):
RDMA/core: Let ib_find_gid() continue search even after empty entry
Bart Van Assche (1):
scsi: ufs: Fix race conditions related to driver data
Ben Hutchings (2):
firmware: Update Kconfig help text for Google firmware
mips,s390,sh,sparc: gup: Work around the "COW can break either way" issue
Ben Skeggs (1):
drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
Bixuan Cui (1):
ALSA: oss: fix compile error when OSS_DEBUG is enabled
Brian Silverman (1):
can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
Bryan O'Donoghue (1):
wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
Chen Jun (1):
tpm: add request_locality before write TPM_INT_ENABLE
Chengfeng Ye (2):
crypto: qce - fix uaf on qce_ahash_register_one
HSI: core: Fix return freed object in hsi_new_client
Chengguang Xu (1):
RDMA/rxe: Fix a typo in opcode name
Christian König (1):
drm/radeon: fix error handling in radeon_driver_open_kms
Christoph Hellwig (1):
scsi: sr: Don't use GFP_DMA
Christophe JAILLET (1):
orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
Christophe Leroy (1):
w1: Misuse of get_user()/put_user() reported by sparse
Dafna Hirschfeld (1):
media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
Danielle Ratson (1):
mlxsw: pci: Add shutdown method in PCI driver
Dave Airlie (1):
drm/ttm/nouveau: don't call tt destroy callback on alloc failure.
Desmond Cheong Zhi Xi (2):
Bluetooth: schedule SCO timeouts with delayed_work
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Dmitry Baryshkov (1):
arm64: dts: qcom: msm8916: fix MMC controller aliases
Dominik Brodowski (1):
pcmcia: fix setting of kthread task states
Dongliang Mu (1):
media: em28xx: fix memory leak in em28xx_init_dev
Eric Biggers (2):
random: fix data race on crng_node_pool
random: fix data race on crng init time
Eric Dumazet (3):
ppp: ensure minimum packet size in ppp_write()
af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
netns: add schedule point in ops_exit_list()
Florian Fainelli (1):
net: mdio: Demote probed message to debug print
Florian Westphal (1):
netfilter: bridge: add support for pppoe filtering
Gang Li (1):
shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
Greg Kroah-Hartman (1):
Linux 4.14.263
Guillaume Nault (1):
libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
Hans de Goede (1):
gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
Heiner Kallweit (1):
i2c: i801: Don't silently correct invalid transfer size
Ilan Peer (1):
iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
James Hilliard (1):
media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
Jan Kara (2):
ext4: avoid trim error on fs with small groups
ext4: make sure quota gets properly shutdown on error
Jann Horn (1):
HID: uhid: Fix worker destroying device without any protection
Jason Gerecke (2):
HID: wacom: Ignore the confidence flag when a touch is removed
HID: wacom: Avoid using stale array indicies to read contact count
Jiasheng Jiang (3):
fsl/fman: Check for null pointer after calling devm_ioremap
can: xilinx_can: xcan_probe(): check for error irq
ASoC: samsung: idma: Check of ioremap return value
Joakim Tjernlund (1):
i2c: mpc: Correct I2C reset procedure
Joe Thornber (2):
dm btree: add a defensive bounds check to insert_at()
dm space map common: add bounds check to sm_ll_lookup_bitmap()
Johan Hovold (11):
Bluetooth: bfusb: fix division by zero in send path
media: uvcvideo: fix division by zero at stream start
media: flexcop-usb: fix control-message timeouts
media: mceusb: fix control-message timeouts
media: em28xx: fix control-message timeouts
media: cpia2: fix control-message timeouts
media: s2255: fix control-message timeouts
media: redrat3: fix control-message timeouts
media: pvrusb2: fix control-message timeouts
media: stk1160: fix control-message timeouts
can: softing_cs: softingcs_probe(): fix memleak on registration failure
Johannes Berg (3):
iwlwifi: mvm: synchronize with FW after multicast commands
iwlwifi: fix leaks/bad data after failed firmware load
iwlwifi: remove module loading failure message
John David Anglin (1):
parisc: Avoid calling faulthandler_disabled() twice
Josef Bacik (2):
btrfs: remove BUG_ON() in find_parent_nodes()
btrfs: remove BUG_ON(!eie) in find_parent_nodes
José Expósito (1):
HID: apple: Do not reset quirks when the Fn key is not found
Julia Lawall (4):
powerpc/6xx: add missing of_node_put
powerpc/powernv: add missing of_node_put
powerpc/cell: add missing of_node_put
powerpc/btext: add missing of_node_put
Kai-Heng Feng (1):
usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
Kamal Heib (2):
RDMA/hns: Validate the pkey index
RDMA/cxgb4: Set queue pair state when being queried
Kees Cook (1):
char/mwave: Adjust io port register size
Kevin Bracey (1):
net_sched: restore "mpu xxx" handling
Kirill A. Shutemov (1):
ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
Krzysztof Kozlowski (1):
nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
Kyeong Yoo (1):
jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
Lakshmi Sowjanya D (1):
i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
Larry Finger (1):
rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled
Li Hua (1):
sched/rt: Try to restart rt period timer when rt runtime exceeded
Lino Sanfilippo (1):
serial: amba-pl011: do not request memory region twice
Lukas Bulwahn (1):
Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization
Lukas Wunner (3):
serial: pl010: Drop CR register reset on set_termios
serial: core: Keep mctrl register state and cached copy in sync
serial: Fix incorrect rs485 polarity on uart open
Luís Henriques (1):
ext4: set csum seed in tmp inode while migrating to extents
Marc Kleine-Budde (2):
can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data
can: softing: softing_startstop(): fix set but not used variable warning
Marek Vasut (1):
crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
Mark Langsdorf (1):
ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
Martyn Welch (1):
drm/bridge: megachips: Ensure both bridges are probed before registration
Mateusz Jończyk (1):
rtc: cmos: take rtc_lock while reading from CMOS
Matthias Schiffer (1):
scripts/dtc: dtx_diff: remove broken example from help text
Mauro Carvalho Chehab (1):
media: m920x: don't use stack on USB reads
Maxime Ripard (2):
clk: bcm-2835: Pick the closest clock rate
clk: bcm-2835: Remove rounding up the dividers
Miaoqian Lin (3):
spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
lib82596: Fix IRQ check in sni_82596_probe
Michael Braun (1):
gianfar: fix jumbo packets+napi+rx overrun crash
Michael Ellerman (1):
powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
Michael Kuron (1):
media: dib0700: fix undefined behavior in tuner shutdown
Miklos Szeredi (1):
fuse: fix bad inode
Nathan Chancellor (2):
staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn()
drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
Neal Liu (1):
usb: uhci: add aspeed ast2600 uhci support
Nicholas Piggin (1):
powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
Paolo Abeni (1):
bpf: Do not WARN in bpf_warn_invalid_xdp_action()
Pavankumar Kondeti (1):
usb: gadget: f_fs: Use stream_open() for endpoint files
Pavel Skripkin (2):
Bluetooth: stop proccessing malicious adv data
net: mcs7830: handle usb read errors properly
Peiwei Hu (1):
powerpc/prom_init: Fix improper check of prom_getprop()
Petr Cvachoucek (1):
ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
Ping-Ke Shih (1):
mac80211: allow non-standard VHT MCS-10/11
Rafael J. Wysocki (2):
ACPICA: Utilities: Avoid deleting the same object twice in a row
ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
Randy Dunlap (3):
mips: lantiq: add support for clk_set_parent()
mips: bcm63xx: add support for clk_set_parent()
um: registers: Rename function names to avoid conflicts and build problems
Robert Hancock (2):
net: axienet: Wait for PhyRstCmplt after core reset
net: axienet: fix number of TX ring slots for available check
Robert Schlabbach (1):
media: si2157: Fix "warm" tuner state detection
Russell King (Oracle) (1):
net: phy: marvell: configure RGMII delays for 88E1118
Sean Young (1):
media: igorplugusb: receiver overflow should be reported
Sebastian Gottschall (1):
ath10k: Fix tx hanging
Sergey Shtylyov (1):
bcmgenet: add WOL IRQ check
Suresh Kumar (1):
net: bonding: debug: avoid printing debug logs when bond is not notifying peers
Takashi Iwai (4):
ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
ALSA: seq: Set upper limit of processed events
Tasos Sahanidis (1):
floppy: Fix hang in watchdog when disk is ejected
Theodore Ts'o (1):
ext4: don't use the orphan list when migrating an inode
Thierry Reding (1):
arm64: tegra: Adjust length of CCPLEX cluster MMIO region
Tianjia Zhang (1):
MIPS: Octeon: Fix build errors using clang
Tobias Waldekranz (2):
powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
Trond Myklebust (1):
NFSv4: Initialise connection to the server in nfs4_alloc_client()
Tudor Ambarus (6):
tty: serial: atmel: Check return code of dmaengine_submit()
tty: serial: atmel: Call dma_async_issue_pending()
dmaengine: at_xdmac: Don't start transactions at tx_submit level
dmaengine: at_xdmac: Print debug message after realeasing the lock
dmaengine: at_xdmac: Fix lld view setting
dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
Tzung-Bi Shih (1):
ASoC: mediatek: mt8173: fix device_node leak
Ulf Hansson (1):
mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
Wang Hai (3):
Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
media: dmxdev: fix UAF when dvb_register_device() fails
media: msi001: fix possible null-ptr-deref in msi001_probe()
Wei Yongjun (3):
usb: ftdi-elan: fix memory leak on device disconnect
misc: lattice-ecp3-config: Fix task hung when firmware load failed
Bluetooth: Fix debugfs entry leak in hci_register_dev()
Xiongfeng Wang (1):
iommu/iova: Fix race between FQ timeout and teardown
Xiongwei Song (1):
floppy: Add max size check for user space request
Yauhen Kharuzhy (1):
power: bq25890: Enable continuous conversion for ADC at charging
Ye Bin (1):
ext4: Fix BUG_ON in ext4_bread when write quota data
Ye Guojin (1):
MIPS: OCTEON: add put_device() after of_find_device_by_node()
Yifeng Li (1):
PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
Yixing Liu (1):
RDMA/hns: Modify the mapping attribute of doorbell to device
Zekun Shen (3):
ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
Zhang Zixun (1):
x86/mce/inject: Avoid out-of-bounds write when setting flags
Zheyu Ma (1):
media: b2c2: Add missing check in flexcop_pci_isr:
Zhou Qingyang (8):
drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode()
drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms()
media: dib8000: Fix a memleak in dib8000_init()
media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region()
pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region()
media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach()
media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach()
^ permalink raw reply [relevance 3%]
* [PATCH 4.14 000/184] 4.14.263-rc2 review
@ 2022-01-25 16:31 4% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2022-01-25 16:31 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, sudipm.mukherjee,
stable
This is the start of the stable review cycle for the 4.14.263 release.
There are 184 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 27 Jan 2022 15:52:30 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.263-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 4.14.263-rc2
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Initialise connection to the server in nfs4_alloc_client()
Michael Braun <michael-dev@fami-braun.de>
gianfar: fix jumbo packets+napi+rx overrun crash
Andy Spencer <aspencer@spacex.com>
gianfar: simplify FCS handling and fix memory leak
Amir Goldstein <amir73il@gmail.com>
fuse: fix live lock in fuse_iget()
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix bad inode
Dave Airlie <airlied@redhat.com>
drm/ttm/nouveau: don't call tt destroy callback on alloc failure.
Ben Hutchings <ben@decadent.org.uk>
mips,s390,sh,sparc: gup: Work around the "COW can break either way" issue
Miaoqian Lin <linmq006@gmail.com>
lib82596: Fix IRQ check in sni_82596_probe
Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
scripts/dtc: dtx_diff: remove broken example from help text
Sergey Shtylyov <s.shtylyov@omp.ru>
bcmgenet: add WOL IRQ check
Kevin Bracey <kevin@bracey.fi>
net_sched: restore "mpu xxx" handling
Tudor Ambarus <tudor.ambarus@microchip.com>
dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
Tudor Ambarus <tudor.ambarus@microchip.com>
dmaengine: at_xdmac: Fix lld view setting
Tudor Ambarus <tudor.ambarus@microchip.com>
dmaengine: at_xdmac: Print debug message after realeasing the lock
Tudor Ambarus <tudor.ambarus@microchip.com>
dmaengine: at_xdmac: Don't start transactions at tx_submit level
Guillaume Nault <gnault@redhat.com>
libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
Eric Dumazet <edumazet@google.com>
netns: add schedule point in ops_exit_list()
Robert Hancock <robert.hancock@calian.com>
net: axienet: fix number of TX ring slots for available check
Robert Hancock <robert.hancock@calian.com>
net: axienet: Wait for PhyRstCmplt after core reset
Eric Dumazet <edumazet@google.com>
af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
Miaoqian Lin <linmq006@gmail.com>
parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
Tobias Waldekranz <tobias@waldekranz.com>
net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
Tobias Waldekranz <tobias@waldekranz.com>
powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
Anders Roxell <anders.roxell@linaro.org>
powerpc/cell: Fix clang -Wimplicit-fallthrough warning
Chengguang Xu <cgxu519@mykernel.net>
RDMA/rxe: Fix a typo in opcode name
Yixing Liu <liuyixing1@huawei.com>
RDMA/hns: Modify the mapping attribute of doorbell to device
Lukas Bulwahn <lukas.bulwahn@gmail.com>
Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization
Ben Hutchings <ben@decadent.org.uk>
firmware: Update Kconfig help text for Google firmware
Christian König <christian.koenig@amd.com>
drm/radeon: fix error handling in radeon_driver_open_kms
Marek Vasut <marex@denx.de>
crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
Theodore Ts'o <tytso@mit.edu>
ext4: don't use the orphan list when migrating an inode
Ye Bin <yebin10@huawei.com>
ext4: Fix BUG_ON in ext4_bread when write quota data
Luís Henriques <lhenriques@suse.de>
ext4: set csum seed in tmp inode while migrating to extents
Jan Kara <jack@suse.cz>
ext4: make sure quota gets properly shutdown on error
Ilan Peer <ilan.peer@intel.com>
iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
Andrey Ryabinin <arbn@yandex-team.com>
cputime, cpuacct: Include guest time in user time in cpuacct.stat
Lukas Wunner <lukas@wunner.de>
serial: Fix incorrect rs485 polarity on uart open
Petr Cvachoucek <cvachoucek@gmail.com>
ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
Yauhen Kharuzhy <jekhor@gmail.com>
power: bq25890: Enable continuous conversion for ADC at charging
Tzung-Bi Shih <tzungbi@google.com>
ASoC: mediatek: mt8173: fix device_node leak
Christoph Hellwig <hch@lst.de>
scsi: sr: Don't use GFP_DMA
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
MIPS: Octeon: Fix build errors using clang
Lakshmi Sowjanya D <lakshmi.sowjanya.d@intel.com>
i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
Ye Guojin <ye.guojin@zte.com.cn>
MIPS: OCTEON: add put_device() after of_find_device_by_node()
Takashi Iwai <tiwai@suse.de>
ALSA: seq: Set upper limit of processed events
Christophe Leroy <christophe.leroy@csgroup.eu>
w1: Misuse of get_user()/put_user() reported by sparse
Joakim Tjernlund <joakim.tjernlund@infinera.com>
i2c: mpc: Correct I2C reset procedure
Michael Ellerman <mpe@ellerman.id.au>
powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
Heiner Kallweit <hkallweit1@gmail.com>
i2c: i801: Don't silently correct invalid transfer size
Nicholas Piggin <npiggin@gmail.com>
powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
Julia Lawall <Julia.Lawall@lip6.fr>
powerpc/btext: add missing of_node_put
Julia Lawall <Julia.Lawall@lip6.fr>
powerpc/cell: add missing of_node_put
Julia Lawall <Julia.Lawall@lip6.fr>
powerpc/powernv: add missing of_node_put
Julia Lawall <Julia.Lawall@lip6.fr>
powerpc/6xx: add missing of_node_put
John David Anglin <dave.anglin@bell.net>
parisc: Avoid calling faulthandler_disabled() twice
Lukas Wunner <lukas@wunner.de>
serial: core: Keep mctrl register state and cached copy in sync
Lukas Wunner <lukas@wunner.de>
serial: pl010: Drop CR register reset on set_termios
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phy: marvell: configure RGMII delays for 88E1118
Joe Thornber <ejt@redhat.com>
dm space map common: add bounds check to sm_ll_lookup_bitmap()
Joe Thornber <ejt@redhat.com>
dm btree: add a defensive bounds check to insert_at()
Ping-Ke Shih <pkshih@realtek.com>
mac80211: allow non-standard VHT MCS-10/11
Florian Fainelli <f.fainelli@gmail.com>
net: mdio: Demote probed message to debug print
Josef Bacik <josef@toxicpanda.com>
btrfs: remove BUG_ON(!eie) in find_parent_nodes
Josef Bacik <josef@toxicpanda.com>
btrfs: remove BUG_ON() in find_parent_nodes()
Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Utilities: Avoid deleting the same object twice in a row
Mark Langsdorf <mlangsdo@redhat.com>
ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
Kyeong Yoo <kyeong.yoo@alliedtelesis.co.nz>
jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
Randy Dunlap <rdunlap@infradead.org>
um: registers: Rename function names to avoid conflicts and build problems
Johannes Berg <johannes.berg@intel.com>
iwlwifi: remove module loading failure message
Johannes Berg <johannes.berg@intel.com>
iwlwifi: fix leaks/bad data after failed firmware load
Zekun Shen <bruceshenzk@gmail.com>
ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
Kai-Heng Feng <kai.heng.feng@canonical.com>
usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
Thierry Reding <treding@nvidia.com>
arm64: tegra: Adjust length of CCPLEX cluster MMIO region
Ulf Hansson <ulf.hansson@linaro.org>
mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
Zhou Qingyang <zhou1615@umn.edu>
media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach()
Sean Young <sean@mess.org>
media: igorplugusb: receiver overflow should be reported
Paolo Abeni <pabeni@redhat.com>
bpf: Do not WARN in bpf_warn_invalid_xdp_action()
Suresh Kumar <surkumar@redhat.com>
net: bonding: debug: avoid printing debug logs when bond is not notifying peers
Sebastian Gottschall <s.gottschall@dd-wrt.com>
ath10k: Fix tx hanging
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: synchronize with FW after multicast commands
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: m920x: don't use stack on USB reads
Zhou Qingyang <zhou1615@umn.edu>
media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach()
James Hilliard <james.hilliard1@gmail.com>
media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
Xiongwei Song <sxwjean@gmail.com>
floppy: Add max size check for user space request
Neal Liu <neal_liu@aspeedtech.com>
usb: uhci: add aspeed ast2600 uhci support
Zekun Shen <bruceshenzk@gmail.com>
mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
Chengfeng Ye <cyeaa@connect.ust.hk>
HSI: core: Fix return freed object in hsi_new_client
Hans de Goede <hdegoede@redhat.com>
gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
Martyn Welch <martyn.welch@collabora.com>
drm/bridge: megachips: Ensure both bridges are probed before registration
Danielle Ratson <danieller@nvidia.com>
mlxsw: pci: Add shutdown method in PCI driver
Lukas Bulwahn <lukas.bulwahn@gmail.com>
ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART
Zheyu Ma <zheyuma97@gmail.com>
media: b2c2: Add missing check in flexcop_pci_isr:
José Expósito <jose.exposito89@gmail.com>
HID: apple: Do not reset quirks when the Fn key is not found
Pavankumar Kondeti <quic_pkondeti@quicinc.com>
usb: gadget: f_fs: Use stream_open() for endpoint files
Ben Skeggs <bskeggs@redhat.com>
drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
Zekun Shen <bruceshenzk@gmail.com>
ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
Alexander Aring <aahringo@redhat.com>
fs: dlm: filter user dlm messages for kernel locks
Wei Yongjun <weiyongjun1@huawei.com>
Bluetooth: Fix debugfs entry leak in hci_register_dev()
Kamal Heib <kamalheib1@gmail.com>
RDMA/cxgb4: Set queue pair state when being queried
Randy Dunlap <rdunlap@infradead.org>
mips: bcm63xx: add support for clk_set_parent()
Randy Dunlap <rdunlap@infradead.org>
mips: lantiq: add support for clk_set_parent()
Wei Yongjun <weiyongjun1@huawei.com>
misc: lattice-ecp3-config: Fix task hung when firmware load failed
Jiasheng Jiang <jiasheng@iscas.ac.cn>
ASoC: samsung: idma: Check of ioremap return value
Xiongfeng Wang <wangxiongfeng2@huawei.com>
iommu/iova: Fix race between FQ timeout and teardown
Arnd Bergmann <arnd@arndb.de>
dmaengine: pxa/mmp: stop referencing config->slave_id
Avihai Horon <avihaih@nvidia.com>
RDMA/core: Let ib_find_gid() continue search even after empty entry
Bart Van Assche <bvanassche@acm.org>
scsi: ufs: Fix race conditions related to driver data
Kees Cook <keescook@chromium.org>
char/mwave: Adjust io port register size
Bixuan Cui <cuibixuan@linux.alibaba.com>
ALSA: oss: fix compile error when OSS_DEBUG is enabled
Peiwei Hu <jlu.hpw@foxmail.com>
powerpc/prom_init: Fix improper check of prom_getprop()
Kamal Heib <kamalheib1@gmail.com>
RDMA/hns: Validate the pkey index
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
Takashi Iwai <tiwai@suse.de>
ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
Takashi Iwai <tiwai@suse.de>
ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
Jan Kara <jack@suse.cz>
ext4: avoid trim error on fs with small groups
Pavel Skripkin <paskripkin@gmail.com>
net: mcs7830: handle usb read errors properly
Dominik Brodowski <linux@dominikbrodowski.net>
pcmcia: fix setting of kthread task states
Jiasheng Jiang <jiasheng@iscas.ac.cn>
can: xilinx_can: xcan_probe(): check for error irq
Marc Kleine-Budde <mkl@pengutronix.de>
can: softing: softing_startstop(): fix set but not used variable warning
Chen Jun <chenjun102@huawei.com>
tpm: add request_locality before write TPM_INT_ENABLE
Miaoqian Lin <linmq006@gmail.com>
spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
Jiasheng Jiang <jiasheng@iscas.ac.cn>
fsl/fman: Check for null pointer after calling devm_ioremap
Eric Dumazet <edumazet@google.com>
ppp: ensure minimum packet size in ppp_write()
Zhou Qingyang <zhou1615@umn.edu>
pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region()
Zhou Qingyang <zhou1615@umn.edu>
pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region()
Zhang Zixun <zhang133010@icloud.com>
x86/mce/inject: Avoid out-of-bounds write when setting flags
Wei Yongjun <weiyongjun1@huawei.com>
usb: ftdi-elan: fix memory leak on device disconnect
Wang Hai <wanghai38@huawei.com>
media: msi001: fix possible null-ptr-deref in msi001_probe()
Anton Vasilyev <vasilyev@ispras.ru>
media: dw2102: Fix use after free
Li Hua <hucool.lihua@huawei.com>
sched/rt: Try to restart rt period timer when rt runtime exceeded
Robert Schlabbach <robert_s@gmx.net>
media: si2157: Fix "warm" tuner state detection
Zhou Qingyang <zhou1615@umn.edu>
media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
Zhou Qingyang <zhou1615@umn.edu>
media: dib8000: Fix a memleak in dib8000_init()
Tasos Sahanidis <tasos@tasossah.com>
floppy: Fix hang in watchdog when disk is ejected
Lino Sanfilippo <LinoSanfilippo@gmx.de>
serial: amba-pl011: do not request memory region twice
Zhou Qingyang <zhou1615@umn.edu>
drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms()
Zhou Qingyang <zhou1615@umn.edu>
drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode()
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
arm64: dts: qcom: msm8916: fix MMC controller aliases
Florian Westphal <fw@strlen.de>
netfilter: bridge: add support for pppoe filtering
Dafna Hirschfeld <dafna.hirschfeld@collabora.com>
media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
Tudor Ambarus <tudor.ambarus@microchip.com>
tty: serial: atmel: Call dma_async_issue_pending()
Tudor Ambarus <tudor.ambarus@microchip.com>
tty: serial: atmel: Check return code of dmaengine_submit()
Chengfeng Ye <cyeaa@connect.ust.hk>
crypto: qce - fix uaf on qce_ahash_register_one
Wang Hai <wanghai38@huawei.com>
media: dmxdev: fix UAF when dvb_register_device() fails
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: stop proccessing malicious adv data
Dongliang Mu <mudongliangabcd@gmail.com>
media: em28xx: fix memory leak in em28xx_init_dev
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
Maxime Ripard <maxime@cerno.tech>
clk: bcm-2835: Remove rounding up the dividers
Maxime Ripard <maxime@cerno.tech>
clk: bcm-2835: Pick the closest clock rate
Wang Hai <wanghai38@huawei.com>
Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
Yifeng Li <tomli@tomli.me>
PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
Gang Li <ligang.bdlg@bytedance.com>
shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
Johan Hovold <johan@kernel.org>
can: softing_cs: softingcs_probe(): fix memleak on registration failure
Johan Hovold <johan@kernel.org>
media: stk1160: fix control-message timeouts
Johan Hovold <johan@kernel.org>
media: pvrusb2: fix control-message timeouts
Johan Hovold <johan@kernel.org>
media: redrat3: fix control-message timeouts
Michael Kuron <michael.kuron@gmail.com>
media: dib0700: fix undefined behavior in tuner shutdown
Johan Hovold <johan@kernel.org>
media: s2255: fix control-message timeouts
Johan Hovold <johan@kernel.org>
media: cpia2: fix control-message timeouts
Johan Hovold <johan@kernel.org>
media: em28xx: fix control-message timeouts
Johan Hovold <johan@kernel.org>
media: mceusb: fix control-message timeouts
Johan Hovold <johan@kernel.org>
media: flexcop-usb: fix control-message timeouts
Mateusz Jończyk <mat.jonczyk@o2.pl>
rtc: cmos: take rtc_lock while reading from CMOS
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
Jason Gerecke <killertofu@gmail.com>
HID: wacom: Avoid using stale array indicies to read contact count
Jason Gerecke <killertofu@gmail.com>
HID: wacom: Ignore the confidence flag when a touch is removed
Jann Horn <jannh@google.com>
HID: uhid: Fix worker destroying device without any protection
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: schedule SCO timeouts with delayed_work
Larry Finger <Larry.Finger@lwfinger.net>
rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled
Johan Hovold <johan@kernel.org>
media: uvcvideo: fix division by zero at stream start
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
Nathan Chancellor <nathan@kernel.org>
drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
Nathan Chancellor <nathan@kernel.org>
staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn()
Eric Biggers <ebiggers@google.com>
random: fix data race on crng init time
Eric Biggers <ebiggers@google.com>
random: fix data race on crng_node_pool
Brian Silverman <brian.silverman@bluerivertech.com>
can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
Marc Kleine-Budde <mkl@pengutronix.de>
can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
Alan Stern <stern@rowland.harvard.edu>
USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
Alan Stern <stern@rowland.harvard.edu>
USB: core: Fix bug in resuming hub's handling of wakeup requests
Johan Hovold <johan@kernel.org>
Bluetooth: bfusb: fix division by zero in send path
-------------
Diffstat:
Documentation/admin-guide/hw-vuln/spectre.rst | 2 +-
Makefile | 4 +-
arch/arm/Kconfig.debug | 14 +-
arch/arm/include/debug/imx-uart.h | 18 +-
arch/arm64/boot/dts/nvidia/tegra186.dtsi | 2 +-
arch/arm64/boot/dts/qcom/msm8916.dtsi | 4 +-
arch/mips/bcm63xx/clk.c | 6 +
arch/mips/cavium-octeon/octeon-platform.c | 2 +
arch/mips/cavium-octeon/octeon-usb.c | 1 +
arch/mips/include/asm/octeon/cvmx-bootinfo.h | 4 +-
arch/mips/lantiq/clk.c | 6 +
arch/mips/mm/gup.c | 9 +-
arch/parisc/kernel/traps.c | 2 +-
arch/powerpc/boot/dts/fsl/qoriq-fman3l-0.dtsi | 2 +
arch/powerpc/kernel/btext.c | 4 +-
arch/powerpc/kernel/prom_init.c | 2 +-
arch/powerpc/kernel/smp.c | 2 +
arch/powerpc/kernel/watchdog.c | 41 ++-
arch/powerpc/platforms/cell/iommu.c | 1 +
arch/powerpc/platforms/cell/pervasive.c | 1 +
arch/powerpc/platforms/embedded6xx/hlwd-pic.c | 1 +
arch/powerpc/platforms/powernv/opal-lpc.c | 1 +
arch/s390/mm/gup.c | 9 +-
arch/sh/mm/gup.c | 9 +-
arch/sparc/mm/gup.c | 9 +-
arch/um/include/shared/registers.h | 4 +-
arch/um/os-Linux/registers.c | 4 +-
arch/um/os-Linux/start_up.c | 2 +-
arch/x86/kernel/cpu/mcheck/mce-inject.c | 2 +-
arch/x86/um/syscalls_64.c | 3 +-
drivers/acpi/acpica/exoparg1.c | 3 +-
drivers/acpi/acpica/hwesleep.c | 4 +-
drivers/acpi/acpica/hwsleep.c | 4 +-
drivers/acpi/acpica/hwxfsleep.c | 2 -
drivers/acpi/acpica/utdelete.c | 1 +
drivers/block/floppy.c | 6 +-
drivers/bluetooth/bfusb.c | 3 +
drivers/char/mwave/3780i.h | 2 +-
drivers/char/random.c | 61 ++--
drivers/char/tpm/tpm_tis_core.c | 8 +
drivers/clk/bcm/clk-bcm2835.c | 13 +-
drivers/crypto/qce/sha.c | 2 +-
drivers/crypto/stm32/stm32_crc32.c | 4 +-
drivers/dma/at_xdmac.c | 32 +-
drivers/dma/mmp_pdma.c | 6 -
drivers/dma/pxa_dma.c | 7 -
drivers/firmware/google/Kconfig | 6 +-
drivers/gpio/gpiolib-acpi.c | 15 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 6 +
.../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 40 ++-
drivers/gpu/drm/i915/intel_pm.c | 6 +-
drivers/gpu/drm/nouveau/nouveau_sgdma.c | 9 +-
drivers/gpu/drm/nouveau/nvkm/subdev/pmu/base.c | 37 ++-
drivers/gpu/drm/radeon/radeon_kms.c | 42 +--
drivers/gpu/drm/ttm/ttm_tt.c | 2 -
drivers/hid/hid-apple.c | 2 +-
drivers/hid/uhid.c | 29 +-
drivers/hid/wacom_wac.c | 33 +-
drivers/hsi/hsi_core.c | 1 +
drivers/i2c/busses/i2c-designware-pcidrv.c | 8 +-
drivers/i2c/busses/i2c-i801.c | 15 +-
drivers/i2c/busses/i2c-mpc.c | 23 +-
drivers/infiniband/core/device.c | 3 +-
drivers/infiniband/hw/cxgb4/qp.c | 1 +
drivers/infiniband/hw/hns/hns_roce_main.c | 5 +-
drivers/infiniband/sw/rxe/rxe_opcode.c | 2 +-
drivers/iommu/iova.c | 3 +-
drivers/md/persistent-data/dm-btree.c | 8 +-
drivers/md/persistent-data/dm-space-map-common.c | 5 +
drivers/media/common/saa7146/saa7146_fops.c | 2 +-
drivers/media/dvb-core/dmxdev.c | 18 +-
drivers/media/dvb-frontends/dib8000.c | 4 +-
drivers/media/pci/b2c2/flexcop-pci.c | 3 +
drivers/media/pci/saa7146/hexium_gemini.c | 7 +-
drivers/media/pci/saa7146/hexium_orion.c | 8 +-
drivers/media/pci/saa7146/mxb.c | 8 +-
.../media/platform/mtk-vcodec/mtk_vcodec_enc_drv.c | 2 +-
drivers/media/rc/igorplugusb.c | 4 +-
drivers/media/rc/mceusb.c | 8 +-
drivers/media/rc/redrat3.c | 22 +-
drivers/media/tuners/msi001.c | 7 +
drivers/media/tuners/si2157.c | 2 +-
drivers/media/usb/b2c2/flexcop-usb.c | 10 +-
drivers/media/usb/b2c2/flexcop-usb.h | 12 +-
drivers/media/usb/cpia2/cpia2_usb.c | 4 +-
drivers/media/usb/dvb-usb/dib0700_core.c | 2 -
drivers/media/usb/dvb-usb/dw2102.c | 338 +++++++++++++--------
drivers/media/usb/dvb-usb/m920x.c | 12 +-
drivers/media/usb/em28xx/em28xx-cards.c | 18 +-
drivers/media/usb/em28xx/em28xx-core.c | 4 +-
drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 8 +-
drivers/media/usb/s2255/s2255drv.c | 4 +-
drivers/media/usb/stk1160/stk1160-core.c | 4 +-
drivers/media/usb/uvc/uvc_video.c | 4 +
drivers/media/usb/uvc/uvcvideo.h | 2 +-
drivers/mfd/intel-lpss-acpi.c | 7 +-
drivers/misc/lattice-ecp3-config.c | 12 +-
drivers/mmc/core/sdio.c | 4 +-
drivers/net/bonding/bond_main.c | 6 +-
drivers/net/can/softing/softing_cs.c | 2 +-
drivers/net/can/softing/softing_fw.c | 11 +-
drivers/net/can/usb/gs_usb.c | 5 +-
drivers/net/can/xilinx_can.c | 7 +-
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 10 +-
drivers/net/ethernet/chelsio/libcxgb/libcxgb_cm.c | 3 +-
drivers/net/ethernet/freescale/fman/mac.c | 21 +-
drivers/net/ethernet/freescale/gianfar.c | 38 ++-
drivers/net/ethernet/freescale/xgmac_mdio.c | 3 +-
drivers/net/ethernet/i825xx/sni_82596.c | 3 +-
drivers/net/ethernet/mellanox/mlxsw/pci.c | 1 +
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 14 +-
drivers/net/phy/marvell.c | 6 +
drivers/net/phy/mdio_bus.c | 2 +-
drivers/net/ppp/ppp_generic.c | 7 +-
drivers/net/usb/mcs7830.c | 12 +-
drivers/net/wireless/ath/ar5523/ar5523.c | 4 +
drivers/net/wireless/ath/ath10k/htt_tx.c | 3 +
drivers/net/wireless/ath/ath10k/txrx.c | 2 -
drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +
drivers/net/wireless/ath/wcn36xx/smd.c | 4 +-
drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 17 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 17 ++
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2 +-
drivers/net/wireless/marvell/mwifiex/usb.c | 3 +-
.../net/wireless/realtek/rtlwifi/rtl8192cu/hw.c | 1 +
drivers/parisc/pdc_stable.c | 4 +-
drivers/pci/quirks.c | 3 +
drivers/pcmcia/cs.c | 8 +-
drivers/pcmcia/rsrc_nonstatic.c | 6 +
drivers/power/supply/bq25890_charger.c | 4 +-
drivers/rtc/rtc-cmos.c | 3 +
drivers/scsi/sr.c | 2 +-
drivers/scsi/sr_vendor.c | 4 +-
drivers/scsi/ufs/tc-dwc-g210-pci.c | 1 -
drivers/scsi/ufs/ufshcd-pltfrm.c | 2 -
drivers/scsi/ufs/ufshcd.c | 7 +
drivers/spi/spi-meson-spifc.c | 1 +
drivers/staging/wlan-ng/hfa384x_usb.c | 22 +-
drivers/tty/serial/amba-pl010.c | 3 -
drivers/tty/serial/amba-pl011.c | 27 +-
drivers/tty/serial/atmel_serial.c | 14 +
drivers/tty/serial/serial_core.c | 7 +-
drivers/usb/core/hcd.c | 9 +-
drivers/usb/core/hub.c | 7 +-
drivers/usb/gadget/function/f_fs.c | 4 +-
drivers/usb/host/uhci-platform.c | 3 +-
drivers/usb/misc/ftdi-elan.c | 1 +
drivers/w1/slaves/w1_ds28e04.c | 26 +-
fs/btrfs/backref.c | 21 +-
fs/dlm/lock.c | 9 +
fs/ext4/ioctl.c | 2 -
fs/ext4/mballoc.c | 8 +
fs/ext4/migrate.c | 23 +-
fs/ext4/super.c | 12 +-
fs/fuse/acl.c | 6 +
fs/fuse/dir.c | 40 ++-
fs/fuse/file.c | 27 +-
fs/fuse/fuse_i.h | 13 +
fs/fuse/inode.c | 2 +-
fs/fuse/xattr.c | 9 +
fs/jffs2/file.c | 40 ++-
fs/nfs/nfs4client.c | 82 ++---
fs/orangefs/orangefs-bufmap.c | 7 +-
fs/ubifs/super.c | 1 -
include/acpi/actypes.h | 10 +-
include/net/sch_generic.h | 5 +
kernel/sched/cputime.c | 4 +-
kernel/sched/rt.c | 23 +-
mm/shmem.c | 37 ++-
net/bluetooth/cmtp/core.c | 4 +-
net/bluetooth/hci_core.c | 1 +
net/bluetooth/hci_event.c | 8 +-
net/bluetooth/sco.c | 34 ++-
net/bridge/br_netfilter_hooks.c | 7 +-
net/core/filter.c | 6 +-
net/core/net_namespace.c | 4 +-
net/mac80211/rx.c | 2 +-
net/nfc/llcp_sock.c | 5 +
net/sched/sch_generic.c | 1 +
net/unix/garbage.c | 14 +-
net/unix/scm.c | 6 +-
scripts/dtc/dtx_diff | 8 +-
sound/core/jack.c | 3 +
sound/core/oss/pcm_oss.c | 2 +-
sound/core/pcm.c | 6 +-
sound/core/seq/seq_queue.c | 14 +-
sound/pci/hda/hda_codec.c | 3 +
sound/soc/mediatek/mt8173/mt8173-max98090.c | 3 +
sound/soc/mediatek/mt8173/mt8173-rt5650-rt5514.c | 2 +
sound/soc/mediatek/mt8173/mt8173-rt5650-rt5676.c | 2 +
sound/soc/mediatek/mt8173/mt8173-rt5650.c | 2 +
sound/soc/samsung/idma.c | 2 +
192 files changed, 1363 insertions(+), 706 deletions(-)
^ permalink raw reply [relevance 4%]
* [PATCH 4.14 014/186] Bluetooth: schedule SCO timeouts with delayed_work
2022-01-24 18:41 4% [PATCH 4.14 000/186] 4.14.263-rc1 review Greg Kroah-Hartman
@ 2022-01-24 18:41 10% ` Greg Kroah-Hartman
2022-01-24 18:41 12% ` [PATCH 4.14 015/186] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
1 sibling, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2022-01-24 18:41 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+2f6d7c28bb4bf7e82060,
Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Ovidiu Panait
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
commit ba316be1b6a00db7126ed9a39f9bee434a508043 upstream.
struct sock.sk_timer should be used as a sock cleanup timer. However,
SCO uses it to implement sock timeouts.
This causes issues because struct sock.sk_timer's callback is run in
an IRQ context, and the timer callback function sco_sock_timeout takes
a spin lock on the socket. However, other functions such as
sco_conn_del and sco_conn_ready take the spin lock with interrupts
enabled.
This inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} lock usage could
lead to deadlocks as reported by Syzbot [1]:
CPU0
----
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
<Interrupt>
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
To fix this, we use delayed work to implement SCO sock timouts
instead. This allows us to avoid taking the spin lock on the socket in
an IRQ context, and corrects the misuse of struct sock.sk_timer.
As a note, cancel_delayed_work is used instead of
cancel_delayed_work_sync in sco_sock_set_timer and
sco_sock_clear_timer to avoid a deadlock. In the future, the call to
bh_lock_sock inside sco_sock_timeout should be changed to lock_sock to
synchronize with other functions using lock_sock. However, since
sco_sock_set_timer and sco_sock_clear_timer are sometimes called under
the locked socket (in sco_connect and __sco_sock_close),
cancel_delayed_work_sync might cause them to sleep until an
sco_sock_timeout that has started finishes running. But
sco_sock_timeout would also sleep until it can grab the lock_sock.
Using cancel_delayed_work is fine because sco_sock_timeout does not
change from run to run, hence there is no functional difference
between:
1. waiting for a timeout to finish running before scheduling another
timeout
2. scheduling another timeout while a timeout is running.
Link: https://syzkaller.appspot.com/bug?id=9089d89de0502e120f234ca0fc8a703f7368b31e [1]
Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Tested-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
[OP: adjusted context for 4.14]
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
net/bluetooth/sco.c | 35 +++++++++++++++++++++++++++++------
1 file changed, 29 insertions(+), 6 deletions(-)
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -48,6 +48,8 @@ struct sco_conn {
spinlock_t lock;
struct sock *sk;
+ struct delayed_work timeout_work;
+
unsigned int mtu;
};
@@ -73,9 +75,20 @@ struct sco_pinfo {
#define SCO_CONN_TIMEOUT (HZ * 40)
#define SCO_DISCONN_TIMEOUT (HZ * 2)
-static void sco_sock_timeout(unsigned long arg)
+static void sco_sock_timeout(struct work_struct *work)
{
- struct sock *sk = (struct sock *)arg;
+ struct sco_conn *conn = container_of(work, struct sco_conn,
+ timeout_work.work);
+ struct sock *sk;
+
+ sco_conn_lock(conn);
+ sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
+ sco_conn_unlock(conn);
+
+ if (!sk)
+ return;
BT_DBG("sock %p state %d", sk, sk->sk_state);
@@ -89,14 +102,21 @@ static void sco_sock_timeout(unsigned lo
static void sco_sock_set_timer(struct sock *sk, long timeout)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d timeout %ld", sk, sk->sk_state, timeout);
- sk_reset_timer(sk, &sk->sk_timer, jiffies + timeout);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
+ schedule_delayed_work(&sco_pi(sk)->conn->timeout_work, timeout);
}
static void sco_sock_clear_timer(struct sock *sk)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d", sk, sk->sk_state);
- sk_stop_timer(sk, &sk->sk_timer);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
}
/* ---- SCO connections ---- */
@@ -176,6 +196,9 @@ static void sco_conn_del(struct hci_conn
sco_chan_del(sk, err);
bh_unlock_sock(sk);
sock_put(sk);
+
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
}
hcon->sco_data = NULL;
@@ -190,6 +213,8 @@ static void __sco_chan_add(struct sco_co
sco_pi(sk)->conn = conn;
conn->sk = sk;
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
+
if (parent)
bt_accept_enqueue(parent, sk, true);
}
@@ -466,8 +491,6 @@ static struct sock *sco_sock_alloc(struc
sco_pi(sk)->setting = BT_VOICE_CVSD_16BIT;
- setup_timer(&sk->sk_timer, sco_sock_timeout, (unsigned long)sk);
-
bt_sock_link(&sco_sk_list, sk);
return sk;
}
^ permalink raw reply [relevance 10%]
* [PATCH 4.14 000/186] 4.14.263-rc1 review
@ 2022-01-24 18:41 4% Greg Kroah-Hartman
2022-01-24 18:41 10% ` [PATCH 4.14 014/186] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
2022-01-24 18:41 12% ` [PATCH 4.14 015/186] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
0 siblings, 2 replies; 200+ results
From: Greg Kroah-Hartman @ 2022-01-24 18:41 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, sudipm.mukherjee,
stable
This is the start of the stable review cycle for the 4.14.263 release.
There are 186 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 26 Jan 2022 18:39:11 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.263-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 4.14.263-rc1
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Initialise connection to the server in nfs4_alloc_client()
Michael Braun <michael-dev@fami-braun.de>
gianfar: fix jumbo packets+napi+rx overrun crash
Andy Spencer <aspencer@spacex.com>
gianfar: simplify FCS handling and fix memory leak
Amir Goldstein <amir73il@gmail.com>
fuse: fix live lock in fuse_iget()
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix bad inode
Dave Airlie <airlied@redhat.com>
drm/ttm/nouveau: don't call tt destroy callback on alloc failure.
Ben Hutchings <ben@decadent.org.uk>
mips,s390,sh,sparc: gup: Work around the "COW can break either way" issue
Miaoqian Lin <linmq006@gmail.com>
lib82596: Fix IRQ check in sni_82596_probe
Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
scripts/dtc: dtx_diff: remove broken example from help text
Sergey Shtylyov <s.shtylyov@omp.ru>
bcmgenet: add WOL IRQ check
Kevin Bracey <kevin@bracey.fi>
net_sched: restore "mpu xxx" handling
Tudor Ambarus <tudor.ambarus@microchip.com>
dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
Tudor Ambarus <tudor.ambarus@microchip.com>
dmaengine: at_xdmac: Fix lld view setting
Tudor Ambarus <tudor.ambarus@microchip.com>
dmaengine: at_xdmac: Print debug message after realeasing the lock
Tudor Ambarus <tudor.ambarus@microchip.com>
dmaengine: at_xdmac: Don't start transactions at tx_submit level
Guillaume Nault <gnault@redhat.com>
libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
Eric Dumazet <edumazet@google.com>
netns: add schedule point in ops_exit_list()
Robert Hancock <robert.hancock@calian.com>
net: axienet: fix number of TX ring slots for available check
Robert Hancock <robert.hancock@calian.com>
net: axienet: Wait for PhyRstCmplt after core reset
Eric Dumazet <edumazet@google.com>
af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
Miaoqian Lin <linmq006@gmail.com>
parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
Tobias Waldekranz <tobias@waldekranz.com>
net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
Tobias Waldekranz <tobias@waldekranz.com>
powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
Anders Roxell <anders.roxell@linaro.org>
powerpc/cell: Fix clang -Wimplicit-fallthrough warning
Chengguang Xu <cgxu519@mykernel.net>
RDMA/rxe: Fix a typo in opcode name
Yixing Liu <liuyixing1@huawei.com>
RDMA/hns: Modify the mapping attribute of doorbell to device
Lukas Bulwahn <lukas.bulwahn@gmail.com>
Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization
Ben Hutchings <ben@decadent.org.uk>
firmware: Update Kconfig help text for Google firmware
Christian König <christian.koenig@amd.com>
drm/radeon: fix error handling in radeon_driver_open_kms
Marek Vasut <marex@denx.de>
crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
Theodore Ts'o <tytso@mit.edu>
ext4: don't use the orphan list when migrating an inode
Ye Bin <yebin10@huawei.com>
ext4: Fix BUG_ON in ext4_bread when write quota data
Luís Henriques <lhenriques@suse.de>
ext4: set csum seed in tmp inode while migrating to extents
Jan Kara <jack@suse.cz>
ext4: make sure quota gets properly shutdown on error
Lucas Stach <l.stach@pengutronix.de>
drm/etnaviv: limit submit sizes
Ilan Peer <ilan.peer@intel.com>
iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
Andrey Ryabinin <arbn@yandex-team.com>
cputime, cpuacct: Include guest time in user time in cpuacct.stat
Lukas Wunner <lukas@wunner.de>
serial: Fix incorrect rs485 polarity on uart open
Petr Cvachoucek <cvachoucek@gmail.com>
ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
Yauhen Kharuzhy <jekhor@gmail.com>
power: bq25890: Enable continuous conversion for ADC at charging
Tzung-Bi Shih <tzungbi@google.com>
ASoC: mediatek: mt8173: fix device_node leak
Christoph Hellwig <hch@lst.de>
scsi: sr: Don't use GFP_DMA
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
MIPS: Octeon: Fix build errors using clang
Lakshmi Sowjanya D <lakshmi.sowjanya.d@intel.com>
i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
Ye Guojin <ye.guojin@zte.com.cn>
MIPS: OCTEON: add put_device() after of_find_device_by_node()
Takashi Iwai <tiwai@suse.de>
ALSA: seq: Set upper limit of processed events
Christophe Leroy <christophe.leroy@csgroup.eu>
w1: Misuse of get_user()/put_user() reported by sparse
Joakim Tjernlund <joakim.tjernlund@infinera.com>
i2c: mpc: Correct I2C reset procedure
Michael Ellerman <mpe@ellerman.id.au>
powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
Heiner Kallweit <hkallweit1@gmail.com>
i2c: i801: Don't silently correct invalid transfer size
Nicholas Piggin <npiggin@gmail.com>
powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
Julia Lawall <Julia.Lawall@lip6.fr>
powerpc/btext: add missing of_node_put
Julia Lawall <Julia.Lawall@lip6.fr>
powerpc/cell: add missing of_node_put
Julia Lawall <Julia.Lawall@lip6.fr>
powerpc/powernv: add missing of_node_put
Julia Lawall <Julia.Lawall@lip6.fr>
powerpc/6xx: add missing of_node_put
John David Anglin <dave.anglin@bell.net>
parisc: Avoid calling faulthandler_disabled() twice
Lukas Wunner <lukas@wunner.de>
serial: core: Keep mctrl register state and cached copy in sync
Lukas Wunner <lukas@wunner.de>
serial: pl010: Drop CR register reset on set_termios
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phy: marvell: configure RGMII delays for 88E1118
Joe Thornber <ejt@redhat.com>
dm space map common: add bounds check to sm_ll_lookup_bitmap()
Joe Thornber <ejt@redhat.com>
dm btree: add a defensive bounds check to insert_at()
Ping-Ke Shih <pkshih@realtek.com>
mac80211: allow non-standard VHT MCS-10/11
Florian Fainelli <f.fainelli@gmail.com>
net: mdio: Demote probed message to debug print
Josef Bacik <josef@toxicpanda.com>
btrfs: remove BUG_ON(!eie) in find_parent_nodes
Josef Bacik <josef@toxicpanda.com>
btrfs: remove BUG_ON() in find_parent_nodes()
Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Utilities: Avoid deleting the same object twice in a row
Mark Langsdorf <mlangsdo@redhat.com>
ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
Kyeong Yoo <kyeong.yoo@alliedtelesis.co.nz>
jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
Randy Dunlap <rdunlap@infradead.org>
um: registers: Rename function names to avoid conflicts and build problems
Johannes Berg <johannes.berg@intel.com>
iwlwifi: remove module loading failure message
Johannes Berg <johannes.berg@intel.com>
iwlwifi: fix leaks/bad data after failed firmware load
Zekun Shen <bruceshenzk@gmail.com>
ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
Kai-Heng Feng <kai.heng.feng@canonical.com>
usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
Thierry Reding <treding@nvidia.com>
arm64: tegra: Adjust length of CCPLEX cluster MMIO region
Ulf Hansson <ulf.hansson@linaro.org>
mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
Zhou Qingyang <zhou1615@umn.edu>
media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach()
Sean Young <sean@mess.org>
media: igorplugusb: receiver overflow should be reported
Paolo Abeni <pabeni@redhat.com>
bpf: Do not WARN in bpf_warn_invalid_xdp_action()
Suresh Kumar <surkumar@redhat.com>
net: bonding: debug: avoid printing debug logs when bond is not notifying peers
Sebastian Gottschall <s.gottschall@dd-wrt.com>
ath10k: Fix tx hanging
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: synchronize with FW after multicast commands
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: m920x: don't use stack on USB reads
Zhou Qingyang <zhou1615@umn.edu>
media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach()
James Hilliard <james.hilliard1@gmail.com>
media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
Xiongwei Song <sxwjean@gmail.com>
floppy: Add max size check for user space request
Neal Liu <neal_liu@aspeedtech.com>
usb: uhci: add aspeed ast2600 uhci support
Zekun Shen <bruceshenzk@gmail.com>
mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
Chengfeng Ye <cyeaa@connect.ust.hk>
HSI: core: Fix return freed object in hsi_new_client
Hans de Goede <hdegoede@redhat.com>
gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
Martyn Welch <martyn.welch@collabora.com>
drm/bridge: megachips: Ensure both bridges are probed before registration
Danielle Ratson <danieller@nvidia.com>
mlxsw: pci: Add shutdown method in PCI driver
Lukas Bulwahn <lukas.bulwahn@gmail.com>
ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART
Zheyu Ma <zheyuma97@gmail.com>
media: b2c2: Add missing check in flexcop_pci_isr:
José Expósito <jose.exposito89@gmail.com>
HID: apple: Do not reset quirks when the Fn key is not found
Pavankumar Kondeti <quic_pkondeti@quicinc.com>
usb: gadget: f_fs: Use stream_open() for endpoint files
Ben Skeggs <bskeggs@redhat.com>
drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
Zekun Shen <bruceshenzk@gmail.com>
ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
Alexander Aring <aahringo@redhat.com>
fs: dlm: filter user dlm messages for kernel locks
Wei Yongjun <weiyongjun1@huawei.com>
Bluetooth: Fix debugfs entry leak in hci_register_dev()
Kamal Heib <kamalheib1@gmail.com>
RDMA/cxgb4: Set queue pair state when being queried
Randy Dunlap <rdunlap@infradead.org>
mips: bcm63xx: add support for clk_set_parent()
Randy Dunlap <rdunlap@infradead.org>
mips: lantiq: add support for clk_set_parent()
Wei Yongjun <weiyongjun1@huawei.com>
misc: lattice-ecp3-config: Fix task hung when firmware load failed
Jiasheng Jiang <jiasheng@iscas.ac.cn>
ASoC: samsung: idma: Check of ioremap return value
Xiongfeng Wang <wangxiongfeng2@huawei.com>
iommu/iova: Fix race between FQ timeout and teardown
Arnd Bergmann <arnd@arndb.de>
dmaengine: pxa/mmp: stop referencing config->slave_id
Avihai Horon <avihaih@nvidia.com>
RDMA/core: Let ib_find_gid() continue search even after empty entry
Bart Van Assche <bvanassche@acm.org>
scsi: ufs: Fix race conditions related to driver data
Jiasheng Jiang <jiasheng@iscas.ac.cn>
uio: uio_dmem_genirq: Catch the Exception
Kees Cook <keescook@chromium.org>
char/mwave: Adjust io port register size
Bixuan Cui <cuibixuan@linux.alibaba.com>
ALSA: oss: fix compile error when OSS_DEBUG is enabled
Peiwei Hu <jlu.hpw@foxmail.com>
powerpc/prom_init: Fix improper check of prom_getprop()
Kamal Heib <kamalheib1@gmail.com>
RDMA/hns: Validate the pkey index
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
Takashi Iwai <tiwai@suse.de>
ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
Takashi Iwai <tiwai@suse.de>
ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
Jan Kara <jack@suse.cz>
ext4: avoid trim error on fs with small groups
Pavel Skripkin <paskripkin@gmail.com>
net: mcs7830: handle usb read errors properly
Dominik Brodowski <linux@dominikbrodowski.net>
pcmcia: fix setting of kthread task states
Jiasheng Jiang <jiasheng@iscas.ac.cn>
can: xilinx_can: xcan_probe(): check for error irq
Marc Kleine-Budde <mkl@pengutronix.de>
can: softing: softing_startstop(): fix set but not used variable warning
Chen Jun <chenjun102@huawei.com>
tpm: add request_locality before write TPM_INT_ENABLE
Miaoqian Lin <linmq006@gmail.com>
spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
Jiasheng Jiang <jiasheng@iscas.ac.cn>
fsl/fman: Check for null pointer after calling devm_ioremap
Eric Dumazet <edumazet@google.com>
ppp: ensure minimum packet size in ppp_write()
Zhou Qingyang <zhou1615@umn.edu>
pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region()
Zhou Qingyang <zhou1615@umn.edu>
pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region()
Zhang Zixun <zhang133010@icloud.com>
x86/mce/inject: Avoid out-of-bounds write when setting flags
Wei Yongjun <weiyongjun1@huawei.com>
usb: ftdi-elan: fix memory leak on device disconnect
Wang Hai <wanghai38@huawei.com>
media: msi001: fix possible null-ptr-deref in msi001_probe()
Anton Vasilyev <vasilyev@ispras.ru>
media: dw2102: Fix use after free
Li Hua <hucool.lihua@huawei.com>
sched/rt: Try to restart rt period timer when rt runtime exceeded
Robert Schlabbach <robert_s@gmx.net>
media: si2157: Fix "warm" tuner state detection
Zhou Qingyang <zhou1615@umn.edu>
media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
Zhou Qingyang <zhou1615@umn.edu>
media: dib8000: Fix a memleak in dib8000_init()
Tasos Sahanidis <tasos@tasossah.com>
floppy: Fix hang in watchdog when disk is ejected
Lino Sanfilippo <LinoSanfilippo@gmx.de>
serial: amba-pl011: do not request memory region twice
Zhou Qingyang <zhou1615@umn.edu>
drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms()
Zhou Qingyang <zhou1615@umn.edu>
drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode()
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
arm64: dts: qcom: msm8916: fix MMC controller aliases
Florian Westphal <fw@strlen.de>
netfilter: bridge: add support for pppoe filtering
Dafna Hirschfeld <dafna.hirschfeld@collabora.com>
media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
Tudor Ambarus <tudor.ambarus@microchip.com>
tty: serial: atmel: Call dma_async_issue_pending()
Tudor Ambarus <tudor.ambarus@microchip.com>
tty: serial: atmel: Check return code of dmaengine_submit()
Chengfeng Ye <cyeaa@connect.ust.hk>
crypto: qce - fix uaf on qce_ahash_register_one
Wang Hai <wanghai38@huawei.com>
media: dmxdev: fix UAF when dvb_register_device() fails
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: stop proccessing malicious adv data
Dongliang Mu <mudongliangabcd@gmail.com>
media: em28xx: fix memory leak in em28xx_init_dev
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
Maxime Ripard <maxime@cerno.tech>
clk: bcm-2835: Remove rounding up the dividers
Maxime Ripard <maxime@cerno.tech>
clk: bcm-2835: Pick the closest clock rate
Wang Hai <wanghai38@huawei.com>
Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
Yifeng Li <tomli@tomli.me>
PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
Gang Li <ligang.bdlg@bytedance.com>
shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
Johan Hovold <johan@kernel.org>
can: softing_cs: softingcs_probe(): fix memleak on registration failure
Johan Hovold <johan@kernel.org>
media: stk1160: fix control-message timeouts
Johan Hovold <johan@kernel.org>
media: pvrusb2: fix control-message timeouts
Johan Hovold <johan@kernel.org>
media: redrat3: fix control-message timeouts
Michael Kuron <michael.kuron@gmail.com>
media: dib0700: fix undefined behavior in tuner shutdown
Johan Hovold <johan@kernel.org>
media: s2255: fix control-message timeouts
Johan Hovold <johan@kernel.org>
media: cpia2: fix control-message timeouts
Johan Hovold <johan@kernel.org>
media: em28xx: fix control-message timeouts
Johan Hovold <johan@kernel.org>
media: mceusb: fix control-message timeouts
Johan Hovold <johan@kernel.org>
media: flexcop-usb: fix control-message timeouts
Mateusz Jończyk <mat.jonczyk@o2.pl>
rtc: cmos: take rtc_lock while reading from CMOS
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
Jason Gerecke <killertofu@gmail.com>
HID: wacom: Avoid using stale array indicies to read contact count
Jason Gerecke <killertofu@gmail.com>
HID: wacom: Ignore the confidence flag when a touch is removed
Jann Horn <jannh@google.com>
HID: uhid: Fix worker destroying device without any protection
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: schedule SCO timeouts with delayed_work
Larry Finger <Larry.Finger@lwfinger.net>
rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled
Johan Hovold <johan@kernel.org>
media: uvcvideo: fix division by zero at stream start
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
Nathan Chancellor <nathan@kernel.org>
drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
Nathan Chancellor <nathan@kernel.org>
staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn()
Eric Biggers <ebiggers@google.com>
random: fix data race on crng init time
Eric Biggers <ebiggers@google.com>
random: fix data race on crng_node_pool
Brian Silverman <brian.silverman@bluerivertech.com>
can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
Marc Kleine-Budde <mkl@pengutronix.de>
can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
Alan Stern <stern@rowland.harvard.edu>
USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
Alan Stern <stern@rowland.harvard.edu>
USB: core: Fix bug in resuming hub's handling of wakeup requests
Johan Hovold <johan@kernel.org>
Bluetooth: bfusb: fix division by zero in send path
-------------
Diffstat:
Documentation/admin-guide/hw-vuln/spectre.rst | 2 +-
Makefile | 4 +-
arch/arm/Kconfig.debug | 14 +-
arch/arm/include/debug/imx-uart.h | 18 +-
arch/arm64/boot/dts/nvidia/tegra186.dtsi | 2 +-
arch/arm64/boot/dts/qcom/msm8916.dtsi | 4 +-
arch/mips/bcm63xx/clk.c | 6 +
arch/mips/cavium-octeon/octeon-platform.c | 2 +
arch/mips/cavium-octeon/octeon-usb.c | 1 +
arch/mips/include/asm/octeon/cvmx-bootinfo.h | 4 +-
arch/mips/lantiq/clk.c | 6 +
arch/mips/mm/gup.c | 9 +-
arch/parisc/kernel/traps.c | 2 +-
arch/powerpc/boot/dts/fsl/qoriq-fman3l-0.dtsi | 2 +
arch/powerpc/kernel/btext.c | 4 +-
arch/powerpc/kernel/prom_init.c | 2 +-
arch/powerpc/kernel/smp.c | 2 +
arch/powerpc/kernel/watchdog.c | 41 ++-
arch/powerpc/platforms/cell/iommu.c | 1 +
arch/powerpc/platforms/cell/pervasive.c | 1 +
arch/powerpc/platforms/embedded6xx/hlwd-pic.c | 1 +
arch/powerpc/platforms/powernv/opal-lpc.c | 1 +
arch/s390/mm/gup.c | 9 +-
arch/sh/mm/gup.c | 9 +-
arch/sparc/mm/gup.c | 9 +-
arch/um/include/shared/registers.h | 4 +-
arch/um/os-Linux/registers.c | 4 +-
arch/um/os-Linux/start_up.c | 2 +-
arch/x86/kernel/cpu/mcheck/mce-inject.c | 2 +-
arch/x86/um/syscalls_64.c | 3 +-
drivers/acpi/acpica/exoparg1.c | 3 +-
drivers/acpi/acpica/hwesleep.c | 4 +-
drivers/acpi/acpica/hwsleep.c | 4 +-
drivers/acpi/acpica/hwxfsleep.c | 2 -
drivers/acpi/acpica/utdelete.c | 1 +
drivers/block/floppy.c | 6 +-
drivers/bluetooth/bfusb.c | 3 +
drivers/char/mwave/3780i.h | 2 +-
drivers/char/random.c | 61 ++--
drivers/char/tpm/tpm_tis_core.c | 8 +
drivers/clk/bcm/clk-bcm2835.c | 13 +-
drivers/crypto/qce/sha.c | 2 +-
drivers/crypto/stm32/stm32_crc32.c | 4 +-
drivers/dma/at_xdmac.c | 32 +-
drivers/dma/mmp_pdma.c | 6 -
drivers/dma/pxa_dma.c | 7 -
drivers/firmware/google/Kconfig | 6 +-
drivers/gpio/gpiolib-acpi.c | 15 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 6 +
.../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 40 ++-
drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c | 6 +
drivers/gpu/drm/i915/intel_pm.c | 6 +-
drivers/gpu/drm/nouveau/nouveau_sgdma.c | 9 +-
drivers/gpu/drm/nouveau/nvkm/subdev/pmu/base.c | 37 ++-
drivers/gpu/drm/radeon/radeon_kms.c | 42 +--
drivers/gpu/drm/ttm/ttm_tt.c | 2 -
drivers/hid/hid-apple.c | 2 +-
drivers/hid/uhid.c | 29 +-
drivers/hid/wacom_wac.c | 33 +-
drivers/hsi/hsi_core.c | 1 +
drivers/i2c/busses/i2c-designware-pcidrv.c | 8 +-
drivers/i2c/busses/i2c-i801.c | 15 +-
drivers/i2c/busses/i2c-mpc.c | 23 +-
drivers/infiniband/core/device.c | 3 +-
drivers/infiniband/hw/cxgb4/qp.c | 1 +
drivers/infiniband/hw/hns/hns_roce_main.c | 5 +-
drivers/infiniband/sw/rxe/rxe_opcode.c | 2 +-
drivers/iommu/iova.c | 3 +-
drivers/md/persistent-data/dm-btree.c | 8 +-
drivers/md/persistent-data/dm-space-map-common.c | 5 +
drivers/media/common/saa7146/saa7146_fops.c | 2 +-
drivers/media/dvb-core/dmxdev.c | 18 +-
drivers/media/dvb-frontends/dib8000.c | 4 +-
drivers/media/pci/b2c2/flexcop-pci.c | 3 +
drivers/media/pci/saa7146/hexium_gemini.c | 7 +-
drivers/media/pci/saa7146/hexium_orion.c | 8 +-
drivers/media/pci/saa7146/mxb.c | 8 +-
.../media/platform/mtk-vcodec/mtk_vcodec_enc_drv.c | 2 +-
drivers/media/rc/igorplugusb.c | 4 +-
drivers/media/rc/mceusb.c | 8 +-
drivers/media/rc/redrat3.c | 22 +-
drivers/media/tuners/msi001.c | 7 +
drivers/media/tuners/si2157.c | 2 +-
drivers/media/usb/b2c2/flexcop-usb.c | 10 +-
drivers/media/usb/b2c2/flexcop-usb.h | 12 +-
drivers/media/usb/cpia2/cpia2_usb.c | 4 +-
drivers/media/usb/dvb-usb/dib0700_core.c | 2 -
drivers/media/usb/dvb-usb/dw2102.c | 338 +++++++++++++--------
drivers/media/usb/dvb-usb/m920x.c | 12 +-
drivers/media/usb/em28xx/em28xx-cards.c | 18 +-
drivers/media/usb/em28xx/em28xx-core.c | 4 +-
drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 8 +-
drivers/media/usb/s2255/s2255drv.c | 4 +-
drivers/media/usb/stk1160/stk1160-core.c | 4 +-
drivers/media/usb/uvc/uvc_video.c | 4 +
drivers/media/usb/uvc/uvcvideo.h | 2 +-
drivers/mfd/intel-lpss-acpi.c | 7 +-
drivers/misc/lattice-ecp3-config.c | 12 +-
drivers/mmc/core/sdio.c | 4 +-
drivers/net/bonding/bond_main.c | 6 +-
drivers/net/can/softing/softing_cs.c | 2 +-
drivers/net/can/softing/softing_fw.c | 11 +-
drivers/net/can/usb/gs_usb.c | 5 +-
drivers/net/can/xilinx_can.c | 7 +-
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 10 +-
drivers/net/ethernet/chelsio/libcxgb/libcxgb_cm.c | 3 +-
drivers/net/ethernet/freescale/fman/mac.c | 21 +-
drivers/net/ethernet/freescale/gianfar.c | 38 ++-
drivers/net/ethernet/freescale/xgmac_mdio.c | 3 +-
drivers/net/ethernet/i825xx/sni_82596.c | 3 +-
drivers/net/ethernet/mellanox/mlxsw/pci.c | 1 +
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 14 +-
drivers/net/phy/marvell.c | 6 +
drivers/net/phy/mdio_bus.c | 2 +-
drivers/net/ppp/ppp_generic.c | 7 +-
drivers/net/usb/mcs7830.c | 12 +-
drivers/net/wireless/ath/ar5523/ar5523.c | 4 +
drivers/net/wireless/ath/ath10k/htt_tx.c | 3 +
drivers/net/wireless/ath/ath10k/txrx.c | 2 -
drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +
drivers/net/wireless/ath/wcn36xx/smd.c | 4 +-
drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 17 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 17 ++
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2 +-
drivers/net/wireless/marvell/mwifiex/usb.c | 3 +-
.../net/wireless/realtek/rtlwifi/rtl8192cu/hw.c | 1 +
drivers/parisc/pdc_stable.c | 4 +-
drivers/pci/quirks.c | 3 +
drivers/pcmcia/cs.c | 8 +-
drivers/pcmcia/rsrc_nonstatic.c | 6 +
drivers/power/supply/bq25890_charger.c | 4 +-
drivers/rtc/rtc-cmos.c | 3 +
drivers/scsi/sr.c | 2 +-
drivers/scsi/sr_vendor.c | 4 +-
drivers/scsi/ufs/tc-dwc-g210-pci.c | 1 -
drivers/scsi/ufs/ufshcd-pltfrm.c | 2 -
drivers/scsi/ufs/ufshcd.c | 7 +
drivers/spi/spi-meson-spifc.c | 1 +
drivers/staging/wlan-ng/hfa384x_usb.c | 22 +-
drivers/tty/serial/amba-pl010.c | 3 -
drivers/tty/serial/amba-pl011.c | 27 +-
drivers/tty/serial/atmel_serial.c | 14 +
drivers/tty/serial/serial_core.c | 7 +-
drivers/uio/uio_dmem_genirq.c | 6 +-
drivers/usb/core/hcd.c | 9 +-
drivers/usb/core/hub.c | 7 +-
drivers/usb/gadget/function/f_fs.c | 4 +-
drivers/usb/host/uhci-platform.c | 3 +-
drivers/usb/misc/ftdi-elan.c | 1 +
drivers/w1/slaves/w1_ds28e04.c | 26 +-
fs/btrfs/backref.c | 21 +-
fs/dlm/lock.c | 9 +
fs/ext4/ioctl.c | 2 -
fs/ext4/mballoc.c | 8 +
fs/ext4/migrate.c | 23 +-
fs/ext4/super.c | 12 +-
fs/fuse/acl.c | 6 +
fs/fuse/dir.c | 40 ++-
fs/fuse/file.c | 27 +-
fs/fuse/fuse_i.h | 13 +
fs/fuse/inode.c | 2 +-
fs/fuse/xattr.c | 9 +
fs/jffs2/file.c | 40 ++-
fs/nfs/nfs4client.c | 82 ++---
fs/orangefs/orangefs-bufmap.c | 7 +-
fs/ubifs/super.c | 1 -
include/acpi/actypes.h | 10 +-
include/net/sch_generic.h | 5 +
kernel/sched/cputime.c | 4 +-
kernel/sched/rt.c | 23 +-
mm/shmem.c | 37 ++-
net/bluetooth/cmtp/core.c | 4 +-
net/bluetooth/hci_core.c | 1 +
net/bluetooth/hci_event.c | 8 +-
net/bluetooth/sco.c | 34 ++-
net/bridge/br_netfilter_hooks.c | 7 +-
net/core/filter.c | 6 +-
net/core/net_namespace.c | 4 +-
net/mac80211/rx.c | 2 +-
net/nfc/llcp_sock.c | 5 +
net/sched/sch_generic.c | 1 +
net/unix/garbage.c | 14 +-
net/unix/scm.c | 6 +-
scripts/dtc/dtx_diff | 8 +-
sound/core/jack.c | 3 +
sound/core/oss/pcm_oss.c | 2 +-
sound/core/pcm.c | 6 +-
sound/core/seq/seq_queue.c | 14 +-
sound/pci/hda/hda_codec.c | 3 +
sound/soc/mediatek/mt8173/mt8173-max98090.c | 3 +
sound/soc/mediatek/mt8173/mt8173-rt5650-rt5514.c | 2 +
sound/soc/mediatek/mt8173/mt8173-rt5650-rt5676.c | 2 +
sound/soc/mediatek/mt8173/mt8173-rt5650.c | 2 +
sound/soc/samsung/idma.c | 2 +
194 files changed, 1374 insertions(+), 707 deletions(-)
^ permalink raw reply [relevance 4%]
* [PATCH 4.14 015/186] Bluetooth: fix init and cleanup of sco_conn.timeout_work
2022-01-24 18:41 4% [PATCH 4.14 000/186] 4.14.263-rc1 review Greg Kroah-Hartman
2022-01-24 18:41 10% ` [PATCH 4.14 014/186] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
@ 2022-01-24 18:41 12% ` Greg Kroah-Hartman
1 sibling, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2022-01-24 18:41 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Ovidiu Panait
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
commit 49d8a5606428ca0962d09050a5af81461ff90fbb upstream.
Before freeing struct sco_conn, all delayed timeout work should be
cancelled. Otherwise, sco_sock_timeout could potentially use the
sco_conn after it has been freed.
Additionally, sco_conn.timeout_work should be initialized when the
connection is allocated, not when the channel is added. This is
because an sco_conn can create channels with multiple sockets over its
lifetime, which happens if sockets are released but the connection
isn't deleted.
Fixes: ba316be1b6a0 ("Bluetooth: schedule SCO timeouts with delayed_work")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
[OP: adjusted context for 4.14]
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
net/bluetooth/sco.c | 9 ++++-----
1 file changed, 4 insertions(+), 5 deletions(-)
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -133,6 +133,7 @@ static struct sco_conn *sco_conn_add(str
return NULL;
spin_lock_init(&conn->lock);
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
hcon->sco_data = conn;
conn->hcon = hcon;
@@ -196,11 +197,11 @@ static void sco_conn_del(struct hci_conn
sco_chan_del(sk, err);
bh_unlock_sock(sk);
sock_put(sk);
-
- /* Ensure no more work items will run before freeing conn. */
- cancel_delayed_work_sync(&conn->timeout_work);
}
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
+
hcon->sco_data = NULL;
kfree(conn);
}
@@ -213,8 +214,6 @@ static void __sco_chan_add(struct sco_co
sco_pi(sk)->conn = conn;
conn->sk = sk;
- INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
-
if (parent)
bt_accept_enqueue(parent, sk, true);
}
^ permalink raw reply [relevance 12%]
* [ANNOUNCE] 4.19.218-rt96
@ 2021-11-27 18:40 2% Clark Williams
0 siblings, 0 replies; 200+ results
From: Clark Williams @ 2021-11-27 18:40 UTC (permalink / raw)
To: LKML, linux-rt-users, Steven Rostedt, Thomas Gleixner,
Carsten Emde, John Kacur, Sebastian Andrzej Siewior,
Daniel Wagner, Tom Zanussi, Clark Williams, Pavel Machek
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 46315 bytes --]
Hello RT-list!
I'm pleased to announce the 4.19.218-rt96 stable release.
You can get this release via the git tree at:
git://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git
branch: v4.19-rt
Head SHA1: f1fb56ef141217e0b6f4f7e9860f1d594b8abe19
Or to build 4.19.218-rt96 directly, the following patches should be applied:
https://www.kernel.org/pub/linux/kernel/v4.x/linux-4.19.tar.xz
https://www.kernel.org/pub/linux/kernel/v4.x/patch-4.19.218.xz
https://www.kernel.org/pub/linux/kernel/projects/rt/4.19/patch-4.19.218-rt96.patch.xz
You can also build from 4.19.217-rt95 by applying the incremental patch:
https://www.kernel.org/pub/linux/kernel/projects/rt/4.19/incr/patch-4.19.217-rt95-rt96.patch.xz
Enjoy!
Clark
Changes from v4.19.217-rt95:
---
Ahmad Fatoum (1):
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Aleksander Jan Bajkowski (2):
MIPS: lantiq: dma: add small delay after reset
MIPS: lantiq: dma: reset correct number of channel
Alex Bee (1):
arm64: dts: rockchip: Fix GPU register width for RK3328
Alex Xu (Hello71) (1):
drm/plane-helper: fix uninitialized variable reference
Alexander Antonov (2):
perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
Alexander Mikhalitsyn (1):
ipc: WARN if trying to remove ipc object which is absent
Alexander Tsoy (1):
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Alok Prasad (1):
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Amit Kumar Mahapatra (1):
arm64: zynqmp: Do not duplicate flash partition label property
Anand Jain (1):
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Anant Thazhemadam (1):
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Anatolij Gustschin (1):
powerpc/5200: dts: fix memory node unit name
Anders Roxell (1):
PM: hibernate: fix sparse warnings
Andrea Righi (1):
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Andreas Kemnade (1):
arm: dts: omap3-gta04a4: accelerometer irq fix
André Almeida (1):
ACPI: battery: Accept charges over the design capacity as full
Andy Shevchenko (1):
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Anel Orazgaliyeva (1):
cpuidle: Fix kobject memory leaks in error paths
Anssi Hannula (1):
serial: xilinx_uartps: Fix race condition causing stuck TX
Arnaud Pouliquen (1):
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Arnd Bergmann (6):
hyperv/vmbus: include linux/bitops.h
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
drm/amdgpu: fix warning for overflow check
memstick: avoid out-of-range warning
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Austin Kim (2):
ALSA: synth: missing check for possible NULL after the call to kstrdup
evm: mark evm_fixmode as __ro_after_init
Baptiste Lepers (1):
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Barnabás Pőcze (1):
platform/x86: wmi: do not fail if disabling fails
Bart Van Assche (1):
MIPS: sni: Fix the build
Benjamin Li (2):
wcn36xx: handle connection loss indication
wcn36xx: add proper DMA memory barriers in rx path
Bryant Mairs (1):
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Chengfeng Ye (2):
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
ALSA: gus: fix null pointer dereference on pointer block
Christian Löhle (1):
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Christophe JAILLET (5):
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
mmc: mxs-mmc: disable regulator on error and in the remove function
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
Christophe Leroy (1):
video: fbdev: chipsfb: use memset_io() instead of memset()
Clark Williams (2):
Merge tag 'v4.19.218' into v4.19-rt
Linux 4.19.218-rt96
Claudiu Beznea (1):
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Colin Ian King (3):
media: cx23885: Fix snd_card_free call on null card pointer
media: em28xx: Don't use ops->suspend if it is NULL
MIPS: generic/yamon-dt: fix uninitialized variable error
Damien Le Moal (1):
libata: fix read log timeout value
Dan Carpenter (8):
tpm: Check for integer overflow in tpm2_map_response_body()
b43legacy: fix a lower bounds test
b43: fix a lower bounds test
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
drm/msm: uninitialized variable in msm_gem_import()
usb: gadget: hid: fix error code in do_config()
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
zram: off by one in read_block_state()
Daniel Jordan (1):
crypto: pcrypt - Delay write to padata->info
David Hildenbrand (1):
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
Desmond Cheong Zhi Xi (1):
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Dirk Bender (1):
media: mt9p031: Fix corrupted frame after restarting stream
Dmitry Bogdanov (1):
scsi: qla2xxx: Fix unmap of already freed sgl
Dmitry Osipenko (1):
soc/tegra: pmc: Fix imbalanced clock disabling in error code path
Dominique Martinet (1):
9p/net: fix missing error check in p9_check_errors
Dongli Zhang (2):
xen/netfront: stop tx queues during live migration
vmxnet3: do not stop tx queues after netif_device_detach()
Dongliang Mu (2):
JFS: fix memleak in jfs_mount
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Eiichi Tsukata (1):
vsock: prevent unnecessary refcnt inc for nonblocking connect
Eric Badger (1):
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Eric Dumazet (1):
llc: fix out-of-bound array index in llc_sk_dev_hash()
Eric W. Biederman (2):
signal: Remove the bogus sigkill_pending in ptrace_stop
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Erik Ekman (1):
sfc: Don't use netif_info before net_device setup
Eryk Rybak (2):
i40e: Fix correct max_pkt_size on VF RX queue
i40e: Fix changing previously set num_queue_pairs for PFs
Evgeny Novikov (2):
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Filipe Manana (1):
btrfs: fix lost error handling when replaying directory deletes
Florian Westphal (1):
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Gao Xiang (2):
erofs: fix unsafe pagevec reuse of hooked pclusters
f2fs: fix up f2fs_lookup tracepoints
Geert Uytterhoeven (4):
mips: cm: Convert to bitfield API to fix out-of-bounds access
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
auxdisplay: ht16k33: Connect backlight to fbdev
auxdisplay: ht16k33: Fix frame buffer device blanking
Giovanni Cabiddu (2):
crypto: qat - detect PFVF collision after ACK
crypto: qat - disregard spurious PFVF interrupts
Greg Kroah-Hartman (1):
Linux 4.19.218
Greg Thelen (1):
perf/core: Avoid put_page() when GUP fails
Grzegorz Szczurek (1):
i40e: Fix display error code in dmesg
Guanghui Feng (1):
tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
Guo Zhi (1):
scsi: advansys: Fix kernel pointer leak
Hans Verkuil (1):
drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
Hans de Goede (4):
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
Helge Deller (2):
parisc: Fix ptrace check on syscall return
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Henrik Grimler (1):
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Huang Guobin (1):
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Ingmar Klein (1):
PCI: Mark Atheros QCA6174 to avoid bus reset
Jackie Liu (3):
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
ar7: fix kernel builds for compiler test
Jaegeuk Kim (1):
f2fs: should use GFP_NOFS for directory inodes
Jakob Hauser (1):
power: supply: rt5033_battery: Change voltage values to µV
Jakub Kicinski (2):
net: sched: update default qdisc visibility after Tx queue cnt changes
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
James Smart (1):
scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
Jan Kara (2):
ocfs2: fix data corruption on truncate
udf: Fix crash after seekdir
Jane Malalane (1):
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Janis Schoetterl-Glausch (1):
KVM: s390: Fix handle_sske page fault handling
Jessica Zhang (1):
drm/msm: Fix potential NULL dereference in DPU SSPP
Jia-Ju Bai (1):
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Johan Hovold (12):
ALSA: ua101: fix division by zero at probe
ALSA: 6fire: fix control and bulk message timeouts
ALSA: line6: fix control and interrupt message timeouts
mwifiex: fix division by zero in fw download path
ath6kl: fix division by zero in send path
ath6kl: fix control-message timeout
ath10k: fix control-message timeout
ath10k: fix division by zero in send path
rtl8187: fix control-message timeouts
USB: iowarrior: fix control-message timeouts
USB: chipidea: fix interrupt deadlock
drm/udl: fix control-message timeout
Johannes Berg (1):
iwlwifi: mvm: disable RX-diversity in powersave
Jon Maxwell (1):
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Jonas Dreßler (4):
mwifiex: Read a PCI register after writing the TX ring write pointer
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
mwifiex: Properly initialize private structure on interface type changes
mwifiex: Send DELBA requests according to spec
Jonathan Davies (1):
net: virtio_net_hdr_to_skb: count transport header in UFO
Juergen Gross (1):
xen/balloon: add late_initcall_sync() for initial ballooning done
Junji Wei (1):
RDMA/rxe: Fix wrong port_cap_flags
Kalesh Singh (1):
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Kees Cook (4):
leaking_addresses: Always print a trailing newline
media: si470x: Avoid card name truncation
clocksource/drivers/timer-ti-dm: Select TIMER_OF
fortify: Explicitly disable Clang support
Krzysztof Kozlowski (2):
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Lars-Peter Clausen (1):
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Lasse Collin (2):
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
lib/xz: Validate the value before assigning it to an enum variable
Leon Romanovsky (2):
RDMA/mlx4: Return missed an error if device doesn't support steering
RDMA/netlink: Add __maybe_unused to static inline in C file
Li Zhang (1):
btrfs: clear MISSING device status bit in btrfs_close_one_device
Lin Ma (2):
NFC: reorganize the functions in nci_request
NFC: reorder the logic in nfc_{un,}register_device
Linus Lüssing (2):
ath9k: Fix potential interrupt storm on queue reset
batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
Linus Walleij (1):
net: dsa: rtl8366rb: Fix off-by-one bug
Loic Poulain (1):
wcn36xx: Fix HT40 capability for 2Ghz band
Lorenz Bauer (1):
bpf: Prevent increasing bpf_jit_limit above max
Lu Wei (1):
maple: fix wrong return value of maple_bus_init().
Luis Chamberlain (1):
firmware_loader: fix pre-allocated buf built-in firmware use
Marc Zyngier (2):
PCI/MSI: Deal with devices lying about their MSI mask capability
PCI: Add MSI masking quirk for Nvidia ION AHCI
Marek Behún (3):
PCI: aardvark: Fix return value of MSI domain .alloc() method
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
PCI: aardvark: Don't spam about PIO Response Status
Marek Vasut (2):
rsi: Fix module dev_oper_mode parameter description
video: backlight: Drop maximum brightness override for brightness zero
Mark Rutland (1):
irq: mips: avoid nested irq_enter()
Markus Schneider-Pargmann (1):
hwrng: mtk - Force runtime pm ops for sleep ops
Martin Fuzzey (3):
rsi: fix occasional initialisation failure with BT coex
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
rsi: fix rate mask set leading to P2P failure
Masami Hiramatsu (2):
ia64: kprobes: Fix to pass correct trampoline address to the handler
ARM: clang: Do not rely on lr register for stacktrace
Mathias Nyman (1):
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
Max Gurtovoy (1):
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Maxim Kiselev (1):
net: davinci_emac: Fix interrupt pacing disable
Menglong Dong (1):
workqueue: make sysfs of unbound kworker cpumask more clever
Miaohe Lin (1):
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Michael Ellerman (1):
powerpc/dcr: Use cmplwi instead of 3-argument cmpli
Michael Walle (2):
arm64: dts: hisilicon: fix arm,sp805 compatible string
arm64: dts: freescale: fix arm,sp805 compatible string
Michal Hocko (1):
mm, oom: do not trigger out_of_memory from the #PF
Michal Maloszewski (1):
i40e: Fix NULL ptr dereference on VSI filter sync
Michal Simek (1):
arm64: zynqmp: Fix serial compatible string
Michał Mirosław (1):
ARM: 9155/1: fix early early_iounmap()
Mike Christie (2):
scsi: target: Fix ordered tag handling
scsi: target: Fix alua_tg_pt_gps_count tracking
Miklos Szeredi (1):
fuse: truncate pagecache on atomic_o_trunc
Nadezda Lutovinova (2):
media: s5p-mfc: Add checking to s5p_mfc_probe().
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Nathan Chancellor (2):
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
hexagon: export raw I/O routines for modules
Naveen N. Rao (5):
powerpc/lib: Add helper to check if offset is within conditional branch range
powerpc/bpf: Validate branch ranges
powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
powerpc/security: Add a helper to query stf_barrier type
powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
Nguyen Dinh Phi (1):
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
Nicholas Nunley (1):
iavf: check for null in iavf_fix_features
Nick Desaulniers (1):
sh: check return code of request_irq
Nicolas Dichtel (1):
tun: fix bonding active backup with arp monitoring
Nikolay Borisov (1):
btrfs: fix memory ordering between normal and ordered work functions
Pali Rohár (4):
serial: core: Fix initializing and restoring termios speed
PCI: aardvark: Do not clear status bits of masked interrupts
PCI: aardvark: Do not unmask unused interrupts
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Pavel Skripkin (4):
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
media: em28xx: add missing em28xx_close_extension
media: dvb-usb: fix ununit-value in az6027_rc_query
net: bnx2x: fix variable dereferenced before check
Pawan Gupta (1):
smackfs: Fix use-after-free in netlbl_catmap_walk()
Pekka Korpinen (1):
iio: dac: ad5446: Fix ad5622_write() return value
Peter Rosin (1):
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Peter Ujfalusi (1):
backlight: gpio-backlight: Correct initial power state handling
Peter Zijlstra (2):
locking/lockdep: Avoid RCU-induced noinstr fail
x86: Increase exception stack sizes
Phoenix Huang (1):
Input: elantench - fix misreporting trackpoint coordinates
Quinn Tran (2):
scsi: qla2xxx: Fix gnl list corruption
scsi: qla2xxx: Turn off target reset during issue_lip
Rafael J. Wysocki (1):
ACPICA: Avoid evaluating methods too early during system resume
Rahul Lakkireddy (1):
cxgb4: fix eeprom len when diagnostics not implemented
Rajat Asthana (1):
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Randy Dunlap (9):
mmc: winbond: don't build on M68K
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
m68k: set a default value for MEMORY_RESERVE
ALSA: ISA: not for M68K
sh: fix kconfig unmet dependency warning for FRAME_POINTER
sh: define __BIG_ENDIAN for math-emu
mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
mips: bcm63xx: add support for clk_get_parent()
mips: lantiq: add support for clk_get_parent()
Reimar Döffinger (1):
libata: fix checking of DMA state
Ricardo Ribalda (2):
media: uvcvideo: Set capability in s_param
media: uvcvideo: Return -EIO for control errors
Richard Fitzgerald (2):
ASoC: cs42l42: Correct some register default values
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Roger Quadros (1):
ARM: dts: omap: fix gpmc,mux-add-data type
Russell King (Oracle) (1):
net: phylink: avoid mvneta warning when setting pause parameters
Rustam Kovhaev (1):
mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
Sean Christopherson (2):
x86/irq: Ensure PI wakeup handler is unregistered before module unload
x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
Sean Young (2):
media: ite-cir: IR receiver stop working after receive overflow
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Selvin Xavier (1):
RDMA/bnxt_re: Fix query SRQ failure
Shaoying Xu (1):
ext4: fix lazy initialization next schedule time computation in more granular unit
Shyam Sundar S K (1):
net: amd-xgbe: Toggle PLL settings during rate change
Stefan Agner (1):
phy: micrel: ksz8041nl: do not use power down mode
Stephen Suryaputra (1):
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Steven Rostedt (VMware) (1):
tracefs: Have tracefs directories not set OTH permission bits by default
Sukadev Bhattiprolu (1):
ibmvnic: Process crqs after enabling interrupts
Surabhi Boob (1):
iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
Sven Eckelmann (4):
ath10k: fix max antenna gain unit
batman-adv: Consider fragmentation for needed_headroom
batman-adv: Reserve needed_*room for fragments
batman-adv: Don't always reallocate the fragmentation skb head
Sven Peter (1):
usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
Sven Schnelle (6):
parisc: fix warning in flush_tlb_all
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
s390/tape: fix timer initialization in tape_std_assign()
parisc/entry: fix trace test in syscall exit path
parisc/sticon: fix reverse colors
Takashi Iwai (6):
Input: i8042 - Add quirk for Fujitsu Lifebook T725
ALSA: timer: Unconditionally unlink slave instances, too
ALSA: mixer: oss: Fix racy access to slots
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
ALSA: hda: Reduce udelay() at SKL+ position reporting
ASoC: DAPM: Cover regression by kctl change notification fix
Tang Bin (1):
crypto: s5p-sss - Add error handling in s5p_aes_probe()
Tetsuo Handa (2):
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Thomas Gleixner (1):
PCI/MSI: Destroy sysfs before freeing entries
Thomas Perrot (1):
spi: spl022: fix Microwire full duplex mode
Tiezhu Yang (1):
samples/kretprobes: Fix return value if register_kretprobe() failed
Tim Crawford (1):
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Todd Kjos (2):
binder: use euid from cred instead of using task
binder: use cred instead of task for selinux checks
Tom Lendacky (1):
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Tom Rix (1):
apparmor: fix error check
Tong Zhang (1):
scsi: dc395: Fix error case unwinding
Tony Lindgren (1):
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Trond Myklebust (1):
NFS: Fix deadlocks in nfs_scan_commit_list()
Tuo Li (2):
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Uwe Kleine-König (1):
usb: max-3421: Use driver data instead of maintaining a list of bound devices
Vasily Averin (1):
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Vincent Donnefort (1):
sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
Vineeth Vijayan (1):
s390/cio: check the subchannel validity for dev_busid
Vitaly Kuznetsov (1):
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Vladimir Zapolskiy (1):
phy: qcom-qusb2: Fix a memory leak on probe
Waiman Long (1):
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Walter Stoll (1):
watchdog: Fix OMAP watchdog early handling
Wang Hai (3):
USB: serial: keyspan: fix memleak on probe errors
libertas_tf: Fix possible memory leak in probe and disconnect
libertas: Fix possible memory leak in probe and disconnect
Wang ShaoBo (1):
Bluetooth: fix use-after-free error in lock_sock_nested()
Wang Wensheng (1):
ALSA: timer: Fix use-after-free problem
Xiaoming Ni (1):
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Yang Yingliang (5):
pinctrl: core: fix possible memory leak in pinctrl_enable()
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
hwmon: Fix possible memleak in __hwmon_device_register()
usb: musb: tusb6010: check return value after calling platform_get_resource()
usb: host: ohci-tmio: check return value after calling platform_get_resource()
Ye Bin (1):
PM: hibernate: Get block device exclusively in swsusp_check()
Yue Hu (1):
erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
YueHaibing (1):
xen-pciback: Fix return in pm_ctrl_init()
Zev Weiss (2):
hwmon: (pmbus/lm25066) Add offset coefficients
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Zhang Yi (2):
quota: check block number when reading the block in quota file
quota: correct error number in free_dqentry()
Zheyu Ma (5):
cavium: Return negative value when pci_alloc_irq_vectors() fails
cavium: Fix return values of the probe function
media: netup_unidvb: handle interrupt properly according to the firmware
memstick: r592: Fix a UAF bug when removing the driver
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ziyang Xuan (1):
rsi: stop thread firstly in rsi_91x_init() error handling
hongao (1):
drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors
jing yangyang (1):
firmware/psci: fix application of sizeof to pointer
---
Documentation/admin-guide/kernel-parameters.txt | 7 ++
.../bindings/regulator/samsung,s5m8767.txt | 23 +++---
Makefile | 2 +-
arch/arm/Makefile | 22 ++---
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/omap-gpmc-smsc9221.dtsi | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/omap3-overo-tobiduo-common.dtsi | 2 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/freescale/fsl-ls1088a.dtsi | 16 ++--
arch/arm64/boot/dts/freescale/fsl-ls208xa.dtsi | 16 ++--
arch/arm64/boot/dts/hisilicon/hi3660.dtsi | 4 +-
arch/arm64/boot/dts/hisilicon/hi6220.dtsi | 2 +-
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
.../boot/dts/xilinx/zynqmp-zc1751-xm016-dc2.dts | 4 +-
arch/arm64/boot/dts/xilinx/zynqmp.dtsi | 4 +-
arch/arm64/include/asm/pgtable.h | 12 ++-
arch/hexagon/lib/io.c | 4 +
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/kernel/kprobes.c | 9 ++-
arch/m68k/Kconfig.machine | 1 +
arch/mips/Kconfig | 4 +
arch/mips/bcm63xx/clk.c | 6 ++
arch/mips/generic/yamon-dt.c | 2 +-
arch/mips/include/asm/mips-cm.h | 12 +--
arch/mips/kernel/mips-cm.c | 21 +++--
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 ---
arch/mips/lantiq/clk.c | 6 ++
arch/mips/lantiq/xway/dma.c | 14 ++--
arch/mips/sni/time.c | 4 +-
arch/parisc/kernel/entry.S | 4 +-
arch/parisc/kernel/smp.c | 19 ++++-
arch/parisc/kernel/unwind.c | 21 +++--
arch/parisc/mm/init.c | 4 +-
arch/powerpc/boot/dts/charon.dts | 2 +-
arch/powerpc/boot/dts/digsy_mtc.dts | 2 +-
arch/powerpc/boot/dts/lite5200.dts | 2 +-
arch/powerpc/boot/dts/lite5200b.dts | 2 +-
arch/powerpc/boot/dts/media5200.dts | 2 +-
arch/powerpc/boot/dts/mpc5200b.dtsi | 2 +-
arch/powerpc/boot/dts/o2d.dts | 2 +-
arch/powerpc/boot/dts/o2d.dtsi | 2 +-
arch/powerpc/boot/dts/o2dnt2.dts | 2 +-
arch/powerpc/boot/dts/o3dnt.dts | 2 +-
arch/powerpc/boot/dts/pcm032.dts | 2 +-
arch/powerpc/boot/dts/tqm5200.dts | 2 +-
arch/powerpc/include/asm/code-patching.h | 1 +
arch/powerpc/include/asm/security_features.h | 5 ++
arch/powerpc/kernel/security.c | 5 ++
arch/powerpc/lib/code-patching.c | 7 +-
arch/powerpc/net/bpf_jit.h | 33 +++++---
arch/powerpc/net/bpf_jit64.h | 8 +-
arch/powerpc/net/bpf_jit_comp64.c | 93 ++++++++++++++++++----
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 3 +-
arch/powerpc/sysdev/dcr-low.S | 2 +-
arch/s390/kvm/priv.c | 2 +
arch/s390/mm/gmap.c | 5 +-
arch/sh/Kconfig.debug | 1 +
arch/sh/include/asm/sfp-machine.h | 8 ++
arch/sh/kernel/cpu/sh4a/smp-shx3.c | 5 +-
arch/x86/events/intel/uncore_snbep.c | 4 +
arch/x86/hyperv/hv_init.c | 8 +-
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 ++++++++--
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/irq.c | 4 +-
arch/x86/mm/mem_encrypt_identity.c | 9 +++
crypto/pcrypt.c | 12 ++-
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +--
drivers/acpi/acpica/hwxfsleep.c | 7 ++
drivers/acpi/battery.c | 2 +-
drivers/acpi/pmic/intel_pmic.c | 51 ++++++------
drivers/android/binder.c | 20 +++--
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 ++
drivers/auxdisplay/ht16k33.c | 66 ++++++++-------
drivers/auxdisplay/img-ascii-lcd.c | 10 +++
drivers/base/firmware_loader/main.c | 13 +--
drivers/block/zram/zram_drv.c | 2 +-
drivers/char/hw_random/mtk-rng.c | 9 ++-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/clocksource/Kconfig | 1 +
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 +++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 ++
drivers/crypto/s5p-sss.c | 2 +
drivers/dma/at_xdmac.c | 2 +-
drivers/dma/dmaengine.h | 2 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci_checker.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 1 +
drivers/gpu/drm/drm_panel_orientation_quirks.c | 13 +++
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/msm_gem.c | 4 +-
.../gpu/drm/nouveau/nvkm/engine/disp/hdmigv100.c | 1 -
drivers/gpu/drm/udl/udl_connector.c | 2 +-
drivers/hv/hyperv_vmbus.h | 1 +
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +++++-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/dac/ad5446.c | 9 ++-
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 ++--
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/mouse/elantech.c | 13 +++
drivers/input/serio/i8042-x86ia64io.h | 14 ++++
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-s3c24xx.c | 22 ++++-
drivers/media/dvb-frontends/mn88443x.c | 18 ++++-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++++++-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++++---
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 ++
drivers/memory/fsl_ifc.c | 13 ++-
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mmc/host/Kconfig | 2 +-
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/mxs-mmc.c | 10 +++
drivers/mmc/host/sdhci-omap.c | 3 +-
drivers/mtd/spi-nor/hisi-sfc.c | 1 -
drivers/net/bonding/bond_sysfs_slave.c | 36 +++------
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 ++
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 ++++-
.../net/ethernet/broadcom/bnx2x/bnx2x_init_ops.h | 4 +-
drivers/net/ethernet/cavium/thunder/nic_main.c | 2 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
drivers/net/ethernet/ibm/ibmvnic.c | 3 +
drivers/net/ethernet/intel/i40e/i40e.h | 1 +
drivers/net/ethernet/intel/i40e/i40e_main.c | 45 +++++++----
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 53 +++---------
drivers/net/ethernet/intel/i40evf/i40evf_main.c | 5 +-
drivers/net/ethernet/sfc/ptp.c | 4 +-
drivers/net/ethernet/sfc/siena_sriov.c | 2 +-
drivers/net/ethernet/ti/davinci_emac.c | 16 +++-
drivers/net/phy/micrel.c | 5 +-
drivers/net/phy/phylink.c | 2 +-
drivers/net/tun.c | 5 ++
drivers/net/vmxnet3/vmxnet3_drv.c | 1 -
drivers/net/wireless/ath/ath10k/mac.c | 6 +-
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 ++-
drivers/net/wireless/ath/wcn36xx/dxe.c | 12 ++-
drivers/net/wireless/ath/wcn36xx/main.c | 4 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 44 +++++++---
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +++-----
drivers/net/wireless/marvell/mwifiex/pcie.c | 8 ++
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 ++--
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 ++-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 +++++------------
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +++-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 ++++--
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +++
drivers/net/wireless/rsi/rsi_main.h | 15 +++-
drivers/net/xen-netfront.c | 8 ++
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvme/host/rdma.c | 2 +
drivers/pci/controller/pci-aardvark.c | 23 +++---
drivers/pci/msi.c | 27 ++++---
drivers/pci/quirks.c | 7 ++
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 ++--
drivers/pinctrl/core.c | 2 +
drivers/platform/x86/hp_accel.c | 2 +
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 ++-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17042_battery.c | 8 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 +++--
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/scsi/advansys.c | 4 +-
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/lpfc/lpfc_sli.c | 1 +
drivers/scsi/qla2xxx/qla_gbl.h | 2 -
drivers/scsi/qla2xxx/qla_init.c | 4 +-
drivers/scsi/qla2xxx/qla_mr.c | 23 ------
drivers/scsi/qla2xxx/qla_os.c | 27 +------
drivers/scsi/qla2xxx/qla_target.c | 14 ++--
drivers/sh/maple/maple.c | 5 +-
drivers/soc/tegra/pmc.c | 4 +-
drivers/spi/spi-bcm-qspi.c | 5 +-
drivers/spi/spi-pl022.c | 5 +-
drivers/staging/erofs/unzip_pagevec.h | 14 ++--
drivers/staging/erofs/unzip_vle.c | 19 +++--
drivers/target/target_core_alua.c | 1 -
drivers/target/target_core_device.c | 2 +
drivers/target/target_core_internal.h | 1 +
drivers/target/target_core_transport.c | 76 +++++++++++++-----
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/serial_core.c | 16 +++-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/tty/tty_buffer.c | 3 +
drivers/usb/chipidea/core.c | 19 +++--
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/max3421-hcd.c | 25 ++----
drivers/usb/host/ohci-tmio.c | 2 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/tusb6010.c | 5 ++
drivers/usb/serial/keyspan.c | 15 ++--
drivers/usb/typec/tps6598x.c | 2 +-
drivers/video/backlight/backlight.c | 6 --
drivers/video/backlight/gpio_backlight.c | 24 +++++-
drivers/video/console/sticon.c | 12 +--
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/watchdog/omap_wdt.c | 6 +-
drivers/xen/balloon.c | 86 ++++++++++++++------
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/async-thread.c | 14 ++++
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 4 +-
fs/ext4/super.c | 9 +--
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/fuse/file.c | 7 +-
fs/jfs/jfs_mount.c | 51 +++++-------
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/pnfs_nfs.c | 4 +-
fs/nfs/write.c | 17 +---
fs/ocfs2/file.c | 8 +-
fs/orangefs/dcache.c | 4 +-
fs/quota/quota_tree.c | 15 ++++
fs/tracefs/inode.c | 3 +-
fs/udf/dir.c | 32 +++++++-
fs/udf/namei.c | 3 +
fs/udf/super.c | 2 +
include/linux/console.h | 2 +
include/linux/filter.h | 1 +
include/linux/libata.h | 2 +-
include/linux/lsm_hooks.h | 28 +++----
include/linux/pci.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched/task_stack.h | 4 +
include/linux/security.h | 28 +++----
include/linux/virtio_net.h | 7 +-
include/net/llc.h | 4 +-
include/net/sch_generic.h | 4 +
include/rdma/rdma_netlink.h | 2 +-
include/target/target_core_base.h | 6 +-
include/trace/events/f2fs.h | 12 +--
include/uapi/linux/pci_regs.h | 6 ++
ipc/util.c | 6 +-
kernel/bpf/core.c | 4 +-
kernel/cgroup/cgroup.c | 31 +++++++-
kernel/events/core.c | 10 +--
kernel/locking/lockdep.c | 2 +-
kernel/power/swap.c | 7 +-
kernel/sched/core.c | 3 +
kernel/signal.c | 18 +----
kernel/trace/tracing_map.c | 40 ++++++----
kernel/workqueue.c | 15 +++-
lib/decompress_unxz.c | 2 +-
lib/xz/xz_dec_lzma2.c | 21 ++++-
lib/xz/xz_dec_stream.c | 6 +-
localversion-rt | 2 +-
mm/oom_kill.c | 23 +++---
mm/slab.h | 2 +-
mm/zsmalloc.c | 7 +-
net/9p/client.c | 2 +
net/batman-adv/fragmentation.c | 26 +++---
net/batman-adv/hard-interface.c | 3 +
net/batman-adv/multicast.c | 31 ++++++++
net/batman-adv/multicast.h | 15 ++++
net/batman-adv/soft-interface.c | 5 +-
net/bluetooth/l2cap_sock.c | 10 ++-
net/bluetooth/sco.c | 33 +++++---
net/core/dev.c | 2 +
net/core/stream.c | 3 -
net/core/sysctl_net_core.c | 2 +-
net/ipv4/tcp.c | 2 +-
net/ipv6/addrconf.c | 3 +
net/netfilter/nfnetlink_queue.c | 2 +-
net/nfc/core.c | 32 ++++----
net/nfc/nci/core.c | 11 ++-
net/sched/sch_generic.c | 9 +++
net/sched/sch_mq.c | 24 ++++++
net/sched/sch_mqprio.c | 23 ++++++
net/vmw_vsock/af_vsock.c | 2 +
net/wireless/util.c | 1 +
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/Kconfig | 3 +
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/security.c | 14 ++--
security/selinux/hooks.c | 36 ++++-----
security/smack/smackfs.c | 11 +--
sound/core/Makefile | 2 +
sound/core/oss/mixer_oss.c | 43 +++++++---
sound/core/timer.c | 17 ++--
sound/isa/Kconfig | 2 +-
sound/isa/gus/gus_dma.c | 2 +
sound/pci/Kconfig | 1 +
sound/pci/hda/hda_intel.c | 28 +++++--
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/codecs/cs42l42.c | 9 ++-
sound/soc/codecs/nau8824.c | 40 ++++++++++
sound/soc/soc-dapm.c | 29 +++++--
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/line6/driver.c | 14 ++--
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/testing/selftests/bpf/test_progs.c | 4 +-
354 files changed, 2182 insertions(+), 1165 deletions(-)
---
^ permalink raw reply [relevance 2%]
* Linux 4.19.218
@ 2021-11-26 10:58 2% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-26 10:58 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 4.19.218 kernel.
All users of the 4.19 kernel series must upgrade.
The updated 4.19.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.19.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/kernel-parameters.txt | 7
Documentation/devicetree/bindings/regulator/samsung,s5m8767.txt | 23 --
Makefile | 2
arch/arm/Makefile | 22 +-
arch/arm/boot/dts/at91-tse850-3.dts | 2
arch/arm/boot/dts/omap-gpmc-smsc9221.dtsi | 2
arch/arm/boot/dts/omap3-gta04.dtsi | 2
arch/arm/boot/dts/omap3-overo-tobiduo-common.dtsi | 2
arch/arm/kernel/stacktrace.c | 3
arch/arm/mm/Kconfig | 2
arch/arm/mm/mmu.c | 4
arch/arm64/boot/dts/freescale/fsl-ls1088a.dtsi | 16 -
arch/arm64/boot/dts/freescale/fsl-ls208xa.dtsi | 16 -
arch/arm64/boot/dts/hisilicon/hi3660.dtsi | 4
arch/arm64/boot/dts/hisilicon/hi6220.dtsi | 2
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2
arch/arm64/boot/dts/xilinx/zynqmp-zc1751-xm016-dc2.dts | 4
arch/arm64/boot/dts/xilinx/zynqmp.dtsi | 4
arch/arm64/include/asm/pgtable.h | 12 -
arch/hexagon/lib/io.c | 4
arch/ia64/Kconfig.debug | 2
arch/ia64/kernel/kprobes.c | 9
arch/m68k/Kconfig.machine | 1
arch/mips/Kconfig | 4
arch/mips/bcm63xx/clk.c | 6
arch/mips/generic/yamon-dt.c | 2
arch/mips/include/asm/mips-cm.h | 12 -
arch/mips/kernel/mips-cm.c | 21 +-
arch/mips/kernel/r2300_fpu.S | 4
arch/mips/kernel/syscall.c | 9
arch/mips/lantiq/clk.c | 6
arch/mips/lantiq/xway/dma.c | 14 -
arch/mips/sni/time.c | 4
arch/parisc/kernel/entry.S | 4
arch/parisc/kernel/smp.c | 19 +-
arch/parisc/kernel/unwind.c | 21 +-
arch/parisc/mm/init.c | 4
arch/powerpc/boot/dts/charon.dts | 2
arch/powerpc/boot/dts/digsy_mtc.dts | 2
arch/powerpc/boot/dts/lite5200.dts | 2
arch/powerpc/boot/dts/lite5200b.dts | 2
arch/powerpc/boot/dts/media5200.dts | 2
arch/powerpc/boot/dts/mpc5200b.dtsi | 2
arch/powerpc/boot/dts/o2d.dts | 2
arch/powerpc/boot/dts/o2d.dtsi | 2
arch/powerpc/boot/dts/o2dnt2.dts | 2
arch/powerpc/boot/dts/o3dnt.dts | 2
arch/powerpc/boot/dts/pcm032.dts | 2
arch/powerpc/boot/dts/tqm5200.dts | 2
arch/powerpc/include/asm/code-patching.h | 1
arch/powerpc/include/asm/security_features.h | 5
arch/powerpc/kernel/security.c | 5
arch/powerpc/lib/code-patching.c | 7
arch/powerpc/net/bpf_jit.h | 33 ++-
arch/powerpc/net/bpf_jit64.h | 8
arch/powerpc/net/bpf_jit_comp64.c | 93 ++++++++--
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 3
arch/powerpc/sysdev/dcr-low.S | 2
arch/s390/kvm/priv.c | 2
arch/s390/mm/gmap.c | 5
arch/sh/Kconfig.debug | 1
arch/sh/include/asm/sfp-machine.h | 8
arch/sh/kernel/cpu/sh4a/smp-shx3.c | 5
arch/x86/events/intel/uncore_snbep.c | 4
arch/x86/hyperv/hv_init.c | 8
arch/x86/include/asm/page_64_types.h | 2
arch/x86/kernel/cpu/amd.c | 2
arch/x86/kernel/cpu/common.c | 44 +++-
arch/x86/kernel/cpu/cpu.h | 1
arch/x86/kernel/irq.c | 4
arch/x86/mm/mem_encrypt_identity.c | 9
crypto/pcrypt.c | 12 -
drivers/acpi/acpica/acglobal.h | 2
drivers/acpi/acpica/hwesleep.c | 8
drivers/acpi/acpica/hwsleep.c | 11 -
drivers/acpi/acpica/hwxfsleep.c | 7
drivers/acpi/battery.c | 2
drivers/acpi/pmic/intel_pmic.c | 51 +++--
drivers/android/binder.c | 20 +-
drivers/ata/libata-core.c | 2
drivers/ata/libata-eh.c | 8
drivers/auxdisplay/ht16k33.c | 66 ++++---
drivers/auxdisplay/img-ascii-lcd.c | 10 +
drivers/base/firmware_loader/main.c | 13 -
drivers/block/zram/zram_drv.c | 2
drivers/char/hw_random/mtk-rng.c | 9
drivers/char/tpm/tpm2-space.c | 3
drivers/clocksource/Kconfig | 1
drivers/cpuidle/sysfs.c | 5
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 +
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6
drivers/crypto/s5p-sss.c | 2
drivers/dma/at_xdmac.c | 2
drivers/dma/dmaengine.h | 2
drivers/edac/sb_edac.c | 2
drivers/firmware/psci_checker.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 1
drivers/gpu/drm/drm_panel_orientation_quirks.c | 13 +
drivers/gpu/drm/drm_plane_helper.c | 1
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8
drivers/gpu/drm/msm/msm_gem.c | 4
drivers/gpu/drm/nouveau/nvkm/engine/disp/hdmigv100.c | 1
drivers/gpu/drm/udl/udl_connector.c | 2
drivers/hv/hyperv_vmbus.h | 1
drivers/hwmon/hwmon.c | 6
drivers/hwmon/pmbus/lm25066.c | 25 ++
drivers/i2c/busses/i2c-xlr.c | 6
drivers/iio/dac/ad5446.c | 9
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3
drivers/infiniband/hw/mlx4/qp.c | 4
drivers/infiniband/hw/qedr/verbs.c | 15 -
drivers/infiniband/sw/rxe/rxe_param.h | 2
drivers/input/mouse/elantech.c | 13 +
drivers/input/serio/i8042-x86ia64io.h | 14 +
drivers/irqchip/irq-bcm6345-l1.c | 2
drivers/irqchip/irq-s3c24xx.c | 22 +-
drivers/media/dvb-frontends/mn88443x.c | 18 +
drivers/media/i2c/ir-kbd-i2c.c | 1
drivers/media/i2c/mt9p031.c | 28 ++-
drivers/media/pci/cx23885/cx23885-alsa.c | 3
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 +-
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5
drivers/media/platform/rcar-vin/rcar-csi2.c | 2
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6
drivers/media/radio/si470x/radio-si470x-i2c.c | 2
drivers/media/radio/si470x/radio-si470x-usb.c | 2
drivers/media/rc/ite-cir.c | 2
drivers/media/rc/mceusb.c | 1
drivers/media/usb/dvb-usb/az6027.c | 1
drivers/media/usb/dvb-usb/dibusb-common.c | 2
drivers/media/usb/em28xx/em28xx-cards.c | 5
drivers/media/usb/em28xx/em28xx-core.c | 5
drivers/media/usb/uvc/uvc_v4l2.c | 7
drivers/media/usb/uvc/uvc_video.c | 5
drivers/memory/fsl_ifc.c | 13 -
drivers/memstick/core/ms_block.c | 2
drivers/memstick/host/jmb38x_ms.c | 2
drivers/memstick/host/r592.c | 8
drivers/mmc/host/Kconfig | 2
drivers/mmc/host/dw_mmc.c | 3
drivers/mmc/host/mxs-mmc.c | 10 +
drivers/mmc/host/sdhci-omap.c | 3
drivers/mtd/spi-nor/hisi-sfc.c | 1
drivers/net/bonding/bond_sysfs_slave.c | 36 +--
drivers/net/dsa/rtl8366rb.c | 2
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 ++
drivers/net/ethernet/broadcom/bnx2x/bnx2x_init_ops.h | 4
drivers/net/ethernet/cavium/thunder/nic_main.c | 2
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2
drivers/net/ethernet/ibm/ibmvnic.c | 3
drivers/net/ethernet/intel/i40e/i40e.h | 1
drivers/net/ethernet/intel/i40e/i40e_main.c | 45 +++-
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 53 -----
drivers/net/ethernet/intel/i40evf/i40evf_main.c | 5
drivers/net/ethernet/sfc/ptp.c | 4
drivers/net/ethernet/sfc/siena_sriov.c | 2
drivers/net/ethernet/ti/davinci_emac.c | 16 +
drivers/net/phy/micrel.c | 5
drivers/net/phy/phylink.c | 2
drivers/net/tun.c | 5
drivers/net/vmxnet3/vmxnet3_drv.c | 1
drivers/net/wireless/ath/ath10k/mac.c | 6
drivers/net/wireless/ath/ath10k/usb.c | 7
drivers/net/wireless/ath/ath10k/wmi.h | 3
drivers/net/wireless/ath/ath6kl/usb.c | 7
drivers/net/wireless/ath/ath9k/main.c | 4
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 -
drivers/net/wireless/ath/wcn36xx/dxe.c | 12 +
drivers/net/wireless/ath/wcn36xx/main.c | 4
drivers/net/wireless/ath/wcn36xx/smd.c | 44 +++-
drivers/net/wireless/broadcom/b43/phy_g.c | 2
drivers/net/wireless/broadcom/b43legacy/radio.c | 2
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3
drivers/net/wireless/marvell/libertas/if_usb.c | 2
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2
drivers/net/wireless/marvell/mwifiex/11n.c | 5
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +--
drivers/net/wireless/marvell/mwifiex/pcie.c | 8
drivers/net/wireless/marvell/mwifiex/usb.c | 16 +
drivers/net/wireless/marvell/mwl8k.c | 2
drivers/net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 -
drivers/net/wireless/rsi/rsi_91x_core.c | 2
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 -
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 ++-----
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 +-
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5
drivers/net/wireless/rsi/rsi_91x_usb.c | 5
drivers/net/wireless/rsi/rsi_hal.h | 11 +
drivers/net/wireless/rsi/rsi_main.h | 15 +
drivers/net/xen-netfront.c | 8
drivers/nfc/pn533/pn533.c | 6
drivers/nvme/host/rdma.c | 2
drivers/pci/controller/pci-aardvark.c | 23 +-
drivers/pci/msi.c | 27 +-
drivers/pci/quirks.c | 7
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 +
drivers/pinctrl/core.c | 2
drivers/platform/x86/hp_accel.c | 2
drivers/platform/x86/thinkpad_acpi.c | 2
drivers/platform/x86/wmi.c | 9
drivers/power/supply/bq27xxx_battery_i2c.c | 3
drivers/power/supply/max17042_battery.c | 8
drivers/power/supply/rt5033_battery.c | 2
drivers/regulator/s5m8767.c | 21 --
drivers/s390/char/tape_std.c | 3
drivers/s390/cio/css.c | 4
drivers/scsi/advansys.c | 4
drivers/scsi/csiostor/csio_lnode.c | 2
drivers/scsi/dc395x.c | 1
drivers/scsi/lpfc/lpfc_sli.c | 1
drivers/scsi/qla2xxx/qla_gbl.h | 2
drivers/scsi/qla2xxx/qla_init.c | 4
drivers/scsi/qla2xxx/qla_mr.c | 23 --
drivers/scsi/qla2xxx/qla_os.c | 27 --
drivers/scsi/qla2xxx/qla_target.c | 14 -
drivers/sh/maple/maple.c | 5
drivers/soc/tegra/pmc.c | 4
drivers/spi/spi-bcm-qspi.c | 5
drivers/spi/spi-pl022.c | 5
drivers/staging/erofs/unzip_pagevec.h | 14 -
drivers/staging/erofs/unzip_vle.c | 19 --
drivers/target/target_core_alua.c | 1
drivers/target/target_core_device.c | 2
drivers/target/target_core_internal.h | 1
drivers/target/target_core_transport.c | 76 +++++---
drivers/tty/serial/8250/8250_dw.c | 2
drivers/tty/serial/serial_core.c | 16 +
drivers/tty/serial/xilinx_uartps.c | 3
drivers/tty/tty_buffer.c | 3
drivers/usb/chipidea/core.c | 19 +-
drivers/usb/gadget/legacy/hid.c | 4
drivers/usb/host/max3421-hcd.c | 25 --
drivers/usb/host/ohci-tmio.c | 2
drivers/usb/host/xhci-hub.c | 3
drivers/usb/misc/iowarrior.c | 8
drivers/usb/musb/tusb6010.c | 5
drivers/usb/serial/keyspan.c | 15 -
drivers/usb/typec/tps6598x.c | 2
drivers/video/backlight/backlight.c | 6
drivers/video/backlight/gpio_backlight.c | 24 ++
drivers/video/console/sticon.c | 12 -
drivers/video/fbdev/chipsfb.c | 2
drivers/watchdog/Kconfig | 2
drivers/watchdog/f71808e_wdt.c | 4
drivers/watchdog/omap_wdt.c | 6
drivers/xen/balloon.c | 86 ++++++---
drivers/xen/xen-pciback/conf_space_capability.c | 2
fs/btrfs/async-thread.c | 14 +
fs/btrfs/disk-io.c | 3
fs/btrfs/tree-log.c | 4
fs/btrfs/volumes.c | 4
fs/ext4/super.c | 9
fs/f2fs/inode.c | 2
fs/f2fs/namei.c | 2
fs/fuse/file.c | 7
fs/jfs/jfs_mount.c | 51 ++---
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4
fs/nfs/pnfs_nfs.c | 4
fs/nfs/write.c | 17 -
fs/ocfs2/file.c | 8
fs/orangefs/dcache.c | 4
fs/quota/quota_tree.c | 15 +
fs/tracefs/inode.c | 3
fs/udf/dir.c | 32 +++
fs/udf/namei.c | 3
fs/udf/super.c | 2
include/linux/console.h | 2
include/linux/filter.h | 1
include/linux/libata.h | 2
include/linux/lsm_hooks.h | 28 +--
include/linux/pci.h | 2
include/linux/rpmsg.h | 2
include/linux/sched/task_stack.h | 4
include/linux/security.h | 28 +--
include/linux/virtio_net.h | 7
include/net/llc.h | 4
include/net/sch_generic.h | 4
include/rdma/rdma_netlink.h | 2
include/target/target_core_base.h | 6
include/trace/events/f2fs.h | 12 -
include/uapi/linux/pci_regs.h | 6
ipc/util.c | 6
kernel/bpf/core.c | 4
kernel/cgroup/cgroup.c | 31 ++-
kernel/events/core.c | 10 -
kernel/locking/lockdep.c | 2
kernel/power/swap.c | 7
kernel/sched/core.c | 3
kernel/signal.c | 18 -
kernel/trace/tracing_map.c | 40 ++--
kernel/workqueue.c | 15 +
lib/decompress_unxz.c | 2
lib/xz/xz_dec_lzma2.c | 21 ++
lib/xz/xz_dec_stream.c | 6
mm/oom_kill.c | 23 +-
mm/slab.h | 2
mm/zsmalloc.c | 7
net/9p/client.c | 2
net/batman-adv/fragmentation.c | 26 +-
net/batman-adv/hard-interface.c | 3
net/batman-adv/multicast.c | 31 +++
net/batman-adv/multicast.h | 15 +
net/batman-adv/soft-interface.c | 5
net/bluetooth/l2cap_sock.c | 10 -
net/bluetooth/sco.c | 33 ++-
net/core/dev.c | 2
net/core/stream.c | 3
net/core/sysctl_net_core.c | 2
net/ipv4/tcp.c | 2
net/ipv6/addrconf.c | 3
net/netfilter/nfnetlink_queue.c | 2
net/nfc/core.c | 32 +--
net/nfc/nci/core.c | 11 -
net/sched/sch_generic.c | 9
net/sched/sch_mq.c | 24 ++
net/sched/sch_mqprio.c | 23 ++
net/vmw_vsock/af_vsock.c | 2
net/wireless/util.c | 1
samples/kprobes/kretprobe_example.c | 2
scripts/leaking_addresses.pl | 3
security/Kconfig | 3
security/apparmor/label.c | 4
security/integrity/evm/evm_main.c | 2
security/security.c | 14 -
security/selinux/hooks.c | 36 +--
security/smack/smackfs.c | 11 -
sound/core/Makefile | 2
sound/core/oss/mixer_oss.c | 43 +++-
sound/core/timer.c | 17 -
sound/isa/Kconfig | 2
sound/isa/gus/gus_dma.c | 2
sound/pci/Kconfig | 1
sound/pci/hda/hda_intel.c | 28 ++-
sound/pci/hda/patch_realtek.c | 1
sound/soc/codecs/cs42l42.c | 9
sound/soc/codecs/nau8824.c | 40 ++++
sound/soc/soc-dapm.c | 29 ++-
sound/synth/emux/emux.c | 2
sound/usb/6fire/comm.c | 2
sound/usb/6fire/firmware.c | 6
sound/usb/line6/driver.c | 14 -
sound/usb/line6/driver.h | 2
sound/usb/line6/podhd.c | 6
sound/usb/line6/toneport.c | 2
sound/usb/misc/ua101.c | 4
sound/usb/quirks.c | 1
tools/testing/selftests/bpf/test_progs.c | 4
353 files changed, 2181 insertions(+), 1164 deletions(-)
Ahmad Fatoum (1):
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Aleksander Jan Bajkowski (2):
MIPS: lantiq: dma: add small delay after reset
MIPS: lantiq: dma: reset correct number of channel
Alex Bee (1):
arm64: dts: rockchip: Fix GPU register width for RK3328
Alex Xu (Hello71) (1):
drm/plane-helper: fix uninitialized variable reference
Alexander Antonov (2):
perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
Alexander Mikhalitsyn (1):
ipc: WARN if trying to remove ipc object which is absent
Alexander Tsoy (1):
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Alok Prasad (1):
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Amit Kumar Mahapatra (1):
arm64: zynqmp: Do not duplicate flash partition label property
Anand Jain (1):
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Anant Thazhemadam (1):
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Anatolij Gustschin (1):
powerpc/5200: dts: fix memory node unit name
Anders Roxell (1):
PM: hibernate: fix sparse warnings
Andrea Righi (1):
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Andreas Kemnade (1):
arm: dts: omap3-gta04a4: accelerometer irq fix
André Almeida (1):
ACPI: battery: Accept charges over the design capacity as full
Andy Shevchenko (1):
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Anel Orazgaliyeva (1):
cpuidle: Fix kobject memory leaks in error paths
Anssi Hannula (1):
serial: xilinx_uartps: Fix race condition causing stuck TX
Arnaud Pouliquen (1):
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Arnd Bergmann (6):
hyperv/vmbus: include linux/bitops.h
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
drm/amdgpu: fix warning for overflow check
memstick: avoid out-of-range warning
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Austin Kim (2):
ALSA: synth: missing check for possible NULL after the call to kstrdup
evm: mark evm_fixmode as __ro_after_init
Baptiste Lepers (1):
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Barnabás Pőcze (1):
platform/x86: wmi: do not fail if disabling fails
Bart Van Assche (1):
MIPS: sni: Fix the build
Benjamin Li (2):
wcn36xx: handle connection loss indication
wcn36xx: add proper DMA memory barriers in rx path
Bryant Mairs (1):
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Chengfeng Ye (2):
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
ALSA: gus: fix null pointer dereference on pointer block
Christian Löhle (1):
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Christophe JAILLET (5):
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
mmc: mxs-mmc: disable regulator on error and in the remove function
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
Christophe Leroy (1):
video: fbdev: chipsfb: use memset_io() instead of memset()
Claudiu Beznea (1):
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Colin Ian King (3):
media: cx23885: Fix snd_card_free call on null card pointer
media: em28xx: Don't use ops->suspend if it is NULL
MIPS: generic/yamon-dt: fix uninitialized variable error
Damien Le Moal (1):
libata: fix read log timeout value
Dan Carpenter (8):
tpm: Check for integer overflow in tpm2_map_response_body()
b43legacy: fix a lower bounds test
b43: fix a lower bounds test
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
drm/msm: uninitialized variable in msm_gem_import()
usb: gadget: hid: fix error code in do_config()
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
zram: off by one in read_block_state()
Daniel Jordan (1):
crypto: pcrypt - Delay write to padata->info
David Hildenbrand (1):
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
Desmond Cheong Zhi Xi (1):
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Dirk Bender (1):
media: mt9p031: Fix corrupted frame after restarting stream
Dmitry Bogdanov (1):
scsi: qla2xxx: Fix unmap of already freed sgl
Dmitry Osipenko (1):
soc/tegra: pmc: Fix imbalanced clock disabling in error code path
Dominique Martinet (1):
9p/net: fix missing error check in p9_check_errors
Dongli Zhang (2):
xen/netfront: stop tx queues during live migration
vmxnet3: do not stop tx queues after netif_device_detach()
Dongliang Mu (2):
JFS: fix memleak in jfs_mount
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Eiichi Tsukata (1):
vsock: prevent unnecessary refcnt inc for nonblocking connect
Eric Badger (1):
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Eric Dumazet (1):
llc: fix out-of-bound array index in llc_sk_dev_hash()
Eric W. Biederman (2):
signal: Remove the bogus sigkill_pending in ptrace_stop
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Erik Ekman (1):
sfc: Don't use netif_info before net_device setup
Eryk Rybak (2):
i40e: Fix correct max_pkt_size on VF RX queue
i40e: Fix changing previously set num_queue_pairs for PFs
Evgeny Novikov (2):
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Filipe Manana (1):
btrfs: fix lost error handling when replaying directory deletes
Florian Westphal (1):
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Gao Xiang (2):
erofs: fix unsafe pagevec reuse of hooked pclusters
f2fs: fix up f2fs_lookup tracepoints
Geert Uytterhoeven (4):
mips: cm: Convert to bitfield API to fix out-of-bounds access
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
auxdisplay: ht16k33: Connect backlight to fbdev
auxdisplay: ht16k33: Fix frame buffer device blanking
Giovanni Cabiddu (2):
crypto: qat - detect PFVF collision after ACK
crypto: qat - disregard spurious PFVF interrupts
Greg Kroah-Hartman (1):
Linux 4.19.218
Greg Thelen (1):
perf/core: Avoid put_page() when GUP fails
Grzegorz Szczurek (1):
i40e: Fix display error code in dmesg
Guanghui Feng (1):
tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
Guo Zhi (1):
scsi: advansys: Fix kernel pointer leak
Hans Verkuil (1):
drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
Hans de Goede (4):
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
Helge Deller (2):
parisc: Fix ptrace check on syscall return
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Henrik Grimler (1):
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Huang Guobin (1):
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Ingmar Klein (1):
PCI: Mark Atheros QCA6174 to avoid bus reset
Jackie Liu (3):
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
ar7: fix kernel builds for compiler test
Jaegeuk Kim (1):
f2fs: should use GFP_NOFS for directory inodes
Jakob Hauser (1):
power: supply: rt5033_battery: Change voltage values to µV
Jakub Kicinski (2):
net: sched: update default qdisc visibility after Tx queue cnt changes
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
James Smart (1):
scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
Jan Kara (2):
ocfs2: fix data corruption on truncate
udf: Fix crash after seekdir
Jane Malalane (1):
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Janis Schoetterl-Glausch (1):
KVM: s390: Fix handle_sske page fault handling
Jessica Zhang (1):
drm/msm: Fix potential NULL dereference in DPU SSPP
Jia-Ju Bai (1):
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Johan Hovold (12):
ALSA: ua101: fix division by zero at probe
ALSA: 6fire: fix control and bulk message timeouts
ALSA: line6: fix control and interrupt message timeouts
mwifiex: fix division by zero in fw download path
ath6kl: fix division by zero in send path
ath6kl: fix control-message timeout
ath10k: fix control-message timeout
ath10k: fix division by zero in send path
rtl8187: fix control-message timeouts
USB: iowarrior: fix control-message timeouts
USB: chipidea: fix interrupt deadlock
drm/udl: fix control-message timeout
Johannes Berg (1):
iwlwifi: mvm: disable RX-diversity in powersave
Jon Maxwell (1):
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Jonas Dreßler (4):
mwifiex: Read a PCI register after writing the TX ring write pointer
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
mwifiex: Properly initialize private structure on interface type changes
mwifiex: Send DELBA requests according to spec
Jonathan Davies (1):
net: virtio_net_hdr_to_skb: count transport header in UFO
Juergen Gross (1):
xen/balloon: add late_initcall_sync() for initial ballooning done
Junji Wei (1):
RDMA/rxe: Fix wrong port_cap_flags
Kalesh Singh (1):
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Kees Cook (4):
leaking_addresses: Always print a trailing newline
media: si470x: Avoid card name truncation
clocksource/drivers/timer-ti-dm: Select TIMER_OF
fortify: Explicitly disable Clang support
Krzysztof Kozlowski (2):
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Lars-Peter Clausen (1):
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Lasse Collin (2):
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
lib/xz: Validate the value before assigning it to an enum variable
Leon Romanovsky (2):
RDMA/mlx4: Return missed an error if device doesn't support steering
RDMA/netlink: Add __maybe_unused to static inline in C file
Li Zhang (1):
btrfs: clear MISSING device status bit in btrfs_close_one_device
Lin Ma (2):
NFC: reorganize the functions in nci_request
NFC: reorder the logic in nfc_{un,}register_device
Linus Lüssing (2):
ath9k: Fix potential interrupt storm on queue reset
batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
Linus Walleij (1):
net: dsa: rtl8366rb: Fix off-by-one bug
Loic Poulain (1):
wcn36xx: Fix HT40 capability for 2Ghz band
Lorenz Bauer (1):
bpf: Prevent increasing bpf_jit_limit above max
Lu Wei (1):
maple: fix wrong return value of maple_bus_init().
Luis Chamberlain (1):
firmware_loader: fix pre-allocated buf built-in firmware use
Marc Zyngier (2):
PCI/MSI: Deal with devices lying about their MSI mask capability
PCI: Add MSI masking quirk for Nvidia ION AHCI
Marek Behún (3):
PCI: aardvark: Fix return value of MSI domain .alloc() method
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
PCI: aardvark: Don't spam about PIO Response Status
Marek Vasut (2):
rsi: Fix module dev_oper_mode parameter description
video: backlight: Drop maximum brightness override for brightness zero
Mark Rutland (1):
irq: mips: avoid nested irq_enter()
Markus Schneider-Pargmann (1):
hwrng: mtk - Force runtime pm ops for sleep ops
Martin Fuzzey (3):
rsi: fix occasional initialisation failure with BT coex
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
rsi: fix rate mask set leading to P2P failure
Masami Hiramatsu (2):
ia64: kprobes: Fix to pass correct trampoline address to the handler
ARM: clang: Do not rely on lr register for stacktrace
Mathias Nyman (1):
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
Max Gurtovoy (1):
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Maxim Kiselev (1):
net: davinci_emac: Fix interrupt pacing disable
Menglong Dong (1):
workqueue: make sysfs of unbound kworker cpumask more clever
Miaohe Lin (1):
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Michael Ellerman (1):
powerpc/dcr: Use cmplwi instead of 3-argument cmpli
Michael Walle (2):
arm64: dts: hisilicon: fix arm,sp805 compatible string
arm64: dts: freescale: fix arm,sp805 compatible string
Michal Hocko (1):
mm, oom: do not trigger out_of_memory from the #PF
Michal Maloszewski (1):
i40e: Fix NULL ptr dereference on VSI filter sync
Michal Simek (1):
arm64: zynqmp: Fix serial compatible string
Michał Mirosław (1):
ARM: 9155/1: fix early early_iounmap()
Mike Christie (2):
scsi: target: Fix ordered tag handling
scsi: target: Fix alua_tg_pt_gps_count tracking
Miklos Szeredi (1):
fuse: truncate pagecache on atomic_o_trunc
Nadezda Lutovinova (2):
media: s5p-mfc: Add checking to s5p_mfc_probe().
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Nathan Chancellor (2):
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
hexagon: export raw I/O routines for modules
Naveen N. Rao (5):
powerpc/lib: Add helper to check if offset is within conditional branch range
powerpc/bpf: Validate branch ranges
powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
powerpc/security: Add a helper to query stf_barrier type
powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
Nguyen Dinh Phi (1):
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
Nicholas Nunley (1):
iavf: check for null in iavf_fix_features
Nick Desaulniers (1):
sh: check return code of request_irq
Nicolas Dichtel (1):
tun: fix bonding active backup with arp monitoring
Nikolay Borisov (1):
btrfs: fix memory ordering between normal and ordered work functions
Pali Rohár (4):
serial: core: Fix initializing and restoring termios speed
PCI: aardvark: Do not clear status bits of masked interrupts
PCI: aardvark: Do not unmask unused interrupts
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Pavel Skripkin (4):
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
media: em28xx: add missing em28xx_close_extension
media: dvb-usb: fix ununit-value in az6027_rc_query
net: bnx2x: fix variable dereferenced before check
Pawan Gupta (1):
smackfs: Fix use-after-free in netlbl_catmap_walk()
Pekka Korpinen (1):
iio: dac: ad5446: Fix ad5622_write() return value
Peter Rosin (1):
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Peter Ujfalusi (1):
backlight: gpio-backlight: Correct initial power state handling
Peter Zijlstra (2):
locking/lockdep: Avoid RCU-induced noinstr fail
x86: Increase exception stack sizes
Phoenix Huang (1):
Input: elantench - fix misreporting trackpoint coordinates
Quinn Tran (2):
scsi: qla2xxx: Fix gnl list corruption
scsi: qla2xxx: Turn off target reset during issue_lip
Rafael J. Wysocki (1):
ACPICA: Avoid evaluating methods too early during system resume
Rahul Lakkireddy (1):
cxgb4: fix eeprom len when diagnostics not implemented
Rajat Asthana (1):
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Randy Dunlap (9):
mmc: winbond: don't build on M68K
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
m68k: set a default value for MEMORY_RESERVE
ALSA: ISA: not for M68K
sh: fix kconfig unmet dependency warning for FRAME_POINTER
sh: define __BIG_ENDIAN for math-emu
mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
mips: bcm63xx: add support for clk_get_parent()
mips: lantiq: add support for clk_get_parent()
Reimar Döffinger (1):
libata: fix checking of DMA state
Ricardo Ribalda (2):
media: uvcvideo: Set capability in s_param
media: uvcvideo: Return -EIO for control errors
Richard Fitzgerald (2):
ASoC: cs42l42: Correct some register default values
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Roger Quadros (1):
ARM: dts: omap: fix gpmc,mux-add-data type
Russell King (Oracle) (1):
net: phylink: avoid mvneta warning when setting pause parameters
Rustam Kovhaev (1):
mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
Sean Christopherson (2):
x86/irq: Ensure PI wakeup handler is unregistered before module unload
x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
Sean Young (2):
media: ite-cir: IR receiver stop working after receive overflow
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Selvin Xavier (1):
RDMA/bnxt_re: Fix query SRQ failure
Shaoying Xu (1):
ext4: fix lazy initialization next schedule time computation in more granular unit
Shyam Sundar S K (1):
net: amd-xgbe: Toggle PLL settings during rate change
Stefan Agner (1):
phy: micrel: ksz8041nl: do not use power down mode
Stephen Suryaputra (1):
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Steven Rostedt (VMware) (1):
tracefs: Have tracefs directories not set OTH permission bits by default
Sukadev Bhattiprolu (1):
ibmvnic: Process crqs after enabling interrupts
Surabhi Boob (1):
iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
Sven Eckelmann (4):
ath10k: fix max antenna gain unit
batman-adv: Consider fragmentation for needed_headroom
batman-adv: Reserve needed_*room for fragments
batman-adv: Don't always reallocate the fragmentation skb head
Sven Peter (1):
usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
Sven Schnelle (6):
parisc: fix warning in flush_tlb_all
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
s390/tape: fix timer initialization in tape_std_assign()
parisc/entry: fix trace test in syscall exit path
parisc/sticon: fix reverse colors
Takashi Iwai (6):
Input: i8042 - Add quirk for Fujitsu Lifebook T725
ALSA: timer: Unconditionally unlink slave instances, too
ALSA: mixer: oss: Fix racy access to slots
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
ALSA: hda: Reduce udelay() at SKL+ position reporting
ASoC: DAPM: Cover regression by kctl change notification fix
Tang Bin (1):
crypto: s5p-sss - Add error handling in s5p_aes_probe()
Tetsuo Handa (2):
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Thomas Gleixner (1):
PCI/MSI: Destroy sysfs before freeing entries
Thomas Perrot (1):
spi: spl022: fix Microwire full duplex mode
Tiezhu Yang (1):
samples/kretprobes: Fix return value if register_kretprobe() failed
Tim Crawford (1):
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Todd Kjos (2):
binder: use euid from cred instead of using task
binder: use cred instead of task for selinux checks
Tom Lendacky (1):
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Tom Rix (1):
apparmor: fix error check
Tong Zhang (1):
scsi: dc395: Fix error case unwinding
Tony Lindgren (1):
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Trond Myklebust (1):
NFS: Fix deadlocks in nfs_scan_commit_list()
Tuo Li (2):
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Uwe Kleine-König (1):
usb: max-3421: Use driver data instead of maintaining a list of bound devices
Vasily Averin (1):
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Vincent Donnefort (1):
sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
Vineeth Vijayan (1):
s390/cio: check the subchannel validity for dev_busid
Vitaly Kuznetsov (1):
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Vladimir Zapolskiy (1):
phy: qcom-qusb2: Fix a memory leak on probe
Waiman Long (1):
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Walter Stoll (1):
watchdog: Fix OMAP watchdog early handling
Wang Hai (3):
USB: serial: keyspan: fix memleak on probe errors
libertas_tf: Fix possible memory leak in probe and disconnect
libertas: Fix possible memory leak in probe and disconnect
Wang ShaoBo (1):
Bluetooth: fix use-after-free error in lock_sock_nested()
Wang Wensheng (1):
ALSA: timer: Fix use-after-free problem
Xiaoming Ni (1):
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Yang Yingliang (5):
pinctrl: core: fix possible memory leak in pinctrl_enable()
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
hwmon: Fix possible memleak in __hwmon_device_register()
usb: musb: tusb6010: check return value after calling platform_get_resource()
usb: host: ohci-tmio: check return value after calling platform_get_resource()
Ye Bin (1):
PM: hibernate: Get block device exclusively in swsusp_check()
Yue Hu (1):
erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
YueHaibing (1):
xen-pciback: Fix return in pm_ctrl_init()
Zev Weiss (2):
hwmon: (pmbus/lm25066) Add offset coefficients
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Zhang Yi (2):
quota: check block number when reading the block in quota file
quota: correct error number in free_dqentry()
Zheyu Ma (5):
cavium: Return negative value when pci_alloc_irq_vectors() fails
cavium: Fix return values of the probe function
media: netup_unidvb: handle interrupt properly according to the firmware
memstick: r592: Fix a UAF bug when removing the driver
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ziyang Xuan (1):
rsi: stop thread firstly in rsi_91x_init() error handling
hongao (1):
drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors
jing yangyang (1):
firmware/psci: fix application of sizeof to pointer
^ permalink raw reply [relevance 2%]
* [PATCH 4.19 000/320] 4.19.218-rc3 review
@ 2021-11-25 16:07 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-25 16:07 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 4.19.218 release.
There are 320 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 27 Nov 2021 16:05:05 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.218-rc3.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 4.19.218-rc3
Dmitry Osipenko <digetx@gmail.com>
soc/tegra: pmc: Fix imbalanced clock disabling in error code path
Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
usb: max-3421: Use driver data instead of maintaining a list of bound devices
Takashi Iwai <tiwai@suse.de>
ASoC: DAPM: Cover regression by kctl change notification fix
Leon Romanovsky <leonro@nvidia.com>
RDMA/netlink: Add __maybe_unused to static inline in C file
Sven Eckelmann <sven@narfation.org>
batman-adv: Don't always reallocate the fragmentation skb head
Sven Eckelmann <sven@narfation.org>
batman-adv: Reserve needed_*room for fragments
Sven Eckelmann <sven@narfation.org>
batman-adv: Consider fragmentation for needed_headroom
Linus Lüssing <linus.luessing@c0d3.blue>
batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
Greg Thelen <gthelen@google.com>
perf/core: Avoid put_page() when GUP fails
hongao <hongao@uniontech.com>
drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors
Johan Hovold <johan@kernel.org>
drm/udl: fix control-message timeout
Nguyen Dinh Phi <phind.uet@gmail.com>
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
Sven Schnelle <svens@stackframe.org>
parisc/sticon: fix reverse colors
Nikolay Borisov <nborisov@suse.com>
btrfs: fix memory ordering between normal and ordered work functions
Jan Kara <jack@suse.cz>
udf: Fix crash after seekdir
Sean Christopherson <seanjc@google.com>
x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
Rustam Kovhaev <rkovhaev@gmail.com>
mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
Alexander Mikhalitsyn <alexander.mikhalitsyn@virtuozzo.com>
ipc: WARN if trying to remove ipc object which is absent
Nathan Chancellor <nathan@kernel.org>
hexagon: export raw I/O routines for modules
Nicolas Dichtel <nicolas.dichtel@6wind.com>
tun: fix bonding active backup with arp monitoring
Alexander Antonov <alexander.antonov@linux.intel.com>
perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
Alexander Antonov <alexander.antonov@linux.intel.com>
perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
Lin Ma <linma@zju.edu.cn>
NFC: reorder the logic in nfc_{un,}register_device
Lin Ma <linma@zju.edu.cn>
NFC: reorganize the functions in nci_request
Grzegorz Szczurek <grzegorzx.szczurek@intel.com>
i40e: Fix display error code in dmesg
Eryk Rybak <eryk.roch.rybak@intel.com>
i40e: Fix changing previously set num_queue_pairs for PFs
Michal Maloszewski <michal.maloszewski@intel.com>
i40e: Fix NULL ptr dereference on VSI filter sync
Eryk Rybak <eryk.roch.rybak@intel.com>
i40e: Fix correct max_pkt_size on VF RX queue
Jonathan Davies <jonathan.davies@nutanix.com>
net: virtio_net_hdr_to_skb: count transport header in UFO
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
Randy Dunlap <rdunlap@infradead.org>
mips: lantiq: add support for clk_get_parent()
Randy Dunlap <rdunlap@infradead.org>
mips: bcm63xx: add support for clk_get_parent()
Colin Ian King <colin.i.king@googlemail.com>
MIPS: generic/yamon-dt: fix uninitialized variable error
Surabhi Boob <surabhi.boob@intel.com>
iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
Nicholas Nunley <nicholas.d.nunley@intel.com>
iavf: check for null in iavf_fix_features
Pavel Skripkin <paskripkin@gmail.com>
net: bnx2x: fix variable dereferenced before check
Hans Verkuil <hverkuil-cisco@xs4all.nl>
drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
Vincent Donnefort <vincent.donnefort@arm.com>
sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
Randy Dunlap <rdunlap@infradead.org>
mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
Randy Dunlap <rdunlap@infradead.org>
sh: define __BIG_ENDIAN for math-emu
Randy Dunlap <rdunlap@infradead.org>
sh: fix kconfig unmet dependency warning for FRAME_POINTER
Gao Xiang <hsiangkao@linux.alibaba.com>
f2fs: fix up f2fs_lookup tracepoints
Lu Wei <luwei32@huawei.com>
maple: fix wrong return value of maple_bus_init().
Nick Desaulniers <ndesaulniers@google.com>
sh: check return code of request_irq
Michael Ellerman <mpe@ellerman.id.au>
powerpc/dcr: Use cmplwi instead of 3-argument cmpli
Chengfeng Ye <cyeaa@connect.ust.hk>
ALSA: gus: fix null pointer dereference on pointer block
Anatolij Gustschin <agust@denx.de>
powerpc/5200: dts: fix memory node unit name
Mike Christie <michael.christie@oracle.com>
scsi: target: Fix alua_tg_pt_gps_count tracking
Mike Christie <michael.christie@oracle.com>
scsi: target: Fix ordered tag handling
Bart Van Assche <bvanassche@acm.org>
MIPS: sni: Fix the build
Guanghui Feng <guanghuifeng@linux.alibaba.com>
tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
Randy Dunlap <rdunlap@infradead.org>
ALSA: ISA: not for M68K
Yang Yingliang <yangyingliang@huawei.com>
usb: host: ohci-tmio: check return value after calling platform_get_resource()
Roger Quadros <rogerq@kernel.org>
ARM: dts: omap: fix gpmc,mux-add-data type
Luis Chamberlain <mcgrof@kernel.org>
firmware_loader: fix pre-allocated buf built-in firmware use
Guo Zhi <qtxuning1999@sjtu.edu.cn>
scsi: advansys: Fix kernel pointer leak
Hans de Goede <hdegoede@redhat.com>
ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
Michael Walle <michael@walle.cc>
arm64: dts: freescale: fix arm,sp805 compatible string
Sven Peter <sven@svenpeter.dev>
usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
Yang Yingliang <yangyingliang@huawei.com>
usb: musb: tusb6010: check return value after calling platform_get_resource()
Michael Walle <michael@walle.cc>
arm64: dts: hisilicon: fix arm,sp805 compatible string
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
Michal Simek <michal.simek@xilinx.com>
arm64: zynqmp: Fix serial compatible string
Amit Kumar Mahapatra <amit.kumar-mahapatra@xilinx.com>
arm64: zynqmp: Do not duplicate flash partition label property
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: fix unsafe pagevec reuse of hooked pclusters
Yue Hu <huyue2@yulong.com>
erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
Marc Zyngier <maz@kernel.org>
PCI: Add MSI masking quirk for Nvidia ION AHCI
Marc Zyngier <maz@kernel.org>
PCI/MSI: Deal with devices lying about their MSI mask capability
Thomas Gleixner <tglx@linutronix.de>
PCI/MSI: Destroy sysfs before freeing entries
Sven Schnelle <svens@stackframe.org>
parisc/entry: fix trace test in syscall exit path
Kees Cook <keescook@chromium.org>
fortify: Explicitly disable Clang support
Shaoying Xu <shaoyi@amazon.com>
ext4: fix lazy initialization next schedule time computation in more granular unit
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Miklos Szeredi <mszeredi@redhat.com>
fuse: truncate pagecache on atomic_o_trunc
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Peter Ujfalusi <peter.ujfalusi@ti.com>
backlight: gpio-backlight: Correct initial power state handling
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/security: Add a helper to query stf_barrier type
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Validate branch ranges
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/lib: Add helper to check if offset is within conditional branch range
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Leon Romanovsky <leonro@nvidia.com>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
Dongli Zhang <dongli.zhang@oracle.com>
vmxnet3: do not stop tx queues after netif_device_detach()
Walter Stoll <walter.stoll@duagon.com>
watchdog: Fix OMAP watchdog early handling
Thomas Perrot <thomas.perrot@bootlin.com>
spi: spl022: fix Microwire full duplex mode
Dongli Zhang <dongli.zhang@oracle.com>
xen/netfront: stop tx queues during live migration
Lorenz Bauer <lmb@cloudflare.com>
bpf: Prevent increasing bpf_jit_limit above max
Bryant Mairs <bryant@mai.rs>
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Randy Dunlap <rdunlap@infradead.org>
mmc: winbond: don't build on M68K
Arnd Bergmann <arnd@arndb.de>
hyperv/vmbus: include linux/bitops.h
Erik Ekman <erik@kryo.se>
sfc: Don't use netif_info before net_device setup
Zheyu Ma <zheyuma97@gmail.com>
cavium: Fix return values of the probe function
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: qla2xxx: Fix unmap of already freed sgl
Zheyu Ma <zheyuma97@gmail.com>
cavium: Return negative value when pci_alloc_irq_vectors() fails
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for selinux checks
Todd Kjos <tkjos@google.com>
binder: use euid from cred instead of using task
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 ++
.../bindings/regulator/samsung,s5m8767.txt | 23 +++---
Makefile | 4 +-
arch/arm/Makefile | 22 ++---
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/omap-gpmc-smsc9221.dtsi | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/omap3-overo-tobiduo-common.dtsi | 2 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/freescale/fsl-ls1088a.dtsi | 16 ++--
arch/arm64/boot/dts/freescale/fsl-ls208xa.dtsi | 16 ++--
arch/arm64/boot/dts/hisilicon/hi3660.dtsi | 4 +-
arch/arm64/boot/dts/hisilicon/hi6220.dtsi | 2 +-
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
.../boot/dts/xilinx/zynqmp-zc1751-xm016-dc2.dts | 4 +-
arch/arm64/boot/dts/xilinx/zynqmp.dtsi | 4 +-
arch/arm64/include/asm/pgtable.h | 12 ++-
arch/hexagon/lib/io.c | 4 +
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/kernel/kprobes.c | 9 ++-
arch/m68k/Kconfig.machine | 1 +
arch/mips/Kconfig | 4 +
arch/mips/bcm63xx/clk.c | 6 ++
arch/mips/generic/yamon-dt.c | 2 +-
arch/mips/include/asm/mips-cm.h | 12 +--
arch/mips/kernel/mips-cm.c | 21 +++--
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 ---
arch/mips/lantiq/clk.c | 6 ++
arch/mips/lantiq/xway/dma.c | 14 ++--
arch/mips/sni/time.c | 4 +-
arch/parisc/kernel/entry.S | 4 +-
arch/parisc/kernel/smp.c | 19 ++++-
arch/parisc/kernel/unwind.c | 21 +++--
arch/parisc/mm/init.c | 4 +-
arch/powerpc/boot/dts/charon.dts | 2 +-
arch/powerpc/boot/dts/digsy_mtc.dts | 2 +-
arch/powerpc/boot/dts/lite5200.dts | 2 +-
arch/powerpc/boot/dts/lite5200b.dts | 2 +-
arch/powerpc/boot/dts/media5200.dts | 2 +-
arch/powerpc/boot/dts/mpc5200b.dtsi | 2 +-
arch/powerpc/boot/dts/o2d.dts | 2 +-
arch/powerpc/boot/dts/o2d.dtsi | 2 +-
arch/powerpc/boot/dts/o2dnt2.dts | 2 +-
arch/powerpc/boot/dts/o3dnt.dts | 2 +-
arch/powerpc/boot/dts/pcm032.dts | 2 +-
arch/powerpc/boot/dts/tqm5200.dts | 2 +-
arch/powerpc/include/asm/code-patching.h | 1 +
arch/powerpc/include/asm/security_features.h | 5 ++
arch/powerpc/kernel/security.c | 5 ++
arch/powerpc/lib/code-patching.c | 7 +-
arch/powerpc/net/bpf_jit.h | 33 +++++---
arch/powerpc/net/bpf_jit64.h | 8 +-
arch/powerpc/net/bpf_jit_comp64.c | 93 ++++++++++++++++++----
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 3 +-
arch/powerpc/sysdev/dcr-low.S | 2 +-
arch/s390/kvm/priv.c | 2 +
arch/s390/mm/gmap.c | 5 +-
arch/sh/Kconfig.debug | 1 +
arch/sh/include/asm/sfp-machine.h | 8 ++
arch/sh/kernel/cpu/sh4a/smp-shx3.c | 5 +-
arch/x86/events/intel/uncore_snbep.c | 4 +
arch/x86/hyperv/hv_init.c | 8 +-
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 ++++++++--
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/irq.c | 4 +-
arch/x86/mm/mem_encrypt_identity.c | 9 +++
crypto/pcrypt.c | 12 ++-
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +--
drivers/acpi/acpica/hwxfsleep.c | 7 ++
drivers/acpi/battery.c | 2 +-
drivers/acpi/pmic/intel_pmic.c | 51 ++++++------
drivers/android/binder.c | 20 +++--
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 ++
drivers/auxdisplay/ht16k33.c | 66 ++++++++-------
drivers/auxdisplay/img-ascii-lcd.c | 10 +++
drivers/base/firmware_loader/main.c | 13 +--
drivers/block/zram/zram_drv.c | 2 +-
drivers/char/hw_random/mtk-rng.c | 9 ++-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/clocksource/Kconfig | 1 +
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 +++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 ++
drivers/crypto/s5p-sss.c | 2 +
drivers/dma/at_xdmac.c | 2 +-
drivers/dma/dmaengine.h | 2 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci_checker.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 1 +
drivers/gpu/drm/drm_panel_orientation_quirks.c | 13 +++
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/msm_gem.c | 4 +-
.../gpu/drm/nouveau/nvkm/engine/disp/hdmigv100.c | 1 -
drivers/gpu/drm/udl/udl_connector.c | 2 +-
drivers/hv/hyperv_vmbus.h | 1 +
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +++++-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/dac/ad5446.c | 9 ++-
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 ++--
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/mouse/elantech.c | 13 +++
drivers/input/serio/i8042-x86ia64io.h | 14 ++++
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-s3c24xx.c | 22 ++++-
drivers/media/dvb-frontends/mn88443x.c | 18 ++++-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++++++-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++++---
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 ++
drivers/memory/fsl_ifc.c | 13 ++-
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mmc/host/Kconfig | 2 +-
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/mxs-mmc.c | 10 +++
drivers/mmc/host/sdhci-omap.c | 3 +-
drivers/mtd/spi-nor/hisi-sfc.c | 1 -
drivers/net/bonding/bond_sysfs_slave.c | 36 +++------
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 ++
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 ++++-
.../net/ethernet/broadcom/bnx2x/bnx2x_init_ops.h | 4 +-
drivers/net/ethernet/cavium/thunder/nic_main.c | 2 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
drivers/net/ethernet/ibm/ibmvnic.c | 3 +
drivers/net/ethernet/intel/i40e/i40e.h | 1 +
drivers/net/ethernet/intel/i40e/i40e_main.c | 45 +++++++----
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 53 +++---------
drivers/net/ethernet/intel/i40evf/i40evf_main.c | 5 +-
drivers/net/ethernet/sfc/ptp.c | 4 +-
drivers/net/ethernet/sfc/siena_sriov.c | 2 +-
drivers/net/ethernet/ti/davinci_emac.c | 16 +++-
drivers/net/phy/micrel.c | 5 +-
drivers/net/phy/phylink.c | 2 +-
drivers/net/tun.c | 5 ++
drivers/net/vmxnet3/vmxnet3_drv.c | 1 -
drivers/net/wireless/ath/ath10k/mac.c | 6 +-
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 ++-
drivers/net/wireless/ath/wcn36xx/dxe.c | 12 ++-
drivers/net/wireless/ath/wcn36xx/main.c | 4 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 44 +++++++---
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +++-----
drivers/net/wireless/marvell/mwifiex/pcie.c | 8 ++
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 ++--
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 ++-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 +++++------------
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +++-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 ++++--
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +++
drivers/net/wireless/rsi/rsi_main.h | 15 +++-
drivers/net/xen-netfront.c | 8 ++
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvme/host/rdma.c | 2 +
drivers/pci/controller/pci-aardvark.c | 23 +++---
drivers/pci/msi.c | 27 ++++---
drivers/pci/quirks.c | 7 ++
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 ++--
drivers/pinctrl/core.c | 2 +
drivers/platform/x86/hp_accel.c | 2 +
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 ++-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17042_battery.c | 8 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 +++--
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/scsi/advansys.c | 4 +-
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/lpfc/lpfc_sli.c | 1 +
drivers/scsi/qla2xxx/qla_gbl.h | 2 -
drivers/scsi/qla2xxx/qla_init.c | 4 +-
drivers/scsi/qla2xxx/qla_mr.c | 23 ------
drivers/scsi/qla2xxx/qla_os.c | 27 +------
drivers/scsi/qla2xxx/qla_target.c | 14 ++--
drivers/sh/maple/maple.c | 5 +-
drivers/soc/tegra/pmc.c | 4 +-
drivers/spi/spi-bcm-qspi.c | 5 +-
drivers/spi/spi-pl022.c | 5 +-
drivers/staging/erofs/unzip_pagevec.h | 14 ++--
drivers/staging/erofs/unzip_vle.c | 19 +++--
drivers/target/target_core_alua.c | 1 -
drivers/target/target_core_device.c | 2 +
drivers/target/target_core_internal.h | 1 +
drivers/target/target_core_transport.c | 76 +++++++++++++-----
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/serial_core.c | 16 +++-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/tty/tty_buffer.c | 3 +
drivers/usb/chipidea/core.c | 19 +++--
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/max3421-hcd.c | 25 ++----
drivers/usb/host/ohci-tmio.c | 2 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/tusb6010.c | 5 ++
drivers/usb/serial/keyspan.c | 15 ++--
drivers/usb/typec/tps6598x.c | 2 +-
drivers/video/backlight/backlight.c | 6 --
drivers/video/backlight/gpio_backlight.c | 24 +++++-
drivers/video/console/sticon.c | 12 +--
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/watchdog/omap_wdt.c | 6 +-
drivers/xen/balloon.c | 86 ++++++++++++++------
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/async-thread.c | 14 ++++
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 4 +-
fs/ext4/super.c | 9 +--
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/fuse/file.c | 7 +-
fs/jfs/jfs_mount.c | 51 +++++-------
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/pnfs_nfs.c | 4 +-
fs/nfs/write.c | 17 +---
fs/ocfs2/file.c | 8 +-
fs/orangefs/dcache.c | 4 +-
fs/quota/quota_tree.c | 15 ++++
fs/tracefs/inode.c | 3 +-
fs/udf/dir.c | 32 +++++++-
fs/udf/namei.c | 3 +
fs/udf/super.c | 2 +
include/linux/console.h | 2 +
include/linux/filter.h | 1 +
include/linux/libata.h | 2 +-
include/linux/lsm_hooks.h | 28 +++----
include/linux/pci.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched/task_stack.h | 4 +
include/linux/security.h | 28 +++----
include/linux/virtio_net.h | 7 +-
include/net/llc.h | 4 +-
include/net/sch_generic.h | 4 +
include/rdma/rdma_netlink.h | 2 +-
include/target/target_core_base.h | 6 +-
include/trace/events/f2fs.h | 12 +--
include/uapi/linux/pci_regs.h | 6 ++
ipc/util.c | 6 +-
kernel/bpf/core.c | 4 +-
kernel/cgroup/cgroup.c | 31 +++++++-
kernel/events/core.c | 10 +--
kernel/locking/lockdep.c | 2 +-
kernel/power/swap.c | 7 +-
kernel/sched/core.c | 3 +
kernel/signal.c | 18 +----
kernel/trace/tracing_map.c | 40 ++++++----
kernel/workqueue.c | 15 +++-
lib/decompress_unxz.c | 2 +-
lib/xz/xz_dec_lzma2.c | 21 ++++-
lib/xz/xz_dec_stream.c | 6 +-
mm/oom_kill.c | 23 +++---
mm/slab.h | 2 +-
mm/zsmalloc.c | 7 +-
net/9p/client.c | 2 +
net/batman-adv/fragmentation.c | 26 +++---
net/batman-adv/hard-interface.c | 3 +
net/batman-adv/multicast.c | 31 ++++++++
net/batman-adv/multicast.h | 15 ++++
net/batman-adv/soft-interface.c | 5 +-
net/bluetooth/l2cap_sock.c | 10 ++-
net/bluetooth/sco.c | 33 +++++---
net/core/dev.c | 2 +
net/core/stream.c | 3 -
net/core/sysctl_net_core.c | 2 +-
net/ipv4/tcp.c | 2 +-
net/ipv6/addrconf.c | 3 +
net/netfilter/nfnetlink_queue.c | 2 +-
net/nfc/core.c | 32 ++++----
net/nfc/nci/core.c | 11 ++-
net/sched/sch_generic.c | 9 +++
net/sched/sch_mq.c | 24 ++++++
net/sched/sch_mqprio.c | 23 ++++++
net/vmw_vsock/af_vsock.c | 2 +
net/wireless/util.c | 1 +
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/Kconfig | 3 +
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/security.c | 14 ++--
security/selinux/hooks.c | 36 ++++-----
security/smack/smackfs.c | 11 +--
sound/core/Makefile | 2 +
sound/core/oss/mixer_oss.c | 43 +++++++---
sound/core/timer.c | 17 ++--
sound/isa/Kconfig | 2 +-
sound/isa/gus/gus_dma.c | 2 +
sound/pci/Kconfig | 1 +
sound/pci/hda/hda_intel.c | 28 +++++--
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/codecs/cs42l42.c | 9 ++-
sound/soc/codecs/nau8824.c | 40 ++++++++++
sound/soc/soc-dapm.c | 29 +++++--
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/line6/driver.c | 14 ++--
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/testing/selftests/bpf/test_progs.c | 4 +-
353 files changed, 2182 insertions(+), 1165 deletions(-)
^ permalink raw reply [relevance 1%]
* [PATCH 4.19 000/321] 4.19.218-rc2 review
@ 2021-11-25 11:19 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-25 11:19 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 4.19.218 release.
There are 321 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 27 Nov 2021 11:17:26 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.218-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 4.19.218-rc2
Dmitry Osipenko <digetx@gmail.com>
soc/tegra: pmc: Fix imbalanced clock disabling in error code path
Nadav Amit <namit@vmware.com>
hugetlbfs: flush TLBs correctly after huge_pmd_unshare
Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
usb: max-3421: Use driver data instead of maintaining a list of bound devices
Takashi Iwai <tiwai@suse.de>
ASoC: DAPM: Cover regression by kctl change notification fix
Leon Romanovsky <leonro@nvidia.com>
RDMA/netlink: Add __maybe_unused to static inline in C file
Sven Eckelmann <sven@narfation.org>
batman-adv: Don't always reallocate the fragmentation skb head
Sven Eckelmann <sven@narfation.org>
batman-adv: Reserve needed_*room for fragments
Sven Eckelmann <sven@narfation.org>
batman-adv: Consider fragmentation for needed_headroom
Linus Lüssing <linus.luessing@c0d3.blue>
batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
Greg Thelen <gthelen@google.com>
perf/core: Avoid put_page() when GUP fails
hongao <hongao@uniontech.com>
drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors
Johan Hovold <johan@kernel.org>
drm/udl: fix control-message timeout
Nguyen Dinh Phi <phind.uet@gmail.com>
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
Sven Schnelle <svens@stackframe.org>
parisc/sticon: fix reverse colors
Nikolay Borisov <nborisov@suse.com>
btrfs: fix memory ordering between normal and ordered work functions
Jan Kara <jack@suse.cz>
udf: Fix crash after seekdir
Sean Christopherson <seanjc@google.com>
x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
Rustam Kovhaev <rkovhaev@gmail.com>
mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
Alexander Mikhalitsyn <alexander.mikhalitsyn@virtuozzo.com>
ipc: WARN if trying to remove ipc object which is absent
Nathan Chancellor <nathan@kernel.org>
hexagon: export raw I/O routines for modules
Nicolas Dichtel <nicolas.dichtel@6wind.com>
tun: fix bonding active backup with arp monitoring
Alexander Antonov <alexander.antonov@linux.intel.com>
perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
Alexander Antonov <alexander.antonov@linux.intel.com>
perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
Lin Ma <linma@zju.edu.cn>
NFC: reorder the logic in nfc_{un,}register_device
Lin Ma <linma@zju.edu.cn>
NFC: reorganize the functions in nci_request
Grzegorz Szczurek <grzegorzx.szczurek@intel.com>
i40e: Fix display error code in dmesg
Eryk Rybak <eryk.roch.rybak@intel.com>
i40e: Fix changing previously set num_queue_pairs for PFs
Michal Maloszewski <michal.maloszewski@intel.com>
i40e: Fix NULL ptr dereference on VSI filter sync
Eryk Rybak <eryk.roch.rybak@intel.com>
i40e: Fix correct max_pkt_size on VF RX queue
Jonathan Davies <jonathan.davies@nutanix.com>
net: virtio_net_hdr_to_skb: count transport header in UFO
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
Randy Dunlap <rdunlap@infradead.org>
mips: lantiq: add support for clk_get_parent()
Randy Dunlap <rdunlap@infradead.org>
mips: bcm63xx: add support for clk_get_parent()
Colin Ian King <colin.i.king@googlemail.com>
MIPS: generic/yamon-dt: fix uninitialized variable error
Surabhi Boob <surabhi.boob@intel.com>
iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
Nicholas Nunley <nicholas.d.nunley@intel.com>
iavf: check for null in iavf_fix_features
Pavel Skripkin <paskripkin@gmail.com>
net: bnx2x: fix variable dereferenced before check
Hans Verkuil <hverkuil-cisco@xs4all.nl>
drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
Vincent Donnefort <vincent.donnefort@arm.com>
sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
Randy Dunlap <rdunlap@infradead.org>
mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
Randy Dunlap <rdunlap@infradead.org>
sh: define __BIG_ENDIAN for math-emu
Randy Dunlap <rdunlap@infradead.org>
sh: fix kconfig unmet dependency warning for FRAME_POINTER
Gao Xiang <hsiangkao@linux.alibaba.com>
f2fs: fix up f2fs_lookup tracepoints
Lu Wei <luwei32@huawei.com>
maple: fix wrong return value of maple_bus_init().
Nick Desaulniers <ndesaulniers@google.com>
sh: check return code of request_irq
Michael Ellerman <mpe@ellerman.id.au>
powerpc/dcr: Use cmplwi instead of 3-argument cmpli
Chengfeng Ye <cyeaa@connect.ust.hk>
ALSA: gus: fix null pointer dereference on pointer block
Anatolij Gustschin <agust@denx.de>
powerpc/5200: dts: fix memory node unit name
Mike Christie <michael.christie@oracle.com>
scsi: target: Fix alua_tg_pt_gps_count tracking
Mike Christie <michael.christie@oracle.com>
scsi: target: Fix ordered tag handling
Bart Van Assche <bvanassche@acm.org>
MIPS: sni: Fix the build
Guanghui Feng <guanghuifeng@linux.alibaba.com>
tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
Randy Dunlap <rdunlap@infradead.org>
ALSA: ISA: not for M68K
Yang Yingliang <yangyingliang@huawei.com>
usb: host: ohci-tmio: check return value after calling platform_get_resource()
Roger Quadros <rogerq@kernel.org>
ARM: dts: omap: fix gpmc,mux-add-data type
Luis Chamberlain <mcgrof@kernel.org>
firmware_loader: fix pre-allocated buf built-in firmware use
Guo Zhi <qtxuning1999@sjtu.edu.cn>
scsi: advansys: Fix kernel pointer leak
Hans de Goede <hdegoede@redhat.com>
ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
Michael Walle <michael@walle.cc>
arm64: dts: freescale: fix arm,sp805 compatible string
Sven Peter <sven@svenpeter.dev>
usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
Yang Yingliang <yangyingliang@huawei.com>
usb: musb: tusb6010: check return value after calling platform_get_resource()
Michael Walle <michael@walle.cc>
arm64: dts: hisilicon: fix arm,sp805 compatible string
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
Michal Simek <michal.simek@xilinx.com>
arm64: zynqmp: Fix serial compatible string
Amit Kumar Mahapatra <amit.kumar-mahapatra@xilinx.com>
arm64: zynqmp: Do not duplicate flash partition label property
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: fix unsafe pagevec reuse of hooked pclusters
Yue Hu <huyue2@yulong.com>
erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
Marc Zyngier <maz@kernel.org>
PCI: Add MSI masking quirk for Nvidia ION AHCI
Marc Zyngier <maz@kernel.org>
PCI/MSI: Deal with devices lying about their MSI mask capability
Thomas Gleixner <tglx@linutronix.de>
PCI/MSI: Destroy sysfs before freeing entries
Sven Schnelle <svens@stackframe.org>
parisc/entry: fix trace test in syscall exit path
Kees Cook <keescook@chromium.org>
fortify: Explicitly disable Clang support
Shaoying Xu <shaoyi@amazon.com>
ext4: fix lazy initialization next schedule time computation in more granular unit
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Miklos Szeredi <mszeredi@redhat.com>
fuse: truncate pagecache on atomic_o_trunc
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Peter Ujfalusi <peter.ujfalusi@ti.com>
backlight: gpio-backlight: Correct initial power state handling
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/security: Add a helper to query stf_barrier type
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Validate branch ranges
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/lib: Add helper to check if offset is within conditional branch range
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Leon Romanovsky <leonro@nvidia.com>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
Dongli Zhang <dongli.zhang@oracle.com>
vmxnet3: do not stop tx queues after netif_device_detach()
Walter Stoll <walter.stoll@duagon.com>
watchdog: Fix OMAP watchdog early handling
Thomas Perrot <thomas.perrot@bootlin.com>
spi: spl022: fix Microwire full duplex mode
Dongli Zhang <dongli.zhang@oracle.com>
xen/netfront: stop tx queues during live migration
Lorenz Bauer <lmb@cloudflare.com>
bpf: Prevent increasing bpf_jit_limit above max
Bryant Mairs <bryant@mai.rs>
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Randy Dunlap <rdunlap@infradead.org>
mmc: winbond: don't build on M68K
Arnd Bergmann <arnd@arndb.de>
hyperv/vmbus: include linux/bitops.h
Erik Ekman <erik@kryo.se>
sfc: Don't use netif_info before net_device setup
Zheyu Ma <zheyuma97@gmail.com>
cavium: Fix return values of the probe function
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: qla2xxx: Fix unmap of already freed sgl
Zheyu Ma <zheyuma97@gmail.com>
cavium: Return negative value when pci_alloc_irq_vectors() fails
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for selinux checks
Todd Kjos <tkjos@google.com>
binder: use euid from cred instead of using task
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 ++
.../bindings/regulator/samsung,s5m8767.txt | 23 +++---
Makefile | 4 +-
arch/arm/Makefile | 22 ++---
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/omap-gpmc-smsc9221.dtsi | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/omap3-overo-tobiduo-common.dtsi | 2 +-
arch/arm/include/asm/tlb.h | 8 ++
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/freescale/fsl-ls1088a.dtsi | 16 ++--
arch/arm64/boot/dts/freescale/fsl-ls208xa.dtsi | 16 ++--
arch/arm64/boot/dts/hisilicon/hi3660.dtsi | 4 +-
arch/arm64/boot/dts/hisilicon/hi6220.dtsi | 2 +-
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
.../boot/dts/xilinx/zynqmp-zc1751-xm016-dc2.dts | 4 +-
arch/arm64/boot/dts/xilinx/zynqmp.dtsi | 4 +-
arch/arm64/include/asm/pgtable.h | 12 ++-
arch/hexagon/lib/io.c | 4 +
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/include/asm/tlb.h | 10 +++
arch/ia64/kernel/kprobes.c | 9 ++-
arch/m68k/Kconfig.machine | 1 +
arch/mips/Kconfig | 4 +
arch/mips/bcm63xx/clk.c | 6 ++
arch/mips/generic/yamon-dt.c | 2 +-
arch/mips/include/asm/mips-cm.h | 12 +--
arch/mips/kernel/mips-cm.c | 21 +++--
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 ---
arch/mips/lantiq/clk.c | 6 ++
arch/mips/lantiq/xway/dma.c | 14 ++--
arch/mips/sni/time.c | 4 +-
arch/parisc/kernel/entry.S | 4 +-
arch/parisc/kernel/smp.c | 19 ++++-
arch/parisc/kernel/unwind.c | 21 +++--
arch/parisc/mm/init.c | 4 +-
arch/powerpc/boot/dts/charon.dts | 2 +-
arch/powerpc/boot/dts/digsy_mtc.dts | 2 +-
arch/powerpc/boot/dts/lite5200.dts | 2 +-
arch/powerpc/boot/dts/lite5200b.dts | 2 +-
arch/powerpc/boot/dts/media5200.dts | 2 +-
arch/powerpc/boot/dts/mpc5200b.dtsi | 2 +-
arch/powerpc/boot/dts/o2d.dts | 2 +-
arch/powerpc/boot/dts/o2d.dtsi | 2 +-
arch/powerpc/boot/dts/o2dnt2.dts | 2 +-
arch/powerpc/boot/dts/o3dnt.dts | 2 +-
arch/powerpc/boot/dts/pcm032.dts | 2 +-
arch/powerpc/boot/dts/tqm5200.dts | 2 +-
arch/powerpc/include/asm/code-patching.h | 1 +
arch/powerpc/include/asm/security_features.h | 5 ++
arch/powerpc/kernel/security.c | 5 ++
arch/powerpc/lib/code-patching.c | 7 +-
arch/powerpc/net/bpf_jit.h | 33 +++++---
arch/powerpc/net/bpf_jit64.h | 8 +-
arch/powerpc/net/bpf_jit_comp64.c | 93 ++++++++++++++++++----
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 3 +-
arch/powerpc/sysdev/dcr-low.S | 2 +-
arch/s390/include/asm/tlb.h | 16 ++++
arch/s390/kvm/priv.c | 2 +
arch/s390/mm/gmap.c | 5 +-
arch/sh/Kconfig.debug | 1 +
arch/sh/include/asm/sfp-machine.h | 8 ++
arch/sh/include/asm/tlb.h | 9 +++
arch/sh/kernel/cpu/sh4a/smp-shx3.c | 5 +-
arch/um/include/asm/tlb.h | 12 +++
arch/x86/events/intel/uncore_snbep.c | 4 +
arch/x86/hyperv/hv_init.c | 8 +-
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 ++++++++--
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/irq.c | 4 +-
arch/x86/mm/mem_encrypt_identity.c | 9 +++
crypto/pcrypt.c | 12 ++-
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +--
drivers/acpi/acpica/hwxfsleep.c | 7 ++
drivers/acpi/battery.c | 2 +-
drivers/acpi/pmic/intel_pmic.c | 51 ++++++------
drivers/android/binder.c | 20 +++--
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 ++
drivers/auxdisplay/ht16k33.c | 66 ++++++++-------
drivers/auxdisplay/img-ascii-lcd.c | 10 +++
drivers/base/firmware_loader/main.c | 13 +--
drivers/block/zram/zram_drv.c | 2 +-
drivers/char/hw_random/mtk-rng.c | 9 ++-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/clocksource/Kconfig | 1 +
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 +++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 ++
drivers/crypto/s5p-sss.c | 2 +
drivers/dma/at_xdmac.c | 2 +-
drivers/dma/dmaengine.h | 2 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci_checker.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 1 +
drivers/gpu/drm/drm_panel_orientation_quirks.c | 13 +++
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/msm_gem.c | 4 +-
.../gpu/drm/nouveau/nvkm/engine/disp/hdmigv100.c | 1 -
drivers/gpu/drm/udl/udl_connector.c | 2 +-
drivers/hv/hyperv_vmbus.h | 1 +
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +++++-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/dac/ad5446.c | 9 ++-
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 ++--
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/mouse/elantech.c | 13 +++
drivers/input/serio/i8042-x86ia64io.h | 14 ++++
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-s3c24xx.c | 22 ++++-
drivers/media/dvb-frontends/mn88443x.c | 18 ++++-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++++++-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++++---
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 ++
drivers/memory/fsl_ifc.c | 13 ++-
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mmc/host/Kconfig | 2 +-
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/mxs-mmc.c | 10 +++
drivers/mmc/host/sdhci-omap.c | 3 +-
drivers/mtd/spi-nor/hisi-sfc.c | 1 -
drivers/net/bonding/bond_sysfs_slave.c | 36 +++------
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 ++
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 ++++-
.../net/ethernet/broadcom/bnx2x/bnx2x_init_ops.h | 4 +-
drivers/net/ethernet/cavium/thunder/nic_main.c | 2 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
drivers/net/ethernet/ibm/ibmvnic.c | 3 +
drivers/net/ethernet/intel/i40e/i40e.h | 1 +
drivers/net/ethernet/intel/i40e/i40e_main.c | 45 +++++++----
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 53 +++---------
drivers/net/ethernet/intel/i40evf/i40evf_main.c | 5 +-
drivers/net/ethernet/sfc/ptp.c | 4 +-
drivers/net/ethernet/sfc/siena_sriov.c | 2 +-
drivers/net/ethernet/ti/davinci_emac.c | 16 +++-
drivers/net/phy/micrel.c | 5 +-
drivers/net/phy/phylink.c | 2 +-
drivers/net/tun.c | 5 ++
drivers/net/vmxnet3/vmxnet3_drv.c | 1 -
drivers/net/wireless/ath/ath10k/mac.c | 6 +-
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 ++-
drivers/net/wireless/ath/wcn36xx/dxe.c | 12 ++-
drivers/net/wireless/ath/wcn36xx/main.c | 4 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 44 +++++++---
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +++-----
drivers/net/wireless/marvell/mwifiex/pcie.c | 8 ++
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 ++--
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 ++-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 +++++------------
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +++-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 ++++--
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +++
drivers/net/wireless/rsi/rsi_main.h | 15 +++-
drivers/net/xen-netfront.c | 8 ++
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvme/host/rdma.c | 2 +
drivers/pci/controller/pci-aardvark.c | 23 +++---
drivers/pci/msi.c | 27 ++++---
drivers/pci/quirks.c | 7 ++
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 ++--
drivers/pinctrl/core.c | 2 +
drivers/platform/x86/hp_accel.c | 2 +
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 ++-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17042_battery.c | 8 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 +++--
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/scsi/advansys.c | 4 +-
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/lpfc/lpfc_sli.c | 1 +
drivers/scsi/qla2xxx/qla_gbl.h | 2 -
drivers/scsi/qla2xxx/qla_init.c | 4 +-
drivers/scsi/qla2xxx/qla_mr.c | 23 ------
drivers/scsi/qla2xxx/qla_os.c | 27 +------
drivers/scsi/qla2xxx/qla_target.c | 14 ++--
drivers/sh/maple/maple.c | 5 +-
drivers/soc/tegra/pmc.c | 4 +-
drivers/spi/spi-bcm-qspi.c | 5 +-
drivers/spi/spi-pl022.c | 5 +-
drivers/staging/erofs/unzip_pagevec.h | 14 ++--
drivers/staging/erofs/unzip_vle.c | 19 +++--
drivers/target/target_core_alua.c | 1 -
drivers/target/target_core_device.c | 2 +
drivers/target/target_core_internal.h | 1 +
drivers/target/target_core_transport.c | 76 +++++++++++++-----
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/serial_core.c | 16 +++-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/tty/tty_buffer.c | 3 +
drivers/usb/chipidea/core.c | 19 +++--
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/max3421-hcd.c | 25 ++----
drivers/usb/host/ohci-tmio.c | 2 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/tusb6010.c | 5 ++
drivers/usb/serial/keyspan.c | 15 ++--
drivers/usb/typec/tps6598x.c | 2 +-
drivers/video/backlight/backlight.c | 6 --
drivers/video/backlight/gpio_backlight.c | 24 +++++-
drivers/video/console/sticon.c | 12 +--
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/watchdog/omap_wdt.c | 6 +-
drivers/xen/balloon.c | 86 ++++++++++++++------
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/async-thread.c | 14 ++++
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 4 +-
fs/ext4/super.c | 9 +--
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/fuse/file.c | 7 +-
fs/jfs/jfs_mount.c | 51 +++++-------
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/pnfs_nfs.c | 4 +-
fs/nfs/write.c | 17 +---
fs/ocfs2/file.c | 8 +-
fs/orangefs/dcache.c | 4 +-
fs/quota/quota_tree.c | 15 ++++
fs/tracefs/inode.c | 3 +-
fs/udf/dir.c | 32 +++++++-
fs/udf/namei.c | 3 +
fs/udf/super.c | 2 +
include/asm-generic/tlb.h | 2 +
include/linux/console.h | 2 +
include/linux/filter.h | 1 +
include/linux/libata.h | 2 +-
include/linux/lsm_hooks.h | 28 +++----
include/linux/pci.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched/task_stack.h | 4 +
include/linux/security.h | 28 +++----
include/linux/virtio_net.h | 7 +-
include/net/llc.h | 4 +-
include/net/sch_generic.h | 4 +
include/rdma/rdma_netlink.h | 2 +-
include/target/target_core_base.h | 6 +-
include/trace/events/f2fs.h | 12 +--
include/uapi/linux/pci_regs.h | 6 ++
ipc/util.c | 6 +-
kernel/bpf/core.c | 4 +-
kernel/cgroup/cgroup.c | 31 +++++++-
kernel/events/core.c | 10 +--
kernel/locking/lockdep.c | 2 +-
kernel/power/swap.c | 7 +-
kernel/sched/core.c | 3 +
kernel/signal.c | 18 +----
kernel/trace/tracing_map.c | 40 ++++++----
kernel/workqueue.c | 15 +++-
lib/decompress_unxz.c | 2 +-
lib/xz/xz_dec_lzma2.c | 21 ++++-
lib/xz/xz_dec_stream.c | 6 +-
mm/hugetlb.c | 23 +++++-
mm/memory.c | 10 +++
mm/oom_kill.c | 23 +++---
mm/slab.h | 2 +-
mm/zsmalloc.c | 7 +-
net/9p/client.c | 2 +
net/batman-adv/fragmentation.c | 26 +++---
net/batman-adv/hard-interface.c | 3 +
net/batman-adv/multicast.c | 31 ++++++++
net/batman-adv/multicast.h | 15 ++++
net/batman-adv/soft-interface.c | 5 +-
net/bluetooth/l2cap_sock.c | 10 ++-
net/bluetooth/sco.c | 33 +++++---
net/core/dev.c | 2 +
net/core/stream.c | 3 -
net/core/sysctl_net_core.c | 2 +-
net/ipv4/tcp.c | 2 +-
net/ipv6/addrconf.c | 3 +
net/netfilter/nfnetlink_queue.c | 2 +-
net/nfc/core.c | 32 ++++----
net/nfc/nci/core.c | 11 ++-
net/sched/sch_generic.c | 9 +++
net/sched/sch_mq.c | 24 ++++++
net/sched/sch_mqprio.c | 23 ++++++
net/vmw_vsock/af_vsock.c | 2 +
net/wireless/util.c | 1 +
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/Kconfig | 3 +
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/security.c | 14 ++--
security/selinux/hooks.c | 36 ++++-----
security/smack/smackfs.c | 11 +--
sound/core/Makefile | 2 +
sound/core/oss/mixer_oss.c | 43 +++++++---
sound/core/timer.c | 17 ++--
sound/isa/Kconfig | 2 +-
sound/isa/gus/gus_dma.c | 2 +
sound/pci/Kconfig | 1 +
sound/pci/hda/hda_intel.c | 28 +++++--
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/codecs/cs42l42.c | 9 ++-
sound/soc/codecs/nau8824.c | 40 ++++++++++
sound/soc/soc-dapm.c | 29 +++++--
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/line6/driver.c | 14 ++--
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/testing/selftests/bpf/test_progs.c | 4 +-
361 files changed, 2268 insertions(+), 1169 deletions(-)
^ permalink raw reply [relevance 1%]
* [PATCH 4.19 127/323] Bluetooth: fix init and cleanup of sco_conn.timeout_work
2021-11-24 11:53 1% [PATCH 4.19 000/323] 4.19.218-rc1 review Greg Kroah-Hartman
@ 2021-11-24 11:55 11% ` Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-24 11:55 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 49d8a5606428ca0962d09050a5af81461ff90fbb ]
Before freeing struct sco_conn, all delayed timeout work should be
cancelled. Otherwise, sco_sock_timeout could potentially use the
sco_conn after it has been freed.
Additionally, sco_conn.timeout_work should be initialized when the
connection is allocated, not when the channel is added. This is
because an sco_conn can create channels with multiple sockets over its
lifetime, which happens if sockets are released but the connection
isn't deleted.
Fixes: ba316be1b6a0 ("Bluetooth: schedule SCO timeouts with delayed_work")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 9 ++++-----
1 file changed, 4 insertions(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index d052b454dc4e1..1e0a1c0a56b57 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -133,6 +133,7 @@ static struct sco_conn *sco_conn_add(struct hci_conn *hcon)
return NULL;
spin_lock_init(&conn->lock);
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
hcon->sco_data = conn;
conn->hcon = hcon;
@@ -196,11 +197,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_chan_del(sk, err);
bh_unlock_sock(sk);
sock_put(sk);
-
- /* Ensure no more work items will run before freeing conn. */
- cancel_delayed_work_sync(&conn->timeout_work);
}
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
+
hcon->sco_data = NULL;
kfree(conn);
}
@@ -213,8 +214,6 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
- INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
-
if (parent)
bt_accept_enqueue(parent, sk, true);
}
--
2.33.0
^ permalink raw reply related [relevance 11%]
* [PATCH 4.19 000/323] 4.19.218-rc1 review
@ 2021-11-24 11:53 1% Greg Kroah-Hartman
2021-11-24 11:55 11% ` [PATCH 4.19 127/323] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
0 siblings, 1 reply; 200+ results
From: Greg Kroah-Hartman @ 2021-11-24 11:53 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 4.19.218 release.
There are 323 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Fri, 26 Nov 2021 11:56:36 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.218-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 4.19.218-rc1
Nadav Amit <namit@vmware.com>
hugetlbfs: flush TLBs correctly after huge_pmd_unshare
Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
usb: max-3421: Use driver data instead of maintaining a list of bound devices
Takashi Iwai <tiwai@suse.de>
ASoC: DAPM: Cover regression by kctl change notification fix
Leon Romanovsky <leonro@nvidia.com>
RDMA/netlink: Add __maybe_unused to static inline in C file
Sven Eckelmann <sven@narfation.org>
batman-adv: Don't always reallocate the fragmentation skb head
Sven Eckelmann <sven@narfation.org>
batman-adv: Reserve needed_*room for fragments
Sven Eckelmann <sven@narfation.org>
batman-adv: Consider fragmentation for needed_headroom
Linus Lüssing <linus.luessing@c0d3.blue>
batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
Greg Thelen <gthelen@google.com>
perf/core: Avoid put_page() when GUP fails
hongao <hongao@uniontech.com>
drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors
Johan Hovold <johan@kernel.org>
drm/udl: fix control-message timeout
Nguyen Dinh Phi <phind.uet@gmail.com>
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
Sven Schnelle <svens@stackframe.org>
parisc/sticon: fix reverse colors
Nikolay Borisov <nborisov@suse.com>
btrfs: fix memory ordering between normal and ordered work functions
Jan Kara <jack@suse.cz>
udf: Fix crash after seekdir
Sean Christopherson <seanjc@google.com>
x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
Rustam Kovhaev <rkovhaev@gmail.com>
mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
Alexander Mikhalitsyn <alexander.mikhalitsyn@virtuozzo.com>
ipc: WARN if trying to remove ipc object which is absent
Nathan Chancellor <nathan@kernel.org>
hexagon: export raw I/O routines for modules
Nicolas Dichtel <nicolas.dichtel@6wind.com>
tun: fix bonding active backup with arp monitoring
Alexander Antonov <alexander.antonov@linux.intel.com>
perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
Alexander Antonov <alexander.antonov@linux.intel.com>
perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
Sohaib Mohamed <sohaib.amhmd@gmail.com>
perf bench: Fix two memory leaks detected with ASan
Lin Ma <linma@zju.edu.cn>
NFC: reorder the logic in nfc_{un,}register_device
Lin Ma <linma@zju.edu.cn>
NFC: reorganize the functions in nci_request
Grzegorz Szczurek <grzegorzx.szczurek@intel.com>
i40e: Fix display error code in dmesg
Eryk Rybak <eryk.roch.rybak@intel.com>
i40e: Fix changing previously set num_queue_pairs for PFs
Michal Maloszewski <michal.maloszewski@intel.com>
i40e: Fix NULL ptr dereference on VSI filter sync
Eryk Rybak <eryk.roch.rybak@intel.com>
i40e: Fix correct max_pkt_size on VF RX queue
Jonathan Davies <jonathan.davies@nutanix.com>
net: virtio_net_hdr_to_skb: count transport header in UFO
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
Randy Dunlap <rdunlap@infradead.org>
mips: lantiq: add support for clk_get_parent()
Randy Dunlap <rdunlap@infradead.org>
mips: bcm63xx: add support for clk_get_parent()
Colin Ian King <colin.i.king@googlemail.com>
MIPS: generic/yamon-dt: fix uninitialized variable error
Surabhi Boob <surabhi.boob@intel.com>
iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
Nicholas Nunley <nicholas.d.nunley@intel.com>
iavf: check for null in iavf_fix_features
Pavel Skripkin <paskripkin@gmail.com>
net: bnx2x: fix variable dereferenced before check
Hans Verkuil <hverkuil-cisco@xs4all.nl>
drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
Vincent Donnefort <vincent.donnefort@arm.com>
sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
Randy Dunlap <rdunlap@infradead.org>
mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
Randy Dunlap <rdunlap@infradead.org>
sh: define __BIG_ENDIAN for math-emu
Randy Dunlap <rdunlap@infradead.org>
sh: fix kconfig unmet dependency warning for FRAME_POINTER
Gao Xiang <hsiangkao@linux.alibaba.com>
f2fs: fix up f2fs_lookup tracepoints
Lu Wei <luwei32@huawei.com>
maple: fix wrong return value of maple_bus_init().
Nick Desaulniers <ndesaulniers@google.com>
sh: check return code of request_irq
Michael Ellerman <mpe@ellerman.id.au>
powerpc/dcr: Use cmplwi instead of 3-argument cmpli
Chengfeng Ye <cyeaa@connect.ust.hk>
ALSA: gus: fix null pointer dereference on pointer block
Anatolij Gustschin <agust@denx.de>
powerpc/5200: dts: fix memory node unit name
Mike Christie <michael.christie@oracle.com>
scsi: target: Fix alua_tg_pt_gps_count tracking
Mike Christie <michael.christie@oracle.com>
scsi: target: Fix ordered tag handling
Bart Van Assche <bvanassche@acm.org>
MIPS: sni: Fix the build
Guanghui Feng <guanghuifeng@linux.alibaba.com>
tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
Randy Dunlap <rdunlap@infradead.org>
ALSA: ISA: not for M68K
Yang Yingliang <yangyingliang@huawei.com>
usb: host: ohci-tmio: check return value after calling platform_get_resource()
Roger Quadros <rogerq@kernel.org>
ARM: dts: omap: fix gpmc,mux-add-data type
Luis Chamberlain <mcgrof@kernel.org>
firmware_loader: fix pre-allocated buf built-in firmware use
Guo Zhi <qtxuning1999@sjtu.edu.cn>
scsi: advansys: Fix kernel pointer leak
Hans de Goede <hdegoede@redhat.com>
ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
Michael Walle <michael@walle.cc>
arm64: dts: freescale: fix arm,sp805 compatible string
Sven Peter <sven@svenpeter.dev>
usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
Yang Yingliang <yangyingliang@huawei.com>
usb: musb: tusb6010: check return value after calling platform_get_resource()
Michael Walle <michael@walle.cc>
arm64: dts: hisilicon: fix arm,sp805 compatible string
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
Michal Simek <michal.simek@xilinx.com>
arm64: zynqmp: Fix serial compatible string
Amit Kumar Mahapatra <amit.kumar-mahapatra@xilinx.com>
arm64: zynqmp: Do not duplicate flash partition label property
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: fix unsafe pagevec reuse of hooked pclusters
Yue Hu <huyue2@yulong.com>
erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
Marc Zyngier <maz@kernel.org>
PCI: Add MSI masking quirk for Nvidia ION AHCI
Marc Zyngier <maz@kernel.org>
PCI/MSI: Deal with devices lying about their MSI mask capability
Thomas Gleixner <tglx@linutronix.de>
PCI/MSI: Destroy sysfs before freeing entries
Sven Schnelle <svens@stackframe.org>
parisc/entry: fix trace test in syscall exit path
Kees Cook <keescook@chromium.org>
fortify: Explicitly disable Clang support
Shaoying Xu <shaoyi@amazon.com>
ext4: fix lazy initialization next schedule time computation in more granular unit
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Miklos Szeredi <mszeredi@redhat.com>
fuse: truncate pagecache on atomic_o_trunc
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Peter Ujfalusi <peter.ujfalusi@ti.com>
backlight: gpio-backlight: Correct initial power state handling
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/security: Add a helper to query stf_barrier type
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Validate branch ranges
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/lib: Add helper to check if offset is within conditional branch range
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Ziyang Xuan <william.xuanziyang@huawei.com>
net: vlan: fix a UAF in vlan_dev_real_dev()
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Leon Romanovsky <leonro@nvidia.com>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
Dongli Zhang <dongli.zhang@oracle.com>
vmxnet3: do not stop tx queues after netif_device_detach()
Walter Stoll <walter.stoll@duagon.com>
watchdog: Fix OMAP watchdog early handling
Thomas Perrot <thomas.perrot@bootlin.com>
spi: spl022: fix Microwire full duplex mode
Dongli Zhang <dongli.zhang@oracle.com>
xen/netfront: stop tx queues during live migration
Lorenz Bauer <lmb@cloudflare.com>
bpf: Prevent increasing bpf_jit_limit above max
Bryant Mairs <bryant@mai.rs>
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Randy Dunlap <rdunlap@infradead.org>
mmc: winbond: don't build on M68K
Arnd Bergmann <arnd@arndb.de>
hyperv/vmbus: include linux/bitops.h
Erik Ekman <erik@kryo.se>
sfc: Don't use netif_info before net_device setup
Zheyu Ma <zheyuma97@gmail.com>
cavium: Fix return values of the probe function
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: qla2xxx: Fix unmap of already freed sgl
Zheyu Ma <zheyuma97@gmail.com>
cavium: Return negative value when pci_alloc_irq_vectors() fails
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix page stealing
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for selinux checks
Todd Kjos <tkjos@google.com>
binder: use euid from cred instead of using task
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 ++
.../bindings/regulator/samsung,s5m8767.txt | 23 +++---
Makefile | 4 +-
arch/arm/Makefile | 22 ++---
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/omap-gpmc-smsc9221.dtsi | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/omap3-overo-tobiduo-common.dtsi | 2 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/freescale/fsl-ls1088a.dtsi | 16 ++--
arch/arm64/boot/dts/freescale/fsl-ls208xa.dtsi | 16 ++--
arch/arm64/boot/dts/hisilicon/hi3660.dtsi | 4 +-
arch/arm64/boot/dts/hisilicon/hi6220.dtsi | 2 +-
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
.../boot/dts/xilinx/zynqmp-zc1751-xm016-dc2.dts | 4 +-
arch/arm64/boot/dts/xilinx/zynqmp.dtsi | 4 +-
arch/arm64/include/asm/pgtable.h | 12 ++-
arch/hexagon/lib/io.c | 4 +
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/kernel/kprobes.c | 9 ++-
arch/m68k/Kconfig.machine | 1 +
arch/mips/Kconfig | 4 +
arch/mips/bcm63xx/clk.c | 6 ++
arch/mips/generic/yamon-dt.c | 2 +-
arch/mips/include/asm/mips-cm.h | 12 +--
arch/mips/kernel/mips-cm.c | 21 +++--
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 ---
arch/mips/lantiq/clk.c | 6 ++
arch/mips/lantiq/xway/dma.c | 14 ++--
arch/mips/sni/time.c | 4 +-
arch/parisc/kernel/entry.S | 4 +-
arch/parisc/kernel/smp.c | 19 ++++-
arch/parisc/kernel/unwind.c | 21 +++--
arch/parisc/mm/init.c | 4 +-
arch/powerpc/boot/dts/charon.dts | 2 +-
arch/powerpc/boot/dts/digsy_mtc.dts | 2 +-
arch/powerpc/boot/dts/lite5200.dts | 2 +-
arch/powerpc/boot/dts/lite5200b.dts | 2 +-
arch/powerpc/boot/dts/media5200.dts | 2 +-
arch/powerpc/boot/dts/mpc5200b.dtsi | 2 +-
arch/powerpc/boot/dts/o2d.dts | 2 +-
arch/powerpc/boot/dts/o2d.dtsi | 2 +-
arch/powerpc/boot/dts/o2dnt2.dts | 2 +-
arch/powerpc/boot/dts/o3dnt.dts | 2 +-
arch/powerpc/boot/dts/pcm032.dts | 2 +-
arch/powerpc/boot/dts/tqm5200.dts | 2 +-
arch/powerpc/include/asm/code-patching.h | 1 +
arch/powerpc/include/asm/security_features.h | 5 ++
arch/powerpc/kernel/security.c | 5 ++
arch/powerpc/lib/code-patching.c | 7 +-
arch/powerpc/net/bpf_jit.h | 33 +++++---
arch/powerpc/net/bpf_jit64.h | 8 +-
arch/powerpc/net/bpf_jit_comp64.c | 93 ++++++++++++++++++----
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 3 +-
arch/powerpc/sysdev/dcr-low.S | 2 +-
arch/s390/kvm/priv.c | 2 +
arch/s390/mm/gmap.c | 5 +-
arch/sh/Kconfig.debug | 1 +
arch/sh/include/asm/sfp-machine.h | 8 ++
arch/sh/kernel/cpu/sh4a/smp-shx3.c | 5 +-
arch/x86/events/intel/uncore_snbep.c | 4 +
arch/x86/hyperv/hv_init.c | 8 +-
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 ++++++++--
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/irq.c | 4 +-
arch/x86/mm/mem_encrypt_identity.c | 9 +++
crypto/pcrypt.c | 12 ++-
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +--
drivers/acpi/acpica/hwxfsleep.c | 7 ++
drivers/acpi/battery.c | 2 +-
drivers/acpi/pmic/intel_pmic.c | 51 ++++++------
drivers/android/binder.c | 20 +++--
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 ++
drivers/auxdisplay/ht16k33.c | 66 ++++++++-------
drivers/auxdisplay/img-ascii-lcd.c | 10 +++
drivers/base/firmware_loader/main.c | 13 +--
drivers/block/zram/zram_drv.c | 2 +-
drivers/char/hw_random/mtk-rng.c | 9 ++-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/clocksource/Kconfig | 1 +
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 +++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 ++
drivers/crypto/s5p-sss.c | 2 +
drivers/dma/at_xdmac.c | 2 +-
drivers/dma/dmaengine.h | 2 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci_checker.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 1 +
drivers/gpu/drm/drm_panel_orientation_quirks.c | 13 +++
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/msm_gem.c | 4 +-
.../gpu/drm/nouveau/nvkm/engine/disp/hdmigv100.c | 1 -
drivers/gpu/drm/udl/udl_connector.c | 2 +-
drivers/hv/hyperv_vmbus.h | 1 +
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +++++-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/dac/ad5446.c | 9 ++-
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 ++--
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/mouse/elantech.c | 13 +++
drivers/input/serio/i8042-x86ia64io.h | 14 ++++
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-s3c24xx.c | 22 ++++-
drivers/media/dvb-frontends/mn88443x.c | 18 ++++-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++++++-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++++---
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 ++
drivers/memory/fsl_ifc.c | 13 ++-
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mmc/host/Kconfig | 2 +-
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/mxs-mmc.c | 10 +++
drivers/mmc/host/sdhci-omap.c | 3 +-
drivers/mtd/spi-nor/hisi-sfc.c | 1 -
drivers/net/bonding/bond_sysfs_slave.c | 36 +++------
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 ++
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 ++++-
.../net/ethernet/broadcom/bnx2x/bnx2x_init_ops.h | 4 +-
drivers/net/ethernet/cavium/thunder/nic_main.c | 2 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
drivers/net/ethernet/ibm/ibmvnic.c | 3 +
drivers/net/ethernet/intel/i40e/i40e.h | 1 +
drivers/net/ethernet/intel/i40e/i40e_main.c | 45 +++++++----
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 53 +++---------
drivers/net/ethernet/intel/i40evf/i40evf_main.c | 5 +-
drivers/net/ethernet/sfc/ptp.c | 4 +-
drivers/net/ethernet/sfc/siena_sriov.c | 2 +-
drivers/net/ethernet/ti/davinci_emac.c | 16 +++-
drivers/net/phy/micrel.c | 5 +-
drivers/net/phy/phylink.c | 2 +-
drivers/net/tun.c | 5 ++
drivers/net/vmxnet3/vmxnet3_drv.c | 1 -
drivers/net/wireless/ath/ath10k/mac.c | 6 +-
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 ++-
drivers/net/wireless/ath/wcn36xx/dxe.c | 12 ++-
drivers/net/wireless/ath/wcn36xx/main.c | 4 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 44 +++++++---
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +++-----
drivers/net/wireless/marvell/mwifiex/pcie.c | 8 ++
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 ++--
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 ++-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 +++++------------
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +++-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 ++++--
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +++
drivers/net/wireless/rsi/rsi_main.h | 15 +++-
drivers/net/xen-netfront.c | 8 ++
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvme/host/rdma.c | 2 +
drivers/pci/controller/pci-aardvark.c | 23 +++---
drivers/pci/msi.c | 27 ++++---
drivers/pci/quirks.c | 7 ++
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 ++--
drivers/pinctrl/core.c | 2 +
drivers/platform/x86/hp_accel.c | 2 +
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 ++-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17042_battery.c | 8 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 +++--
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/scsi/advansys.c | 4 +-
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/lpfc/lpfc_sli.c | 1 +
drivers/scsi/qla2xxx/qla_gbl.h | 2 -
drivers/scsi/qla2xxx/qla_init.c | 4 +-
drivers/scsi/qla2xxx/qla_mr.c | 23 ------
drivers/scsi/qla2xxx/qla_os.c | 27 +------
drivers/scsi/qla2xxx/qla_target.c | 14 ++--
drivers/sh/maple/maple.c | 5 +-
drivers/soc/tegra/pmc.c | 2 +-
drivers/spi/spi-bcm-qspi.c | 5 +-
drivers/spi/spi-pl022.c | 5 +-
drivers/staging/erofs/unzip_pagevec.h | 14 ++--
drivers/staging/erofs/unzip_vle.c | 19 +++--
drivers/target/target_core_alua.c | 1 -
drivers/target/target_core_device.c | 2 +
drivers/target/target_core_internal.h | 1 +
drivers/target/target_core_transport.c | 76 +++++++++++++-----
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/serial_core.c | 16 +++-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/tty/tty_buffer.c | 3 +
drivers/usb/chipidea/core.c | 19 +++--
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/max3421-hcd.c | 25 ++----
drivers/usb/host/ohci-tmio.c | 2 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/tusb6010.c | 5 ++
drivers/usb/serial/keyspan.c | 15 ++--
drivers/usb/typec/tps6598x.c | 2 +-
drivers/video/backlight/backlight.c | 6 --
drivers/video/backlight/gpio_backlight.c | 24 +++++-
drivers/video/console/sticon.c | 12 +--
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/watchdog/omap_wdt.c | 6 +-
drivers/xen/balloon.c | 86 ++++++++++++++------
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/async-thread.c | 14 ++++
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 4 +-
fs/ext4/super.c | 9 +--
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/fuse/dev.c | 14 +++-
fs/fuse/file.c | 7 +-
fs/jfs/jfs_mount.c | 51 +++++-------
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/pnfs_nfs.c | 4 +-
fs/nfs/write.c | 17 +---
fs/ocfs2/file.c | 8 +-
fs/orangefs/dcache.c | 4 +-
fs/quota/quota_tree.c | 15 ++++
fs/tracefs/inode.c | 3 +-
fs/udf/dir.c | 32 +++++++-
fs/udf/namei.c | 3 +
fs/udf/super.c | 2 +
include/asm-generic/tlb.h | 6 ++
include/linux/console.h | 2 +
include/linux/filter.h | 1 +
include/linux/libata.h | 2 +-
include/linux/lsm_hooks.h | 28 +++----
include/linux/pci.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched/task_stack.h | 4 +
include/linux/security.h | 28 +++----
include/linux/virtio_net.h | 7 +-
include/net/llc.h | 4 +-
include/net/sch_generic.h | 4 +
include/rdma/rdma_netlink.h | 2 +-
include/target/target_core_base.h | 6 +-
include/trace/events/f2fs.h | 12 +--
include/uapi/linux/pci_regs.h | 6 ++
ipc/util.c | 6 +-
kernel/bpf/core.c | 4 +-
kernel/cgroup/cgroup.c | 31 +++++++-
kernel/events/core.c | 10 +--
kernel/locking/lockdep.c | 2 +-
kernel/power/swap.c | 7 +-
kernel/sched/core.c | 3 +
kernel/signal.c | 18 +----
kernel/trace/tracing_map.c | 40 ++++++----
kernel/workqueue.c | 15 +++-
lib/decompress_unxz.c | 2 +-
lib/xz/xz_dec_lzma2.c | 21 ++++-
lib/xz/xz_dec_stream.c | 6 +-
mm/hugetlb.c | 23 +++++-
mm/oom_kill.c | 23 +++---
mm/slab.h | 2 +-
mm/zsmalloc.c | 7 +-
net/8021q/vlan.c | 3 -
net/8021q/vlan_dev.c | 3 +
net/9p/client.c | 2 +
net/batman-adv/fragmentation.c | 26 +++---
net/batman-adv/hard-interface.c | 3 +
net/batman-adv/multicast.c | 31 ++++++++
net/batman-adv/multicast.h | 15 ++++
net/batman-adv/soft-interface.c | 5 +-
net/bluetooth/l2cap_sock.c | 10 ++-
net/bluetooth/sco.c | 33 +++++---
net/core/dev.c | 2 +
net/core/stream.c | 3 -
net/core/sysctl_net_core.c | 2 +-
net/ipv4/tcp.c | 2 +-
net/ipv6/addrconf.c | 3 +
net/netfilter/nfnetlink_queue.c | 2 +-
net/nfc/core.c | 32 ++++----
net/nfc/nci/core.c | 11 ++-
net/sched/sch_generic.c | 9 +++
net/sched/sch_mq.c | 24 ++++++
net/sched/sch_mqprio.c | 23 ++++++
net/vmw_vsock/af_vsock.c | 2 +
net/wireless/util.c | 1 +
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/Kconfig | 3 +
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/security.c | 14 ++--
security/selinux/hooks.c | 36 ++++-----
security/smack/smackfs.c | 11 +--
sound/core/Makefile | 2 +
sound/core/oss/mixer_oss.c | 43 +++++++---
sound/core/timer.c | 17 ++--
sound/isa/Kconfig | 2 +-
sound/isa/gus/gus_dma.c | 2 +
sound/pci/Kconfig | 1 +
sound/pci/hda/hda_intel.c | 28 +++++--
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/codecs/cs42l42.c | 9 ++-
sound/soc/codecs/nau8824.c | 40 ++++++++++
sound/soc/soc-dapm.c | 29 +++++--
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/line6/driver.c | 14 ++--
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/perf/bench/sched-messaging.c | 4 +
tools/testing/selftests/bpf/test_progs.c | 4 +-
359 files changed, 2225 insertions(+), 1173 deletions(-)
^ permalink raw reply [relevance 1%]
* Linux 5.15.3
@ 2021-11-18 19:20 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-18 19:20 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 5.15.3 kernel.
All users of the 5.15 kernel series must upgrade.
The updated 5.15.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/kernel-parameters.txt | 7
Documentation/devicetree/bindings/iio/dac/adi,ad5766.yaml | 2
Documentation/devicetree/bindings/regulator/samsung,s5m8767.txt | 23
Documentation/filesystems/fscrypt.rst | 10
Makefile | 2
arch/Kconfig | 3
arch/arm/Makefile | 22
arch/arm/boot/dts/at91-tse850-3.dts | 2
arch/arm/boot/dts/bcm4708-netgear-r6250.dts | 2
arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts | 2
arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts | 2
arch/arm/boot/dts/bcm4709-linksys-ea9200.dts | 2
arch/arm/boot/dts/bcm4709-netgear-r7000.dts | 2
arch/arm/boot/dts/bcm4709-netgear-r8000.dts | 2
arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts | 2
arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts | 2
arch/arm/boot/dts/bcm53016-meraki-mr32.dts | 2
arch/arm/boot/dts/bcm94708.dts | 2
arch/arm/boot/dts/bcm94709.dts | 2
arch/arm/boot/dts/omap3-gta04.dtsi | 2
arch/arm/boot/dts/qcom-msm8974.dtsi | 4
arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 8
arch/arm/boot/dts/stm32mp151.dtsi | 16
arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi | 2
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 2
arch/arm/kernel/stacktrace.c | 3
arch/arm/mach-s3c/irq-s3c24xx.c | 22
arch/arm/mm/Kconfig | 2
arch/arm/mm/kasan_init.c | 2
arch/arm/mm/mmu.c | 4
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2
arch/arm64/boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi | 4
arch/arm64/boot/dts/amlogic/meson-g12b-odroid-n2.dtsi | 4
arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi | 4
arch/arm64/boot/dts/amlogic/meson-sm1-bananapi-m5.dts | 2
arch/arm64/boot/dts/amlogic/meson-sm1-khadas-vim3l.dts | 2
arch/arm64/boot/dts/amlogic/meson-sm1-odroid.dtsi | 6
arch/arm64/boot/dts/amlogic/meson-sm1-sei610.dts | 2
arch/arm64/boot/dts/broadcom/bcm4908/bcm4908.dtsi | 2
arch/arm64/boot/dts/qcom/msm8916.dtsi | 8
arch/arm64/boot/dts/qcom/pm8916.dtsi | 1
arch/arm64/boot/dts/qcom/pmi8994.dtsi | 2
arch/arm64/boot/dts/qcom/sc7180-trogdor-coachz.dtsi | 2
arch/arm64/boot/dts/qcom/sc7180-trogdor-pompom.dtsi | 8
arch/arm64/boot/dts/qcom/sc7180.dtsi | 52 +-
arch/arm64/boot/dts/qcom/sc7280.dtsi | 8
arch/arm64/boot/dts/qcom/sdm845.dtsi | 6
arch/arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 1
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2
arch/arm64/boot/dts/ti/k3-j7200-main.dtsi | 6
arch/arm64/boot/dts/ti/k3-j721e-main.dtsi | 16
arch/arm64/include/asm/esr.h | 1
arch/arm64/include/asm/pgtable.h | 12
arch/arm64/kernel/cpufeature.c | 10
arch/arm64/kernel/vdso32/Makefile | 3
arch/arm64/kvm/arm.c | 30 -
arch/arm64/kvm/hyp/hyp-entry.S | 2
arch/arm64/kvm/hyp/nvhe/host.S | 2
arch/arm64/mm/mmu.c | 5
arch/ia64/Kconfig.debug | 2
arch/ia64/kernel/kprobes.c | 9
arch/m68k/Kconfig.machine | 1
arch/mips/Kbuild.platforms | 2
arch/mips/Kconfig | 1
arch/mips/Makefile | 2
arch/mips/include/asm/cmpxchg.h | 5
arch/mips/include/asm/mips-cm.h | 12
arch/mips/kernel/mips-cm.c | 21
arch/mips/kernel/r2300_fpu.S | 4
arch/mips/kernel/syscall.c | 9
arch/mips/lantiq/xway/dma.c | 23
arch/openrisc/kernel/dma.c | 4
arch/openrisc/kernel/smp.c | 6
arch/parisc/include/asm/pgtable.h | 10
arch/parisc/kernel/cache.c | 4
arch/parisc/kernel/entry.S | 2
arch/parisc/kernel/smp.c | 19
arch/parisc/kernel/unwind.c | 21
arch/parisc/kernel/vmlinux.lds.S | 3
arch/parisc/mm/fixmap.c | 5
arch/parisc/mm/init.c | 4
arch/powerpc/Kconfig | 6
arch/powerpc/include/asm/nohash/32/pgtable.h | 19
arch/powerpc/include/asm/nohash/32/pte-8xx.h | 22
arch/powerpc/include/asm/nohash/64/pgtable.h | 5
arch/powerpc/include/asm/nohash/pte-book3e.h | 18
arch/powerpc/include/asm/paravirt.h | 18
arch/powerpc/kernel/firmware.c | 7
arch/powerpc/kernel/head_booke.h | 15
arch/powerpc/kernel/interrupt.c | 2
arch/powerpc/kvm/book3s_hv.c | 30 +
arch/powerpc/kvm/booke.c | 16
arch/powerpc/lib/feature-fixups.c | 11
arch/powerpc/mm/mem.c | 2
arch/powerpc/mm/nohash/tlb_low_64e.S | 8
arch/powerpc/mm/pgtable_32.c | 2
arch/powerpc/net/bpf_jit_comp.c | 2
arch/powerpc/perf/power10-events-list.h | 8
arch/powerpc/perf/power10-pmu.c | 44 +
arch/powerpc/platforms/44x/fsp2.c | 2
arch/powerpc/platforms/85xx/Makefile | 4
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 7
arch/powerpc/platforms/85xx/smp.c | 12
arch/powerpc/platforms/book3s/vas-api.c | 4
arch/powerpc/platforms/powernv/opal-prd.c | 12
arch/powerpc/platforms/pseries/mobility.c | 34 +
arch/powerpc/xmon/xmon.c | 3
arch/s390/kernel/perf_cpum_cf.c | 4
arch/s390/kernel/uv.c | 2
arch/s390/kvm/priv.c | 2
arch/s390/kvm/pv.c | 21
arch/s390/mm/gmap.c | 11
arch/s390/mm/pgtable.c | 70 ++
arch/sh/kernel/cpu/fpu.c | 10
arch/sparc/boot/Makefile | 8
arch/x86/Kconfig | 1
arch/x86/crypto/aesni-intel_glue.c | 2
arch/x86/events/intel/core.c | 5
arch/x86/events/intel/ds.c | 5
arch/x86/events/intel/uncore_discovery.h | 2
arch/x86/events/intel/uncore_snbep.c | 16
arch/x86/hyperv/hv_init.c | 5
arch/x86/include/asm/cpu_entry_area.h | 8
arch/x86/include/asm/insn-eval.h | 1
arch/x86/include/asm/irq_stack.h | 37 -
arch/x86/include/asm/kvm_host.h | 2
arch/x86/include/asm/mem_encrypt.h | 1
arch/x86/include/asm/page_64_types.h | 2
arch/x86/include/asm/processor.h | 1
arch/x86/include/asm/stacktrace.h | 10
arch/x86/include/asm/traps.h | 6
arch/x86/kernel/Makefile | 6
arch/x86/kernel/cc_platform.c | 69 ++
arch/x86/kernel/cpu/amd.c | 2
arch/x86/kernel/cpu/common.c | 44 +
arch/x86/kernel/cpu/cpu.h | 1
arch/x86/kernel/cpu/hygon.c | 2
arch/x86/kernel/cpu/mce/intel.c | 5
arch/x86/kernel/dumpstack_64.c | 6
arch/x86/kernel/irq.c | 4
arch/x86/kernel/process.c | 1
arch/x86/kernel/sev.c | 32 -
arch/x86/kernel/traps.c | 60 +-
arch/x86/kvm/cpuid.c | 47 -
arch/x86/kvm/mmu/mmu.c | 6
arch/x86/kvm/vmx/nested.c | 103 +--
arch/x86/kvm/vmx/vmx.c | 68 --
arch/x86/kvm/vmx/vmx.h | 63 ++
arch/x86/kvm/x86.c | 108 +++-
arch/x86/lib/insn-eval.c | 2
arch/x86/lib/insn.c | 5
arch/x86/mm/cpu_entry_area.c | 7
arch/x86/mm/fault.c | 20
arch/x86/mm/mem_encrypt.c | 1
arch/x86/mm/mem_encrypt_identity.c | 9
block/blk-cgroup.c | 10
block/blk-mq.c | 5
block/blk-wbt.c | 3
block/blk-zoned.c | 15
block/blk.h | 6
block/genhd.c | 8
block/ioctl.c | 24
crypto/Kconfig | 2
crypto/pcrypt.c | 12
crypto/tcrypt.c | 5
drivers/acpi/ac.c | 19
drivers/acpi/acpica/acglobal.h | 2
drivers/acpi/acpica/hwesleep.c | 8
drivers/acpi/acpica/hwsleep.c | 11
drivers/acpi/acpica/hwxfsleep.c | 7
drivers/acpi/battery.c | 2
drivers/acpi/glue.c | 25
drivers/acpi/internal.h | 1
drivers/acpi/pmic/intel_pmic.c | 51 +
drivers/acpi/power.c | 86 +--
drivers/acpi/resource.c | 56 ++
drivers/acpi/scan.c | 6
drivers/ata/libata-core.c | 2
drivers/ata/libata-eh.c | 8
drivers/auxdisplay/ht16k33.c | 66 +-
drivers/auxdisplay/img-ascii-lcd.c | 10
drivers/base/component.c | 5
drivers/base/core.c | 4
drivers/base/power/main.c | 93 ++-
drivers/block/ataflop.c | 141 +++--
drivers/block/floppy.c | 9
drivers/block/nbd.c | 24
drivers/block/zram/zram_drv.c | 2
drivers/bluetooth/btmtkuart.c | 13
drivers/bluetooth/hci_h5.c | 28 -
drivers/bus/ti-sysc.c | 65 ++
drivers/char/hw_random/mtk-rng.c | 9
drivers/char/ipmi/ipmi_msghandler.c | 10
drivers/char/ipmi/ipmi_watchdog.c | 25
drivers/char/ipmi/kcs_bmc_serio.c | 4
drivers/char/tpm/tpm2-space.c | 3
drivers/char/tpm/tpm_tis_core.c | 26 -
drivers/char/tpm/tpm_tis_core.h | 4
drivers/char/tpm/tpm_tis_spi_main.c | 1
drivers/char/xillybus/xillyusb.c | 1
drivers/clk/at91/clk-master.c | 6
drivers/clk/at91/clk-sam9x60-pll.c | 4
drivers/clk/at91/pmc.c | 5
drivers/clk/mvebu/ap-cpu-clk.c | 14
drivers/clocksource/Kconfig | 1
drivers/cpufreq/cpufreq.c | 7
drivers/cpufreq/intel_pstate.c | 35 +
drivers/cpuidle/sysfs.c | 5
drivers/crypto/caam/caampkc.c | 19
drivers/crypto/caam/regs.h | 3
drivers/crypto/ccree/cc_driver.c | 3
drivers/crypto/marvell/octeontx2/otx2_cptvf_algs.c | 1
drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.c | 31 +
drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.h | 10
drivers/crypto/qat/qat_common/adf_accel_devices.h | 1
drivers/crypto/qat/qat_common/adf_init.c | 5
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6
drivers/crypto/s5p-sss.c | 2
drivers/cxl/pci.c | 2
drivers/dma-buf/dma-buf.c | 153 ++---
drivers/dma/at_xdmac.c | 53 +-
drivers/dma/bestcomm/ata.c | 2
drivers/dma/bestcomm/bestcomm.c | 22
drivers/dma/bestcomm/fec.c | 4
drivers/dma/bestcomm/gen_bd.c | 4
drivers/dma/dmaengine.h | 2
drivers/dma/idxd/device.c | 3
drivers/dma/idxd/dma.c | 5
drivers/dma/idxd/init.c | 14
drivers/dma/stm32-dma.c | 23
drivers/dma/tegra210-adma.c | 2
drivers/dma/ti/k3-udma.c | 32 +
drivers/edac/amd64_edac.c | 22
drivers/edac/sb_edac.c | 2
drivers/firmware/psci/psci_checker.c | 2
drivers/firmware/qcom_scm.c | 2
drivers/gpio/gpio-realtek-otto.c | 2
drivers/gpu/drm/Kconfig | 5
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 15
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 2
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4
drivers/gpu/drm/amd/amdgpu/uvd_v3_1.c | 24
drivers/gpu/drm/amd/amdgpu/uvd_v4_2.c | 24
drivers/gpu/drm/amd/amdgpu/uvd_v5_0.c | 24
drivers/gpu/drm/amd/amdgpu/uvd_v6_0.c | 24
drivers/gpu/drm/amd/amdgpu/uvd_v7_0.c | 32 -
drivers/gpu/drm/amd/amdgpu/vce_v2_0.c | 19
drivers/gpu/drm/amd/amdgpu/vce_v3_0.c | 28 -
drivers/gpu/drm/amd/amdgpu/vce_v4_0.c | 44 -
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 8
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 17
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 1
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 7
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9
drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c | 2
drivers/gpu/drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 2
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 18
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3
drivers/gpu/drm/amd/display/dc/dml/dcn20/display_rq_dlg_calc_20.c | 6
drivers/gpu/drm/amd/display/dc/dml/dcn20/display_rq_dlg_calc_20.h | 4
drivers/gpu/drm/amd/display/dc/dml/dcn20/display_rq_dlg_calc_20v2.c | 6
drivers/gpu/drm/amd/display/dc/dml/dcn20/display_rq_dlg_calc_20v2.h | 4
drivers/gpu/drm/amd/display/dc/dml/dcn21/display_rq_dlg_calc_21.c | 62 +-
drivers/gpu/drm/amd/display/dc/dml/dcn21/display_rq_dlg_calc_21.h | 4
drivers/gpu/drm/amd/display/dc/dml/dcn30/display_rq_dlg_calc_30.c | 72 +-
drivers/gpu/drm/amd/display/dc/dml/dcn30/display_rq_dlg_calc_30.h | 4
drivers/gpu/drm/amd/display/dc/dml/dcn31/display_rq_dlg_calc_31.c | 68 +-
drivers/gpu/drm/amd/display/dc/dml/dcn31/display_rq_dlg_calc_31.h | 4
drivers/gpu/drm/amd/display/dc/dml/display_mode_lib.h | 4
drivers/gpu/drm/amd/pm/powerplay/hwmgr/smu10_hwmgr.c | 8
drivers/gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 10
drivers/gpu/drm/amd/pm/powerplay/hwmgr/smu8_hwmgr.c | 2
drivers/gpu/drm/amd/pm/powerplay/hwmgr/smu_helper.h | 13
drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega10_hwmgr.c | 12
drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega12_hwmgr.c | 4
drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c | 14
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 89 +--
drivers/gpu/drm/bridge/analogix/anx7625.c | 12
drivers/gpu/drm/bridge/ite-it66121.c | 21
drivers/gpu/drm/bridge/lontium-lt9611uxc.c | 9
drivers/gpu/drm/bridge/nwl-dsi.c | 35 +
drivers/gpu/drm/drm_panel_orientation_quirks.c | 35 +
drivers/gpu/drm/drm_plane_helper.c | 1
drivers/gpu/drm/i915/display/intel_fb.c | 5
drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c | 2
drivers/gpu/drm/imx/imx-drm-core.c | 2
drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 6
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4
drivers/gpu/drm/msm/dsi/dsi.h | 2
drivers/gpu/drm/msm/dsi/dsi_host.c | 72 +-
drivers/gpu/drm/msm/dsi/dsi_manager.c | 16
drivers/gpu/drm/msm/msm_gem.c | 5
drivers/gpu/drm/msm/msm_gpu.c | 2
drivers/gpu/drm/msm/msm_submitqueue.c | 1
drivers/gpu/drm/nouveau/nouveau_gem.c | 2
drivers/gpu/drm/nouveau/nouveau_svm.c | 4
drivers/gpu/drm/nouveau/nvkm/engine/ce/gt215.c | 2
drivers/gpu/drm/nouveau/nvkm/engine/device/base.c | 3
drivers/gpu/drm/radeon/radeon_gem.c | 2
drivers/gpu/drm/sun4i/sun8i_csc.h | 4
drivers/gpu/drm/ttm/ttm_bo_vm.c | 99 ---
drivers/gpu/drm/v3d/v3d_gem.c | 4
drivers/gpu/drm/virtio/virtgpu_vq.c | 8
drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4
drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 72 --
drivers/gpu/drm/vmwgfx/vmwgfx_ttm_glue.c | 3
drivers/hid/hid-u2fzero.c | 10
drivers/hid/surface-hid/surface_hid.c | 4
drivers/hwmon/hwmon.c | 6
drivers/hwmon/pmbus/lm25066.c | 25
drivers/hwtracing/coresight/coresight-cti-core.c | 2
drivers/hwtracing/coresight/coresight-trbe.c | 10
drivers/i2c/busses/i2c-i801.c | 5
drivers/i2c/busses/i2c-mt65xx.c | 2
drivers/i2c/busses/i2c-xlr.c | 6
drivers/iio/accel/st_accel_i2c.c | 4
drivers/iio/accel/st_accel_spi.c | 4
drivers/iio/adc/ti-tsc2046.c | 2
drivers/iio/dac/ad5446.c | 9
drivers/iio/dac/ad5766.c | 6
drivers/iio/dac/ad5770r.c | 2
drivers/iio/gyro/st_gyro_i2c.c | 4
drivers/iio/gyro/st_gyro_spi.c | 4
drivers/iio/imu/adis.c | 4
drivers/iio/industrialio-buffer.c | 28 -
drivers/iio/industrialio-core.c | 9
drivers/iio/magnetometer/st_magn_i2c.c | 4
drivers/iio/magnetometer/st_magn_spi.c | 4
drivers/iio/pressure/st_pressure_i2c.c | 4
drivers/iio/pressure/st_pressure_spi.c | 8
drivers/infiniband/core/uverbs_cmd.c | 3
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6
drivers/infiniband/hw/mlx4/qp.c | 4
drivers/infiniband/hw/qedr/verbs.c | 15
drivers/infiniband/sw/rxe/rxe_param.h | 2
drivers/input/joystick/iforce/iforce-usb.c | 2
drivers/input/misc/ariel-pwrbutton.c | 7
drivers/input/mouse/elantech.c | 13
drivers/input/serio/i8042-x86ia64io.h | 14
drivers/input/touchscreen/st1232.c | 2
drivers/iommu/dma-iommu.c | 52 --
drivers/iommu/mtk_iommu.c | 4
drivers/irqchip/irq-bcm6345-l1.c | 2
drivers/irqchip/irq-sifive-plic.c | 8
drivers/mailbox/mtk-cmdq-mailbox.c | 11
drivers/md/bcache/btree.c | 2
drivers/md/bcache/super.c | 2
drivers/md/md.c | 11
drivers/md/raid1.c | 2
drivers/media/common/videobuf2/videobuf2-core.c | 42 -
drivers/media/common/videobuf2/videobuf2-dma-contig.c | 39 -
drivers/media/common/videobuf2/videobuf2-dma-sg.c | 35 -
drivers/media/common/videobuf2/videobuf2-vmalloc.c | 30 -
drivers/media/dvb-frontends/mn88443x.c | 18
drivers/media/i2c/Kconfig | 1
drivers/media/i2c/imx258.c | 12
drivers/media/i2c/ir-kbd-i2c.c | 1
drivers/media/i2c/mt9p031.c | 28 +
drivers/media/i2c/tda1997x.c | 8
drivers/media/pci/cx23885/cx23885-alsa.c | 3
drivers/media/pci/ivtv/ivtvfb.c | 4
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 -
drivers/media/platform/allegro-dvt/allegro-core.c | 9
drivers/media/platform/atmel/atmel-isc-base.c | 25
drivers/media/platform/atmel/atmel-isc.h | 2
drivers/media/platform/atmel/atmel-sama5d2-isc.c | 39 -
drivers/media/platform/atmel/atmel-sama7g5-isc.c | 22
drivers/media/platform/imx-jpeg/mxc-jpeg.c | 6
drivers/media/platform/meson/ge2d/ge2d.c | 6
drivers/media/platform/mtk-vcodec/mtk_vcodec_enc.c | 8
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5
drivers/media/platform/qcom/venus/pm_helpers.c | 8
drivers/media/platform/rcar-vin/rcar-csi2.c | 2
drivers/media/platform/rcar-vin/rcar-dma.c | 3
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6
drivers/media/platform/stm32/stm32-dcmi.c | 19
drivers/media/platform/sunxi/sun6i-csi/sun6i_video.c | 6
drivers/media/radio/radio-wl1273.c | 2
drivers/media/radio/si470x/radio-si470x-i2c.c | 2
drivers/media/radio/si470x/radio-si470x-usb.c | 2
drivers/media/rc/ir_toy.c | 2
drivers/media/rc/ite-cir.c | 2
drivers/media/rc/mceusb.c | 1
drivers/media/spi/cxd2880-spi.c | 2
drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4
drivers/media/usb/dvb-usb/az6027.c | 1
drivers/media/usb/dvb-usb/dibusb-common.c | 2
drivers/media/usb/em28xx/em28xx-cards.c | 5
drivers/media/usb/em28xx/em28xx-core.c | 5
drivers/media/usb/tm6000/tm6000-video.c | 3
drivers/media/usb/ttusb-dec/ttusb_dec.c | 10
drivers/media/usb/uvc/uvc_driver.c | 7
drivers/media/usb/uvc/uvc_v4l2.c | 7
drivers/media/usb/uvc/uvc_video.c | 5
drivers/media/v4l2-core/v4l2-ioctl.c | 67 +-
drivers/memory/fsl_ifc.c | 13
drivers/memory/renesas-rpc-if.c | 113 +++-
drivers/memstick/core/ms_block.c | 2
drivers/memstick/host/jmb38x_ms.c | 2
drivers/memstick/host/r592.c | 8
drivers/mfd/Kconfig | 1
drivers/mfd/altera-sysmgr.c | 2
drivers/mfd/dln2.c | 18
drivers/mfd/mfd-core.c | 2
drivers/mfd/motorola-cpcap.c | 8
drivers/mfd/sprd-sc27xx-spi.c | 7
drivers/mmc/host/dw_mmc.c | 3
drivers/mmc/host/moxart-mmc.c | 29 -
drivers/mmc/host/mtk-sd.c | 5
drivers/mmc/host/mxs-mmc.c | 10
drivers/mmc/host/sdhci-omap.c | 18
drivers/most/most_usb.c | 5
drivers/mtd/mtdcore.c | 4
drivers/mtd/nand/raw/ams-delta.c | 12
drivers/mtd/nand/raw/arasan-nand-controller.c | 15
drivers/mtd/nand/raw/au1550nd.c | 12
drivers/mtd/nand/raw/fsmc_nand.c | 4
drivers/mtd/nand/raw/gpio.c | 12
drivers/mtd/nand/raw/intel-nand-controller.c | 5
drivers/mtd/nand/raw/mpc5121_nfc.c | 12
drivers/mtd/nand/raw/orion_nand.c | 12
drivers/mtd/nand/raw/pasemi_nand.c | 12
drivers/mtd/nand/raw/plat_nand.c | 12
drivers/mtd/nand/raw/socrates_nand.c | 12
drivers/mtd/nand/raw/xway_nand.c | 12
drivers/mtd/spi-nor/controllers/hisi-sfc.c | 1
drivers/net/Kconfig | 2
drivers/net/bonding/bond_sysfs_slave.c | 36 -
drivers/net/can/dev/bittiming.c | 2
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 6
drivers/net/can/usb/etas_es58x/es58x_core.c | 6
drivers/net/can/usb/peak_usb/pcan_usb.c | 17
drivers/net/dsa/mv88e6xxx/chip.c | 5
drivers/net/dsa/ocelot/felix.c | 9
drivers/net/dsa/rtl8366.c | 2
drivers/net/dsa/rtl8366rb.c | 2
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 5
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c | 13
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.h | 13
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2
drivers/net/ethernet/chelsio/inline_crypto/chtls/chtls_cm.c | 2
drivers/net/ethernet/chelsio/inline_crypto/chtls/chtls_cm.h | 2
drivers/net/ethernet/dec/tulip/winbond-840.c | 2
drivers/net/ethernet/fealnx.c | 2
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18
drivers/net/ethernet/google/gve/gve.h | 17
drivers/net/ethernet/google/gve/gve_adminq.h | 1
drivers/net/ethernet/google/gve/gve_main.c | 48 +
drivers/net/ethernet/google/gve/gve_rx.c | 7
drivers/net/ethernet/google/gve/gve_tx.c | 23
drivers/net/ethernet/google/gve/gve_tx_dqo.c | 84 +--
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 20
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 10
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 6
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 77 +-
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.h | 4
drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 10
drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 4
drivers/net/ethernet/ibm/ibmvnic.c | 21
drivers/net/ethernet/intel/ice/ice.h | 7
drivers/net/ethernet/intel/ice/ice_base.c | 2
drivers/net/ethernet/intel/ice/ice_devlink.c | 109 +++-
drivers/net/ethernet/intel/ice/ice_devlink.h | 6
drivers/net/ethernet/intel/ice/ice_lib.c | 3
drivers/net/ethernet/intel/ice/ice_main.c | 4
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 22
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.h | 9
drivers/net/ethernet/intel/igc/igc_ptp.c | 2
drivers/net/ethernet/litex/litex_liteeth.c | 1
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 38 -
drivers/net/ethernet/marvell/octeontx2/Kconfig | 1
drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 78 +--
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 18
drivers/net/ethernet/mellanox/mlx5/core/main.c | 2
drivers/net/ethernet/mellanox/mlx5/core/sf/dev/driver.c | 2
drivers/net/ethernet/netronome/nfp/nfp_net_common.c | 8
drivers/net/ethernet/qlogic/qede/qede_main.c | 12
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 2
drivers/net/ethernet/ti/cpsw_ale.c | 6
drivers/net/ethernet/ti/davinci_emac.c | 16
drivers/net/ifb.c | 2
drivers/net/phy/micrel.c | 9
drivers/net/phy/phy.c | 7
drivers/net/phy/phylink.c | 7
drivers/net/vrf.c | 28 -
drivers/net/wireless/ath/ath10k/core.c | 11
drivers/net/wireless/ath/ath10k/coredump.c | 11
drivers/net/wireless/ath/ath10k/coredump.h | 7
drivers/net/wireless/ath/ath10k/mac.c | 45 +
drivers/net/wireless/ath/ath10k/qmi.c | 3
drivers/net/wireless/ath/ath10k/sdio.c | 5
drivers/net/wireless/ath/ath10k/snoc.c | 77 ++
drivers/net/wireless/ath/ath10k/snoc.h | 5
drivers/net/wireless/ath/ath10k/usb.c | 7
drivers/net/wireless/ath/ath10k/wmi.c | 4
drivers/net/wireless/ath/ath10k/wmi.h | 3
drivers/net/wireless/ath/ath11k/dbring.c | 16
drivers/net/wireless/ath/ath11k/dp_rx.c | 13
drivers/net/wireless/ath/ath11k/mac.c | 2
drivers/net/wireless/ath/ath11k/qmi.c | 4
drivers/net/wireless/ath/ath11k/reg.c | 11
drivers/net/wireless/ath/ath11k/reg.h | 2
drivers/net/wireless/ath/ath11k/wmi.c | 40 +
drivers/net/wireless/ath/ath11k/wmi.h | 3
drivers/net/wireless/ath/ath6kl/usb.c | 7
drivers/net/wireless/ath/ath9k/main.c | 4
drivers/net/wireless/ath/dfs_pattern_detector.c | 10
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 +
drivers/net/wireless/ath/wcn36xx/hal.h | 32 +
drivers/net/wireless/ath/wcn36xx/main.c | 21
drivers/net/wireless/ath/wcn36xx/smd.c | 126 ++++
drivers/net/wireless/ath/wcn36xx/smd.h | 1
drivers/net/wireless/ath/wcn36xx/txrx.c | 64 +-
drivers/net/wireless/ath/wcn36xx/txrx.h | 3
drivers/net/wireless/broadcom/b43/phy_g.c | 2
drivers/net/wireless/broadcom/b43legacy/radio.c | 2
drivers/net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10
drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 13
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 5
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 6
drivers/net/wireless/marvell/libertas/if_usb.c | 2
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2
drivers/net/wireless/marvell/mwifiex/11n.c | 5
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 -
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 +
drivers/net/wireless/marvell/mwifiex/usb.c | 16
drivers/net/wireless/marvell/mwl8k.c | 2
drivers/net/wireless/mediatek/mt76/debugfs.c | 10
drivers/net/wireless/mediatek/mt76/mt76.h | 8
drivers/net/wireless/mediatek/mt76/mt7615/debugfs.c | 29 +
drivers/net/wireless/mediatek/mt76/mt7615/init.c | 6
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 60 +-
drivers/net/wireless/mediatek/mt76/mt7615/main.c | 4
drivers/net/wireless/mediatek/mt76/mt7615/mcu.c | 18
drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.c | 30 -
drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.h | 8
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13
drivers/net/wireless/mediatek/mt76/mt7915/init.c | 10
drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 2
drivers/net/wireless/mediatek/mt76/mt7915/mac.h | 3
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 22
drivers/net/wireless/mediatek/mt76/mt7921/debugfs.c | 36 +
drivers/net/wireless/mediatek/mt76/mt7921/init.c | 13
drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 68 ++
drivers/net/wireless/mediatek/mt76/mt7921/mac.h | 8
drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 22
drivers/net/wireless/mediatek/mt76/mt7921/mcu.h | 10
drivers/net/wireless/mediatek/mt76/mt7921/regs.h | 8
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3
drivers/net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14
drivers/net/wireless/realtek/rtw88/fw.c | 7
drivers/net/wireless/realtek/rtw88/reg.h | 1
drivers/net/wireless/rsi/rsi_91x_core.c | 2
drivers/net/wireless/rsi/rsi_91x_hal.c | 10
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 --
drivers/net/wireless/rsi/rsi_91x_main.c | 17
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5
drivers/net/wireless/rsi/rsi_91x_usb.c | 5
drivers/net/wireless/rsi/rsi_hal.h | 11
drivers/net/wireless/rsi/rsi_main.h | 15
drivers/nfc/pn533/pn533.c | 6
drivers/nvdimm/btt.c | 1
drivers/nvdimm/pmem.c | 13
drivers/nvme/host/multipath.c | 9
drivers/nvme/host/rdma.c | 2
drivers/nvme/target/configfs.c | 2
drivers/nvme/target/rdma.c | 24
drivers/nvme/target/tcp.c | 16
drivers/of/unittest.c | 16
drivers/opp/of.c | 2
drivers/pci/controller/cadence/pci-j721e.c | 2
drivers/pci/controller/cadence/pcie-cadence-plat.c | 2
drivers/pci/controller/dwc/pcie-uniphier.c | 26 -
drivers/pci/controller/pci-aardvark.c | 251 ++++++++-
drivers/pci/msi.c | 36 -
drivers/pci/pci-bridge-emul.c | 13
drivers/pci/pci.c | 8
drivers/pci/quirks.c | 1
drivers/phy/microchip/sparx5_serdes.c | 4
drivers/phy/qualcomm/phy-qcom-qmp.c | 2
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16
drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c | 2
drivers/phy/ti/phy-gmii-sel.c | 2
drivers/pinctrl/core.c | 2
drivers/pinctrl/pinctrl-equilibrium.c | 7
drivers/pinctrl/renesas/core.c | 2
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 2
drivers/platform/surface/surface_aggregator_registry.c | 54 ++
drivers/platform/x86/thinkpad_acpi.c | 2
drivers/platform/x86/wmi.c | 9
drivers/power/reset/at91-reset.c | 4
drivers/power/supply/bq27xxx_battery_i2c.c | 3
drivers/power/supply/max17040_battery.c | 2
drivers/power/supply/max17042_battery.c | 12
drivers/power/supply/rt5033_battery.c | 2
drivers/regulator/s5m8767.c | 21
drivers/remoteproc/imx_rproc.c | 41 -
drivers/remoteproc/remoteproc_core.c | 8
drivers/remoteproc/remoteproc_coredump.c | 2
drivers/remoteproc/remoteproc_elf_loader.c | 4
drivers/rtc/rtc-ds1302.c | 7
drivers/rtc/rtc-ds1390.c | 7
drivers/rtc/rtc-mcp795.c | 7
drivers/rtc/rtc-pcf2123.c | 9
drivers/rtc/rtc-rv3032.c | 4
drivers/s390/char/tape_std.c | 3
drivers/s390/cio/css.c | 4
drivers/s390/cio/device_ops.c | 12
drivers/s390/crypto/ap_queue.c | 2
drivers/scsi/csiostor/csio_lnode.c | 2
drivers/scsi/dc395x.c | 1
drivers/scsi/hosts.c | 1
drivers/scsi/lpfc/lpfc_els.c | 12
drivers/scsi/lpfc/lpfc_hbadisc.c | 10
drivers/scsi/lpfc/lpfc_nvme.c | 5
drivers/scsi/lpfc/lpfc_scsi.c | 7
drivers/scsi/lpfc/lpfc_sli.c | 101 +++
drivers/scsi/megaraid/megaraid_sas_fusion.c | 11
drivers/scsi/pm8001/pm8001_hwi.c | 2
drivers/scsi/pm8001/pm8001_sas.h | 3
drivers/scsi/pm8001/pm80xx_hwi.c | 53 +-
drivers/scsi/qedf/qedf_main.c | 2
drivers/scsi/qla2xxx/qla_attr.c | 24
drivers/scsi/qla2xxx/qla_edif.c | 259 +++++-----
drivers/scsi/qla2xxx/qla_edif.h | 3
drivers/scsi/qla2xxx/qla_edif_bsg.h | 2
drivers/scsi/qla2xxx/qla_gbl.h | 4
drivers/scsi/qla2xxx/qla_init.c | 77 ++
drivers/scsi/qla2xxx/qla_mr.c | 23
drivers/scsi/qla2xxx/qla_nvme.c | 14
drivers/scsi/qla2xxx/qla_os.c | 37 -
drivers/scsi/qla2xxx/qla_target.c | 1
drivers/scsi/scsi_error.c | 25
drivers/scsi/scsi_ioctl.c | 2
drivers/scsi/scsi_lib.c | 3
drivers/scsi/scsi_sysfs.c | 1
drivers/scsi/ufs/ufshcd-pltfrm.c | 4
drivers/scsi/ufs/ufshcd.c | 186 -------
drivers/scsi/ufs/ufshcd.h | 14
drivers/scsi/ufs/ufshpb.c | 31 -
drivers/scsi/ufs/ufshpb.h | 1
drivers/soc/fsl/dpaa2-console.c | 1
drivers/soc/fsl/dpio/dpio-service.c | 2
drivers/soc/fsl/dpio/qbman-portal.c | 9
drivers/soc/qcom/apr.c | 2
drivers/soc/qcom/llcc-qcom.c | 2
drivers/soc/qcom/rpmhpd.c | 20
drivers/soc/qcom/socinfo.c | 4
drivers/soc/samsung/Kconfig | 1
drivers/soc/tegra/pmc.c | 2
drivers/soundwire/bus.c | 2
drivers/soundwire/debugfs.c | 2
drivers/spi/atmel-quadspi.c | 2
drivers/spi/spi-bcm-qspi.c | 8
drivers/spi/spi-mtk-nor.c | 2
drivers/spi/spi-rpc-if.c | 4
drivers/spi/spi-stm32-qspi.c | 2
drivers/spi/spi.c | 41 +
drivers/staging/ks7010/Kconfig | 3
drivers/staging/media/atomisp/i2c/atomisp-lm3554.c | 37 -
drivers/staging/media/imx/imx-media-dev-common.c | 2
drivers/staging/media/ipu3/ipu3-v4l2.c | 7
drivers/staging/media/rkvdec/rkvdec-h264.c | 5
drivers/staging/media/rkvdec/rkvdec.c | 40 -
drivers/staging/most/dim2/Makefile | 2
drivers/staging/most/dim2/dim2.c | 24
drivers/staging/most/dim2/sysfs.c | 49 -
drivers/staging/most/dim2/sysfs.h | 11
drivers/staging/r8188eu/core/rtw_mlme.c | 2
drivers/target/target_core_tmr.c | 17
drivers/target/target_core_transport.c | 30 -
drivers/thermal/intel/int340x_thermal/processor_thermal_mbox.c | 1
drivers/thermal/qcom/Kconfig | 2
drivers/thermal/qcom/tsens.c | 29 -
drivers/thermal/thermal_core.c | 16
drivers/tty/serial/8250/8250_dw.c | 2
drivers/tty/serial/8250/8250_port.c | 21
drivers/tty/serial/cpm_uart/cpm_uart_core.c | 2
drivers/tty/serial/imx.c | 4
drivers/tty/serial/serial_core.c | 16
drivers/tty/serial/xilinx_uartps.c | 3
drivers/usb/chipidea/core.c | 23
drivers/usb/dwc2/drd.c | 24
drivers/usb/dwc3/core.h | 1
drivers/usb/dwc3/gadget.c | 8
drivers/usb/gadget/legacy/hid.c | 4
drivers/usb/host/xhci-hub.c | 3
drivers/usb/host/xhci-pci.c | 16
drivers/usb/misc/iowarrior.c | 8
drivers/usb/musb/Kconfig | 2
drivers/usb/serial/keyspan.c | 15
drivers/usb/typec/Kconfig | 4
drivers/vdpa/mlx5/net/mlx5_vnet.c | 1
drivers/video/backlight/backlight.c | 6
drivers/video/fbdev/chipsfb.c | 2
drivers/video/fbdev/efifb.c | 21
drivers/virtio/virtio_ring.c | 14
drivers/watchdog/Kconfig | 2
drivers/watchdog/f71808e_wdt.c | 4
drivers/xen/balloon.c | 86 ++-
drivers/xen/xen-pciback/conf_space_capability.c | 2
fs/btrfs/disk-io.c | 3
fs/btrfs/reflink.c | 2
fs/btrfs/tree-log.c | 4
fs/btrfs/volumes.c | 14
fs/ceph/mdsmap.c | 4
fs/cifs/cifsglob.h | 3
fs/cifs/connect.c | 21
fs/cifs/file.c | 35 +
fs/cifs/fs_context.c | 10
fs/cifs/fs_context.h | 1
fs/crypto/fscrypt_private.h | 5
fs/crypto/hkdf.c | 11
fs/crypto/keysetup.c | 57 +-
fs/erofs/decompressor.c | 1
fs/erofs/zdata.c | 13
fs/erofs/zpvec.h | 13
fs/exfat/inode.c | 2
fs/ext4/extents.c | 63 +-
fs/ext4/inode.c | 15
fs/ext4/super.c | 9
fs/f2fs/compress.c | 1
fs/f2fs/inode.c | 2
fs/f2fs/namei.c | 2
fs/f2fs/super.c | 2
fs/fuse/dev.c | 14
fs/gfs2/glock.c | 24
fs/io-wq.c | 88 ++-
fs/io_uring.c | 4
fs/jfs/jfs_mount.c | 51 -
fs/ksmbd/Kconfig | 1
fs/ksmbd/server.c | 1
fs/ksmbd/smb2misc.c | 6
fs/ksmbd/smb2pdu.c | 11
fs/nfs/dir.c | 9
fs/nfs/direct.c | 2
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4
fs/nfs/inode.c | 13
fs/nfs/nfs3xdr.c | 2
fs/nfs/nfs4idmap.c | 2
fs/nfs/nfs4proc.c | 15
fs/nfs/pnfs.h | 2
fs/nfs/pnfs_nfs.c | 6
fs/nfs/proc.c | 2
fs/nfs/write.c | 26 -
fs/ocfs2/file.c | 8
fs/open.c | 16
fs/orangefs/dcache.c | 4
fs/overlayfs/copy_up.c | 23
fs/overlayfs/file.c | 16
fs/overlayfs/inode.c | 5
fs/proc/stat.c | 4
fs/proc/uptime.c | 14
fs/quota/quota_tree.c | 15
fs/tracefs/inode.c | 3
include/drm/ttm/ttm_bo_api.h | 3
include/linux/blkdev.h | 2
include/linux/bpf-cgroup.h | 1
include/linux/cc_platform.h | 88 +++
include/linux/console.h | 2
include/linux/cpufreq.h | 2
include/linux/dma-buf.h | 2
include/linux/dsa/ocelot.h | 1
include/linux/ethtool_netlink.h | 3
include/linux/filter.h | 5
include/linux/fortify-string.h | 5
include/linux/kernel_stat.h | 1
include/linux/libata.h | 2
include/linux/msi.h | 2
include/linux/nfs_fs.h | 1
include/linux/posix-timers.h | 2
include/linux/rpmsg.h | 2
include/linux/sched/task.h | 3
include/linux/sched/task_stack.h | 4
include/linux/seq_file.h | 2
include/linux/signal_types.h | 3
include/linux/skmsg.h | 18
include/linux/surface_aggregator/controller.h | 4
include/linux/tpm.h | 1
include/media/videobuf2-core.h | 37 -
include/memory/renesas-rpc-if.h | 1
include/net/inet_connection_sock.h | 2
include/net/llc.h | 4
include/net/neighbour.h | 12
include/net/sch_generic.h | 4
include/net/sctp/sctp.h | 7
include/net/sock.h | 2
include/net/strparser.h | 20
include/net/tcp.h | 17
include/rdma/ib_verbs.h | 7
include/scsi/scsi_cmnd.h | 2
include/scsi/scsi_host.h | 1
include/sound/soc-topology.h | 3
include/uapi/asm-generic/signal-defs.h | 1
include/uapi/linux/ethtool_netlink.h | 4
include/uapi/linux/pci_regs.h | 6
init/main.c | 4
kernel/bpf/trampoline.c | 6
kernel/bpf/verifier.c | 4
kernel/cgroup/cgroup.c | 31 +
kernel/cgroup/rstat.c | 2
kernel/debug/kdb/kdb_bt.c | 16
kernel/debug/kdb/kdb_main.c | 37 -
kernel/debug/kdb/kdb_private.h | 4
kernel/debug/kdb/kdb_support.c | 118 ----
kernel/fork.c | 3
kernel/irq/msi.c | 4
kernel/kprobes.c | 3
kernel/locking/lockdep.c | 4
kernel/locking/rwsem.c | 53 +-
kernel/power/energy_model.c | 23
kernel/power/swap.c | 7
kernel/rcu/rcutorture.c | 48 +
kernel/rcu/tasks.h | 3
kernel/rcu/tree.c | 2
kernel/rcu/tree_exp.h | 2
kernel/rcu/tree_plugin.h | 8
kernel/sched/core.c | 43 -
kernel/scs.c | 1
kernel/signal.c | 26 -
kernel/time/posix-cpu-timers.c | 19
kernel/trace/ftrace.c | 23
kernel/trace/ring_buffer.c | 5
kernel/trace/trace.c | 73 +-
kernel/trace/trace.h | 3
kernel/trace/trace_boot.c | 4
kernel/trace/trace_dynevent.c | 2
kernel/trace/trace_event_perf.c | 6
kernel/trace/trace_events.c | 42 -
kernel/trace/trace_events_synth.c | 4
kernel/trace/trace_functions_graph.c | 2
kernel/trace/trace_hwlat.c | 6
kernel/trace/trace_kprobe.c | 8
kernel/trace/trace_osnoise.c | 14
kernel/trace/trace_printk.c | 2
kernel/trace/trace_recursion_record.c | 4
kernel/trace/trace_stack.c | 6
kernel/trace/trace_stat.c | 6
kernel/trace/trace_uprobe.c | 4
kernel/trace/tracing_map.c | 40 -
kernel/workqueue.c | 15
lib/crypto/sm4.c | 4
lib/decompress_unxz.c | 2
lib/dynamic_debug.c | 12
lib/iov_iter.c | 5
lib/test_bpf.c | 37 +
lib/xz/xz_dec_lzma2.c | 21
lib/xz/xz_dec_stream.c | 6
mm/filemap.c | 1
mm/memcontrol.c | 27 -
mm/oom_kill.c | 23
mm/zsmalloc.c | 7
net/8021q/vlan.c | 3
net/8021q/vlan_dev.c | 3
net/9p/client.c | 2
net/bluetooth/l2cap_sock.c | 10
net/bluetooth/sco.c | 36 -
net/bridge/br_private.h | 2
net/can/j1939/main.c | 7
net/can/j1939/transport.c | 11
net/core/dev.c | 2
net/core/filter.c | 58 ++
net/core/neighbour.c | 48 +
net/core/net-sysfs.c | 55 ++
net/core/net_namespace.c | 4
net/core/skmsg.c | 43 +
net/core/stream.c | 3
net/dccp/dccp.h | 2
net/dccp/proto.c | 14
net/dsa/switch.c | 4
net/dsa/tag_ocelot.c | 3
net/ethtool/pause.c | 3
net/ipv4/af_inet.c | 16
net/ipv4/inet_connection_sock.c | 4
net/ipv4/inet_hashtables.c | 2
net/ipv4/proc.c | 2
net/ipv4/tcp.c | 40 +
net/ipv4/tcp_bpf.c | 48 +
net/ipv6/addrconf.c | 3
net/ipv6/af_inet6.c | 21
net/ipv6/udp.c | 2
net/mac80211/s1g.c | 8
net/mctp/af_mctp.c | 13
net/mptcp/options.c | 8
net/mptcp/protocol.c | 43 +
net/netfilter/nf_conntrack_proto_udp.c | 7
net/netfilter/nfnetlink_queue.c | 2
net/netfilter/nft_dynset.c | 11
net/rxrpc/rtt.c | 2
net/sched/sch_generic.c | 9
net/sched/sch_mq.c | 24
net/sched/sch_mqprio.c | 23
net/sched/sch_taprio.c | 27 -
net/sctp/output.c | 13
net/sctp/transport.c | 11
net/smc/af_smc.c | 18
net/strparser/strparser.c | 10
net/sunrpc/addr.c | 40 -
net/sunrpc/xprt.c | 28 -
net/vmw_vsock/af_vsock.c | 2
net/wireless/core.c | 10
samples/bpf/xdp_redirect_cpu_user.c | 6
samples/kprobes/kretprobe_example.c | 2
scripts/leaking_addresses.pl | 3
security/apparmor/label.c | 4
security/integrity/evm/evm_main.c | 2
security/integrity/ima/ima_policy.c | 27 -
security/selinux/ss/services.c | 162 ++----
security/smack/smackfs.c | 11
sound/core/memalloc.c | 7
sound/core/oss/mixer_oss.c | 44 +
sound/core/timer.c | 17
sound/firewire/oxfw/oxfw-stream.c | 7
sound/firewire/oxfw/oxfw.c | 8
sound/firewire/oxfw/oxfw.h | 5
sound/pci/hda/hda_intel.c | 52 --
sound/pci/hda/patch_realtek.c | 36 +
sound/pci/rme9652/hdsp.c | 41 -
sound/pci/rme9652/rme9652.c | 41 -
sound/soc/codecs/cs42l42.c | 27 -
sound/soc/codecs/wcd9335.c | 2
sound/soc/sh/rcar/core.c | 1
sound/soc/sof/topology.c | 9
sound/soc/tegra/tegra_asoc_machine.c | 60 +-
sound/soc/tegra/tegra_asoc_machine.h | 1
sound/synth/emux/emux.c | 2
sound/usb/6fire/comm.c | 2
sound/usb/6fire/firmware.c | 6
sound/usb/card.h | 1
sound/usb/endpoint.c | 7
sound/usb/format.c | 1
sound/usb/line6/driver.c | 14
sound/usb/line6/driver.h | 2
sound/usb/line6/podhd.c | 6
sound/usb/line6/toneport.c | 2
sound/usb/misc/ua101.c | 4
sound/usb/quirks.c | 1
tools/arch/x86/lib/insn.c | 5
tools/bpf/bpftool/prog.c | 16
tools/include/asm-generic/unaligned.h | 23
tools/lib/bpf/bpf.c | 4
tools/lib/bpf/bpf_core_read.h | 2
tools/lib/bpf/btf.c | 22
tools/lib/bpf/libbpf.c | 8
tools/lib/bpf/skel_internal.h | 6
tools/objtool/arch/x86/decode.c | 20
tools/objtool/check.c | 159 +++---
tools/objtool/include/objtool/arch.h | 1
tools/perf/util/bpf-event.c | 4
tools/perf/util/intel-pt-decoder/Build | 2
tools/testing/selftests/bpf/prog_tests/perf_buffer.c | 4
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 4
tools/testing/selftests/bpf/prog_tests/test_ima.c | 3
tools/testing/selftests/bpf/progs/strobemeta.h | 4
tools/testing/selftests/bpf/test_progs.c | 4
tools/testing/selftests/bpf/test_xdp_redirect_multi.sh | 62 +-
tools/testing/selftests/bpf/verifier/array_access.c | 2
tools/testing/selftests/bpf/xdp_redirect_multi.c | 4
tools/testing/selftests/core/close_range_test.c | 2
tools/testing/selftests/kvm/lib/x86_64/svm.c | 14
tools/testing/selftests/kvm/x86_64/mmio_warning_test.c | 2
tools/testing/selftests/net/Makefile | 9
tools/testing/selftests/net/fib_nexthops.sh | 1
tools/testing/selftests/net/forwarding/bridge_igmp.sh | 12
tools/testing/selftests/net/forwarding/bridge_mld.sh | 12
tools/testing/selftests/net/gre_gso.sh | 9
tools/testing/selftests/net/mptcp/mptcp_join.sh | 2
tools/testing/selftests/net/udpgso_bench_rx.c | 11
tools/testing/selftests/sched/cs_prctl_test.c | 28 -
tools/testing/selftests/x86/iopl.c | 78 ++-
tools/tracing/latency/latency-collector.c | 2
984 files changed, 8833 insertions(+), 5050 deletions(-)
Abinaya Kalaiselvan (1):
ath10k: fix module load regression with iram-recovery feature
Aharon Landau (1):
RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
Ahmad Fatoum (1):
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Ajay Singh (1):
wilc1000: fix possible memory leak in cfg_scan_result()
Ajish Koshy (1):
scsi: pm80xx: Fix lockup in outbound queue management
Alagu Sankar (1):
ath10k: high latency fixes for beacon buffer
Aleksander Jan Bajkowski (3):
MIPS: lantiq: dma: add small delay after reset
MIPS: lantiq: dma: reset correct number of channel
MIPS: lantiq: dma: fix burst length for DEU
Alex Bee (2):
drm: bridge: it66121: Fix return value it66121_probe
arm64: dts: rockchip: Fix GPU register width for RK3328
Alex Deucher (3):
drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
drm/amdgpu/powerplay: fix sysfs_emit/sysfs_emit_at handling
Alex Sierra (1):
drm/amdkfd: rm BO resv on validation to avoid deadlock
Alex Xu (Hello71) (1):
drm/plane-helper: fix uninitialized variable reference
Alexander Tsoy (1):
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Alexandru Ardelean (1):
iio: st_sensors: disable regulators after device unregistration
Alexei Starovoitov (2):
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
Alexey Gladkov (1):
Fix user namespace leak
Alok Prasad (1):
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Amelie Delaunay (5):
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
usb: dwc2: drd: reset current session before setting the new one
dmaengine: stm32-dma: fix stm32_dma_get_max_width
dmaengine: stm32-dma: fix burst in case of unaligned memory address
Anand Jain (1):
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Anand Moon (3):
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
arm64: dts: meson-sm1: Fix the pwm regulator supply properties
Anant Thazhemadam (1):
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Anatolij Gustschin (1):
dmaengine: bestcomm: fix system boot lockups
Anders Roxell (1):
PM: hibernate: fix sparse warnings
Andrea Righi (3):
blk-wbt: prevent NULL pointer dereference in wb_timer_fn
selftests/bpf: Fix fclose/pclose mismatch in test_progs
selftests: net: properly support IPv6 in GSO GRE test
Andreas Gruenbacher (3):
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
gfs2: Cancel remote delete work asynchronously
gfs2: Fix glock_hash_walk bugs
Andreas Kemnade (1):
arm: dts: omap3-gta04a4: accelerometer irq fix
Andrej Shadura (2):
HID: u2fzero: clarify error check and length calculations
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrew Halaney (2):
dyndbg: make dyndbg a known cli param
init: make unknown command line param message clearer
Andrey Grodzovsky (2):
drm/amdgpu: Fix MMIO access page fault
drm/amdgpu: Fix crash on device remove/driver unload
Andrii Nakryiko (5):
selftests/bpf: Fix strobemeta selftest regression
libbpf: Fix overflow in BTF sanity checks
libbpf: Fix BTF header parsing checks
libbpf: Fix off-by-one bug in bpf_core_apply_relo()
selftests/bpf: Fix also no-alu32 strobemeta selftest
André Almeida (1):
ACPI: battery: Accept charges over the design capacity as full
Andy Shevchenko (1):
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Anel Orazgaliyeva (1):
cpuidle: Fix kobject memory leaks in error paths
Anson Jacob (1):
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
Anssi Hannula (1):
serial: xilinx_uartps: Fix race condition causing stuck TX
Ansuel Smith (1):
thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
Antoine Tenart (1):
net-sysfs: try not to restart the syscall if it will fail eventually
Arnaud Pouliquen (1):
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Arnd Bergmann (16):
ifb: fix building without CONFIG_NET_CLS_ACT
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
gve: DQO: avoid unused variable warnings
drm/amdgpu: fix warning for overflow check
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
drm: fb_helper: fix CONFIG_FB dependency
crypto: ccree - avoid out-of-range warnings from clang
memstick: avoid out-of-range warning
ARM: 9142/1: kasan: work around LPAE build warning
iommu/mediatek: Fix out-of-range warning with clang
octeontx2-pf: select CONFIG_NET_DEVLINK
drm: fb_helper: improve CONFIG_FB dependency
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
dmaengine: stm32-dma: avoid 64-bit division in stm32_dma_get_max_width
ARM: 9156/1: drop cc-option fallbacks for architecture selection
ath10k: fix invalid dma_addr_t token assignment
Arun Easi (2):
scsi: qla2xxx: Fix crash in NVMe abort path
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Athira Rajeev (1):
powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
Aurabindo Pillai (1):
drm/amd/display: fix null pointer deref when plugging in display
Austin Kim (2):
ALSA: synth: missing check for possible NULL after the call to kstrdup
evm: mark evm_fixmode as __ro_after_init
Avri Altman (1):
scsi: ufs: ufshpb: Properly handle max-single-cmd
Baochen Qiang (2):
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
Baptiste Lepers (1):
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Barnabás Pőcze (1):
platform/x86: wmi: do not fail if disabling fails
Bart Van Assche (1):
scsi: ufs: core: Stop clearing UNIT ATTENTIONS
Bean Huo (2):
scsi: ufs: core: Fix ufshcd_probe_hba() prototype to match the definition
scsi: ufs: core: Fix NULL pointer dereference
Beld Zhang (1):
io-wq: fix max-workers not correctly set on multi-node system
Ben Greear (1):
mt76: mt7915: fix hwmon temp sensor mem use-after-free
Ben Skeggs (1):
ce/gf100: fix incorrect CE0 address calculation on some GPUs
Benjamin Li (2):
wcn36xx: handle connection loss indication
wcn36xx: add proper DMA memory barriers in rx path
Bhupesh Sharma (1):
arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
Biju Das (1):
pinctrl: renesas: rzg2l: Fix missing port register 21h
Bixuan Cui (2):
io-wq: Remove duplicate code in io_workqueue_create()
powerpc/44x/fsp2: add missing of_node_put
Bjorn Andersson (1):
soc: qcom: rpmhpd: Make power_on actually enable the domain
Borislav Petkov (3):
x86/insn: Use get_unaligned() instead of memcpy()
selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
x86/sev: Make the #VC exception stacks part of the default stacks storage
Brett Creeley (1):
ice: Fix not stopping Tx queues for VFs
Bryan O'Donoghue (2):
Revert "wcn36xx: Enable firmware link monitoring"
wcn36xx: Fix Antenna Diversity Switching
Catherine Sullivan (1):
gve: Track RX buffer allocation failures
Charan Teja Reddy (1):
dma-buf: WARN on dmabuf release with pending attachments
Chen-Yu Tsai (2):
media: rkvdec: Do not override sizeimage for output format
media: rkvdec: Support dynamic resolution changes
Chengfeng Ye (1):
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Chenyuan Mi (1):
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
Christian König (1):
dma-buf: fix and rework dma_buf_poll v7
Christian Löhle (1):
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Christophe JAILLET (13):
media: meson-ge2d: Fix rotation parameter changes detection in 'ge2d_s_ctrl()'
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
mmc: mxs-mmc: disable regulator on error and in the remove function
ipmi: kcs_bmc: Fix a memory leak in the error handling path of 'kcs_bmc_serio_add_device()'
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
ASoC: rsnd: Fix an error handling path in 'rsnd_node_count()'
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
PCI: j721e: Fix j721e_pcie_probe() error path
litex_liteeth: Fix a double free in the remove function
net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
Christophe Leroy (6):
powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype for 'create_section_mapping'
video: fbdev: chipsfb: use memset_io() instead of memset()
powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
powerpc/book3e: Fix set_memory_x() and set_memory_nx()
powerpc: Don't provide __kernel_map_pages() without ARCH_SUPPORTS_DEBUG_PAGEALLOC
Claudio Imbrenda (2):
KVM: s390: pv: avoid double free of sida page
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
Claudiu Beznea (6):
power: reset: at91-reset: check properly the return value of devm_of_iomap
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
clk: at91: clk-master: check if div or pres is zero
clk: at91: clk-master: fix prescaler logic
dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Clément Léger (1):
clk: at91: check pmc node status before registering syscore ops
Colin Ian King (4):
media: cxd2880-spi: Fix a null pointer dereference on error handling path
media: cx23885: Fix snd_card_free call on null card pointer
media: em28xx: Don't use ops->suspend if it is NULL
mmc: moxart: Fix null pointer dereference on pointer host
Coly Li (2):
bcache: fix use-after-free problem in bcache_device_free()
bcache: Revert "bcache: use bvec_virt"
Corey Minyard (2):
ipmi:watchdog: Set panic count to proper value on a panic
ipmi: Disable some operations during a panic
Daeho Jeong (1):
f2fs: include non-compressed blocks in compr_written_block
Daejun Park (1):
scsi: ufs: ufshpb: Use proper power management API
Dafna Hirschfeld (1):
media: mtk-vcodec: venc: fix return value when start_streaming fails
Damien Le Moal (1):
libata: fix read log timeout value
Dan Carpenter (17):
tpm: Check for integer overflow in tpm2_map_response_body()
ath11k: fix some sleeping in atomic bugs
b43legacy: fix a lower bounds test
b43: fix a lower bounds test
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init()
drm/msm: potential error pointer dereference in init()
drm/msm: unlock on error in get_sched_entity()
drm/msm: fix potential NULL dereference in cleanup
drm/msm: uninitialized variable in msm_gem_import()
mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
usb: gadget: hid: fix error code in do_config()
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
phy: ti: gmii-sel: check of_get_address() for failure
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
zram: off by one in read_block_state()
gve: Fix off by one in gve_tx_timeout()
Dan Schatzberg (1):
cgroup: Fix rootcg cpu.stat guest double counting
Dan Williams (1):
cxl/pci: Fix NULL vs ERR_PTR confusion
Daniel Borkmann (2):
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Daniel Jordan (1):
crypto: pcrypt - Delay write to padata->info
Daniel Thompson (1):
kdb: Adopt scheduler's task classification
Dave Jiang (4):
dmaengine: idxd: move out percpu_ref_exit() to ensure it's outside submission
dmanegine: idxd: fix resource free ordering on driver removal
dmaengine: idxd: reconfig device after device reset command
dmaengine: idxd: fix resource leak on dmaengine driver disable
Dave Jones (1):
x86/mce: Add errata workaround for Skylake SKX37
David Hildenbrand (5):
s390/gmap: validate VMA in __gmap_zap()
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
s390/mm: validate VMA in PGSTE manipulation functions
s390/mm: fix VMA and page table handling code in storage key handling functions
s390/uv: fully validate the VMA before calling follow_page()
David Stevens (2):
iommu/dma: Fix sync_sg with swiotlb
iommu/dma: Fix arch_sync_dma for map
David Virag (1):
soc: samsung: exynos-pmu: Fix compilation when nothing selects CONFIG_MFD_CORE
David Woodhouse (1):
KVM: x86: Fix recording of guest steal time / preempted status
David Yang (1):
samples/bpf: Fix application of sizeof to pointer
Denis Kirjanov (1):
powerpc/xmon: fix task state output
Deren Wu (2):
mt76: mt7921: Fix out of order process by invalid event pkt
mt76: mt7921: fix dma hang in rmmod
Derong Liu (1):
mmc: mtk-sd: Add wait dma stop done flow
Desmond Cheong Zhi Xi (2):
Bluetooth: call sock_hold earlier in sco_conn_del
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Dinghao Liu (1):
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Dirk Bender (1):
media: mt9p031: Fix corrupted frame after restarting stream
Dmitriy Ulitin (1):
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Dmitry Baryshkov (5):
drm/msm/dsi: do not enable irq handler before powering up the host
soc: qcom: socinfo: add two missing PMIC IDs
soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
phy: qcom-qmp: another fix for the sc8180x PCIe definition
drm/bridge/lontium-lt9611uxc: fix provided connector suport
Dmitry Bogdanov (1):
scsi: target: core: Remove from tmr_list during LUN unlink
Dmitry Osipenko (2):
ASoC: tegra: Set default card name for Trimslice
ASoC: tegra: Restore AC97 support
Dominique Martinet (1):
9p/net: fix missing error check in p9_check_errors
Dong Aisheng (4):
remoteproc: imx_rproc: Fix TCM io memory type
remoteproc: Fix the wrong default value of is_iomem
remoteproc: imx_rproc: Fix ignoring mapping vdev regions
remoteproc: imx_rproc: Fix rsc-table name
Dongjin Kim (1):
arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
Dongliang Mu (4):
JFS: fix memleak in jfs_mount
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
dmaengine: tegra210-adma: fix pm runtime unbalance
f2fs: fix UAF in f2fs_available_free_memory
Douglas Anderson (1):
arm64: dts: qcom: sc7180: Base dynamic CPU power coefficients in reality
Dust Li (1):
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata (1):
vsock: prevent unnecessary refcnt inc for nonblocking connect
Eric Badger (1):
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Eric Biggers (1):
fscrypt: allow 256-bit master keys with AES-256-XTS
Eric Dumazet (7):
net: annotate data-race in neigh_output()
inet: remove races in inet{6}_getname()
tcp: switch orphan_count to bare per-cpu counters
bpf: Avoid races in __bpf_prog_run() for 32bit arches
bpf: Fixes possible race in update_prog_stats() for 32bit arches
llc: fix out-of-bound array index in llc_sk_dev_hash()
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Eric W. Biederman (4):
signal: Remove the bogus sigkill_pending in ptrace_stop
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Eric Whitney (1):
Revert "ext4: enforce buffer head state assertion in ext4_da_map_blocks"
Eugen Hristev (1):
media: atmel: fix the ispck initialization
Eugene Syromiatnikov (1):
mctp: handle the struct sockaddr_mctp padding fields
Evan Quan (1):
drm/amdgpu: fix uvd crash on Polaris12 during driver unloading
Evgeny Novikov (6):
media: atomisp: Fix error handling in probe
media: vidtv: Fix memory leak in remove
media: ttusb-dec: avoid release of non-acquired mutex
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
mtd: rawnand: intel: Fix potential buffer overflow in probe
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Ewan D. Milne (1):
scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
Fabio Estevam (2):
ath10k: sdio: Add missing BH locking around napi_schdule()
Revert "drm/imx: Annotate dma-fence critical section in commit path"
Fabrice Gasnier (1):
ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
Fei Shao (2):
mailbox: mtk-cmdq: Validate alias_id on probe
mailbox: mtk-cmdq: Fix local clock ID usage
Felix Fietkau (1):
mt76: mt7615: fix skb use-after-free on mac reset
Filipe Manana (1):
btrfs: fix lost error handling when replaying directory deletes
Florian Westphal (3):
vrf: run conntrack only in context of lower/physdev for locally generated packets
mptcp: do not shrink snd_nxt when recovering
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Frank Rowand (1):
of: unittest: fix EXPECT text for gpio hog errors
Gao Xiang (2):
erofs: don't trigger WARN() when decompression fails
erofs: fix unsafe pagevec reuse of hooked pclusters
Geert Uytterhoeven (7):
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
mips: cm: Convert to bitfield API to fix out-of-bounds access
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
auxdisplay: ht16k33: Connect backlight to fbdev
auxdisplay: ht16k33: Fix frame buffer device blanking
Geliang Tang (1):
selftests: mptcp: fix proto type in link_failure tests
Giovanni Cabiddu (3):
crypto: qat - power up 4xxx device
crypto: qat - detect PFVF collision after ACK
crypto: qat - disregard spurious PFVF interrupts
Greg Kroah-Hartman (1):
Linux 5.15.3
Guangbin Huang (1):
net: hns3: allow configure ETS bandwidth of all TCs
Guchun Chen (1):
drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage
Guido Günther (1):
drm/bridge: nwl-dsi: Add atomic_get_input_bus_fmts
Guo Ren (1):
irqchip/sifive-plic: Fixup EOI failed when masked
Guoqing Jiang (1):
md/raid1: only allocate write behind bio for WriteMostly device
Guru Das Srinagesh (1):
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
Gustavo A. R. Silva (1):
powerpc/vas: Fix potential NULL pointer dereference
Halil Pasic (1):
s390/cio: make ccw_device_dma_* more robust
Hangbin Liu (9):
kselftests/net: add missed icmp.sh test to Makefile
kselftests/net: add missed setup_loopback.sh/setup_veth.sh to Makefile
kselftests/net: add missed SRv6 tests
kselftests/net: add missed vrf_strict_mode_test.sh test to Makefile
kselftests/net: add missed toeplitz.sh/toeplitz_client.sh to Makefile
selftests/bpf/xdp_redirect_multi: Put the logs to tmp folder
selftests/bpf/xdp_redirect_multi: Use arping to accurate the arp number
selftests/bpf/xdp_redirect_multi: Give tcpdump a chance to terminate cleanly
selftests/bpf/xdp_redirect_multi: Limit the tests in netns
Hannes Reinecke (1):
nvme: drop scan_lock and always kick requeue list when removing namespaces
Hans Verkuil (1):
media: vidtv: move kfree(dvb) to vidtv_bridge_dev_release()
Hans de Goede (8):
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Bluetooth: hci_h5: Fix (runtime)suspend issues on RTL8723BS HCIs
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
media: videobuf2-dma-sg: Fix buf->vb NULL pointer dereference
Hao Wu (1):
tpm: fix Atmel TPM crash caused by too frequent queries
Haoyue Xu (1):
RDMA/hns: Fix initial arm_st of CQ
Harald Freudenberger (1):
s390/ap: Fix hanging ioctl caused by orphaned replies
Hari Bathini (1):
powerpc/bpf: Fix write protecting JIT code
Harry Wentland (1):
drm/amd/display: Pass display_pipe_params_st as const in DML
Hector.Yuan (1):
cpufreq: Fix parameter in parse_perf_domain()
Heiner Kallweit (2):
i2c: i801: Use PCI bus rescan mutex to protect P2SB access
net: phy: fix duplex out of sync problem while changing settings
Helge Deller (4):
parisc: Fix set_fixmap() on PA1.x CPUs
parisc: Fix ptrace check on syscall return
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
parisc: Fix backtrace to always include init funtion names
Henrik Grimler (1):
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Horia Geantă (1):
crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
Huang Guobin (1):
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Hui Wang (2):
ACPI: resources: Add DMI-based legacy IRQ override quirk
ACPI: resources: Add one more Medion model in IRQ override quirk
Iago Toral Quiroga (1):
drm/v3d: fix wait for TMU write combiner flush
Ian Rogers (1):
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Igor Pylypiv (1):
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
Ilya Leoshkevich (1):
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
Imre Deak (2):
fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
drm/i915/fb: Fix rounding error in subsampled plane size calculation
Ingmar Klein (1):
PCI: Mark Atheros QCA6174 to avoid bus reset
Israel Rukshin (3):
nvmet: fix use-after-free when a port is removed
nvmet-rdma: fix use-after-free when a port is removed
nvmet-tcp: fix use-after-free when a port is removed
Ivan Vecera (1):
net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
J. Bruce Fields (1):
nfsd: don't alloc under spinlock in rpc_parse_scope_id
Jack Andersen (1):
mfd: dln2: Add cell for initializing DLN2 ADC
Jack Pham (1):
usb: dwc3: gadget: Skip resizing EP's TX FIFO if already resized
Jackie Liu (5):
thermal/drivers/qcom/lmh: make QCOM_LMH depends on QCOM_SCM
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
ar7: fix kernel builds for compiler test
scsi: bsg: Fix errno when scsi_bsg_register_queue() fails
Jaegeuk Kim (1):
f2fs: should use GFP_NOFS for directory inodes
Jakob Hauser (1):
power: supply: rt5033_battery: Change voltage values to µV
Jakub Kicinski (4):
net: sched: update default qdisc visibility after Tx queue cnt changes
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
udp6: allow SO_MARK ctrl msg to affect routing
ethtool: fix ethtool msg len calculation for pause stats
James Smart (4):
scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
scsi: lpfc: Fix NVMe I/O failover to non-optimized path
scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
James Zhu (1):
drm/amdgpu: move iommu_resume before ip init/resume
Jan Kara (1):
ocfs2: fix data corruption on truncate
Jane Malalane (1):
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Janis Schoetterl-Glausch (1):
KVM: s390: Fix handle_sske page fault handling
Jaroslav Kysela (1):
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jason Gunthorpe (1):
drm/ttm: remove ttm_bo_vm_insert_huge()
Jason Ormes (1):
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
Jens Axboe (3):
io-wq: serialize hash clear with wakeup
block: bump max plugged deferred size from 16 to 32
block: remove inaccurate requeue check
Jeremy Soller (1):
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
Jernej Skrabec (1):
drm/sun4i: Fix macros in sun8i_csc.h
Jessica Zhang (2):
drm/msm: Fix potential NULL dereference in DPU SSPP
drm/msm/dsi: fix wrong type in msm_dsi_host
Jia-Ju Bai (1):
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Jiasheng Jiang (1):
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Jie Wang (2):
net: hns3: fix ROCE base interrupt vector initialization bug
net: hns3: fix pfc packet number incorrect after querying pfc parameters
Jim Mattson (1):
KVM: selftests: Fix nested SVM tests when built with clang
Jimmy Kizito (1):
drm/amd/display: Fix null pointer dereference for encoders
Jiri Olsa (1):
selftests/bpf: Fix perf_buffer test on system with offline cpus
Joerg Roedel (1):
x86/sev: Fix stack type check in vc_switch_off_ist()
Johan Almbladh (1):
bpf/tests: Fix error in tail call limit tests
Johan Hovold (15):
Input: iforce - fix control-message timeout
ALSA: ua101: fix division by zero at probe
ALSA: 6fire: fix control and bulk message timeouts
ALSA: line6: fix control and interrupt message timeouts
mwifiex: fix division by zero in fw download path
ath6kl: fix division by zero in send path
ath6kl: fix control-message timeout
ath10k: fix control-message timeout
ath10k: fix division by zero in send path
rtl8187: fix control-message timeouts
serial: 8250: fix racy uartclk update
Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
most: fix control-message timeouts
USB: iowarrior: fix control-message timeouts
USB: chipidea: fix interrupt deadlock
Johannes Berg (6):
iwlwifi: mvm: disable RX-diversity in powersave
mac80211: twt: don't use potentially unaligned pointer
cfg80211: always free wiphy specific regdomain
iwlwifi: mvm: reset PM state on unsuccessful resume
iwlwifi: pnvm: don't kmemdup() more than we have
iwlwifi: pnvm: read EFI data only if long enough
John David Anglin (1):
parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
John Fastabend (3):
bpf, sockmap: Remove unhash handler for BPF sockmap usage
bpf, sockmap: Fix race in ingress receive verdict with redirect to self
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
John Fraker (1):
gve: Recover from queue stall due to missed IRQ
John Keeping (1):
Input: st1232 - increase "wait ready" timeout
Johnathon Clark (1):
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
Jon Maxwell (1):
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Jonas Dreßler (5):
mwifiex: Read a PCI register after writing the TX ring write pointer
mwifiex: Try waking the firmware until we get an interrupt
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
mwifiex: Properly initialize private structure on interface type changes
mwifiex: Send DELBA requests according to spec
Josef Bacik (1):
btrfs: do not take the uuid_mutex in btrfs_rm_device
Josh Don (1):
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
Juergen Gross (1):
xen/balloon: add late_initcall_sync() for initial ballooning done
Junji Wei (1):
RDMA/rxe: Fix wrong port_cap_flags
Jussi Maki (1):
bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
Kai Song (1):
mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
Kai Vehmanen (1):
component: do not leave master devres group open after bind
Kai-Heng Feng (1):
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Kalesh Singh (1):
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Kan Liang (7):
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
perf/x86/intel/uncore: Fix invalid unit check
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
perf/x86/intel/uncore: Fix Intel SPR CHA event constraints
perf/x86/intel/uncore: Fix Intel SPR IIO event constraints
perf/x86/intel/uncore: Fix Intel SPR M2PCIE event constraints
perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints
Kees Cook (7):
leaking_addresses: Always print a trailing newline
fortify: Fix dropped strcpy() compile-time write overflow check
media: radio-wl1273: Avoid card name truncation
media: si470x: Avoid card name truncation
media: tm6000: Avoid card name truncation
clocksource/drivers/timer-ti-dm: Select TIMER_OF
sparc: Add missing "FORCE" target when using if_changed
Kewei Xu (1):
i2c: mediatek: fixing the incorrect register offset
Kishon Vijay Abraham I (6):
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie node
arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
Krzysztof Kozlowski (3):
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
mfd: core: Add missing of_node_put for loop iteration
Kumar Kartikeya Dwivedi (3):
libbpf: Fix skel_internal.h to set errno on loader retval < 0
selftests/bpf: Fix fd cleanup in sk_lookup test
selftests/bpf: Fix memory leak in test_ima
Kunihiko Hayashi (1):
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
Kuogee Hsieh (1):
arm64: dts: qcom: sc7280: fix display port phy reg property
Lad Prabhakar (1):
spi: spi-rpc-if: Check return value of rpcif_sw_init()
Lang Yu (2):
drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw()
Lars-Peter Clausen (1):
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Lasse Collin (2):
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
lib/xz: Validate the value before assigning it to an enum variable
Laurent Vivier (1):
KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
Leon Romanovsky (5):
net/mlx5: Publish and unpublish all devlink parameters at once
bnxt_en: Check devlink allocation and registration status
qed: Don't ignore devlink allocation failures
net/mlx5: Accept devlink user input after driver initialization complete
RDMA/mlx4: Return missed an error if device doesn't support steering
Leon Yen (2):
mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
mt76: connac: fix GTK rekey offload failure on WPA mixed mode
Li Chen (1):
PCI: cadence: Add cdns_plat_pcie_probe() missing return
Li Zhang (1):
btrfs: clear MISSING device status bit in btrfs_close_one_device
Li Zhijian (1):
kselftests/sched: cleanup the child processes
Linus Lüssing (1):
ath9k: Fix potential interrupt storm on queue reset
Linus Torvalds (1):
thermal: int340x: fix build on 32-bit targets
Linus Walleij (2):
net: dsa: rtl8366rb: Fix off-by-one bug
net: dsa: rtl8366: Fix a bug in deleting VLANs
Liu Jian (1):
skmsg: Lose offset info in sk_psock_skb_ingress
Logan Gunthorpe (2):
RDMA/core: Set sgtable nents when using ib_dma_virt_map_sg()
iommu/dma: Fix incorrect error return on iommu deferred attach
Loic Poulain (8):
wcn36xx: Fix HT40 capability for 2Ghz band
wcn36xx: Fix tx_status mechanism
wcn36xx: Fix (QoS) null data frame bitrate/modulation
wcn36xx: Correct band/freq reporting on RX
wcn36xx: Fix packet drop on resume
ath10k: Fix missing frame timestamp for beacon/probe-resp
wcn36xx: Fix discarded frames due to wrong sequence number
wcn36xx: Channel list update before hardware scan
Lorenzo Bianconi (10):
mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event
mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb
mt76: mt7921: fix endianness warning in mt7921_update_txs
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
mt76: mt7921: fix survey-dump reporting
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
mt76: overwrite default reg_ops if necessary
mt76: mt7921: always wake device if necessary in debugfs
mt76: mt7915: fix possible infinite loop release semaphore
mt76: connac: fix possible NULL pointer dereference in mt76_connac_get_phy_mode_v2
Luis Chamberlain (7):
floppy: fix calling platform_device_unregister() on invalid drives
nvdimm/btt: do not call del_gendisk() if not needed
nvdimm/pmem: cleanup the disk if pmem_release_disk() is yet assigned
block/ataflop: use the blk_cleanup_disk() helper
block/ataflop: add registration bool before calling del_gendisk()
block/ataflop: provide a helper for cleanup up an atari disk
block: fix device_add_disk() kobject_create_and_add() error handling
Lukas Wunner (1):
ifb: Depend on netfilter alternatively to tc
Maciej W. Rozycki (1):
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
Mansur Alisha Shaik (1):
media: venus: fix vpp frequency calculation for decoder
Marc Kleine-Budde (3):
can: mcp251xfd: mcp251xfd_irq(): add missing can_rx_offload_threaded_irq_finish() in case of bus off
can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to unsigned int
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
Marek Behún (6):
PCI: pci-bridge-emul: Fix emulation of W1C bits
PCI: aardvark: Fix return value of MSI domain .alloc() method
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
PCI: aardvark: Don't spam about PIO Response Status
net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than 10
net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
Marek Vasut (3):
rsi: Fix module dev_oper_mode parameter description
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
video: backlight: Drop maximum brightness override for brightness zero
Marijn Suijten (2):
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
arm64: dts: qcom: pmi8994: Fix "eternal"->"external" typo in WLED node
Mario Limonciello (1):
drm/amd/display: Look at firmware version to determine using dmub on dcn21
Marios Makassikis (1):
ksmbd: Fix buffer length check in fsctl_validate_negotiate_info()
Mark Brown (11):
spi: Check we have a spi_device_id for each DT compatible
tpm_tis_spi: Add missing SPI ID
iio: st_pressure_spi: Add missing entries SPI to device ID table
ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
rtc: ds1302: Add SPI ID table
rtc: ds1390: Add SPI ID table
rtc: pcf2123: Add SPI ID table
rtc: mcp795: Add SPI ID table
Input: ariel-pwrbutton - add SPI device ID table
mfd: cpcap: Add SPI device ID table
mfd: sprd: Add SPI device ID table
Mark Rutland (2):
KVM: arm64: Extract ESR_ELx.EC only
irq: mips: avoid nested irq_enter()
Markus Schneider-Pargmann (1):
hwrng: mtk - Force runtime pm ops for sleep ops
Martin Fuzzey (3):
rsi: fix occasional initialisation failure with BT coex
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
rsi: fix rate mask set leading to P2P failure
Martin Kepplinger (1):
media: imx: set a media_device bus_info string
Masahiro Yamada (2):
MIPS: fix duplicated slashes for Platform file path
MIPS: fix *-pkg builds for loongson2ef platform
Masami Hiramatsu (2):
ia64: kprobes: Fix to pass correct trampoline address to the handler
ARM: clang: Do not rely on lr register for stacktrace
Mathias Nyman (1):
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
Mathieu Desnoyers (1):
tracing: Fix missing trace_boot_init_histograms kstrdup NULL checks
Matthew Auld (1):
drm/ttm: stop calling tt_swapin in vm_access
Matthew Brost (1):
drm/i915/guc: Fix blocked context accounting
Matthew Wilcox (Oracle) (1):
mm/filemap.c: remove bogus VM_BUG_ON
Matthias Schiffer (1):
net: phy: micrel: make *-skew-ps check more lenient
Mauricio Vásquez (1):
libbpf: Fix memory leak in btf__dedup()
Max Gurtovoy (1):
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Maxim Kiselev (1):
net: davinci_emac: Fix interrupt pacing disable
Maximilian Luz (3):
platform/surface: aggregator_registry: Add support for Surface Laptop Studio
HID: surface-hid: Use correct event registry for managing HID events
HID: surface-hid: Allow driver matching for target ID 1 devices
Mehrdad Arshad Rad (1):
libbpf: Fix lookup_and_delete_elem_flags error reporting
Meng Li (2):
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
soc: fsl: dpio: use the combined functions to protect critical zone
Menglong Dong (1):
workqueue: make sysfs of unbound kworker cpumask more clever
Miaohe Lin (1):
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Michael Pratt (1):
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
Michael Schmitz (2):
block: ataflop: fix breakage introduced at blk-mq refactoring
block: ataflop: more blk-mq refactoring fixes
Michael Tretter (1):
media: allegro: ignore interrupt if mailbox is not initialized
Michael Walle (1):
crypto: caam - disable pkc for non-E SoCs
Michal Hocko (1):
mm, oom: do not trigger out_of_memory from the #PF
Michał Mirosław (1):
ARM: 9155/1: fix early early_iounmap()
Mihail Chindris (2):
drivers: iio: dac: ad5766: Fix dt property name
Documentation:devicetree:bindings:iio:dac: Fix val
Miklos Szeredi (2):
fuse: fix page stealing
ovl: fix filattr copy-up failure
Miquel Raynal (11):
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
mtd: rawnand: arasan: Prevent an unsupported configuration
mtd: rawnand: fsmc: Fix use of SM ORDER
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
Mirela Rabulea (1):
media: imx-jpeg: Fix possible null pointer dereference
Muchun Song (1):
seq_file: fix passing wrong private data
Nadezda Lutovinova (2):
media: s5p-mfc: Add checking to s5p_mfc_probe().
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Naina Mehta (1):
soc: qcom: llcc: Disable MMUHWT retention
Namjae Jeon (2):
ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION
ksmbd: don't need 8byte alignment for request length in ksmbd_check_message
Nathan Chancellor (2):
crypto: sm4 - Do not change section of ck and sbox
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Nathan Lynch (3):
powerpc: fix unbalanced node refcount in check_kvm_guest()
powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
powerpc/pseries/mobility: ignore ibm, platform-facilities updates
Neeraj Upadhyay (1):
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Nehal Bakulchandra Shah (1):
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Nicholas Piggin (2):
powerpc/32e: Ignore ESR in instruction storage interrupt handler
powerpc/64s/interrupt: Fix check_return_regs_valid() false positive
Nick Desaulniers (1):
arm64: vdso32: suppress error message for 'make mrproper'
Nick Hainke (1):
mt76: mt7615: mt7622: fix ibss and meshpoint
Nikita Yushchenko (1):
staging: most: dim2: do not double-register the same device
Niklas Söderlund (1):
media: rcar-vin: Use user provided buffers when starting
Nikolay Aleksandrov (1):
selftests: net: bridge: update IGMP/MLD membership interval value
Nuno Sá (2):
iio: ad5770r: make devicetree property reading consistent
iio: adis: do not disabe IRQs in 'adis_init()'
Oleksij Rempel (1):
iio: adc: tsc2046: fix scan interval warning
Olivier Moysan (2):
ARM: dts: stm32: fix SAI sub nodes register range
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
Ondrej Jirman (1):
media: sun6i-csi: Allow the video device to be open multiple times
Ondrej Mosnacek (1):
selinux: fix race condition when computing ocontext SIDs
Ovidiu Panait (1):
crypto: octeontx2 - set assoclen in aead_do_fallback()
Pablo Neira Ayuso (2):
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
netfilter: nft_dynset: relax superfluous check on set updates
Pali Rohár (14):
serial: core: Fix initializing and restoring termios speed
PCI: aardvark: Do not clear status bits of masked interrupts
PCI: aardvark: Fix checking for link up via LTSSM state
PCI: aardvark: Do not unmask unused interrupts
PCI: aardvark: Fix reporting Data Link Layer Link Active
PCI: aardvark: Fix configuring Reference clock
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
serial: 8250: Fix reporting real baudrate value in c_ospeed field
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
PCI: aardvark: Fix PCIe Max Payload Size setting
Paolo Bonzini (1):
KVM: x86: move guest_pv_has out of user_access section
Parav Pandit (1):
vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit
Paul Cercueil (2):
drm/bridge: it66121: Initialize {device,vendor}_ids
drm/bridge: it66121: Wait for next bridge to be probed
Paul E. McKenney (1):
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
Paulo Alcantara (2):
cifs: set a minimum of 120s for next dns resolution
cifs: fix memory leak of smb3_fs_context_dup::server_hostname
Pavel Begunkov (2):
io-wq: remove worker to owner tw dependency
io_uring: honour zeroes as io-wq worker limits
Pavel Skripkin (5):
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Bluetooth: hci_uart: fix GPF in h5_recv
media: em28xx: add missing em28xx_close_extension
media: dvb-usb: fix ununit-value in az6027_rc_query
staging: r8188eu: fix memory leak in rtw_set_key
Pawan Gupta (1):
smackfs: Fix use-after-free in netlbl_catmap_walk()
Pekka Korpinen (1):
iio: dac: ad5446: Fix ad5622_write() return value
Peng Fan (1):
remoteproc: elf_loader: Fix loading segment when is_iomem true
Peter Rosin (1):
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Peter Zijlstra (8):
x86/iopl: Fake iopl(3) CLI/STI usage
locking/lockdep: Avoid RCU-induced noinstr fail
x86/mm/64: Improve stack overflow warnings
x86: Increase exception stack sizes
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
objtool: Handle __sanitize_cov*() tail calls
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
rcu: Fix rcu_dynticks_curr_cpu_in_eqs() vs noinstr
Petr Machata (1):
selftests: net: fib_nexthops: Wait before checking reported idle time
Phoenix Huang (1):
Input: elantench - fix misreporting trackpoint coordinates
Pradeep Kumar Chitrapu (1):
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
Punit Agrawal (1):
kprobes: Do not use local variable when creating debugfs file
Quentin Monnet (1):
bpftool: Avoid leaking the JSON writer prepared for program metadata
Quinn Tran (10):
scsi: qla2xxx: Fix use after free in eh_abort path
scsi: qla2xxx: edif: Use link event to wake up app
scsi: qla2xxx: Relogin during fabric disturbance
scsi: qla2xxx: Fix gnl list corruption
scsi: qla2xxx: Turn off target reset during issue_lip
scsi: qla2xxx: edif: Fix app start fail
scsi: qla2xxx: edif: Fix app start delay
scsi: qla2xxx: edif: Flush stale events and msgs on session down
scsi: qla2xxx: edif: Increase ELS payload
scsi: qla2xxx: edif: Fix EDIF bsg
Rafael J. Wysocki (8):
PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
ACPICA: Avoid evaluating methods too early during system resume
ACPI: scan: Release PM resources blocked by unused objects
ACPI: PM: Turn off unused wakeup power resources
ACPI: PM: Fix sharing of wakeup power resources
cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
ACPI: PM: Fix device wakeup power reference counting error
PM: sleep: Avoid calling put_device() under dpm_list_mtx
Rafał Miłecki (2):
ARM: dts: BCM5301X: Fix memory nodes names
arm64: dts: broadcom: bcm4908: Fix UART clock name
Rahul Lakkireddy (1):
cxgb4: fix eeprom len when diagnostics not implemented
Rahul Tanwar (1):
pinctrl: equilibrium: Fix function addition in multiple groups
Rajat Asthana (1):
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Rakesh Babu (1):
octeontx2-pf: Enable promisc/allmulti match MCAM entries.
Randy Dunlap (9):
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
media: i2c: ths8200 needs V4L2_ASYNC
net: fealnx: fix build for UML
net: intel: igc_ptp: fix build for UML
net: tulip: winbond-840: fix build for UML
media: ivtv: fix build for UML
usb: musb: select GENERIC_PHY instead of depending on it
usb: typec: STUSB160X should select REGMAP_I2C
m68k: set a default value for MEMORY_RESERVE
Ranjani Sridharan (1):
ASoC: SOF: topology: do not power down primary core during topology removal
Reiji Watanabe (1):
arm64: arm64_ftr_reg->name may not be a human-readable string
Reimar Döffinger (1):
libata: fix checking of DMA state
Ricardo Ribalda (7):
media: v4l2-ioctl: Fix check_ext_ctrls
media: uvcvideo: Set capability in s_param
media: uvcvideo: Return -EIO for control errors
media: uvcvideo: Set unique vdev name based in type
media: ipu3-imgu: imgu_fmt: Handle properly try
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
media: v4l2-ioctl: S_CTRL output the right value
Richard Fitzgerald (4):
ASoC: cs42l42: Always configure both ASP TX channels
ASoC: cs42l42: Correct some register default values
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
Robert Foss (1):
drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
Robert Marko (1):
mfd: simple-mfd-i2c: Select MFD_CORE to fix build error
Robert-Ionut Alexa (1):
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Rongwei Wang (2):
mm, thp: lock filemap when truncating page cache
mm, thp: fix incorrect unmap behavior for private pages
Russell Currey (1):
powerpc/security: Use a mutex for interrupt exit code patching
Russell King (Oracle) (2):
net: phylink: don't call netif_carrier_off() with NULL netdev
net: phylink: avoid mvneta warning when setting pause parameters
Ryder Lee (3):
mt76: mt7915: fix an off-by-one bound check
mt76: mt7615: fix hwmon temp sensor mem use-after-free
mt76: mt7615: fix monitor mode tear down crash
Sakari Ailus (1):
media: imx258: Fix getting clock frequency
Sandeep Maheswaram (1):
phy: qcom-snps: Correct the FSEL_MASK
Sander Vanheule (1):
gpio: realtek-otto: fix GPIO line IRQ offset
Scott Wood (1):
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
Sean Christopherson (6):
x86/irq: Ensure PI wakeup handler is unregistered before module unload
KVM: x86/mmu: Drop a redundant, broken remote TLB flush
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
KVM: nVMX: Handle dynamic MSR intercept toggling
Sean Wang (5):
mt76: fix build error implicit enumeration conversion
mt76: mt7921: report HE MU radiotap
mt76: mt7921: fix firmware usage of RA info using legacy rates
mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
mt76: mt7921: fix retrying release semaphore without end
Sean Young (3):
media: ite-cir: IR receiver stop working after receive overflow
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
media: ir_toy: assignment to be16 should be of correct type
Sebastian Andrzej Siewior (1):
lockdep: Let lock_is_held_type() detect recursive read as read
Sebastian Krzyszkowiak (2):
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
power: supply: max17042_battery: Clear status bits in interrupt handler
Seevalamuthu Mariappan (1):
ath11k: Align bss_chan_info structure with firmware
Selvin Xavier (2):
RDMA/bnxt_re: Fix query SRQ failure
PCI: Do not enable AtomicOps on VFs
Sergey Senozhatsky (2):
media: videobuf2: rework vb2_mem_ops API
media: videobuf2: always set buffer vb2 pointer
Shaoying Xu (1):
ext4: fix lazy initialization next schedule time computation in more granular unit
Shayne Chen (4):
mt76: mt7915: fix potential overflow of eeprom page index
mt76: mt7915: fix bit fields for HT rate idx
mt76: mt7915: fix sta_rec_wtbl tag len
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
Shin'ichiro Kawasaki (3):
block: Hold invalidate_lock in BLKDISCARD ioctl
block: Hold invalidate_lock in BLKZEROOUT ioctl
block: Hold invalidate_lock in BLKRESETZONE ioctl
Shreyansh Chouhan (1):
crypto: aesni - check walk.nbytes instead of err
Shuah Khan (2):
selftests: kvm: fix mismatched fclose() after popen()
selftests/core: fix conflicting types compile error for close_range()
Shyam Prasad N (1):
cifs: To match file servers, make sure the server hostname matches
Shyam Sundar S K (1):
net: amd-xgbe: Toggle PLL settings during rate change
Sidong Yang (1):
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
Simon Ser (1):
drm/panel-orientation-quirks: add Valve Steam Deck
Srinivas Kandagatla (3):
soundwire: debugfs: use controller id and link_id for debugfs
soundwire: bus: stop dereferencing invalid slave pointer
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
Sriram R (2):
ath11k: Avoid reg rules update during firmware recovery
ath11k: Avoid race during regd updates
Stafford Horne (1):
openrisc: fix SMP tlb flush NULL pointer dereference
Stefan Agner (2):
phy: micrel: ksz8041nl: do not use power down mode
serial: imx: fix detach/attach of serial console
Stefan Schaeckeler (1):
ACPI: AC: Quirk GK45 to skip reading _PSR
Stephan Gerhold (2):
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
Stephane Eranian (1):
perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
Stephane Grosjean (1):
can: peak_usb: always ask for BERR reporting for PCAN-USB devices
Stephen Boyd (1):
ath10k: Don't always treat modem stop events as crashes
Stephen Suryaputra (1):
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Steve French (1):
smb3: do not error on fsync when readonly
Steven Rostedt (VMware) (3):
ring-buffer: Protect ring_buffer_reset() from reentrancy
tracefs: Have tracefs directories not set OTH permission bits by default
tracing: Disable "other" permission bits in the tracefs files
Sudarshan Rajagopalan (1):
arm64: mm: update max_pfn after memory hotplug
Sukadev Bhattiprolu (3):
ibmvnic: don't stop queue in xmit
ibmvnic: Process crqs after enabling interrupts
ibmvnic: delay complete()
Sumit Saxena (1):
scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt
Sungjong Seo (1):
exfat: fix incorrect loading of i_blocks for large files
Suzuki K Poulose (2):
coresight: trbe: Fix incorrect access of the sink specific data
coresight: trbe: Defer the probe on offline CPUs
Sven Eckelmann (1):
ath10k: fix max antenna gain unit
Sven Schnelle (4):
parisc: fix warning in flush_tlb_all
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
s390/tape: fix timer initialization in tape_std_assign()
Sylwester Dziedziuch (1):
ice: Fix replacing VF hardware MAC to existing MAC filter
Tadeusz Struk (2):
scsi: scsi_ioctl: Validate command size
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
Takashi Iwai (13):
Input: i8042 - Add quirk for Fujitsu Lifebook T725
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
ALSA: hda/realtek: Add quirk for ASUS UX550VE
ALSA: mixer: oss: Fix racy access to slots
ALSA: hda: Free card instance properly at probe errors
ALSA: pci: rme: Fix unaligned buffer addresses
ALSA: PCM: Fix NULL dereference at mmap checks
ALSA: timer: Unconditionally unlink slave instances, too
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
ALSA: hda: Reduce udelay() at SKL+ position reporting
ALSA: hda: Use position buffer for SKL+ again
ALSA: usb-audio: Fix possible race at sync of urb completions
ALSA: memalloc: Catch call with NULL snd_dma_buffer pointer
Takashi Sakamoto (1):
ALSA: oxfw: fix functional regression for Mackie Onyx 1640i in v5.14 or later
Tang Bin (1):
crypto: s5p-sss - Add error handling in s5p_aes_probe()
Tao Zhang (1):
coresight: cti: Correct the parameter for pm_runtime_put
Tetsuo Handa (3):
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
ataflop: remove ataflop_probe_lock mutex
Thomas Gleixner (2):
PCI/MSI: Move non-mask check back into low level accessors
PCI/MSI: Destroy sysfs before freeing entries
Thomas Richter (1):
s390/cpumf: cpum_cf PMU displays invalid value after hotplug remove
Tiezhu Yang (1):
samples/kretprobes: Fix return value if register_kretprobe() failed
Tim Crawford (1):
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Tim Gardner (2):
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
net: enetc: unmap DMA in enetc_send_cmd()
Toke Høiland-Jørgensen (1):
libbpf: Don't crash on object files with no symbol tables
Tom Lendacky (3):
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
arch/cc: Introduce a function to check for confidential computing features
x86/sev: Add an x86 version of cc_platform_has()
Tom Rix (2):
media: TDA1997x: handle short reads of hdmi info frame.
apparmor: fix error check
Tong Zhang (1):
scsi: dc395: Fix error case unwinding
Tony Lindgren (3):
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
mmc: sdhci-omap: Fix context restore
bus: ti-sysc: Fix timekeeping_suspended warning on resume
Trond Myklebust (9):
NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
NFS: Ignore the directory size when marking for revalidation
NFS: Fix dentry verifier races
NFS: Fix deadlocks in nfs_scan_commit_list()
NFS: Fix up commit deadlocks
NFS: Fix an Oops in pnfs_mark_request_commit()
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
SUNRPC: Partial revert of commit 6f9f17287e78
Tuo Li (2):
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Vasant Hegde (1):
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Vasily Averin (2):
memcg: prohibit unconditional exceeding the limit of dying tasks
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Vegard Nossum (1):
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Viktor Rosendahl (1):
tools/latency-collector: Use correct size when writing queue_full_warning
Vincent Donnefort (2):
cpufreq: Make policy min/max hard requirements
PM: EM: Fix inefficient states detection
Vincent Mailhol (1):
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
Vineeth Vijayan (1):
s390/cio: check the subchannel validity for dev_busid
Vitaly Kuznetsov (1):
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Vladimir Oltean (3):
net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error
net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
net: stmmac: allow a tc-taprio base-time of zero
Vladimir Zapolskiy (2):
arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
phy: qcom-qusb2: Fix a memory leak on probe
Waiman Long (1):
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Wan Jiabing (1):
soc: qcom: apr: Add of_node_put() before return
Wang Hai (3):
USB: serial: keyspan: fix memleak on probe errors
libertas_tf: Fix possible memory leak in probe and disconnect
libertas: Fix possible memory leak in probe and disconnect
Wang ShaoBo (1):
Bluetooth: fix use-after-free error in lock_sock_nested()
Wang Wensheng (1):
ALSA: timer: Fix use-after-free problem
Wen Gong (1):
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
Will Deacon (1):
KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall
Willem de Bruijn (1):
selftests/net: udpgso_bench_rx: fix port argument
Wojciech Drewek (1):
ice: Move devlink port to PF/VF struct
Wolfram Sang (1):
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
Xiao Ni (1):
md: update superblock after changing rdev flags in state_store
Xiaoming Ni (2):
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
Xin Long (4):
sctp: allow IP fragmentation when PLPMTUD enters Error state
sctp: reset probe_timer in sctp_transport_pl_update
sctp: subtract sctphdr len in sctp_transport_pl_hlen
sctp: return true only for pathmtu update in sctp_transport_pl_toobig
Xin Xiong (1):
mmc: moxart: Fix reference count leaks in moxart_probe
Xiubo Li (1):
ceph: fix mdsmap decode when there are MDS's beyond max_mds
Xuan Zhuo (1):
virtio_ring: check desc == NULL when using indirect with packed
Yaara Baruch (1):
iwlwifi: change all JnP to NO-160 configuration
Yajun Deng (1):
net: net_namespace: Fix undefined member in key_remove_domain()
Yanfei Xu (1):
locking/rwsem: Disable preemption for spinning region
Yang Yingliang (13):
iio: core: fix double free in iio_device_unregister_sysfs()
iio: core: check return value when calling dev_set_name()
pinctrl: core: fix possible memory leak in pinctrl_enable()
iio: buffer: check return value of kstrdup_const()
iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
hwmon: Fix possible memleak in __hwmon_device_register()
driver core: Fix possible memory leak in device_link_add()
power: supply: max17040: fix null-ptr-deref in max17040_probe()
iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
Yassine Oudjana (1):
ASoC: wcd9335: Use correct version to initialize Class H
Yazen Ghannam (1):
EDAC/amd64: Handle three rank interleaving mode
Ye Bin (2):
PM: hibernate: Get block device exclusively in swsusp_check()
nbd: Fix use-after-free in pid_show
Yee Lee (1):
scs: Release kasan vmalloc poison in scs_free process
Yifan Zhang (1):
drm/amdkfd: fix resume error when iommu disabled in Picasso
Yinjun Zhang (2):
nfp: fix NULL pointer access when scheduling dim work
nfp: fix potential deadlock when canceling dim work
Yixing Liu (1):
RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
Yoshitaka Ikeda (1):
spi: Fixed division by zero warning
Yu Kuai (3):
blk-cgroup: synchronize blkg creation against policy deactivation
nbd: fix max value for 'first_minor'
nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
Yuanzheng Song (1):
thermal/core: Fix null pointer dereference in thermal_release()
YueHaibing (2):
opp: Fix return in _opp_add_static_v2()
xen-pciback: Fix return in pm_ctrl_init()
Yufeng Mo (1):
net: hns3: fix kernel crash when unload VF while it is being reset
Zev Weiss (3):
hwmon: (pmbus/lm25066) Add offset coefficients
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
mtd: core: don't remove debugfs directory if device is in use
Zhang Changzhong (3):
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
can: j1939: j1939_can_recv(): ignore messages with invalid source address
can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
Zhang Qiao (1):
kernel/sched: Fix sched_fork() access an invalid sched_task_group
Zhang Rui (1):
cpufreq: intel_pstate: Fix cpu->pstate.turbo_freq initialization
Zhang Yi (2):
quota: check block number when reading the block in quota file
quota: correct error number in free_dqentry()
Zheyu Ma (3):
media: netup_unidvb: handle interrupt properly according to the firmware
memstick: r592: Fix a UAF bug when removing the driver
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ziyang Xuan (4):
char: xillybus: fix msg_ep UAF in xillyusb_probe()
thermal/core: fix a UAF bug in __thermal_cooling_device_register()
rsi: stop thread firstly in rsi_91x_init() error handling
net: vlan: fix a UAF in vlan_dev_real_dev()
Zong-Zhe Yang (1):
rtw88: fix RX clock gate setting while fifo dump
jason-jh.lin (1):
mailbox: Remove WARN_ON for async_cb.cb in cmdq_exec_done
jing yangyang (1):
firmware/psci: fix application of sizeof to pointer
liqiong (1):
ima: fix deadlock when traversing "ima_default_rules".
liuyuntao (1):
virtio-gpu: fix possible memory allocation failure
yangerkun (3):
ext4: ensure enough credits in ext4_ext_shift_path_extents
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
ovl: fix use after free in struct ovl_aio_req
王贇 (1):
ftrace: do CPU checking after preemption disabled
^ permalink raw reply [relevance 1%]
* Linux 5.10.80
@ 2021-11-18 14:03 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-18 14:03 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 5.10.80 kernel.
All users of the 5.10 kernel series must upgrade.
The updated 5.10.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/kernel-parameters.txt | 7
Documentation/devicetree/bindings/regulator/samsung,s5m8767.txt | 23
Documentation/filesystems/fscrypt.rst | 10
Makefile | 2
arch/Kconfig | 3
arch/arm/Makefile | 22
arch/arm/boot/dts/at91-tse850-3.dts | 2
arch/arm/boot/dts/bcm4708-netgear-r6250.dts | 2
arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts | 2
arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts | 2
arch/arm/boot/dts/bcm4709-linksys-ea9200.dts | 2
arch/arm/boot/dts/bcm4709-netgear-r7000.dts | 2
arch/arm/boot/dts/bcm4709-netgear-r8000.dts | 2
arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts | 2
arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts | 2
arch/arm/boot/dts/bcm53016-meraki-mr32.dts | 2
arch/arm/boot/dts/bcm94708.dts | 2
arch/arm/boot/dts/bcm94709.dts | 2
arch/arm/boot/dts/omap3-gta04.dtsi | 2
arch/arm/boot/dts/qcom-msm8974.dtsi | 4
arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 8
arch/arm/boot/dts/stm32mp151.dtsi | 16
arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi | 2
arch/arm/boot/dts/sun7i-a20-olinuxino-lime2.dts | 2
arch/arm/kernel/stacktrace.c | 3
arch/arm/mach-s3c/irq-s3c24xx.c | 22
arch/arm/mm/Kconfig | 2
arch/arm/mm/mmu.c | 4
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2
arch/arm64/boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi | 4
arch/arm64/boot/dts/amlogic/meson-g12b-odroid-n2.dtsi | 4
arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi | 4
arch/arm64/boot/dts/qcom/msm8916.dtsi | 8
arch/arm64/boot/dts/qcom/pm8916.dtsi | 1
arch/arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 1
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2
arch/arm64/boot/dts/ti/k3-j721e-main.dtsi | 16
arch/arm64/include/asm/esr.h | 1
arch/arm64/include/asm/pgtable.h | 12
arch/arm64/kvm/hyp/hyp-entry.S | 2
arch/arm64/kvm/hyp/nvhe/host.S | 2
arch/arm64/mm/mmu.c | 5
arch/arm64/net/bpf_jit_comp.c | 5
arch/ia64/Kconfig.debug | 2
arch/ia64/kernel/kprobes.c | 9
arch/m68k/Kconfig.machine | 1
arch/mips/Kconfig | 1
arch/mips/include/asm/cmpxchg.h | 5
arch/mips/include/asm/mips-cm.h | 12
arch/mips/kernel/mips-cm.c | 21
arch/mips/kernel/r2300_fpu.S | 4
arch/mips/kernel/syscall.c | 9
arch/mips/lantiq/xway/dma.c | 23
arch/openrisc/kernel/dma.c | 4
arch/openrisc/kernel/smp.c | 6
arch/parisc/kernel/entry.S | 2
arch/parisc/kernel/smp.c | 19
arch/parisc/kernel/unwind.c | 21
arch/parisc/kernel/vmlinux.lds.S | 3
arch/parisc/mm/fixmap.c | 5
arch/parisc/mm/init.c | 4
arch/powerpc/include/asm/code-patching.h | 1
arch/powerpc/include/asm/firmware.h | 6
arch/powerpc/include/asm/kvm_guest.h | 25
arch/powerpc/include/asm/kvm_para.h | 2
arch/powerpc/include/asm/security_features.h | 5
arch/powerpc/kernel/firmware.c | 12
arch/powerpc/kernel/security.c | 5
arch/powerpc/lib/code-patching.c | 7
arch/powerpc/net/bpf_jit.h | 33 -
arch/powerpc/net/bpf_jit64.h | 8
arch/powerpc/net/bpf_jit_comp64.c | 64 ++
arch/powerpc/platforms/44x/fsp2.c | 2
arch/powerpc/platforms/85xx/Makefile | 4
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 7
arch/powerpc/platforms/85xx/smp.c | 12
arch/powerpc/platforms/powernv/opal-prd.c | 12
arch/powerpc/platforms/pseries/smp.c | 3
arch/s390/kvm/priv.c | 2
arch/s390/kvm/pv.c | 21
arch/s390/mm/gmap.c | 5
arch/sh/kernel/cpu/fpu.c | 10
arch/x86/Kconfig | 1
arch/x86/events/intel/uncore_snbep.c | 6
arch/x86/hyperv/hv_init.c | 5
arch/x86/include/asm/cpu_entry_area.h | 8
arch/x86/include/asm/mem_encrypt.h | 1
arch/x86/include/asm/page_64_types.h | 2
arch/x86/kernel/Makefile | 6
arch/x86/kernel/cc_platform.c | 69 ++
arch/x86/kernel/cpu/amd.c | 2
arch/x86/kernel/cpu/common.c | 44 +
arch/x86/kernel/cpu/cpu.h | 1
arch/x86/kernel/cpu/hygon.c | 2
arch/x86/kernel/cpu/mce/intel.c | 5
arch/x86/kernel/irq.c | 4
arch/x86/kernel/sev-es.c | 32 -
arch/x86/kernel/traps.c | 2
arch/x86/kvm/vmx/vmx.c | 15
arch/x86/mm/cpu_entry_area.c | 7
arch/x86/mm/mem_encrypt.c | 1
arch/x86/mm/mem_encrypt_identity.c | 9
block/blk-mq.c | 18
block/blk.h | 6
crypto/Kconfig | 2
crypto/pcrypt.c | 12
drivers/acpi/ac.c | 19
drivers/acpi/acpica/acglobal.h | 2
drivers/acpi/acpica/hwesleep.c | 8
drivers/acpi/acpica/hwsleep.c | 11
drivers/acpi/acpica/hwxfsleep.c | 7
drivers/acpi/battery.c | 2
drivers/acpi/pmic/intel_pmic.c | 51 +-
drivers/android/binder.c | 22
drivers/ata/libata-core.c | 2
drivers/ata/libata-eh.c | 8
drivers/auxdisplay/ht16k33.c | 66 +-
drivers/auxdisplay/img-ascii-lcd.c | 10
drivers/base/core.c | 4
drivers/base/power/main.c | 9
drivers/block/zram/zram_drv.c | 2
drivers/bluetooth/btmtkuart.c | 13
drivers/bus/ti-sysc.c | 65 ++
drivers/char/hw_random/mtk-rng.c | 9
drivers/char/ipmi/ipmi_msghandler.c | 10
drivers/char/ipmi/ipmi_watchdog.c | 17
drivers/char/tpm/tpm2-space.c | 3
drivers/char/tpm/tpm_tis_core.c | 26 -
drivers/char/tpm/tpm_tis_core.h | 4
drivers/char/tpm/tpm_tis_spi_main.c | 1
drivers/clk/at91/clk-sam9x60-pll.c | 4
drivers/clk/at91/pmc.c | 5
drivers/clk/mvebu/ap-cpu-clk.c | 14
drivers/clocksource/Kconfig | 1
drivers/cpuidle/sysfs.c | 5
drivers/crypto/caam/caampkc.c | 19
drivers/crypto/caam/regs.h | 3
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6
drivers/crypto/s5p-sss.c | 2
drivers/dma-buf/dma-buf.c | 1
drivers/dma/at_xdmac.c | 2
drivers/dma/dmaengine.h | 2
drivers/edac/amd64_edac.c | 22
drivers/edac/sb_edac.c | 2
drivers/firmware/psci/psci_checker.c | 2
drivers/firmware/qcom_scm.c | 2
drivers/gpio/gpio-mlxbf2.c | 5
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 8
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 17
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 1
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 16
drivers/gpu/drm/drm_panel_orientation_quirks.c | 47 +
drivers/gpu/drm/drm_plane_helper.c | 1
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4
drivers/gpu/drm/msm/msm_gem.c | 4
drivers/gpu/drm/msm/msm_gpu.c | 2
drivers/gpu/drm/nouveau/nouveau_svm.c | 4
drivers/gpu/drm/sun4i/sun8i_csc.h | 4
drivers/gpu/drm/ttm/ttm_bo_vm.c | 5
drivers/gpu/drm/v3d/v3d_gem.c | 4
drivers/gpu/drm/virtio/virtgpu_vq.c | 8
drivers/hid/hid-u2fzero.c | 10
drivers/hv/hyperv_vmbus.h | 1
drivers/hwmon/hwmon.c | 6
drivers/hwmon/pmbus/lm25066.c | 25
drivers/hwtracing/coresight/coresight-cti-core.c | 2
drivers/i2c/busses/i2c-mt65xx.c | 2
drivers/i2c/busses/i2c-xlr.c | 6
drivers/iio/accel/st_accel_core.c | 21
drivers/iio/accel/st_accel_i2c.c | 17
drivers/iio/accel/st_accel_spi.c | 17
drivers/iio/dac/ad5446.c | 9
drivers/iio/dac/ad5770r.c | 2
drivers/iio/gyro/st_gyro_core.c | 15
drivers/iio/gyro/st_gyro_i2c.c | 17
drivers/iio/gyro/st_gyro_spi.c | 17
drivers/iio/imu/adis.c | 4
drivers/iio/magnetometer/st_magn_core.c | 15
drivers/iio/magnetometer/st_magn_i2c.c | 14
drivers/iio/magnetometer/st_magn_spi.c | 14
drivers/iio/pressure/st_pressure_core.c | 15
drivers/iio/pressure/st_pressure_i2c.c | 17
drivers/iio/pressure/st_pressure_spi.c | 17
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3
drivers/infiniband/hw/mlx4/qp.c | 4
drivers/infiniband/hw/qedr/verbs.c | 15
drivers/infiniband/sw/rxe/rxe_param.h | 2
drivers/input/joystick/iforce/iforce-usb.c | 2
drivers/input/mouse/elantech.c | 13
drivers/input/serio/i8042-x86ia64io.h | 14
drivers/irqchip/irq-bcm6345-l1.c | 2
drivers/irqchip/irq-sifive-plic.c | 8
drivers/isdn/hardware/mISDN/hfcpci.c | 8
drivers/md/md.c | 11
drivers/media/dvb-frontends/mn88443x.c | 18
drivers/media/i2c/ir-kbd-i2c.c | 1
drivers/media/i2c/mt9p031.c | 28 +
drivers/media/i2c/tda1997x.c | 8
drivers/media/pci/cx23885/cx23885-alsa.c | 3
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 -
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5
drivers/media/platform/rcar-vin/rcar-csi2.c | 2
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6
drivers/media/platform/stm32/stm32-dcmi.c | 19
drivers/media/radio/radio-wl1273.c | 2
drivers/media/radio/si470x/radio-si470x-i2c.c | 2
drivers/media/radio/si470x/radio-si470x-usb.c | 2
drivers/media/rc/ir_toy.c | 2
drivers/media/rc/ite-cir.c | 2
drivers/media/rc/mceusb.c | 1
drivers/media/spi/cxd2880-spi.c | 2
drivers/media/usb/dvb-usb/az6027.c | 1
drivers/media/usb/dvb-usb/dibusb-common.c | 2
drivers/media/usb/em28xx/em28xx-cards.c | 5
drivers/media/usb/em28xx/em28xx-core.c | 5
drivers/media/usb/tm6000/tm6000-video.c | 3
drivers/media/usb/uvc/uvc_driver.c | 7
drivers/media/usb/uvc/uvc_v4l2.c | 7
drivers/media/usb/uvc/uvc_video.c | 5
drivers/media/v4l2-core/v4l2-ioctl.c | 67 +-
drivers/memory/fsl_ifc.c | 13
drivers/memory/renesas-rpc-if.c | 113 +++-
drivers/memstick/core/ms_block.c | 2
drivers/memstick/host/jmb38x_ms.c | 2
drivers/memstick/host/r592.c | 8
drivers/mfd/dln2.c | 18
drivers/mfd/mfd-core.c | 2
drivers/mmc/host/Kconfig | 2
drivers/mmc/host/dw_mmc.c | 3
drivers/mmc/host/moxart-mmc.c | 29 -
drivers/mmc/host/mtk-sd.c | 5
drivers/mmc/host/mxs-mmc.c | 10
drivers/mmc/host/sdhci-omap.c | 18
drivers/most/most_usb.c | 5
drivers/mtd/mtdcore.c | 4
drivers/mtd/nand/raw/ams-delta.c | 12
drivers/mtd/nand/raw/au1550nd.c | 12
drivers/mtd/nand/raw/gpio.c | 12
drivers/mtd/nand/raw/mpc5121_nfc.c | 12
drivers/mtd/nand/raw/orion_nand.c | 12
drivers/mtd/nand/raw/pasemi_nand.c | 12
drivers/mtd/nand/raw/plat_nand.c | 12
drivers/mtd/nand/raw/socrates_nand.c | 12
drivers/mtd/nand/raw/xway_nand.c | 12
drivers/mtd/spi-nor/controllers/hisi-sfc.c | 1
drivers/net/Kconfig | 2
drivers/net/bonding/bond_sysfs_slave.c | 36 -
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 2
drivers/net/dsa/rtl8366rb.c | 2
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20
drivers/net/ethernet/cavium/thunder/nic_main.c | 2
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2
drivers/net/ethernet/chelsio/inline_crypto/chtls/chtls_cm.c | 2
drivers/net/ethernet/chelsio/inline_crypto/chtls/chtls_cm.h | 2
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18
drivers/net/ethernet/google/gve/gve.h | 4
drivers/net/ethernet/google/gve/gve_adminq.h | 1
drivers/net/ethernet/google/gve/gve_main.c | 48 +
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 2
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 9
drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 5
drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 2
drivers/net/ethernet/ibm/ibmvnic.c | 5
drivers/net/ethernet/intel/ice/ice_base.c | 2
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 20
drivers/net/ethernet/netronome/nfp/bpf/main.c | 16
drivers/net/ethernet/netronome/nfp/bpf/main.h | 2
drivers/net/ethernet/netronome/nfp/bpf/offload.c | 17
drivers/net/ethernet/realtek/r8169_main.c | 1
drivers/net/ethernet/sfc/mcdi_port_common.c | 37 +
drivers/net/ethernet/sfc/ptp.c | 4
drivers/net/ethernet/sfc/siena_sriov.c | 2
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 2
drivers/net/ethernet/ti/davinci_emac.c | 16
drivers/net/ifb.c | 2
drivers/net/phy/micrel.c | 9
drivers/net/phy/phy.c | 7
drivers/net/phy/phylink.c | 2
drivers/net/vmxnet3/vmxnet3_drv.c | 1
drivers/net/vrf.c | 28 -
drivers/net/wireless/ath/ath10k/mac.c | 45 +
drivers/net/wireless/ath/ath10k/sdio.c | 5
drivers/net/wireless/ath/ath10k/usb.c | 7
drivers/net/wireless/ath/ath10k/wmi.c | 4
drivers/net/wireless/ath/ath10k/wmi.h | 3
drivers/net/wireless/ath/ath11k/dbring.c | 16
drivers/net/wireless/ath/ath11k/dp_rx.c | 13
drivers/net/wireless/ath/ath11k/mac.c | 2
drivers/net/wireless/ath/ath11k/qmi.c | 4
drivers/net/wireless/ath/ath11k/reg.c | 11
drivers/net/wireless/ath/ath11k/reg.h | 2
drivers/net/wireless/ath/ath11k/wmi.c | 40 +
drivers/net/wireless/ath/ath11k/wmi.h | 3
drivers/net/wireless/ath/ath6kl/usb.c | 7
drivers/net/wireless/ath/ath9k/main.c | 4
drivers/net/wireless/ath/dfs_pattern_detector.c | 10
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 +
drivers/net/wireless/ath/wcn36xx/main.c | 8
drivers/net/wireless/ath/wcn36xx/smd.c | 44 +
drivers/net/wireless/ath/wcn36xx/txrx.c | 64 +-
drivers/net/wireless/ath/wcn36xx/txrx.h | 3
drivers/net/wireless/broadcom/b43/phy_g.c | 2
drivers/net/wireless/broadcom/b43legacy/radio.c | 2
drivers/net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3
drivers/net/wireless/marvell/libertas/if_usb.c | 2
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2
drivers/net/wireless/marvell/mwifiex/11n.c | 5
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 -
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 +
drivers/net/wireless/marvell/mwifiex/usb.c | 16
drivers/net/wireless/marvell/mwl8k.c | 2
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 15
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 8
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3
drivers/net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14
drivers/net/wireless/realtek/rtw88/fw.c | 7
drivers/net/wireless/realtek/rtw88/reg.h | 1
drivers/net/wireless/rsi/rsi_91x_core.c | 2
drivers/net/wireless/rsi/rsi_91x_hal.c | 10
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 --
drivers/net/wireless/rsi/rsi_91x_main.c | 17
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5
drivers/net/wireless/rsi/rsi_91x_usb.c | 5
drivers/net/wireless/rsi/rsi_hal.h | 11
drivers/net/wireless/rsi/rsi_main.h | 15
drivers/net/xen-netfront.c | 8
drivers/nfc/pn533/pn533.c | 6
drivers/nvme/host/multipath.c | 9
drivers/nvme/host/rdma.c | 2
drivers/nvme/target/configfs.c | 2
drivers/nvme/target/rdma.c | 24
drivers/nvme/target/tcp.c | 21
drivers/of/unittest.c | 16
drivers/opp/of.c | 2
drivers/pci/controller/cadence/pcie-cadence-plat.c | 2
drivers/pci/controller/dwc/pcie-uniphier.c | 26 -
drivers/pci/controller/pci-aardvark.c | 251 ++++++++--
drivers/pci/pci-bridge-emul.c | 13
drivers/pci/quirks.c | 1
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16
drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c | 2
drivers/phy/ti/phy-gmii-sel.c | 2
drivers/pinctrl/core.c | 2
drivers/pinctrl/pinctrl-equilibrium.c | 7
drivers/pinctrl/renesas/core.c | 2
drivers/platform/x86/thinkpad_acpi.c | 2
drivers/platform/x86/wmi.c | 9
drivers/power/supply/bq27xxx_battery_i2c.c | 3
drivers/power/supply/max17040_battery.c | 2
drivers/power/supply/max17042_battery.c | 12
drivers/power/supply/rt5033_battery.c | 2
drivers/regulator/s5m8767.c | 21
drivers/remoteproc/remoteproc_core.c | 8
drivers/reset/reset-socfpga.c | 26 +
drivers/rtc/rtc-rv3032.c | 4
drivers/s390/char/tape_std.c | 3
drivers/s390/cio/css.c | 4
drivers/s390/cio/device_ops.c | 12
drivers/s390/crypto/ap_queue.c | 2
drivers/scsi/csiostor/csio_lnode.c | 2
drivers/scsi/dc395x.c | 1
drivers/scsi/pm8001/pm8001_hwi.c | 2
drivers/scsi/qla2xxx/qla_attr.c | 24
drivers/scsi/qla2xxx/qla_dbg.c | 3
drivers/scsi/qla2xxx/qla_gbl.h | 2
drivers/scsi/qla2xxx/qla_init.c | 54 +-
drivers/scsi/qla2xxx/qla_mr.c | 23
drivers/scsi/qla2xxx/qla_os.c | 47 -
drivers/scsi/qla2xxx/qla_target.c | 14
drivers/scsi/scsi_lib.c | 2
drivers/scsi/ufs/ufshcd-pltfrm.c | 6
drivers/scsi/ufs/ufshcd.c | 29 -
drivers/scsi/ufs/ufshcd.h | 3
drivers/soc/fsl/dpaa2-console.c | 1
drivers/soc/fsl/dpio/dpio-service.c | 2
drivers/soc/fsl/dpio/qbman-portal.c | 9
drivers/soc/qcom/apr.c | 2
drivers/soc/qcom/rpmhpd.c | 21
drivers/soc/tegra/pmc.c | 4
drivers/soundwire/debugfs.c | 2
drivers/spi/spi-bcm-qspi.c | 5
drivers/spi/spi-pl022.c | 5
drivers/spi/spi-rpc-if.c | 4
drivers/staging/ks7010/Kconfig | 3
drivers/staging/media/allegro-dvt/allegro-core.c | 9
drivers/staging/media/atomisp/i2c/atomisp-lm3554.c | 37 -
drivers/staging/media/imx/imx-media-dev-common.c | 2
drivers/staging/media/ipu3/ipu3-v4l2.c | 7
drivers/staging/media/rkvdec/rkvdec-h264.c | 5
drivers/staging/media/rkvdec/rkvdec.c | 40 -
drivers/staging/most/dim2/Makefile | 2
drivers/staging/most/dim2/dim2.c | 24
drivers/staging/most/dim2/sysfs.c | 49 -
drivers/staging/most/dim2/sysfs.h | 11
drivers/tty/serial/8250/8250_dw.c | 2
drivers/tty/serial/8250/8250_port.c | 21
drivers/tty/serial/imx.c | 4
drivers/tty/serial/serial_core.c | 16
drivers/tty/serial/xilinx_uartps.c | 3
drivers/usb/chipidea/core.c | 23
drivers/usb/dwc2/drd.c | 24
drivers/usb/gadget/legacy/hid.c | 4
drivers/usb/host/xhci-hub.c | 3
drivers/usb/host/xhci-pci.c | 16
drivers/usb/misc/iowarrior.c | 8
drivers/usb/musb/Kconfig | 2
drivers/usb/serial/keyspan.c | 15
drivers/usb/typec/Kconfig | 4
drivers/video/backlight/backlight.c | 6
drivers/video/fbdev/chipsfb.c | 2
drivers/virtio/virtio_ring.c | 14
drivers/watchdog/Kconfig | 2
drivers/watchdog/f71808e_wdt.c | 4
drivers/watchdog/omap_wdt.c | 6
drivers/xen/balloon.c | 86 ++-
drivers/xen/xen-pciback/conf_space_capability.c | 2
fs/btrfs/disk-io.c | 3
fs/btrfs/reflink.c | 2
fs/btrfs/tree-log.c | 4
fs/btrfs/volumes.c | 14
fs/crypto/fscrypt_private.h | 5
fs/crypto/hkdf.c | 11
fs/crypto/keysetup.c | 57 +-
fs/erofs/decompressor.c | 1
fs/exfat/inode.c | 2
fs/ext4/extents.c | 63 +-
fs/ext4/super.c | 9
fs/f2fs/inode.c | 2
fs/f2fs/namei.c | 2
fs/fuse/dev.c | 14
fs/gfs2/glock.c | 24
fs/jfs/jfs_mount.c | 51 --
fs/nfs/dir.c | 7
fs/nfs/direct.c | 2
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4
fs/nfs/nfs4idmap.c | 2
fs/nfs/nfs4proc.c | 15
fs/nfs/pnfs.h | 2
fs/nfs/pnfs_nfs.c | 6
fs/nfs/write.c | 26 -
fs/ocfs2/file.c | 8
fs/orangefs/dcache.c | 4
fs/overlayfs/file.c | 16
fs/proc/stat.c | 4
fs/proc/uptime.c | 14
fs/quota/quota_tree.c | 15
fs/tracefs/inode.c | 3
include/linux/blkdev.h | 2
include/linux/cc_platform.h | 88 +++
include/linux/console.h | 2
include/linux/ethtool_netlink.h | 3
include/linux/filter.h | 1
include/linux/kernel_stat.h | 1
include/linux/libata.h | 2
include/linux/lsm_hook_defs.h | 14
include/linux/lsm_hooks.h | 14
include/linux/nfs_fs.h | 1
include/linux/posix-timers.h | 2
include/linux/rpmsg.h | 2
include/linux/sched/task.h | 3
include/linux/sched/task_stack.h | 4
include/linux/security.h | 33 -
include/linux/seq_file.h | 2
include/linux/tpm.h | 1
include/memory/renesas-rpc-if.h | 1
include/net/inet_connection_sock.h | 2
include/net/llc.h | 4
include/net/neighbour.h | 12
include/net/sch_generic.h | 4
include/net/sock.h | 2
include/net/strparser.h | 16
include/net/tcp.h | 17
include/net/udp.h | 5
include/uapi/linux/ethtool_netlink.h | 4
include/uapi/linux/pci_regs.h | 6
kernel/bpf/core.c | 4
kernel/bpf/verifier.c | 4
kernel/cgroup/cgroup.c | 31 +
kernel/cgroup/rstat.c | 2
kernel/fork.c | 3
kernel/kprobes.c | 3
kernel/locking/lockdep.c | 4
kernel/power/energy_model.c | 23
kernel/power/swap.c | 7
kernel/rcu/rcutorture.c | 48 +
kernel/rcu/tasks.h | 3
kernel/rcu/tree_exp.h | 2
kernel/rcu/tree_plugin.h | 8
kernel/sched/core.c | 43 -
kernel/signal.c | 18
kernel/time/posix-cpu-timers.c | 19
kernel/trace/ring_buffer.c | 5
kernel/trace/tracing_map.c | 40 -
kernel/workqueue.c | 15
lib/decompress_unxz.c | 2
lib/iov_iter.c | 5
lib/xz/xz_dec_lzma2.c | 21
lib/xz/xz_dec_stream.c | 6
mm/memcontrol.c | 27 -
mm/oom_kill.c | 23
mm/zsmalloc.c | 7
net/8021q/vlan.c | 3
net/8021q/vlan_dev.c | 3
net/9p/client.c | 2
net/bluetooth/l2cap_sock.c | 10
net/bluetooth/sco.c | 33 -
net/can/j1939/main.c | 7
net/can/j1939/transport.c | 6
net/core/dev.c | 5
net/core/filter.c | 21
net/core/neighbour.c | 48 +
net/core/net-sysfs.c | 55 ++
net/core/net_namespace.c | 4
net/core/stream.c | 3
net/core/sysctl_net_core.c | 2
net/dccp/dccp.h | 2
net/dccp/proto.c | 14
net/ethtool/pause.c | 3
net/ipv4/inet_connection_sock.c | 4
net/ipv4/inet_hashtables.c | 2
net/ipv4/proc.c | 2
net/ipv4/tcp.c | 40 +
net/ipv4/tcp_bpf.c | 1
net/ipv6/addrconf.c | 3
net/ipv6/udp.c | 2
net/netfilter/nf_conntrack_proto_udp.c | 7
net/netfilter/nfnetlink_queue.c | 2
net/netfilter/nft_dynset.c | 11
net/rds/ib.c | 10
net/rds/ib.h | 6
net/rds/ib_cm.c | 128 +++--
net/rds/ib_recv.c | 18
net/rds/ib_send.c | 8
net/rxrpc/rtt.c | 2
net/sched/sch_generic.c | 9
net/sched/sch_mq.c | 24
net/sched/sch_mqprio.c | 23
net/sched/sch_taprio.c | 27 -
net/smc/af_smc.c | 20
net/smc/smc_llc.c | 2
net/strparser/strparser.c | 10
net/sunrpc/addr.c | 40 -
net/sunrpc/xprt.c | 28 -
net/vmw_vsock/af_vsock.c | 2
samples/kprobes/kretprobe_example.c | 2
scripts/leaking_addresses.pl | 3
security/apparmor/label.c | 4
security/integrity/evm/evm_main.c | 2
security/security.c | 14
security/selinux/hooks.c | 36 -
security/selinux/ss/services.c | 162 +++---
security/smack/smackfs.c | 11
sound/core/oss/mixer_oss.c | 43 +
sound/core/timer.c | 17
sound/pci/hda/hda_intel.c | 74 +-
sound/pci/hda/patch_realtek.c | 82 +++
sound/soc/codecs/cs42l42.c | 88 +--
sound/soc/soc-core.c | 1
sound/soc/sof/topology.c | 9
sound/synth/emux/emux.c | 2
sound/usb/6fire/comm.c | 2
sound/usb/6fire/firmware.c | 6
sound/usb/format.c | 1
sound/usb/line6/driver.c | 14
sound/usb/line6/driver.h | 2
sound/usb/line6/podhd.c | 6
sound/usb/line6/toneport.c | 2
sound/usb/misc/ua101.c | 4
sound/usb/quirks.c | 1
tools/bpf/bpftool/prog.c | 16
tools/lib/bpf/bpf_core_read.h | 2
tools/lib/bpf/btf.c | 25
tools/objtool/check.c | 19
tools/perf/util/bpf-event.c | 4
tools/testing/selftests/bpf/prog_tests/perf_buffer.c | 4
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 85 ++-
tools/testing/selftests/bpf/progs/strobemeta.h | 4
tools/testing/selftests/bpf/progs/test_sk_lookup.c | 62 +-
tools/testing/selftests/bpf/test_progs.c | 4
tools/testing/selftests/bpf/verifier/array_access.c | 2
tools/testing/selftests/core/close_range_test.c | 2
tools/testing/selftests/kvm/lib/x86_64/svm.c | 22
tools/testing/selftests/kvm/x86_64/mmio_warning_test.c | 2
tools/testing/selftests/net/fcnal-test.sh | 3
tools/testing/selftests/net/udpgso_bench_rx.c | 11
598 files changed, 4823 insertions(+), 2403 deletions(-)
Ahmad Fatoum (1):
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Ajay Singh (1):
wilc1000: fix possible memory leak in cfg_scan_result()
Alagu Sankar (1):
ath10k: high latency fixes for beacon buffer
Aleksander Jan Bajkowski (3):
MIPS: lantiq: dma: add small delay after reset
MIPS: lantiq: dma: reset correct number of channel
MIPS: lantiq: dma: fix burst length for DEU
Alex Bee (1):
arm64: dts: rockchip: Fix GPU register width for RK3328
Alex Deucher (1):
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Alex Xu (Hello71) (1):
drm/plane-helper: fix uninitialized variable reference
Alexander Tsoy (1):
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Alexandru Ardelean (1):
iio: st_sensors: disable regulators after device unregistration
Alexei Starovoitov (2):
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
Alexey Gladkov (1):
Fix user namespace leak
Alok Prasad (1):
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Amelie Delaunay (3):
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
usb: dwc2: drd: reset current session before setting the new one
Amit Engel (1):
nvmet-tcp: fix header digest verification
Anand Jain (1):
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Anand Moon (2):
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
Anant Thazhemadam (1):
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Anders Roxell (1):
PM: hibernate: fix sparse warnings
Andrea Righi (1):
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Andreas Gruenbacher (3):
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
gfs2: Cancel remote delete work asynchronously
gfs2: Fix glock_hash_walk bugs
Andreas Kemnade (1):
arm: dts: omap3-gta04a4: accelerometer irq fix
Andrej Shadura (2):
HID: u2fzero: clarify error check and length calculations
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrey Grodzovsky (1):
drm/amdgpu: Fix MMIO access page fault
Andrii Nakryiko (6):
selftests/bpf: Fix strobemeta selftest regression
libbpf: Fix BTF data layout checks and allow empty BTF
libbpf: Allow loading empty BTFs
libbpf: Fix overflow in BTF sanity checks
libbpf: Fix BTF header parsing checks
selftests/bpf: Fix also no-alu32 strobemeta selftest
André Almeida (1):
ACPI: battery: Accept charges over the design capacity as full
Andy Shevchenko (2):
iio: st_sensors: Call st_sensors_power_enable() from bus drivers
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Anel Orazgaliyeva (1):
cpuidle: Fix kobject memory leaks in error paths
Anson Jacob (1):
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
Anssi Hannula (1):
serial: xilinx_uartps: Fix race condition causing stuck TX
Antoine Tenart (1):
net-sysfs: try not to restart the syscall if it will fail eventually
Arnaud Pouliquen (1):
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Arnd Bergmann (9):
hyperv/vmbus: include linux/bitops.h
ifb: fix building without CONFIG_NET_CLS_ACT
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
drm/amdgpu: fix warning for overflow check
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
memstick: avoid out-of-range warning
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
ARM: 9156/1: drop cc-option fallbacks for architecture selection
ath10k: fix invalid dma_addr_t token assignment
Arun Easi (1):
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Asmaa Mnebhi (1):
gpio: mlxbf2.c: Add check for bgpio_init failure
Austin Kim (2):
ALSA: synth: missing check for possible NULL after the call to kstrdup
evm: mark evm_fixmode as __ro_after_init
Baochen Qiang (2):
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
Baptiste Lepers (1):
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Barnabás Pőcze (1):
platform/x86: wmi: do not fail if disabling fails
Bastien Roucariès (1):
ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
Benjamin Li (2):
wcn36xx: handle connection loss indication
wcn36xx: add proper DMA memory barriers in rx path
Bixuan Cui (1):
powerpc/44x/fsp2: add missing of_node_put
Bjorn Andersson (1):
soc: qcom: rpmhpd: Make power_on actually enable the domain
Borislav Petkov (1):
x86/sev: Make the #VC exception stacks part of the default stacks storage
Brett Creeley (1):
ice: Fix not stopping Tx queues for VFs
Bryan O'Donoghue (1):
wcn36xx: Fix Antenna Diversity Switching
Bryant Mairs (1):
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Can Guo (1):
scsi: ufs: Refactor ufshcd_setup_clocks() to remove skip_ref_clk
Charan Teja Reddy (1):
dma-buf: WARN on dmabuf release with pending attachments
Chen-Yu Tsai (2):
media: rkvdec: Do not override sizeimage for output format
media: rkvdec: Support dynamic resolution changes
Chengfeng Ye (1):
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Chenyuan Mi (1):
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
Christian Löhle (1):
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Christoph Hellwig (1):
rds: stop using dmapool
Christophe JAILLET (6):
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
mmc: mxs-mmc: disable regulator on error and in the remove function
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Christophe Leroy (1):
video: fbdev: chipsfb: use memset_io() instead of memset()
Claudio Imbrenda (2):
KVM: s390: pv: avoid double free of sida page
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
Claudiu Beznea (2):
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Clément Léger (1):
clk: at91: check pmc node status before registering syscore ops
Colin Ian King (4):
media: cxd2880-spi: Fix a null pointer dereference on error handling path
media: cx23885: Fix snd_card_free call on null card pointer
media: em28xx: Don't use ops->suspend if it is NULL
mmc: moxart: Fix null pointer dereference on pointer host
Corey Minyard (1):
ipmi: Disable some operations during a panic
Cyril Strejc (1):
net: multicast: calculate csum of looped-back and forwarded packets
Damien Le Moal (1):
libata: fix read log timeout value
Dan Carpenter (13):
tpm: Check for integer overflow in tpm2_map_response_body()
ath11k: fix some sleeping in atomic bugs
b43legacy: fix a lower bounds test
b43: fix a lower bounds test
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
drm/msm: potential error pointer dereference in init()
drm/msm: uninitialized variable in msm_gem_import()
usb: gadget: hid: fix error code in do_config()
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
phy: ti: gmii-sel: check of_get_address() for failure
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
zram: off by one in read_block_state()
gve: Fix off by one in gve_tx_timeout()
Dan Schatzberg (1):
cgroup: Fix rootcg cpu.stat guest double counting
Daniel Borkmann (2):
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Daniel Jordan (1):
crypto: pcrypt - Delay write to padata->info
Dave Jones (1):
x86/mce: Add errata workaround for Skylake SKX37
David Hildenbrand (1):
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
Davide Baldo (1):
ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
Derong Liu (1):
mmc: mtk-sd: Add wait dma stop done flow
Desmond Cheong Zhi Xi (1):
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Dinghao Liu (1):
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Dirk Bender (1):
media: mt9p031: Fix corrupted frame after restarting stream
Dmitriy Ulitin (1):
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Dmitry Bogdanov (1):
scsi: qla2xxx: Fix unmap of already freed sgl
Dmitry Osipenko (1):
soc/tegra: pmc: Fix imbalanced clock disabling in error code path
Dominique Martinet (1):
9p/net: fix missing error check in p9_check_errors
Dongli Zhang (2):
xen/netfront: stop tx queues during live migration
vmxnet3: do not stop tx queues after netif_device_detach()
Dongliang Mu (2):
JFS: fix memleak in jfs_mount
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Dust Li (1):
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata (1):
vsock: prevent unnecessary refcnt inc for nonblocking connect
Eric Badger (1):
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Eric Biggers (1):
fscrypt: allow 256-bit master keys with AES-256-XTS
Eric Dumazet (4):
net: annotate data-race in neigh_output()
tcp: switch orphan_count to bare per-cpu counters
llc: fix out-of-bound array index in llc_sk_dev_hash()
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Eric W. Biederman (3):
signal: Remove the bogus sigkill_pending in ptrace_stop
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Erik Ekman (2):
sfc: Export fibre-specific supported link modes
sfc: Don't use netif_info before net_device setup
Evgeny Novikov (3):
media: atomisp: Fix error handling in probe
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Fabio Estevam (1):
ath10k: sdio: Add missing BH locking around napi_schdule()
Filipe Manana (1):
btrfs: fix lost error handling when replaying directory deletes
Florian Westphal (3):
fcnal-test: kill hanging ping/nettest binaries on cleanup
vrf: run conntrack only in context of lower/physdev for locally generated packets
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Frank Rowand (1):
of: unittest: fix EXPECT text for gpio hog errors
Gao Xiang (1):
erofs: don't trigger WARN() when decompression fails
Geert Uytterhoeven (6):
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
mips: cm: Convert to bitfield API to fix out-of-bounds access
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
auxdisplay: ht16k33: Connect backlight to fbdev
auxdisplay: ht16k33: Fix frame buffer device blanking
Giovanni Cabiddu (2):
crypto: qat - detect PFVF collision after ACK
crypto: qat - disregard spurious PFVF interrupts
Greg Kroah-Hartman (1):
Linux 5.10.80
Guangbin Huang (1):
net: hns3: allow configure ETS bandwidth of all TCs
Guo Ren (1):
irqchip/sifive-plic: Fixup EOI failed when masked
Guru Das Srinagesh (1):
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
Halil Pasic (1):
s390/cio: make ccw_device_dma_* more robust
Hannes Reinecke (1):
nvme: drop scan_lock and always kick requeue list when removing namespaces
Hans de Goede (6):
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Hao Wu (1):
tpm: fix Atmel TPM crash caused by too frequent queries
Harald Freudenberger (1):
s390/ap: Fix hanging ioctl caused by orphaned replies
Heiner Kallweit (1):
net: phy: fix duplex out of sync problem while changing settings
Helge Deller (4):
parisc: Fix set_fixmap() on PA1.x CPUs
parisc: Fix ptrace check on syscall return
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
parisc: Fix backtrace to always include init funtion names
Henrik Grimler (1):
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Huang Guobin (1):
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Iago Toral Quiroga (1):
drm/v3d: fix wait for TMU write combiner flush
Ian Rogers (1):
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Igor Pylypiv (1):
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
Ilya Leoshkevich (1):
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
Imre Deak (2):
ALSA: hda: Release controller display power during shutdown/reboot
ALSA: hda: Fix hang during shutdown due to link reset
Ingmar Klein (1):
PCI: Mark Atheros QCA6174 to avoid bus reset
Israel Rukshin (3):
nvmet: fix use-after-free when a port is removed
nvmet-rdma: fix use-after-free when a port is removed
nvmet-tcp: fix use-after-free when a port is removed
J. Bruce Fields (1):
nfsd: don't alloc under spinlock in rpc_parse_scope_id
Jack Andersen (1):
mfd: dln2: Add cell for initializing DLN2 ADC
Jackie Liu (3):
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
ar7: fix kernel builds for compiler test
Jaegeuk Kim (1):
f2fs: should use GFP_NOFS for directory inodes
Jakob Hauser (1):
power: supply: rt5033_battery: Change voltage values to µV
Jakub Kicinski (4):
net: sched: update default qdisc visibility after Tx queue cnt changes
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
udp6: allow SO_MARK ctrl msg to affect routing
ethtool: fix ethtool msg len calculation for pause stats
Jan Kara (1):
ocfs2: fix data corruption on truncate
Jane Malalane (1):
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Janghyub Seo (1):
r8169: Add device 10ec:8162 to driver r8169
Janis Schoetterl-Glausch (1):
KVM: s390: Fix handle_sske page fault handling
Jaroslav Kysela (1):
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jason Ormes (1):
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
Jens Axboe (2):
block: bump max plugged deferred size from 16 to 32
block: remove inaccurate requeue check
Jeremy Soller (1):
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
Jernej Skrabec (1):
drm/sun4i: Fix macros in sun8i_csc.h
Jessica Zhang (1):
drm/msm: Fix potential NULL dereference in DPU SSPP
Jia-Ju Bai (1):
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Jiasheng Jiang (1):
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Jim Mattson (1):
KVM: selftests: Fix nested SVM tests when built with clang
Jiri Olsa (1):
selftests/bpf: Fix perf_buffer test on system with offline cpus
Joerg Roedel (1):
x86/sev: Fix stack type check in vc_switch_off_ist()
Johan Hovold (14):
Input: iforce - fix control-message timeout
ALSA: ua101: fix division by zero at probe
ALSA: 6fire: fix control and bulk message timeouts
ALSA: line6: fix control and interrupt message timeouts
mwifiex: fix division by zero in fw download path
ath6kl: fix division by zero in send path
ath6kl: fix control-message timeout
ath10k: fix control-message timeout
ath10k: fix division by zero in send path
rtl8187: fix control-message timeouts
serial: 8250: fix racy uartclk update
most: fix control-message timeouts
USB: iowarrior: fix control-message timeouts
USB: chipidea: fix interrupt deadlock
Johannes Berg (1):
iwlwifi: mvm: disable RX-diversity in powersave
John Fastabend (2):
bpf, sockmap: Remove unhash handler for BPF sockmap usage
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
John Fraker (1):
gve: Recover from queue stall due to missed IRQ
Johnathon Clark (1):
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
Jon Maxwell (1):
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Jonas Dreßler (5):
mwifiex: Read a PCI register after writing the TX ring write pointer
mwifiex: Try waking the firmware until we get an interrupt
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
mwifiex: Properly initialize private structure on interface type changes
mwifiex: Send DELBA requests according to spec
Josef Bacik (1):
btrfs: do not take the uuid_mutex in btrfs_rm_device
Josh Don (1):
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
Josh Poimboeuf (1):
objtool: Add xen_start_kernel() to noreturn list
Juergen Gross (1):
xen/balloon: add late_initcall_sync() for initial ballooning done
Junji Wei (1):
RDMA/rxe: Fix wrong port_cap_flags
Kai-Heng Feng (1):
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Kalesh Singh (1):
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Kan Liang (2):
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
Kees Cook (5):
leaking_addresses: Always print a trailing newline
media: radio-wl1273: Avoid card name truncation
media: si470x: Avoid card name truncation
media: tm6000: Avoid card name truncation
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Kewei Xu (1):
i2c: mediatek: fixing the incorrect register offset
Kishon Vijay Abraham I (2):
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
Krzysztof Kozlowski (3):
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
mfd: core: Add missing of_node_put for loop iteration
Kumar Kartikeya Dwivedi (1):
selftests/bpf: Fix fd cleanup in sk_lookup test
Kunihiko Hayashi (1):
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
Lad Prabhakar (1):
spi: spi-rpc-if: Check return value of rpcif_sw_init()
Lars-Peter Clausen (1):
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Lasse Collin (2):
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
lib/xz: Validate the value before assigning it to an enum variable
Lee Jones (1):
soc: qcom: rpmhpd: Provide some missing struct member descriptions
Leon Romanovsky (1):
RDMA/mlx4: Return missed an error if device doesn't support steering
Li Chen (1):
PCI: cadence: Add cdns_plat_pcie_probe() missing return
Li Zhang (1):
btrfs: clear MISSING device status bit in btrfs_close_one_device
Linus Lüssing (1):
ath9k: Fix potential interrupt storm on queue reset
Linus Walleij (1):
net: dsa: rtl8366rb: Fix off-by-one bug
Loic Poulain (6):
wcn36xx: Fix HT40 capability for 2Ghz band
wcn36xx: Fix tx_status mechanism
wcn36xx: Fix (QoS) null data frame bitrate/modulation
wcn36xx: Correct band/freq reporting on RX
ath10k: Fix missing frame timestamp for beacon/probe-resp
wcn36xx: Fix discarded frames due to wrong sequence number
Lorenz Bauer (3):
bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
bpf: Prevent increasing bpf_jit_limit above max
selftests: bpf: Convert sk_lookup ctx access tests to PROG_TEST_RUN
Lorenzo Bianconi (3):
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
mt76: mt7915: fix possible infinite loop release semaphore
Lucas Tanure (1):
ASoC: cs42l42: Disable regulators if probe fails
Lukas Wunner (1):
ifb: Depend on netfilter alternatively to tc
Maciej W. Rozycki (1):
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
Marc Kleine-Budde (1):
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
Marek Behún (4):
PCI: pci-bridge-emul: Fix emulation of W1C bits
PCI: aardvark: Fix return value of MSI domain .alloc() method
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
PCI: aardvark: Don't spam about PIO Response Status
Marek Vasut (3):
rsi: Fix module dev_oper_mode parameter description
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
video: backlight: Drop maximum brightness override for brightness zero
Marijn Suijten (1):
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Mario (1):
drm: panel-orientation-quirks: Add quirk for GPD Win3
Mark Brown (1):
tpm_tis_spi: Add missing SPI ID
Mark Rutland (2):
KVM: arm64: Extract ESR_ELx.EC only
irq: mips: avoid nested irq_enter()
Markus Schneider-Pargmann (1):
hwrng: mtk - Force runtime pm ops for sleep ops
Martin Fuzzey (3):
rsi: fix occasional initialisation failure with BT coex
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
rsi: fix rate mask set leading to P2P failure
Martin Kepplinger (1):
media: imx: set a media_device bus_info string
Masami Hiramatsu (2):
ia64: kprobes: Fix to pass correct trampoline address to the handler
ARM: clang: Do not rely on lr register for stacktrace
Mathias Nyman (1):
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
Matthew Auld (1):
drm/ttm: stop calling tt_swapin in vm_access
Matthias Schiffer (1):
net: phy: micrel: make *-skew-ps check more lenient
Maurizio Lombardi (1):
nvmet-tcp: fix a memory leak when releasing a queue
Max Gurtovoy (1):
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Maxim Kiselev (1):
net: davinci_emac: Fix interrupt pacing disable
Meng Li (2):
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
soc: fsl: dpio: use the combined functions to protect critical zone
Menglong Dong (1):
workqueue: make sysfs of unbound kworker cpumask more clever
Miaohe Lin (1):
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Michael Ellerman (1):
powerpc: Fix is_kvm_guest() / kvm_para_available()
Michael Pratt (1):
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
Michael Tretter (1):
media: allegro: ignore interrupt if mailbox is not initialized
Michael Walle (1):
crypto: caam - disable pkc for non-E SoCs
Michal Hocko (1):
mm, oom: do not trigger out_of_memory from the #PF
Michał Mirosław (1):
ARM: 9155/1: fix early early_iounmap()
Miklos Szeredi (1):
fuse: fix page stealing
Miquel Raynal (9):
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
Muchun Song (1):
seq_file: fix passing wrong private data
Nadezda Lutovinova (2):
media: s5p-mfc: Add checking to s5p_mfc_probe().
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Naohiro Aota (1):
block: schedule queue restart after BLK_STS_ZONE_RESOURCE
Nathan Chancellor (1):
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Nathan Lynch (1):
powerpc: fix unbalanced node refcount in check_kvm_guest()
Naveen N. Rao (4):
powerpc/lib: Add helper to check if offset is within conditional branch range
powerpc/bpf: Validate branch ranges
powerpc/security: Add a helper to query stf_barrier type
powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
Neeraj Upadhyay (1):
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Nehal Bakulchandra Shah (1):
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Nikita Yushchenko (1):
staging: most: dim2: do not double-register the same device
Nuno Sá (2):
iio: ad5770r: make devicetree property reading consistent
iio: adis: do not disabe IRQs in 'adis_init()'
Olivier Moysan (2):
ARM: dts: stm32: fix SAI sub nodes register range
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
Ondrej Mosnacek (1):
selinux: fix race condition when computing ocontext SIDs
Pablo Neira Ayuso (2):
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
netfilter: nft_dynset: relax superfluous check on set updates
Pali Rohár (13):
serial: core: Fix initializing and restoring termios speed
PCI: aardvark: Do not clear status bits of masked interrupts
PCI: aardvark: Fix checking for link up via LTSSM state
PCI: aardvark: Do not unmask unused interrupts
PCI: aardvark: Fix reporting Data Link Layer Link Active
PCI: aardvark: Fix configuring Reference clock
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
PCI: aardvark: Fix PCIe Max Payload Size setting
Paul E. McKenney (1):
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
Pavel Skripkin (3):
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
media: em28xx: add missing em28xx_close_extension
media: dvb-usb: fix ununit-value in az6027_rc_query
Pawan Gupta (1):
smackfs: Fix use-after-free in netlbl_catmap_walk()
Paweł Anikiel (1):
reset: socfpga: add empty driver allowing consumers to probe
Pekka Korpinen (1):
iio: dac: ad5446: Fix ad5622_write() return value
Peter Rosin (1):
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Peter Zijlstra (5):
locking/lockdep: Avoid RCU-induced noinstr fail
x86: Increase exception stack sizes
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
objtool: Fix static_call list generation
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
Phoenix Huang (1):
Input: elantench - fix misreporting trackpoint coordinates
Pradeep Kumar Chitrapu (1):
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
Punit Agrawal (1):
kprobes: Do not use local variable when creating debugfs file
Quentin Monnet (1):
bpftool: Avoid leaking the JSON writer prepared for program metadata
Quinn Tran (4):
scsi: qla2xxx: Fix use after free in eh_abort path
scsi: qla2xxx: Relogin during fabric disturbance
scsi: qla2xxx: Fix gnl list corruption
scsi: qla2xxx: Turn off target reset during issue_lip
Rafael J. Wysocki (2):
PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
ACPICA: Avoid evaluating methods too early during system resume
Rafał Miłecki (1):
ARM: dts: BCM5301X: Fix memory nodes names
Rahul Lakkireddy (1):
cxgb4: fix eeprom len when diagnostics not implemented
Rahul Tanwar (1):
pinctrl: equilibrium: Fix function addition in multiple groups
Rajat Asthana (1):
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Randy Dunlap (5):
mmc: winbond: don't build on M68K
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
usb: musb: select GENERIC_PHY instead of depending on it
usb: typec: STUSB160X should select REGMAP_I2C
m68k: set a default value for MEMORY_RESERVE
Ranjani Sridharan (1):
ASoC: SOF: topology: do not power down primary core during topology removal
Reimar Döffinger (1):
libata: fix checking of DMA state
Ricardo Koller (1):
KVM: selftests: Add operand to vmsave/vmload/vmrun in svm.c
Ricardo Ribalda (7):
media: v4l2-ioctl: Fix check_ext_ctrls
media: uvcvideo: Set capability in s_param
media: uvcvideo: Return -EIO for control errors
media: uvcvideo: Set unique vdev name based in type
media: ipu3-imgu: imgu_fmt: Handle properly try
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
media: v4l2-ioctl: S_CTRL output the right value
Richard Fitzgerald (4):
ASoC: cs42l42: Correct some register default values
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
ASoC: cs42l42: Use device_property API instead of of_property
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
Robert-Ionut Alexa (1):
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Russell King (Oracle) (1):
net: phylink: avoid mvneta warning when setting pause parameters
Ryder Lee (1):
mt76: mt7915: fix an off-by-one bound check
Sandeep Maheswaram (1):
phy: qcom-snps: Correct the FSEL_MASK
Saurav Kashyap (1):
scsi: qla2xxx: Changes to support FCP2 Target
Scott Wood (1):
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
Sean Christopherson (3):
x86/irq: Ensure PI wakeup handler is unregistered before module unload
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Sean Young (3):
media: ite-cir: IR receiver stop working after receive overflow
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
media: ir_toy: assignment to be16 should be of correct type
Sebastian Andrzej Siewior (1):
lockdep: Let lock_is_held_type() detect recursive read as read
Sebastian Krzyszkowiak (2):
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
power: supply: max17042_battery: Clear status bits in interrupt handler
Seevalamuthu Mariappan (1):
ath11k: Align bss_chan_info structure with firmware
Selvin Xavier (1):
RDMA/bnxt_re: Fix query SRQ failure
Shaoying Xu (1):
ext4: fix lazy initialization next schedule time computation in more granular unit
Shayne Chen (2):
mt76: mt7915: fix sta_rec_wtbl tag len
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
Shuah Khan (2):
selftests: kvm: fix mismatched fclose() after popen()
selftests/core: fix conflicting types compile error for close_range()
Shyam Sundar S K (1):
net: amd-xgbe: Toggle PLL settings during rate change
Sidong Yang (1):
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
Simon Ser (1):
drm/panel-orientation-quirks: add Valve Steam Deck
Srikar Dronamraju (3):
powerpc: Refactor is_kvm_guest() declaration to new header
powerpc: Rename is_kvm_guest() to check_kvm_guest()
powerpc: Reintroduce is_kvm_guest() as a fast-path check
Srinivas Kandagatla (2):
soundwire: debugfs: use controller id and link_id for debugfs
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
Sriram R (2):
ath11k: Avoid reg rules update during firmware recovery
ath11k: Avoid race during regd updates
Stafford Horne (1):
openrisc: fix SMP tlb flush NULL pointer dereference
Stefan Agner (2):
phy: micrel: ksz8041nl: do not use power down mode
serial: imx: fix detach/attach of serial console
Stefan Schaeckeler (1):
ACPI: AC: Quirk GK45 to skip reading _PSR
Stephan Gerhold (2):
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
Stephen Suryaputra (1):
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Steven Rostedt (VMware) (2):
ring-buffer: Protect ring_buffer_reset() from reentrancy
tracefs: Have tracefs directories not set OTH permission bits by default
Sudarshan Rajagopalan (1):
arm64: mm: update max_pfn after memory hotplug
Sukadev Bhattiprolu (2):
ibmvnic: don't stop queue in xmit
ibmvnic: Process crqs after enabling interrupts
Sungjong Seo (1):
exfat: fix incorrect loading of i_blocks for large files
Sven Eckelmann (1):
ath10k: fix max antenna gain unit
Sven Schnelle (4):
parisc: fix warning in flush_tlb_all
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
s390/tape: fix timer initialization in tape_std_assign()
Sylwester Dziedziuch (1):
ice: Fix replacing VF hardware MAC to existing MAC filter
Tadeusz Struk (1):
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
Takashi Iwai (9):
Input: i8042 - Add quirk for Fujitsu Lifebook T725
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
ALSA: hda/realtek: Add quirk for ASUS UX550VE
ALSA: hda: Free card instance properly at probe errors
ALSA: timer: Unconditionally unlink slave instances, too
ALSA: mixer: oss: Fix racy access to slots
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
ALSA: hda: Reduce udelay() at SKL+ position reporting
ALSA: hda: Use position buffer for SKL+ again
Tang Bin (1):
crypto: s5p-sss - Add error handling in s5p_aes_probe()
Tao Zhang (1):
coresight: cti: Correct the parameter for pm_runtime_put
Tetsuo Handa (2):
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Thomas Perrot (1):
spi: spl022: fix Microwire full duplex mode
Tiezhu Yang (1):
samples/kretprobes: Fix return value if register_kretprobe() failed
Tim Crawford (1):
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Tim Gardner (2):
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
net: enetc: unmap DMA in enetc_send_cmd()
Todd Kjos (3):
binder: use euid from cred instead of using task
binder: use cred instead of task for selinux checks
binder: use cred instead of task for getsecid
Tom Lendacky (3):
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
arch/cc: Introduce a function to check for confidential computing features
x86/sev: Add an x86 version of cc_platform_has()
Tom Rix (2):
media: TDA1997x: handle short reads of hdmi info frame.
apparmor: fix error check
Tong Zhang (1):
scsi: dc395: Fix error case unwinding
Tony Lindgren (3):
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
mmc: sdhci-omap: Fix context restore
bus: ti-sysc: Fix timekeeping_suspended warning on resume
Tony Lu (1):
net/smc: Fix smc_link->llc_testlink_time overflow
Trond Myklebust (6):
NFS: Fix dentry verifier races
NFS: Fix deadlocks in nfs_scan_commit_list()
NFS: Fix up commit deadlocks
NFS: Fix an Oops in pnfs_mark_request_commit()
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
SUNRPC: Partial revert of commit 6f9f17287e78
Tuo Li (2):
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Vasant Hegde (1):
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Vasily Averin (2):
memcg: prohibit unconditional exceeding the limit of dying tasks
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Vegard Nossum (1):
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Vincent Donnefort (1):
PM: EM: Fix inefficient states detection
Vineeth Vijayan (1):
s390/cio: check the subchannel validity for dev_busid
Vitaly Kuznetsov (1):
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Vladimir Oltean (1):
net: stmmac: allow a tc-taprio base-time of zero
Vladimir Zapolskiy (1):
phy: qcom-qusb2: Fix a memory leak on probe
Waiman Long (1):
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Walter Stoll (1):
watchdog: Fix OMAP watchdog early handling
Wan Jiabing (1):
soc: qcom: apr: Add of_node_put() before return
Wang Hai (3):
USB: serial: keyspan: fix memleak on probe errors
libertas_tf: Fix possible memory leak in probe and disconnect
libertas: Fix possible memory leak in probe and disconnect
Wang ShaoBo (1):
Bluetooth: fix use-after-free error in lock_sock_nested()
Wang Wensheng (1):
ALSA: timer: Fix use-after-free problem
Wen Gong (1):
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
Wen Gu (1):
net/smc: Correct spelling mistake to TCPF_SYN_RECV
Willem de Bruijn (1):
selftests/net: udpgso_bench_rx: fix port argument
Wolfram Sang (1):
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
Xiao Ni (1):
md: update superblock after changing rdev flags in state_store
Xiaoming Ni (2):
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
Xin Xiong (1):
mmc: moxart: Fix reference count leaks in moxart_probe
Xuan Zhuo (1):
virtio_ring: check desc == NULL when using indirect with packed
Yajun Deng (1):
net: net_namespace: Fix undefined member in key_remove_domain()
Yang Yingliang (6):
ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
pinctrl: core: fix possible memory leak in pinctrl_enable()
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
hwmon: Fix possible memleak in __hwmon_device_register()
driver core: Fix possible memory leak in device_link_add()
power: supply: max17040: fix null-ptr-deref in max17040_probe()
Yazen Ghannam (1):
EDAC/amd64: Handle three rank interleaving mode
Ye Bin (1):
PM: hibernate: Get block device exclusively in swsusp_check()
Yifan Zhang (1):
drm/amdkfd: fix resume error when iommu disabled in Picasso
Yu Xiao (1):
nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
YueHaibing (2):
opp: Fix return in _opp_add_static_v2()
xen-pciback: Fix return in pm_ctrl_init()
Yufeng Mo (1):
net: hns3: fix kernel crash when unload VF while it is being reset
Zev Weiss (3):
hwmon: (pmbus/lm25066) Add offset coefficients
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
mtd: core: don't remove debugfs directory if device is in use
Zhang Changzhong (2):
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Qiao (1):
kernel/sched: Fix sched_fork() access an invalid sched_task_group
Zhang Yi (2):
quota: check block number when reading the block in quota file
quota: correct error number in free_dqentry()
Zheyu Ma (7):
cavium: Return negative value when pci_alloc_irq_vectors() fails
scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
mISDN: Fix return values of the probe function
cavium: Fix return values of the probe function
media: netup_unidvb: handle interrupt properly according to the firmware
memstick: r592: Fix a UAF bug when removing the driver
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ziyang Xuan (2):
rsi: stop thread firstly in rsi_91x_init() error handling
net: vlan: fix a UAF in vlan_dev_real_dev()
Zong-Zhe Yang (1):
rtw88: fix RX clock gate setting while fifo dump
jing yangyang (1):
firmware/psci: fix application of sizeof to pointer
liuyuntao (1):
virtio-gpu: fix possible memory allocation failure
yangerkun (3):
ext4: ensure enough credits in ext4_ext_shift_path_extents
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
ovl: fix use after free in struct ovl_aio_req
^ permalink raw reply [relevance 1%]
* [PATCH 5.15 000/920] 5.15.3-rc4 review
@ 2021-11-18 8:25 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-18 8:25 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.15.3 release.
There are 920 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 20 Nov 2021 08:14:03 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc4.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.15.3-rc4
Hans de Goede <hdegoede@redhat.com>
media: videobuf2-dma-sg: Fix buf->vb NULL pointer dereference
Sergey Senozhatsky <senozhatsky@chromium.org>
media: videobuf2: always set buffer vb2 pointer
Borislav Petkov <bp@suse.de>
x86/sev: Make the #VC exception stacks part of the default stacks storage
Tom Lendacky <thomas.lendacky@amd.com>
x86/sev: Add an x86 version of cc_platform_has()
Tom Lendacky <thomas.lendacky@amd.com>
arch/cc: Introduce a function to check for confidential computing features
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix also no-alu32 strobemeta selftest
Borislav Petkov <bp@suse.de>
selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
Colin Ian King <colin.king@canonical.com>
mmc: moxart: Fix null pointer dereference on pointer host
Arnd Bergmann <arnd@arndb.de>
ath10k: fix invalid dma_addr_t token assignment
Paulo Alcantara <pc@cjr.nz>
cifs: fix memory leak of smb3_fs_context_dup::server_hostname
Hans Verkuil <hverkuil-cisco@xs4all.nl>
media: vidtv: move kfree(dvb) to vidtv_bridge_dev_release()
Mario Limonciello <mario.limonciello@amd.com>
drm/amd/display: Look at firmware version to determine using dmub on dcn21
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Partial revert of commit 6f9f17287e78
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix PCIe Max Payload Size setting
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: Fix macros in sun8i_csc.h
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
Nathan Lynch <nathanl@linux.ibm.com>
powerpc/pseries/mobility: ignore ibm, platform-facilities updates
Nicholas Piggin <npiggin@gmail.com>
powerpc/64s/interrupt: Fix check_return_regs_valid() false positive
Russell Currey <ruscur@russell.cc>
powerpc/security: Use a mutex for interrupt exit code patching
Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Nicholas Piggin <npiggin@gmail.com>
powerpc/32e: Ignore ESR in instruction storage interrupt handler
Hari Bathini <hbathini@linux.ibm.com>
powerpc/bpf: Fix write protecting JIT code
Gustavo A. R. Silva <gustavoars@kernel.org>
powerpc/vas: Fix potential NULL pointer dereference
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: fsmc: Fix use of SM ORDER
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix rsc-table name
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix ignoring mapping vdev regions
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: Fix the wrong default value of is_iomem
Peng Fan <peng.fan@nxp.com>
remoteproc: elf_loader: Fix loading segment when is_iomem true
Halil Pasic <pasic@linux.ibm.com>
s390/cio: make ccw_device_dma_* more robust
Harald Freudenberger <freude@linux.ibm.com>
s390/ap: Fix hanging ioctl caused by orphaned replies
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Thomas Richter <tmricht@linux.ibm.com>
s390/cpumf: cpum_cf PMU displays invalid value after hotplug remove
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Avoid calling put_device() under dpm_list_mtx
Coly Li <colyli@suse.de>
bcache: Revert "bcache: use bvec_virt"
Coly Li <colyli@suse.de>
bcache: fix use-after-free problem in bcache_device_free()
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Jack Andersen <jackoalan@gmail.com>
mfd: dln2: Add cell for initializing DLN2 ADC
Rongwei Wang <rongwei.wang@linux.alibaba.com>
mm, thp: fix incorrect unmap behavior for private pages
Rongwei Wang <rongwei.wang@linux.alibaba.com>
mm, thp: lock filemap when truncating page cache
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Vasily Averin <vvs@virtuozzo.com>
memcg: prohibit unconditional exceeding the limit of dying tasks
Matthew Wilcox (Oracle) <willy@infradead.org>
mm/filemap.c: remove bogus VM_BUG_ON
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Anatolij Gustschin <agust@denx.de>
dmaengine: bestcomm: fix system boot lockups
Kishon Vijay Abraham I <kishon@ti.com>
dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
Kishon Vijay Abraham I <kishon@ti.com>
dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: don't need 8byte alignment for request length in ksmbd_check_message
Marios Makassikis <mmakassikis@freebox.fr>
ksmbd: Fix buffer length check in fsctl_validate_negotiate_info()
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
block: Hold invalidate_lock in BLKRESETZONE ioctl
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
block: Hold invalidate_lock in BLKZEROOUT ioctl
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
block: Hold invalidate_lock in BLKDISCARD ioctl
Matthew Brost <matthew.brost@intel.com>
drm/i915/guc: Fix blocked context accounting
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: fix unsafe pagevec reuse of hooked pclusters
Xiubo Li <xiubli@redhat.com>
ceph: fix mdsmap decode when there are MDS's beyond max_mds
Dongliang Mu <mudongliangabcd@gmail.com>
f2fs: fix UAF in f2fs_available_free_memory
Daeho Jeong <daehojeong@google.com>
f2fs: include non-compressed blocks in compr_written_block
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Guo Ren <guoren@linux.alibaba.com>
irqchip/sifive-plic: Fixup EOI failed when masked
Michael Pratt <mpratt@google.com>
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
Paolo Bonzini <pbonzini@redhat.com>
KVM: x86: move guest_pv_has out of user_access section
Thomas Gleixner <tglx@linutronix.de>
PCI/MSI: Destroy sysfs before freeing entries
Thomas Gleixner <tglx@linutronix.de>
PCI/MSI: Move non-mask check back into low level accessors
Dave Jones <davej@codemonkey.org.uk>
x86/mce: Add errata workaround for Skylake SKX37
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
Masahiro Yamada <masahiroy@kernel.org>
MIPS: fix *-pkg builds for loongson2ef platform
Masahiro Yamada <masahiroy@kernel.org>
MIPS: fix duplicated slashes for Platform file path
John David Anglin <dave.anglin@bell.net>
parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
Helge Deller <deller@gmx.de>
parisc: Fix backtrace to always include init funtion names
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Steve French <stfrench@microsoft.com>
smb3: do not error on fsync when readonly
Linus Torvalds <torvalds@linux-foundation.org>
thermal: int340x: fix build on 32-bit targets
Willem de Bruijn <willemb@google.com>
selftests/net: udpgso_bench_rx: fix port argument
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Dust Li <dust.li@linux.alibaba.com>
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Marek Behún <kabel@kernel.org>
net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
Vladimir Oltean <vladimir.oltean@nxp.com>
net: stmmac: allow a tc-taprio base-time of zero
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: allow configure ETS bandwidth of all TCs
Yufeng Mo <moyufeng@huawei.com>
net: hns3: fix kernel crash when unload VF while it is being reset
Jie Wang <wangjie125@huawei.com>
net: hns3: fix pfc packet number incorrect after querying pfc parameters
Jie Wang <wangjie125@huawei.com>
net: hns3: fix ROCE base interrupt vector initialization bug
Eric Dumazet <edumazet@google.com>
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Marek Behún <kabel@kernel.org>
net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than 10
Evan Quan <evan.quan@amd.com>
drm/amdgpu: fix uvd crash on Polaris12 during driver unloading
Muchun Song <songmuchun@bytedance.com>
seq_file: fix passing wrong private data
Andrew Halaney <ahalaney@redhat.com>
init: make unknown command line param message clearer
Imre Deak <imre.deak@intel.com>
drm/i915/fb: Fix rounding error in subsampled plane size calculation
Dan Carpenter <dan.carpenter@oracle.com>
gve: Fix off by one in gve_tx_timeout()
Arnd Bergmann <arnd@arndb.de>
dmaengine: stm32-dma: avoid 64-bit division in stm32_dma_get_max_width
Amelie Delaunay <amelie.delaunay@foss.st.com>
dmaengine: stm32-dma: fix burst in case of unaligned memory address
Jussi Maki <joamaki@gmail.com>
bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
John Fastabend <john.fastabend@gmail.com>
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Fix race in ingress receive verdict with redirect to self
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Remove unhash handler for BPF sockmap usage
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Reiji Watanabe <reijiw@google.com>
arm64: arm64_ftr_reg->name may not be a human-readable string
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
litex_liteeth: Fix a double free in the remove function
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Ian Rogers <irogers@google.com>
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
Vincent Mailhol <mailhol.vincent@wanadoo.fr>
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/powerplay: fix sysfs_emit/sysfs_emit_at handling
Fabio Estevam <festevam@gmail.com>
Revert "drm/imx: Annotate dma-fence critical section in commit path"
Arnd Bergmann <arnd@arndb.de>
drm: fb_helper: improve CONFIG_FB dependency
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Limit the tests in netns
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Give tcpdump a chance to terminate cleanly
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Use arping to accurate the arp number
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Put the logs to tmp folder
Mehrdad Arshad Rad <arshad.rad@gmail.com>
libbpf: Fix lookup_and_delete_elem_flags error reporting
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Fix device wakeup power reference counting error
Kai Song <songkai01@inspur.com>
mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
Mark Brown <broonie@kernel.org>
mfd: sprd: Add SPI device ID table
Mark Brown <broonie@kernel.org>
mfd: cpcap: Add SPI device ID table
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
mfd: core: Add missing of_node_put for loop iteration
Takashi Iwai <tiwai@suse.de>
ALSA: memalloc: Catch call with NULL snd_dma_buffer pointer
Arnd Bergmann <arnd@arndb.de>
octeontx2-pf: select CONFIG_NET_DEVLINK
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Jason Gunthorpe <jgg@ziepe.ca>
drm/ttm: remove ttm_bo_vm_insert_huge()
Luis Chamberlain <mcgrof@kernel.org>
block: fix device_add_disk() kobject_create_and_add() error handling
Heiner Kallweit <hkallweit1@gmail.com>
net: phy: fix duplex out of sync problem while changing settings
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
Selvin Xavier <selvin.xavier@broadcom.com>
PCI: Do not enable AtomicOps on VFs
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
ataflop: remove ataflop_probe_lock mutex
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: provide a helper for cleanup up an atari disk
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: add registration bool before calling del_gendisk()
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: use the blk_cleanup_disk() helper
Luis Chamberlain <mcgrof@kernel.org>
nvdimm/pmem: cleanup the disk if pmem_release_disk() is yet assigned
Chenyuan Mi <cymi20@fudan.edu.cn>
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
Andrea Righi <andrea.righi@canonical.com>
selftests: net: properly support IPv6 in GSO GRE test
Avri Altman <avri.altman@wdc.com>
scsi: ufs: ufshpb: Properly handle max-single-cmd
Bean Huo <beanhuo@micron.com>
scsi: ufs: core: Fix NULL pointer dereference
Daejun Park <daejun7.park@samsung.com>
scsi: ufs: ufshpb: Use proper power management API
Jackie Liu <liuyun01@kylinos.cn>
scsi: bsg: Fix errno when scsi_bsg_register_queue() fails
Luis Chamberlain <mcgrof@kernel.org>
nvdimm/btt: do not call del_gendisk() if not needed
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
PCI: j721e: Fix j721e_pcie_probe() error path
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Daniel Thompson <daniel.thompson@linaro.org>
kdb: Adopt scheduler's task classification
Brett Creeley <brett.creeley@intel.com>
ice: Fix not stopping Tx queues for VFs
Sylwester Dziedziuch <sylwesterx.dziedziuch@intel.com>
ice: Fix replacing VF hardware MAC to existing MAC filter
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
Ziyang Xuan <william.xuanziyang@huawei.com>
net: vlan: fix a UAF in vlan_dev_real_dev()
Stafford Horne <shorne@gmail.com>
openrisc: fix SMP tlb flush NULL pointer dereference
Jakub Kicinski <kuba@kernel.org>
ethtool: fix ethtool msg len calculation for pause stats
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed toeplitz.sh/toeplitz_client.sh to Makefile
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed vrf_strict_mode_test.sh test to Makefile
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed SRv6 tests
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed setup_loopback.sh/setup_veth.sh to Makefile
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed icmp.sh test to Makefile
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
Beld Zhang <beldzhang@gmail.com>
io-wq: fix max-workers not correctly set on multi-node system
Yu Kuai <yukuai3@huawei.com>
nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
Yu Kuai <yukuai3@huawei.com>
nbd: fix max value for 'first_minor'
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Sander Vanheule <sander@svanheule.net>
gpio: realtek-otto: fix GPIO line IRQ offset
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Dave Jiang <dave.jiang@intel.com>
dmaengine: idxd: fix resource leak on dmaengine driver disable
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Fix EDIF bsg
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Increase ELS payload
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Flush stale events and msgs on session down
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Fix app start delay
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Fix app start fail
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Relogin during fabric disturbance
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: target: core: Remove from tmr_list during LUN unlink
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Eric W. Biederman <ebiederm@xmission.com>
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Dave Jiang <dave.jiang@intel.com>
dmaengine: idxd: reconfig device after device reset command
Dave Jiang <dave.jiang@intel.com>
dmanegine: idxd: fix resource free ordering on driver removal
Dongliang Mu <mudongliangabcd@gmail.com>
dmaengine: tegra210-adma: fix pm runtime unbalance
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Robert-Ionut Alexa <robert-ionut.alexa@nxp.com>
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Alexey Gladkov <legion@kernel.org>
Fix user namespace leak
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix an Oops in pnfs_mark_request_commit()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix up commit deadlocks
Amelie Delaunay <amelie.delaunay@foss.st.com>
dmaengine: stm32-dma: fix stm32_dma_get_max_width
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
Dan Carpenter <dan.carpenter@oracle.com>
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
Zev Weiss <zev@bewilderbeest.net>
mtd: core: don't remove debugfs directory if device is in use
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: arasan: Prevent an unsupported configuration
Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Guido Günther <agx@sigxcpu.org>
drm/bridge: nwl-dsi: Add atomic_get_input_bus_fmts
John Keeping <john@metanate.com>
Input: st1232 - increase "wait ready" timeout
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Kees Cook <keescook@chromium.org>
sparc: Add missing "FORCE" target when using if_changed
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
YueHaibing <yuehaibing@huawei.com>
opp: Fix return in _opp_add_static_v2()
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/bridge/lontium-lt9611uxc: fix provided connector suport
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix dentry verifier races
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Ignore the directory size when marking for revalidation
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
Kewei Xu <kewei.xu@mediatek.com>
i2c: mediatek: fixing the incorrect register offset
Mark Brown <broonie@kernel.org>
Input: ariel-pwrbutton - add SPI device ID table
Mark Brown <broonie@kernel.org>
rtc: mcp795: Add SPI ID table
Dave Jiang <dave.jiang@intel.com>
dmaengine: idxd: move out percpu_ref_exit() to ensure it's outside submission
Heiner Kallweit <hkallweit1@gmail.com>
i2c: i801: Use PCI bus rescan mutex to protect P2SB access
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix TCM io memory type
Mark Brown <broonie@kernel.org>
rtc: pcf2123: Add SPI ID table
Mark Brown <broonie@kernel.org>
rtc: ds1390: Add SPI ID table
Mark Brown <broonie@kernel.org>
rtc: ds1302: Add SPI ID table
J. Bruce Fields <bfields@redhat.com>
nfsd: don't alloc under spinlock in rpc_parse_scope_id
Evgeny Novikov <novikov@ispras.ru>
mtd: rawnand: intel: Fix potential buffer overflow in probe
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Aharon Landau <aharonl@nvidia.com>
RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Parav Pandit <parav@nvidia.com>
vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: check desc == NULL when using indirect with packed
Geert Uytterhoeven <geert@linux-m68k.org>
serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: rsnd: Fix an error handling path in 'rsnd_node_count()'
Yixing Liu <liuyixing1@huawei.com>
RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
Haoyue Xu <xuhaoyue1@hisilicon.com>
RDMA/hns: Fix initial arm_st of CQ
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc: Don't provide __kernel_map_pages() without ARCH_SUPPORTS_DEBUG_PAGEALLOC
Logan Gunthorpe <logang@deltatee.com>
iommu/dma: Fix incorrect error return on iommu deferred attach
Takashi Sakamoto <o-takashi@sakamocchi.jp>
ALSA: oxfw: fix functional regression for Mackie Onyx 1640i in v5.14 or later
Denis Kirjanov <kda@linux-powerpc.org>
powerpc/xmon: fix task state output
Bixuan Cui <cuibixuan@linux.alibaba.com>
powerpc/44x/fsp2: add missing of_node_put
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/book3e: Fix set_memory_x() and set_memory_nx()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: clarify error check and length calculations
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: clk-master: fix prescaler logic
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: clk-master: check if div or pres is zero
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Yang Yingliang <yangyingliang@huawei.com>
phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
Sandeep Maheswaram <quic_c_sanm@quicinc.com>
phy: qcom-snps: Correct the FSEL_MASK
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
phy: qcom-qmp: another fix for the sc8180x PCIe definition
Dan Carpenter <dan.carpenter@oracle.com>
phy: ti: gmii-sel: check of_get_address() for failure
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Mark Brown <broonie@kernel.org>
ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
Rahul Tanwar <rtanwar@maxlinear.com>
pinctrl: equilibrium: Fix function addition in multiple groups
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
Bhupesh Sharma <bhupesh.sharma@linaro.org>
arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
Marijn Suijten <marijn.suijten@somainline.org>
arm64: dts: qcom: pmi8994: Fix "eternal"->"external" typo in WLED node
Wan Jiabing <wanjiabing@vivo.com>
soc: qcom: apr: Add of_node_put() before return
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
Guru Das Srinagesh <quic_gurus@quicinc.com>
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
Jack Pham <jackp@codeaurora.org>
usb: dwc3: gadget: Skip resizing EP's TX FIFO if already resized
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: reset current session before setting the new one
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
Stefan Agner <stefan@agner.ch>
serial: imx: fix detach/attach of serial console
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: bus: stop dereferencing invalid slave pointer
Nuno Sá <nuno.sa@analog.com>
iio: adis: do not disabe IRQs in 'adis_init()'
Randy Dunlap <rdunlap@infradead.org>
usb: typec: STUSB160X should select REGMAP_I2C
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
soc: qcom: socinfo: add two missing PMIC IDs
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Make power_on actually enable the domain
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Always configure both ASP TX channels
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix SAI sub nodes register range
Fabrice Gasnier <fabrice.gasnier@foss.st.com>
ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
Geert Uytterhoeven <geert+renesas@glider.be>
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
Athira Rajeev <atrajeev@linux.vnet.ibm.cm>
powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
Andrew Halaney <ahalaney@redhat.com>
dyndbg: make dyndbg a known cli param
Logan Gunthorpe <logang@deltatee.com>
RDMA/core: Set sgtable nents when using ib_dma_virt_map_sg()
Vegard Nossum <vegard.nossum@oracle.com>
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Nikita Yushchenko <nikita.yoush@cogentembedded.com>
staging: most: dim2: do not double-register the same device
Randy Dunlap <rdunlap@infradead.org>
usb: musb: select GENERIC_PHY instead of depending on it
Leon Romanovsky <leon@kernel.org>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Yang Yingliang <yangyingliang@huawei.com>
power: supply: max17040: fix null-ptr-deref in max17040_probe()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc: fix unbalanced node refcount in check_kvm_guest()
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype for 'create_section_mapping'
Clément Léger <clement.leger@bootlin.com>
clk: at91: check pmc node status before registering syscore ops
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Mark Brown <broonie@kernel.org>
iio: st_pressure_spi: Add missing entries SPI to device ID table
Ranjani Sridharan <ranjani.sridharan@linux.intel.com>
ASoC: SOF: topology: do not power down primary core during topology removal
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Yang Yingliang <yangyingliang@huawei.com>
driver core: Fix possible memory leak in device_link_add()
Igor Pylypiv <ipylypiv@google.com>
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
Sumit Saxena <sumit.saxena@broadcom.com>
scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt
Bart Van Assche <bvanassche@google.com>
scsi: ufs: core: Stop clearing UNIT ATTENTIONS
Bean Huo <beanhuo@micron.com>
scsi: ufs: core: Fix ufshcd_probe_hba() prototype to match the definition
Claudiu Beznea <claudiu.beznea@microchip.com>
power: reset: at91-reset: check properly the return value of devm_of_iomap
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: debugfs: use controller id and link_id for debugfs
Takashi Iwai <tiwai@suse.de>
ALSA: usb-audio: Fix possible race at sync of urb completions
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Use position buffer for SKL+ again
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
David Stevens <stevensd@chromium.org>
iommu/dma: Fix arch_sync_dma for map
David Stevens <stevensd@chromium.org>
iommu/dma: Fix sync_sg with swiotlb
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
Arnd Bergmann <arnd@arndb.de>
iommu/mediatek: Fix out-of-range warning with clang
Geert Uytterhoeven <geert+renesas@glider.be>
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
Yassine Oudjana <y.oudjana@protonmail.com>
ASoC: wcd9335: Use correct version to initialize Class H
Biju Das <biju.das.jz@bp.renesas.com>
pinctrl: renesas: rzg2l: Fix missing port register 21h
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Kuogee Hsieh <khsieh@codeaurora.org>
arm64: dts: qcom: sc7280: fix display port phy reg property
Naina Mehta <nainmeht@codeaurora.org>
soc: qcom: llcc: Disable MMUHWT retention
Douglas Anderson <dianders@chromium.org>
arm64: dts: qcom: sc7180: Base dynamic CPU power coefficients in reality
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Tony Lindgren <tony@atomide.com>
bus: ti-sysc: Fix timekeeping_suspended warning on resume
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-sm1: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie node
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Marijn Suijten <marijn.suijten@somainline.org>
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Fix NVMe I/O failover to non-optimized path
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Use link event to wake up app
Ajish Koshy <Ajish.Koshy@microchip.com>
scsi: pm80xx: Fix lockup in outbound queue management
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
Rafał Miłecki <rafal@milecki.pl>
arm64: dts: broadcom: bcm4908: Fix UART clock name
Rafał Miłecki <rafal@milecki.pl>
ARM: dts: BCM5301X: Fix memory nodes names
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Alexandru Ardelean <aardelean@deviqon.com>
iio: st_sensors: disable regulators after device unregistration
Dongjin Kim <tobetter@gmail.com>
arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
Pavel Skripkin <paskripkin@gmail.com>
staging: r8188eu: fix memory leak in rtw_set_key
Hector.Yuan <hector.yuan@mediatek.com>
cpufreq: Fix parameter in parse_perf_domain()
Frank Rowand <frank.rowand@sony.com>
of: unittest: fix EXPECT text for gpio hog errors
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
Dan Schatzberg <schatzberg.dan@gmail.com>
cgroup: Fix rootcg cpu.stat guest double counting
Liu Jian <liujian56@huawei.com>
skmsg: Lose offset info in sk_psock_skb_ingress
Geliang Tang <geliang.tang@suse.com>
selftests: mptcp: fix proto type in link_failure tests
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: delay complete()
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: don't stop queue in xmit
Jakub Kicinski <kuba@kernel.org>
udp6: allow SO_MARK ctrl msg to affect routing
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Nikolay Aleksandrov <nikolay@nvidia.com>
selftests: net: bridge: update IGMP/MLD membership interval value
Ivan Vecera <ivecera@redhat.com>
net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Yinjun Zhang <yinjun.zhang@corigine.com>
nfp: fix potential deadlock when canceling dim work
Yinjun Zhang <yinjun.zhang@corigine.com>
nfp: fix NULL pointer access when scheduling dim work
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ipmi: kcs_bmc: Fix a memory leak in the error handling path of 'kcs_bmc_serio_add_device()'
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Xin Long <lucien.xin@gmail.com>
sctp: return true only for pathmtu update in sctp_transport_pl_toobig
Xin Long <lucien.xin@gmail.com>
sctp: subtract sctphdr len in sctp_transport_pl_hlen
Xin Long <lucien.xin@gmail.com>
sctp: reset probe_timer in sctp_transport_pl_update
Xin Long <lucien.xin@gmail.com>
sctp: allow IP fragmentation when PLPMTUD enters Error state
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix memory leak in test_ima
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix fd cleanup in sk_lookup test
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Lang Yu <lang.yu@amd.com>
drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw()
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Channel list update before hardware scan
Eric Dumazet <edumazet@google.com>
bpf: Fixes possible race in update_prog_stats() for 32bit arches
Eric Dumazet <edumazet@google.com>
bpf: Avoid races in __bpf_prog_run() for 32bit arches
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix discarded frames due to wrong sequence number
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
spi: spi-rpc-if: Check return value of rpcif_sw_init()
Zhang Rui <rui.zhang@intel.com>
cpufreq: intel_pstate: Fix cpu->pstate.turbo_freq initialization
Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
tracing: Fix missing trace_boot_init_histograms kstrdup NULL checks
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Ilya Leoshkevich <iii@linux.ibm.com>
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
Mark Brown <broonie@kernel.org>
tpm_tis_spi: Add missing SPI ID
Hao Wu <hao.wu@rubrik.com>
tpm: fix Atmel TPM crash caused by too frequent queries
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix off-by-one bug in bpf_core_apply_relo()
Yu Kuai <yukuai3@huawei.com>
blk-cgroup: synchronize blkg creation against policy deactivation
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: more blk-mq refactoring fixes
Abinaya Kalaiselvan <akalaise@codeaurora.org>
ath10k: fix module load regression with iram-recovery feature
Arnd Bergmann <arnd@arndb.de>
ARM: 9142/1: kasan: work around LPAE build warning
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid double free of sida page
David Hildenbrand <david@redhat.com>
s390/uv: fully validate the VMA before calling follow_page()
David Hildenbrand <david@redhat.com>
s390/mm: fix VMA and page table handling code in storage key handling functions
David Hildenbrand <david@redhat.com>
s390/mm: validate VMA in PGSTE manipulation functions
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
David Hildenbrand <david@redhat.com>
s390/gmap: validate VMA in __gmap_zap()
Nick Hainke <vincent@systemli.org>
mt76: mt7615: mt7622: fix ibss and meshpoint
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF header parsing checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix overflow in BTF sanity checks
Quentin Monnet <quentin@isovalent.com>
bpftool: Avoid leaking the JSON writer prepared for program metadata
Mauricio Vásquez <mauricio@kinvolk.io>
libbpf: Fix memory leak in btf__dedup()
Jim Mattson <jmattson@google.com>
KVM: selftests: Fix nested SVM tests when built with clang
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Horia Geantă <horia.geanta@nxp.com>
crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm/dsi: fix wrong type in msm_dsi_host
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Joerg Roedel <jroedel@suse.de>
x86/sev: Fix stack type check in vc_switch_off_ist()
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Ye Bin <yebin10@huawei.com>
nbd: Fix use-after-free in pid_show
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Tim Gardner <tim.gardner@canonical.com>
net: enetc: unmap DMA in enetc_send_cmd()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pnvm: read EFI data only if long enough
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pnvm: don't kmemdup() more than we have
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: reset PM state on unsuccessful resume
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix sta_rec_wtbl tag len
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: connac: fix possible NULL pointer dereference in mt76_connac_get_phy_mode_v2
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7615: fix monitor mode tear down crash
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix retrying release semaphore without end
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix possible infinite loop release semaphore
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7615: fix hwmon temp sensor mem use-after-free
Ben Greear <greearb@candelatech.com>
mt76: mt7915: fix hwmon temp sensor mem use-after-free
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: always wake device if necessary in debugfs
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix firmware usage of RA info using legacy rates
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: report HE MU radiotap
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: overwrite default reg_ops if necessary
Leon Yen <Leon.Yen@mediatek.com>
mt76: connac: fix GTK rekey offload failure on WPA mixed mode
Deren Wu <deren.wu@mediatek.com>
mt76: mt7921: fix dma hang in rmmod
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix bit fields for HT rate idx
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix potential overflow of eeprom page index
Deren Wu <deren.wu@mediatek.com>
mt76: mt7921: Fix out of order process by invalid event pkt
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix survey-dump reporting
Sean Wang <sean.wang@mediatek.com>
mt76: fix build error implicit enumeration conversion
Leon Yen <Leon.Yen@mediatek.com>
mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
Dan Carpenter <dan.carpenter@oracle.com>
mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix endianness warning in mt7921_update_txs
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event
Lang Yu <lang.yu@amd.com>
drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Fix sharing of wakeup power resources
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Turn off unused wakeup power resources
Fei Shao <fshao@chromium.org>
mailbox: mtk-cmdq: Fix local clock ID usage
Fei Shao <fshao@chromium.org>
mailbox: mtk-cmdq: Validate alias_id on probe
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Andrea Righi <andrea.righi@canonical.com>
blk-wbt: prevent NULL pointer dereference in wb_timer_fn
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: fix breakage introduced at blk-mq refactoring
Bixuan Cui <cuibixuan@huawei.com>
io-wq: Remove duplicate code in io_workqueue_create()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Sean Young <sean@mess.org>
media: ir_toy: assignment to be16 should be of correct type
Randy Dunlap <rdunlap@infradead.org>
media: ivtv: fix build for UML
jason-jh.lin <jason-jh.lin@mediatek.com>
mailbox: Remove WARN_ON for async_cb.cb in cmdq_exec_done
Jackie Liu <liuyun01@kylinos.cn>
thermal/drivers/qcom/lmh: make QCOM_LMH depends on QCOM_SCM
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: fix potential NULL dereference in cleanup
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: unlock on error in get_sched_entity()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: potential error pointer dereference in init()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init()
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/msm/dsi: do not enable irq handler before powering up the host
Ziyang Xuan <william.xuanziyang@huawei.com>
thermal/core: fix a UAF bug in __thermal_cooling_device_register()
Ovidiu Panait <ovidiu.panait@windriver.com>
crypto: octeontx2 - set assoclen in aead_do_fallback()
Eric Dumazet <edumazet@google.com>
tcp: switch orphan_count to bare per-cpu counters
Randy Dunlap <rdunlap@infradead.org>
net: tulip: winbond-840: fix build for UML
Randy Dunlap <rdunlap@infradead.org>
net: intel: igc_ptp: fix build for UML
Randy Dunlap <rdunlap@infradead.org>
net: fealnx: fix build for UML
Zhang Qiao <zhangqiao22@huawei.com>
kernel/sched: Fix sched_fork() access an invalid sched_task_group
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix context restore
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Catherine Sullivan <csully@google.com>
gve: Track RX buffer allocation failures
John Fraker <jfraker@google.com>
gve: Recover from queue stall due to missed IRQ
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
liqiong <liqiong@nfschina.com>
ima: fix deadlock when traversing "ima_default_rules".
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Arnd Bergmann <arnd@arndb.de>
crypto: ccree - avoid out-of-range warnings from clang
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Mansur Alisha Shaik <mansur@codeaurora.org>
media: venus: fix vpp frequency calculation for decoder
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_dynset: relax superfluous check on set updates
Peter Zijlstra <peterz@infradead.org>
rcu: Fix rcu_dynticks_curr_cpu_in_eqs() vs noinstr
Peter Zijlstra <peterz@infradead.org>
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
Yazen Ghannam <yazen.ghannam@amd.com>
EDAC/amd64: Handle three rank interleaving mode
Borislav Petkov <bp@suse.de>
x86/insn: Use get_unaligned() instead of memcpy()
Vincent Donnefort <vincent.donnefort@arm.com>
PM: EM: Fix inefficient states detection
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Stephen Boyd <swboyd@chromium.org>
ath10k: Don't always treat modem stop events as crashes
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Arnd Bergmann <arnd@arndb.de>
drm: fb_helper: fix CONFIG_FB dependency
Arnd Bergmann <arnd@arndb.de>
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
Punit Agrawal <punitagrawal@gmail.com>
kprobes: Do not use local variable when creating debugfs file
Yee Lee <yee.lee@mediatek.com>
scs: Release kasan vmalloc poison in scs_free process
Eugen Hristev <eugen.hristev@microchip.com>
media: atmel: fix the ispck initialization
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: tm6000: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: radio-wl1273: Avoid card name truncation
Ondrej Jirman <megous@megous.com>
media: sun6i-csi: Allow the video device to be open multiple times
Randy Dunlap <rdunlap@infradead.org>
media: i2c: ths8200 needs V4L2_ASYNC
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Tom Rix <trix@redhat.com>
media: TDA1997x: handle short reads of hdmi info frame.
Dafna Hirschfeld <dafna.hirschfeld@collabora.com>
media: mtk-vcodec: venc: fix return value when start_streaming fails
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: S_CTRL output the right value
Sakari Ailus <sakari.ailus@linux.intel.com>
media: imx258: Fix getting clock frequency
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Evgeny Novikov <novikov@ispras.ru>
media: ttusb-dec: avoid release of non-acquired mutex
Colin Ian King <colin.king@canonical.com>
media: cxd2880-spi: Fix a null pointer dereference on error handling path
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: meson-ge2d: Fix rotation parameter changes detection in 'ge2d_s_ctrl()'
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Kumar Kartikeya Dwivedi <memxor@gmail.com>
libbpf: Fix skel_internal.h to set errno on loader retval < 0
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Sudarshan Rajagopalan <quic_sudaraja@quicinc.com>
arm64: mm: update max_pfn after memory hotplug
Matthew Auld <matthew.auld@intel.com>
drm/ttm: stop calling tt_swapin in vm_access
Fabio Estevam <festevam@denx.de>
ath10k: sdio: Add missing BH locking around napi_schdule()
Loic Poulain <loic.poulain@linaro.org>
ath10k: Fix missing frame timestamp for beacon/probe-resp
Arnd Bergmann <arnd@arndb.de>
gve: DQO: avoid unused variable warnings
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
Pradeep Kumar Chitrapu <pradeepc@codeaurora.org>
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid race during regd updates
Dan Carpenter <dan.carpenter@oracle.com>
ath11k: fix some sleeping in atomic bugs
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix error in tail call limit tests
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366: Fix a bug in deleting VLANs
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Leon Romanovsky <leon@kernel.org>
net/mlx5: Accept devlink user input after driver initialization complete
Johannes Berg <johannes.berg@intel.com>
cfg80211: always free wiphy specific regdomain
Johannes Berg <johannes.berg@intel.com>
mac80211: twt: don't use potentially unaligned pointer
Kees Cook <keescook@chromium.org>
fortify: Fix dropped strcpy() compile-time write overflow check
Florian Westphal <fw@strlen.de>
mptcp: do not shrink snd_nxt when recovering
Jiasheng Jiang <jiasheng@iscas.ac.cn>
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Leon Romanovsky <leon@kernel.org>
qed: Don't ignore devlink allocation failures
Leon Romanovsky <leon@kernel.org>
bnxt_en: Check devlink allocation and registration status
Hans de Goede <hdegoede@redhat.com>
Bluetooth: hci_h5: Fix (runtime)suspend issues on RTL8723BS HCIs
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - power up 4xxx device
Michael Walle <michael@walle.cc>
crypto: caam - disable pkc for non-E SoCs
Guchun Chen <guchun.chen@amd.com>
drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage
Harry Wentland <harry.wentland@amd.com>
drm/amd/display: Pass display_pipe_params_st as const in DML
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix crash on device remove/driver unload
Dinghao Liu <dinghao.liu@zju.edu.cn>
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Ajay Singh <ajay.kathat@microchip.com>
wilc1000: fix possible memory leak in cfg_scan_result()
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
wcn36xx: Fix Antenna Diversity Switching
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Yoshitaka Ikeda <ikeda@nskint.co.jp>
spi: Fixed division by zero warning
Alex Bee <knaerzche@gmail.com>
drm: bridge: it66121: Fix return value it66121_probe
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: don't call netif_carrier_off() with NULL netdev
Yajun Deng <yajun.deng@linux.dev>
net: net_namespace: Fix undefined member in key_remove_domain()
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
lockdep: Let lock_is_held_type() detect recursive read as read
liuyuntao <liuyuntao10@huawei.com>
virtio-gpu: fix possible memory allocation failure
Nathan Chancellor <nathan@kernel.org>
crypto: sm4 - Do not change section of ck and sbox
Iago Toral Quiroga <itoral@igalia.com>
drm/v3d: fix wait for TMU write combiner flush
Leon Romanovsky <leon@kernel.org>
net/mlx5: Publish and unpublish all devlink parameters at once
Peter Zijlstra <peterz@infradead.org>
objtool: Handle __sanitize_cov*() tail calls
Peter Zijlstra <peterz@infradead.org>
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: fix burst length for DEU
Neeraj Upadhyay <neeraju@codeaurora.org>
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: hci_uart: fix GPF in h5_recv
Toke Høiland-Jørgensen <toke@redhat.com>
libbpf: Don't crash on object files with no symbol tables
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Paul Cercueil <paul@crapouillou.net>
drm/bridge: it66121: Wait for next bridge to be probed
Paul Cercueil <paul@crapouillou.net>
drm/bridge: it66121: Initialize {device,vendor}_ids
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR M2PCIE event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR CHA event constraints
Robert Foss <robert.foss@linaro.org>
drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
Imre Deak <imre.deak@intel.com>
fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix strobemeta selftest regression
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: don't trigger WARN() when decompression fails
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Stephane Eranian <eranian@google.com>
perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
Shuah Khan <skhan@linuxfoundation.org>
selftests/core: fix conflicting types compile error for close_range()
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Eric Dumazet <edumazet@google.com>
inet: remove races in inet{6}_getname()
王贇 <yun.wang@linux.alibaba.com>
ftrace: do CPU checking after preemption disabled
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
Revert "wcn36xx: Enable firmware link monitoring"
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix packet drop on resume
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Correct band/freq reporting on RX
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Josef Bacik <josef@toxicpanda.com>
btrfs: do not take the uuid_mutex in btrfs_rm_device
Sidong Yang <realwakka@gmail.com>
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
Hui Wang <hui.wang@canonical.com>
ACPI: resources: Add one more Medion model in IRQ override quirk
Stefan Schaeckeler <schaecsn@gmx.net>
ACPI: AC: Quirk GK45 to skip reading _PSR
Eric Dumazet <edumazet@google.com>
net: annotate data-race in neigh_output()
Florian Westphal <fw@strlen.de>
vrf: run conntrack only in context of lower/physdev for locally generated packets
Viktor Rosendahl <Viktor.Rosendahl@bmw.de>
tools/latency-collector: Use correct size when writing queue_full_warning
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Fix glock_hash_walk bugs
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Cancel remote delete work asynchronously
Marc Kleine-Budde <mkl@pengutronix.de>
can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to unsigned int
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Jiri Olsa <jolsa@redhat.com>
selftests/bpf: Fix perf_buffer test on system with offline cpus
Shuah Khan <skhan@linuxfoundation.org>
selftests: kvm: fix mismatched fclose() after popen()
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Nick Desaulniers <ndesaulniers@google.com>
arm64: vdso32: suppress error message for 'make mrproper'
David Yang <davidcomponentone@gmail.com>
samples/bpf: Fix application of sizeof to pointer
Hannes Reinecke <hare@suse.de>
nvme: drop scan_lock and always kick requeue list when removing namespaces
Israel Rukshin <israelr@nvidia.com>
nvmet-tcp: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet-rdma: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet: fix use-after-free when a port is removed
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
Michael Tretter <m.tretter@pengutronix.de>
media: allegro: ignore interrupt if mailbox is not initialized
Jens Axboe <axboe@kernel.dk>
block: remove inaccurate requeue check
Yaara Baruch <yaara.baruch@intel.com>
iwlwifi: change all JnP to NO-160 configuration
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7915: fix an off-by-one bound check
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Yanfei Xu <yanfei.xu@windriver.com>
locking/rwsem: Disable preemption for spinning region
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Xiao Ni <xni@redhat.com>
md: update superblock after changing rdev flags in state_store
Luis Chamberlain <mcgrof@kernel.org>
floppy: fix calling platform_device_unregister() on invalid drives
Jens Axboe <axboe@kernel.dk>
block: bump max plugged deferred size from 16 to 32
Ansuel Smith <ansuelsmth@gmail.com>
thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
Tim Gardner <tim.gardner@canonical.com>
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
Yuanzheng Song <songyuanzheng@huawei.com>
thermal/core: Fix null pointer dereference in thermal_release()
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
net: phy: micrel: make *-skew-ps check more lenient
Yifan Zhang <yifan1.zhang@amd.com>
drm/amdkfd: fix resume error when iommu disabled in Picasso
Aurabindo Pillai <aurabindo.pillai@amd.com>
drm/amd/display: fix null pointer deref when plugging in display
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: scan: Release PM resources blocked by unused objects
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Andreas Gruenbacher <agruenba@redhat.com>
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
Xin Xiong <xiongx18@fudan.edu.cn>
mmc: moxart: Fix reference count leaks in moxart_probe
Will Deacon <will@kernel.org>
KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracing: Disable "other" permission bits in the tracefs files
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Alex Sierra <alex.sierra@amd.com>
drm/amdkfd: rm BO resv on validation to avoid deadlock
Antoine Tenart <atenart@kernel.org>
net-sysfs: try not to restart the syscall if it will fail eventually
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: imgu_fmt: Handle properly try
Mirela Rabulea <mirela.rabulea@nxp.com>
media: imx-jpeg: Fix possible null pointer dereference
Wojciech Drewek <wojciech.drewek@intel.com>
ice: Move devlink port to PF/VF struct
Vincent Donnefort <vincent.donnefort@arm.com>
cpufreq: Make policy min/max hard requirements
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Li Zhijian <lizhijian@cn.fujitsu.com>
kselftests/sched: cleanup the child processes
Josh Don <joshdon@google.com>
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
Corey Minyard <cminyard@mvista.com>
ipmi: Disable some operations during a panic
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Hans de Goede <hdegoede@redhat.com>
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Zong-Zhe Yang <kevin_yang@realtek.com>
rtw88: fix RX clock gate setting while fifo dump
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Niklas Söderlund <niklas.soderlund+renesas@ragnatech.se>
media: rcar-vin: Use user provided buffers when starting
Martin Kepplinger <martink@posteo.de>
media: imx: set a media_device bus_info string
Sergey Senozhatsky <senozhatsky@chromium.org>
media: videobuf2: rework vb2_mem_ops API
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Evgeny Novikov <novikov@ispras.ru>
media: vidtv: Fix memory leak in remove
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set unique vdev name based in type
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Dmitriy Ulitin <ulitin@ispras.ru>
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Evgeny Novikov <novikov@ispras.ru>
media: atomisp: Fix error handling in probe
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Rakesh Babu <rsaladi2@marvell.com>
octeontx2-pf: Enable promisc/allmulti match MCAM entries.
Alagu Sankar <alagusankar@silex-india.com>
ath10k: high latency fixes for beacon buffer
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
Wen Gong <wgong@codeaurora.org>
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid reg rules update during firmware recovery
Petr Machata <petrm@nvidia.com>
selftests: net: fib_nexthops: Wait before checking reported idle time
Jimmy Kizito <Jimmy.Kizito@amd.com>
drm/amd/display: Fix null pointer dereference for encoders
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix MMIO access page fault
Eric Biggers <ebiggers@google.com>
fscrypt: allow 256-bit master keys with AES-256-XTS
Mark Brown <broonie@kernel.org>
spi: Check we have a spi_device_id for each DT compatible
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Peter Zijlstra <peterz@infradead.org>
x86/mm/64: Improve stack overflow warnings
Shreyansh Chouhan <chouhan.shreyansh630@gmail.com>
crypto: aesni - check walk.nbytes instead of err
Seevalamuthu Mariappan <seevalam@codeaurora.org>
ath11k: Align bss_chan_info structure with firmware
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Paul E. McKenney <paulmck@kernel.org>
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
Hui Wang <hui.wang@canonical.com>
ACPI: resources: Add DMI-based legacy IRQ override quirk
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
James Zhu <James.Zhu@amd.com>
drm/amdgpu: move iommu_resume before ip init/resume
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Scott Wood <swood@redhat.com>
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
Simon Ser <contact@emersion.fr>
drm/panel-orientation-quirks: add Valve Steam Deck
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: call sock_hold earlier in sco_conn_del
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
Charan Teja Reddy <charante@codeaurora.org>
dma-buf: WARN on dmabuf release with pending attachments
Kai Vehmanen <kai.vehmanen@linux.intel.com>
component: do not leave master devres group open after bind
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Clear status bits in interrupt handler
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Johan Hovold <johan@kernel.org>
most: fix control-message timeouts
Johan Hovold <johan@kernel.org>
Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
Pali Rohár <pali@kernel.org>
serial: 8250: Fix reporting real baudrate value in c_ospeed field
Jens Axboe <axboe@kernel.dk>
io-wq: serialize hash clear with wakeup
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION
Johan Hovold <johan@kernel.org>
serial: 8250: fix racy uartclk update
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Mihail Chindris <mihail.chindris@analog.com>
Documentation:devicetree:bindings:iio:dac: Fix val
Nuno Sá <nuno.sa@analog.com>
iio: ad5770r: make devicetree property reading consistent
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Mihail Chindris <mihail.chindris@analog.com>
drivers: iio: dac: ad5766: Fix dt property name
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: check return value of kstrdup_const()
Suzuki K Poulose <suzuki.poulose@arm.com>
coresight: trbe: Defer the probe on offline CPUs
Suzuki K Poulose <suzuki.poulose@arm.com>
coresight: trbe: Fix incorrect access of the sink specific data
Tao Zhang <quic_taozha@quicinc.com>
coresight: cti: Correct the parameter for pm_runtime_put
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Robert Marko <robert.marko@sartura.hr>
mfd: simple-mfd-i2c: Select MFD_CORE to fix build error
Paulo Alcantara <pc@cjr.nz>
cifs: set a minimum of 120s for next dns resolution
Shyam Prasad N <sprasad@microsoft.com>
cifs: To match file servers, make sure the server hostname matches
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix configuring Reference clock
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix reporting Data Link Layer Link Active
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix checking for link up via LTSSM state
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Dan Williams <dan.j.williams@intel.com>
cxl/pci: Fix NULL vs ERR_PTR confusion
Li Chen <lchen@ambarella.com>
PCI: cadence: Add cdns_plat_pcie_probe() missing return
Marek Behún <kabel@kernel.org>
PCI: pci-bridge-emul: Fix emulation of W1C bits
Miklos Szeredi <mszeredi@redhat.com>
ovl: fix filattr copy-up failure
yangerkun <yangerkun@huawei.com>
ovl: fix use after free in struct ovl_aio_req
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Arnd Bergmann <arnd@arndb.de>
ifb: fix building without CONFIG_NET_CLS_ACT
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Steven Rostedt (VMware) <rostedt@goodmis.org>
ring-buffer: Protect ring_buffer_reset() from reentrancy
Pavel Begunkov <asml.silence@gmail.com>
io_uring: honour zeroes as io-wq worker limits
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Oleksij Rempel <linux@rempel-privat.de>
iio: adc: tsc2046: fix scan interval warning
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_irq(): add missing can_rx_offload_threaded_irq_finish() in case of bus off
Stephane Grosjean <s.grosjean@peak-system.com>
can: peak_usb: always ask for BERR reporting for PCAN-USB devices
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Handle dynamic MSR intercept toggling
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Sean Christopherson <seanjc@google.com>
KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
David Woodhouse <dwmw2@infradead.org>
KVM: x86: Fix recording of guest steal time / preempted status
Mark Rutland <mark.rutland@arm.com>
KVM: arm64: Extract ESR_ELx.EC only
Yang Yingliang <yangyingliang@huawei.com>
iio: core: check return value when calling dev_set_name()
Yang Yingliang <yangyingliang@huawei.com>
iio: core: fix double free in iio_device_unregister_sysfs()
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Eugene Syromiatnikov <esyr@redhat.com>
mctp: handle the struct sockaddr_mctp padding fields
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: use the combined functions to protect critical zone
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
David Virag <virag.david003@gmail.com>
soc: samsung: exynos-pmu: Fix compilation when nothing selects CONFIG_MFD_CORE
Eric W. Biederman <ebiederm@xmission.com>
signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Wolfram Sang <wsa+renesas@sang-engineering.com>
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Dmitry Osipenko <digetx@gmail.com>
ASoC: tegra: Restore AC97 support
Dmitry Osipenko <digetx@gmail.com>
ASoC: tegra: Set default card name for Trimslice
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix invalid unit check
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Christian König <christian.koenig@amd.com>
dma-buf: fix and rework dma_buf_poll v7
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Try waking the firmware until we get an interrupt
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix (QoS) null data frame bitrate/modulation
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix tx_status mechanism
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Maximilian Luz <luzmaximilian@gmail.com>
HID: surface-hid: Allow driver matching for target ID 1 devices
Maximilian Luz <luzmaximilian@gmail.com>
HID: surface-hid: Use correct event registry for managing HID events
Felix Fietkau <nbd@nbd.name>
mt76: mt7615: fix skb use-after-free on mac reset
Maximilian Luz <luzmaximilian@gmail.com>
platform/surface: aggregator_registry: Add support for Surface Laptop Studio
Lukas Wunner <lukas@wunner.de>
ifb: Depend on netfilter alternatively to tc
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Guoqing Jiang <guoqing.jiang@linux.dev>
md/raid1: only allocate write behind bio for WriteMostly device
Corey Minyard <cminyard@mvista.com>
ipmi:watchdog: Set panic count to proper value on a panic
Ondrej Mosnacek <omosnace@redhat.com>
selinux: fix race condition when computing ocontext SIDs
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Laurent Vivier <lvivier@redhat.com>
KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
Sean Christopherson <seanjc@google.com>
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
Sean Christopherson <seanjc@google.com>
KVM: x86/mmu: Drop a redundant, broken remote TLB flush
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
Peter Zijlstra <peterz@infradead.org>
x86/iopl: Fake iopl(3) CLI/STI usage
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix page stealing
yangerkun <yangerkun@huawei.com>
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
yangerkun <yangerkun@huawei.com>
ext4: ensure enough credits in ext4_ext_shift_path_extents
Shaoying Xu <shaoyi@amazon.com>
ext4: fix lazy initialization next schedule time computation in more granular unit
Eric Whitney <enwlinux@gmail.com>
Revert "ext4: enforce buffer head state assertion in ext4_da_map_blocks"
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Takashi Iwai <tiwai@suse.de>
ALSA: PCM: Fix NULL dereference at mmap checks
Takashi Iwai <tiwai@suse.de>
ALSA: pci: rme: Fix unaligned buffer addresses
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Free card instance properly at probe errors
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Jason Ormes <skryking@gmail.com>
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Kai-Heng Feng <kai.heng.feng@canonical.com>
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add quirk for ASUS UX550VE
Jaroslav Kysela <perex@perex.cz>
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jeremy Soller <jeremy@system76.com>
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
Johnathon Clark <john.clark@cantab.net>
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: Fix check_ext_ctrls
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Support dynamic resolution changes
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Do not override sizeimage for output format
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Helge Deller <deller@gmx.de>
parisc: Fix set_fixmap() on PA1.x CPUs
Pavel Begunkov <asml.silence@gmail.com>
io-wq: remove worker to owner tw dependency
Sungjong Seo <sj1557.seo@samsung.com>
exfat: fix incorrect loading of i_blocks for large files
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Derong Liu <derong.liu@mediatek.com>
mmc: mtk-sd: Add wait dma stop done flow
Ziyang Xuan <william.xuanziyang@huawei.com>
char: xillybus: fix msg_ep UAF in xillyusb_probe()
Ben Skeggs <bskeggs@redhat.com>
ce/gf100: fix incorrect CE0 address calculation on some GPUs
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix use after free in eh_abort path
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix crash in NVMe abort path
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
Ewan D. Milne <emilne@redhat.com>
scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: scsi_ioctl: Validate command size
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Johan Hovold <johan@kernel.org>
Input: iforce - fix control-message timeout
Nehal Bakulchandra Shah <Nehal-Bakulchandra.shah@amd.com>
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 +
.../devicetree/bindings/iio/dac/adi,ad5766.yaml | 2 +-
.../bindings/regulator/samsung,s5m8767.txt | 23 +-
Documentation/filesystems/fscrypt.rst | 10 +-
Makefile | 4 +-
arch/Kconfig | 3 +
arch/arm/Makefile | 22 +-
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/bcm4708-netgear-r6250.dts | 2 +-
arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts | 2 +-
arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts | 2 +-
arch/arm/boot/dts/bcm4709-linksys-ea9200.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r7000.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r8000.dts | 2 +-
arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts | 2 +-
arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts | 2 +-
arch/arm/boot/dts/bcm53016-meraki-mr32.dts | 2 +-
arch/arm/boot/dts/bcm94708.dts | 2 +-
arch/arm/boot/dts/bcm94709.dts | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/qcom-msm8974.dtsi | 4 +-
arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 8 +-
arch/arm/boot/dts/stm32mp151.dtsi | 16 +-
arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi | 2 +-
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 2 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mach-s3c/irq-s3c24xx.c | 22 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/kasan_init.c | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2 +-
.../boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi | 4 +-
.../boot/dts/amlogic/meson-g12b-odroid-n2.dtsi | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi | 4 +-
.../boot/dts/amlogic/meson-sm1-bananapi-m5.dts | 2 +-
.../boot/dts/amlogic/meson-sm1-khadas-vim3l.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-sm1-odroid.dtsi | 6 +-
arch/arm64/boot/dts/amlogic/meson-sm1-sei610.dts | 2 +-
arch/arm64/boot/dts/broadcom/bcm4908/bcm4908.dtsi | 2 +-
arch/arm64/boot/dts/qcom/msm8916.dtsi | 8 +-
arch/arm64/boot/dts/qcom/pm8916.dtsi | 1 -
arch/arm64/boot/dts/qcom/pmi8994.dtsi | 2 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-coachz.dtsi | 2 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-pompom.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sc7180.dtsi | 52 ++---
arch/arm64/boot/dts/qcom/sc7280.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sdm845.dtsi | 6 +-
.../arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 1 +
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
arch/arm64/boot/dts/ti/k3-j7200-main.dtsi | 6 +-
arch/arm64/boot/dts/ti/k3-j721e-main.dtsi | 16 +-
arch/arm64/include/asm/esr.h | 1 +
arch/arm64/include/asm/pgtable.h | 12 +-
arch/arm64/kernel/cpufeature.c | 10 +-
arch/arm64/kernel/vdso32/Makefile | 3 +-
arch/arm64/kvm/arm.c | 30 ++-
arch/arm64/kvm/hyp/hyp-entry.S | 2 +-
arch/arm64/kvm/hyp/nvhe/host.S | 2 +-
arch/arm64/mm/mmu.c | 5 +
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/kernel/kprobes.c | 9 +-
arch/m68k/Kconfig.machine | 1 +
arch/mips/Kbuild.platforms | 2 +-
arch/mips/Kconfig | 1 +
arch/mips/Makefile | 2 +
arch/mips/include/asm/cmpxchg.h | 5 +-
arch/mips/include/asm/mips-cm.h | 12 +-
arch/mips/kernel/mips-cm.c | 21 +-
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 -
arch/mips/lantiq/xway/dma.c | 23 +-
arch/openrisc/kernel/dma.c | 4 +-
arch/openrisc/kernel/smp.c | 6 +-
arch/parisc/include/asm/pgtable.h | 10 +-
arch/parisc/kernel/cache.c | 4 +-
arch/parisc/kernel/entry.S | 2 +-
arch/parisc/kernel/smp.c | 19 +-
arch/parisc/kernel/unwind.c | 21 +-
arch/parisc/kernel/vmlinux.lds.S | 3 +-
arch/parisc/mm/fixmap.c | 5 +-
arch/parisc/mm/init.c | 4 +-
arch/powerpc/Kconfig | 6 +-
arch/powerpc/include/asm/nohash/32/pgtable.h | 19 +-
arch/powerpc/include/asm/nohash/32/pte-8xx.h | 22 ++
arch/powerpc/include/asm/nohash/64/pgtable.h | 5 -
arch/powerpc/include/asm/nohash/pte-book3e.h | 18 +-
arch/powerpc/include/asm/paravirt.h | 18 +-
arch/powerpc/kernel/firmware.c | 7 +-
arch/powerpc/kernel/head_booke.h | 15 +-
arch/powerpc/kernel/interrupt.c | 2 +-
arch/powerpc/kvm/book3s_hv.c | 30 ++-
arch/powerpc/kvm/booke.c | 16 +-
arch/powerpc/lib/feature-fixups.c | 11 +
arch/powerpc/mm/mem.c | 2 +-
arch/powerpc/mm/nohash/tlb_low_64e.S | 8 +-
arch/powerpc/mm/pgtable_32.c | 2 +-
arch/powerpc/net/bpf_jit_comp.c | 2 +-
arch/powerpc/perf/power10-events-list.h | 8 +-
arch/powerpc/perf/power10-pmu.c | 44 ++--
arch/powerpc/platforms/44x/fsp2.c | 2 +
arch/powerpc/platforms/85xx/Makefile | 4 +-
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 7 +-
arch/powerpc/platforms/85xx/smp.c | 12 +-
arch/powerpc/platforms/book3s/vas-api.c | 4 +-
arch/powerpc/platforms/powernv/opal-prd.c | 12 +-
arch/powerpc/platforms/pseries/mobility.c | 34 +++
arch/powerpc/xmon/xmon.c | 3 +-
arch/s390/kernel/perf_cpum_cf.c | 4 +-
arch/s390/kernel/uv.c | 2 +-
arch/s390/kvm/priv.c | 2 +
arch/s390/kvm/pv.c | 21 +-
arch/s390/mm/gmap.c | 11 +-
arch/s390/mm/pgtable.c | 70 ++++--
arch/sh/kernel/cpu/fpu.c | 10 +-
arch/sparc/boot/Makefile | 8 +-
arch/x86/Kconfig | 1 +
arch/x86/crypto/aesni-intel_glue.c | 2 +-
arch/x86/events/intel/core.c | 5 +-
arch/x86/events/intel/ds.c | 5 +-
arch/x86/events/intel/uncore_discovery.h | 2 +-
arch/x86/events/intel/uncore_snbep.c | 16 +-
arch/x86/hyperv/hv_init.c | 5 +-
arch/x86/include/asm/cpu_entry_area.h | 8 +-
arch/x86/include/asm/insn-eval.h | 1 +
arch/x86/include/asm/irq_stack.h | 37 ++-
arch/x86/include/asm/kvm_host.h | 2 +-
arch/x86/include/asm/mem_encrypt.h | 1 +
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/include/asm/processor.h | 1 +
arch/x86/include/asm/stacktrace.h | 10 +
arch/x86/include/asm/traps.h | 6 +-
arch/x86/kernel/Makefile | 6 +
arch/x86/kernel/cc_platform.c | 69 ++++++
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 +++-
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/cpu/hygon.c | 2 +
arch/x86/kernel/cpu/mce/intel.c | 5 +-
arch/x86/kernel/dumpstack_64.c | 6 +
arch/x86/kernel/irq.c | 4 +-
arch/x86/kernel/process.c | 1 +
arch/x86/kernel/sev.c | 32 ---
arch/x86/kernel/traps.c | 60 +++--
arch/x86/kvm/cpuid.c | 47 ++--
arch/x86/kvm/mmu/mmu.c | 6 +-
arch/x86/kvm/vmx/nested.c | 103 ++++----
arch/x86/kvm/vmx/vmx.c | 68 +-----
arch/x86/kvm/vmx/vmx.h | 63 +++++
arch/x86/kvm/x86.c | 108 ++++++---
arch/x86/lib/insn-eval.c | 2 +-
arch/x86/lib/insn.c | 5 +-
arch/x86/mm/cpu_entry_area.c | 7 +
arch/x86/mm/fault.c | 20 +-
arch/x86/mm/mem_encrypt.c | 1 +
arch/x86/mm/mem_encrypt_identity.c | 9 +
block/blk-cgroup.c | 10 +
block/blk-mq.c | 5 +-
block/blk-wbt.c | 3 +
block/blk-zoned.c | 15 +-
block/blk.h | 6 +
block/genhd.c | 8 +-
block/ioctl.c | 24 +-
crypto/Kconfig | 2 +-
crypto/pcrypt.c | 12 +-
crypto/tcrypt.c | 5 +-
drivers/acpi/ac.c | 19 ++
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +-
drivers/acpi/acpica/hwxfsleep.c | 7 +
drivers/acpi/battery.c | 2 +-
drivers/acpi/glue.c | 25 ++
drivers/acpi/internal.h | 1 +
drivers/acpi/pmic/intel_pmic.c | 51 ++--
drivers/acpi/power.c | 86 +++----
drivers/acpi/resource.c | 56 ++++-
drivers/acpi/scan.c | 6 +
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 +
drivers/auxdisplay/ht16k33.c | 66 +++---
drivers/auxdisplay/img-ascii-lcd.c | 10 +
drivers/base/component.c | 5 +-
drivers/base/core.c | 4 +-
drivers/base/power/main.c | 93 +++++---
drivers/block/ataflop.c | 141 ++++++-----
drivers/block/floppy.c | 9 +-
drivers/block/nbd.c | 24 +-
drivers/block/zram/zram_drv.c | 2 +-
drivers/bluetooth/btmtkuart.c | 13 +-
drivers/bluetooth/hci_h5.c | 28 ++-
drivers/bus/ti-sysc.c | 65 +++++-
drivers/char/hw_random/mtk-rng.c | 9 +-
drivers/char/ipmi/ipmi_msghandler.c | 10 +-
drivers/char/ipmi/ipmi_watchdog.c | 25 +-
drivers/char/ipmi/kcs_bmc_serio.c | 4 +-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/char/tpm/tpm_tis_core.c | 26 ++-
drivers/char/tpm/tpm_tis_core.h | 4 +
drivers/char/tpm/tpm_tis_spi_main.c | 1 +
drivers/char/xillybus/xillyusb.c | 1 +
drivers/clk/at91/clk-master.c | 6 +-
drivers/clk/at91/clk-sam9x60-pll.c | 4 +-
drivers/clk/at91/pmc.c | 5 +
drivers/clk/mvebu/ap-cpu-clk.c | 14 +-
drivers/clocksource/Kconfig | 1 +
drivers/cpufreq/cpufreq.c | 7 +
drivers/cpufreq/intel_pstate.c | 35 ++-
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/caam/caampkc.c | 19 +-
drivers/crypto/caam/regs.h | 3 +
drivers/crypto/ccree/cc_driver.c | 3 +-
drivers/crypto/marvell/octeontx2/otx2_cptvf_algs.c | 1 +
drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.c | 31 +++
drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.h | 10 +
drivers/crypto/qat/qat_common/adf_accel_devices.h | 1 +
drivers/crypto/qat/qat_common/adf_init.c | 5 +
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 ++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +
drivers/crypto/s5p-sss.c | 2 +
drivers/cxl/pci.c | 2 +-
drivers/dma-buf/dma-buf.c | 153 ++++++------
drivers/dma/at_xdmac.c | 53 +++--
drivers/dma/bestcomm/ata.c | 2 +-
drivers/dma/bestcomm/bestcomm.c | 22 +-
drivers/dma/bestcomm/fec.c | 4 +-
drivers/dma/bestcomm/gen_bd.c | 4 +-
drivers/dma/dmaengine.h | 2 +-
drivers/dma/idxd/device.c | 3 +-
drivers/dma/idxd/dma.c | 5 +-
drivers/dma/idxd/init.c | 14 +-
drivers/dma/stm32-dma.c | 23 +-
drivers/dma/tegra210-adma.c | 2 +-
drivers/dma/ti/k3-udma.c | 32 ++-
drivers/edac/amd64_edac.c | 22 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci/psci_checker.c | 2 +-
drivers/firmware/qcom_scm.c | 2 +-
drivers/gpio/gpio-realtek-otto.c | 2 +-
drivers/gpu/drm/Kconfig | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 15 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 2 +-
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/uvd_v3_1.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v4_2.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v5_0.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v6_0.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v7_0.c | 32 +--
drivers/gpu/drm/amd/amdgpu/vce_v2_0.c | 19 +-
drivers/gpu/drm/amd/amdgpu/vce_v3_0.c | 28 +--
drivers/gpu/drm/amd/amdgpu/vce_v4_0.c | 44 ++--
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 8 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 17 +-
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 1 +
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 7 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 +-
drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c | 2 +-
.../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 2 +-
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 18 +-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3 +-
.../display/dc/dml/dcn20/display_rq_dlg_calc_20.c | 6 +-
.../display/dc/dml/dcn20/display_rq_dlg_calc_20.h | 4 +-
.../dc/dml/dcn20/display_rq_dlg_calc_20v2.c | 6 +-
.../dc/dml/dcn20/display_rq_dlg_calc_20v2.h | 4 +-
.../display/dc/dml/dcn21/display_rq_dlg_calc_21.c | 62 ++---
.../display/dc/dml/dcn21/display_rq_dlg_calc_21.h | 4 +-
.../display/dc/dml/dcn30/display_rq_dlg_calc_30.c | 72 +++---
.../display/dc/dml/dcn30/display_rq_dlg_calc_30.h | 4 +-
.../display/dc/dml/dcn31/display_rq_dlg_calc_31.c | 68 +++---
.../display/dc/dml/dcn31/display_rq_dlg_calc_31.h | 4 +-
.../gpu/drm/amd/display/dc/dml/display_mode_lib.h | 4 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu10_hwmgr.c | 8 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 10 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu8_hwmgr.c | 2 +
.../gpu/drm/amd/pm/powerplay/hwmgr/smu_helper.h | 13 ++
.../gpu/drm/amd/pm/powerplay/hwmgr/vega10_hwmgr.c | 12 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/vega12_hwmgr.c | 4 +
.../gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c | 14 +-
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 89 +++----
drivers/gpu/drm/bridge/analogix/anx7625.c | 12 +-
drivers/gpu/drm/bridge/ite-it66121.c | 21 +-
drivers/gpu/drm/bridge/lontium-lt9611uxc.c | 9 +-
drivers/gpu/drm/bridge/nwl-dsi.c | 35 +++
drivers/gpu/drm/drm_panel_orientation_quirks.c | 35 ++-
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/i915/display/intel_fb.c | 5 +-
drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c | 2 +-
drivers/gpu/drm/imx/imx-drm-core.c | 2 -
drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 6 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4 +
drivers/gpu/drm/msm/dsi/dsi.h | 2 +
drivers/gpu/drm/msm/dsi/dsi_host.c | 72 +++---
drivers/gpu/drm/msm/dsi/dsi_manager.c | 16 ++
drivers/gpu/drm/msm/msm_gem.c | 5 +-
drivers/gpu/drm/msm/msm_gpu.c | 2 +-
drivers/gpu/drm/msm/msm_submitqueue.c | 1 +
drivers/gpu/drm/nouveau/nouveau_gem.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_svm.c | 4 +
drivers/gpu/drm/nouveau/nvkm/engine/ce/gt215.c | 2 +-
drivers/gpu/drm/nouveau/nvkm/engine/device/base.c | 3 +-
drivers/gpu/drm/radeon/radeon_gem.c | 2 +-
drivers/gpu/drm/sun4i/sun8i_csc.h | 4 +-
drivers/gpu/drm/ttm/ttm_bo_vm.c | 99 +-------
drivers/gpu/drm/v3d/v3d_gem.c | 4 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 8 +-
drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 -
drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 72 +-----
drivers/gpu/drm/vmwgfx/vmwgfx_ttm_glue.c | 3 -
drivers/hid/hid-u2fzero.c | 10 +-
drivers/hid/surface-hid/surface_hid.c | 4 +-
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +-
drivers/hwtracing/coresight/coresight-cti-core.c | 2 +-
drivers/hwtracing/coresight/coresight-trbe.c | 10 +-
drivers/i2c/busses/i2c-i801.c | 5 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/accel/st_accel_i2c.c | 4 +-
drivers/iio/accel/st_accel_spi.c | 4 +-
drivers/iio/adc/ti-tsc2046.c | 2 +-
drivers/iio/dac/ad5446.c | 9 +-
drivers/iio/dac/ad5766.c | 6 +-
drivers/iio/dac/ad5770r.c | 2 +-
drivers/iio/gyro/st_gyro_i2c.c | 4 +-
drivers/iio/gyro/st_gyro_spi.c | 4 +-
drivers/iio/imu/adis.c | 4 +-
drivers/iio/industrialio-buffer.c | 28 ++-
drivers/iio/industrialio-core.c | 9 +-
drivers/iio/magnetometer/st_magn_i2c.c | 4 +-
drivers/iio/magnetometer/st_magn_spi.c | 4 +-
drivers/iio/pressure/st_pressure_i2c.c | 4 +-
drivers/iio/pressure/st_pressure_spi.c | 8 +-
drivers/infiniband/core/uverbs_cmd.c | 3 -
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 +-
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/joystick/iforce/iforce-usb.c | 2 +-
drivers/input/misc/ariel-pwrbutton.c | 7 +
drivers/input/mouse/elantech.c | 13 ++
drivers/input/serio/i8042-x86ia64io.h | 14 ++
drivers/input/touchscreen/st1232.c | 2 +-
drivers/iommu/dma-iommu.c | 52 ++---
drivers/iommu/mtk_iommu.c | 4 +-
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-sifive-plic.c | 8 +-
drivers/mailbox/mtk-cmdq-mailbox.c | 11 +-
drivers/md/bcache/btree.c | 2 +-
drivers/md/bcache/super.c | 2 +-
drivers/md/md.c | 11 +-
drivers/md/raid1.c | 2 +-
drivers/media/common/videobuf2/videobuf2-core.c | 42 ++--
.../media/common/videobuf2/videobuf2-dma-contig.c | 39 ++--
drivers/media/common/videobuf2/videobuf2-dma-sg.c | 35 +--
drivers/media/common/videobuf2/videobuf2-vmalloc.c | 30 +--
drivers/media/dvb-frontends/mn88443x.c | 18 +-
drivers/media/i2c/Kconfig | 1 +
drivers/media/i2c/imx258.c | 12 +-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++-
drivers/media/i2c/tda1997x.c | 8 +-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/ivtv/ivtvfb.c | 4 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++-
drivers/media/platform/allegro-dvt/allegro-core.c | 9 +
drivers/media/platform/atmel/atmel-isc-base.c | 25 +-
drivers/media/platform/atmel/atmel-isc.h | 2 +
drivers/media/platform/atmel/atmel-sama5d2-isc.c | 39 ++--
drivers/media/platform/atmel/atmel-sama7g5-isc.c | 22 +-
drivers/media/platform/imx-jpeg/mxc-jpeg.c | 6 +
drivers/media/platform/meson/ge2d/ge2d.c | 6 +-
drivers/media/platform/mtk-vcodec/mtk_vcodec_enc.c | 8 +-
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/qcom/venus/pm_helpers.c | 8 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/rcar-vin/rcar-dma.c | 3 +-
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/platform/stm32/stm32-dcmi.c | 19 +-
.../media/platform/sunxi/sun6i-csi/sun6i_video.c | 6 +-
drivers/media/radio/radio-wl1273.c | 2 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ir_toy.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/spi/cxd2880-spi.c | 2 +-
drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/tm6000/tm6000-video.c | 3 +-
drivers/media/usb/ttusb-dec/ttusb_dec.c | 10 +-
drivers/media/usb/uvc/uvc_driver.c | 7 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 +
drivers/media/v4l2-core/v4l2-ioctl.c | 67 ++++--
drivers/memory/fsl_ifc.c | 13 +-
drivers/memory/renesas-rpc-if.c | 113 ++++++---
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mfd/Kconfig | 1 +
drivers/mfd/altera-sysmgr.c | 2 +-
drivers/mfd/dln2.c | 18 ++
drivers/mfd/mfd-core.c | 2 +
drivers/mfd/motorola-cpcap.c | 8 +
drivers/mfd/sprd-sc27xx-spi.c | 7 +
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/moxart-mmc.c | 29 ++-
drivers/mmc/host/mtk-sd.c | 5 +
drivers/mmc/host/mxs-mmc.c | 10 +
drivers/mmc/host/sdhci-omap.c | 18 +-
drivers/most/most_usb.c | 5 +-
drivers/mtd/mtdcore.c | 4 +-
drivers/mtd/nand/raw/ams-delta.c | 12 +-
drivers/mtd/nand/raw/arasan-nand-controller.c | 15 ++
drivers/mtd/nand/raw/au1550nd.c | 12 +-
drivers/mtd/nand/raw/fsmc_nand.c | 4 +-
drivers/mtd/nand/raw/gpio.c | 12 +-
drivers/mtd/nand/raw/intel-nand-controller.c | 5 +
drivers/mtd/nand/raw/mpc5121_nfc.c | 12 +-
drivers/mtd/nand/raw/orion_nand.c | 12 +-
drivers/mtd/nand/raw/pasemi_nand.c | 12 +-
drivers/mtd/nand/raw/plat_nand.c | 12 +-
drivers/mtd/nand/raw/socrates_nand.c | 12 +-
drivers/mtd/nand/raw/xway_nand.c | 12 +-
drivers/mtd/spi-nor/controllers/hisi-sfc.c | 1 -
drivers/net/Kconfig | 2 +-
drivers/net/bonding/bond_sysfs_slave.c | 36 +--
drivers/net/can/dev/bittiming.c | 2 +-
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 6 +-
drivers/net/can/usb/etas_es58x/es58x_core.c | 6 +-
drivers/net/can/usb/peak_usb/pcan_usb.c | 17 +-
drivers/net/dsa/mv88e6xxx/chip.c | 5 +-
drivers/net/dsa/ocelot/felix.c | 9 +-
drivers/net/dsa/rtl8366.c | 2 +-
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 +
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 5 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c | 13 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.h | 13 --
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
.../chelsio/inline_crypto/chtls/chtls_cm.c | 2 +-
.../chelsio/inline_crypto/chtls/chtls_cm.h | 2 +-
drivers/net/ethernet/dec/tulip/winbond-840.c | 2 +-
drivers/net/ethernet/fealnx.c | 2 +-
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18 +-
drivers/net/ethernet/google/gve/gve.h | 17 +-
drivers/net/ethernet/google/gve/gve_adminq.h | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 48 +++-
drivers/net/ethernet/google/gve/gve_rx.c | 7 +-
drivers/net/ethernet/google/gve/gve_tx.c | 23 +-
drivers/net/ethernet/google/gve/gve_tx_dqo.c | 84 +++----
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 20 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 10 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 6 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 77 +++---
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.h | 4 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 10 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 4 +-
drivers/net/ethernet/ibm/ibmvnic.c | 21 +-
drivers/net/ethernet/intel/ice/ice.h | 7 +-
drivers/net/ethernet/intel/ice/ice_base.c | 2 +-
drivers/net/ethernet/intel/ice/ice_devlink.c | 109 ++++++---
drivers/net/ethernet/intel/ice/ice_devlink.h | 6 +-
drivers/net/ethernet/intel/ice/ice_lib.c | 3 +-
drivers/net/ethernet/intel/ice/ice_main.c | 4 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 22 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.h | 9 +
drivers/net/ethernet/intel/igc/igc_ptp.c | 2 +-
drivers/net/ethernet/litex/litex_liteeth.c | 1 -
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 38 +--
drivers/net/ethernet/marvell/octeontx2/Kconfig | 1 +
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 78 ++++---
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 18 +-
drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +
.../ethernet/mellanox/mlx5/core/sf/dev/driver.c | 2 +
.../net/ethernet/netronome/nfp/nfp_net_common.c | 8 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 12 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 2 -
drivers/net/ethernet/ti/cpsw_ale.c | 6 +-
drivers/net/ethernet/ti/davinci_emac.c | 16 +-
drivers/net/ifb.c | 2 +
drivers/net/phy/micrel.c | 9 +-
drivers/net/phy/phy.c | 7 +-
drivers/net/phy/phylink.c | 7 +-
drivers/net/vrf.c | 28 ++-
drivers/net/wireless/ath/ath10k/core.c | 11 +-
drivers/net/wireless/ath/ath10k/coredump.c | 11 +-
drivers/net/wireless/ath/ath10k/coredump.h | 7 +
drivers/net/wireless/ath/ath10k/mac.c | 45 +++-
drivers/net/wireless/ath/ath10k/qmi.c | 3 +-
drivers/net/wireless/ath/ath10k/sdio.c | 5 +-
drivers/net/wireless/ath/ath10k/snoc.c | 77 ++++++
drivers/net/wireless/ath/ath10k/snoc.h | 5 +
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.c | 4 +
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath11k/dbring.c | 16 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 13 +-
drivers/net/wireless/ath/ath11k/mac.c | 2 +-
drivers/net/wireless/ath/ath11k/qmi.c | 4 +-
drivers/net/wireless/ath/ath11k/reg.c | 11 +-
drivers/net/wireless/ath/ath11k/reg.h | 2 +-
drivers/net/wireless/ath/ath11k/wmi.c | 40 ++--
drivers/net/wireless/ath/ath11k/wmi.h | 3 +-
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +-
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 ++--
drivers/net/wireless/ath/wcn36xx/hal.h | 32 +++
drivers/net/wireless/ath/wcn36xx/main.c | 21 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 126 +++++++++-
drivers/net/wireless/ath/wcn36xx/smd.h | 1 +
drivers/net/wireless/ath/wcn36xx/txrx.c | 64 ++---
drivers/net/wireless/ath/wcn36xx/txrx.h | 3 +-
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10 +
drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 13 +-
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 5 +-
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 6 +-
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +--
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 ++-
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
drivers/net/wireless/mediatek/mt76/debugfs.c | 10 +-
drivers/net/wireless/mediatek/mt76/mt76.h | 8 +-
.../net/wireless/mediatek/mt76/mt7615/debugfs.c | 29 ++-
drivers/net/wireless/mediatek/mt76/mt7615/init.c | 6 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 60 ++---
drivers/net/wireless/mediatek/mt76/mt7615/main.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7615/mcu.c | 18 +-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 30 ++-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 8 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13 +-
drivers/net/wireless/mediatek/mt76/mt7915/init.c | 10 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.h | 3 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 22 +-
.../net/wireless/mediatek/mt76/mt7921/debugfs.c | 36 ++-
drivers/net/wireless/mediatek/mt76/mt7921/init.c | 13 ++
drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 68 +++++-
drivers/net/wireless/mediatek/mt76/mt7921/mac.h | 8 +
drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 22 +-
drivers/net/wireless/mediatek/mt76/mt7921/mcu.h | 10 +-
drivers/net/wireless/mediatek/mt76/mt7921/regs.h | 8 +-
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +-
drivers/net/wireless/realtek/rtw88/fw.c | 7 +-
drivers/net/wireless/realtek/rtw88/reg.h | 1 +
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 ++----
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 +-
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +
drivers/net/wireless/rsi/rsi_main.h | 15 +-
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvdimm/btt.c | 1 -
drivers/nvdimm/pmem.c | 13 +-
drivers/nvme/host/multipath.c | 9 +-
drivers/nvme/host/rdma.c | 2 +
drivers/nvme/target/configfs.c | 2 +
drivers/nvme/target/rdma.c | 24 ++
drivers/nvme/target/tcp.c | 16 ++
drivers/of/unittest.c | 16 +-
drivers/opp/of.c | 2 +-
drivers/pci/controller/cadence/pci-j721e.c | 2 +-
drivers/pci/controller/cadence/pcie-cadence-plat.c | 2 +
drivers/pci/controller/dwc/pcie-uniphier.c | 26 +--
drivers/pci/controller/pci-aardvark.c | 251 +++++++++++++++++---
drivers/pci/msi.c | 36 +--
drivers/pci/pci-bridge-emul.c | 13 ++
drivers/pci/pci.c | 8 +
drivers/pci/quirks.c | 1 +
drivers/phy/microchip/sparx5_serdes.c | 4 +-
drivers/phy/qualcomm/phy-qcom-qmp.c | 2 +-
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 +-
drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c | 2 +-
drivers/phy/ti/phy-gmii-sel.c | 2 +
drivers/pinctrl/core.c | 2 +
drivers/pinctrl/pinctrl-equilibrium.c | 7 +-
drivers/pinctrl/renesas/core.c | 2 +-
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 2 +-
.../platform/surface/surface_aggregator_registry.c | 54 +++++
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 +-
drivers/power/reset/at91-reset.c | 4 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17040_battery.c | 2 +
drivers/power/supply/max17042_battery.c | 12 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 +-
drivers/remoteproc/imx_rproc.c | 41 ++--
drivers/remoteproc/remoteproc_core.c | 8 +-
drivers/remoteproc/remoteproc_coredump.c | 2 +-
drivers/remoteproc/remoteproc_elf_loader.c | 4 +-
drivers/rtc/rtc-ds1302.c | 7 +
drivers/rtc/rtc-ds1390.c | 7 +
drivers/rtc/rtc-mcp795.c | 7 +
drivers/rtc/rtc-pcf2123.c | 9 +
drivers/rtc/rtc-rv3032.c | 4 +-
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/s390/cio/device_ops.c | 12 +-
drivers/s390/crypto/ap_queue.c | 2 +
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/hosts.c | 1 +
drivers/scsi/lpfc/lpfc_els.c | 12 +-
drivers/scsi/lpfc/lpfc_hbadisc.c | 10 +-
drivers/scsi/lpfc/lpfc_nvme.c | 5 +-
drivers/scsi/lpfc/lpfc_scsi.c | 7 +
drivers/scsi/lpfc/lpfc_sli.c | 101 ++++++--
drivers/scsi/megaraid/megaraid_sas_fusion.c | 11 +-
drivers/scsi/pm8001/pm8001_hwi.c | 2 +-
drivers/scsi/pm8001/pm8001_sas.h | 3 +-
drivers/scsi/pm8001/pm80xx_hwi.c | 53 ++++-
drivers/scsi/qedf/qedf_main.c | 2 +
drivers/scsi/qla2xxx/qla_attr.c | 24 +-
drivers/scsi/qla2xxx/qla_edif.c | 259 ++++++++++++---------
drivers/scsi/qla2xxx/qla_edif.h | 3 +-
drivers/scsi/qla2xxx/qla_edif_bsg.h | 2 +-
drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
drivers/scsi/qla2xxx/qla_init.c | 77 ++++--
drivers/scsi/qla2xxx/qla_mr.c | 23 --
drivers/scsi/qla2xxx/qla_nvme.c | 14 +-
drivers/scsi/qla2xxx/qla_os.c | 37 +--
drivers/scsi/qla2xxx/qla_target.c | 1 +
drivers/scsi/scsi_error.c | 25 ++
drivers/scsi/scsi_ioctl.c | 2 +
drivers/scsi/scsi_lib.c | 3 +-
drivers/scsi/scsi_sysfs.c | 1 +
drivers/scsi/ufs/ufshcd-pltfrm.c | 4 +-
drivers/scsi/ufs/ufshcd.c | 186 +--------------
drivers/scsi/ufs/ufshcd.h | 14 --
drivers/scsi/ufs/ufshpb.c | 31 ++-
drivers/scsi/ufs/ufshpb.h | 1 -
drivers/soc/fsl/dpaa2-console.c | 1 +
drivers/soc/fsl/dpio/dpio-service.c | 2 +-
drivers/soc/fsl/dpio/qbman-portal.c | 9 +-
drivers/soc/qcom/apr.c | 2 +
drivers/soc/qcom/llcc-qcom.c | 2 +-
drivers/soc/qcom/rpmhpd.c | 20 +-
drivers/soc/qcom/socinfo.c | 4 +-
drivers/soc/samsung/Kconfig | 1 +
drivers/soc/tegra/pmc.c | 2 +-
drivers/soundwire/bus.c | 2 +-
drivers/soundwire/debugfs.c | 2 +-
drivers/spi/atmel-quadspi.c | 2 +-
drivers/spi/spi-bcm-qspi.c | 8 +-
drivers/spi/spi-mtk-nor.c | 2 +-
drivers/spi/spi-rpc-if.c | 4 +-
drivers/spi/spi-stm32-qspi.c | 2 +-
drivers/spi/spi.c | 41 ++++
drivers/staging/ks7010/Kconfig | 3 +
drivers/staging/media/atomisp/i2c/atomisp-lm3554.c | 37 +--
drivers/staging/media/imx/imx-media-dev-common.c | 2 +
drivers/staging/media/ipu3/ipu3-v4l2.c | 7 +-
drivers/staging/media/rkvdec/rkvdec-h264.c | 5 +-
drivers/staging/media/rkvdec/rkvdec.c | 40 ++--
drivers/staging/most/dim2/Makefile | 2 +-
drivers/staging/most/dim2/dim2.c | 24 +-
drivers/staging/most/dim2/sysfs.c | 49 ----
drivers/staging/most/dim2/sysfs.h | 11 -
drivers/staging/r8188eu/core/rtw_mlme.c | 2 +
drivers/target/target_core_tmr.c | 17 +-
drivers/target/target_core_transport.c | 30 ++-
.../intel/int340x_thermal/processor_thermal_mbox.c | 1 +
drivers/thermal/qcom/Kconfig | 2 +-
drivers/thermal/qcom/tsens.c | 29 ++-
drivers/thermal/thermal_core.c | 16 +-
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 21 +-
drivers/tty/serial/cpm_uart/cpm_uart_core.c | 2 +
drivers/tty/serial/imx.c | 4 +-
drivers/tty/serial/serial_core.c | 16 +-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/usb/chipidea/core.c | 23 +-
drivers/usb/dwc2/drd.c | 24 +-
drivers/usb/dwc3/core.h | 1 +
drivers/usb/dwc3/gadget.c | 8 +-
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-pci.c | 16 ++
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/Kconfig | 2 +-
drivers/usb/serial/keyspan.c | 15 +-
drivers/usb/typec/Kconfig | 4 +-
drivers/vdpa/mlx5/net/mlx5_vnet.c | 1 -
drivers/video/backlight/backlight.c | 6 -
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/video/fbdev/efifb.c | 21 +-
drivers/virtio/virtio_ring.c | 14 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/xen/balloon.c | 86 +++++--
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/reflink.c | 2 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 14 +-
fs/ceph/mdsmap.c | 4 -
fs/cifs/cifsglob.h | 3 +-
fs/cifs/connect.c | 21 +-
fs/cifs/file.c | 35 ++-
fs/cifs/fs_context.c | 10 +
fs/cifs/fs_context.h | 1 +
fs/crypto/fscrypt_private.h | 5 +-
fs/crypto/hkdf.c | 11 +-
fs/crypto/keysetup.c | 57 ++++-
fs/erofs/decompressor.c | 1 -
fs/erofs/zdata.c | 13 +-
fs/erofs/zpvec.h | 13 +-
fs/exfat/inode.c | 2 +-
fs/ext4/extents.c | 63 +++--
fs/ext4/inode.c | 15 +-
fs/ext4/super.c | 9 +-
fs/f2fs/compress.c | 1 +
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/f2fs/super.c | 2 +
fs/fuse/dev.c | 14 +-
fs/gfs2/glock.c | 24 +-
fs/io-wq.c | 88 +++++--
fs/io_uring.c | 4 +-
fs/jfs/jfs_mount.c | 51 ++--
fs/ksmbd/Kconfig | 1 +
fs/ksmbd/server.c | 1 +
fs/ksmbd/smb2misc.c | 6 +-
fs/ksmbd/smb2pdu.c | 11 +-
fs/nfs/dir.c | 9 +-
fs/nfs/direct.c | 2 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/inode.c | 13 +-
fs/nfs/nfs3xdr.c | 2 +-
fs/nfs/nfs4idmap.c | 2 +-
fs/nfs/nfs4proc.c | 15 +-
fs/nfs/pnfs.h | 2 +-
fs/nfs/pnfs_nfs.c | 6 +-
fs/nfs/proc.c | 2 +-
fs/nfs/write.c | 26 +--
fs/ocfs2/file.c | 8 +-
fs/open.c | 16 +-
fs/orangefs/dcache.c | 4 +-
fs/overlayfs/copy_up.c | 23 +-
fs/overlayfs/file.c | 16 +-
fs/overlayfs/inode.c | 5 +-
fs/proc/stat.c | 4 +-
fs/proc/uptime.c | 14 +-
fs/quota/quota_tree.c | 15 ++
fs/tracefs/inode.c | 3 +-
include/drm/ttm/ttm_bo_api.h | 3 +-
include/linux/blkdev.h | 2 -
include/linux/bpf-cgroup.h | 1 +
include/linux/cc_platform.h | 88 +++++++
include/linux/console.h | 2 +
include/linux/cpufreq.h | 2 +-
include/linux/dma-buf.h | 2 +-
include/linux/dsa/ocelot.h | 1 +
include/linux/ethtool_netlink.h | 3 +
include/linux/filter.h | 5 +-
include/linux/fortify-string.h | 5 +-
include/linux/kernel_stat.h | 1 +
include/linux/libata.h | 2 +-
include/linux/msi.h | 2 +-
include/linux/nfs_fs.h | 1 +
include/linux/posix-timers.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched/task.h | 3 +-
include/linux/sched/task_stack.h | 4 +
include/linux/seq_file.h | 2 +-
include/linux/signal_types.h | 3 +
include/linux/skmsg.h | 18 +-
include/linux/surface_aggregator/controller.h | 4 +-
include/linux/tpm.h | 1 +
include/media/videobuf2-core.h | 37 +--
include/memory/renesas-rpc-if.h | 1 +
include/net/inet_connection_sock.h | 2 +-
include/net/llc.h | 4 +-
include/net/neighbour.h | 12 +-
include/net/sch_generic.h | 4 +
include/net/sctp/sctp.h | 7 +-
include/net/sock.h | 2 +-
include/net/strparser.h | 20 +-
include/net/tcp.h | 17 +-
include/rdma/ib_verbs.h | 7 +-
include/scsi/scsi_cmnd.h | 2 +-
include/scsi/scsi_host.h | 1 +
include/sound/soc-topology.h | 3 +-
include/uapi/asm-generic/signal-defs.h | 1 +
include/uapi/linux/ethtool_netlink.h | 4 +-
include/uapi/linux/pci_regs.h | 6 +
init/main.c | 4 +-
kernel/bpf/trampoline.c | 6 +-
kernel/bpf/verifier.c | 4 +-
kernel/cgroup/cgroup.c | 31 ++-
kernel/cgroup/rstat.c | 2 -
kernel/debug/kdb/kdb_bt.c | 16 +-
kernel/debug/kdb/kdb_main.c | 37 +--
kernel/debug/kdb/kdb_private.h | 4 +-
kernel/debug/kdb/kdb_support.c | 118 ++--------
kernel/fork.c | 3 +-
kernel/irq/msi.c | 4 +-
kernel/kprobes.c | 3 +-
kernel/locking/lockdep.c | 4 +-
kernel/locking/rwsem.c | 53 +++--
kernel/power/energy_model.c | 23 +-
kernel/power/swap.c | 7 +-
kernel/rcu/rcutorture.c | 48 +++-
kernel/rcu/tasks.h | 3 +-
kernel/rcu/tree.c | 2 +-
kernel/rcu/tree_exp.h | 2 +-
kernel/rcu/tree_plugin.h | 8 +-
kernel/sched/core.c | 43 ++--
kernel/scs.c | 1 +
kernel/signal.c | 26 +--
kernel/time/posix-cpu-timers.c | 19 +-
kernel/trace/ftrace.c | 23 +-
kernel/trace/ring_buffer.c | 5 +
kernel/trace/trace.c | 73 +++---
kernel/trace/trace.h | 3 +
kernel/trace/trace_boot.c | 4 +
kernel/trace/trace_dynevent.c | 2 +-
kernel/trace/trace_event_perf.c | 6 +-
kernel/trace/trace_events.c | 42 ++--
kernel/trace/trace_events_synth.c | 4 +-
kernel/trace/trace_functions_graph.c | 2 +-
kernel/trace/trace_hwlat.c | 6 +-
kernel/trace/trace_kprobe.c | 8 +-
kernel/trace/trace_osnoise.c | 14 +-
kernel/trace/trace_printk.c | 2 +-
kernel/trace/trace_recursion_record.c | 4 +-
kernel/trace/trace_stack.c | 6 +-
kernel/trace/trace_stat.c | 6 +-
kernel/trace/trace_uprobe.c | 4 +-
kernel/trace/tracing_map.c | 40 ++--
kernel/workqueue.c | 15 +-
lib/crypto/sm4.c | 4 +-
lib/decompress_unxz.c | 2 +-
lib/dynamic_debug.c | 12 +
lib/iov_iter.c | 5 +-
lib/test_bpf.c | 37 ++-
lib/xz/xz_dec_lzma2.c | 21 +-
lib/xz/xz_dec_stream.c | 6 +-
mm/filemap.c | 1 -
mm/memcontrol.c | 27 +--
mm/oom_kill.c | 23 +-
mm/zsmalloc.c | 7 +-
net/8021q/vlan.c | 3 -
net/8021q/vlan_dev.c | 3 +
net/9p/client.c | 2 +
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/sco.c | 36 +--
net/bridge/br_private.h | 2 +
net/can/j1939/main.c | 7 +
net/can/j1939/transport.c | 11 +
net/core/dev.c | 2 +
net/core/filter.c | 58 ++++-
net/core/neighbour.c | 48 ++--
net/core/net-sysfs.c | 55 +++++
net/core/net_namespace.c | 4 +
net/core/skmsg.c | 43 +++-
net/core/stream.c | 3 -
net/dccp/dccp.h | 2 +-
net/dccp/proto.c | 14 +-
net/dsa/switch.c | 4 +-
net/dsa/tag_ocelot.c | 3 +
net/ethtool/pause.c | 3 +-
net/ipv4/af_inet.c | 16 +-
net/ipv4/inet_connection_sock.c | 4 +-
net/ipv4/inet_hashtables.c | 2 +-
net/ipv4/proc.c | 2 +-
net/ipv4/tcp.c | 40 +++-
net/ipv4/tcp_bpf.c | 48 +++-
net/ipv6/addrconf.c | 3 +
net/ipv6/af_inet6.c | 21 +-
net/ipv6/udp.c | 2 +-
net/mac80211/s1g.c | 8 +-
net/mctp/af_mctp.c | 13 ++
net/mptcp/options.c | 8 +-
net/mptcp/protocol.c | 43 +++-
net/netfilter/nf_conntrack_proto_udp.c | 7 +-
net/netfilter/nfnetlink_queue.c | 2 +-
net/netfilter/nft_dynset.c | 11 +-
net/rxrpc/rtt.c | 2 +-
net/sched/sch_generic.c | 9 +
net/sched/sch_mq.c | 24 ++
net/sched/sch_mqprio.c | 23 ++
net/sched/sch_taprio.c | 27 ++-
net/sctp/output.c | 13 +-
net/sctp/transport.c | 11 +-
net/smc/af_smc.c | 18 +-
net/strparser/strparser.c | 10 +-
net/sunrpc/addr.c | 40 ++--
net/sunrpc/xprt.c | 28 +--
net/vmw_vsock/af_vsock.c | 2 +
net/wireless/core.c | 10 +
samples/bpf/xdp_redirect_cpu_user.c | 6 +-
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/integrity/ima/ima_policy.c | 27 ++-
security/selinux/ss/services.c | 162 ++++++-------
security/smack/smackfs.c | 11 +-
sound/core/memalloc.c | 7 +-
sound/core/oss/mixer_oss.c | 44 +++-
sound/core/timer.c | 17 +-
sound/firewire/oxfw/oxfw-stream.c | 7 +-
sound/firewire/oxfw/oxfw.c | 8 +
sound/firewire/oxfw/oxfw.h | 5 +
sound/pci/hda/hda_intel.c | 52 ++---
sound/pci/hda/patch_realtek.c | 36 +++
sound/pci/rme9652/hdsp.c | 41 ++--
sound/pci/rme9652/rme9652.c | 41 ++--
sound/soc/codecs/cs42l42.c | 27 ++-
sound/soc/codecs/wcd9335.c | 2 +-
sound/soc/sh/rcar/core.c | 1 +
sound/soc/sof/topology.c | 9 +
sound/soc/tegra/tegra_asoc_machine.c | 60 ++++-
sound/soc/tegra/tegra_asoc_machine.h | 1 +
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/card.h | 1 +
sound/usb/endpoint.c | 7 +-
sound/usb/format.c | 1 +
sound/usb/line6/driver.c | 14 +-
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/arch/x86/lib/insn.c | 5 +-
tools/bpf/bpftool/prog.c | 16 +-
tools/include/asm-generic/unaligned.h | 23 ++
tools/lib/bpf/bpf.c | 4 +-
tools/lib/bpf/bpf_core_read.h | 2 +-
tools/lib/bpf/btf.c | 22 +-
tools/lib/bpf/libbpf.c | 8 +-
tools/lib/bpf/skel_internal.h | 6 +-
tools/objtool/arch/x86/decode.c | 20 ++
tools/objtool/check.c | 159 +++++++------
tools/objtool/include/objtool/arch.h | 1 +
tools/perf/util/bpf-event.c | 4 +-
tools/perf/util/intel-pt-decoder/Build | 2 +
.../testing/selftests/bpf/prog_tests/perf_buffer.c | 4 +-
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 4 +-
tools/testing/selftests/bpf/prog_tests/test_ima.c | 3 +-
tools/testing/selftests/bpf/progs/strobemeta.h | 4 +-
tools/testing/selftests/bpf/test_progs.c | 4 +-
.../selftests/bpf/test_xdp_redirect_multi.sh | 62 ++---
.../testing/selftests/bpf/verifier/array_access.c | 2 +-
tools/testing/selftests/bpf/xdp_redirect_multi.c | 4 +-
tools/testing/selftests/core/close_range_test.c | 2 +-
tools/testing/selftests/kvm/lib/x86_64/svm.c | 14 +-
.../selftests/kvm/x86_64/mmio_warning_test.c | 2 +-
tools/testing/selftests/net/Makefile | 9 +-
tools/testing/selftests/net/fib_nexthops.sh | 1 +
.../selftests/net/forwarding/bridge_igmp.sh | 12 +-
.../testing/selftests/net/forwarding/bridge_mld.sh | 12 +-
tools/testing/selftests/net/gre_gso.sh | 9 +-
tools/testing/selftests/net/mptcp/mptcp_join.sh | 2 +-
tools/testing/selftests/net/udpgso_bench_rx.c | 11 +-
tools/testing/selftests/sched/cs_prctl_test.c | 28 ++-
tools/testing/selftests/x86/iopl.c | 78 +++++--
tools/tracing/latency/latency-collector.c | 2 +-
984 files changed, 8834 insertions(+), 5051 deletions(-)
^ permalink raw reply [relevance 1%]
* [PATCH 5.10 000/569] 5.10.80-rc4 review
@ 2021-11-17 14:46 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-17 14:46 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.10.80 release.
There are 569 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Fri, 19 Nov 2021 14:44:50 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.80-rc4.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.10.80-rc4
Borislav Petkov <bp@suse.de>
x86/sev: Make the #VC exception stacks part of the default stacks storage
Tom Lendacky <thomas.lendacky@amd.com>
x86/sev: Add an x86 version of cc_platform_has()
Tom Lendacky <thomas.lendacky@amd.com>
arch/cc: Introduce a function to check for confidential computing features
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix also no-alu32 strobemeta selftest
Colin Ian King <colin.king@canonical.com>
mmc: moxart: Fix null pointer dereference on pointer host
Arnd Bergmann <arnd@arndb.de>
ath10k: fix invalid dma_addr_t token assignment
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Partial revert of commit 6f9f17287e78
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix PCIe Max Payload Size setting
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: Fix macros in sun8i_csc.h
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
Halil Pasic <pasic@linux.ibm.com>
s390/cio: make ccw_device_dma_* more robust
Harald Freudenberger <freude@linux.ibm.com>
s390/ap: Fix hanging ioctl caused by orphaned replies
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Jack Andersen <jackoalan@gmail.com>
mfd: dln2: Add cell for initializing DLN2 ADC
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/security: Add a helper to query stf_barrier type
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Validate branch ranges
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/lib: Add helper to check if offset is within conditional branch range
Vasily Averin <vvs@virtuozzo.com>
memcg: prohibit unconditional exceeding the limit of dying tasks
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Guo Ren <guoren@linux.alibaba.com>
irqchip/sifive-plic: Fixup EOI failed when masked
Michael Pratt <mpratt@google.com>
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
Dave Jones <davej@codemonkey.org.uk>
x86/mce: Add errata workaround for Skylake SKX37
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
Helge Deller <deller@gmx.de>
parisc: Fix backtrace to always include init funtion names
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Willem de Bruijn <willemb@google.com>
selftests/net: udpgso_bench_rx: fix port argument
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Dust Li <dust.li@linux.alibaba.com>
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Vladimir Oltean <vladimir.oltean@nxp.com>
net: stmmac: allow a tc-taprio base-time of zero
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: allow configure ETS bandwidth of all TCs
Yufeng Mo <moyufeng@huawei.com>
net: hns3: fix kernel crash when unload VF while it is being reset
Eric Dumazet <edumazet@google.com>
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Muchun Song <songmuchun@bytedance.com>
seq_file: fix passing wrong private data
Dan Carpenter <dan.carpenter@oracle.com>
gve: Fix off by one in gve_tx_timeout()
John Fastabend <john.fastabend@gmail.com>
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Remove unhash handler for BPF sockmap usage
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Ian Rogers <irogers@google.com>
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
mfd: core: Add missing of_node_put for loop iteration
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Heiner Kallweit <hkallweit1@gmail.com>
net: phy: fix duplex out of sync problem while changing settings
Chenyuan Mi <cymi20@fudan.edu.cn>
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Brett Creeley <brett.creeley@intel.com>
ice: Fix not stopping Tx queues for VFs
Sylwester Dziedziuch <sylwesterx.dziedziuch@intel.com>
ice: Fix replacing VF hardware MAC to existing MAC filter
Ziyang Xuan <william.xuanziyang@huawei.com>
net: vlan: fix a UAF in vlan_dev_real_dev()
Stafford Horne <shorne@gmail.com>
openrisc: fix SMP tlb flush NULL pointer dereference
Jakub Kicinski <kuba@kernel.org>
ethtool: fix ethtool msg len calculation for pause stats
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Relogin during fabric disturbance
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Changes to support FCP2 Target
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Eric W. Biederman <ebiederm@xmission.com>
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Robert-Ionut Alexa <robert-ionut.alexa@nxp.com>
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Alexey Gladkov <legion@kernel.org>
Fix user namespace leak
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix an Oops in pnfs_mark_request_commit()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix up commit deadlocks
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Dan Carpenter <dan.carpenter@oracle.com>
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
Zev Weiss <zev@bewilderbeest.net>
mtd: core: don't remove debugfs directory if device is in use
Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
YueHaibing <yuehaibing@huawei.com>
opp: Fix return in _opp_add_static_v2()
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix dentry verifier races
Kewei Xu <kewei.xu@mediatek.com>
i2c: mediatek: fixing the incorrect register offset
J. Bruce Fields <bfields@redhat.com>
nfsd: don't alloc under spinlock in rpc_parse_scope_id
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: check desc == NULL when using indirect with packed
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Use device_property API instead of of_property
Lucas Tanure <tanureal@opensource.cirrus.com>
ASoC: cs42l42: Disable regulators if probe fails
Bixuan Cui <cuibixuan@linux.alibaba.com>
powerpc/44x/fsp2: add missing of_node_put
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: clarify error check and length calculations
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Sandeep Maheswaram <quic_c_sanm@quicinc.com>
phy: qcom-snps: Correct the FSEL_MASK
Dan Carpenter <dan.carpenter@oracle.com>
phy: ti: gmii-sel: check of_get_address() for failure
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Rahul Tanwar <rtanwar@maxlinear.com>
pinctrl: equilibrium: Fix function addition in multiple groups
Wan Jiabing <wanjiabing@vivo.com>
soc: qcom: apr: Add of_node_put() before return
Guru Das Srinagesh <quic_gurus@quicinc.com>
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: reset current session before setting the new one
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
Stefan Agner <stefan@agner.ch>
serial: imx: fix detach/attach of serial console
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
Can Guo <cang@codeaurora.org>
scsi: ufs: Refactor ufshcd_setup_clocks() to remove skip_ref_clk
Nuno Sá <nuno.sa@analog.com>
iio: adis: do not disabe IRQs in 'adis_init()'
Randy Dunlap <rdunlap@infradead.org>
usb: typec: STUSB160X should select REGMAP_I2C
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Make power_on actually enable the domain
Lee Jones <lee.jones@linaro.org>
soc: qcom: rpmhpd: Provide some missing struct member descriptions
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix SAI sub nodes register range
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
Geert Uytterhoeven <geert+renesas@glider.be>
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
Vegard Nossum <vegard.nossum@oracle.com>
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Nikita Yushchenko <nikita.yoush@cogentembedded.com>
staging: most: dim2: do not double-register the same device
Randy Dunlap <rdunlap@infradead.org>
usb: musb: select GENERIC_PHY instead of depending on it
Leon Romanovsky <leon@kernel.org>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Yang Yingliang <yangyingliang@huawei.com>
power: supply: max17040: fix null-ptr-deref in max17040_probe()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc: fix unbalanced node refcount in check_kvm_guest()
Michael Ellerman <mpe@ellerman.id.au>
powerpc: Fix is_kvm_guest() / kvm_para_available()
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc: Reintroduce is_kvm_guest() as a fast-path check
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc: Rename is_kvm_guest() to check_kvm_guest()
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc: Refactor is_kvm_guest() declaration to new header
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Clément Léger <clement.leger@bootlin.com>
clk: at91: check pmc node status before registering syscore ops
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Ranjani Sridharan <ranjani.sridharan@linux.intel.com>
ASoC: SOF: topology: do not power down primary core during topology removal
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Yang Yingliang <yangyingliang@huawei.com>
driver core: Fix possible memory leak in device_link_add()
Igor Pylypiv <ipylypiv@google.com>
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: debugfs: use controller id and link_id for debugfs
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Use position buffer for SKL+ again
Imre Deak <imre.deak@intel.com>
ALSA: hda: Fix hang during shutdown due to link reset
Imre Deak <imre.deak@intel.com>
ALSA: hda: Release controller display power during shutdown/reboot
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
Geert Uytterhoeven <geert+renesas@glider.be>
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Tony Lindgren <tony@atomide.com>
bus: ti-sysc: Fix timekeeping_suspended warning on resume
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Marijn Suijten <marijn.suijten@somainline.org>
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
Rafał Miłecki <rafal@milecki.pl>
ARM: dts: BCM5301X: Fix memory nodes names
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Alexandru Ardelean <aardelean@deviqon.com>
iio: st_sensors: disable regulators after device unregistration
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
iio: st_sensors: Call st_sensors_power_enable() from bus drivers
Frank Rowand <frank.rowand@sony.com>
of: unittest: fix EXPECT text for gpio hog errors
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
Dan Schatzberg <schatzberg.dan@gmail.com>
cgroup: Fix rootcg cpu.stat guest double counting
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: don't stop queue in xmit
Jakub Kicinski <kuba@kernel.org>
udp6: allow SO_MARK ctrl msg to affect routing
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix fd cleanup in sk_lookup test
Lorenz Bauer <lmb@cloudflare.com>
selftests: bpf: Convert sk_lookup ctx access tests to PROG_TEST_RUN
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix discarded frames due to wrong sequence number
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
spi: spi-rpc-if: Check return value of rpcif_sw_init()
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Ilya Leoshkevich <iii@linux.ibm.com>
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
Mark Brown <broonie@kernel.org>
tpm_tis_spi: Add missing SPI ID
Hao Wu <hao.wu@rubrik.com>
tpm: fix Atmel TPM crash caused by too frequent queries
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid double free of sida page
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF header parsing checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix overflow in BTF sanity checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Allow loading empty BTFs
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF data layout checks and allow empty BTF
Quentin Monnet <quentin@isovalent.com>
bpftool: Avoid leaking the JSON writer prepared for program metadata
Jim Mattson <jmattson@google.com>
KVM: selftests: Fix nested SVM tests when built with clang
Ricardo Koller <ricarkol@google.com>
KVM: selftests: Add operand to vmsave/vmload/vmrun in svm.c
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Joerg Roedel <jroedel@suse.de>
x86/sev: Fix stack type check in vc_switch_off_ist()
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Tim Gardner <tim.gardner@canonical.com>
net: enetc: unmap DMA in enetc_send_cmd()
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix sta_rec_wtbl tag len
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix possible infinite loop release semaphore
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Sean Young <sean@mess.org>
media: ir_toy: assignment to be16 should be of correct type
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: potential error pointer dereference in init()
Eric Dumazet <edumazet@google.com>
tcp: switch orphan_count to bare per-cpu counters
Zhang Qiao <zhangqiao22@huawei.com>
kernel/sched: Fix sched_fork() access an invalid sched_task_group
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix context restore
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
John Fraker <jfraker@google.com>
gve: Recover from queue stall due to missed IRQ
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_dynset: relax superfluous check on set updates
Peter Zijlstra <peterz@infradead.org>
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
Yazen Ghannam <yazen.ghannam@amd.com>
EDAC/amd64: Handle three rank interleaving mode
Vincent Donnefort <vincent.donnefort@arm.com>
PM: EM: Fix inefficient states detection
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Arnd Bergmann <arnd@arndb.de>
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
Punit Agrawal <punitagrawal@gmail.com>
kprobes: Do not use local variable when creating debugfs file
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: tm6000: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: radio-wl1273: Avoid card name truncation
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Tom Rix <trix@redhat.com>
media: TDA1997x: handle short reads of hdmi info frame.
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: S_CTRL output the right value
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Colin Ian King <colin.king@canonical.com>
media: cxd2880-spi: Fix a null pointer dereference on error handling path
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Sudarshan Rajagopalan <quic_sudaraja@quicinc.com>
arm64: mm: update max_pfn after memory hotplug
Matthew Auld <matthew.auld@intel.com>
drm/ttm: stop calling tt_swapin in vm_access
Fabio Estevam <festevam@denx.de>
ath10k: sdio: Add missing BH locking around napi_schdule()
Loic Poulain <loic.poulain@linaro.org>
ath10k: Fix missing frame timestamp for beacon/probe-resp
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
Pradeep Kumar Chitrapu <pradeepc@codeaurora.org>
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid race during regd updates
Dan Carpenter <dan.carpenter@oracle.com>
ath11k: fix some sleeping in atomic bugs
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Jiasheng Jiang <jiasheng@iscas.ac.cn>
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Michael Walle <michael@walle.cc>
crypto: caam - disable pkc for non-E SoCs
Dinghao Liu <dinghao.liu@zju.edu.cn>
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Ajay Singh <ajay.kathat@microchip.com>
wilc1000: fix possible memory leak in cfg_scan_result()
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
wcn36xx: Fix Antenna Diversity Switching
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Yajun Deng <yajun.deng@linux.dev>
net: net_namespace: Fix undefined member in key_remove_domain()
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
lockdep: Let lock_is_held_type() detect recursive read as read
liuyuntao <liuyuntao10@huawei.com>
virtio-gpu: fix possible memory allocation failure
Iago Toral Quiroga <itoral@igalia.com>
drm/v3d: fix wait for TMU write combiner flush
Peter Zijlstra <peterz@infradead.org>
objtool: Fix static_call list generation
Peter Zijlstra <peterz@infradead.org>
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
Josh Poimboeuf <jpoimboe@redhat.com>
objtool: Add xen_start_kernel() to noreturn list
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: fix burst length for DEU
Neeraj Upadhyay <neeraju@codeaurora.org>
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix strobemeta selftest regression
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: don't trigger WARN() when decompression fails
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Shuah Khan <skhan@linuxfoundation.org>
selftests/core: fix conflicting types compile error for close_range()
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Correct band/freq reporting on RX
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Josef Bacik <josef@toxicpanda.com>
btrfs: do not take the uuid_mutex in btrfs_rm_device
Sidong Yang <realwakka@gmail.com>
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
Stefan Schaeckeler <schaecsn@gmx.net>
ACPI: AC: Quirk GK45 to skip reading _PSR
Eric Dumazet <edumazet@google.com>
net: annotate data-race in neigh_output()
Florian Westphal <fw@strlen.de>
vrf: run conntrack only in context of lower/physdev for locally generated packets
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Fix glock_hash_walk bugs
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Cancel remote delete work asynchronously
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Jiri Olsa <jolsa@redhat.com>
selftests/bpf: Fix perf_buffer test on system with offline cpus
Shuah Khan <skhan@linuxfoundation.org>
selftests: kvm: fix mismatched fclose() after popen()
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Hannes Reinecke <hare@suse.de>
nvme: drop scan_lock and always kick requeue list when removing namespaces
Israel Rukshin <israelr@nvidia.com>
nvmet-tcp: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet-rdma: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet: fix use-after-free when a port is removed
Michael Tretter <m.tretter@pengutronix.de>
media: allegro: ignore interrupt if mailbox is not initialized
Jens Axboe <axboe@kernel.dk>
block: remove inaccurate requeue check
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7915: fix an off-by-one bound check
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Xiao Ni <xni@redhat.com>
md: update superblock after changing rdev flags in state_store
Jens Axboe <axboe@kernel.dk>
block: bump max plugged deferred size from 16 to 32
Tim Gardner <tim.gardner@canonical.com>
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
net: phy: micrel: make *-skew-ps check more lenient
Yifan Zhang <yifan1.zhang@amd.com>
drm/amdkfd: fix resume error when iommu disabled in Picasso
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Andreas Gruenbacher <agruenba@redhat.com>
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
Xin Xiong <xiongx18@fudan.edu.cn>
mmc: moxart: Fix reference count leaks in moxart_probe
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Antoine Tenart <atenart@kernel.org>
net-sysfs: try not to restart the syscall if it will fail eventually
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: imgu_fmt: Handle properly try
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Josh Don <joshdon@google.com>
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
Corey Minyard <cminyard@mvista.com>
ipmi: Disable some operations during a panic
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Hans de Goede <hdegoede@redhat.com>
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Zong-Zhe Yang <kevin_yang@realtek.com>
rtw88: fix RX clock gate setting while fifo dump
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Martin Kepplinger <martink@posteo.de>
media: imx: set a media_device bus_info string
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set unique vdev name based in type
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Dmitriy Ulitin <ulitin@ispras.ru>
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Evgeny Novikov <novikov@ispras.ru>
media: atomisp: Fix error handling in probe
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Alagu Sankar <alagusankar@silex-india.com>
ath10k: high latency fixes for beacon buffer
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
Wen Gong <wgong@codeaurora.org>
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid reg rules update during firmware recovery
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix MMIO access page fault
Eric Biggers <ebiggers@google.com>
fscrypt: allow 256-bit master keys with AES-256-XTS
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Seevalamuthu Mariappan <seevalam@codeaurora.org>
ath11k: Align bss_chan_info structure with firmware
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Paul E. McKenney <paulmck@kernel.org>
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Scott Wood <swood@redhat.com>
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
Simon Ser <contact@emersion.fr>
drm/panel-orientation-quirks: add Valve Steam Deck
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
Charan Teja Reddy <charante@codeaurora.org>
dma-buf: WARN on dmabuf release with pending attachments
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Clear status bits in interrupt handler
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Johan Hovold <johan@kernel.org>
most: fix control-message timeouts
Johan Hovold <johan@kernel.org>
serial: 8250: fix racy uartclk update
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Nuno Sá <nuno.sa@analog.com>
iio: ad5770r: make devicetree property reading consistent
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Tao Zhang <quic_taozha@quicinc.com>
coresight: cti: Correct the parameter for pm_runtime_put
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix configuring Reference clock
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix reporting Data Link Layer Link Active
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix checking for link up via LTSSM state
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Li Chen <lchen@ambarella.com>
PCI: cadence: Add cdns_plat_pcie_probe() missing return
Marek Behún <kabel@kernel.org>
PCI: pci-bridge-emul: Fix emulation of W1C bits
yangerkun <yangerkun@huawei.com>
ovl: fix use after free in struct ovl_aio_req
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Arnd Bergmann <arnd@arndb.de>
ifb: fix building without CONFIG_NET_CLS_ACT
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Steven Rostedt (VMware) <rostedt@goodmis.org>
ring-buffer: Protect ring_buffer_reset() from reentrancy
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Mark Rutland <mark.rutland@arm.com>
KVM: arm64: Extract ESR_ELx.EC only
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: use the combined functions to protect critical zone
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Wolfram Sang <wsa+renesas@sang-engineering.com>
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Try waking the firmware until we get an interrupt
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix (QoS) null data frame bitrate/modulation
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix tx_status mechanism
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Lukas Wunner <lukas@wunner.de>
ifb: Depend on netfilter alternatively to tc
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Ondrej Mosnacek <omosnace@redhat.com>
selinux: fix race condition when computing ocontext SIDs
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Sean Christopherson <seanjc@google.com>
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
Christoph Hellwig <hch@lst.de>
rds: stop using dmapool
Wen Gu <guwen@linux.alibaba.com>
net/smc: Correct spelling mistake to TCPF_SYN_RECV
Tony Lu <tonylu@linux.alibaba.com>
net/smc: Fix smc_link->llc_testlink_time overflow
Yu Xiao <yu.xiao@corigine.com>
nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
Dongli Zhang <dongli.zhang@oracle.com>
vmxnet3: do not stop tx queues after netif_device_detach()
Janghyub Seo <jhyub06@gmail.com>
r8169: Add device 10ec:8162 to driver r8169
Amit Engel <amit.engel@dell.com>
nvmet-tcp: fix header digest verification
Naohiro Aota <naohiro.aota@wdc.com>
block: schedule queue restart after BLK_STS_ZONE_RESOURCE
Mario <awxkrnl@gmail.com>
drm: panel-orientation-quirks: Add quirk for GPD Win3
Walter Stoll <walter.stoll@duagon.com>
watchdog: Fix OMAP watchdog early handling
Cyril Strejc <cyril.strejc@skoda.cz>
net: multicast: calculate csum of looped-back and forwarded packets
Thomas Perrot <thomas.perrot@bootlin.com>
spi: spl022: fix Microwire full duplex mode
Maurizio Lombardi <mlombard@redhat.com>
nvmet-tcp: fix a memory leak when releasing a queue
Dongli Zhang <dongli.zhang@oracle.com>
xen/netfront: stop tx queues during live migration
Asmaa Mnebhi <asmaa@nvidia.com>
gpio: mlxbf2.c: Add check for bgpio_init failure
Lorenz Bauer <lmb@cloudflare.com>
bpf: Prevent increasing bpf_jit_limit above max
Lorenz Bauer <lmb@cloudflare.com>
bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
Florian Westphal <fw@strlen.de>
fcnal-test: kill hanging ping/nettest binaries on cleanup
Bryant Mairs <bryant@mai.rs>
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Randy Dunlap <rdunlap@infradead.org>
mmc: winbond: don't build on M68K
Paweł Anikiel <pan@semihalf.com>
reset: socfpga: add empty driver allowing consumers to probe
Bastien Roucariès <rouca@debian.org>
ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
Arnd Bergmann <arnd@arndb.de>
hyperv/vmbus: include linux/bitops.h
Erik Ekman <erik@kryo.se>
sfc: Don't use netif_info before net_device setup
Erik Ekman <erik@kryo.se>
sfc: Export fibre-specific supported link modes
Zheyu Ma <zheyuma97@gmail.com>
cavium: Fix return values of the probe function
Zheyu Ma <zheyuma97@gmail.com>
mISDN: Fix return values of the probe function
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: qla2xxx: Fix unmap of already freed sgl
Zheyu Ma <zheyuma97@gmail.com>
scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
Zheyu Ma <zheyuma97@gmail.com>
cavium: Return negative value when pci_alloc_irq_vectors() fails
Davide Baldo <davide@baldo.me>
ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
Yang Yingliang <yangyingliang@huawei.com>
ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix page stealing
yangerkun <yangerkun@huawei.com>
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
yangerkun <yangerkun@huawei.com>
ext4: ensure enough credits in ext4_ext_shift_path_extents
Shaoying Xu <shaoyi@amazon.com>
ext4: fix lazy initialization next schedule time computation in more granular unit
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Free card instance properly at probe errors
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Jason Ormes <skryking@gmail.com>
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Kai-Heng Feng <kai.heng.feng@canonical.com>
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add quirk for ASUS UX550VE
Jaroslav Kysela <perex@perex.cz>
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jeremy Soller <jeremy@system76.com>
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
Johnathon Clark <john.clark@cantab.net>
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: Fix check_ext_ctrls
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Support dynamic resolution changes
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Do not override sizeimage for output format
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Helge Deller <deller@gmx.de>
parisc: Fix set_fixmap() on PA1.x CPUs
Sungjong Seo <sj1557.seo@samsung.com>
exfat: fix incorrect loading of i_blocks for large files
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Derong Liu <derong.liu@mediatek.com>
mmc: mtk-sd: Add wait dma stop done flow
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix use after free in eh_abort path
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Johan Hovold <johan@kernel.org>
Input: iforce - fix control-message timeout
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for getsecid
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for selinux checks
Todd Kjos <tkjos@google.com>
binder: use euid from cred instead of using task
Nehal Bakulchandra Shah <Nehal-Bakulchandra.shah@amd.com>
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 +
.../bindings/regulator/samsung,s5m8767.txt | 23 +-
Documentation/filesystems/fscrypt.rst | 10 +-
Makefile | 4 +-
arch/Kconfig | 3 +
arch/arm/Makefile | 22 +-
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/bcm4708-netgear-r6250.dts | 2 +-
arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts | 2 +-
arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts | 2 +-
arch/arm/boot/dts/bcm4709-linksys-ea9200.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r7000.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r8000.dts | 2 +-
arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts | 2 +-
arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts | 2 +-
arch/arm/boot/dts/bcm53016-meraki-mr32.dts | 2 +-
arch/arm/boot/dts/bcm94708.dts | 2 +-
arch/arm/boot/dts/bcm94709.dts | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/qcom-msm8974.dtsi | 4 +-
arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 8 +-
arch/arm/boot/dts/stm32mp151.dtsi | 16 +-
arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi | 2 +-
arch/arm/boot/dts/sun7i-a20-olinuxino-lime2.dts | 2 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mach-s3c/irq-s3c24xx.c | 22 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2 +-
.../boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi | 4 +-
.../boot/dts/amlogic/meson-g12b-odroid-n2.dtsi | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi | 4 +-
arch/arm64/boot/dts/qcom/msm8916.dtsi | 8 +-
arch/arm64/boot/dts/qcom/pm8916.dtsi | 1 -
.../arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 1 +
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
arch/arm64/boot/dts/ti/k3-j721e-main.dtsi | 16 +-
arch/arm64/include/asm/esr.h | 1 +
arch/arm64/include/asm/pgtable.h | 12 +-
arch/arm64/kvm/hyp/hyp-entry.S | 2 +-
arch/arm64/kvm/hyp/nvhe/host.S | 2 +-
arch/arm64/mm/mmu.c | 5 +
arch/arm64/net/bpf_jit_comp.c | 5 +
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/kernel/kprobes.c | 9 +-
arch/m68k/Kconfig.machine | 1 +
arch/mips/Kconfig | 1 +
arch/mips/include/asm/cmpxchg.h | 5 +-
arch/mips/include/asm/mips-cm.h | 12 +-
arch/mips/kernel/mips-cm.c | 21 +-
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 -
arch/mips/lantiq/xway/dma.c | 23 +-
arch/openrisc/kernel/dma.c | 4 +-
arch/openrisc/kernel/smp.c | 6 +-
arch/parisc/kernel/entry.S | 2 +-
arch/parisc/kernel/smp.c | 19 +-
arch/parisc/kernel/unwind.c | 21 +-
arch/parisc/kernel/vmlinux.lds.S | 3 +-
arch/parisc/mm/fixmap.c | 5 +-
arch/parisc/mm/init.c | 4 +-
arch/powerpc/include/asm/code-patching.h | 1 +
arch/powerpc/include/asm/firmware.h | 6 -
arch/powerpc/include/asm/kvm_guest.h | 25 ++
arch/powerpc/include/asm/kvm_para.h | 2 +-
arch/powerpc/include/asm/security_features.h | 5 +
arch/powerpc/kernel/firmware.c | 12 +-
arch/powerpc/kernel/security.c | 5 +
arch/powerpc/lib/code-patching.c | 7 +-
arch/powerpc/net/bpf_jit.h | 33 ++-
arch/powerpc/net/bpf_jit64.h | 8 +-
arch/powerpc/net/bpf_jit_comp64.c | 64 +++++-
arch/powerpc/platforms/44x/fsp2.c | 2 +
arch/powerpc/platforms/85xx/Makefile | 4 +-
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 7 +-
arch/powerpc/platforms/85xx/smp.c | 12 +-
arch/powerpc/platforms/powernv/opal-prd.c | 12 +-
arch/powerpc/platforms/pseries/smp.c | 3 +
arch/s390/kvm/priv.c | 2 +
arch/s390/kvm/pv.c | 21 +-
arch/s390/mm/gmap.c | 5 +-
arch/sh/kernel/cpu/fpu.c | 10 +-
arch/x86/Kconfig | 1 +
arch/x86/events/intel/uncore_snbep.c | 6 +-
arch/x86/hyperv/hv_init.c | 5 +-
arch/x86/include/asm/cpu_entry_area.h | 8 +-
arch/x86/include/asm/mem_encrypt.h | 1 +
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/kernel/Makefile | 6 +
arch/x86/kernel/cc_platform.c | 69 ++++++
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 +++-
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/cpu/hygon.c | 2 +
arch/x86/kernel/cpu/mce/intel.c | 5 +-
arch/x86/kernel/irq.c | 4 +-
arch/x86/kernel/sev-es.c | 32 ---
arch/x86/kernel/traps.c | 2 +-
arch/x86/kvm/vmx/vmx.c | 15 +-
arch/x86/mm/cpu_entry_area.c | 7 +
arch/x86/mm/mem_encrypt.c | 1 +
arch/x86/mm/mem_encrypt_identity.c | 9 +
block/blk-mq.c | 18 +-
block/blk.h | 6 +
crypto/Kconfig | 2 +-
crypto/pcrypt.c | 12 +-
drivers/acpi/ac.c | 19 ++
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +-
drivers/acpi/acpica/hwxfsleep.c | 7 +
drivers/acpi/battery.c | 2 +-
drivers/acpi/pmic/intel_pmic.c | 51 +++--
drivers/android/binder.c | 22 +-
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 +
drivers/auxdisplay/ht16k33.c | 66 +++---
drivers/auxdisplay/img-ascii-lcd.c | 10 +
drivers/base/core.c | 4 +-
drivers/base/power/main.c | 9 +-
drivers/block/zram/zram_drv.c | 2 +-
drivers/bluetooth/btmtkuart.c | 13 +-
drivers/bus/ti-sysc.c | 65 +++++-
drivers/char/hw_random/mtk-rng.c | 9 +-
drivers/char/ipmi/ipmi_msghandler.c | 10 +-
drivers/char/ipmi/ipmi_watchdog.c | 17 +-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/char/tpm/tpm_tis_core.c | 26 ++-
drivers/char/tpm/tpm_tis_core.h | 4 +
drivers/char/tpm/tpm_tis_spi_main.c | 1 +
drivers/clk/at91/clk-sam9x60-pll.c | 4 +-
drivers/clk/at91/pmc.c | 5 +
drivers/clk/mvebu/ap-cpu-clk.c | 14 +-
drivers/clocksource/Kconfig | 1 +
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/caam/caampkc.c | 19 +-
drivers/crypto/caam/regs.h | 3 +
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 ++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +
drivers/crypto/s5p-sss.c | 2 +
drivers/dma-buf/dma-buf.c | 1 +
drivers/dma/at_xdmac.c | 2 +-
drivers/dma/dmaengine.h | 2 +-
drivers/edac/amd64_edac.c | 22 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci/psci_checker.c | 2 +-
drivers/firmware/qcom_scm.c | 2 +-
drivers/gpio/gpio-mlxbf2.c | 5 +
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 8 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 17 +-
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 1 +
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 16 +-
drivers/gpu/drm/drm_panel_orientation_quirks.c | 47 +++-
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4 +
drivers/gpu/drm/msm/msm_gem.c | 4 +-
drivers/gpu/drm/msm/msm_gpu.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_svm.c | 4 +
drivers/gpu/drm/sun4i/sun8i_csc.h | 4 +-
drivers/gpu/drm/ttm/ttm_bo_vm.c | 5 -
drivers/gpu/drm/v3d/v3d_gem.c | 4 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 8 +-
drivers/hid/hid-u2fzero.c | 10 +-
drivers/hv/hyperv_vmbus.h | 1 +
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +-
drivers/hwtracing/coresight/coresight-cti-core.c | 2 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/accel/st_accel_core.c | 21 +-
drivers/iio/accel/st_accel_i2c.c | 17 +-
drivers/iio/accel/st_accel_spi.c | 17 +-
drivers/iio/dac/ad5446.c | 9 +-
drivers/iio/dac/ad5770r.c | 2 +-
drivers/iio/gyro/st_gyro_core.c | 15 +-
drivers/iio/gyro/st_gyro_i2c.c | 17 +-
drivers/iio/gyro/st_gyro_spi.c | 17 +-
drivers/iio/imu/adis.c | 4 +-
drivers/iio/magnetometer/st_magn_core.c | 15 +-
drivers/iio/magnetometer/st_magn_i2c.c | 14 +-
drivers/iio/magnetometer/st_magn_spi.c | 14 +-
drivers/iio/pressure/st_pressure_core.c | 15 +-
drivers/iio/pressure/st_pressure_i2c.c | 17 +-
drivers/iio/pressure/st_pressure_spi.c | 17 +-
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 +-
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/joystick/iforce/iforce-usb.c | 2 +-
drivers/input/mouse/elantech.c | 13 ++
drivers/input/serio/i8042-x86ia64io.h | 14 ++
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-sifive-plic.c | 8 +-
drivers/isdn/hardware/mISDN/hfcpci.c | 8 +-
drivers/md/md.c | 11 +-
drivers/media/dvb-frontends/mn88443x.c | 18 +-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++-
drivers/media/i2c/tda1997x.c | 8 +-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++-
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/platform/stm32/stm32-dcmi.c | 19 +-
drivers/media/radio/radio-wl1273.c | 2 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ir_toy.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/spi/cxd2880-spi.c | 2 +-
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/tm6000/tm6000-video.c | 3 +-
drivers/media/usb/uvc/uvc_driver.c | 7 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 +
drivers/media/v4l2-core/v4l2-ioctl.c | 67 ++++--
drivers/memory/fsl_ifc.c | 13 +-
drivers/memory/renesas-rpc-if.c | 113 +++++++---
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mfd/dln2.c | 18 ++
drivers/mfd/mfd-core.c | 2 +
drivers/mmc/host/Kconfig | 2 +-
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/moxart-mmc.c | 29 ++-
drivers/mmc/host/mtk-sd.c | 5 +
drivers/mmc/host/mxs-mmc.c | 10 +
drivers/mmc/host/sdhci-omap.c | 18 +-
drivers/most/most_usb.c | 5 +-
drivers/mtd/mtdcore.c | 4 +-
drivers/mtd/nand/raw/ams-delta.c | 12 +-
drivers/mtd/nand/raw/au1550nd.c | 12 +-
drivers/mtd/nand/raw/gpio.c | 12 +-
drivers/mtd/nand/raw/mpc5121_nfc.c | 12 +-
drivers/mtd/nand/raw/orion_nand.c | 12 +-
drivers/mtd/nand/raw/pasemi_nand.c | 12 +-
drivers/mtd/nand/raw/plat_nand.c | 12 +-
drivers/mtd/nand/raw/socrates_nand.c | 12 +-
drivers/mtd/nand/raw/xway_nand.c | 12 +-
drivers/mtd/spi-nor/controllers/hisi-sfc.c | 1 -
drivers/net/Kconfig | 2 +-
drivers/net/bonding/bond_sysfs_slave.c | 36 +--
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 2 +-
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 +
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +-
drivers/net/ethernet/cavium/thunder/nic_main.c | 2 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
.../chelsio/inline_crypto/chtls/chtls_cm.c | 2 +-
.../chelsio/inline_crypto/chtls/chtls_cm.h | 2 +-
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18 +-
drivers/net/ethernet/google/gve/gve.h | 4 +-
drivers/net/ethernet/google/gve/gve_adminq.h | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 48 +++-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 2 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 9 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 5 +
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 2 +
drivers/net/ethernet/ibm/ibmvnic.c | 5 +-
drivers/net/ethernet/intel/ice/ice_base.c | 2 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 20 +-
drivers/net/ethernet/netronome/nfp/bpf/main.c | 16 +-
drivers/net/ethernet/netronome/nfp/bpf/main.h | 2 +
drivers/net/ethernet/netronome/nfp/bpf/offload.c | 17 +-
drivers/net/ethernet/realtek/r8169_main.c | 1 +
drivers/net/ethernet/sfc/mcdi_port_common.c | 37 ++-
drivers/net/ethernet/sfc/ptp.c | 4 +-
drivers/net/ethernet/sfc/siena_sriov.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 2 -
drivers/net/ethernet/ti/davinci_emac.c | 16 +-
drivers/net/ifb.c | 2 +
drivers/net/phy/micrel.c | 9 +-
drivers/net/phy/phy.c | 7 +-
drivers/net/phy/phylink.c | 2 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 1 -
drivers/net/vrf.c | 28 ++-
drivers/net/wireless/ath/ath10k/mac.c | 45 +++-
drivers/net/wireless/ath/ath10k/sdio.c | 5 +-
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.c | 4 +
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath11k/dbring.c | 16 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 13 +-
drivers/net/wireless/ath/ath11k/mac.c | 2 +-
drivers/net/wireless/ath/ath11k/qmi.c | 4 +-
drivers/net/wireless/ath/ath11k/reg.c | 11 +-
drivers/net/wireless/ath/ath11k/reg.h | 2 +-
drivers/net/wireless/ath/ath11k/wmi.c | 40 ++--
drivers/net/wireless/ath/ath11k/wmi.h | 3 +-
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +-
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 ++--
drivers/net/wireless/ath/wcn36xx/main.c | 8 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 44 +++-
drivers/net/wireless/ath/wcn36xx/txrx.c | 64 +++---
drivers/net/wireless/ath/wcn36xx/txrx.h | 3 +-
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10 +
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +--
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 ++-
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 15 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 8 +-
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +-
drivers/net/wireless/realtek/rtw88/fw.c | 7 +-
drivers/net/wireless/realtek/rtw88/reg.h | 1 +
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 ++----
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 +-
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +
drivers/net/wireless/rsi/rsi_main.h | 15 +-
drivers/net/xen-netfront.c | 8 +
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvme/host/multipath.c | 9 +-
drivers/nvme/host/rdma.c | 2 +
drivers/nvme/target/configfs.c | 2 +
drivers/nvme/target/rdma.c | 24 ++
drivers/nvme/target/tcp.c | 21 +-
drivers/of/unittest.c | 16 +-
drivers/opp/of.c | 2 +-
drivers/pci/controller/cadence/pcie-cadence-plat.c | 2 +
drivers/pci/controller/dwc/pcie-uniphier.c | 26 +--
drivers/pci/controller/pci-aardvark.c | 251 ++++++++++++++++++---
drivers/pci/pci-bridge-emul.c | 13 ++
drivers/pci/quirks.c | 1 +
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 +-
drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c | 2 +-
drivers/phy/ti/phy-gmii-sel.c | 2 +
drivers/pinctrl/core.c | 2 +
drivers/pinctrl/pinctrl-equilibrium.c | 7 +-
drivers/pinctrl/renesas/core.c | 2 +-
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17040_battery.c | 2 +
drivers/power/supply/max17042_battery.c | 12 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 +-
drivers/remoteproc/remoteproc_core.c | 8 +-
drivers/reset/reset-socfpga.c | 26 +++
drivers/rtc/rtc-rv3032.c | 4 +-
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/s390/cio/device_ops.c | 12 +-
drivers/s390/crypto/ap_queue.c | 2 +
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/pm8001/pm8001_hwi.c | 2 +-
drivers/scsi/qla2xxx/qla_attr.c | 24 +-
drivers/scsi/qla2xxx/qla_dbg.c | 3 +-
drivers/scsi/qla2xxx/qla_gbl.h | 2 -
drivers/scsi/qla2xxx/qla_init.c | 54 ++++-
drivers/scsi/qla2xxx/qla_mr.c | 23 --
drivers/scsi/qla2xxx/qla_os.c | 47 ++--
drivers/scsi/qla2xxx/qla_target.c | 14 +-
drivers/scsi/scsi_lib.c | 2 -
drivers/scsi/ufs/ufshcd-pltfrm.c | 6 +-
drivers/scsi/ufs/ufshcd.c | 29 +--
drivers/scsi/ufs/ufshcd.h | 3 +
drivers/soc/fsl/dpaa2-console.c | 1 +
drivers/soc/fsl/dpio/dpio-service.c | 2 +-
drivers/soc/fsl/dpio/qbman-portal.c | 9 +-
drivers/soc/qcom/apr.c | 2 +
drivers/soc/qcom/rpmhpd.c | 21 +-
drivers/soc/tegra/pmc.c | 2 +-
drivers/soundwire/debugfs.c | 2 +-
drivers/spi/spi-bcm-qspi.c | 5 +-
drivers/spi/spi-pl022.c | 5 +-
drivers/spi/spi-rpc-if.c | 4 +-
drivers/staging/ks7010/Kconfig | 3 +
drivers/staging/media/allegro-dvt/allegro-core.c | 9 +
drivers/staging/media/atomisp/i2c/atomisp-lm3554.c | 37 +--
drivers/staging/media/imx/imx-media-dev-common.c | 2 +
drivers/staging/media/ipu3/ipu3-v4l2.c | 7 +-
drivers/staging/media/rkvdec/rkvdec-h264.c | 5 +-
drivers/staging/media/rkvdec/rkvdec.c | 40 ++--
drivers/staging/most/dim2/Makefile | 2 +-
drivers/staging/most/dim2/dim2.c | 24 +-
drivers/staging/most/dim2/sysfs.c | 49 ----
drivers/staging/most/dim2/sysfs.h | 11 -
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 21 +-
drivers/tty/serial/imx.c | 4 +-
drivers/tty/serial/serial_core.c | 16 +-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/usb/chipidea/core.c | 23 +-
drivers/usb/dwc2/drd.c | 24 +-
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-pci.c | 16 ++
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/Kconfig | 2 +-
drivers/usb/serial/keyspan.c | 15 +-
drivers/usb/typec/Kconfig | 4 +-
drivers/video/backlight/backlight.c | 6 -
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/virtio/virtio_ring.c | 14 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/watchdog/omap_wdt.c | 6 +-
drivers/xen/balloon.c | 86 +++++--
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/reflink.c | 2 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 14 +-
fs/crypto/fscrypt_private.h | 5 +-
fs/crypto/hkdf.c | 11 +-
fs/crypto/keysetup.c | 57 ++++-
fs/erofs/decompressor.c | 1 -
fs/exfat/inode.c | 2 +-
fs/ext4/extents.c | 63 +++---
fs/ext4/super.c | 9 +-
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/fuse/dev.c | 14 +-
fs/gfs2/glock.c | 24 +-
fs/jfs/jfs_mount.c | 51 ++---
fs/nfs/dir.c | 7 +-
fs/nfs/direct.c | 2 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/nfs4idmap.c | 2 +-
fs/nfs/nfs4proc.c | 15 +-
fs/nfs/pnfs.h | 2 +-
fs/nfs/pnfs_nfs.c | 6 +-
fs/nfs/write.c | 26 +--
fs/ocfs2/file.c | 8 +-
fs/orangefs/dcache.c | 4 +-
fs/overlayfs/file.c | 16 +-
fs/proc/stat.c | 4 +-
fs/proc/uptime.c | 14 +-
fs/quota/quota_tree.c | 15 ++
fs/tracefs/inode.c | 3 +-
include/linux/blkdev.h | 2 -
include/linux/cc_platform.h | 88 ++++++++
include/linux/console.h | 2 +
include/linux/ethtool_netlink.h | 3 +
include/linux/filter.h | 1 +
include/linux/kernel_stat.h | 1 +
include/linux/libata.h | 2 +-
include/linux/lsm_hook_defs.h | 14 +-
include/linux/lsm_hooks.h | 14 +-
include/linux/nfs_fs.h | 1 +
include/linux/posix-timers.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched/task.h | 3 +-
include/linux/sched/task_stack.h | 4 +
include/linux/security.h | 33 +--
include/linux/seq_file.h | 2 +-
include/linux/tpm.h | 1 +
include/memory/renesas-rpc-if.h | 1 +
include/net/inet_connection_sock.h | 2 +-
include/net/llc.h | 4 +-
include/net/neighbour.h | 12 +-
include/net/sch_generic.h | 4 +
include/net/sock.h | 2 +-
include/net/strparser.h | 16 +-
include/net/tcp.h | 17 +-
include/net/udp.h | 5 +-
include/uapi/linux/ethtool_netlink.h | 4 +-
include/uapi/linux/pci_regs.h | 6 +
kernel/bpf/core.c | 4 +-
kernel/bpf/verifier.c | 4 +-
kernel/cgroup/cgroup.c | 31 ++-
kernel/cgroup/rstat.c | 2 -
kernel/fork.c | 3 +-
kernel/kprobes.c | 3 +-
kernel/locking/lockdep.c | 4 +-
kernel/power/energy_model.c | 23 +-
kernel/power/swap.c | 7 +-
kernel/rcu/rcutorture.c | 48 +++-
kernel/rcu/tasks.h | 3 +-
kernel/rcu/tree_exp.h | 2 +-
kernel/rcu/tree_plugin.h | 8 +-
kernel/sched/core.c | 43 ++--
kernel/signal.c | 18 +-
kernel/time/posix-cpu-timers.c | 19 +-
kernel/trace/ring_buffer.c | 5 +
kernel/trace/tracing_map.c | 40 ++--
kernel/workqueue.c | 15 +-
lib/decompress_unxz.c | 2 +-
lib/iov_iter.c | 5 +-
lib/xz/xz_dec_lzma2.c | 21 +-
lib/xz/xz_dec_stream.c | 6 +-
mm/memcontrol.c | 27 +--
mm/oom_kill.c | 23 +-
mm/zsmalloc.c | 7 +-
net/8021q/vlan.c | 3 -
net/8021q/vlan_dev.c | 3 +
net/9p/client.c | 2 +
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/sco.c | 33 +--
net/can/j1939/main.c | 7 +
net/can/j1939/transport.c | 6 +
net/core/dev.c | 5 +-
net/core/filter.c | 21 ++
net/core/neighbour.c | 48 ++--
net/core/net-sysfs.c | 55 +++++
net/core/net_namespace.c | 4 +
net/core/stream.c | 3 -
net/core/sysctl_net_core.c | 2 +-
net/dccp/dccp.h | 2 +-
net/dccp/proto.c | 14 +-
net/ethtool/pause.c | 3 +-
net/ipv4/inet_connection_sock.c | 4 +-
net/ipv4/inet_hashtables.c | 2 +-
net/ipv4/proc.c | 2 +-
net/ipv4/tcp.c | 40 +++-
net/ipv4/tcp_bpf.c | 1 -
net/ipv6/addrconf.c | 3 +
net/ipv6/udp.c | 2 +-
net/netfilter/nf_conntrack_proto_udp.c | 7 +-
net/netfilter/nfnetlink_queue.c | 2 +-
net/netfilter/nft_dynset.c | 11 +-
net/rds/ib.c | 10 -
net/rds/ib.h | 6 -
net/rds/ib_cm.c | 128 +++++++----
net/rds/ib_recv.c | 18 +-
net/rds/ib_send.c | 8 +
net/rxrpc/rtt.c | 2 +-
net/sched/sch_generic.c | 9 +
net/sched/sch_mq.c | 24 ++
net/sched/sch_mqprio.c | 23 ++
net/sched/sch_taprio.c | 27 ++-
net/smc/af_smc.c | 20 +-
net/smc/smc_llc.c | 2 +-
net/strparser/strparser.c | 10 +-
net/sunrpc/addr.c | 40 ++--
net/sunrpc/xprt.c | 28 +--
net/vmw_vsock/af_vsock.c | 2 +
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/security.c | 14 +-
security/selinux/hooks.c | 36 ++-
security/selinux/ss/services.c | 162 +++++++------
security/smack/smackfs.c | 11 +-
sound/core/oss/mixer_oss.c | 43 +++-
sound/core/timer.c | 17 +-
sound/pci/hda/hda_intel.c | 74 +++---
sound/pci/hda/patch_realtek.c | 82 +++++++
sound/soc/codecs/cs42l42.c | 88 ++++----
sound/soc/soc-core.c | 1 +
sound/soc/sof/topology.c | 9 +
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/format.c | 1 +
sound/usb/line6/driver.c | 14 +-
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/bpf/bpftool/prog.c | 16 +-
tools/lib/bpf/bpf_core_read.h | 2 +-
tools/lib/bpf/btf.c | 25 +-
tools/objtool/check.c | 19 +-
tools/perf/util/bpf-event.c | 4 +-
.../testing/selftests/bpf/prog_tests/perf_buffer.c | 4 +-
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 85 +++++--
tools/testing/selftests/bpf/progs/strobemeta.h | 4 +-
tools/testing/selftests/bpf/progs/test_sk_lookup.c | 62 +++--
tools/testing/selftests/bpf/test_progs.c | 4 +-
.../testing/selftests/bpf/verifier/array_access.c | 2 +-
tools/testing/selftests/core/close_range_test.c | 2 +-
tools/testing/selftests/kvm/lib/x86_64/svm.c | 22 +-
.../selftests/kvm/x86_64/mmio_warning_test.c | 2 +-
tools/testing/selftests/net/fcnal-test.sh | 3 +
tools/testing/selftests/net/udpgso_bench_rx.c | 11 +-
598 files changed, 4823 insertions(+), 2403 deletions(-)
^ permalink raw reply [relevance 1%]
* Linux 5.14.19
@ 2021-11-17 10:26 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-17 10:26 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 5.14.19 kernel.
All users of the 5.14 kernel series must upgrade.
The updated 5.14.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.14.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/kernel-parameters.txt | 7
Documentation/devicetree/bindings/iio/dac/adi,ad5766.yaml | 2
Documentation/devicetree/bindings/regulator/samsung,s5m8767.txt | 23
Documentation/filesystems/fscrypt.rst | 10
Makefile | 2
arch/Kconfig | 3
arch/alpha/include/asm/processor.h | 2
arch/alpha/kernel/process.c | 5
arch/arc/include/asm/processor.h | 2
arch/arc/kernel/stacktrace.c | 4
arch/arm/Makefile | 22
arch/arm/boot/dts/at91-tse850-3.dts | 2
arch/arm/boot/dts/bcm4708-netgear-r6250.dts | 2
arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts | 2
arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts | 2
arch/arm/boot/dts/bcm4709-linksys-ea9200.dts | 2
arch/arm/boot/dts/bcm4709-netgear-r7000.dts | 2
arch/arm/boot/dts/bcm4709-netgear-r8000.dts | 2
arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts | 2
arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts | 2
arch/arm/boot/dts/bcm53016-meraki-mr32.dts | 2
arch/arm/boot/dts/bcm94708.dts | 2
arch/arm/boot/dts/bcm94709.dts | 2
arch/arm/boot/dts/omap3-gta04.dtsi | 2
arch/arm/boot/dts/qcom-msm8974.dtsi | 4
arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 8
arch/arm/boot/dts/stm32mp151.dtsi | 16
arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi | 2
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 2
arch/arm/boot/dts/sun7i-a20-olinuxino-lime2.dts | 2
arch/arm/include/asm/processor.h | 2
arch/arm/kernel/process.c | 4
arch/arm/kernel/stacktrace.c | 3
arch/arm/mach-s3c/irq-s3c24xx.c | 22
arch/arm/mm/Kconfig | 2
arch/arm/mm/kasan_init.c | 2
arch/arm/mm/mmu.c | 4
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2
arch/arm64/boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi | 4
arch/arm64/boot/dts/amlogic/meson-g12b-odroid-n2.dtsi | 4
arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi | 4
arch/arm64/boot/dts/amlogic/meson-sm1-bananapi-m5.dts | 2
arch/arm64/boot/dts/amlogic/meson-sm1-khadas-vim3l.dts | 2
arch/arm64/boot/dts/amlogic/meson-sm1-odroid.dtsi | 6
arch/arm64/boot/dts/amlogic/meson-sm1-sei610.dts | 2
arch/arm64/boot/dts/broadcom/bcm4908/bcm4908.dtsi | 2
arch/arm64/boot/dts/qcom/msm8916.dtsi | 8
arch/arm64/boot/dts/qcom/pm8916.dtsi | 1
arch/arm64/boot/dts/qcom/pmi8994.dtsi | 2
arch/arm64/boot/dts/qcom/sc7180-trogdor-coachz.dtsi | 2
arch/arm64/boot/dts/qcom/sc7180-trogdor-pompom.dtsi | 8
arch/arm64/boot/dts/qcom/sc7180.dtsi | 52 +-
arch/arm64/boot/dts/qcom/sdm845.dtsi | 6
arch/arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 1
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2
arch/arm64/boot/dts/rockchip/rk3568.dtsi | 2
arch/arm64/boot/dts/ti/k3-j7200-main.dtsi | 6
arch/arm64/boot/dts/ti/k3-j721e-main.dtsi | 16
arch/arm64/include/asm/esr.h | 1
arch/arm64/include/asm/pgtable.h | 12
arch/arm64/include/asm/processor.h | 2
arch/arm64/kernel/cpufeature.c | 10
arch/arm64/kernel/process.c | 4
arch/arm64/kernel/vdso32/Makefile | 3
arch/arm64/kvm/hyp/hyp-entry.S | 2
arch/arm64/kvm/hyp/nvhe/host.S | 2
arch/arm64/kvm/hyp/nvhe/page_alloc.c | 1
arch/arm64/mm/mmu.c | 5
arch/arm64/net/bpf_jit_comp.c | 5
arch/csky/include/asm/processor.h | 2
arch/csky/kernel/stacktrace.c | 5
arch/h8300/include/asm/processor.h | 2
arch/h8300/kernel/process.c | 5
arch/hexagon/include/asm/processor.h | 2
arch/hexagon/kernel/process.c | 4
arch/ia64/Kconfig.debug | 2
arch/ia64/include/asm/processor.h | 2
arch/ia64/kernel/kprobes.c | 9
arch/ia64/kernel/process.c | 5
arch/m68k/Kconfig.machine | 1
arch/m68k/include/asm/processor.h | 2
arch/m68k/kernel/process.c | 4
arch/microblaze/include/asm/processor.h | 2
arch/microblaze/kernel/process.c | 2
arch/mips/Kconfig | 1
arch/mips/Makefile | 2
arch/mips/include/asm/cmpxchg.h | 5
arch/mips/include/asm/mips-cm.h | 12
arch/mips/include/asm/processor.h | 2
arch/mips/kernel/mips-cm.c | 21
arch/mips/kernel/process.c | 8
arch/mips/kernel/r2300_fpu.S | 4
arch/mips/kernel/syscall.c | 9
arch/mips/lantiq/xway/dma.c | 23
arch/nds32/include/asm/processor.h | 2
arch/nds32/kernel/process.c | 7
arch/nios2/include/asm/processor.h | 2
arch/nios2/kernel/process.c | 5
arch/openrisc/include/asm/processor.h | 2
arch/openrisc/kernel/dma.c | 4
arch/openrisc/kernel/process.c | 2
arch/openrisc/kernel/smp.c | 6
arch/parisc/include/asm/pgtable.h | 10
arch/parisc/include/asm/processor.h | 2
arch/parisc/kernel/cache.c | 4
arch/parisc/kernel/entry.S | 2
arch/parisc/kernel/process.c | 5
arch/parisc/kernel/smp.c | 19
arch/parisc/kernel/unwind.c | 21
arch/parisc/kernel/vmlinux.lds.S | 3
arch/parisc/mm/fixmap.c | 5
arch/parisc/mm/init.c | 4
arch/powerpc/Kconfig | 6
arch/powerpc/include/asm/nohash/32/pgtable.h | 19
arch/powerpc/include/asm/nohash/32/pte-8xx.h | 22
arch/powerpc/include/asm/nohash/64/pgtable.h | 5
arch/powerpc/include/asm/nohash/pte-book3e.h | 18
arch/powerpc/include/asm/paravirt.h | 18
arch/powerpc/include/asm/processor.h | 2
arch/powerpc/kernel/firmware.c | 7
arch/powerpc/kernel/head_booke.h | 15
arch/powerpc/kernel/interrupt.c | 2
arch/powerpc/kernel/process.c | 9
arch/powerpc/kvm/book3s_hv.c | 30 +
arch/powerpc/kvm/booke.c | 16
arch/powerpc/lib/feature-fixups.c | 11
arch/powerpc/mm/mem.c | 2
arch/powerpc/mm/nohash/tlb_low_64e.S | 8
arch/powerpc/mm/pgtable_32.c | 2
arch/powerpc/net/bpf_jit_comp.c | 2
arch/powerpc/perf/power10-events-list.h | 8
arch/powerpc/perf/power10-pmu.c | 44 +
arch/powerpc/platforms/44x/fsp2.c | 2
arch/powerpc/platforms/85xx/Makefile | 4
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 7
arch/powerpc/platforms/85xx/smp.c | 12
arch/powerpc/platforms/book3s/vas-api.c | 4
arch/powerpc/platforms/powernv/opal-prd.c | 12
arch/powerpc/platforms/pseries/mobility.c | 34 +
arch/powerpc/xmon/xmon.c | 3
arch/riscv/include/asm/processor.h | 2
arch/riscv/kernel/stacktrace.c | 12
arch/riscv/net/bpf_jit_core.c | 5
arch/s390/include/asm/processor.h | 2
arch/s390/kernel/perf_cpum_cf.c | 4
arch/s390/kernel/process.c | 4
arch/s390/kernel/uv.c | 2
arch/s390/kvm/priv.c | 2
arch/s390/kvm/pv.c | 21
arch/s390/mm/gmap.c | 11
arch/s390/mm/pgtable.c | 70 ++
arch/sh/include/asm/processor_32.h | 2
arch/sh/kernel/cpu/fpu.c | 10
arch/sh/kernel/process_32.c | 5
arch/sparc/include/asm/processor_32.h | 2
arch/sparc/include/asm/processor_64.h | 2
arch/sparc/kernel/process_32.c | 5
arch/sparc/kernel/process_64.c | 5
arch/um/include/asm/processor-generic.h | 2
arch/um/kernel/process.c | 5
arch/x86/Kconfig | 1
arch/x86/crypto/aesni-intel_glue.c | 2
arch/x86/events/intel/core.c | 5
arch/x86/events/intel/ds.c | 5
arch/x86/events/intel/uncore_discovery.h | 2
arch/x86/events/intel/uncore_snbep.c | 6
arch/x86/hyperv/hv_init.c | 5
arch/x86/include/asm/cpu_entry_area.h | 8
arch/x86/include/asm/insn-eval.h | 1
arch/x86/include/asm/irq_stack.h | 37 -
arch/x86/include/asm/kvm_host.h | 2
arch/x86/include/asm/mem_encrypt.h | 1
arch/x86/include/asm/page_64_types.h | 2
arch/x86/include/asm/processor.h | 3
arch/x86/include/asm/stacktrace.h | 10
arch/x86/include/asm/traps.h | 6
arch/x86/kernel/Makefile | 6
arch/x86/kernel/cc_platform.c | 69 ++
arch/x86/kernel/cpu/amd.c | 2
arch/x86/kernel/cpu/common.c | 44 +
arch/x86/kernel/cpu/cpu.h | 1
arch/x86/kernel/cpu/hygon.c | 2
arch/x86/kernel/cpu/mce/intel.c | 5
arch/x86/kernel/dumpstack_64.c | 6
arch/x86/kernel/irq.c | 4
arch/x86/kernel/process.c | 66 --
arch/x86/kernel/sev.c | 32 -
arch/x86/kernel/traps.c | 60 +-
arch/x86/kvm/cpuid.c | 47 -
arch/x86/kvm/vmx/nested.c | 103 +---
arch/x86/kvm/vmx/vmx.c | 68 --
arch/x86/kvm/vmx/vmx.h | 63 ++
arch/x86/kvm/x86.c | 108 +++-
arch/x86/lib/insn-eval.c | 2
arch/x86/lib/insn.c | 5
arch/x86/mm/cpu_entry_area.c | 7
arch/x86/mm/fault.c | 20
arch/x86/mm/mem_encrypt.c | 1
arch/x86/mm/mem_encrypt_identity.c | 9
arch/xtensa/include/asm/processor.h | 2
arch/xtensa/kernel/process.c | 5
block/blk-cgroup.c | 10
block/blk-mq.c | 18
block/blk.h | 6
crypto/Kconfig | 2
crypto/pcrypt.c | 12
crypto/tcrypt.c | 5
drivers/acpi/ac.c | 19
drivers/acpi/acpica/acglobal.h | 2
drivers/acpi/acpica/hwesleep.c | 8
drivers/acpi/acpica/hwsleep.c | 11
drivers/acpi/acpica/hwxfsleep.c | 7
drivers/acpi/battery.c | 2
drivers/acpi/glue.c | 25
drivers/acpi/internal.h | 1
drivers/acpi/pmic/intel_pmic.c | 51 +-
drivers/acpi/power.c | 86 +--
drivers/acpi/resource.c | 56 ++
drivers/acpi/scan.c | 6
drivers/ata/libata-core.c | 2
drivers/ata/libata-eh.c | 8
drivers/auxdisplay/ht16k33.c | 66 +-
drivers/auxdisplay/img-ascii-lcd.c | 10
drivers/base/component.c | 5
drivers/base/core.c | 4
drivers/base/power/main.c | 93 ++-
drivers/block/ataflop.c | 141 +++--
drivers/block/floppy.c | 9
drivers/block/nbd.c | 24
drivers/block/zram/zram_drv.c | 2
drivers/bluetooth/btmtkuart.c | 13
drivers/bus/ti-sysc.c | 65 ++
drivers/char/hw_random/mtk-rng.c | 9
drivers/char/ipmi/ipmi_msghandler.c | 10
drivers/char/ipmi/ipmi_watchdog.c | 25
drivers/char/ipmi/kcs_bmc_serio.c | 4
drivers/char/tpm/tpm2-space.c | 3
drivers/char/tpm/tpm_tis_core.c | 26 -
drivers/char/tpm/tpm_tis_core.h | 4
drivers/char/tpm/tpm_tis_spi_main.c | 1
drivers/char/xillybus/xillyusb.c | 1
drivers/clk/at91/clk-master.c | 6
drivers/clk/at91/clk-sam9x60-pll.c | 4
drivers/clk/at91/pmc.c | 5
drivers/clk/mvebu/ap-cpu-clk.c | 14
drivers/clocksource/Kconfig | 1
drivers/cpufreq/cpufreq.c | 7
drivers/cpufreq/intel_pstate.c | 37 +
drivers/cpuidle/sysfs.c | 5
drivers/crypto/caam/caampkc.c | 19
drivers/crypto/caam/regs.h | 3
drivers/crypto/ccree/cc_driver.c | 3
drivers/crypto/marvell/octeontx2/otx2_cptvf_algs.c | 1
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6
drivers/crypto/s5p-sss.c | 2
drivers/cxl/pci.c | 2
drivers/dma-buf/dma-buf.c | 1
drivers/dma/at_xdmac.c | 53 +-
drivers/dma/bestcomm/ata.c | 2
drivers/dma/bestcomm/bestcomm.c | 22
drivers/dma/bestcomm/fec.c | 4
drivers/dma/bestcomm/gen_bd.c | 4
drivers/dma/dmaengine.h | 2
drivers/dma/stm32-dma.c | 23
drivers/dma/ti/k3-udma.c | 32 +
drivers/edac/amd64_edac.c | 22
drivers/edac/sb_edac.c | 2
drivers/firmware/psci/psci_checker.c | 2
drivers/firmware/qcom_scm.c | 2
drivers/gpio/gpio-mlxbf2.c | 5
drivers/gpio/gpio-realtek-otto.c | 2
drivers/gpu/drm/Kconfig | 5
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 11
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 2
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 8
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 17
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 1
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 7
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9
drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c | 2
drivers/gpu/drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 2
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 16
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 89 +--
drivers/gpu/drm/bridge/analogix/anx7625.c | 12
drivers/gpu/drm/bridge/ite-it66121.c | 21
drivers/gpu/drm/bridge/lontium-lt9611uxc.c | 9
drivers/gpu/drm/drm_panel_orientation_quirks.c | 47 +
drivers/gpu/drm/drm_plane_helper.c | 1
drivers/gpu/drm/i915/display/intel_fb.c | 5
drivers/gpu/drm/imx/imx-drm-core.c | 2
drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 6
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4
drivers/gpu/drm/msm/msm_gem.c | 5
drivers/gpu/drm/msm/msm_gpu.c | 2
drivers/gpu/drm/nouveau/nouveau_gem.c | 2
drivers/gpu/drm/nouveau/nouveau_svm.c | 4
drivers/gpu/drm/nouveau/nvkm/engine/ce/gt215.c | 2
drivers/gpu/drm/nouveau/nvkm/engine/device/base.c | 3
drivers/gpu/drm/radeon/radeon_gem.c | 2
drivers/gpu/drm/sun4i/sun8i_csc.h | 4
drivers/gpu/drm/ttm/ttm_bo_vm.c | 99 ---
drivers/gpu/drm/v3d/v3d_gem.c | 4
drivers/gpu/drm/virtio/virtgpu_vq.c | 8
drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4
drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 72 --
drivers/gpu/drm/vmwgfx/vmwgfx_ttm_glue.c | 3
drivers/hid/hid-u2fzero.c | 10
drivers/hid/surface-hid/surface_hid.c | 4
drivers/hv/hyperv_vmbus.h | 1
drivers/hwmon/hwmon.c | 6
drivers/hwmon/pmbus/lm25066.c | 25
drivers/hwtracing/coresight/coresight-cti-core.c | 2
drivers/hwtracing/coresight/coresight-trbe.c | 10
drivers/i2c/busses/i2c-mt65xx.c | 2
drivers/i2c/busses/i2c-xlr.c | 6
drivers/iio/accel/st_accel_i2c.c | 4
drivers/iio/accel/st_accel_spi.c | 4
drivers/iio/adc/ti-tsc2046.c | 2
drivers/iio/dac/ad5446.c | 9
drivers/iio/dac/ad5766.c | 6
drivers/iio/dac/ad5770r.c | 2
drivers/iio/gyro/st_gyro_i2c.c | 4
drivers/iio/gyro/st_gyro_spi.c | 4
drivers/iio/imu/adis.c | 4
drivers/iio/industrialio-buffer.c | 28 -
drivers/iio/industrialio-core.c | 9
drivers/iio/magnetometer/st_magn_i2c.c | 4
drivers/iio/magnetometer/st_magn_spi.c | 4
drivers/iio/pressure/st_pressure_i2c.c | 4
drivers/iio/pressure/st_pressure_spi.c | 8
drivers/infiniband/core/uverbs_cmd.c | 3
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6
drivers/infiniband/hw/mlx4/qp.c | 4
drivers/infiniband/hw/qedr/verbs.c | 15
drivers/infiniband/sw/rxe/rxe_param.h | 2
drivers/input/joystick/iforce/iforce-usb.c | 2
drivers/input/misc/ariel-pwrbutton.c | 7
drivers/input/mouse/elantech.c | 13
drivers/input/serio/i8042-x86ia64io.h | 14
drivers/input/touchscreen/st1232.c | 2
drivers/iommu/dma-iommu.c | 16
drivers/iommu/mtk_iommu.c | 4
drivers/irqchip/irq-bcm6345-l1.c | 2
drivers/irqchip/irq-sifive-plic.c | 8
drivers/isdn/hardware/mISDN/hfcpci.c | 8
drivers/mailbox/mtk-cmdq-mailbox.c | 1
drivers/md/md.c | 11
drivers/md/raid1.c | 2
drivers/media/common/videobuf2/videobuf2-core.c | 42 -
drivers/media/common/videobuf2/videobuf2-dma-contig.c | 39 -
drivers/media/common/videobuf2/videobuf2-dma-sg.c | 35 -
drivers/media/common/videobuf2/videobuf2-vmalloc.c | 30 -
drivers/media/dvb-frontends/mn88443x.c | 18
drivers/media/i2c/Kconfig | 1
drivers/media/i2c/imx258.c | 12
drivers/media/i2c/ir-kbd-i2c.c | 1
drivers/media/i2c/mt9p031.c | 28 +
drivers/media/i2c/tda1997x.c | 8
drivers/media/pci/cx23885/cx23885-alsa.c | 3
drivers/media/pci/ivtv/ivtvfb.c | 4
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 -
drivers/media/platform/allegro-dvt/allegro-core.c | 9
drivers/media/platform/atmel/atmel-isc-base.c | 25
drivers/media/platform/atmel/atmel-isc.h | 2
drivers/media/platform/atmel/atmel-sama5d2-isc.c | 39 -
drivers/media/platform/atmel/atmel-sama7g5-isc.c | 22
drivers/media/platform/imx-jpeg/mxc-jpeg.c | 6
drivers/media/platform/meson/ge2d/ge2d.c | 6
drivers/media/platform/mtk-vcodec/mtk_vcodec_enc.c | 8
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5
drivers/media/platform/qcom/venus/pm_helpers.c | 8
drivers/media/platform/rcar-vin/rcar-csi2.c | 2
drivers/media/platform/rcar-vin/rcar-dma.c | 3
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6
drivers/media/platform/stm32/stm32-dcmi.c | 19
drivers/media/platform/sunxi/sun6i-csi/sun6i_video.c | 6
drivers/media/radio/radio-wl1273.c | 2
drivers/media/radio/si470x/radio-si470x-i2c.c | 2
drivers/media/radio/si470x/radio-si470x-usb.c | 2
drivers/media/rc/ir_toy.c | 2
drivers/media/rc/ite-cir.c | 2
drivers/media/rc/mceusb.c | 1
drivers/media/spi/cxd2880-spi.c | 2
drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4
drivers/media/usb/dvb-usb/az6027.c | 1
drivers/media/usb/dvb-usb/dibusb-common.c | 2
drivers/media/usb/em28xx/em28xx-cards.c | 5
drivers/media/usb/em28xx/em28xx-core.c | 5
drivers/media/usb/tm6000/tm6000-video.c | 3
drivers/media/usb/ttusb-dec/ttusb_dec.c | 10
drivers/media/usb/uvc/uvc_driver.c | 7
drivers/media/usb/uvc/uvc_v4l2.c | 7
drivers/media/usb/uvc/uvc_video.c | 5
drivers/media/v4l2-core/v4l2-ioctl.c | 67 +-
drivers/memory/fsl_ifc.c | 13
drivers/memory/renesas-rpc-if.c | 113 +++-
drivers/memstick/core/ms_block.c | 2
drivers/memstick/host/jmb38x_ms.c | 2
drivers/memstick/host/r592.c | 8
drivers/mfd/altera-sysmgr.c | 2
drivers/mfd/dln2.c | 18
drivers/mfd/mfd-core.c | 2
drivers/mfd/motorola-cpcap.c | 8
drivers/mfd/sprd-sc27xx-spi.c | 7
drivers/mmc/host/Kconfig | 2
drivers/mmc/host/dw_mmc.c | 3
drivers/mmc/host/moxart-mmc.c | 29 -
drivers/mmc/host/mtk-sd.c | 5
drivers/mmc/host/mxs-mmc.c | 10
drivers/mmc/host/sdhci-omap.c | 18
drivers/most/most_usb.c | 5
drivers/mtd/mtdcore.c | 4
drivers/mtd/nand/raw/ams-delta.c | 12
drivers/mtd/nand/raw/arasan-nand-controller.c | 15
drivers/mtd/nand/raw/au1550nd.c | 12
drivers/mtd/nand/raw/fsmc_nand.c | 4
drivers/mtd/nand/raw/gpio.c | 12
drivers/mtd/nand/raw/intel-nand-controller.c | 5
drivers/mtd/nand/raw/mpc5121_nfc.c | 12
drivers/mtd/nand/raw/orion_nand.c | 12
drivers/mtd/nand/raw/pasemi_nand.c | 12
drivers/mtd/nand/raw/plat_nand.c | 12
drivers/mtd/nand/raw/socrates_nand.c | 12
drivers/mtd/nand/raw/xway_nand.c | 12
drivers/mtd/spi-nor/controllers/hisi-sfc.c | 1
drivers/net/Kconfig | 2
drivers/net/bonding/bond_sysfs_slave.c | 36 -
drivers/net/can/dev/bittiming.c | 2
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 2
drivers/net/can/usb/etas_es58x/es58x_core.c | 6
drivers/net/dsa/mv88e6xxx/chip.c | 5
drivers/net/dsa/ocelot/felix.c | 9
drivers/net/dsa/rtl8366.c | 2
drivers/net/dsa/rtl8366rb.c | 2
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 5
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c | 13
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.h | 13
drivers/net/ethernet/cavium/thunder/nic_main.c | 2
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2
drivers/net/ethernet/chelsio/inline_crypto/chtls/chtls_cm.c | 2
drivers/net/ethernet/chelsio/inline_crypto/chtls/chtls_cm.h | 2
drivers/net/ethernet/dec/tulip/winbond-840.c | 2
drivers/net/ethernet/fealnx.c | 2
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18
drivers/net/ethernet/google/gve/gve.h | 17
drivers/net/ethernet/google/gve/gve_adminq.h | 1
drivers/net/ethernet/google/gve/gve_main.c | 48 +
drivers/net/ethernet/google/gve/gve_rx.c | 7
drivers/net/ethernet/google/gve/gve_tx.c | 23
drivers/net/ethernet/google/gve/gve_tx_dqo.c | 84 +--
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 20
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 45 -
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 7
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 77 +--
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.h | 4
drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 15
drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 5
drivers/net/ethernet/ibm/ibmvnic.c | 21
drivers/net/ethernet/intel/ice/ice.h | 7
drivers/net/ethernet/intel/ice/ice_base.c | 2
drivers/net/ethernet/intel/ice/ice_devlink.c | 109 +++-
drivers/net/ethernet/intel/ice/ice_devlink.h | 6
drivers/net/ethernet/intel/ice/ice_lib.c | 3
drivers/net/ethernet/intel/ice/ice_main.c | 4
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 22
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.h | 9
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 38 -
drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 78 +--
drivers/net/ethernet/microchip/sparx5/sparx5_main.c | 1
drivers/net/ethernet/mscc/ocelot.c | 17
drivers/net/ethernet/mscc/ocelot_net.c | 1
drivers/net/ethernet/mscc/ocelot_vsc7514.c | 1
drivers/net/ethernet/netronome/nfp/bpf/main.c | 16
drivers/net/ethernet/netronome/nfp/bpf/main.h | 2
drivers/net/ethernet/netronome/nfp/bpf/offload.c | 17
drivers/net/ethernet/qlogic/qede/qede_main.c | 12
drivers/net/ethernet/realtek/r8169_main.c | 1
drivers/net/ethernet/sfc/mcdi_port_common.c | 37 +
drivers/net/ethernet/sfc/ptp.c | 4
drivers/net/ethernet/sfc/siena_sriov.c | 2
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 2
drivers/net/ethernet/ti/cpsw_ale.c | 6
drivers/net/ethernet/ti/davinci_emac.c | 16
drivers/net/ifb.c | 2
drivers/net/phy/micrel.c | 9
drivers/net/phy/phy.c | 7
drivers/net/phy/phylink.c | 7
drivers/net/vmxnet3/vmxnet3_drv.c | 1
drivers/net/vrf.c | 28 -
drivers/net/wireless/ath/ath10k/core.c | 11
drivers/net/wireless/ath/ath10k/coredump.c | 11
drivers/net/wireless/ath/ath10k/coredump.h | 7
drivers/net/wireless/ath/ath10k/mac.c | 45 +
drivers/net/wireless/ath/ath10k/qmi.c | 3
drivers/net/wireless/ath/ath10k/sdio.c | 5
drivers/net/wireless/ath/ath10k/snoc.c | 77 +++
drivers/net/wireless/ath/ath10k/snoc.h | 5
drivers/net/wireless/ath/ath10k/usb.c | 7
drivers/net/wireless/ath/ath10k/wmi.c | 4
drivers/net/wireless/ath/ath10k/wmi.h | 3
drivers/net/wireless/ath/ath11k/dbring.c | 16
drivers/net/wireless/ath/ath11k/dp_rx.c | 13
drivers/net/wireless/ath/ath11k/mac.c | 2
drivers/net/wireless/ath/ath11k/qmi.c | 4
drivers/net/wireless/ath/ath11k/reg.c | 11
drivers/net/wireless/ath/ath11k/reg.h | 2
drivers/net/wireless/ath/ath11k/wmi.c | 40 +
drivers/net/wireless/ath/ath11k/wmi.h | 3
drivers/net/wireless/ath/ath6kl/usb.c | 7
drivers/net/wireless/ath/ath9k/main.c | 4
drivers/net/wireless/ath/dfs_pattern_detector.c | 10
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 +
drivers/net/wireless/ath/wcn36xx/hal.h | 32 +
drivers/net/wireless/ath/wcn36xx/main.c | 21
drivers/net/wireless/ath/wcn36xx/smd.c | 126 ++++-
drivers/net/wireless/ath/wcn36xx/smd.h | 1
drivers/net/wireless/ath/wcn36xx/txrx.c | 64 +-
drivers/net/wireless/ath/wcn36xx/txrx.h | 3
drivers/net/wireless/broadcom/b43/phy_g.c | 2
drivers/net/wireless/broadcom/b43legacy/radio.c | 2
drivers/net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10
drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 13
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 5
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 6
drivers/net/wireless/marvell/libertas/if_usb.c | 2
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2
drivers/net/wireless/marvell/mwifiex/11n.c | 5
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 -
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 +
drivers/net/wireless/marvell/mwifiex/usb.c | 16
drivers/net/wireless/marvell/mwl8k.c | 2
drivers/net/wireless/mediatek/mt76/debugfs.c | 10
drivers/net/wireless/mediatek/mt76/mt76.h | 8
drivers/net/wireless/mediatek/mt76/mt7615/debugfs.c | 29 +
drivers/net/wireless/mediatek/mt76/mt7615/init.c | 6
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 60 +-
drivers/net/wireless/mediatek/mt76/mt7615/main.c | 4
drivers/net/wireless/mediatek/mt76/mt7615/mcu.c | 18
drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.c | 30 -
drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.h | 8
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13
drivers/net/wireless/mediatek/mt76/mt7915/init.c | 10
drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 2
drivers/net/wireless/mediatek/mt76/mt7915/mac.h | 3
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 22
drivers/net/wireless/mediatek/mt76/mt7921/debugfs.c | 36 +
drivers/net/wireless/mediatek/mt76/mt7921/init.c | 13
drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 68 ++
drivers/net/wireless/mediatek/mt76/mt7921/mac.h | 8
drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 22
drivers/net/wireless/mediatek/mt76/mt7921/mcu.h | 10
drivers/net/wireless/mediatek/mt76/mt7921/regs.h | 8
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3
drivers/net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14
drivers/net/wireless/realtek/rtw88/fw.c | 7
drivers/net/wireless/realtek/rtw88/reg.h | 1
drivers/net/wireless/rsi/rsi_91x_core.c | 2
drivers/net/wireless/rsi/rsi_91x_hal.c | 10
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 --
drivers/net/wireless/rsi/rsi_91x_main.c | 17
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5
drivers/net/wireless/rsi/rsi_91x_usb.c | 5
drivers/net/wireless/rsi/rsi_hal.h | 11
drivers/net/wireless/rsi/rsi_main.h | 15
drivers/net/xen-netfront.c | 8
drivers/nfc/pn533/pn533.c | 6
drivers/nvdimm/btt.c | 1
drivers/nvme/host/multipath.c | 9
drivers/nvme/host/rdma.c | 2
drivers/nvme/target/configfs.c | 2
drivers/nvme/target/rdma.c | 24
drivers/nvme/target/tcp.c | 21
drivers/of/unittest.c | 16
drivers/opp/of.c | 2
drivers/pci/controller/cadence/pci-j721e.c | 2
drivers/pci/controller/cadence/pcie-cadence-plat.c | 2
drivers/pci/controller/dwc/pcie-uniphier.c | 26 -
drivers/pci/controller/pci-aardvark.c | 251 ++++++++--
drivers/pci/pci-bridge-emul.c | 13
drivers/pci/pci.c | 8
drivers/pci/quirks.c | 1
drivers/phy/microchip/sparx5_serdes.c | 4
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16
drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c | 2
drivers/phy/ti/phy-gmii-sel.c | 2
drivers/pinctrl/core.c | 2
drivers/pinctrl/pinctrl-amd.c | 19
drivers/pinctrl/pinctrl-amd.h | 1
drivers/pinctrl/pinctrl-equilibrium.c | 7
drivers/pinctrl/renesas/core.c | 2
drivers/platform/surface/surface_aggregator_registry.c | 54 ++
drivers/platform/x86/thinkpad_acpi.c | 2
drivers/platform/x86/wmi.c | 9
drivers/power/reset/at91-reset.c | 4
drivers/power/supply/bq27xxx_battery_i2c.c | 3
drivers/power/supply/max17040_battery.c | 2
drivers/power/supply/max17042_battery.c | 12
drivers/power/supply/rt5033_battery.c | 2
drivers/ptp/ptp_kvm_x86.c | 4
drivers/regulator/s5m8767.c | 21
drivers/remoteproc/imx_rproc.c | 41 -
drivers/remoteproc/remoteproc_core.c | 8
drivers/remoteproc/remoteproc_coredump.c | 2
drivers/remoteproc/remoteproc_elf_loader.c | 4
drivers/reset/reset-socfpga.c | 26 +
drivers/rtc/rtc-ds1302.c | 7
drivers/rtc/rtc-ds1390.c | 7
drivers/rtc/rtc-mcp795.c | 7
drivers/rtc/rtc-pcf2123.c | 9
drivers/rtc/rtc-rv3032.c | 4
drivers/s390/char/tape_std.c | 3
drivers/s390/cio/css.c | 4
drivers/s390/cio/device_ops.c | 12
drivers/s390/crypto/ap_queue.c | 2
drivers/scsi/csiostor/csio_lnode.c | 2
drivers/scsi/dc395x.c | 1
drivers/scsi/hosts.c | 1
drivers/scsi/lpfc/lpfc_els.c | 11
drivers/scsi/lpfc/lpfc_hbadisc.c | 10
drivers/scsi/lpfc/lpfc_nvme.c | 5
drivers/scsi/lpfc/lpfc_scsi.c | 7
drivers/scsi/lpfc/lpfc_sli.c | 101 +++-
drivers/scsi/megaraid/megaraid_sas_fusion.c | 11
drivers/scsi/pm8001/pm8001_hwi.c | 2
drivers/scsi/pm8001/pm8001_sas.h | 3
drivers/scsi/pm8001/pm80xx_hwi.c | 53 +-
drivers/scsi/qedf/qedf_main.c | 2
drivers/scsi/qla2xxx/qla_attr.c | 24
drivers/scsi/qla2xxx/qla_gbl.h | 2
drivers/scsi/qla2xxx/qla_init.c | 4
drivers/scsi/qla2xxx/qla_mr.c | 23
drivers/scsi/qla2xxx/qla_os.c | 37 -
drivers/scsi/qla2xxx/qla_target.c | 14
drivers/scsi/scsi_error.c | 25
drivers/scsi/scsi_lib.c | 3
drivers/scsi/ufs/ufshcd-pltfrm.c | 4
drivers/soc/fsl/dpaa2-console.c | 1
drivers/soc/fsl/dpio/dpio-service.c | 2
drivers/soc/fsl/dpio/qbman-portal.c | 9
drivers/soc/qcom/apr.c | 2
drivers/soc/qcom/llcc-qcom.c | 2
drivers/soc/qcom/rpmhpd.c | 20
drivers/soc/qcom/socinfo.c | 4
drivers/soc/samsung/Kconfig | 1
drivers/soc/tegra/pmc.c | 2
drivers/soundwire/bus.c | 2
drivers/soundwire/debugfs.c | 2
drivers/spi/atmel-quadspi.c | 2
drivers/spi/spi-altera-dfl.c | 2
drivers/spi/spi-altera-platform.c | 2
drivers/spi/spi-bcm-qspi.c | 8
drivers/spi/spi-mtk-nor.c | 2
drivers/spi/spi-pl022.c | 5
drivers/spi/spi-rpc-if.c | 4
drivers/spi/spi-stm32-qspi.c | 2
drivers/spi/spi.c | 41 +
drivers/staging/ks7010/Kconfig | 3
drivers/staging/media/atomisp/i2c/atomisp-lm3554.c | 37 -
drivers/staging/media/imx/imx-media-dev-common.c | 2
drivers/staging/media/ipu3/ipu3-v4l2.c | 7
drivers/staging/media/rkvdec/rkvdec-h264.c | 5
drivers/staging/media/rkvdec/rkvdec.c | 40 -
drivers/staging/most/dim2/Makefile | 2
drivers/staging/most/dim2/dim2.c | 24
drivers/staging/most/dim2/sysfs.c | 49 -
drivers/staging/most/dim2/sysfs.h | 11
drivers/target/target_core_tmr.c | 17
drivers/target/target_core_transport.c | 30 -
drivers/thermal/qcom/tsens.c | 29 -
drivers/thermal/thermal_core.c | 16
drivers/tty/serial/8250/8250_dw.c | 2
drivers/tty/serial/8250/8250_port.c | 21
drivers/tty/serial/cpm_uart/cpm_uart_core.c | 2
drivers/tty/serial/imx.c | 4
drivers/tty/serial/serial_core.c | 16
drivers/tty/serial/xilinx_uartps.c | 3
drivers/usb/chipidea/core.c | 23
drivers/usb/dwc2/drd.c | 24
drivers/usb/gadget/legacy/hid.c | 4
drivers/usb/host/xhci-hub.c | 3
drivers/usb/host/xhci-pci.c | 16
drivers/usb/misc/iowarrior.c | 8
drivers/usb/musb/Kconfig | 2
drivers/usb/serial/keyspan.c | 15
drivers/usb/typec/Kconfig | 4
drivers/video/backlight/backlight.c | 6
drivers/video/fbdev/chipsfb.c | 2
drivers/video/fbdev/efifb.c | 21
drivers/virtio/virtio_ring.c | 14
drivers/watchdog/Kconfig | 2
drivers/watchdog/f71808e_wdt.c | 4
drivers/watchdog/omap_wdt.c | 6
drivers/xen/balloon.c | 86 ++-
drivers/xen/xen-pciback/conf_space_capability.c | 2
fs/btrfs/disk-io.c | 3
fs/btrfs/reflink.c | 2
fs/btrfs/tree-log.c | 4
fs/btrfs/volumes.c | 14
fs/cifs/cifsglob.h | 3
fs/cifs/connect.c | 21
fs/cifs/file.c | 35 +
fs/cifs/fs_context.c | 10
fs/cifs/fs_context.h | 1
fs/crypto/fscrypt_private.h | 5
fs/crypto/hkdf.c | 11
fs/crypto/keysetup.c | 57 +-
fs/erofs/decompressor.c | 1
fs/erofs/zdata.c | 13
fs/erofs/zpvec.h | 13
fs/exfat/inode.c | 2
fs/ext4/extents.c | 63 +-
fs/ext4/super.c | 9
fs/f2fs/compress.c | 1
fs/f2fs/inode.c | 2
fs/f2fs/namei.c | 2
fs/f2fs/super.c | 2
fs/fuse/dev.c | 14
fs/gfs2/glock.c | 24
fs/io-wq.c | 38 -
fs/jfs/jfs_mount.c | 51 --
fs/nfs/dir.c | 9
fs/nfs/direct.c | 2
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4
fs/nfs/inode.c | 13
fs/nfs/nfs3xdr.c | 2
fs/nfs/nfs4idmap.c | 2
fs/nfs/nfs4proc.c | 15
fs/nfs/pnfs.h | 2
fs/nfs/pnfs_nfs.c | 6
fs/nfs/proc.c | 2
fs/nfs/write.c | 26 -
fs/ocfs2/file.c | 8
fs/orangefs/dcache.c | 4
fs/overlayfs/file.c | 16
fs/proc/stat.c | 4
fs/proc/uptime.c | 14
fs/quota/quota_tree.c | 15
fs/tracefs/inode.c | 3
include/drm/ttm/ttm_bo_api.h | 3
include/linux/blkdev.h | 2
include/linux/cc_platform.h | 88 +++
include/linux/cgroup-defs.h | 107 +---
include/linux/cgroup.h | 22
include/linux/console.h | 2
include/linux/dsa/ocelot.h | 38 +
include/linux/ethtool_netlink.h | 3
include/linux/filter.h | 1
include/linux/fortify-string.h | 5
include/linux/kernel_stat.h | 1
include/linux/libata.h | 2
include/linux/nfs_fs.h | 1
include/linux/posix-timers.h | 2
include/linux/rpmsg.h | 2
include/linux/sched.h | 1
include/linux/sched/task.h | 3
include/linux/sched/task_stack.h | 4
include/linux/seq_file.h | 2
include/linux/skmsg.h | 18
include/linux/surface_aggregator/controller.h | 4
include/linux/tpm.h | 1
include/media/videobuf2-core.h | 37 -
include/memory/renesas-rpc-if.h | 1
include/net/inet_connection_sock.h | 2
include/net/llc.h | 4
include/net/neighbour.h | 12
include/net/sch_generic.h | 4
include/net/sctp/sctp.h | 7
include/net/sock.h | 2
include/net/strparser.h | 20
include/net/tcp.h | 17
include/net/udp.h | 5
include/scsi/scsi_cmnd.h | 2
include/scsi/scsi_host.h | 1
include/soc/mscc/ocelot.h | 24
include/sound/soc-topology.h | 3
include/uapi/linux/ethtool_netlink.h | 4
include/uapi/linux/pci_regs.h | 6
kernel/bpf/core.c | 4
kernel/bpf/trampoline.c | 6
kernel/bpf/verifier.c | 4
kernel/cgroup/cgroup.c | 94 +--
kernel/cgroup/rstat.c | 2
kernel/fork.c | 3
kernel/kprobes.c | 3
kernel/locking/lockdep.c | 4
kernel/locking/rwsem.c | 53 +-
kernel/power/energy_model.c | 23
kernel/power/swap.c | 7
kernel/rcu/rcutorture.c | 48 +
kernel/rcu/tasks.h | 3
kernel/rcu/tree_exp.h | 2
kernel/rcu/tree_plugin.h | 8
kernel/sched/core.c | 62 +-
kernel/scs.c | 1
kernel/signal.c | 18
kernel/time/posix-cpu-timers.c | 19
kernel/trace/ftrace.c | 23
kernel/trace/ring_buffer.c | 5
kernel/trace/trace.c | 73 +-
kernel/trace/trace.h | 3
kernel/trace/trace_dynevent.c | 2
kernel/trace/trace_event_perf.c | 6
kernel/trace/trace_events.c | 42 -
kernel/trace/trace_events_synth.c | 4
kernel/trace/trace_functions_graph.c | 2
kernel/trace/trace_hwlat.c | 6
kernel/trace/trace_kprobe.c | 8
kernel/trace/trace_osnoise.c | 14
kernel/trace/trace_printk.c | 2
kernel/trace/trace_recursion_record.c | 4
kernel/trace/trace_stack.c | 6
kernel/trace/trace_stat.c | 6
kernel/trace/trace_uprobe.c | 4
kernel/trace/tracing_map.c | 40 -
kernel/workqueue.c | 15
lib/decompress_unxz.c | 2
lib/dynamic_debug.c | 12
lib/iov_iter.c | 5
lib/xz/xz_dec_lzma2.c | 21
lib/xz/xz_dec_stream.c | 6
mm/filemap.c | 1
mm/memcontrol.c | 27 -
mm/oom_kill.c | 23
mm/zsmalloc.c | 7
net/8021q/vlan.c | 3
net/8021q/vlan_dev.c | 3
net/9p/client.c | 2
net/bluetooth/l2cap_sock.c | 10
net/bluetooth/sco.c | 33 -
net/bridge/br_private.h | 2
net/can/j1939/main.c | 7
net/can/j1939/transport.c | 6
net/core/dev.c | 5
net/core/filter.c | 58 ++
net/core/neighbour.c | 48 +
net/core/net-sysfs.c | 55 ++
net/core/net_namespace.c | 4
net/core/netclassid_cgroup.c | 7
net/core/netprio_cgroup.c | 10
net/core/skmsg.c | 43 +
net/core/stream.c | 3
net/core/sysctl_net_core.c | 2
net/dccp/dccp.h | 2
net/dccp/proto.c | 14
net/dsa/Kconfig | 2
net/dsa/switch.c | 4
net/dsa/tag_ocelot.c | 4
net/dsa/tag_ocelot_8021q.c | 1
net/ethtool/pause.c | 3
net/ipv4/inet_connection_sock.c | 4
net/ipv4/inet_hashtables.c | 2
net/ipv4/proc.c | 2
net/ipv4/tcp.c | 40 +
net/ipv4/tcp_bpf.c | 48 +
net/ipv6/addrconf.c | 3
net/ipv6/udp.c | 2
net/netfilter/nf_conntrack_proto_udp.c | 7
net/netfilter/nfnetlink_queue.c | 2
net/netfilter/nft_dynset.c | 11
net/rxrpc/rtt.c | 2
net/sched/sch_generic.c | 9
net/sched/sch_mq.c | 24
net/sched/sch_mqprio.c | 23
net/sched/sch_taprio.c | 27 -
net/sctp/output.c | 13
net/sctp/transport.c | 11
net/smc/af_smc.c | 20
net/smc/smc_llc.c | 2
net/strparser/strparser.c | 10
net/sunrpc/addr.c | 40 -
net/sunrpc/xprt.c | 28 -
net/vmw_vsock/af_vsock.c | 2
net/wireless/core.c | 10
samples/kprobes/kretprobe_example.c | 2
scripts/leaking_addresses.pl | 3
security/apparmor/label.c | 4
security/integrity/evm/evm_main.c | 2
security/integrity/ima/ima.h | 2
security/integrity/ima/ima_appraise.c | 52 +-
security/selinux/ss/services.c | 162 +++---
security/smack/smackfs.c | 11
sound/core/memalloc.c | 7
sound/core/oss/mixer_oss.c | 44 +
sound/core/timer.c | 17
sound/firewire/oxfw/oxfw-stream.c | 7
sound/firewire/oxfw/oxfw.c | 8
sound/firewire/oxfw/oxfw.h | 5
sound/pci/hda/hda_intel.c | 52 --
sound/pci/hda/patch_realtek.c | 82 +++
sound/soc/codecs/cs42l42.c | 43 -
sound/soc/codecs/wcd9335.c | 2
sound/soc/sh/rcar/core.c | 1
sound/soc/soc-core.c | 1
sound/soc/sof/topology.c | 9
sound/soc/tegra/tegra_asoc_machine.c | 60 +-
sound/soc/tegra/tegra_asoc_machine.h | 1
sound/synth/emux/emux.c | 2
sound/usb/6fire/comm.c | 2
sound/usb/6fire/firmware.c | 6
sound/usb/format.c | 1
sound/usb/line6/driver.c | 14
sound/usb/line6/driver.h | 2
sound/usb/line6/podhd.c | 6
sound/usb/line6/toneport.c | 2
sound/usb/misc/ua101.c | 4
sound/usb/quirks.c | 1
tools/arch/x86/lib/insn.c | 5
tools/bpf/bpftool/prog.c | 16
tools/include/asm-generic/unaligned.h | 23
tools/lib/bpf/bpf.c | 4
tools/lib/bpf/bpf_core_read.h | 2
tools/lib/bpf/btf.c | 22
tools/lib/bpf/libbpf.c | 6
tools/lib/bpf/skel_internal.h | 6
tools/objtool/arch/x86/decode.c | 20
tools/objtool/check.c | 159 +++---
tools/objtool/include/objtool/arch.h | 1
tools/perf/util/bpf-event.c | 4
tools/perf/util/intel-pt-decoder/Build | 2
tools/testing/selftests/bpf/prog_tests/perf_buffer.c | 4
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 4
tools/testing/selftests/bpf/prog_tests/test_ima.c | 3
tools/testing/selftests/bpf/progs/strobemeta.h | 4
tools/testing/selftests/bpf/test_progs.c | 4
tools/testing/selftests/bpf/test_xdp_redirect_multi.sh | 62 +-
tools/testing/selftests/bpf/verifier/array_access.c | 2
tools/testing/selftests/bpf/xdp_redirect_multi.c | 4
tools/testing/selftests/core/close_range_test.c | 2
tools/testing/selftests/kvm/lib/x86_64/svm.c | 14
tools/testing/selftests/kvm/x86_64/mmio_warning_test.c | 2
tools/testing/selftests/net/Makefile | 2
tools/testing/selftests/net/fcnal-test.sh | 3
tools/testing/selftests/net/fib_nexthops.sh | 1
tools/testing/selftests/net/forwarding/bridge_igmp.sh | 12
tools/testing/selftests/net/forwarding/bridge_mld.sh | 12
tools/testing/selftests/net/udpgso_bench_rx.c | 11
tools/testing/selftests/sched/cs_prctl_test.c | 28 -
tools/testing/selftests/vm/split_huge_page_test.c | 2
tools/testing/selftests/x86/iopl.c | 78 ++-
tools/tracing/latency/latency-collector.c | 2
956 files changed, 7996 insertions(+), 4407 deletions(-)
Abinaya Kalaiselvan (1):
ath10k: fix module load regression with iram-recovery feature
Aharon Landau (1):
RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
Ahmad Fatoum (1):
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Ajay Singh (1):
wilc1000: fix possible memory leak in cfg_scan_result()
Ajish Koshy (1):
scsi: pm80xx: Fix lockup in outbound queue management
Alagu Sankar (1):
ath10k: high latency fixes for beacon buffer
Aleksander Jan Bajkowski (3):
MIPS: lantiq: dma: add small delay after reset
MIPS: lantiq: dma: reset correct number of channel
MIPS: lantiq: dma: fix burst length for DEU
Alex Bee (2):
drm: bridge: it66121: Fix return value it66121_probe
arm64: dts: rockchip: Fix GPU register width for RK3328
Alex Deucher (2):
drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Alex Sierra (1):
drm/amdkfd: rm BO resv on validation to avoid deadlock
Alex Xu (Hello71) (1):
drm/plane-helper: fix uninitialized variable reference
Alexander Tsoy (1):
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Alexandru Ardelean (1):
iio: st_sensors: disable regulators after device unregistration
Alexei Starovoitov (2):
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
Alexey Gladkov (1):
Fix user namespace leak
Alok Prasad (1):
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Amelie Delaunay (5):
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
usb: dwc2: drd: reset current session before setting the new one
dmaengine: stm32-dma: fix stm32_dma_get_max_width
dmaengine: stm32-dma: fix burst in case of unaligned memory address
Amit Engel (1):
nvmet-tcp: fix header digest verification
Anand Jain (1):
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Anand Moon (3):
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
arm64: dts: meson-sm1: Fix the pwm regulator supply properties
Anant Thazhemadam (1):
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Anatolij Gustschin (1):
dmaengine: bestcomm: fix system boot lockups
Anders Roxell (1):
PM: hibernate: fix sparse warnings
Andrea Righi (1):
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Andreas Gruenbacher (3):
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
gfs2: Cancel remote delete work asynchronously
gfs2: Fix glock_hash_walk bugs
Andreas Kemnade (1):
arm: dts: omap3-gta04a4: accelerometer irq fix
Andrej Shadura (2):
HID: u2fzero: clarify error check and length calculations
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrew Halaney (1):
dyndbg: make dyndbg a known cli param
Andrey Grodzovsky (1):
drm/amdgpu: Fix MMIO access page fault
Andrii Nakryiko (4):
selftests/bpf: Fix strobemeta selftest regression
libbpf: Fix overflow in BTF sanity checks
libbpf: Fix BTF header parsing checks
selftests/bpf: Fix also no-alu32 strobemeta selftest
André Almeida (1):
ACPI: battery: Accept charges over the design capacity as full
Andy Shevchenko (1):
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Anel Orazgaliyeva (1):
cpuidle: Fix kobject memory leaks in error paths
Anson Jacob (1):
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
Anssi Hannula (1):
serial: xilinx_uartps: Fix race condition causing stuck TX
Ansuel Smith (1):
thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
Antoine Tenart (1):
net-sysfs: try not to restart the syscall if it will fail eventually
Arnaud Pouliquen (1):
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Arnd Bergmann (16):
hyperv/vmbus: include linux/bitops.h
ifb: fix building without CONFIG_NET_CLS_ACT
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
gve: DQO: avoid unused variable warnings
drm/amdgpu: fix warning for overflow check
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
drm: fb_helper: fix CONFIG_FB dependency
crypto: ccree - avoid out-of-range warnings from clang
memstick: avoid out-of-range warning
ARM: 9142/1: kasan: work around LPAE build warning
iommu/mediatek: Fix out-of-range warning with clang
drm: fb_helper: improve CONFIG_FB dependency
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
dmaengine: stm32-dma: avoid 64-bit division in stm32_dma_get_max_width
ARM: 9156/1: drop cc-option fallbacks for architecture selection
ath10k: fix invalid dma_addr_t token assignment
Arun Easi (1):
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Asmaa Mnebhi (1):
gpio: mlxbf2.c: Add check for bgpio_init failure
Athira Rajeev (1):
powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
Aurabindo Pillai (1):
drm/amd/display: fix null pointer deref when plugging in display
Austin Kim (2):
ALSA: synth: missing check for possible NULL after the call to kstrdup
evm: mark evm_fixmode as __ro_after_init
Baochen Qiang (2):
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
Baptiste Lepers (1):
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Barnabás Pőcze (1):
platform/x86: wmi: do not fail if disabling fails
Basavaraj Natikar (2):
pinctrl: amd: Add irq field data
pinctrl: amd: Handle wake-up interrupt
Bastien Roucariès (1):
ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
Ben Greear (1):
mt76: mt7915: fix hwmon temp sensor mem use-after-free
Ben Skeggs (1):
ce/gf100: fix incorrect CE0 address calculation on some GPUs
Benjamin Li (2):
wcn36xx: handle connection loss indication
wcn36xx: add proper DMA memory barriers in rx path
Bhupesh Sharma (1):
arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
Bixuan Cui (1):
powerpc/44x/fsp2: add missing of_node_put
Bjorn Andersson (1):
soc: qcom: rpmhpd: Make power_on actually enable the domain
Borislav Petkov (3):
x86/insn: Use get_unaligned() instead of memcpy()
selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
x86/sev: Make the #VC exception stacks part of the default stacks storage
Brett Creeley (1):
ice: Fix not stopping Tx queues for VFs
Bryan O'Donoghue (2):
Revert "wcn36xx: Enable firmware link monitoring"
wcn36xx: Fix Antenna Diversity Switching
Bryant Mairs (1):
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Catherine Sullivan (1):
gve: Track RX buffer allocation failures
Charan Teja Reddy (1):
dma-buf: WARN on dmabuf release with pending attachments
Chen-Yu Tsai (2):
media: rkvdec: Do not override sizeimage for output format
media: rkvdec: Support dynamic resolution changes
Chengfeng Ye (1):
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Chenyuan Mi (1):
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
Christian Löhle (1):
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Christophe JAILLET (12):
media: meson-ge2d: Fix rotation parameter changes detection in 'ge2d_s_ctrl()'
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
mmc: mxs-mmc: disable regulator on error and in the remove function
ipmi: kcs_bmc: Fix a memory leak in the error handling path of 'kcs_bmc_serio_add_device()'
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
ASoC: rsnd: Fix an error handling path in 'rsnd_node_count()'
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
PCI: j721e: Fix j721e_pcie_probe() error path
net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
Christophe Leroy (6):
powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype for 'create_section_mapping'
video: fbdev: chipsfb: use memset_io() instead of memset()
powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
powerpc/book3e: Fix set_memory_x() and set_memory_nx()
powerpc: Don't provide __kernel_map_pages() without ARCH_SUPPORTS_DEBUG_PAGEALLOC
Claudio Imbrenda (2):
KVM: s390: pv: avoid double free of sida page
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
Claudiu Beznea (6):
power: reset: at91-reset: check properly the return value of devm_of_iomap
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
clk: at91: clk-master: check if div or pres is zero
clk: at91: clk-master: fix prescaler logic
dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Clément Léger (1):
clk: at91: check pmc node status before registering syscore ops
Colin Ian King (4):
media: cxd2880-spi: Fix a null pointer dereference on error handling path
media: cx23885: Fix snd_card_free call on null card pointer
media: em28xx: Don't use ops->suspend if it is NULL
mmc: moxart: Fix null pointer dereference on pointer host
Corey Minyard (2):
ipmi:watchdog: Set panic count to proper value on a panic
ipmi: Disable some operations during a panic
Cyril Strejc (1):
net: multicast: calculate csum of looped-back and forwarded packets
Daeho Jeong (1):
f2fs: include non-compressed blocks in compr_written_block
Dafna Hirschfeld (1):
media: mtk-vcodec: venc: fix return value when start_streaming fails
Damien Le Moal (1):
libata: fix read log timeout value
Dan Carpenter (16):
tpm: Check for integer overflow in tpm2_map_response_body()
ath11k: fix some sleeping in atomic bugs
b43legacy: fix a lower bounds test
b43: fix a lower bounds test
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init()
drm/msm: potential error pointer dereference in init()
drm/msm: fix potential NULL dereference in cleanup
drm/msm: uninitialized variable in msm_gem_import()
mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
usb: gadget: hid: fix error code in do_config()
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
phy: ti: gmii-sel: check of_get_address() for failure
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
zram: off by one in read_block_state()
gve: Fix off by one in gve_tx_timeout()
Dan Schatzberg (1):
cgroup: Fix rootcg cpu.stat guest double counting
Dan Williams (1):
cxl/pci: Fix NULL vs ERR_PTR confusion
Daniel Borkmann (4):
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
bpf, cgroups: Fix cgroup v2 fallback on v1/v2 mixed mode
bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
Daniel Jordan (1):
crypto: pcrypt - Delay write to padata->info
Dave Jones (1):
x86/mce: Add errata workaround for Skylake SKX37
David Hildenbrand (5):
s390/gmap: validate VMA in __gmap_zap()
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
s390/mm: validate VMA in PGSTE manipulation functions
s390/mm: fix VMA and page table handling code in storage key handling functions
s390/uv: fully validate the VMA before calling follow_page()
David Stevens (1):
iommu/dma: Fix arch_sync_dma for map
David Virag (1):
soc: samsung: exynos-pmu: Fix compilation when nothing selects CONFIG_MFD_CORE
David Woodhouse (1):
KVM: x86: Fix recording of guest steal time / preempted status
David Yang (1):
tools/testing/selftests/vm/split_huge_page_test.c: fix application of sizeof to pointer
Davide Baldo (1):
ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
Denis Kirjanov (1):
powerpc/xmon: fix task state output
Deren Wu (2):
mt76: mt7921: Fix out of order process by invalid event pkt
mt76: mt7921: fix dma hang in rmmod
Derong Liu (1):
mmc: mtk-sd: Add wait dma stop done flow
Desmond Cheong Zhi Xi (1):
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Dinghao Liu (1):
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Dirk Bender (1):
media: mt9p031: Fix corrupted frame after restarting stream
Dmitriy Ulitin (1):
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Dmitry Baryshkov (3):
soc: qcom: socinfo: add two missing PMIC IDs
soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
drm/bridge/lontium-lt9611uxc: fix provided connector suport
Dmitry Bogdanov (2):
scsi: qla2xxx: Fix unmap of already freed sgl
scsi: target: core: Remove from tmr_list during LUN unlink
Dmitry Osipenko (2):
ASoC: tegra: Set default card name for Trimslice
ASoC: tegra: Restore AC97 support
Dominique Martinet (1):
9p/net: fix missing error check in p9_check_errors
Dong Aisheng (4):
remoteproc: imx_rproc: Fix TCM io memory type
remoteproc: Fix the wrong default value of is_iomem
remoteproc: imx_rproc: Fix ignoring mapping vdev regions
remoteproc: imx_rproc: Fix rsc-table name
Dongjin Kim (1):
arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
Dongli Zhang (2):
xen/netfront: stop tx queues during live migration
vmxnet3: do not stop tx queues after netif_device_detach()
Dongliang Mu (3):
JFS: fix memleak in jfs_mount
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
f2fs: fix UAF in f2fs_available_free_memory
Douglas Anderson (1):
arm64: dts: qcom: sc7180: Base dynamic CPU power coefficients in reality
Dust Li (1):
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata (1):
vsock: prevent unnecessary refcnt inc for nonblocking connect
Eric Badger (1):
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Eric Biggers (1):
fscrypt: allow 256-bit master keys with AES-256-XTS
Eric Dumazet (5):
net: annotate data-race in neigh_output()
tcp: switch orphan_count to bare per-cpu counters
bpf: Fixes possible race in update_prog_stats() for 32bit arches
llc: fix out-of-bound array index in llc_sk_dev_hash()
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Eric W. Biederman (3):
signal: Remove the bogus sigkill_pending in ptrace_stop
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Erik Ekman (2):
sfc: Export fibre-specific supported link modes
sfc: Don't use netif_info before net_device setup
Eugen Hristev (1):
media: atmel: fix the ispck initialization
Evgeny Novikov (6):
media: atomisp: Fix error handling in probe
media: vidtv: Fix memory leak in remove
media: ttusb-dec: avoid release of non-acquired mutex
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
mtd: rawnand: intel: Fix potential buffer overflow in probe
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Ewan D. Milne (1):
scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
Fabio Estevam (2):
ath10k: sdio: Add missing BH locking around napi_schdule()
Revert "drm/imx: Annotate dma-fence critical section in commit path"
Fabrice Gasnier (1):
ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
Felix Fietkau (1):
mt76: mt7615: fix skb use-after-free on mac reset
Filipe Manana (1):
btrfs: fix lost error handling when replaying directory deletes
Florian Westphal (3):
fcnal-test: kill hanging ping/nettest binaries on cleanup
vrf: run conntrack only in context of lower/physdev for locally generated packets
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Frank Rowand (1):
of: unittest: fix EXPECT text for gpio hog errors
Gao Xiang (2):
erofs: don't trigger WARN() when decompression fails
erofs: fix unsafe pagevec reuse of hooked pclusters
Geert Uytterhoeven (7):
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
mips: cm: Convert to bitfield API to fix out-of-bounds access
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
auxdisplay: ht16k33: Connect backlight to fbdev
auxdisplay: ht16k33: Fix frame buffer device blanking
Giovanni Cabiddu (2):
crypto: qat - detect PFVF collision after ACK
crypto: qat - disregard spurious PFVF interrupts
Greg Kroah-Hartman (1):
Linux 5.14.19
Guangbin Huang (2):
net: hns3: ignore reset event before initialization process is done
net: hns3: allow configure ETS bandwidth of all TCs
Guchun Chen (1):
drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage
Guo Ren (1):
irqchip/sifive-plic: Fixup EOI failed when masked
Guoqing Jiang (1):
md/raid1: only allocate write behind bio for WriteMostly device
Guru Das Srinagesh (1):
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
Gustavo A. R. Silva (1):
powerpc/vas: Fix potential NULL pointer dereference
Halil Pasic (1):
s390/cio: make ccw_device_dma_* more robust
Hangbin Liu (5):
kselftests/net: add missed icmp.sh test to Makefile
selftests/bpf/xdp_redirect_multi: Put the logs to tmp folder
selftests/bpf/xdp_redirect_multi: Use arping to accurate the arp number
selftests/bpf/xdp_redirect_multi: Give tcpdump a chance to terminate cleanly
selftests/bpf/xdp_redirect_multi: Limit the tests in netns
Hannes Reinecke (1):
nvme: drop scan_lock and always kick requeue list when removing namespaces
Hans Verkuil (1):
media: vidtv: move kfree(dvb) to vidtv_bridge_dev_release()
Hans de Goede (7):
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
media: videobuf2-dma-sg: Fix buf->vb NULL pointer dereference
Hao Wu (1):
tpm: fix Atmel TPM crash caused by too frequent queries
Haoyue Xu (1):
RDMA/hns: Fix initial arm_st of CQ
Harald Freudenberger (1):
s390/ap: Fix hanging ioctl caused by orphaned replies
Hari Bathini (1):
powerpc/bpf: Fix write protecting JIT code
Heiner Kallweit (1):
net: phy: fix duplex out of sync problem while changing settings
Helge Deller (4):
parisc: Fix set_fixmap() on PA1.x CPUs
parisc: Fix ptrace check on syscall return
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
parisc: Fix backtrace to always include init funtion names
Henrik Grimler (1):
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Horia Geantă (1):
crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
Huang Guobin (1):
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Hui Wang (2):
ACPI: resources: Add DMI-based legacy IRQ override quirk
ACPI: resources: Add one more Medion model in IRQ override quirk
Iago Toral Quiroga (1):
drm/v3d: fix wait for TMU write combiner flush
Ian Rogers (1):
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Igor Pylypiv (1):
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
Ilya Leoshkevich (1):
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
Imre Deak (2):
fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
drm/i915/fb: Fix rounding error in subsampled plane size calculation
Ingmar Klein (1):
PCI: Mark Atheros QCA6174 to avoid bus reset
Israel Rukshin (3):
nvmet: fix use-after-free when a port is removed
nvmet-rdma: fix use-after-free when a port is removed
nvmet-tcp: fix use-after-free when a port is removed
Ivan Vecera (1):
net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
J. Bruce Fields (1):
nfsd: don't alloc under spinlock in rpc_parse_scope_id
Jack Andersen (1):
mfd: dln2: Add cell for initializing DLN2 ADC
Jackie Liu (3):
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
ar7: fix kernel builds for compiler test
Jaegeuk Kim (1):
f2fs: should use GFP_NOFS for directory inodes
Jakob Hauser (1):
power: supply: rt5033_battery: Change voltage values to µV
Jakub Kicinski (4):
net: sched: update default qdisc visibility after Tx queue cnt changes
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
udp6: allow SO_MARK ctrl msg to affect routing
ethtool: fix ethtool msg len calculation for pause stats
James Smart (3):
scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
Jan Kara (1):
ocfs2: fix data corruption on truncate
Jane Malalane (1):
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Janghyub Seo (1):
r8169: Add device 10ec:8162 to driver r8169
Janis Schoetterl-Glausch (1):
KVM: s390: Fix handle_sske page fault handling
Jaroslav Kysela (1):
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jason Gunthorpe (1):
drm/ttm: remove ttm_bo_vm_insert_huge()
Jason Ormes (1):
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
Jens Axboe (5):
block: bump max plugged deferred size from 16 to 32
block: remove inaccurate requeue check
io-wq: ensure that hash wait lock is IRQ disabling
io-wq: fix queue stalling race
io-wq: serialize hash clear with wakeup
Jeremy Soller (1):
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
Jernej Skrabec (1):
drm/sun4i: Fix macros in sun8i_csc.h
Jessica Zhang (1):
drm/msm: Fix potential NULL dereference in DPU SSPP
Jia-Ju Bai (1):
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Jiasheng Jiang (1):
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Jie Wang (2):
net: hns3: fix ROCE base interrupt vector initialization bug
net: hns3: fix pfc packet number incorrect after querying pfc parameters
Jim Mattson (1):
KVM: selftests: Fix nested SVM tests when built with clang
Jimmy Kizito (1):
drm/amd/display: Fix null pointer dereference for encoders
Jiri Olsa (1):
selftests/bpf: Fix perf_buffer test on system with offline cpus
Joerg Roedel (1):
x86/sev: Fix stack type check in vc_switch_off_ist()
Johan Hovold (14):
Input: iforce - fix control-message timeout
ALSA: ua101: fix division by zero at probe
ALSA: 6fire: fix control and bulk message timeouts
ALSA: line6: fix control and interrupt message timeouts
mwifiex: fix division by zero in fw download path
ath6kl: fix division by zero in send path
ath6kl: fix control-message timeout
ath10k: fix control-message timeout
ath10k: fix division by zero in send path
rtl8187: fix control-message timeouts
serial: 8250: fix racy uartclk update
most: fix control-message timeouts
USB: iowarrior: fix control-message timeouts
USB: chipidea: fix interrupt deadlock
Johannes Berg (5):
iwlwifi: mvm: disable RX-diversity in powersave
cfg80211: always free wiphy specific regdomain
iwlwifi: mvm: reset PM state on unsuccessful resume
iwlwifi: pnvm: don't kmemdup() more than we have
iwlwifi: pnvm: read EFI data only if long enough
John David Anglin (1):
parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
John Fastabend (3):
bpf, sockmap: Remove unhash handler for BPF sockmap usage
bpf, sockmap: Fix race in ingress receive verdict with redirect to self
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
John Fraker (1):
gve: Recover from queue stall due to missed IRQ
John Keeping (1):
Input: st1232 - increase "wait ready" timeout
Johnathon Clark (1):
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
Jon Maxwell (1):
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Jonas Dreßler (5):
mwifiex: Read a PCI register after writing the TX ring write pointer
mwifiex: Try waking the firmware until we get an interrupt
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
mwifiex: Properly initialize private structure on interface type changes
mwifiex: Send DELBA requests according to spec
Josef Bacik (1):
btrfs: do not take the uuid_mutex in btrfs_rm_device
Josh Don (1):
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
Juergen Gross (1):
xen/balloon: add late_initcall_sync() for initial ballooning done
Junji Wei (1):
RDMA/rxe: Fix wrong port_cap_flags
Jussi Maki (1):
bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
Kai Song (1):
mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
Kai Vehmanen (1):
component: do not leave master devres group open after bind
Kai-Heng Feng (1):
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Kalesh Singh (1):
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Kan Liang (3):
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
perf/x86/intel/uncore: Fix invalid unit check
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
Kees Cook (7):
leaking_addresses: Always print a trailing newline
fortify: Fix dropped strcpy() compile-time write overflow check
media: radio-wl1273: Avoid card name truncation
media: si470x: Avoid card name truncation
media: tm6000: Avoid card name truncation
clocksource/drivers/timer-ti-dm: Select TIMER_OF
sched: Add wrapper for get_wchan() to keep task blocked
Kele Huang (1):
ptp: fix error print of ptp_kvm on X86_64 platform
Kewei Xu (1):
i2c: mediatek: fixing the incorrect register offset
Kishon Vijay Abraham I (6):
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie node
arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
Krzysztof Kozlowski (3):
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
mfd: core: Add missing of_node_put for loop iteration
Kumar Kartikeya Dwivedi (3):
libbpf: Fix skel_internal.h to set errno on loader retval < 0
selftests/bpf: Fix fd cleanup in sk_lookup test
selftests/bpf: Fix memory leak in test_ima
Kunihiko Hayashi (1):
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
Lad Prabhakar (1):
spi: spi-rpc-if: Check return value of rpcif_sw_init()
Lang Yu (2):
drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw()
Lars-Peter Clausen (1):
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Lasse Collin (2):
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
lib/xz: Validate the value before assigning it to an enum variable
Laurent Vivier (1):
KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
Leon Romanovsky (3):
bnxt_en: Check devlink allocation and registration status
qed: Don't ignore devlink allocation failures
RDMA/mlx4: Return missed an error if device doesn't support steering
Leon Yen (2):
mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
mt76: connac: fix GTK rekey offload failure on WPA mixed mode
Li Chen (1):
PCI: cadence: Add cdns_plat_pcie_probe() missing return
Li Zhang (1):
btrfs: clear MISSING device status bit in btrfs_close_one_device
Li Zhijian (1):
kselftests/sched: cleanup the child processes
Linus Lüssing (1):
ath9k: Fix potential interrupt storm on queue reset
Linus Walleij (2):
net: dsa: rtl8366rb: Fix off-by-one bug
net: dsa: rtl8366: Fix a bug in deleting VLANs
Liu Jian (1):
skmsg: Lose offset info in sk_psock_skb_ingress
Loic Poulain (8):
wcn36xx: Fix HT40 capability for 2Ghz band
wcn36xx: Fix tx_status mechanism
wcn36xx: Fix (QoS) null data frame bitrate/modulation
wcn36xx: Correct band/freq reporting on RX
wcn36xx: Fix packet drop on resume
ath10k: Fix missing frame timestamp for beacon/probe-resp
wcn36xx: Fix discarded frames due to wrong sequence number
wcn36xx: Channel list update before hardware scan
Lorenz Bauer (3):
bpf: Define bpf_jit_alloc_exec_limit for riscv JIT
bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
bpf: Prevent increasing bpf_jit_limit above max
Lorenzo Bianconi (10):
mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event
mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb
mt76: mt7921: fix endianness warning in mt7921_update_txs
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
mt76: mt7921: fix survey-dump reporting
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
mt76: overwrite default reg_ops if necessary
mt76: mt7921: always wake device if necessary in debugfs
mt76: mt7915: fix possible infinite loop release semaphore
mt76: connac: fix possible NULL pointer dereference in mt76_connac_get_phy_mode_v2
Luis Chamberlain (5):
floppy: fix calling platform_device_unregister() on invalid drives
nvdimm/btt: do not call del_gendisk() if not needed
block/ataflop: use the blk_cleanup_disk() helper
block/ataflop: add registration bool before calling del_gendisk()
block/ataflop: provide a helper for cleanup up an atari disk
Lukas Wunner (1):
ifb: Depend on netfilter alternatively to tc
Maciej W. Rozycki (1):
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
Mansur Alisha Shaik (1):
media: venus: fix vpp frequency calculation for decoder
Marc Kleine-Budde (2):
can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to unsigned int
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
Marek Behún (6):
PCI: pci-bridge-emul: Fix emulation of W1C bits
PCI: aardvark: Fix return value of MSI domain .alloc() method
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
PCI: aardvark: Don't spam about PIO Response Status
net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than 10
net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
Marek Vasut (3):
rsi: Fix module dev_oper_mode parameter description
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
video: backlight: Drop maximum brightness override for brightness zero
Marijn Suijten (2):
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
arm64: dts: qcom: pmi8994: Fix "eternal"->"external" typo in WLED node
Mario (1):
drm: panel-orientation-quirks: Add quirk for GPD Win3
Mario Limonciello (1):
drm/amd/display: Look at firmware version to determine using dmub on dcn21
Mark Brown (11):
spi: Check we have a spi_device_id for each DT compatible
tpm_tis_spi: Add missing SPI ID
iio: st_pressure_spi: Add missing entries SPI to device ID table
ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
rtc: ds1302: Add SPI ID table
rtc: ds1390: Add SPI ID table
rtc: pcf2123: Add SPI ID table
rtc: mcp795: Add SPI ID table
Input: ariel-pwrbutton - add SPI device ID table
mfd: cpcap: Add SPI device ID table
mfd: sprd: Add SPI device ID table
Mark Rutland (2):
KVM: arm64: Extract ESR_ELx.EC only
irq: mips: avoid nested irq_enter()
Markus Schneider-Pargmann (1):
hwrng: mtk - Force runtime pm ops for sleep ops
Martin Fuzzey (3):
rsi: fix occasional initialisation failure with BT coex
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
rsi: fix rate mask set leading to P2P failure
Martin Kepplinger (1):
media: imx: set a media_device bus_info string
Masahiro Yamada (1):
MIPS: fix duplicated slashes for Platform file path
Masami Hiramatsu (2):
ia64: kprobes: Fix to pass correct trampoline address to the handler
ARM: clang: Do not rely on lr register for stacktrace
Mathias Nyman (1):
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
Matthew Auld (1):
drm/ttm: stop calling tt_swapin in vm_access
Matthew Wilcox (Oracle) (1):
mm/filemap.c: remove bogus VM_BUG_ON
Matthias Schiffer (1):
net: phy: micrel: make *-skew-ps check more lenient
Mauricio Vásquez (1):
libbpf: Fix memory leak in btf__dedup()
Maurizio Lombardi (1):
nvmet-tcp: fix a memory leak when releasing a queue
Max Gurtovoy (1):
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Maxim Kiselev (1):
net: davinci_emac: Fix interrupt pacing disable
Maximilian Luz (3):
platform/surface: aggregator_registry: Add support for Surface Laptop Studio
HID: surface-hid: Use correct event registry for managing HID events
HID: surface-hid: Allow driver matching for target ID 1 devices
Mehrdad Arshad Rad (1):
libbpf: Fix lookup_and_delete_elem_flags error reporting
Meng Li (2):
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
soc: fsl: dpio: use the combined functions to protect critical zone
Menglong Dong (1):
workqueue: make sysfs of unbound kworker cpumask more clever
Miaohe Lin (1):
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Michael Pratt (1):
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
Michael Schmitz (2):
block: ataflop: fix breakage introduced at blk-mq refactoring
block: ataflop: more blk-mq refactoring fixes
Michael Tretter (1):
media: allegro: ignore interrupt if mailbox is not initialized
Michael Walle (1):
crypto: caam - disable pkc for non-E SoCs
Michal Hocko (1):
mm, oom: do not trigger out_of_memory from the #PF
Michał Mirosław (1):
ARM: 9155/1: fix early early_iounmap()
Mihail Chindris (2):
drivers: iio: dac: ad5766: Fix dt property name
Documentation:devicetree:bindings:iio:dac: Fix val
Miklos Szeredi (1):
fuse: fix page stealing
Miquel Raynal (11):
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
mtd: rawnand: arasan: Prevent an unsupported configuration
mtd: rawnand: fsmc: Fix use of SM ORDER
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
Mirela Rabulea (1):
media: imx-jpeg: Fix possible null pointer dereference
Muchun Song (1):
seq_file: fix passing wrong private data
Nadezda Lutovinova (2):
media: s5p-mfc: Add checking to s5p_mfc_probe().
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Naina Mehta (1):
soc: qcom: llcc: Disable MMUHWT retention
Naohiro Aota (1):
block: schedule queue restart after BLK_STS_ZONE_RESOURCE
Nathan Chancellor (1):
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Nathan Lynch (3):
powerpc: fix unbalanced node refcount in check_kvm_guest()
powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
powerpc/pseries/mobility: ignore ibm, platform-facilities updates
Neeraj Upadhyay (1):
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Nehal Bakulchandra Shah (1):
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Nicholas Piggin (2):
powerpc/32e: Ignore ESR in instruction storage interrupt handler
powerpc/64s/interrupt: Fix check_return_regs_valid() false positive
Nick Desaulniers (1):
arm64: vdso32: suppress error message for 'make mrproper'
Nick Hainke (1):
mt76: mt7615: mt7622: fix ibss and meshpoint
Nikita Yushchenko (1):
staging: most: dim2: do not double-register the same device
Niklas Söderlund (1):
media: rcar-vin: Use user provided buffers when starting
Nikolay Aleksandrov (1):
selftests: net: bridge: update IGMP/MLD membership interval value
Nuno Sá (2):
iio: ad5770r: make devicetree property reading consistent
iio: adis: do not disabe IRQs in 'adis_init()'
Oleksij Rempel (1):
iio: adc: tsc2046: fix scan interval warning
Olivier Moysan (2):
ARM: dts: stm32: fix SAI sub nodes register range
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
Ondrej Jirman (1):
media: sun6i-csi: Allow the video device to be open multiple times
Ondrej Mosnacek (1):
selinux: fix race condition when computing ocontext SIDs
Ovidiu Panait (1):
crypto: octeontx2 - set assoclen in aead_do_fallback()
Pablo Neira Ayuso (2):
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
netfilter: nft_dynset: relax superfluous check on set updates
Pali Rohár (13):
serial: core: Fix initializing and restoring termios speed
PCI: aardvark: Do not clear status bits of masked interrupts
PCI: aardvark: Fix checking for link up via LTSSM state
PCI: aardvark: Do not unmask unused interrupts
PCI: aardvark: Fix reporting Data Link Layer Link Active
PCI: aardvark: Fix configuring Reference clock
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
PCI: aardvark: Fix PCIe Max Payload Size setting
Paolo Bonzini (1):
KVM: x86: move guest_pv_has out of user_access section
Paul Cercueil (2):
drm/bridge: it66121: Initialize {device,vendor}_ids
drm/bridge: it66121: Wait for next bridge to be probed
Paul E. McKenney (1):
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
Paulo Alcantara (2):
cifs: set a minimum of 120s for next dns resolution
cifs: fix memory leak of smb3_fs_context_dup::server_hostname
Pavel Skripkin (3):
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
media: em28xx: add missing em28xx_close_extension
media: dvb-usb: fix ununit-value in az6027_rc_query
Pawan Gupta (1):
smackfs: Fix use-after-free in netlbl_catmap_walk()
Paweł Anikiel (1):
reset: socfpga: add empty driver allowing consumers to probe
Pekka Korpinen (1):
iio: dac: ad5446: Fix ad5622_write() return value
Peng Fan (1):
remoteproc: elf_loader: Fix loading segment when is_iomem true
Peter Geis (1):
arm64: dts: rockchip: fix rk3568 mbi-alias
Peter Rosin (1):
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Peter Zijlstra (8):
x86/iopl: Fake iopl(3) CLI/STI usage
locking/lockdep: Avoid RCU-induced noinstr fail
x86/mm/64: Improve stack overflow warnings
x86: Increase exception stack sizes
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
objtool: Handle __sanitize_cov*() tail calls
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
x86: Fix __get_wchan() for !STACKTRACE
Petr Machata (1):
selftests: net: fib_nexthops: Wait before checking reported idle time
Phoenix Huang (1):
Input: elantench - fix misreporting trackpoint coordinates
Pradeep Kumar Chitrapu (1):
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
Punit Agrawal (1):
kprobes: Do not use local variable when creating debugfs file
Qi Zheng (1):
x86: Fix get_wchan() to support the ORC unwinder
Quentin Monnet (1):
bpftool: Avoid leaking the JSON writer prepared for program metadata
Quentin Perret (1):
KVM: arm64: Report corrupted refcount at EL2
Quinn Tran (3):
scsi: qla2xxx: Fix use after free in eh_abort path
scsi: qla2xxx: Fix gnl list corruption
scsi: qla2xxx: Turn off target reset during issue_lip
Rafael J. Wysocki (8):
PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
ACPICA: Avoid evaluating methods too early during system resume
ACPI: scan: Release PM resources blocked by unused objects
ACPI: PM: Turn off unused wakeup power resources
ACPI: PM: Fix sharing of wakeup power resources
cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
ACPI: PM: Fix device wakeup power reference counting error
PM: sleep: Avoid calling put_device() under dpm_list_mtx
Rafał Miłecki (2):
ARM: dts: BCM5301X: Fix memory nodes names
arm64: dts: broadcom: bcm4908: Fix UART clock name
Rahul Lakkireddy (1):
cxgb4: fix eeprom len when diagnostics not implemented
Rahul Tanwar (1):
pinctrl: equilibrium: Fix function addition in multiple groups
Rajat Asthana (1):
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Rakesh Babu (1):
octeontx2-pf: Enable promisc/allmulti match MCAM entries.
Randy Dunlap (9):
mmc: winbond: don't build on M68K
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
media: i2c: ths8200 needs V4L2_ASYNC
net: fealnx: fix build for UML
net: tulip: winbond-840: fix build for UML
media: ivtv: fix build for UML
usb: musb: select GENERIC_PHY instead of depending on it
usb: typec: STUSB160X should select REGMAP_I2C
m68k: set a default value for MEMORY_RESERVE
Ranjani Sridharan (1):
ASoC: SOF: topology: do not power down primary core during topology removal
Reiji Watanabe (1):
arm64: arm64_ftr_reg->name may not be a human-readable string
Reimar Döffinger (1):
libata: fix checking of DMA state
Ricardo Ribalda (7):
media: v4l2-ioctl: Fix check_ext_ctrls
media: uvcvideo: Set capability in s_param
media: uvcvideo: Return -EIO for control errors
media: uvcvideo: Set unique vdev name based in type
media: ipu3-imgu: imgu_fmt: Handle properly try
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
media: v4l2-ioctl: S_CTRL output the right value
Richard Fitzgerald (4):
ASoC: cs42l42: Always configure both ASP TX channels
ASoC: cs42l42: Correct some register default values
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
Robert Foss (1):
drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
Robert-Ionut Alexa (1):
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Russ Weight (1):
spi: altera: Change to dynamic allocation of spi id
Russell Currey (1):
powerpc/security: Use a mutex for interrupt exit code patching
Russell King (Oracle) (2):
net: phylink: don't call netif_carrier_off() with NULL netdev
net: phylink: avoid mvneta warning when setting pause parameters
Ryder Lee (3):
mt76: mt7915: fix an off-by-one bound check
mt76: mt7615: fix hwmon temp sensor mem use-after-free
mt76: mt7615: fix monitor mode tear down crash
Sakari Ailus (1):
media: imx258: Fix getting clock frequency
Sandeep Maheswaram (1):
phy: qcom-snps: Correct the FSEL_MASK
Sander Vanheule (1):
gpio: realtek-otto: fix GPIO line IRQ offset
Scott Wood (1):
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
Sean Christopherson (5):
x86/irq: Ensure PI wakeup handler is unregistered before module unload
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
KVM: nVMX: Handle dynamic MSR intercept toggling
Sean Wang (5):
mt76: fix build error implicit enumeration conversion
mt76: mt7921: report HE MU radiotap
mt76: mt7921: fix firmware usage of RA info using legacy rates
mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
mt76: mt7921: fix retrying release semaphore without end
Sean Young (3):
media: ite-cir: IR receiver stop working after receive overflow
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
media: ir_toy: assignment to be16 should be of correct type
Sebastian Andrzej Siewior (1):
lockdep: Let lock_is_held_type() detect recursive read as read
Sebastian Krzyszkowiak (2):
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
power: supply: max17042_battery: Clear status bits in interrupt handler
Seevalamuthu Mariappan (1):
ath11k: Align bss_chan_info structure with firmware
Selvin Xavier (2):
RDMA/bnxt_re: Fix query SRQ failure
PCI: Do not enable AtomicOps on VFs
Sergey Senozhatsky (2):
media: videobuf2: rework vb2_mem_ops API
media: videobuf2: always set buffer vb2 pointer
Shaoying Xu (1):
ext4: fix lazy initialization next schedule time computation in more granular unit
Shayne Chen (4):
mt76: mt7915: fix potential overflow of eeprom page index
mt76: mt7915: fix bit fields for HT rate idx
mt76: mt7915: fix sta_rec_wtbl tag len
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
Shreyansh Chouhan (1):
crypto: aesni - check walk.nbytes instead of err
Shuah Khan (2):
selftests: kvm: fix mismatched fclose() after popen()
selftests/core: fix conflicting types compile error for close_range()
Shyam Prasad N (1):
cifs: To match file servers, make sure the server hostname matches
Shyam Sundar S K (1):
net: amd-xgbe: Toggle PLL settings during rate change
Sidong Yang (1):
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
Simon Ser (1):
drm/panel-orientation-quirks: add Valve Steam Deck
Srinivas Kandagatla (3):
soundwire: debugfs: use controller id and link_id for debugfs
soundwire: bus: stop dereferencing invalid slave pointer
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
Sriram R (2):
ath11k: Avoid reg rules update during firmware recovery
ath11k: Avoid race during regd updates
Stafford Horne (1):
openrisc: fix SMP tlb flush NULL pointer dereference
Stefan Agner (2):
phy: micrel: ksz8041nl: do not use power down mode
serial: imx: fix detach/attach of serial console
Stefan Binding (1):
ASoC: cs42l42: Ensure 0dB full scale volume is used for headsets
Stefan Schaeckeler (1):
ACPI: AC: Quirk GK45 to skip reading _PSR
Stephan Gerhold (2):
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
Stephane Eranian (1):
perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
Stephen Boyd (1):
ath10k: Don't always treat modem stop events as crashes
Stephen Suryaputra (1):
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Steve French (1):
smb3: do not error on fsync when readonly
Steven Rostedt (VMware) (3):
ring-buffer: Protect ring_buffer_reset() from reentrancy
tracefs: Have tracefs directories not set OTH permission bits by default
tracing: Disable "other" permission bits in the tracefs files
Sudarshan Rajagopalan (1):
arm64: mm: update max_pfn after memory hotplug
Sukadev Bhattiprolu (3):
ibmvnic: don't stop queue in xmit
ibmvnic: Process crqs after enabling interrupts
ibmvnic: delay complete()
Sumit Saxena (1):
scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt
Sungjong Seo (1):
exfat: fix incorrect loading of i_blocks for large files
Suzuki K Poulose (2):
coresight: trbe: Fix incorrect access of the sink specific data
coresight: trbe: Defer the probe on offline CPUs
Sven Eckelmann (1):
ath10k: fix max antenna gain unit
Sven Schnelle (4):
parisc: fix warning in flush_tlb_all
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
s390/tape: fix timer initialization in tape_std_assign()
Sylwester Dziedziuch (1):
ice: Fix replacing VF hardware MAC to existing MAC filter
THOBY Simon (2):
IMA: block writes of the security.ima xattr with unsupported algorithms
IMA: reject unknown hash algorithms in ima_get_hash_algo
Tadeusz Struk (1):
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
Takashi Iwai (11):
Input: i8042 - Add quirk for Fujitsu Lifebook T725
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
ALSA: hda/realtek: Add quirk for ASUS UX550VE
ALSA: mixer: oss: Fix racy access to slots
ALSA: hda: Free card instance properly at probe errors
ALSA: PCM: Fix NULL dereference at mmap checks
ALSA: timer: Unconditionally unlink slave instances, too
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
ALSA: hda: Reduce udelay() at SKL+ position reporting
ALSA: hda: Use position buffer for SKL+ again
ALSA: memalloc: Catch call with NULL snd_dma_buffer pointer
Takashi Sakamoto (1):
ALSA: oxfw: fix functional regression for Mackie Onyx 1640i in v5.14 or later
Tang Bin (1):
crypto: s5p-sss - Add error handling in s5p_aes_probe()
Tao Zhang (1):
coresight: cti: Correct the parameter for pm_runtime_put
Tetsuo Handa (3):
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
ataflop: remove ataflop_probe_lock mutex
Thomas Perrot (1):
spi: spl022: fix Microwire full duplex mode
Thomas Richter (1):
s390/cpumf: cpum_cf PMU displays invalid value after hotplug remove
Tiezhu Yang (1):
samples/kretprobes: Fix return value if register_kretprobe() failed
Tim Crawford (1):
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Tim Gardner (2):
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
net: enetc: unmap DMA in enetc_send_cmd()
Toke Høiland-Jørgensen (1):
libbpf: Don't crash on object files with no symbol tables
Tom Lendacky (3):
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
arch/cc: Introduce a function to check for confidential computing features
x86/sev: Add an x86 version of cc_platform_has()
Tom Rix (2):
media: TDA1997x: handle short reads of hdmi info frame.
apparmor: fix error check
Tong Zhang (1):
scsi: dc395: Fix error case unwinding
Tony Lindgren (3):
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
mmc: sdhci-omap: Fix context restore
bus: ti-sysc: Fix timekeeping_suspended warning on resume
Tony Lu (1):
net/smc: Fix smc_link->llc_testlink_time overflow
Trond Myklebust (9):
NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
NFS: Ignore the directory size when marking for revalidation
NFS: Fix dentry verifier races
NFS: Fix deadlocks in nfs_scan_commit_list()
NFS: Fix up commit deadlocks
NFS: Fix an Oops in pnfs_mark_request_commit()
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
SUNRPC: Partial revert of commit 6f9f17287e78
Tuo Li (2):
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Vasant Hegde (1):
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Vasily Averin (2):
memcg: prohibit unconditional exceeding the limit of dying tasks
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Vegard Nossum (1):
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Viktor Rosendahl (1):
tools/latency-collector: Use correct size when writing queue_full_warning
Vincent Donnefort (2):
cpufreq: Make policy min/max hard requirements
PM: EM: Fix inefficient states detection
Vincent Mailhol (1):
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
Vineeth Vijayan (1):
s390/cio: check the subchannel validity for dev_busid
Vitaly Kuznetsov (1):
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Vladimir Oltean (4):
net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error
net: dsa: tag_ocelot: break circular dependency with ocelot switch lib driver
net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
net: stmmac: allow a tc-taprio base-time of zero
Vladimir Zapolskiy (2):
arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
phy: qcom-qusb2: Fix a memory leak on probe
Waiman Long (1):
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Walter Stoll (1):
watchdog: Fix OMAP watchdog early handling
Wan Jiabing (3):
net: sparx5: Add of_node_put() before goto
net: mscc: ocelot: Add of_node_put() before goto
soc: qcom: apr: Add of_node_put() before return
Wang Hai (3):
USB: serial: keyspan: fix memleak on probe errors
libertas_tf: Fix possible memory leak in probe and disconnect
libertas: Fix possible memory leak in probe and disconnect
Wang ShaoBo (1):
Bluetooth: fix use-after-free error in lock_sock_nested()
Wang Wensheng (1):
ALSA: timer: Fix use-after-free problem
Wen Gong (1):
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
Wen Gu (1):
net/smc: Correct spelling mistake to TCPF_SYN_RECV
Willem de Bruijn (1):
selftests/net: udpgso_bench_rx: fix port argument
Wojciech Drewek (1):
ice: Move devlink port to PF/VF struct
Wolfram Sang (1):
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
Xiao Ni (1):
md: update superblock after changing rdev flags in state_store
Xiaoming Ni (2):
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
Xin Long (4):
sctp: allow IP fragmentation when PLPMTUD enters Error state
sctp: reset probe_timer in sctp_transport_pl_update
sctp: subtract sctphdr len in sctp_transport_pl_hlen
sctp: return true only for pathmtu update in sctp_transport_pl_toobig
Xin Xiong (1):
mmc: moxart: Fix reference count leaks in moxart_probe
Xuan Zhuo (1):
virtio_ring: check desc == NULL when using indirect with packed
Yaara Baruch (1):
iwlwifi: change all JnP to NO-160 configuration
Yajun Deng (1):
net: net_namespace: Fix undefined member in key_remove_domain()
Yanfei Xu (1):
locking/rwsem: Disable preemption for spinning region
Yang Yingliang (14):
ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
iio: core: fix double free in iio_device_unregister_sysfs()
iio: core: check return value when calling dev_set_name()
pinctrl: core: fix possible memory leak in pinctrl_enable()
iio: buffer: check return value of kstrdup_const()
iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
hwmon: Fix possible memleak in __hwmon_device_register()
driver core: Fix possible memory leak in device_link_add()
power: supply: max17040: fix null-ptr-deref in max17040_probe()
iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
Yassine Oudjana (1):
ASoC: wcd9335: Use correct version to initialize Class H
Yazen Ghannam (1):
EDAC/amd64: Handle three rank interleaving mode
Ye Bin (2):
PM: hibernate: Get block device exclusively in swsusp_check()
nbd: Fix use-after-free in pid_show
Yee Lee (1):
scs: Release kasan vmalloc poison in scs_free process
Yifan Zhang (1):
drm/amdkfd: fix resume error when iommu disabled in Picasso
Yixing Liu (1):
RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
Yoshitaka Ikeda (1):
spi: Fixed division by zero warning
Yu Kuai (3):
blk-cgroup: synchronize blkg creation against policy deactivation
nbd: fix max value for 'first_minor'
nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
Yu Xiao (1):
nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
Yuanzheng Song (1):
thermal/core: Fix null pointer dereference in thermal_release()
YueHaibing (2):
opp: Fix return in _opp_add_static_v2()
xen-pciback: Fix return in pm_ctrl_init()
Yufeng Mo (2):
net: hns3: change hclge/hclgevf workqueue to WQ_UNBOUND mode
net: hns3: fix kernel crash when unload VF while it is being reset
Zev Weiss (3):
hwmon: (pmbus/lm25066) Add offset coefficients
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
mtd: core: don't remove debugfs directory if device is in use
Zhang Changzhong (2):
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Qiao (1):
kernel/sched: Fix sched_fork() access an invalid sched_task_group
Zhang Rui (1):
cpufreq: intel_pstate: Fix cpu->pstate.turbo_freq initialization
Zhang Yi (2):
quota: check block number when reading the block in quota file
quota: correct error number in free_dqentry()
Zheyu Ma (7):
cavium: Return negative value when pci_alloc_irq_vectors() fails
scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
mISDN: Fix return values of the probe function
cavium: Fix return values of the probe function
media: netup_unidvb: handle interrupt properly according to the firmware
memstick: r592: Fix a UAF bug when removing the driver
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ziyang Xuan (4):
char: xillybus: fix msg_ep UAF in xillyusb_probe()
thermal/core: fix a UAF bug in __thermal_cooling_device_register()
rsi: stop thread firstly in rsi_91x_init() error handling
net: vlan: fix a UAF in vlan_dev_real_dev()
Zong-Zhe Yang (1):
rtw88: fix RX clock gate setting while fifo dump
jason-jh.lin (1):
mailbox: Remove WARN_ON for async_cb.cb in cmdq_exec_done
jing yangyang (1):
firmware/psci: fix application of sizeof to pointer
liuyuntao (1):
virtio-gpu: fix possible memory allocation failure
yangerkun (3):
ext4: ensure enough credits in ext4_ext_shift_path_extents
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
ovl: fix use after free in struct ovl_aio_req
王贇 (1):
ftrace: do CPU checking after preemption disabled
^ permalink raw reply [relevance 1%]
* [PATCH 5.15 000/923] 5.15.3-rc3 review
@ 2021-11-17 10:19 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-17 10:19 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.15.3 release.
There are 923 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc3.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.15.3-rc3
Hans de Goede <hdegoede@redhat.com>
media: videobuf2-dma-sg: Fix buf->vb NULL pointer dereference
Sergey Senozhatsky <senozhatsky@chromium.org>
media: videobuf2: always set buffer vb2 pointer
Borislav Petkov <bp@suse.de>
x86/sev: Make the #VC exception stacks part of the default stacks storage
Tom Lendacky <thomas.lendacky@amd.com>
x86/sev: Add an x86 version of cc_platform_has()
Tom Lendacky <thomas.lendacky@amd.com>
arch/cc: Introduce a function to check for confidential computing features
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix also no-alu32 strobemeta selftest
Borislav Petkov <bp@suse.de>
selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
Colin Ian King <colin.king@canonical.com>
mmc: moxart: Fix null pointer dereference on pointer host
Arnd Bergmann <arnd@arndb.de>
ath10k: fix invalid dma_addr_t token assignment
Paulo Alcantara <pc@cjr.nz>
cifs: fix memory leak of smb3_fs_context_dup::server_hostname
Hans Verkuil <hverkuil-cisco@xs4all.nl>
media: vidtv: move kfree(dvb) to vidtv_bridge_dev_release()
Mario Limonciello <mario.limonciello@amd.com>
drm/amd/display: Look at firmware version to determine using dmub on dcn21
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Partial revert of commit 6f9f17287e78
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix PCIe Max Payload Size setting
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: Fix macros in sun8i_csc.h
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
Nathan Lynch <nathanl@linux.ibm.com>
powerpc/pseries/mobility: ignore ibm, platform-facilities updates
Nicholas Piggin <npiggin@gmail.com>
powerpc/64s/interrupt: Fix check_return_regs_valid() false positive
Russell Currey <ruscur@russell.cc>
powerpc/security: Use a mutex for interrupt exit code patching
Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Nicholas Piggin <npiggin@gmail.com>
powerpc/32e: Ignore ESR in instruction storage interrupt handler
Hari Bathini <hbathini@linux.ibm.com>
powerpc/bpf: Fix write protecting JIT code
Gustavo A. R. Silva <gustavoars@kernel.org>
powerpc/vas: Fix potential NULL pointer dereference
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: fsmc: Fix use of SM ORDER
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix rsc-table name
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix ignoring mapping vdev regions
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: Fix the wrong default value of is_iomem
Peng Fan <peng.fan@nxp.com>
remoteproc: elf_loader: Fix loading segment when is_iomem true
Halil Pasic <pasic@linux.ibm.com>
s390/cio: make ccw_device_dma_* more robust
Harald Freudenberger <freude@linux.ibm.com>
s390/ap: Fix hanging ioctl caused by orphaned replies
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Thomas Richter <tmricht@linux.ibm.com>
s390/cpumf: cpum_cf PMU displays invalid value after hotplug remove
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Avoid calling put_device() under dpm_list_mtx
Coly Li <colyli@suse.de>
bcache: Revert "bcache: use bvec_virt"
Coly Li <colyli@suse.de>
bcache: fix use-after-free problem in bcache_device_free()
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Jack Andersen <jackoalan@gmail.com>
mfd: dln2: Add cell for initializing DLN2 ADC
Rongwei Wang <rongwei.wang@linux.alibaba.com>
mm, thp: fix incorrect unmap behavior for private pages
Rongwei Wang <rongwei.wang@linux.alibaba.com>
mm, thp: lock filemap when truncating page cache
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Vasily Averin <vvs@virtuozzo.com>
memcg: prohibit unconditional exceeding the limit of dying tasks
Matthew Wilcox (Oracle) <willy@infradead.org>
mm/filemap.c: remove bogus VM_BUG_ON
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Anatolij Gustschin <agust@denx.de>
dmaengine: bestcomm: fix system boot lockups
Kishon Vijay Abraham I <kishon@ti.com>
dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
Kishon Vijay Abraham I <kishon@ti.com>
dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: don't need 8byte alignment for request length in ksmbd_check_message
Marios Makassikis <mmakassikis@freebox.fr>
ksmbd: Fix buffer length check in fsctl_validate_negotiate_info()
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
block: Hold invalidate_lock in BLKRESETZONE ioctl
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
block: Hold invalidate_lock in BLKZEROOUT ioctl
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
block: Hold invalidate_lock in BLKDISCARD ioctl
Matthew Brost <matthew.brost@intel.com>
drm/i915/guc: Fix blocked context accounting
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: fix unsafe pagevec reuse of hooked pclusters
Xiubo Li <xiubli@redhat.com>
ceph: fix mdsmap decode when there are MDS's beyond max_mds
Dongliang Mu <mudongliangabcd@gmail.com>
f2fs: fix UAF in f2fs_available_free_memory
Daeho Jeong <daehojeong@google.com>
f2fs: include non-compressed blocks in compr_written_block
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Guo Ren <guoren@linux.alibaba.com>
irqchip/sifive-plic: Fixup EOI failed when masked
Michael Pratt <mpratt@google.com>
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
Paolo Bonzini <pbonzini@redhat.com>
KVM: x86: move guest_pv_has out of user_access section
Thomas Gleixner <tglx@linutronix.de>
PCI/MSI: Destroy sysfs before freeing entries
Thomas Gleixner <tglx@linutronix.de>
PCI/MSI: Move non-mask check back into low level accessors
Dave Jones <davej@codemonkey.org.uk>
x86/mce: Add errata workaround for Skylake SKX37
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
Masahiro Yamada <masahiroy@kernel.org>
MIPS: fix *-pkg builds for loongson2ef platform
Masahiro Yamada <masahiroy@kernel.org>
MIPS: fix duplicated slashes for Platform file path
John David Anglin <dave.anglin@bell.net>
parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
Helge Deller <deller@gmx.de>
parisc: Fix backtrace to always include init funtion names
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Steve French <stfrench@microsoft.com>
smb3: do not error on fsync when readonly
Linus Torvalds <torvalds@linux-foundation.org>
thermal: int340x: fix build on 32-bit targets
Willem de Bruijn <willemb@google.com>
selftests/net: udpgso_bench_rx: fix port argument
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Dust Li <dust.li@linux.alibaba.com>
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Marek Behún <kabel@kernel.org>
net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
Vladimir Oltean <vladimir.oltean@nxp.com>
net: stmmac: allow a tc-taprio base-time of zero
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: allow configure ETS bandwidth of all TCs
Yufeng Mo <moyufeng@huawei.com>
net: hns3: fix kernel crash when unload VF while it is being reset
Jie Wang <wangjie125@huawei.com>
net: hns3: fix pfc packet number incorrect after querying pfc parameters
Jie Wang <wangjie125@huawei.com>
net: hns3: fix ROCE base interrupt vector initialization bug
Eric Dumazet <edumazet@google.com>
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Marek Behún <kabel@kernel.org>
net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than 10
Evan Quan <evan.quan@amd.com>
drm/amdgpu: fix uvd crash on Polaris12 during driver unloading
Muchun Song <songmuchun@bytedance.com>
seq_file: fix passing wrong private data
Andrew Halaney <ahalaney@redhat.com>
init: make unknown command line param message clearer
Imre Deak <imre.deak@intel.com>
drm/i915/fb: Fix rounding error in subsampled plane size calculation
Dan Carpenter <dan.carpenter@oracle.com>
gve: Fix off by one in gve_tx_timeout()
Arnd Bergmann <arnd@arndb.de>
dmaengine: stm32-dma: avoid 64-bit division in stm32_dma_get_max_width
Amelie Delaunay <amelie.delaunay@foss.st.com>
dmaengine: stm32-dma: fix burst in case of unaligned memory address
Jussi Maki <joamaki@gmail.com>
bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
John Fastabend <john.fastabend@gmail.com>
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Fix race in ingress receive verdict with redirect to self
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Remove unhash handler for BPF sockmap usage
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Reiji Watanabe <reijiw@google.com>
arm64: arm64_ftr_reg->name may not be a human-readable string
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
litex_liteeth: Fix a double free in the remove function
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Ian Rogers <irogers@google.com>
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
Vincent Mailhol <mailhol.vincent@wanadoo.fr>
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/powerplay: fix sysfs_emit/sysfs_emit_at handling
Fabio Estevam <festevam@gmail.com>
Revert "drm/imx: Annotate dma-fence critical section in commit path"
Arnd Bergmann <arnd@arndb.de>
drm: fb_helper: improve CONFIG_FB dependency
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Limit the tests in netns
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Give tcpdump a chance to terminate cleanly
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Use arping to accurate the arp number
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Put the logs to tmp folder
Mehrdad Arshad Rad <arshad.rad@gmail.com>
libbpf: Fix lookup_and_delete_elem_flags error reporting
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Fix device wakeup power reference counting error
Kai Song <songkai01@inspur.com>
mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
Mark Brown <broonie@kernel.org>
mfd: sprd: Add SPI device ID table
Mark Brown <broonie@kernel.org>
mfd: cpcap: Add SPI device ID table
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
mfd: core: Add missing of_node_put for loop iteration
Takashi Iwai <tiwai@suse.de>
ALSA: memalloc: Catch call with NULL snd_dma_buffer pointer
Arnd Bergmann <arnd@arndb.de>
octeontx2-pf: select CONFIG_NET_DEVLINK
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Jason Gunthorpe <jgg@ziepe.ca>
drm/ttm: remove ttm_bo_vm_insert_huge()
Luis Chamberlain <mcgrof@kernel.org>
block: fix device_add_disk() kobject_create_and_add() error handling
Heiner Kallweit <hkallweit1@gmail.com>
net: phy: fix duplex out of sync problem while changing settings
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
Selvin Xavier <selvin.xavier@broadcom.com>
PCI: Do not enable AtomicOps on VFs
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
ataflop: remove ataflop_probe_lock mutex
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: provide a helper for cleanup up an atari disk
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: add registration bool before calling del_gendisk()
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: use the blk_cleanup_disk() helper
Luis Chamberlain <mcgrof@kernel.org>
nvdimm/pmem: cleanup the disk if pmem_release_disk() is yet assigned
Chenyuan Mi <cymi20@fudan.edu.cn>
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
Andrea Righi <andrea.righi@canonical.com>
selftests: net: properly support IPv6 in GSO GRE test
Avri Altman <avri.altman@wdc.com>
scsi: ufs: ufshpb: Properly handle max-single-cmd
Bean Huo <beanhuo@micron.com>
scsi: ufs: core: Fix NULL pointer dereference
Daejun Park <daejun7.park@samsung.com>
scsi: ufs: ufshpb: Use proper power management API
Jackie Liu <liuyun01@kylinos.cn>
scsi: bsg: Fix errno when scsi_bsg_register_queue() fails
Luis Chamberlain <mcgrof@kernel.org>
nvdimm/btt: do not call del_gendisk() if not needed
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
PCI: j721e: Fix j721e_pcie_probe() error path
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Daniel Thompson <daniel.thompson@linaro.org>
kdb: Adopt scheduler's task classification
Brett Creeley <brett.creeley@intel.com>
ice: Fix not stopping Tx queues for VFs
Sylwester Dziedziuch <sylwesterx.dziedziuch@intel.com>
ice: Fix replacing VF hardware MAC to existing MAC filter
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
Ziyang Xuan <william.xuanziyang@huawei.com>
net: vlan: fix a UAF in vlan_dev_real_dev()
Stafford Horne <shorne@gmail.com>
openrisc: fix SMP tlb flush NULL pointer dereference
Jakub Kicinski <kuba@kernel.org>
ethtool: fix ethtool msg len calculation for pause stats
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed toeplitz.sh/toeplitz_client.sh to Makefile
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed vrf_strict_mode_test.sh test to Makefile
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed SRv6 tests
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed setup_loopback.sh/setup_veth.sh to Makefile
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed icmp.sh test to Makefile
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
Beld Zhang <beldzhang@gmail.com>
io-wq: fix max-workers not correctly set on multi-node system
Yu Kuai <yukuai3@huawei.com>
nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
Yu Kuai <yukuai3@huawei.com>
nbd: fix max value for 'first_minor'
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Sander Vanheule <sander@svanheule.net>
gpio: realtek-otto: fix GPIO line IRQ offset
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Dave Jiang <dave.jiang@intel.com>
dmaengine: idxd: fix resource leak on dmaengine driver disable
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Fix EDIF bsg
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Increase ELS payload
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Flush stale events and msgs on session down
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Fix app start delay
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Fix app start fail
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Relogin during fabric disturbance
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: target: core: Remove from tmr_list during LUN unlink
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Eric W. Biederman <ebiederm@xmission.com>
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Dave Jiang <dave.jiang@intel.com>
dmaengine: idxd: reconfig device after device reset command
Dave Jiang <dave.jiang@intel.com>
dmanegine: idxd: fix resource free ordering on driver removal
Dongliang Mu <mudongliangabcd@gmail.com>
dmaengine: tegra210-adma: fix pm runtime unbalance
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Robert-Ionut Alexa <robert-ionut.alexa@nxp.com>
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Alexey Gladkov <legion@kernel.org>
Fix user namespace leak
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix an Oops in pnfs_mark_request_commit()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix up commit deadlocks
Amelie Delaunay <amelie.delaunay@foss.st.com>
dmaengine: stm32-dma: fix stm32_dma_get_max_width
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
Dan Carpenter <dan.carpenter@oracle.com>
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
Zev Weiss <zev@bewilderbeest.net>
mtd: core: don't remove debugfs directory if device is in use
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: arasan: Prevent an unsupported configuration
Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Guido Günther <agx@sigxcpu.org>
drm/bridge: nwl-dsi: Add atomic_get_input_bus_fmts
John Keeping <john@metanate.com>
Input: st1232 - increase "wait ready" timeout
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Kees Cook <keescook@chromium.org>
sparc: Add missing "FORCE" target when using if_changed
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
YueHaibing <yuehaibing@huawei.com>
opp: Fix return in _opp_add_static_v2()
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/bridge/lontium-lt9611uxc: fix provided connector suport
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix dentry verifier races
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Ignore the directory size when marking for revalidation
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
Kewei Xu <kewei.xu@mediatek.com>
i2c: mediatek: fixing the incorrect register offset
Mark Brown <broonie@kernel.org>
Input: ariel-pwrbutton - add SPI device ID table
Mark Brown <broonie@kernel.org>
rtc: mcp795: Add SPI ID table
Dave Jiang <dave.jiang@intel.com>
dmaengine: idxd: move out percpu_ref_exit() to ensure it's outside submission
Heiner Kallweit <hkallweit1@gmail.com>
i2c: i801: Use PCI bus rescan mutex to protect P2SB access
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix TCM io memory type
Mark Brown <broonie@kernel.org>
rtc: pcf2123: Add SPI ID table
Mark Brown <broonie@kernel.org>
rtc: ds1390: Add SPI ID table
Mark Brown <broonie@kernel.org>
rtc: ds1302: Add SPI ID table
J. Bruce Fields <bfields@redhat.com>
nfsd: don't alloc under spinlock in rpc_parse_scope_id
Evgeny Novikov <novikov@ispras.ru>
mtd: rawnand: intel: Fix potential buffer overflow in probe
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Aharon Landau <aharonl@nvidia.com>
RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Parav Pandit <parav@nvidia.com>
vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: check desc == NULL when using indirect with packed
Geert Uytterhoeven <geert@linux-m68k.org>
serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: rsnd: Fix an error handling path in 'rsnd_node_count()'
Yixing Liu <liuyixing1@huawei.com>
RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
Haoyue Xu <xuhaoyue1@hisilicon.com>
RDMA/hns: Fix initial arm_st of CQ
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc: Don't provide __kernel_map_pages() without ARCH_SUPPORTS_DEBUG_PAGEALLOC
Logan Gunthorpe <logang@deltatee.com>
iommu/dma: Fix incorrect error return on iommu deferred attach
Takashi Sakamoto <o-takashi@sakamocchi.jp>
ALSA: oxfw: fix functional regression for Mackie Onyx 1640i in v5.14 or later
Denis Kirjanov <kda@linux-powerpc.org>
powerpc/xmon: fix task state output
Bixuan Cui <cuibixuan@linux.alibaba.com>
powerpc/44x/fsp2: add missing of_node_put
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/book3e: Fix set_memory_x() and set_memory_nx()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: clarify error check and length calculations
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: clk-master: fix prescaler logic
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: clk-master: check if div or pres is zero
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Yang Yingliang <yangyingliang@huawei.com>
phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
Sandeep Maheswaram <quic_c_sanm@quicinc.com>
phy: qcom-snps: Correct the FSEL_MASK
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
phy: qcom-qmp: another fix for the sc8180x PCIe definition
Dan Carpenter <dan.carpenter@oracle.com>
phy: ti: gmii-sel: check of_get_address() for failure
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Mark Brown <broonie@kernel.org>
ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
Rahul Tanwar <rtanwar@maxlinear.com>
pinctrl: equilibrium: Fix function addition in multiple groups
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
Bhupesh Sharma <bhupesh.sharma@linaro.org>
arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
Marijn Suijten <marijn.suijten@somainline.org>
arm64: dts: qcom: pmi8994: Fix "eternal"->"external" typo in WLED node
Wan Jiabing <wanjiabing@vivo.com>
soc: qcom: apr: Add of_node_put() before return
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
Guru Das Srinagesh <quic_gurus@quicinc.com>
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
Jack Pham <jackp@codeaurora.org>
usb: dwc3: gadget: Skip resizing EP's TX FIFO if already resized
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: reset current session before setting the new one
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
Stefan Agner <stefan@agner.ch>
serial: imx: fix detach/attach of serial console
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: bus: stop dereferencing invalid slave pointer
Nuno Sá <nuno.sa@analog.com>
iio: adis: do not disabe IRQs in 'adis_init()'
Randy Dunlap <rdunlap@infradead.org>
usb: typec: STUSB160X should select REGMAP_I2C
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
soc: qcom: socinfo: add two missing PMIC IDs
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Make power_on actually enable the domain
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Always configure both ASP TX channels
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix SAI sub nodes register range
Fabrice Gasnier <fabrice.gasnier@foss.st.com>
ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
Geert Uytterhoeven <geert+renesas@glider.be>
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
Athira Rajeev <atrajeev@linux.vnet.ibm.cm>
powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
Andrew Halaney <ahalaney@redhat.com>
dyndbg: make dyndbg a known cli param
Logan Gunthorpe <logang@deltatee.com>
RDMA/core: Set sgtable nents when using ib_dma_virt_map_sg()
Vegard Nossum <vegard.nossum@oracle.com>
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Nikita Yushchenko <nikita.yoush@cogentembedded.com>
staging: most: dim2: do not double-register the same device
Randy Dunlap <rdunlap@infradead.org>
usb: musb: select GENERIC_PHY instead of depending on it
Leon Romanovsky <leon@kernel.org>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Yang Yingliang <yangyingliang@huawei.com>
power: supply: max17040: fix null-ptr-deref in max17040_probe()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc: fix unbalanced node refcount in check_kvm_guest()
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype for 'create_section_mapping'
Clément Léger <clement.leger@bootlin.com>
clk: at91: check pmc node status before registering syscore ops
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Mark Brown <broonie@kernel.org>
iio: st_pressure_spi: Add missing entries SPI to device ID table
Ranjani Sridharan <ranjani.sridharan@linux.intel.com>
ASoC: SOF: topology: do not power down primary core during topology removal
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Yang Yingliang <yangyingliang@huawei.com>
driver core: Fix possible memory leak in device_link_add()
Igor Pylypiv <ipylypiv@google.com>
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
Sumit Saxena <sumit.saxena@broadcom.com>
scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt
Bart Van Assche <bvanassche@google.com>
scsi: ufs: core: Stop clearing UNIT ATTENTIONS
Bean Huo <beanhuo@micron.com>
scsi: ufs: core: Fix ufshcd_probe_hba() prototype to match the definition
Claudiu Beznea <claudiu.beznea@microchip.com>
power: reset: at91-reset: check properly the return value of devm_of_iomap
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: debugfs: use controller id and link_id for debugfs
Takashi Iwai <tiwai@suse.de>
ALSA: usb-audio: Fix possible race at sync of urb completions
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Use position buffer for SKL+ again
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
David Stevens <stevensd@chromium.org>
iommu/dma: Fix arch_sync_dma for map
David Stevens <stevensd@chromium.org>
iommu/dma: Fix sync_sg with swiotlb
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
Arnd Bergmann <arnd@arndb.de>
iommu/mediatek: Fix out-of-range warning with clang
Geert Uytterhoeven <geert+renesas@glider.be>
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
Yassine Oudjana <y.oudjana@protonmail.com>
ASoC: wcd9335: Use correct version to initialize Class H
Biju Das <biju.das.jz@bp.renesas.com>
pinctrl: renesas: rzg2l: Fix missing port register 21h
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Kuogee Hsieh <khsieh@codeaurora.org>
arm64: dts: qcom: sc7280: fix display port phy reg property
Naina Mehta <nainmeht@codeaurora.org>
soc: qcom: llcc: Disable MMUHWT retention
Douglas Anderson <dianders@chromium.org>
arm64: dts: qcom: sc7180: Base dynamic CPU power coefficients in reality
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Tony Lindgren <tony@atomide.com>
bus: ti-sysc: Fix timekeeping_suspended warning on resume
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-sm1: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie node
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Marijn Suijten <marijn.suijten@somainline.org>
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Fix NVMe I/O failover to non-optimized path
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Use link event to wake up app
Ajish Koshy <Ajish.Koshy@microchip.com>
scsi: pm80xx: Fix lockup in outbound queue management
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
Rafał Miłecki <rafal@milecki.pl>
arm64: dts: broadcom: bcm4908: Fix UART clock name
Rafał Miłecki <rafal@milecki.pl>
ARM: dts: BCM5301X: Fix memory nodes names
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Alexandru Ardelean <aardelean@deviqon.com>
iio: st_sensors: disable regulators after device unregistration
Dongjin Kim <tobetter@gmail.com>
arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
Pavel Skripkin <paskripkin@gmail.com>
staging: r8188eu: fix memory leak in rtw_set_key
Hector.Yuan <hector.yuan@mediatek.com>
cpufreq: Fix parameter in parse_perf_domain()
Frank Rowand <frank.rowand@sony.com>
of: unittest: fix EXPECT text for gpio hog errors
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
Dan Schatzberg <schatzberg.dan@gmail.com>
cgroup: Fix rootcg cpu.stat guest double counting
Liu Jian <liujian56@huawei.com>
skmsg: Lose offset info in sk_psock_skb_ingress
Geliang Tang <geliang.tang@suse.com>
selftests: mptcp: fix proto type in link_failure tests
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: delay complete()
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: don't stop queue in xmit
Jakub Kicinski <kuba@kernel.org>
udp6: allow SO_MARK ctrl msg to affect routing
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Nikolay Aleksandrov <nikolay@nvidia.com>
selftests: net: bridge: update IGMP/MLD membership interval value
Ivan Vecera <ivecera@redhat.com>
net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Yinjun Zhang <yinjun.zhang@corigine.com>
nfp: fix potential deadlock when canceling dim work
Yinjun Zhang <yinjun.zhang@corigine.com>
nfp: fix NULL pointer access when scheduling dim work
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ipmi: kcs_bmc: Fix a memory leak in the error handling path of 'kcs_bmc_serio_add_device()'
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Xin Long <lucien.xin@gmail.com>
sctp: return true only for pathmtu update in sctp_transport_pl_toobig
Xin Long <lucien.xin@gmail.com>
sctp: subtract sctphdr len in sctp_transport_pl_hlen
Xin Long <lucien.xin@gmail.com>
sctp: reset probe_timer in sctp_transport_pl_update
Xin Long <lucien.xin@gmail.com>
sctp: allow IP fragmentation when PLPMTUD enters Error state
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix memory leak in test_ima
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix fd cleanup in sk_lookup test
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Lang Yu <lang.yu@amd.com>
drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw()
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Channel list update before hardware scan
Eric Dumazet <edumazet@google.com>
bpf: Fixes possible race in update_prog_stats() for 32bit arches
Eric Dumazet <edumazet@google.com>
bpf: Avoid races in __bpf_prog_run() for 32bit arches
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix discarded frames due to wrong sequence number
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Peter Zijlstra <peterz@infradead.org>
x86: Fix __get_wchan() for !STACKTRACE
Kees Cook <keescook@chromium.org>
sched: Add wrapper for get_wchan() to keep task blocked
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
spi: spi-rpc-if: Check return value of rpcif_sw_init()
Zhang Rui <rui.zhang@intel.com>
cpufreq: intel_pstate: Fix cpu->pstate.turbo_freq initialization
Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
tracing: Fix missing trace_boot_init_histograms kstrdup NULL checks
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Ilya Leoshkevich <iii@linux.ibm.com>
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
Mark Brown <broonie@kernel.org>
tpm_tis_spi: Add missing SPI ID
Hao Wu <hao.wu@rubrik.com>
tpm: fix Atmel TPM crash caused by too frequent queries
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix off-by-one bug in bpf_core_apply_relo()
Yu Kuai <yukuai3@huawei.com>
blk-cgroup: synchronize blkg creation against policy deactivation
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: more blk-mq refactoring fixes
Abinaya Kalaiselvan <akalaise@codeaurora.org>
ath10k: fix module load regression with iram-recovery feature
Arnd Bergmann <arnd@arndb.de>
ARM: 9142/1: kasan: work around LPAE build warning
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid double free of sida page
David Hildenbrand <david@redhat.com>
s390/uv: fully validate the VMA before calling follow_page()
David Hildenbrand <david@redhat.com>
s390/mm: fix VMA and page table handling code in storage key handling functions
David Hildenbrand <david@redhat.com>
s390/mm: validate VMA in PGSTE manipulation functions
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
David Hildenbrand <david@redhat.com>
s390/gmap: validate VMA in __gmap_zap()
Nick Hainke <vincent@systemli.org>
mt76: mt7615: mt7622: fix ibss and meshpoint
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF header parsing checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix overflow in BTF sanity checks
Quentin Monnet <quentin@isovalent.com>
bpftool: Avoid leaking the JSON writer prepared for program metadata
Mauricio Vásquez <mauricio@kinvolk.io>
libbpf: Fix memory leak in btf__dedup()
Jim Mattson <jmattson@google.com>
KVM: selftests: Fix nested SVM tests when built with clang
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Horia Geantă <horia.geanta@nxp.com>
crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm/dsi: fix wrong type in msm_dsi_host
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Joerg Roedel <jroedel@suse.de>
x86/sev: Fix stack type check in vc_switch_off_ist()
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Ye Bin <yebin10@huawei.com>
nbd: Fix use-after-free in pid_show
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Tim Gardner <tim.gardner@canonical.com>
net: enetc: unmap DMA in enetc_send_cmd()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pnvm: read EFI data only if long enough
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pnvm: don't kmemdup() more than we have
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: reset PM state on unsuccessful resume
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix sta_rec_wtbl tag len
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: connac: fix possible NULL pointer dereference in mt76_connac_get_phy_mode_v2
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7615: fix monitor mode tear down crash
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix retrying release semaphore without end
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix possible infinite loop release semaphore
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7615: fix hwmon temp sensor mem use-after-free
Ben Greear <greearb@candelatech.com>
mt76: mt7915: fix hwmon temp sensor mem use-after-free
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: always wake device if necessary in debugfs
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix firmware usage of RA info using legacy rates
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: report HE MU radiotap
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: overwrite default reg_ops if necessary
Leon Yen <Leon.Yen@mediatek.com>
mt76: connac: fix GTK rekey offload failure on WPA mixed mode
Deren Wu <deren.wu@mediatek.com>
mt76: mt7921: fix dma hang in rmmod
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix bit fields for HT rate idx
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix potential overflow of eeprom page index
Deren Wu <deren.wu@mediatek.com>
mt76: mt7921: Fix out of order process by invalid event pkt
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix survey-dump reporting
Sean Wang <sean.wang@mediatek.com>
mt76: fix build error implicit enumeration conversion
Leon Yen <Leon.Yen@mediatek.com>
mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
Dan Carpenter <dan.carpenter@oracle.com>
mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix endianness warning in mt7921_update_txs
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event
Lang Yu <lang.yu@amd.com>
drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Fix sharing of wakeup power resources
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Turn off unused wakeup power resources
Fei Shao <fshao@chromium.org>
mailbox: mtk-cmdq: Fix local clock ID usage
Fei Shao <fshao@chromium.org>
mailbox: mtk-cmdq: Validate alias_id on probe
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Andrea Righi <andrea.righi@canonical.com>
blk-wbt: prevent NULL pointer dereference in wb_timer_fn
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: fix breakage introduced at blk-mq refactoring
Bixuan Cui <cuibixuan@huawei.com>
io-wq: Remove duplicate code in io_workqueue_create()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Sean Young <sean@mess.org>
media: ir_toy: assignment to be16 should be of correct type
Randy Dunlap <rdunlap@infradead.org>
media: ivtv: fix build for UML
jason-jh.lin <jason-jh.lin@mediatek.com>
mailbox: Remove WARN_ON for async_cb.cb in cmdq_exec_done
Jackie Liu <liuyun01@kylinos.cn>
thermal/drivers/qcom/lmh: make QCOM_LMH depends on QCOM_SCM
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: fix potential NULL dereference in cleanup
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: unlock on error in get_sched_entity()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: potential error pointer dereference in init()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init()
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/msm/dsi: do not enable irq handler before powering up the host
Ziyang Xuan <william.xuanziyang@huawei.com>
thermal/core: fix a UAF bug in __thermal_cooling_device_register()
Ovidiu Panait <ovidiu.panait@windriver.com>
crypto: octeontx2 - set assoclen in aead_do_fallback()
Eric Dumazet <edumazet@google.com>
tcp: switch orphan_count to bare per-cpu counters
Qi Zheng <zhengqi.arch@bytedance.com>
x86: Fix get_wchan() to support the ORC unwinder
Randy Dunlap <rdunlap@infradead.org>
net: tulip: winbond-840: fix build for UML
Randy Dunlap <rdunlap@infradead.org>
net: intel: igc_ptp: fix build for UML
Randy Dunlap <rdunlap@infradead.org>
net: fealnx: fix build for UML
Zhang Qiao <zhangqiao22@huawei.com>
kernel/sched: Fix sched_fork() access an invalid sched_task_group
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix context restore
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Catherine Sullivan <csully@google.com>
gve: Track RX buffer allocation failures
John Fraker <jfraker@google.com>
gve: Recover from queue stall due to missed IRQ
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
liqiong <liqiong@nfschina.com>
ima: fix deadlock when traversing "ima_default_rules".
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Arnd Bergmann <arnd@arndb.de>
crypto: ccree - avoid out-of-range warnings from clang
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Mansur Alisha Shaik <mansur@codeaurora.org>
media: venus: fix vpp frequency calculation for decoder
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_dynset: relax superfluous check on set updates
Peter Zijlstra <peterz@infradead.org>
rcu: Fix rcu_dynticks_curr_cpu_in_eqs() vs noinstr
Peter Zijlstra <peterz@infradead.org>
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
Yazen Ghannam <yazen.ghannam@amd.com>
EDAC/amd64: Handle three rank interleaving mode
Borislav Petkov <bp@suse.de>
x86/insn: Use get_unaligned() instead of memcpy()
Vincent Donnefort <vincent.donnefort@arm.com>
PM: EM: Fix inefficient states detection
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Stephen Boyd <swboyd@chromium.org>
ath10k: Don't always treat modem stop events as crashes
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Arnd Bergmann <arnd@arndb.de>
drm: fb_helper: fix CONFIG_FB dependency
Arnd Bergmann <arnd@arndb.de>
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
Punit Agrawal <punitagrawal@gmail.com>
kprobes: Do not use local variable when creating debugfs file
Yee Lee <yee.lee@mediatek.com>
scs: Release kasan vmalloc poison in scs_free process
Eugen Hristev <eugen.hristev@microchip.com>
media: atmel: fix the ispck initialization
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: tm6000: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: radio-wl1273: Avoid card name truncation
Ondrej Jirman <megous@megous.com>
media: sun6i-csi: Allow the video device to be open multiple times
Randy Dunlap <rdunlap@infradead.org>
media: i2c: ths8200 needs V4L2_ASYNC
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Tom Rix <trix@redhat.com>
media: TDA1997x: handle short reads of hdmi info frame.
Dafna Hirschfeld <dafna.hirschfeld@collabora.com>
media: mtk-vcodec: venc: fix return value when start_streaming fails
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: S_CTRL output the right value
Sakari Ailus <sakari.ailus@linux.intel.com>
media: imx258: Fix getting clock frequency
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Evgeny Novikov <novikov@ispras.ru>
media: ttusb-dec: avoid release of non-acquired mutex
Colin Ian King <colin.king@canonical.com>
media: cxd2880-spi: Fix a null pointer dereference on error handling path
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: meson-ge2d: Fix rotation parameter changes detection in 'ge2d_s_ctrl()'
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Kumar Kartikeya Dwivedi <memxor@gmail.com>
libbpf: Fix skel_internal.h to set errno on loader retval < 0
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Sudarshan Rajagopalan <quic_sudaraja@quicinc.com>
arm64: mm: update max_pfn after memory hotplug
Matthew Auld <matthew.auld@intel.com>
drm/ttm: stop calling tt_swapin in vm_access
Fabio Estevam <festevam@denx.de>
ath10k: sdio: Add missing BH locking around napi_schdule()
Loic Poulain <loic.poulain@linaro.org>
ath10k: Fix missing frame timestamp for beacon/probe-resp
Arnd Bergmann <arnd@arndb.de>
gve: DQO: avoid unused variable warnings
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
Pradeep Kumar Chitrapu <pradeepc@codeaurora.org>
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid race during regd updates
Dan Carpenter <dan.carpenter@oracle.com>
ath11k: fix some sleeping in atomic bugs
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix error in tail call limit tests
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366: Fix a bug in deleting VLANs
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Leon Romanovsky <leon@kernel.org>
net/mlx5: Accept devlink user input after driver initialization complete
Johannes Berg <johannes.berg@intel.com>
cfg80211: always free wiphy specific regdomain
Johannes Berg <johannes.berg@intel.com>
mac80211: twt: don't use potentially unaligned pointer
Kees Cook <keescook@chromium.org>
fortify: Fix dropped strcpy() compile-time write overflow check
Florian Westphal <fw@strlen.de>
mptcp: do not shrink snd_nxt when recovering
Jiasheng Jiang <jiasheng@iscas.ac.cn>
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Leon Romanovsky <leon@kernel.org>
qed: Don't ignore devlink allocation failures
Leon Romanovsky <leon@kernel.org>
bnxt_en: Check devlink allocation and registration status
Hans de Goede <hdegoede@redhat.com>
Bluetooth: hci_h5: Fix (runtime)suspend issues on RTL8723BS HCIs
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - power up 4xxx device
Michael Walle <michael@walle.cc>
crypto: caam - disable pkc for non-E SoCs
Guchun Chen <guchun.chen@amd.com>
drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage
Harry Wentland <harry.wentland@amd.com>
drm/amd/display: Pass display_pipe_params_st as const in DML
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix crash on device remove/driver unload
Dinghao Liu <dinghao.liu@zju.edu.cn>
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Ajay Singh <ajay.kathat@microchip.com>
wilc1000: fix possible memory leak in cfg_scan_result()
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
wcn36xx: Fix Antenna Diversity Switching
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Yoshitaka Ikeda <ikeda@nskint.co.jp>
spi: Fixed division by zero warning
Alex Bee <knaerzche@gmail.com>
drm: bridge: it66121: Fix return value it66121_probe
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: don't call netif_carrier_off() with NULL netdev
Yajun Deng <yajun.deng@linux.dev>
net: net_namespace: Fix undefined member in key_remove_domain()
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
lockdep: Let lock_is_held_type() detect recursive read as read
liuyuntao <liuyuntao10@huawei.com>
virtio-gpu: fix possible memory allocation failure
Nathan Chancellor <nathan@kernel.org>
crypto: sm4 - Do not change section of ck and sbox
Iago Toral Quiroga <itoral@igalia.com>
drm/v3d: fix wait for TMU write combiner flush
Leon Romanovsky <leon@kernel.org>
net/mlx5: Publish and unpublish all devlink parameters at once
Peter Zijlstra <peterz@infradead.org>
objtool: Handle __sanitize_cov*() tail calls
Peter Zijlstra <peterz@infradead.org>
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: fix burst length for DEU
Neeraj Upadhyay <neeraju@codeaurora.org>
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: hci_uart: fix GPF in h5_recv
Toke Høiland-Jørgensen <toke@redhat.com>
libbpf: Don't crash on object files with no symbol tables
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Paul Cercueil <paul@crapouillou.net>
drm/bridge: it66121: Wait for next bridge to be probed
Paul Cercueil <paul@crapouillou.net>
drm/bridge: it66121: Initialize {device,vendor}_ids
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR M2PCIE event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR CHA event constraints
Robert Foss <robert.foss@linaro.org>
drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
Imre Deak <imre.deak@intel.com>
fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix strobemeta selftest regression
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: don't trigger WARN() when decompression fails
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Stephane Eranian <eranian@google.com>
perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
Shuah Khan <skhan@linuxfoundation.org>
selftests/core: fix conflicting types compile error for close_range()
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Eric Dumazet <edumazet@google.com>
inet: remove races in inet{6}_getname()
王贇 <yun.wang@linux.alibaba.com>
ftrace: do CPU checking after preemption disabled
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
Revert "wcn36xx: Enable firmware link monitoring"
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix packet drop on resume
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Correct band/freq reporting on RX
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Josef Bacik <josef@toxicpanda.com>
btrfs: do not take the uuid_mutex in btrfs_rm_device
Sidong Yang <realwakka@gmail.com>
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
Hui Wang <hui.wang@canonical.com>
ACPI: resources: Add one more Medion model in IRQ override quirk
Stefan Schaeckeler <schaecsn@gmx.net>
ACPI: AC: Quirk GK45 to skip reading _PSR
Eric Dumazet <edumazet@google.com>
net: annotate data-race in neigh_output()
Florian Westphal <fw@strlen.de>
vrf: run conntrack only in context of lower/physdev for locally generated packets
Viktor Rosendahl <Viktor.Rosendahl@bmw.de>
tools/latency-collector: Use correct size when writing queue_full_warning
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Fix glock_hash_walk bugs
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Cancel remote delete work asynchronously
Marc Kleine-Budde <mkl@pengutronix.de>
can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to unsigned int
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Jiri Olsa <jolsa@redhat.com>
selftests/bpf: Fix perf_buffer test on system with offline cpus
Shuah Khan <skhan@linuxfoundation.org>
selftests: kvm: fix mismatched fclose() after popen()
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Nick Desaulniers <ndesaulniers@google.com>
arm64: vdso32: suppress error message for 'make mrproper'
David Yang <davidcomponentone@gmail.com>
samples/bpf: Fix application of sizeof to pointer
Hannes Reinecke <hare@suse.de>
nvme: drop scan_lock and always kick requeue list when removing namespaces
Israel Rukshin <israelr@nvidia.com>
nvmet-tcp: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet-rdma: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet: fix use-after-free when a port is removed
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
Michael Tretter <m.tretter@pengutronix.de>
media: allegro: ignore interrupt if mailbox is not initialized
Jens Axboe <axboe@kernel.dk>
block: remove inaccurate requeue check
Yaara Baruch <yaara.baruch@intel.com>
iwlwifi: change all JnP to NO-160 configuration
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7915: fix an off-by-one bound check
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Yanfei Xu <yanfei.xu@windriver.com>
locking/rwsem: Disable preemption for spinning region
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Xiao Ni <xni@redhat.com>
md: update superblock after changing rdev flags in state_store
Luis Chamberlain <mcgrof@kernel.org>
floppy: fix calling platform_device_unregister() on invalid drives
Jens Axboe <axboe@kernel.dk>
block: bump max plugged deferred size from 16 to 32
Ansuel Smith <ansuelsmth@gmail.com>
thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
Tim Gardner <tim.gardner@canonical.com>
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
Yuanzheng Song <songyuanzheng@huawei.com>
thermal/core: Fix null pointer dereference in thermal_release()
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
net: phy: micrel: make *-skew-ps check more lenient
Yifan Zhang <yifan1.zhang@amd.com>
drm/amdkfd: fix resume error when iommu disabled in Picasso
Aurabindo Pillai <aurabindo.pillai@amd.com>
drm/amd/display: fix null pointer deref when plugging in display
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: scan: Release PM resources blocked by unused objects
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Andreas Gruenbacher <agruenba@redhat.com>
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
Xin Xiong <xiongx18@fudan.edu.cn>
mmc: moxart: Fix reference count leaks in moxart_probe
Will Deacon <will@kernel.org>
KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracing: Disable "other" permission bits in the tracefs files
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Alex Sierra <alex.sierra@amd.com>
drm/amdkfd: rm BO resv on validation to avoid deadlock
Antoine Tenart <atenart@kernel.org>
net-sysfs: try not to restart the syscall if it will fail eventually
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: imgu_fmt: Handle properly try
Mirela Rabulea <mirela.rabulea@nxp.com>
media: imx-jpeg: Fix possible null pointer dereference
Wojciech Drewek <wojciech.drewek@intel.com>
ice: Move devlink port to PF/VF struct
Vincent Donnefort <vincent.donnefort@arm.com>
cpufreq: Make policy min/max hard requirements
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Li Zhijian <lizhijian@cn.fujitsu.com>
kselftests/sched: cleanup the child processes
Josh Don <joshdon@google.com>
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
Corey Minyard <cminyard@mvista.com>
ipmi: Disable some operations during a panic
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Hans de Goede <hdegoede@redhat.com>
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Zong-Zhe Yang <kevin_yang@realtek.com>
rtw88: fix RX clock gate setting while fifo dump
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Niklas Söderlund <niklas.soderlund+renesas@ragnatech.se>
media: rcar-vin: Use user provided buffers when starting
Martin Kepplinger <martink@posteo.de>
media: imx: set a media_device bus_info string
Sergey Senozhatsky <senozhatsky@chromium.org>
media: videobuf2: rework vb2_mem_ops API
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Evgeny Novikov <novikov@ispras.ru>
media: vidtv: Fix memory leak in remove
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set unique vdev name based in type
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Dmitriy Ulitin <ulitin@ispras.ru>
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Evgeny Novikov <novikov@ispras.ru>
media: atomisp: Fix error handling in probe
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Rakesh Babu <rsaladi2@marvell.com>
octeontx2-pf: Enable promisc/allmulti match MCAM entries.
Alagu Sankar <alagusankar@silex-india.com>
ath10k: high latency fixes for beacon buffer
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
Wen Gong <wgong@codeaurora.org>
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid reg rules update during firmware recovery
Petr Machata <petrm@nvidia.com>
selftests: net: fib_nexthops: Wait before checking reported idle time
Jimmy Kizito <Jimmy.Kizito@amd.com>
drm/amd/display: Fix null pointer dereference for encoders
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix MMIO access page fault
Eric Biggers <ebiggers@google.com>
fscrypt: allow 256-bit master keys with AES-256-XTS
Mark Brown <broonie@kernel.org>
spi: Check we have a spi_device_id for each DT compatible
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Peter Zijlstra <peterz@infradead.org>
x86/mm/64: Improve stack overflow warnings
Shreyansh Chouhan <chouhan.shreyansh630@gmail.com>
crypto: aesni - check walk.nbytes instead of err
Seevalamuthu Mariappan <seevalam@codeaurora.org>
ath11k: Align bss_chan_info structure with firmware
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Paul E. McKenney <paulmck@kernel.org>
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
Hui Wang <hui.wang@canonical.com>
ACPI: resources: Add DMI-based legacy IRQ override quirk
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
James Zhu <James.Zhu@amd.com>
drm/amdgpu: move iommu_resume before ip init/resume
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Scott Wood <swood@redhat.com>
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
Simon Ser <contact@emersion.fr>
drm/panel-orientation-quirks: add Valve Steam Deck
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: call sock_hold earlier in sco_conn_del
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
Charan Teja Reddy <charante@codeaurora.org>
dma-buf: WARN on dmabuf release with pending attachments
Kai Vehmanen <kai.vehmanen@linux.intel.com>
component: do not leave master devres group open after bind
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Clear status bits in interrupt handler
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Johan Hovold <johan@kernel.org>
most: fix control-message timeouts
Johan Hovold <johan@kernel.org>
Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
Pali Rohár <pali@kernel.org>
serial: 8250: Fix reporting real baudrate value in c_ospeed field
Jens Axboe <axboe@kernel.dk>
io-wq: serialize hash clear with wakeup
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION
Johan Hovold <johan@kernel.org>
serial: 8250: fix racy uartclk update
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Mihail Chindris <mihail.chindris@analog.com>
Documentation:devicetree:bindings:iio:dac: Fix val
Nuno Sá <nuno.sa@analog.com>
iio: ad5770r: make devicetree property reading consistent
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Mihail Chindris <mihail.chindris@analog.com>
drivers: iio: dac: ad5766: Fix dt property name
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: check return value of kstrdup_const()
Suzuki K Poulose <suzuki.poulose@arm.com>
coresight: trbe: Defer the probe on offline CPUs
Suzuki K Poulose <suzuki.poulose@arm.com>
coresight: trbe: Fix incorrect access of the sink specific data
Tao Zhang <quic_taozha@quicinc.com>
coresight: cti: Correct the parameter for pm_runtime_put
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Robert Marko <robert.marko@sartura.hr>
mfd: simple-mfd-i2c: Select MFD_CORE to fix build error
Paulo Alcantara <pc@cjr.nz>
cifs: set a minimum of 120s for next dns resolution
Shyam Prasad N <sprasad@microsoft.com>
cifs: To match file servers, make sure the server hostname matches
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix configuring Reference clock
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix reporting Data Link Layer Link Active
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix checking for link up via LTSSM state
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Dan Williams <dan.j.williams@intel.com>
cxl/pci: Fix NULL vs ERR_PTR confusion
Li Chen <lchen@ambarella.com>
PCI: cadence: Add cdns_plat_pcie_probe() missing return
Marek Behún <kabel@kernel.org>
PCI: pci-bridge-emul: Fix emulation of W1C bits
Miklos Szeredi <mszeredi@redhat.com>
ovl: fix filattr copy-up failure
yangerkun <yangerkun@huawei.com>
ovl: fix use after free in struct ovl_aio_req
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Arnd Bergmann <arnd@arndb.de>
ifb: fix building without CONFIG_NET_CLS_ACT
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Steven Rostedt (VMware) <rostedt@goodmis.org>
ring-buffer: Protect ring_buffer_reset() from reentrancy
Pavel Begunkov <asml.silence@gmail.com>
io_uring: honour zeroes as io-wq worker limits
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Oleksij Rempel <linux@rempel-privat.de>
iio: adc: tsc2046: fix scan interval warning
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_irq(): add missing can_rx_offload_threaded_irq_finish() in case of bus off
Stephane Grosjean <s.grosjean@peak-system.com>
can: peak_usb: always ask for BERR reporting for PCAN-USB devices
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Handle dynamic MSR intercept toggling
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Sean Christopherson <seanjc@google.com>
KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
David Woodhouse <dwmw2@infradead.org>
KVM: x86: Fix recording of guest steal time / preempted status
Mark Rutland <mark.rutland@arm.com>
KVM: arm64: Extract ESR_ELx.EC only
Yang Yingliang <yangyingliang@huawei.com>
iio: core: check return value when calling dev_set_name()
Yang Yingliang <yangyingliang@huawei.com>
iio: core: fix double free in iio_device_unregister_sysfs()
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Eugene Syromiatnikov <esyr@redhat.com>
mctp: handle the struct sockaddr_mctp padding fields
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: use the combined functions to protect critical zone
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
David Virag <virag.david003@gmail.com>
soc: samsung: exynos-pmu: Fix compilation when nothing selects CONFIG_MFD_CORE
Eric W. Biederman <ebiederm@xmission.com>
signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Wolfram Sang <wsa+renesas@sang-engineering.com>
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Dmitry Osipenko <digetx@gmail.com>
ASoC: tegra: Restore AC97 support
Dmitry Osipenko <digetx@gmail.com>
ASoC: tegra: Set default card name for Trimslice
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix invalid unit check
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Christian König <christian.koenig@amd.com>
dma-buf: fix and rework dma_buf_poll v7
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Try waking the firmware until we get an interrupt
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix (QoS) null data frame bitrate/modulation
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix tx_status mechanism
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Maximilian Luz <luzmaximilian@gmail.com>
HID: surface-hid: Allow driver matching for target ID 1 devices
Maximilian Luz <luzmaximilian@gmail.com>
HID: surface-hid: Use correct event registry for managing HID events
Felix Fietkau <nbd@nbd.name>
mt76: mt7615: fix skb use-after-free on mac reset
Maximilian Luz <luzmaximilian@gmail.com>
platform/surface: aggregator_registry: Add support for Surface Laptop Studio
Lukas Wunner <lukas@wunner.de>
ifb: Depend on netfilter alternatively to tc
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Guoqing Jiang <guoqing.jiang@linux.dev>
md/raid1: only allocate write behind bio for WriteMostly device
Corey Minyard <cminyard@mvista.com>
ipmi:watchdog: Set panic count to proper value on a panic
Ondrej Mosnacek <omosnace@redhat.com>
selinux: fix race condition when computing ocontext SIDs
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Laurent Vivier <lvivier@redhat.com>
KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
Sean Christopherson <seanjc@google.com>
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
Sean Christopherson <seanjc@google.com>
KVM: x86/mmu: Drop a redundant, broken remote TLB flush
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
Peter Zijlstra <peterz@infradead.org>
x86/iopl: Fake iopl(3) CLI/STI usage
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix page stealing
yangerkun <yangerkun@huawei.com>
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
yangerkun <yangerkun@huawei.com>
ext4: ensure enough credits in ext4_ext_shift_path_extents
Shaoying Xu <shaoyi@amazon.com>
ext4: fix lazy initialization next schedule time computation in more granular unit
Eric Whitney <enwlinux@gmail.com>
Revert "ext4: enforce buffer head state assertion in ext4_da_map_blocks"
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Takashi Iwai <tiwai@suse.de>
ALSA: PCM: Fix NULL dereference at mmap checks
Takashi Iwai <tiwai@suse.de>
ALSA: pci: rme: Fix unaligned buffer addresses
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Free card instance properly at probe errors
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Jason Ormes <skryking@gmail.com>
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Kai-Heng Feng <kai.heng.feng@canonical.com>
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add quirk for ASUS UX550VE
Jaroslav Kysela <perex@perex.cz>
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jeremy Soller <jeremy@system76.com>
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
Johnathon Clark <john.clark@cantab.net>
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: Fix check_ext_ctrls
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Support dynamic resolution changes
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Do not override sizeimage for output format
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Helge Deller <deller@gmx.de>
parisc: Fix set_fixmap() on PA1.x CPUs
Pavel Begunkov <asml.silence@gmail.com>
io-wq: remove worker to owner tw dependency
Sungjong Seo <sj1557.seo@samsung.com>
exfat: fix incorrect loading of i_blocks for large files
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Derong Liu <derong.liu@mediatek.com>
mmc: mtk-sd: Add wait dma stop done flow
Ziyang Xuan <william.xuanziyang@huawei.com>
char: xillybus: fix msg_ep UAF in xillyusb_probe()
Ben Skeggs <bskeggs@redhat.com>
ce/gf100: fix incorrect CE0 address calculation on some GPUs
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix use after free in eh_abort path
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix crash in NVMe abort path
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
Ewan D. Milne <emilne@redhat.com>
scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: scsi_ioctl: Validate command size
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Johan Hovold <johan@kernel.org>
Input: iforce - fix control-message timeout
Nehal Bakulchandra Shah <Nehal-Bakulchandra.shah@amd.com>
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 +
.../devicetree/bindings/iio/dac/adi,ad5766.yaml | 2 +-
.../bindings/regulator/samsung,s5m8767.txt | 23 +-
Documentation/filesystems/fscrypt.rst | 10 +-
Makefile | 4 +-
arch/Kconfig | 3 +
arch/alpha/include/asm/processor.h | 2 +-
arch/alpha/kernel/process.c | 5 +-
arch/arc/include/asm/processor.h | 2 +-
arch/arc/kernel/stacktrace.c | 4 +-
arch/arm/Makefile | 22 +-
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/bcm4708-netgear-r6250.dts | 2 +-
arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts | 2 +-
arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts | 2 +-
arch/arm/boot/dts/bcm4709-linksys-ea9200.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r7000.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r8000.dts | 2 +-
arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts | 2 +-
arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts | 2 +-
arch/arm/boot/dts/bcm53016-meraki-mr32.dts | 2 +-
arch/arm/boot/dts/bcm94708.dts | 2 +-
arch/arm/boot/dts/bcm94709.dts | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/qcom-msm8974.dtsi | 4 +-
arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 8 +-
arch/arm/boot/dts/stm32mp151.dtsi | 16 +-
arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi | 2 +-
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 2 +-
arch/arm/include/asm/processor.h | 2 +-
arch/arm/kernel/process.c | 4 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mach-s3c/irq-s3c24xx.c | 22 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/kasan_init.c | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2 +-
.../boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi | 4 +-
.../boot/dts/amlogic/meson-g12b-odroid-n2.dtsi | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi | 4 +-
.../boot/dts/amlogic/meson-sm1-bananapi-m5.dts | 2 +-
.../boot/dts/amlogic/meson-sm1-khadas-vim3l.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-sm1-odroid.dtsi | 6 +-
arch/arm64/boot/dts/amlogic/meson-sm1-sei610.dts | 2 +-
arch/arm64/boot/dts/broadcom/bcm4908/bcm4908.dtsi | 2 +-
arch/arm64/boot/dts/qcom/msm8916.dtsi | 8 +-
arch/arm64/boot/dts/qcom/pm8916.dtsi | 1 -
arch/arm64/boot/dts/qcom/pmi8994.dtsi | 2 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-coachz.dtsi | 2 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-pompom.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sc7180.dtsi | 52 ++---
arch/arm64/boot/dts/qcom/sc7280.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sdm845.dtsi | 6 +-
.../arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 1 +
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
arch/arm64/boot/dts/ti/k3-j7200-main.dtsi | 6 +-
arch/arm64/boot/dts/ti/k3-j721e-main.dtsi | 16 +-
arch/arm64/include/asm/esr.h | 1 +
arch/arm64/include/asm/pgtable.h | 12 +-
arch/arm64/include/asm/processor.h | 2 +-
arch/arm64/kernel/cpufeature.c | 10 +-
arch/arm64/kernel/process.c | 4 +-
arch/arm64/kernel/vdso32/Makefile | 3 +-
arch/arm64/kvm/arm.c | 30 ++-
arch/arm64/kvm/hyp/hyp-entry.S | 2 +-
arch/arm64/kvm/hyp/nvhe/host.S | 2 +-
arch/arm64/mm/mmu.c | 5 +
arch/csky/include/asm/processor.h | 2 +-
arch/csky/kernel/stacktrace.c | 5 +-
arch/h8300/include/asm/processor.h | 2 +-
arch/h8300/kernel/process.c | 5 +-
arch/hexagon/include/asm/processor.h | 2 +-
arch/hexagon/kernel/process.c | 4 +-
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/include/asm/processor.h | 2 +-
arch/ia64/kernel/kprobes.c | 9 +-
arch/ia64/kernel/process.c | 5 +-
arch/m68k/Kconfig.machine | 1 +
arch/m68k/include/asm/processor.h | 2 +-
arch/m68k/kernel/process.c | 4 +-
arch/microblaze/include/asm/processor.h | 2 +-
arch/microblaze/kernel/process.c | 2 +-
arch/mips/Kbuild.platforms | 2 +-
arch/mips/Kconfig | 1 +
arch/mips/Makefile | 2 +
arch/mips/include/asm/cmpxchg.h | 5 +-
arch/mips/include/asm/mips-cm.h | 12 +-
arch/mips/include/asm/processor.h | 2 +-
arch/mips/kernel/mips-cm.c | 21 +-
arch/mips/kernel/process.c | 8 +-
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 -
arch/mips/lantiq/xway/dma.c | 23 +-
arch/nds32/include/asm/processor.h | 2 +-
arch/nds32/kernel/process.c | 7 +-
arch/nios2/include/asm/processor.h | 2 +-
arch/nios2/kernel/process.c | 5 +-
arch/openrisc/include/asm/processor.h | 2 +-
arch/openrisc/kernel/dma.c | 4 +-
arch/openrisc/kernel/process.c | 2 +-
arch/openrisc/kernel/smp.c | 6 +-
arch/parisc/include/asm/pgtable.h | 10 +-
arch/parisc/include/asm/processor.h | 2 +-
arch/parisc/kernel/cache.c | 4 +-
arch/parisc/kernel/entry.S | 2 +-
arch/parisc/kernel/process.c | 5 +-
arch/parisc/kernel/smp.c | 19 +-
arch/parisc/kernel/unwind.c | 21 +-
arch/parisc/kernel/vmlinux.lds.S | 3 +-
arch/parisc/mm/fixmap.c | 5 +-
arch/parisc/mm/init.c | 4 +-
arch/powerpc/Kconfig | 6 +-
arch/powerpc/include/asm/nohash/32/pgtable.h | 19 +-
arch/powerpc/include/asm/nohash/32/pte-8xx.h | 22 ++
arch/powerpc/include/asm/nohash/64/pgtable.h | 5 -
arch/powerpc/include/asm/nohash/pte-book3e.h | 18 +-
arch/powerpc/include/asm/paravirt.h | 18 +-
arch/powerpc/include/asm/processor.h | 2 +-
arch/powerpc/kernel/firmware.c | 7 +-
arch/powerpc/kernel/head_booke.h | 15 +-
arch/powerpc/kernel/interrupt.c | 2 +-
arch/powerpc/kernel/process.c | 9 +-
arch/powerpc/kvm/book3s_hv.c | 30 ++-
arch/powerpc/kvm/booke.c | 16 +-
arch/powerpc/lib/feature-fixups.c | 11 +
arch/powerpc/mm/mem.c | 2 +-
arch/powerpc/mm/nohash/tlb_low_64e.S | 8 +-
arch/powerpc/mm/pgtable_32.c | 2 +-
arch/powerpc/net/bpf_jit_comp.c | 2 +-
arch/powerpc/perf/power10-events-list.h | 8 +-
arch/powerpc/perf/power10-pmu.c | 44 ++--
arch/powerpc/platforms/44x/fsp2.c | 2 +
arch/powerpc/platforms/85xx/Makefile | 4 +-
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 7 +-
arch/powerpc/platforms/85xx/smp.c | 12 +-
arch/powerpc/platforms/book3s/vas-api.c | 4 +-
arch/powerpc/platforms/powernv/opal-prd.c | 12 +-
arch/powerpc/platforms/pseries/mobility.c | 34 +++
arch/powerpc/xmon/xmon.c | 3 +-
arch/riscv/include/asm/processor.h | 2 +-
arch/riscv/kernel/stacktrace.c | 12 +-
arch/s390/include/asm/processor.h | 2 +-
arch/s390/kernel/perf_cpum_cf.c | 4 +-
arch/s390/kernel/process.c | 4 +-
arch/s390/kernel/uv.c | 2 +-
arch/s390/kvm/priv.c | 2 +
arch/s390/kvm/pv.c | 21 +-
arch/s390/mm/gmap.c | 11 +-
arch/s390/mm/pgtable.c | 70 ++++--
arch/sh/include/asm/processor_32.h | 2 +-
arch/sh/kernel/cpu/fpu.c | 10 +-
arch/sh/kernel/process_32.c | 5 +-
arch/sparc/boot/Makefile | 8 +-
arch/sparc/include/asm/processor_32.h | 2 +-
arch/sparc/include/asm/processor_64.h | 2 +-
arch/sparc/kernel/process_32.c | 5 +-
arch/sparc/kernel/process_64.c | 5 +-
arch/um/include/asm/processor-generic.h | 2 +-
arch/um/kernel/process.c | 5 +-
arch/x86/Kconfig | 1 +
arch/x86/crypto/aesni-intel_glue.c | 2 +-
arch/x86/events/intel/core.c | 5 +-
arch/x86/events/intel/ds.c | 5 +-
arch/x86/events/intel/uncore_discovery.h | 2 +-
arch/x86/events/intel/uncore_snbep.c | 16 +-
arch/x86/hyperv/hv_init.c | 5 +-
arch/x86/include/asm/cpu_entry_area.h | 8 +-
arch/x86/include/asm/insn-eval.h | 1 +
arch/x86/include/asm/irq_stack.h | 37 ++-
arch/x86/include/asm/kvm_host.h | 2 +-
arch/x86/include/asm/mem_encrypt.h | 1 +
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/include/asm/processor.h | 3 +-
arch/x86/include/asm/stacktrace.h | 10 +
arch/x86/include/asm/traps.h | 6 +-
arch/x86/kernel/Makefile | 6 +
arch/x86/kernel/cc_platform.c | 69 ++++++
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 +++-
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/cpu/hygon.c | 2 +
arch/x86/kernel/cpu/mce/intel.c | 5 +-
arch/x86/kernel/dumpstack_64.c | 6 +
arch/x86/kernel/irq.c | 4 +-
arch/x86/kernel/process.c | 66 ++----
arch/x86/kernel/sev.c | 32 ---
arch/x86/kernel/traps.c | 60 +++--
arch/x86/kvm/cpuid.c | 47 ++--
arch/x86/kvm/mmu/mmu.c | 6 +-
arch/x86/kvm/vmx/nested.c | 103 ++++----
arch/x86/kvm/vmx/vmx.c | 68 +-----
arch/x86/kvm/vmx/vmx.h | 63 +++++
arch/x86/kvm/x86.c | 108 ++++++---
arch/x86/lib/insn-eval.c | 2 +-
arch/x86/lib/insn.c | 5 +-
arch/x86/mm/cpu_entry_area.c | 7 +
arch/x86/mm/fault.c | 20 +-
arch/x86/mm/mem_encrypt.c | 1 +
arch/x86/mm/mem_encrypt_identity.c | 9 +
arch/xtensa/include/asm/processor.h | 2 +-
arch/xtensa/kernel/process.c | 5 +-
block/blk-cgroup.c | 10 +
block/blk-mq.c | 5 +-
block/blk-wbt.c | 3 +
block/blk-zoned.c | 15 +-
block/blk.h | 6 +
block/genhd.c | 8 +-
block/ioctl.c | 24 +-
crypto/Kconfig | 2 +-
crypto/pcrypt.c | 12 +-
crypto/tcrypt.c | 5 +-
drivers/acpi/ac.c | 19 ++
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +-
drivers/acpi/acpica/hwxfsleep.c | 7 +
drivers/acpi/battery.c | 2 +-
drivers/acpi/glue.c | 25 ++
drivers/acpi/internal.h | 1 +
drivers/acpi/pmic/intel_pmic.c | 51 ++--
drivers/acpi/power.c | 86 +++----
drivers/acpi/resource.c | 56 ++++-
drivers/acpi/scan.c | 6 +
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 +
drivers/auxdisplay/ht16k33.c | 66 +++---
drivers/auxdisplay/img-ascii-lcd.c | 10 +
drivers/base/component.c | 5 +-
drivers/base/core.c | 4 +-
drivers/base/power/main.c | 93 +++++---
drivers/block/ataflop.c | 141 ++++++-----
drivers/block/floppy.c | 9 +-
drivers/block/nbd.c | 24 +-
drivers/block/zram/zram_drv.c | 2 +-
drivers/bluetooth/btmtkuart.c | 13 +-
drivers/bluetooth/hci_h5.c | 28 ++-
drivers/bus/ti-sysc.c | 65 +++++-
drivers/char/hw_random/mtk-rng.c | 9 +-
drivers/char/ipmi/ipmi_msghandler.c | 10 +-
drivers/char/ipmi/ipmi_watchdog.c | 25 +-
drivers/char/ipmi/kcs_bmc_serio.c | 4 +-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/char/tpm/tpm_tis_core.c | 26 ++-
drivers/char/tpm/tpm_tis_core.h | 4 +
drivers/char/tpm/tpm_tis_spi_main.c | 1 +
drivers/char/xillybus/xillyusb.c | 1 +
drivers/clk/at91/clk-master.c | 6 +-
drivers/clk/at91/clk-sam9x60-pll.c | 4 +-
drivers/clk/at91/pmc.c | 5 +
drivers/clk/mvebu/ap-cpu-clk.c | 14 +-
drivers/clocksource/Kconfig | 1 +
drivers/cpufreq/cpufreq.c | 7 +
drivers/cpufreq/intel_pstate.c | 35 ++-
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/caam/caampkc.c | 19 +-
drivers/crypto/caam/regs.h | 3 +
drivers/crypto/ccree/cc_driver.c | 3 +-
drivers/crypto/marvell/octeontx2/otx2_cptvf_algs.c | 1 +
drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.c | 31 +++
drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.h | 10 +
drivers/crypto/qat/qat_common/adf_accel_devices.h | 1 +
drivers/crypto/qat/qat_common/adf_init.c | 5 +
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 ++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +
drivers/crypto/s5p-sss.c | 2 +
drivers/cxl/pci.c | 2 +-
drivers/dma-buf/dma-buf.c | 153 ++++++------
drivers/dma/at_xdmac.c | 53 +++--
drivers/dma/bestcomm/ata.c | 2 +-
drivers/dma/bestcomm/bestcomm.c | 22 +-
drivers/dma/bestcomm/fec.c | 4 +-
drivers/dma/bestcomm/gen_bd.c | 4 +-
drivers/dma/dmaengine.h | 2 +-
drivers/dma/idxd/device.c | 3 +-
drivers/dma/idxd/dma.c | 5 +-
drivers/dma/idxd/init.c | 14 +-
drivers/dma/stm32-dma.c | 23 +-
drivers/dma/tegra210-adma.c | 2 +-
drivers/dma/ti/k3-udma.c | 32 ++-
drivers/edac/amd64_edac.c | 22 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci/psci_checker.c | 2 +-
drivers/firmware/qcom_scm.c | 2 +-
drivers/gpio/gpio-realtek-otto.c | 2 +-
drivers/gpu/drm/Kconfig | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 15 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 2 +-
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/uvd_v3_1.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v4_2.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v5_0.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v6_0.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v7_0.c | 32 +--
drivers/gpu/drm/amd/amdgpu/vce_v2_0.c | 19 +-
drivers/gpu/drm/amd/amdgpu/vce_v3_0.c | 28 +--
drivers/gpu/drm/amd/amdgpu/vce_v4_0.c | 44 ++--
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 8 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 17 +-
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 1 +
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 7 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 +-
drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c | 2 +-
.../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 2 +-
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 18 +-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3 +-
.../display/dc/dml/dcn20/display_rq_dlg_calc_20.c | 6 +-
.../display/dc/dml/dcn20/display_rq_dlg_calc_20.h | 4 +-
.../dc/dml/dcn20/display_rq_dlg_calc_20v2.c | 6 +-
.../dc/dml/dcn20/display_rq_dlg_calc_20v2.h | 4 +-
.../display/dc/dml/dcn21/display_rq_dlg_calc_21.c | 62 ++---
.../display/dc/dml/dcn21/display_rq_dlg_calc_21.h | 4 +-
.../display/dc/dml/dcn30/display_rq_dlg_calc_30.c | 72 +++---
.../display/dc/dml/dcn30/display_rq_dlg_calc_30.h | 4 +-
.../display/dc/dml/dcn31/display_rq_dlg_calc_31.c | 68 +++---
.../display/dc/dml/dcn31/display_rq_dlg_calc_31.h | 4 +-
.../gpu/drm/amd/display/dc/dml/display_mode_lib.h | 4 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu10_hwmgr.c | 8 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 10 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu8_hwmgr.c | 2 +
.../gpu/drm/amd/pm/powerplay/hwmgr/smu_helper.h | 13 ++
.../gpu/drm/amd/pm/powerplay/hwmgr/vega10_hwmgr.c | 12 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/vega12_hwmgr.c | 4 +
.../gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c | 14 +-
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 89 +++----
drivers/gpu/drm/bridge/analogix/anx7625.c | 12 +-
drivers/gpu/drm/bridge/ite-it66121.c | 21 +-
drivers/gpu/drm/bridge/lontium-lt9611uxc.c | 9 +-
drivers/gpu/drm/bridge/nwl-dsi.c | 35 +++
drivers/gpu/drm/drm_panel_orientation_quirks.c | 35 ++-
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/i915/display/intel_fb.c | 5 +-
drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c | 2 +-
drivers/gpu/drm/imx/imx-drm-core.c | 2 -
drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 6 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4 +
drivers/gpu/drm/msm/dsi/dsi.h | 2 +
drivers/gpu/drm/msm/dsi/dsi_host.c | 72 +++---
drivers/gpu/drm/msm/dsi/dsi_manager.c | 16 ++
drivers/gpu/drm/msm/msm_gem.c | 5 +-
drivers/gpu/drm/msm/msm_gpu.c | 2 +-
drivers/gpu/drm/msm/msm_submitqueue.c | 1 +
drivers/gpu/drm/nouveau/nouveau_gem.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_svm.c | 4 +
drivers/gpu/drm/nouveau/nvkm/engine/ce/gt215.c | 2 +-
drivers/gpu/drm/nouveau/nvkm/engine/device/base.c | 3 +-
drivers/gpu/drm/radeon/radeon_gem.c | 2 +-
drivers/gpu/drm/sun4i/sun8i_csc.h | 4 +-
drivers/gpu/drm/ttm/ttm_bo_vm.c | 99 +-------
drivers/gpu/drm/v3d/v3d_gem.c | 4 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 8 +-
drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 -
drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 72 +-----
drivers/gpu/drm/vmwgfx/vmwgfx_ttm_glue.c | 3 -
drivers/hid/hid-u2fzero.c | 10 +-
drivers/hid/surface-hid/surface_hid.c | 4 +-
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +-
drivers/hwtracing/coresight/coresight-cti-core.c | 2 +-
drivers/hwtracing/coresight/coresight-trbe.c | 10 +-
drivers/i2c/busses/i2c-i801.c | 5 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/accel/st_accel_i2c.c | 4 +-
drivers/iio/accel/st_accel_spi.c | 4 +-
drivers/iio/adc/ti-tsc2046.c | 2 +-
drivers/iio/dac/ad5446.c | 9 +-
drivers/iio/dac/ad5766.c | 6 +-
drivers/iio/dac/ad5770r.c | 2 +-
drivers/iio/gyro/st_gyro_i2c.c | 4 +-
drivers/iio/gyro/st_gyro_spi.c | 4 +-
drivers/iio/imu/adis.c | 4 +-
drivers/iio/industrialio-buffer.c | 28 ++-
drivers/iio/industrialio-core.c | 9 +-
drivers/iio/magnetometer/st_magn_i2c.c | 4 +-
drivers/iio/magnetometer/st_magn_spi.c | 4 +-
drivers/iio/pressure/st_pressure_i2c.c | 4 +-
drivers/iio/pressure/st_pressure_spi.c | 8 +-
drivers/infiniband/core/uverbs_cmd.c | 3 -
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 +-
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/joystick/iforce/iforce-usb.c | 2 +-
drivers/input/misc/ariel-pwrbutton.c | 7 +
drivers/input/mouse/elantech.c | 13 ++
drivers/input/serio/i8042-x86ia64io.h | 14 ++
drivers/input/touchscreen/st1232.c | 2 +-
drivers/iommu/dma-iommu.c | 52 ++---
drivers/iommu/mtk_iommu.c | 4 +-
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-sifive-plic.c | 8 +-
drivers/mailbox/mtk-cmdq-mailbox.c | 11 +-
drivers/md/bcache/btree.c | 2 +-
drivers/md/bcache/super.c | 2 +-
drivers/md/md.c | 11 +-
drivers/md/raid1.c | 2 +-
drivers/media/common/videobuf2/videobuf2-core.c | 42 ++--
.../media/common/videobuf2/videobuf2-dma-contig.c | 39 ++--
drivers/media/common/videobuf2/videobuf2-dma-sg.c | 35 +--
drivers/media/common/videobuf2/videobuf2-vmalloc.c | 30 +--
drivers/media/dvb-frontends/mn88443x.c | 18 +-
drivers/media/i2c/Kconfig | 1 +
drivers/media/i2c/imx258.c | 12 +-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++-
drivers/media/i2c/tda1997x.c | 8 +-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/ivtv/ivtvfb.c | 4 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++-
drivers/media/platform/allegro-dvt/allegro-core.c | 9 +
drivers/media/platform/atmel/atmel-isc-base.c | 25 +-
drivers/media/platform/atmel/atmel-isc.h | 2 +
drivers/media/platform/atmel/atmel-sama5d2-isc.c | 39 ++--
drivers/media/platform/atmel/atmel-sama7g5-isc.c | 22 +-
drivers/media/platform/imx-jpeg/mxc-jpeg.c | 6 +
drivers/media/platform/meson/ge2d/ge2d.c | 6 +-
drivers/media/platform/mtk-vcodec/mtk_vcodec_enc.c | 8 +-
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/qcom/venus/pm_helpers.c | 8 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/rcar-vin/rcar-dma.c | 3 +-
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/platform/stm32/stm32-dcmi.c | 19 +-
.../media/platform/sunxi/sun6i-csi/sun6i_video.c | 6 +-
drivers/media/radio/radio-wl1273.c | 2 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ir_toy.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/spi/cxd2880-spi.c | 2 +-
drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/tm6000/tm6000-video.c | 3 +-
drivers/media/usb/ttusb-dec/ttusb_dec.c | 10 +-
drivers/media/usb/uvc/uvc_driver.c | 7 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 +
drivers/media/v4l2-core/v4l2-ioctl.c | 67 ++++--
drivers/memory/fsl_ifc.c | 13 +-
drivers/memory/renesas-rpc-if.c | 113 ++++++---
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mfd/Kconfig | 1 +
drivers/mfd/altera-sysmgr.c | 2 +-
drivers/mfd/dln2.c | 18 ++
drivers/mfd/mfd-core.c | 2 +
drivers/mfd/motorola-cpcap.c | 8 +
drivers/mfd/sprd-sc27xx-spi.c | 7 +
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/moxart-mmc.c | 29 ++-
drivers/mmc/host/mtk-sd.c | 5 +
drivers/mmc/host/mxs-mmc.c | 10 +
drivers/mmc/host/sdhci-omap.c | 18 +-
drivers/most/most_usb.c | 5 +-
drivers/mtd/mtdcore.c | 4 +-
drivers/mtd/nand/raw/ams-delta.c | 12 +-
drivers/mtd/nand/raw/arasan-nand-controller.c | 15 ++
drivers/mtd/nand/raw/au1550nd.c | 12 +-
drivers/mtd/nand/raw/fsmc_nand.c | 4 +-
drivers/mtd/nand/raw/gpio.c | 12 +-
drivers/mtd/nand/raw/intel-nand-controller.c | 5 +
drivers/mtd/nand/raw/mpc5121_nfc.c | 12 +-
drivers/mtd/nand/raw/orion_nand.c | 12 +-
drivers/mtd/nand/raw/pasemi_nand.c | 12 +-
drivers/mtd/nand/raw/plat_nand.c | 12 +-
drivers/mtd/nand/raw/socrates_nand.c | 12 +-
drivers/mtd/nand/raw/xway_nand.c | 12 +-
drivers/mtd/spi-nor/controllers/hisi-sfc.c | 1 -
drivers/net/Kconfig | 2 +-
drivers/net/bonding/bond_sysfs_slave.c | 36 +--
drivers/net/can/dev/bittiming.c | 2 +-
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 6 +-
drivers/net/can/usb/etas_es58x/es58x_core.c | 6 +-
drivers/net/can/usb/peak_usb/pcan_usb.c | 17 +-
drivers/net/dsa/mv88e6xxx/chip.c | 5 +-
drivers/net/dsa/ocelot/felix.c | 9 +-
drivers/net/dsa/rtl8366.c | 2 +-
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 +
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 5 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c | 13 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.h | 13 --
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
.../chelsio/inline_crypto/chtls/chtls_cm.c | 2 +-
.../chelsio/inline_crypto/chtls/chtls_cm.h | 2 +-
drivers/net/ethernet/dec/tulip/winbond-840.c | 2 +-
drivers/net/ethernet/fealnx.c | 2 +-
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18 +-
drivers/net/ethernet/google/gve/gve.h | 17 +-
drivers/net/ethernet/google/gve/gve_adminq.h | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 48 +++-
drivers/net/ethernet/google/gve/gve_rx.c | 7 +-
drivers/net/ethernet/google/gve/gve_tx.c | 23 +-
drivers/net/ethernet/google/gve/gve_tx_dqo.c | 84 +++----
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 20 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 10 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 6 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 77 +++---
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.h | 4 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 10 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 4 +-
drivers/net/ethernet/ibm/ibmvnic.c | 21 +-
drivers/net/ethernet/intel/ice/ice.h | 7 +-
drivers/net/ethernet/intel/ice/ice_base.c | 2 +-
drivers/net/ethernet/intel/ice/ice_devlink.c | 109 ++++++---
drivers/net/ethernet/intel/ice/ice_devlink.h | 6 +-
drivers/net/ethernet/intel/ice/ice_lib.c | 3 +-
drivers/net/ethernet/intel/ice/ice_main.c | 4 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 22 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.h | 9 +
drivers/net/ethernet/intel/igc/igc_ptp.c | 2 +-
drivers/net/ethernet/litex/litex_liteeth.c | 1 -
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 38 +--
drivers/net/ethernet/marvell/octeontx2/Kconfig | 1 +
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 78 ++++---
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 18 +-
drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +
.../ethernet/mellanox/mlx5/core/sf/dev/driver.c | 2 +
.../net/ethernet/netronome/nfp/nfp_net_common.c | 8 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 12 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 2 -
drivers/net/ethernet/ti/cpsw_ale.c | 6 +-
drivers/net/ethernet/ti/davinci_emac.c | 16 +-
drivers/net/ifb.c | 2 +
drivers/net/phy/micrel.c | 9 +-
drivers/net/phy/phy.c | 7 +-
drivers/net/phy/phylink.c | 7 +-
drivers/net/vrf.c | 28 ++-
drivers/net/wireless/ath/ath10k/core.c | 11 +-
drivers/net/wireless/ath/ath10k/coredump.c | 11 +-
drivers/net/wireless/ath/ath10k/coredump.h | 7 +
drivers/net/wireless/ath/ath10k/mac.c | 45 +++-
drivers/net/wireless/ath/ath10k/qmi.c | 3 +-
drivers/net/wireless/ath/ath10k/sdio.c | 5 +-
drivers/net/wireless/ath/ath10k/snoc.c | 77 ++++++
drivers/net/wireless/ath/ath10k/snoc.h | 5 +
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.c | 4 +
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath11k/dbring.c | 16 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 13 +-
drivers/net/wireless/ath/ath11k/mac.c | 2 +-
drivers/net/wireless/ath/ath11k/qmi.c | 4 +-
drivers/net/wireless/ath/ath11k/reg.c | 11 +-
drivers/net/wireless/ath/ath11k/reg.h | 2 +-
drivers/net/wireless/ath/ath11k/wmi.c | 40 ++--
drivers/net/wireless/ath/ath11k/wmi.h | 3 +-
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +-
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 ++--
drivers/net/wireless/ath/wcn36xx/hal.h | 32 +++
drivers/net/wireless/ath/wcn36xx/main.c | 21 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 126 +++++++++-
drivers/net/wireless/ath/wcn36xx/smd.h | 1 +
drivers/net/wireless/ath/wcn36xx/txrx.c | 64 ++---
drivers/net/wireless/ath/wcn36xx/txrx.h | 3 +-
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10 +
drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 13 +-
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 5 +-
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 6 +-
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +--
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 ++-
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
drivers/net/wireless/mediatek/mt76/debugfs.c | 10 +-
drivers/net/wireless/mediatek/mt76/mt76.h | 8 +-
.../net/wireless/mediatek/mt76/mt7615/debugfs.c | 29 ++-
drivers/net/wireless/mediatek/mt76/mt7615/init.c | 6 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 60 ++---
drivers/net/wireless/mediatek/mt76/mt7615/main.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7615/mcu.c | 18 +-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 30 ++-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 8 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13 +-
drivers/net/wireless/mediatek/mt76/mt7915/init.c | 10 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.h | 3 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 22 +-
.../net/wireless/mediatek/mt76/mt7921/debugfs.c | 36 ++-
drivers/net/wireless/mediatek/mt76/mt7921/init.c | 13 ++
drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 68 +++++-
drivers/net/wireless/mediatek/mt76/mt7921/mac.h | 8 +
drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 22 +-
drivers/net/wireless/mediatek/mt76/mt7921/mcu.h | 10 +-
drivers/net/wireless/mediatek/mt76/mt7921/regs.h | 8 +-
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +-
drivers/net/wireless/realtek/rtw88/fw.c | 7 +-
drivers/net/wireless/realtek/rtw88/reg.h | 1 +
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 ++----
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 +-
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +
drivers/net/wireless/rsi/rsi_main.h | 15 +-
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvdimm/btt.c | 1 -
drivers/nvdimm/pmem.c | 13 +-
drivers/nvme/host/multipath.c | 9 +-
drivers/nvme/host/rdma.c | 2 +
drivers/nvme/target/configfs.c | 2 +
drivers/nvme/target/rdma.c | 24 ++
drivers/nvme/target/tcp.c | 16 ++
drivers/of/unittest.c | 16 +-
drivers/opp/of.c | 2 +-
drivers/pci/controller/cadence/pci-j721e.c | 2 +-
drivers/pci/controller/cadence/pcie-cadence-plat.c | 2 +
drivers/pci/controller/dwc/pcie-uniphier.c | 26 +--
drivers/pci/controller/pci-aardvark.c | 251 +++++++++++++++++---
drivers/pci/msi.c | 36 +--
drivers/pci/pci-bridge-emul.c | 13 ++
drivers/pci/pci.c | 8 +
drivers/pci/quirks.c | 1 +
drivers/phy/microchip/sparx5_serdes.c | 4 +-
drivers/phy/qualcomm/phy-qcom-qmp.c | 2 +-
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 +-
drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c | 2 +-
drivers/phy/ti/phy-gmii-sel.c | 2 +
drivers/pinctrl/core.c | 2 +
drivers/pinctrl/pinctrl-equilibrium.c | 7 +-
drivers/pinctrl/renesas/core.c | 2 +-
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 2 +-
.../platform/surface/surface_aggregator_registry.c | 54 +++++
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 +-
drivers/power/reset/at91-reset.c | 4 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17040_battery.c | 2 +
drivers/power/supply/max17042_battery.c | 12 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 +-
drivers/remoteproc/imx_rproc.c | 41 ++--
drivers/remoteproc/remoteproc_core.c | 8 +-
drivers/remoteproc/remoteproc_coredump.c | 2 +-
drivers/remoteproc/remoteproc_elf_loader.c | 4 +-
drivers/rtc/rtc-ds1302.c | 7 +
drivers/rtc/rtc-ds1390.c | 7 +
drivers/rtc/rtc-mcp795.c | 7 +
drivers/rtc/rtc-pcf2123.c | 9 +
drivers/rtc/rtc-rv3032.c | 4 +-
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/s390/cio/device_ops.c | 12 +-
drivers/s390/crypto/ap_queue.c | 2 +
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/hosts.c | 1 +
drivers/scsi/lpfc/lpfc_els.c | 12 +-
drivers/scsi/lpfc/lpfc_hbadisc.c | 10 +-
drivers/scsi/lpfc/lpfc_nvme.c | 5 +-
drivers/scsi/lpfc/lpfc_scsi.c | 7 +
drivers/scsi/lpfc/lpfc_sli.c | 101 ++++++--
drivers/scsi/megaraid/megaraid_sas_fusion.c | 11 +-
drivers/scsi/pm8001/pm8001_hwi.c | 2 +-
drivers/scsi/pm8001/pm8001_sas.h | 3 +-
drivers/scsi/pm8001/pm80xx_hwi.c | 53 ++++-
drivers/scsi/qedf/qedf_main.c | 2 +
drivers/scsi/qla2xxx/qla_attr.c | 24 +-
drivers/scsi/qla2xxx/qla_edif.c | 259 ++++++++++++---------
drivers/scsi/qla2xxx/qla_edif.h | 3 +-
drivers/scsi/qla2xxx/qla_edif_bsg.h | 2 +-
drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
drivers/scsi/qla2xxx/qla_init.c | 77 ++++--
drivers/scsi/qla2xxx/qla_mr.c | 23 --
drivers/scsi/qla2xxx/qla_nvme.c | 14 +-
drivers/scsi/qla2xxx/qla_os.c | 37 +--
drivers/scsi/qla2xxx/qla_target.c | 1 +
drivers/scsi/scsi_error.c | 25 ++
drivers/scsi/scsi_ioctl.c | 2 +
drivers/scsi/scsi_lib.c | 3 +-
drivers/scsi/scsi_sysfs.c | 1 +
drivers/scsi/ufs/ufshcd-pltfrm.c | 4 +-
drivers/scsi/ufs/ufshcd.c | 186 +--------------
drivers/scsi/ufs/ufshcd.h | 14 --
drivers/scsi/ufs/ufshpb.c | 31 ++-
drivers/scsi/ufs/ufshpb.h | 1 -
drivers/soc/fsl/dpaa2-console.c | 1 +
drivers/soc/fsl/dpio/dpio-service.c | 2 +-
drivers/soc/fsl/dpio/qbman-portal.c | 9 +-
drivers/soc/qcom/apr.c | 2 +
drivers/soc/qcom/llcc-qcom.c | 2 +-
drivers/soc/qcom/rpmhpd.c | 20 +-
drivers/soc/qcom/socinfo.c | 4 +-
drivers/soc/samsung/Kconfig | 1 +
drivers/soc/tegra/pmc.c | 2 +-
drivers/soundwire/bus.c | 2 +-
drivers/soundwire/debugfs.c | 2 +-
drivers/spi/atmel-quadspi.c | 2 +-
drivers/spi/spi-bcm-qspi.c | 8 +-
drivers/spi/spi-mtk-nor.c | 2 +-
drivers/spi/spi-rpc-if.c | 4 +-
drivers/spi/spi-stm32-qspi.c | 2 +-
drivers/spi/spi.c | 41 ++++
drivers/staging/ks7010/Kconfig | 3 +
drivers/staging/media/atomisp/i2c/atomisp-lm3554.c | 37 +--
drivers/staging/media/imx/imx-media-dev-common.c | 2 +
drivers/staging/media/ipu3/ipu3-v4l2.c | 7 +-
drivers/staging/media/rkvdec/rkvdec-h264.c | 5 +-
drivers/staging/media/rkvdec/rkvdec.c | 40 ++--
drivers/staging/most/dim2/Makefile | 2 +-
drivers/staging/most/dim2/dim2.c | 24 +-
drivers/staging/most/dim2/sysfs.c | 49 ----
drivers/staging/most/dim2/sysfs.h | 11 -
drivers/staging/r8188eu/core/rtw_mlme.c | 2 +
drivers/target/target_core_tmr.c | 17 +-
drivers/target/target_core_transport.c | 30 ++-
.../intel/int340x_thermal/processor_thermal_mbox.c | 1 +
drivers/thermal/qcom/Kconfig | 2 +-
drivers/thermal/qcom/tsens.c | 29 ++-
drivers/thermal/thermal_core.c | 16 +-
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 21 +-
drivers/tty/serial/cpm_uart/cpm_uart_core.c | 2 +
drivers/tty/serial/imx.c | 4 +-
drivers/tty/serial/serial_core.c | 16 +-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/usb/chipidea/core.c | 23 +-
drivers/usb/dwc2/drd.c | 24 +-
drivers/usb/dwc3/core.h | 1 +
drivers/usb/dwc3/gadget.c | 8 +-
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-pci.c | 16 ++
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/Kconfig | 2 +-
drivers/usb/serial/keyspan.c | 15 +-
drivers/usb/typec/Kconfig | 4 +-
drivers/vdpa/mlx5/net/mlx5_vnet.c | 1 -
drivers/video/backlight/backlight.c | 6 -
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/video/fbdev/efifb.c | 21 +-
drivers/virtio/virtio_ring.c | 14 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/xen/balloon.c | 86 +++++--
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/reflink.c | 2 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 14 +-
fs/ceph/mdsmap.c | 4 -
fs/cifs/cifsglob.h | 3 +-
fs/cifs/connect.c | 21 +-
fs/cifs/file.c | 35 ++-
fs/cifs/fs_context.c | 10 +
fs/cifs/fs_context.h | 1 +
fs/crypto/fscrypt_private.h | 5 +-
fs/crypto/hkdf.c | 11 +-
fs/crypto/keysetup.c | 57 ++++-
fs/erofs/decompressor.c | 1 -
fs/erofs/zdata.c | 13 +-
fs/erofs/zpvec.h | 13 +-
fs/exfat/inode.c | 2 +-
fs/ext4/extents.c | 63 +++--
fs/ext4/inode.c | 15 +-
fs/ext4/super.c | 9 +-
fs/f2fs/compress.c | 1 +
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/f2fs/super.c | 2 +
fs/fuse/dev.c | 14 +-
fs/gfs2/glock.c | 24 +-
fs/io-wq.c | 88 +++++--
fs/io_uring.c | 4 +-
fs/jfs/jfs_mount.c | 51 ++--
fs/ksmbd/Kconfig | 1 +
fs/ksmbd/server.c | 1 +
fs/ksmbd/smb2misc.c | 6 +-
fs/ksmbd/smb2pdu.c | 11 +-
fs/nfs/dir.c | 9 +-
fs/nfs/direct.c | 2 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/inode.c | 13 +-
fs/nfs/nfs3xdr.c | 2 +-
fs/nfs/nfs4idmap.c | 2 +-
fs/nfs/nfs4proc.c | 15 +-
fs/nfs/pnfs.h | 2 +-
fs/nfs/pnfs_nfs.c | 6 +-
fs/nfs/proc.c | 2 +-
fs/nfs/write.c | 26 +--
fs/ocfs2/file.c | 8 +-
fs/open.c | 16 +-
fs/orangefs/dcache.c | 4 +-
fs/overlayfs/copy_up.c | 23 +-
fs/overlayfs/file.c | 16 +-
fs/overlayfs/inode.c | 5 +-
fs/proc/stat.c | 4 +-
fs/proc/uptime.c | 14 +-
fs/quota/quota_tree.c | 15 ++
fs/tracefs/inode.c | 3 +-
include/drm/ttm/ttm_bo_api.h | 3 +-
include/linux/blkdev.h | 2 -
include/linux/bpf-cgroup.h | 1 +
include/linux/cc_platform.h | 88 +++++++
include/linux/console.h | 2 +
include/linux/cpufreq.h | 2 +-
include/linux/dma-buf.h | 2 +-
include/linux/dsa/ocelot.h | 1 +
include/linux/ethtool_netlink.h | 3 +
include/linux/filter.h | 5 +-
include/linux/fortify-string.h | 5 +-
include/linux/kernel_stat.h | 1 +
include/linux/libata.h | 2 +-
include/linux/msi.h | 2 +-
include/linux/nfs_fs.h | 1 +
include/linux/posix-timers.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched.h | 1 +
include/linux/sched/task.h | 3 +-
include/linux/sched/task_stack.h | 4 +
include/linux/seq_file.h | 2 +-
include/linux/signal_types.h | 3 +
include/linux/skmsg.h | 18 +-
include/linux/surface_aggregator/controller.h | 4 +-
include/linux/tpm.h | 1 +
include/media/videobuf2-core.h | 37 +--
include/memory/renesas-rpc-if.h | 1 +
include/net/inet_connection_sock.h | 2 +-
include/net/llc.h | 4 +-
include/net/neighbour.h | 12 +-
include/net/sch_generic.h | 4 +
include/net/sctp/sctp.h | 7 +-
include/net/sock.h | 2 +-
include/net/strparser.h | 20 +-
include/net/tcp.h | 17 +-
include/rdma/ib_verbs.h | 7 +-
include/scsi/scsi_cmnd.h | 2 +-
include/scsi/scsi_host.h | 1 +
include/sound/soc-topology.h | 3 +-
include/uapi/asm-generic/signal-defs.h | 1 +
include/uapi/linux/ethtool_netlink.h | 4 +-
include/uapi/linux/pci_regs.h | 6 +
init/main.c | 4 +-
kernel/bpf/trampoline.c | 6 +-
kernel/bpf/verifier.c | 4 +-
kernel/cgroup/cgroup.c | 31 ++-
kernel/cgroup/rstat.c | 2 -
kernel/debug/kdb/kdb_bt.c | 16 +-
kernel/debug/kdb/kdb_main.c | 37 +--
kernel/debug/kdb/kdb_private.h | 4 +-
kernel/debug/kdb/kdb_support.c | 118 ++--------
kernel/fork.c | 3 +-
kernel/irq/msi.c | 4 +-
kernel/kprobes.c | 3 +-
kernel/locking/lockdep.c | 4 +-
kernel/locking/rwsem.c | 53 +++--
kernel/power/energy_model.c | 23 +-
kernel/power/swap.c | 7 +-
kernel/rcu/rcutorture.c | 48 +++-
kernel/rcu/tasks.h | 3 +-
kernel/rcu/tree.c | 2 +-
kernel/rcu/tree_exp.h | 2 +-
kernel/rcu/tree_plugin.h | 8 +-
kernel/sched/core.c | 62 +++--
kernel/scs.c | 1 +
kernel/signal.c | 26 +--
kernel/time/posix-cpu-timers.c | 19 +-
kernel/trace/ftrace.c | 23 +-
kernel/trace/ring_buffer.c | 5 +
kernel/trace/trace.c | 73 +++---
kernel/trace/trace.h | 3 +
kernel/trace/trace_boot.c | 4 +
kernel/trace/trace_dynevent.c | 2 +-
kernel/trace/trace_event_perf.c | 6 +-
kernel/trace/trace_events.c | 42 ++--
kernel/trace/trace_events_synth.c | 4 +-
kernel/trace/trace_functions_graph.c | 2 +-
kernel/trace/trace_hwlat.c | 6 +-
kernel/trace/trace_kprobe.c | 8 +-
kernel/trace/trace_osnoise.c | 14 +-
kernel/trace/trace_printk.c | 2 +-
kernel/trace/trace_recursion_record.c | 4 +-
kernel/trace/trace_stack.c | 6 +-
kernel/trace/trace_stat.c | 6 +-
kernel/trace/trace_uprobe.c | 4 +-
kernel/trace/tracing_map.c | 40 ++--
kernel/workqueue.c | 15 +-
lib/crypto/sm4.c | 4 +-
lib/decompress_unxz.c | 2 +-
lib/dynamic_debug.c | 12 +
lib/iov_iter.c | 5 +-
lib/test_bpf.c | 37 ++-
lib/xz/xz_dec_lzma2.c | 21 +-
lib/xz/xz_dec_stream.c | 6 +-
mm/filemap.c | 1 -
mm/memcontrol.c | 27 +--
mm/oom_kill.c | 23 +-
mm/zsmalloc.c | 7 +-
net/8021q/vlan.c | 3 -
net/8021q/vlan_dev.c | 3 +
net/9p/client.c | 2 +
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/sco.c | 36 +--
net/bridge/br_private.h | 2 +
net/can/j1939/main.c | 7 +
net/can/j1939/transport.c | 11 +
net/core/dev.c | 2 +
net/core/filter.c | 58 ++++-
net/core/neighbour.c | 48 ++--
net/core/net-sysfs.c | 55 +++++
net/core/net_namespace.c | 4 +
net/core/skmsg.c | 43 +++-
net/core/stream.c | 3 -
net/dccp/dccp.h | 2 +-
net/dccp/proto.c | 14 +-
net/dsa/switch.c | 4 +-
net/dsa/tag_ocelot.c | 3 +
net/ethtool/pause.c | 3 +-
net/ipv4/af_inet.c | 16 +-
net/ipv4/inet_connection_sock.c | 4 +-
net/ipv4/inet_hashtables.c | 2 +-
net/ipv4/proc.c | 2 +-
net/ipv4/tcp.c | 40 +++-
net/ipv4/tcp_bpf.c | 48 +++-
net/ipv6/addrconf.c | 3 +
net/ipv6/af_inet6.c | 21 +-
net/ipv6/udp.c | 2 +-
net/mac80211/s1g.c | 8 +-
net/mctp/af_mctp.c | 13 ++
net/mptcp/options.c | 8 +-
net/mptcp/protocol.c | 43 +++-
net/netfilter/nf_conntrack_proto_udp.c | 7 +-
net/netfilter/nfnetlink_queue.c | 2 +-
net/netfilter/nft_dynset.c | 11 +-
net/rxrpc/rtt.c | 2 +-
net/sched/sch_generic.c | 9 +
net/sched/sch_mq.c | 24 ++
net/sched/sch_mqprio.c | 23 ++
net/sched/sch_taprio.c | 27 ++-
net/sctp/output.c | 13 +-
net/sctp/transport.c | 11 +-
net/smc/af_smc.c | 18 +-
net/strparser/strparser.c | 10 +-
net/sunrpc/addr.c | 40 ++--
net/sunrpc/xprt.c | 28 +--
net/vmw_vsock/af_vsock.c | 2 +
net/wireless/core.c | 10 +
samples/bpf/xdp_redirect_cpu_user.c | 6 +-
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/integrity/ima/ima_policy.c | 27 ++-
security/selinux/ss/services.c | 162 ++++++-------
security/smack/smackfs.c | 11 +-
sound/core/memalloc.c | 7 +-
sound/core/oss/mixer_oss.c | 44 +++-
sound/core/timer.c | 17 +-
sound/firewire/oxfw/oxfw-stream.c | 7 +-
sound/firewire/oxfw/oxfw.c | 8 +
sound/firewire/oxfw/oxfw.h | 5 +
sound/pci/hda/hda_intel.c | 52 ++---
sound/pci/hda/patch_realtek.c | 36 +++
sound/pci/rme9652/hdsp.c | 41 ++--
sound/pci/rme9652/rme9652.c | 41 ++--
sound/soc/codecs/cs42l42.c | 27 ++-
sound/soc/codecs/wcd9335.c | 2 +-
sound/soc/sh/rcar/core.c | 1 +
sound/soc/sof/topology.c | 9 +
sound/soc/tegra/tegra_asoc_machine.c | 60 ++++-
sound/soc/tegra/tegra_asoc_machine.h | 1 +
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/card.h | 1 +
sound/usb/endpoint.c | 7 +-
sound/usb/format.c | 1 +
sound/usb/line6/driver.c | 14 +-
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/arch/x86/lib/insn.c | 5 +-
tools/bpf/bpftool/prog.c | 16 +-
tools/include/asm-generic/unaligned.h | 23 ++
tools/lib/bpf/bpf.c | 4 +-
tools/lib/bpf/bpf_core_read.h | 2 +-
tools/lib/bpf/btf.c | 22 +-
tools/lib/bpf/libbpf.c | 8 +-
tools/lib/bpf/skel_internal.h | 6 +-
tools/objtool/arch/x86/decode.c | 20 ++
tools/objtool/check.c | 159 +++++++------
tools/objtool/include/objtool/arch.h | 1 +
tools/perf/util/bpf-event.c | 4 +-
tools/perf/util/intel-pt-decoder/Build | 2 +
.../testing/selftests/bpf/prog_tests/perf_buffer.c | 4 +-
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 4 +-
tools/testing/selftests/bpf/prog_tests/test_ima.c | 3 +-
tools/testing/selftests/bpf/progs/strobemeta.h | 4 +-
tools/testing/selftests/bpf/test_progs.c | 4 +-
.../selftests/bpf/test_xdp_redirect_multi.sh | 62 ++---
.../testing/selftests/bpf/verifier/array_access.c | 2 +-
tools/testing/selftests/bpf/xdp_redirect_multi.c | 4 +-
tools/testing/selftests/core/close_range_test.c | 2 +-
tools/testing/selftests/kvm/lib/x86_64/svm.c | 14 +-
.../selftests/kvm/x86_64/mmio_warning_test.c | 2 +-
tools/testing/selftests/net/Makefile | 9 +-
tools/testing/selftests/net/fib_nexthops.sh | 1 +
.../selftests/net/forwarding/bridge_igmp.sh | 12 +-
.../testing/selftests/net/forwarding/bridge_mld.sh | 12 +-
tools/testing/selftests/net/gre_gso.sh | 9 +-
tools/testing/selftests/net/mptcp/mptcp_join.sh | 2 +-
tools/testing/selftests/net/udpgso_bench_rx.c | 11 +-
tools/testing/selftests/sched/cs_prctl_test.c | 28 ++-
tools/testing/selftests/x86/iopl.c | 78 +++++--
tools/tracing/latency/latency-collector.c | 2 +-
1031 files changed, 8927 insertions(+), 5210 deletions(-)
^ permalink raw reply [relevance 1%]
* [PATCH 5.10 000/577] 5.10.80-rc3 review
@ 2021-11-17 10:16 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-17 10:16 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.10.80 release.
There are 577 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Fri, 19 Nov 2021 10:11:34 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.80-rc3.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.10.80-rc3
Borislav Petkov <bp@suse.de>
x86/sev: Make the #VC exception stacks part of the default stacks storage
Tom Lendacky <thomas.lendacky@amd.com>
x86/sev: Add an x86 version of cc_platform_has()
Tom Lendacky <thomas.lendacky@amd.com>
arch/cc: Introduce a function to check for confidential computing features
Dan Carpenter <dan.carpenter@oracle.com>
ataflop: fix off by one in ataflop_probe()
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix also no-alu32 strobemeta selftest
Colin Ian King <colin.king@canonical.com>
mmc: moxart: Fix null pointer dereference on pointer host
Arnd Bergmann <arnd@arndb.de>
ath10k: fix invalid dma_addr_t token assignment
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Partial revert of commit 6f9f17287e78
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix PCIe Max Payload Size setting
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: Fix macros in sun8i_csc.h
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
Halil Pasic <pasic@linux.ibm.com>
s390/cio: make ccw_device_dma_* more robust
Harald Freudenberger <freude@linux.ibm.com>
s390/ap: Fix hanging ioctl caused by orphaned replies
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Jack Andersen <jackoalan@gmail.com>
mfd: dln2: Add cell for initializing DLN2 ADC
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/security: Add a helper to query stf_barrier type
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Validate branch ranges
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/lib: Add helper to check if offset is within conditional branch range
Vasily Averin <vvs@virtuozzo.com>
memcg: prohibit unconditional exceeding the limit of dying tasks
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Guo Ren <guoren@linux.alibaba.com>
irqchip/sifive-plic: Fixup EOI failed when masked
Michael Pratt <mpratt@google.com>
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
Dave Jones <davej@codemonkey.org.uk>
x86/mce: Add errata workaround for Skylake SKX37
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
Helge Deller <deller@gmx.de>
parisc: Fix backtrace to always include init funtion names
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Willem de Bruijn <willemb@google.com>
selftests/net: udpgso_bench_rx: fix port argument
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Dust Li <dust.li@linux.alibaba.com>
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Vladimir Oltean <vladimir.oltean@nxp.com>
net: stmmac: allow a tc-taprio base-time of zero
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: allow configure ETS bandwidth of all TCs
Yufeng Mo <moyufeng@huawei.com>
net: hns3: fix kernel crash when unload VF while it is being reset
Eric Dumazet <edumazet@google.com>
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Muchun Song <songmuchun@bytedance.com>
seq_file: fix passing wrong private data
Dan Carpenter <dan.carpenter@oracle.com>
gve: Fix off by one in gve_tx_timeout()
John Fastabend <john.fastabend@gmail.com>
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Remove unhash handler for BPF sockmap usage
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Ian Rogers <irogers@google.com>
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
mfd: core: Add missing of_node_put for loop iteration
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Heiner Kallweit <hkallweit1@gmail.com>
net: phy: fix duplex out of sync problem while changing settings
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: provide a helper for cleanup up an atari disk
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: add registration bool before calling del_gendisk()
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: use the blk_cleanup_disk() helper
Chenyuan Mi <cymi20@fudan.edu.cn>
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Brett Creeley <brett.creeley@intel.com>
ice: Fix not stopping Tx queues for VFs
Sylwester Dziedziuch <sylwesterx.dziedziuch@intel.com>
ice: Fix replacing VF hardware MAC to existing MAC filter
Ziyang Xuan <william.xuanziyang@huawei.com>
net: vlan: fix a UAF in vlan_dev_real_dev()
Stafford Horne <shorne@gmail.com>
openrisc: fix SMP tlb flush NULL pointer dereference
Jakub Kicinski <kuba@kernel.org>
ethtool: fix ethtool msg len calculation for pause stats
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Relogin during fabric disturbance
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Changes to support FCP2 Target
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Eric W. Biederman <ebiederm@xmission.com>
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Robert-Ionut Alexa <robert-ionut.alexa@nxp.com>
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Alexey Gladkov <legion@kernel.org>
Fix user namespace leak
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix an Oops in pnfs_mark_request_commit()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix up commit deadlocks
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Dan Carpenter <dan.carpenter@oracle.com>
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
Zev Weiss <zev@bewilderbeest.net>
mtd: core: don't remove debugfs directory if device is in use
Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
YueHaibing <yuehaibing@huawei.com>
opp: Fix return in _opp_add_static_v2()
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix dentry verifier races
Kewei Xu <kewei.xu@mediatek.com>
i2c: mediatek: fixing the incorrect register offset
J. Bruce Fields <bfields@redhat.com>
nfsd: don't alloc under spinlock in rpc_parse_scope_id
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: check desc == NULL when using indirect with packed
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Use device_property API instead of of_property
Lucas Tanure <tanureal@opensource.cirrus.com>
ASoC: cs42l42: Disable regulators if probe fails
Bixuan Cui <cuibixuan@linux.alibaba.com>
powerpc/44x/fsp2: add missing of_node_put
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: clarify error check and length calculations
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Sandeep Maheswaram <quic_c_sanm@quicinc.com>
phy: qcom-snps: Correct the FSEL_MASK
Dan Carpenter <dan.carpenter@oracle.com>
phy: ti: gmii-sel: check of_get_address() for failure
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Rahul Tanwar <rtanwar@maxlinear.com>
pinctrl: equilibrium: Fix function addition in multiple groups
Wan Jiabing <wanjiabing@vivo.com>
soc: qcom: apr: Add of_node_put() before return
Guru Das Srinagesh <quic_gurus@quicinc.com>
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: reset current session before setting the new one
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
Stefan Agner <stefan@agner.ch>
serial: imx: fix detach/attach of serial console
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
Can Guo <cang@codeaurora.org>
scsi: ufs: Refactor ufshcd_setup_clocks() to remove skip_ref_clk
Nuno Sá <nuno.sa@analog.com>
iio: adis: do not disabe IRQs in 'adis_init()'
Randy Dunlap <rdunlap@infradead.org>
usb: typec: STUSB160X should select REGMAP_I2C
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Make power_on actually enable the domain
Lee Jones <lee.jones@linaro.org>
soc: qcom: rpmhpd: Provide some missing struct member descriptions
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix SAI sub nodes register range
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
Geert Uytterhoeven <geert+renesas@glider.be>
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
Vegard Nossum <vegard.nossum@oracle.com>
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Nikita Yushchenko <nikita.yoush@cogentembedded.com>
staging: most: dim2: do not double-register the same device
Randy Dunlap <rdunlap@infradead.org>
usb: musb: select GENERIC_PHY instead of depending on it
Leon Romanovsky <leon@kernel.org>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Yang Yingliang <yangyingliang@huawei.com>
power: supply: max17040: fix null-ptr-deref in max17040_probe()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc: fix unbalanced node refcount in check_kvm_guest()
Michael Ellerman <mpe@ellerman.id.au>
powerpc: Fix is_kvm_guest() / kvm_para_available()
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc: Reintroduce is_kvm_guest() as a fast-path check
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc: Rename is_kvm_guest() to check_kvm_guest()
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc: Refactor is_kvm_guest() declaration to new header
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Clément Léger <clement.leger@bootlin.com>
clk: at91: check pmc node status before registering syscore ops
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Ranjani Sridharan <ranjani.sridharan@linux.intel.com>
ASoC: SOF: topology: do not power down primary core during topology removal
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Yang Yingliang <yangyingliang@huawei.com>
driver core: Fix possible memory leak in device_link_add()
Igor Pylypiv <ipylypiv@google.com>
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: debugfs: use controller id and link_id for debugfs
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Use position buffer for SKL+ again
Imre Deak <imre.deak@intel.com>
ALSA: hda: Fix hang during shutdown due to link reset
Imre Deak <imre.deak@intel.com>
ALSA: hda: Release controller display power during shutdown/reboot
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
Geert Uytterhoeven <geert+renesas@glider.be>
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Tony Lindgren <tony@atomide.com>
bus: ti-sysc: Fix timekeeping_suspended warning on resume
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Marijn Suijten <marijn.suijten@somainline.org>
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
Rafał Miłecki <rafal@milecki.pl>
ARM: dts: BCM5301X: Fix memory nodes names
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Alexandru Ardelean <aardelean@deviqon.com>
iio: st_sensors: disable regulators after device unregistration
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
iio: st_sensors: Call st_sensors_power_enable() from bus drivers
Frank Rowand <frank.rowand@sony.com>
of: unittest: fix EXPECT text for gpio hog errors
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
Dan Schatzberg <schatzberg.dan@gmail.com>
cgroup: Fix rootcg cpu.stat guest double counting
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: don't stop queue in xmit
Jakub Kicinski <kuba@kernel.org>
udp6: allow SO_MARK ctrl msg to affect routing
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix fd cleanup in sk_lookup test
Lorenz Bauer <lmb@cloudflare.com>
selftests: bpf: Convert sk_lookup ctx access tests to PROG_TEST_RUN
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix discarded frames due to wrong sequence number
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
spi: spi-rpc-if: Check return value of rpcif_sw_init()
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Ilya Leoshkevich <iii@linux.ibm.com>
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
Mark Brown <broonie@kernel.org>
tpm_tis_spi: Add missing SPI ID
Hao Wu <hao.wu@rubrik.com>
tpm: fix Atmel TPM crash caused by too frequent queries
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: more blk-mq refactoring fixes
Dan Carpenter <dan.carpenter@oracle.com>
ataflop: potential out of bounds in do_format()
Christoph Hellwig <hch@lst.de>
ataflop: use a separate gendisk for each media format
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid double free of sida page
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF header parsing checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix overflow in BTF sanity checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Allow loading empty BTFs
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF data layout checks and allow empty BTF
Quentin Monnet <quentin@isovalent.com>
bpftool: Avoid leaking the JSON writer prepared for program metadata
Jim Mattson <jmattson@google.com>
KVM: selftests: Fix nested SVM tests when built with clang
Ricardo Koller <ricarkol@google.com>
KVM: selftests: Add operand to vmsave/vmload/vmrun in svm.c
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Joerg Roedel <jroedel@suse.de>
x86/sev: Fix stack type check in vc_switch_off_ist()
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Tim Gardner <tim.gardner@canonical.com>
net: enetc: unmap DMA in enetc_send_cmd()
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix sta_rec_wtbl tag len
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix possible infinite loop release semaphore
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: fix breakage introduced at blk-mq refactoring
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Sean Young <sean@mess.org>
media: ir_toy: assignment to be16 should be of correct type
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: potential error pointer dereference in init()
Eric Dumazet <edumazet@google.com>
tcp: switch orphan_count to bare per-cpu counters
Zhang Qiao <zhangqiao22@huawei.com>
kernel/sched: Fix sched_fork() access an invalid sched_task_group
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix context restore
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
John Fraker <jfraker@google.com>
gve: Recover from queue stall due to missed IRQ
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_dynset: relax superfluous check on set updates
Peter Zijlstra <peterz@infradead.org>
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
Yazen Ghannam <yazen.ghannam@amd.com>
EDAC/amd64: Handle three rank interleaving mode
Vincent Donnefort <vincent.donnefort@arm.com>
PM: EM: Fix inefficient states detection
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Arnd Bergmann <arnd@arndb.de>
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
Punit Agrawal <punitagrawal@gmail.com>
kprobes: Do not use local variable when creating debugfs file
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: tm6000: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: radio-wl1273: Avoid card name truncation
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Tom Rix <trix@redhat.com>
media: TDA1997x: handle short reads of hdmi info frame.
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: S_CTRL output the right value
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Colin Ian King <colin.king@canonical.com>
media: cxd2880-spi: Fix a null pointer dereference on error handling path
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Sudarshan Rajagopalan <quic_sudaraja@quicinc.com>
arm64: mm: update max_pfn after memory hotplug
Matthew Auld <matthew.auld@intel.com>
drm/ttm: stop calling tt_swapin in vm_access
Fabio Estevam <festevam@denx.de>
ath10k: sdio: Add missing BH locking around napi_schdule()
Loic Poulain <loic.poulain@linaro.org>
ath10k: Fix missing frame timestamp for beacon/probe-resp
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
Pradeep Kumar Chitrapu <pradeepc@codeaurora.org>
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid race during regd updates
Dan Carpenter <dan.carpenter@oracle.com>
ath11k: fix some sleeping in atomic bugs
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Jiasheng Jiang <jiasheng@iscas.ac.cn>
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Michael Walle <michael@walle.cc>
crypto: caam - disable pkc for non-E SoCs
Dinghao Liu <dinghao.liu@zju.edu.cn>
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Ajay Singh <ajay.kathat@microchip.com>
wilc1000: fix possible memory leak in cfg_scan_result()
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
wcn36xx: Fix Antenna Diversity Switching
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Yajun Deng <yajun.deng@linux.dev>
net: net_namespace: Fix undefined member in key_remove_domain()
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
lockdep: Let lock_is_held_type() detect recursive read as read
liuyuntao <liuyuntao10@huawei.com>
virtio-gpu: fix possible memory allocation failure
Iago Toral Quiroga <itoral@igalia.com>
drm/v3d: fix wait for TMU write combiner flush
Peter Zijlstra <peterz@infradead.org>
objtool: Fix static_call list generation
Peter Zijlstra <peterz@infradead.org>
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
Josh Poimboeuf <jpoimboe@redhat.com>
objtool: Add xen_start_kernel() to noreturn list
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: fix burst length for DEU
Neeraj Upadhyay <neeraju@codeaurora.org>
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix strobemeta selftest regression
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: don't trigger WARN() when decompression fails
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Shuah Khan <skhan@linuxfoundation.org>
selftests/core: fix conflicting types compile error for close_range()
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Correct band/freq reporting on RX
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Josef Bacik <josef@toxicpanda.com>
btrfs: do not take the uuid_mutex in btrfs_rm_device
Sidong Yang <realwakka@gmail.com>
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
Stefan Schaeckeler <schaecsn@gmx.net>
ACPI: AC: Quirk GK45 to skip reading _PSR
Eric Dumazet <edumazet@google.com>
net: annotate data-race in neigh_output()
Florian Westphal <fw@strlen.de>
vrf: run conntrack only in context of lower/physdev for locally generated packets
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Fix glock_hash_walk bugs
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Cancel remote delete work asynchronously
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Jiri Olsa <jolsa@redhat.com>
selftests/bpf: Fix perf_buffer test on system with offline cpus
Shuah Khan <skhan@linuxfoundation.org>
selftests: kvm: fix mismatched fclose() after popen()
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Hannes Reinecke <hare@suse.de>
nvme: drop scan_lock and always kick requeue list when removing namespaces
Israel Rukshin <israelr@nvidia.com>
nvmet-tcp: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet-rdma: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet: fix use-after-free when a port is removed
Michael Tretter <m.tretter@pengutronix.de>
media: allegro: ignore interrupt if mailbox is not initialized
Jens Axboe <axboe@kernel.dk>
block: remove inaccurate requeue check
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7915: fix an off-by-one bound check
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Xiao Ni <xni@redhat.com>
md: update superblock after changing rdev flags in state_store
Jens Axboe <axboe@kernel.dk>
block: bump max plugged deferred size from 16 to 32
Tim Gardner <tim.gardner@canonical.com>
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
net: phy: micrel: make *-skew-ps check more lenient
Yifan Zhang <yifan1.zhang@amd.com>
drm/amdkfd: fix resume error when iommu disabled in Picasso
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Andreas Gruenbacher <agruenba@redhat.com>
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
Xin Xiong <xiongx18@fudan.edu.cn>
mmc: moxart: Fix reference count leaks in moxart_probe
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Antoine Tenart <atenart@kernel.org>
net-sysfs: try not to restart the syscall if it will fail eventually
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: imgu_fmt: Handle properly try
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Josh Don <joshdon@google.com>
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
Corey Minyard <cminyard@mvista.com>
ipmi: Disable some operations during a panic
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Hans de Goede <hdegoede@redhat.com>
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Zong-Zhe Yang <kevin_yang@realtek.com>
rtw88: fix RX clock gate setting while fifo dump
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Martin Kepplinger <martink@posteo.de>
media: imx: set a media_device bus_info string
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set unique vdev name based in type
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Dmitriy Ulitin <ulitin@ispras.ru>
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Evgeny Novikov <novikov@ispras.ru>
media: atomisp: Fix error handling in probe
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Alagu Sankar <alagusankar@silex-india.com>
ath10k: high latency fixes for beacon buffer
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
Wen Gong <wgong@codeaurora.org>
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid reg rules update during firmware recovery
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix MMIO access page fault
Eric Biggers <ebiggers@google.com>
fscrypt: allow 256-bit master keys with AES-256-XTS
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Seevalamuthu Mariappan <seevalam@codeaurora.org>
ath11k: Align bss_chan_info structure with firmware
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Paul E. McKenney <paulmck@kernel.org>
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Scott Wood <swood@redhat.com>
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
Simon Ser <contact@emersion.fr>
drm/panel-orientation-quirks: add Valve Steam Deck
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
Charan Teja Reddy <charante@codeaurora.org>
dma-buf: WARN on dmabuf release with pending attachments
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Clear status bits in interrupt handler
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Johan Hovold <johan@kernel.org>
most: fix control-message timeouts
Johan Hovold <johan@kernel.org>
serial: 8250: fix racy uartclk update
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Nuno Sá <nuno.sa@analog.com>
iio: ad5770r: make devicetree property reading consistent
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Tao Zhang <quic_taozha@quicinc.com>
coresight: cti: Correct the parameter for pm_runtime_put
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix configuring Reference clock
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix reporting Data Link Layer Link Active
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix checking for link up via LTSSM state
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Li Chen <lchen@ambarella.com>
PCI: cadence: Add cdns_plat_pcie_probe() missing return
Marek Behún <kabel@kernel.org>
PCI: pci-bridge-emul: Fix emulation of W1C bits
yangerkun <yangerkun@huawei.com>
ovl: fix use after free in struct ovl_aio_req
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Arnd Bergmann <arnd@arndb.de>
ifb: fix building without CONFIG_NET_CLS_ACT
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Steven Rostedt (VMware) <rostedt@goodmis.org>
ring-buffer: Protect ring_buffer_reset() from reentrancy
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Mark Rutland <mark.rutland@arm.com>
KVM: arm64: Extract ESR_ELx.EC only
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: use the combined functions to protect critical zone
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Wolfram Sang <wsa+renesas@sang-engineering.com>
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Try waking the firmware until we get an interrupt
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix (QoS) null data frame bitrate/modulation
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix tx_status mechanism
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Lukas Wunner <lukas@wunner.de>
ifb: Depend on netfilter alternatively to tc
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Ondrej Mosnacek <omosnace@redhat.com>
selinux: fix race condition when computing ocontext SIDs
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Sean Christopherson <seanjc@google.com>
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
Christoph Hellwig <hch@lst.de>
rds: stop using dmapool
Wen Gu <guwen@linux.alibaba.com>
net/smc: Correct spelling mistake to TCPF_SYN_RECV
Tony Lu <tonylu@linux.alibaba.com>
net/smc: Fix smc_link->llc_testlink_time overflow
Yu Xiao <yu.xiao@corigine.com>
nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
Dongli Zhang <dongli.zhang@oracle.com>
vmxnet3: do not stop tx queues after netif_device_detach()
Janghyub Seo <jhyub06@gmail.com>
r8169: Add device 10ec:8162 to driver r8169
Amit Engel <amit.engel@dell.com>
nvmet-tcp: fix header digest verification
Naohiro Aota <naohiro.aota@wdc.com>
block: schedule queue restart after BLK_STS_ZONE_RESOURCE
Mario <awxkrnl@gmail.com>
drm: panel-orientation-quirks: Add quirk for GPD Win3
Walter Stoll <walter.stoll@duagon.com>
watchdog: Fix OMAP watchdog early handling
Cyril Strejc <cyril.strejc@skoda.cz>
net: multicast: calculate csum of looped-back and forwarded packets
Thomas Perrot <thomas.perrot@bootlin.com>
spi: spl022: fix Microwire full duplex mode
Maurizio Lombardi <mlombard@redhat.com>
nvmet-tcp: fix a memory leak when releasing a queue
Dongli Zhang <dongli.zhang@oracle.com>
xen/netfront: stop tx queues during live migration
Asmaa Mnebhi <asmaa@nvidia.com>
gpio: mlxbf2.c: Add check for bgpio_init failure
Lorenz Bauer <lmb@cloudflare.com>
bpf: Prevent increasing bpf_jit_limit above max
Lorenz Bauer <lmb@cloudflare.com>
bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
Florian Westphal <fw@strlen.de>
fcnal-test: kill hanging ping/nettest binaries on cleanup
Bryant Mairs <bryant@mai.rs>
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Randy Dunlap <rdunlap@infradead.org>
mmc: winbond: don't build on M68K
Paweł Anikiel <pan@semihalf.com>
reset: socfpga: add empty driver allowing consumers to probe
Bastien Roucariès <rouca@debian.org>
ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
Arnd Bergmann <arnd@arndb.de>
hyperv/vmbus: include linux/bitops.h
Erik Ekman <erik@kryo.se>
sfc: Don't use netif_info before net_device setup
Erik Ekman <erik@kryo.se>
sfc: Export fibre-specific supported link modes
Zheyu Ma <zheyuma97@gmail.com>
cavium: Fix return values of the probe function
Zheyu Ma <zheyuma97@gmail.com>
mISDN: Fix return values of the probe function
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: qla2xxx: Fix unmap of already freed sgl
Zheyu Ma <zheyuma97@gmail.com>
scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
Zheyu Ma <zheyuma97@gmail.com>
cavium: Return negative value when pci_alloc_irq_vectors() fails
Davide Baldo <davide@baldo.me>
ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
Yang Yingliang <yangyingliang@huawei.com>
ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix page stealing
yangerkun <yangerkun@huawei.com>
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
yangerkun <yangerkun@huawei.com>
ext4: ensure enough credits in ext4_ext_shift_path_extents
Shaoying Xu <shaoyi@amazon.com>
ext4: fix lazy initialization next schedule time computation in more granular unit
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Free card instance properly at probe errors
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Jason Ormes <skryking@gmail.com>
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Kai-Heng Feng <kai.heng.feng@canonical.com>
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add quirk for ASUS UX550VE
Jaroslav Kysela <perex@perex.cz>
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jeremy Soller <jeremy@system76.com>
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
Johnathon Clark <john.clark@cantab.net>
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: Fix check_ext_ctrls
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Support dynamic resolution changes
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Do not override sizeimage for output format
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Helge Deller <deller@gmx.de>
parisc: Fix set_fixmap() on PA1.x CPUs
Sungjong Seo <sj1557.seo@samsung.com>
exfat: fix incorrect loading of i_blocks for large files
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Derong Liu <derong.liu@mediatek.com>
mmc: mtk-sd: Add wait dma stop done flow
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix use after free in eh_abort path
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Johan Hovold <johan@kernel.org>
Input: iforce - fix control-message timeout
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for getsecid
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for selinux checks
Todd Kjos <tkjos@google.com>
binder: use euid from cred instead of using task
Nehal Bakulchandra Shah <Nehal-Bakulchandra.shah@amd.com>
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 +
.../bindings/regulator/samsung,s5m8767.txt | 23 +-
Documentation/filesystems/fscrypt.rst | 10 +-
Makefile | 4 +-
arch/Kconfig | 3 +
arch/arm/Makefile | 22 +-
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/bcm4708-netgear-r6250.dts | 2 +-
arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts | 2 +-
arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts | 2 +-
arch/arm/boot/dts/bcm4709-linksys-ea9200.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r7000.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r8000.dts | 2 +-
arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts | 2 +-
arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts | 2 +-
arch/arm/boot/dts/bcm53016-meraki-mr32.dts | 2 +-
arch/arm/boot/dts/bcm94708.dts | 2 +-
arch/arm/boot/dts/bcm94709.dts | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/qcom-msm8974.dtsi | 4 +-
arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 8 +-
arch/arm/boot/dts/stm32mp151.dtsi | 16 +-
arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi | 2 +-
arch/arm/boot/dts/sun7i-a20-olinuxino-lime2.dts | 2 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mach-s3c/irq-s3c24xx.c | 22 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2 +-
.../boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi | 4 +-
.../boot/dts/amlogic/meson-g12b-odroid-n2.dtsi | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi | 4 +-
arch/arm64/boot/dts/qcom/msm8916.dtsi | 8 +-
arch/arm64/boot/dts/qcom/pm8916.dtsi | 1 -
.../arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 1 +
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
arch/arm64/boot/dts/ti/k3-j721e-main.dtsi | 16 +-
arch/arm64/include/asm/esr.h | 1 +
arch/arm64/include/asm/pgtable.h | 12 +-
arch/arm64/kvm/hyp/hyp-entry.S | 2 +-
arch/arm64/kvm/hyp/nvhe/host.S | 2 +-
arch/arm64/mm/mmu.c | 5 +
arch/arm64/net/bpf_jit_comp.c | 5 +
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/kernel/kprobes.c | 9 +-
arch/m68k/Kconfig.machine | 1 +
arch/mips/Kconfig | 1 +
arch/mips/include/asm/cmpxchg.h | 5 +-
arch/mips/include/asm/mips-cm.h | 12 +-
arch/mips/kernel/mips-cm.c | 21 +-
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 -
arch/mips/lantiq/xway/dma.c | 23 +-
arch/openrisc/kernel/dma.c | 4 +-
arch/openrisc/kernel/smp.c | 6 +-
arch/parisc/kernel/entry.S | 2 +-
arch/parisc/kernel/smp.c | 19 +-
arch/parisc/kernel/unwind.c | 21 +-
arch/parisc/kernel/vmlinux.lds.S | 3 +-
arch/parisc/mm/fixmap.c | 5 +-
arch/parisc/mm/init.c | 4 +-
arch/powerpc/include/asm/code-patching.h | 1 +
arch/powerpc/include/asm/firmware.h | 6 -
arch/powerpc/include/asm/kvm_guest.h | 25 ++
arch/powerpc/include/asm/kvm_para.h | 2 +-
arch/powerpc/include/asm/security_features.h | 5 +
arch/powerpc/kernel/firmware.c | 12 +-
arch/powerpc/kernel/security.c | 5 +
arch/powerpc/lib/code-patching.c | 7 +-
arch/powerpc/net/bpf_jit.h | 33 ++-
arch/powerpc/net/bpf_jit64.h | 8 +-
arch/powerpc/net/bpf_jit_comp64.c | 64 +++++-
arch/powerpc/platforms/44x/fsp2.c | 2 +
arch/powerpc/platforms/85xx/Makefile | 4 +-
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 7 +-
arch/powerpc/platforms/85xx/smp.c | 12 +-
arch/powerpc/platforms/powernv/opal-prd.c | 12 +-
arch/powerpc/platforms/pseries/smp.c | 3 +
arch/s390/kvm/priv.c | 2 +
arch/s390/kvm/pv.c | 21 +-
arch/s390/mm/gmap.c | 5 +-
arch/sh/kernel/cpu/fpu.c | 10 +-
arch/x86/Kconfig | 1 +
arch/x86/events/intel/uncore_snbep.c | 6 +-
arch/x86/hyperv/hv_init.c | 5 +-
arch/x86/include/asm/cpu_entry_area.h | 8 +-
arch/x86/include/asm/mem_encrypt.h | 1 +
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/kernel/Makefile | 6 +
arch/x86/kernel/cc_platform.c | 69 ++++++
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 +++-
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/cpu/hygon.c | 2 +
arch/x86/kernel/cpu/mce/intel.c | 5 +-
arch/x86/kernel/irq.c | 4 +-
arch/x86/kernel/sev-es.c | 32 ---
arch/x86/kernel/traps.c | 2 +-
arch/x86/kvm/vmx/vmx.c | 15 +-
arch/x86/mm/cpu_entry_area.c | 7 +
arch/x86/mm/mem_encrypt.c | 1 +
arch/x86/mm/mem_encrypt_identity.c | 9 +
block/blk-mq.c | 18 +-
block/blk.h | 6 +
crypto/Kconfig | 2 +-
crypto/pcrypt.c | 12 +-
drivers/acpi/ac.c | 19 ++
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +-
drivers/acpi/acpica/hwxfsleep.c | 7 +
drivers/acpi/battery.c | 2 +-
drivers/acpi/pmic/intel_pmic.c | 51 +++--
drivers/android/binder.c | 22 +-
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 +
drivers/auxdisplay/ht16k33.c | 66 +++---
drivers/auxdisplay/img-ascii-lcd.c | 10 +
drivers/base/core.c | 4 +-
drivers/base/power/main.c | 9 +-
drivers/block/ataflop.c | 221 +++++++++++-------
drivers/block/zram/zram_drv.c | 2 +-
drivers/bluetooth/btmtkuart.c | 13 +-
drivers/bus/ti-sysc.c | 65 +++++-
drivers/char/hw_random/mtk-rng.c | 9 +-
drivers/char/ipmi/ipmi_msghandler.c | 10 +-
drivers/char/ipmi/ipmi_watchdog.c | 17 +-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/char/tpm/tpm_tis_core.c | 26 ++-
drivers/char/tpm/tpm_tis_core.h | 4 +
drivers/char/tpm/tpm_tis_spi_main.c | 1 +
drivers/clk/at91/clk-sam9x60-pll.c | 4 +-
drivers/clk/at91/pmc.c | 5 +
drivers/clk/mvebu/ap-cpu-clk.c | 14 +-
drivers/clocksource/Kconfig | 1 +
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/caam/caampkc.c | 19 +-
drivers/crypto/caam/regs.h | 3 +
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 ++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +
drivers/crypto/s5p-sss.c | 2 +
drivers/dma-buf/dma-buf.c | 1 +
drivers/dma/at_xdmac.c | 2 +-
drivers/dma/dmaengine.h | 2 +-
drivers/edac/amd64_edac.c | 22 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci/psci_checker.c | 2 +-
drivers/firmware/qcom_scm.c | 2 +-
drivers/gpio/gpio-mlxbf2.c | 5 +
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 8 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 17 +-
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 1 +
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 16 +-
drivers/gpu/drm/drm_panel_orientation_quirks.c | 47 +++-
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4 +
drivers/gpu/drm/msm/msm_gem.c | 4 +-
drivers/gpu/drm/msm/msm_gpu.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_svm.c | 4 +
drivers/gpu/drm/sun4i/sun8i_csc.h | 4 +-
drivers/gpu/drm/ttm/ttm_bo_vm.c | 5 -
drivers/gpu/drm/v3d/v3d_gem.c | 4 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 8 +-
drivers/hid/hid-u2fzero.c | 10 +-
drivers/hv/hyperv_vmbus.h | 1 +
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +-
drivers/hwtracing/coresight/coresight-cti-core.c | 2 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/accel/st_accel_core.c | 21 +-
drivers/iio/accel/st_accel_i2c.c | 17 +-
drivers/iio/accel/st_accel_spi.c | 17 +-
drivers/iio/dac/ad5446.c | 9 +-
drivers/iio/dac/ad5770r.c | 2 +-
drivers/iio/gyro/st_gyro_core.c | 15 +-
drivers/iio/gyro/st_gyro_i2c.c | 17 +-
drivers/iio/gyro/st_gyro_spi.c | 17 +-
drivers/iio/imu/adis.c | 4 +-
drivers/iio/magnetometer/st_magn_core.c | 15 +-
drivers/iio/magnetometer/st_magn_i2c.c | 14 +-
drivers/iio/magnetometer/st_magn_spi.c | 14 +-
drivers/iio/pressure/st_pressure_core.c | 15 +-
drivers/iio/pressure/st_pressure_i2c.c | 17 +-
drivers/iio/pressure/st_pressure_spi.c | 17 +-
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 +-
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/joystick/iforce/iforce-usb.c | 2 +-
drivers/input/mouse/elantech.c | 13 ++
drivers/input/serio/i8042-x86ia64io.h | 14 ++
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-sifive-plic.c | 8 +-
drivers/isdn/hardware/mISDN/hfcpci.c | 8 +-
drivers/md/md.c | 11 +-
drivers/media/dvb-frontends/mn88443x.c | 18 +-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++-
drivers/media/i2c/tda1997x.c | 8 +-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++-
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/platform/stm32/stm32-dcmi.c | 19 +-
drivers/media/radio/radio-wl1273.c | 2 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ir_toy.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/spi/cxd2880-spi.c | 2 +-
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/tm6000/tm6000-video.c | 3 +-
drivers/media/usb/uvc/uvc_driver.c | 7 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 +
drivers/media/v4l2-core/v4l2-ioctl.c | 67 ++++--
drivers/memory/fsl_ifc.c | 13 +-
drivers/memory/renesas-rpc-if.c | 113 +++++++---
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mfd/dln2.c | 18 ++
drivers/mfd/mfd-core.c | 2 +
drivers/mmc/host/Kconfig | 2 +-
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/moxart-mmc.c | 29 ++-
drivers/mmc/host/mtk-sd.c | 5 +
drivers/mmc/host/mxs-mmc.c | 10 +
drivers/mmc/host/sdhci-omap.c | 18 +-
drivers/most/most_usb.c | 5 +-
drivers/mtd/mtdcore.c | 4 +-
drivers/mtd/nand/raw/ams-delta.c | 12 +-
drivers/mtd/nand/raw/au1550nd.c | 12 +-
drivers/mtd/nand/raw/gpio.c | 12 +-
drivers/mtd/nand/raw/mpc5121_nfc.c | 12 +-
drivers/mtd/nand/raw/orion_nand.c | 12 +-
drivers/mtd/nand/raw/pasemi_nand.c | 12 +-
drivers/mtd/nand/raw/plat_nand.c | 12 +-
drivers/mtd/nand/raw/socrates_nand.c | 12 +-
drivers/mtd/nand/raw/xway_nand.c | 12 +-
drivers/mtd/spi-nor/controllers/hisi-sfc.c | 1 -
drivers/net/Kconfig | 2 +-
drivers/net/bonding/bond_sysfs_slave.c | 36 +--
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 2 +-
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 +
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +-
drivers/net/ethernet/cavium/thunder/nic_main.c | 2 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
.../chelsio/inline_crypto/chtls/chtls_cm.c | 2 +-
.../chelsio/inline_crypto/chtls/chtls_cm.h | 2 +-
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18 +-
drivers/net/ethernet/google/gve/gve.h | 4 +-
drivers/net/ethernet/google/gve/gve_adminq.h | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 48 +++-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 2 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 9 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 5 +
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 2 +
drivers/net/ethernet/ibm/ibmvnic.c | 5 +-
drivers/net/ethernet/intel/ice/ice_base.c | 2 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 20 +-
drivers/net/ethernet/netronome/nfp/bpf/main.c | 16 +-
drivers/net/ethernet/netronome/nfp/bpf/main.h | 2 +
drivers/net/ethernet/netronome/nfp/bpf/offload.c | 17 +-
drivers/net/ethernet/realtek/r8169_main.c | 1 +
drivers/net/ethernet/sfc/mcdi_port_common.c | 37 ++-
drivers/net/ethernet/sfc/ptp.c | 4 +-
drivers/net/ethernet/sfc/siena_sriov.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 2 -
drivers/net/ethernet/ti/davinci_emac.c | 16 +-
drivers/net/ifb.c | 2 +
drivers/net/phy/micrel.c | 9 +-
drivers/net/phy/phy.c | 7 +-
drivers/net/phy/phylink.c | 2 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 1 -
drivers/net/vrf.c | 28 ++-
drivers/net/wireless/ath/ath10k/mac.c | 45 +++-
drivers/net/wireless/ath/ath10k/sdio.c | 5 +-
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.c | 4 +
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath11k/dbring.c | 16 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 13 +-
drivers/net/wireless/ath/ath11k/mac.c | 2 +-
drivers/net/wireless/ath/ath11k/qmi.c | 4 +-
drivers/net/wireless/ath/ath11k/reg.c | 11 +-
drivers/net/wireless/ath/ath11k/reg.h | 2 +-
drivers/net/wireless/ath/ath11k/wmi.c | 40 ++--
drivers/net/wireless/ath/ath11k/wmi.h | 3 +-
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +-
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 ++--
drivers/net/wireless/ath/wcn36xx/main.c | 8 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 44 +++-
drivers/net/wireless/ath/wcn36xx/txrx.c | 64 +++---
drivers/net/wireless/ath/wcn36xx/txrx.h | 3 +-
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10 +
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +--
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 ++-
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 15 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 8 +-
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +-
drivers/net/wireless/realtek/rtw88/fw.c | 7 +-
drivers/net/wireless/realtek/rtw88/reg.h | 1 +
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 ++----
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 +-
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +
drivers/net/wireless/rsi/rsi_main.h | 15 +-
drivers/net/xen-netfront.c | 8 +
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvme/host/multipath.c | 9 +-
drivers/nvme/host/rdma.c | 2 +
drivers/nvme/target/configfs.c | 2 +
drivers/nvme/target/rdma.c | 24 ++
drivers/nvme/target/tcp.c | 21 +-
drivers/of/unittest.c | 16 +-
drivers/opp/of.c | 2 +-
drivers/pci/controller/cadence/pcie-cadence-plat.c | 2 +
drivers/pci/controller/dwc/pcie-uniphier.c | 26 +--
drivers/pci/controller/pci-aardvark.c | 251 ++++++++++++++++++---
drivers/pci/pci-bridge-emul.c | 13 ++
drivers/pci/quirks.c | 1 +
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 +-
drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c | 2 +-
drivers/phy/ti/phy-gmii-sel.c | 2 +
drivers/pinctrl/core.c | 2 +
drivers/pinctrl/pinctrl-equilibrium.c | 7 +-
drivers/pinctrl/renesas/core.c | 2 +-
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17040_battery.c | 2 +
drivers/power/supply/max17042_battery.c | 12 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 +-
drivers/remoteproc/remoteproc_core.c | 8 +-
drivers/reset/reset-socfpga.c | 26 +++
drivers/rtc/rtc-rv3032.c | 4 +-
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/s390/cio/device_ops.c | 12 +-
drivers/s390/crypto/ap_queue.c | 2 +
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/pm8001/pm8001_hwi.c | 2 +-
drivers/scsi/qla2xxx/qla_attr.c | 24 +-
drivers/scsi/qla2xxx/qla_dbg.c | 3 +-
drivers/scsi/qla2xxx/qla_gbl.h | 2 -
drivers/scsi/qla2xxx/qla_init.c | 54 ++++-
drivers/scsi/qla2xxx/qla_mr.c | 23 --
drivers/scsi/qla2xxx/qla_os.c | 47 ++--
drivers/scsi/qla2xxx/qla_target.c | 14 +-
drivers/scsi/scsi_lib.c | 2 -
drivers/scsi/ufs/ufshcd-pltfrm.c | 6 +-
drivers/scsi/ufs/ufshcd.c | 29 +--
drivers/scsi/ufs/ufshcd.h | 3 +
drivers/soc/fsl/dpaa2-console.c | 1 +
drivers/soc/fsl/dpio/dpio-service.c | 2 +-
drivers/soc/fsl/dpio/qbman-portal.c | 9 +-
drivers/soc/qcom/apr.c | 2 +
drivers/soc/qcom/rpmhpd.c | 21 +-
drivers/soc/tegra/pmc.c | 2 +-
drivers/soundwire/debugfs.c | 2 +-
drivers/spi/spi-bcm-qspi.c | 5 +-
drivers/spi/spi-pl022.c | 5 +-
drivers/spi/spi-rpc-if.c | 4 +-
drivers/staging/ks7010/Kconfig | 3 +
drivers/staging/media/allegro-dvt/allegro-core.c | 9 +
drivers/staging/media/atomisp/i2c/atomisp-lm3554.c | 37 +--
drivers/staging/media/imx/imx-media-dev-common.c | 2 +
drivers/staging/media/ipu3/ipu3-v4l2.c | 7 +-
drivers/staging/media/rkvdec/rkvdec-h264.c | 5 +-
drivers/staging/media/rkvdec/rkvdec.c | 40 ++--
drivers/staging/most/dim2/Makefile | 2 +-
drivers/staging/most/dim2/dim2.c | 24 +-
drivers/staging/most/dim2/sysfs.c | 49 ----
drivers/staging/most/dim2/sysfs.h | 11 -
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 21 +-
drivers/tty/serial/imx.c | 4 +-
drivers/tty/serial/serial_core.c | 16 +-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/usb/chipidea/core.c | 23 +-
drivers/usb/dwc2/drd.c | 24 +-
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-pci.c | 16 ++
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/Kconfig | 2 +-
drivers/usb/serial/keyspan.c | 15 +-
drivers/usb/typec/Kconfig | 4 +-
drivers/video/backlight/backlight.c | 6 -
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/virtio/virtio_ring.c | 14 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/watchdog/omap_wdt.c | 6 +-
drivers/xen/balloon.c | 86 +++++--
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/reflink.c | 2 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 14 +-
fs/crypto/fscrypt_private.h | 5 +-
fs/crypto/hkdf.c | 11 +-
fs/crypto/keysetup.c | 57 ++++-
fs/erofs/decompressor.c | 1 -
fs/exfat/inode.c | 2 +-
fs/ext4/extents.c | 63 +++---
fs/ext4/super.c | 9 +-
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/fuse/dev.c | 14 +-
fs/gfs2/glock.c | 24 +-
fs/jfs/jfs_mount.c | 51 ++---
fs/nfs/dir.c | 7 +-
fs/nfs/direct.c | 2 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/nfs4idmap.c | 2 +-
fs/nfs/nfs4proc.c | 15 +-
fs/nfs/pnfs.h | 2 +-
fs/nfs/pnfs_nfs.c | 6 +-
fs/nfs/write.c | 26 +--
fs/ocfs2/file.c | 8 +-
fs/orangefs/dcache.c | 4 +-
fs/overlayfs/file.c | 16 +-
fs/proc/stat.c | 4 +-
fs/proc/uptime.c | 14 +-
fs/quota/quota_tree.c | 15 ++
fs/tracefs/inode.c | 3 +-
include/linux/blkdev.h | 2 -
include/linux/cc_platform.h | 88 ++++++++
include/linux/console.h | 2 +
include/linux/ethtool_netlink.h | 3 +
include/linux/filter.h | 1 +
include/linux/kernel_stat.h | 1 +
include/linux/libata.h | 2 +-
include/linux/lsm_hook_defs.h | 14 +-
include/linux/lsm_hooks.h | 14 +-
include/linux/nfs_fs.h | 1 +
include/linux/posix-timers.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched/task.h | 3 +-
include/linux/sched/task_stack.h | 4 +
include/linux/security.h | 33 +--
include/linux/seq_file.h | 2 +-
include/linux/tpm.h | 1 +
include/memory/renesas-rpc-if.h | 1 +
include/net/inet_connection_sock.h | 2 +-
include/net/llc.h | 4 +-
include/net/neighbour.h | 12 +-
include/net/sch_generic.h | 4 +
include/net/sock.h | 2 +-
include/net/strparser.h | 16 +-
include/net/tcp.h | 17 +-
include/net/udp.h | 5 +-
include/uapi/linux/ethtool_netlink.h | 4 +-
include/uapi/linux/pci_regs.h | 6 +
kernel/bpf/core.c | 4 +-
kernel/bpf/verifier.c | 4 +-
kernel/cgroup/cgroup.c | 31 ++-
kernel/cgroup/rstat.c | 2 -
kernel/fork.c | 3 +-
kernel/kprobes.c | 3 +-
kernel/locking/lockdep.c | 4 +-
kernel/power/energy_model.c | 23 +-
kernel/power/swap.c | 7 +-
kernel/rcu/rcutorture.c | 48 +++-
kernel/rcu/tasks.h | 3 +-
kernel/rcu/tree_exp.h | 2 +-
kernel/rcu/tree_plugin.h | 8 +-
kernel/sched/core.c | 43 ++--
kernel/signal.c | 18 +-
kernel/time/posix-cpu-timers.c | 19 +-
kernel/trace/ring_buffer.c | 5 +
kernel/trace/tracing_map.c | 40 ++--
kernel/workqueue.c | 15 +-
lib/decompress_unxz.c | 2 +-
lib/iov_iter.c | 5 +-
lib/xz/xz_dec_lzma2.c | 21 +-
lib/xz/xz_dec_stream.c | 6 +-
mm/memcontrol.c | 27 +--
mm/oom_kill.c | 23 +-
mm/zsmalloc.c | 7 +-
net/8021q/vlan.c | 3 -
net/8021q/vlan_dev.c | 3 +
net/9p/client.c | 2 +
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/sco.c | 33 +--
net/can/j1939/main.c | 7 +
net/can/j1939/transport.c | 6 +
net/core/dev.c | 5 +-
net/core/filter.c | 21 ++
net/core/neighbour.c | 48 ++--
net/core/net-sysfs.c | 55 +++++
net/core/net_namespace.c | 4 +
net/core/stream.c | 3 -
net/core/sysctl_net_core.c | 2 +-
net/dccp/dccp.h | 2 +-
net/dccp/proto.c | 14 +-
net/ethtool/pause.c | 3 +-
net/ipv4/inet_connection_sock.c | 4 +-
net/ipv4/inet_hashtables.c | 2 +-
net/ipv4/proc.c | 2 +-
net/ipv4/tcp.c | 40 +++-
net/ipv4/tcp_bpf.c | 1 -
net/ipv6/addrconf.c | 3 +
net/ipv6/udp.c | 2 +-
net/netfilter/nf_conntrack_proto_udp.c | 7 +-
net/netfilter/nfnetlink_queue.c | 2 +-
net/netfilter/nft_dynset.c | 11 +-
net/rds/ib.c | 10 -
net/rds/ib.h | 6 -
net/rds/ib_cm.c | 128 +++++++----
net/rds/ib_recv.c | 18 +-
net/rds/ib_send.c | 8 +
net/rxrpc/rtt.c | 2 +-
net/sched/sch_generic.c | 9 +
net/sched/sch_mq.c | 24 ++
net/sched/sch_mqprio.c | 23 ++
net/sched/sch_taprio.c | 27 ++-
net/smc/af_smc.c | 20 +-
net/smc/smc_llc.c | 2 +-
net/strparser/strparser.c | 10 +-
net/sunrpc/addr.c | 40 ++--
net/sunrpc/xprt.c | 28 +--
net/vmw_vsock/af_vsock.c | 2 +
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/security.c | 14 +-
security/selinux/hooks.c | 36 ++-
security/selinux/ss/services.c | 162 +++++++------
security/smack/smackfs.c | 11 +-
sound/core/oss/mixer_oss.c | 43 +++-
sound/core/timer.c | 17 +-
sound/pci/hda/hda_intel.c | 74 +++---
sound/pci/hda/patch_realtek.c | 82 +++++++
sound/soc/codecs/cs42l42.c | 88 ++++----
sound/soc/soc-core.c | 1 +
sound/soc/sof/topology.c | 9 +
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/format.c | 1 +
sound/usb/line6/driver.c | 14 +-
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/bpf/bpftool/prog.c | 16 +-
tools/lib/bpf/bpf_core_read.h | 2 +-
tools/lib/bpf/btf.c | 25 +-
tools/objtool/check.c | 19 +-
tools/perf/util/bpf-event.c | 4 +-
.../testing/selftests/bpf/prog_tests/perf_buffer.c | 4 +-
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 85 +++++--
tools/testing/selftests/bpf/progs/strobemeta.h | 4 +-
tools/testing/selftests/bpf/progs/test_sk_lookup.c | 62 +++--
tools/testing/selftests/bpf/test_progs.c | 4 +-
.../testing/selftests/bpf/verifier/array_access.c | 2 +-
tools/testing/selftests/core/close_range_test.c | 2 +-
tools/testing/selftests/kvm/lib/x86_64/svm.c | 22 +-
.../selftests/kvm/x86_64/mmio_warning_test.c | 2 +-
tools/testing/selftests/net/fcnal-test.sh | 3 +
tools/testing/selftests/net/udpgso_bench_rx.c | 11 +-
599 files changed, 4967 insertions(+), 2480 deletions(-)
^ permalink raw reply [relevance 1%]
* Linux 5.4.160
@ 2021-11-17 10:01 2% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-17 10:01 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 5.4.160 kernel.
All users of the 5.4 kernel series must upgrade.
The updated 5.4.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/kernel-parameters.txt | 7
Documentation/devicetree/bindings/regulator/samsung,s5m8767.txt | 23 -
Makefile | 2
arch/arm/Makefile | 22 -
arch/arm/boot/dts/at91-tse850-3.dts | 2
arch/arm/boot/dts/omap3-gta04.dtsi | 2
arch/arm/boot/dts/qcom-msm8974.dtsi | 4
arch/arm/boot/dts/stm32mp157c.dtsi | 16 -
arch/arm/boot/dts/sun7i-a20-olinuxino-lime2.dts | 2
arch/arm/kernel/stacktrace.c | 3
arch/arm/mm/Kconfig | 2
arch/arm/mm/mmu.c | 4
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2
arch/arm64/include/asm/pgtable.h | 12
arch/arm64/net/bpf_jit_comp.c | 5
arch/ia64/Kconfig.debug | 2
arch/ia64/kernel/kprobes.c | 9
arch/m68k/Kconfig.machine | 1
arch/mips/Kconfig | 1
arch/mips/include/asm/mips-cm.h | 12
arch/mips/kernel/mips-cm.c | 21 -
arch/mips/kernel/r2300_fpu.S | 4
arch/mips/kernel/syscall.c | 9
arch/mips/lantiq/xway/dma.c | 14 -
arch/parisc/kernel/entry.S | 2
arch/parisc/kernel/smp.c | 19 +
arch/parisc/kernel/unwind.c | 21 +
arch/parisc/kernel/vmlinux.lds.S | 3
arch/parisc/mm/fixmap.c | 5
arch/parisc/mm/init.c | 4
arch/powerpc/include/asm/code-patching.h | 1
arch/powerpc/include/asm/security_features.h | 5
arch/powerpc/kernel/security.c | 5
arch/powerpc/lib/code-patching.c | 7
arch/powerpc/net/bpf_jit.h | 33 +-
arch/powerpc/net/bpf_jit64.h | 8
arch/powerpc/net/bpf_jit_comp64.c | 91 +++++--
arch/powerpc/platforms/44x/fsp2.c | 2
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 3
arch/powerpc/platforms/powernv/opal-prd.c | 12
arch/s390/kvm/priv.c | 2
arch/s390/mm/gmap.c | 5
arch/sh/kernel/cpu/fpu.c | 10
arch/x86/hyperv/hv_init.c | 5
arch/x86/include/asm/page_64_types.h | 2
arch/x86/kernel/cpu/amd.c | 2
arch/x86/kernel/cpu/common.c | 44 ++-
arch/x86/kernel/cpu/cpu.h | 1
arch/x86/kernel/cpu/hygon.c | 2
arch/x86/kernel/irq.c | 4
arch/x86/kvm/vmx/vmx.c | 8
arch/x86/mm/mem_encrypt_identity.c | 9
block/blk-mq.c | 1
crypto/Kconfig | 2
crypto/pcrypt.c | 12
drivers/acpi/acpica/acglobal.h | 2
drivers/acpi/acpica/hwesleep.c | 8
drivers/acpi/acpica/hwsleep.c | 11
drivers/acpi/acpica/hwxfsleep.c | 7
drivers/acpi/battery.c | 2
drivers/acpi/pmic/intel_pmic.c | 51 ++-
drivers/android/binder.c | 22 +
drivers/ata/libata-core.c | 2
drivers/ata/libata-eh.c | 8
drivers/auxdisplay/ht16k33.c | 66 ++---
drivers/auxdisplay/img-ascii-lcd.c | 10
drivers/block/ataflop.c | 18 -
drivers/block/zram/zram_drv.c | 2
drivers/bluetooth/btmtkuart.c | 13 -
drivers/char/hw_random/mtk-rng.c | 9
drivers/char/ipmi/ipmi_msghandler.c | 10
drivers/char/ipmi/ipmi_watchdog.c | 17 -
drivers/char/tpm/tpm2-space.c | 3
drivers/clk/at91/pmc.c | 5
drivers/clk/mvebu/ap-cpu-clk.c | 14 -
drivers/clocksource/Kconfig | 1
drivers/cpuidle/sysfs.c | 5
drivers/crypto/caam/caampkc.c | 19 +
drivers/crypto/caam/regs.h | 3
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 +
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6
drivers/crypto/s5p-sss.c | 2
drivers/dma-buf/dma-buf.c | 1
drivers/dma/at_xdmac.c | 2
drivers/dma/dmaengine.h | 2
drivers/edac/amd64_edac.c | 22 +
drivers/edac/sb_edac.c | 2
drivers/firmware/psci/psci_checker.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4
drivers/gpu/drm/drm_panel_orientation_quirks.c | 47 +++
drivers/gpu/drm/drm_plane_helper.c | 1
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8
drivers/gpu/drm/msm/msm_gem.c | 4
drivers/gpu/drm/v3d/v3d_gem.c | 4
drivers/gpu/drm/virtio/virtgpu_vq.c | 8
drivers/hid/hid-u2fzero.c | 10
drivers/hv/hyperv_vmbus.h | 1
drivers/hwmon/hwmon.c | 6
drivers/hwmon/pmbus/lm25066.c | 25 +
drivers/i2c/busses/i2c-xlr.c | 6
drivers/iio/dac/ad5446.c | 9
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3
drivers/infiniband/hw/mlx4/qp.c | 4
drivers/infiniband/hw/qedr/verbs.c | 15 -
drivers/infiniband/sw/rxe/rxe_param.h | 2
drivers/input/joystick/iforce/iforce-usb.c | 2
drivers/input/mouse/elantech.c | 13 +
drivers/input/serio/i8042-x86ia64io.h | 14 +
drivers/irqchip/irq-bcm6345-l1.c | 2
drivers/irqchip/irq-s3c24xx.c | 22 +
drivers/irqchip/irq-sifive-plic.c | 8
drivers/media/dvb-frontends/mn88443x.c | 18 +
drivers/media/i2c/ir-kbd-i2c.c | 1
drivers/media/i2c/mt9p031.c | 28 ++
drivers/media/i2c/tda1997x.c | 8
drivers/media/pci/cx23885/cx23885-alsa.c | 3
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 +-
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5
drivers/media/platform/rcar-vin/rcar-csi2.c | 2
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6
drivers/media/platform/stm32/stm32-dcmi.c | 19 -
drivers/media/radio/radio-wl1273.c | 2
drivers/media/radio/si470x/radio-si470x-i2c.c | 2
drivers/media/radio/si470x/radio-si470x-usb.c | 2
drivers/media/rc/ite-cir.c | 2
drivers/media/rc/mceusb.c | 1
drivers/media/spi/cxd2880-spi.c | 2
drivers/media/usb/dvb-usb/az6027.c | 1
drivers/media/usb/dvb-usb/dibusb-common.c | 2
drivers/media/usb/em28xx/em28xx-cards.c | 5
drivers/media/usb/em28xx/em28xx-core.c | 5
drivers/media/usb/tm6000/tm6000-video.c | 3
drivers/media/usb/uvc/uvc_driver.c | 7
drivers/media/usb/uvc/uvc_v4l2.c | 7
drivers/media/usb/uvc/uvc_video.c | 5
drivers/media/v4l2-core/v4l2-ioctl.c | 60 +++-
drivers/memory/fsl_ifc.c | 13 -
drivers/memstick/core/ms_block.c | 2
drivers/memstick/host/jmb38x_ms.c | 2
drivers/memstick/host/r592.c | 8
drivers/mmc/host/Kconfig | 2
drivers/mmc/host/dw_mmc.c | 3
drivers/mmc/host/mxs-mmc.c | 10
drivers/mmc/host/sdhci-omap.c | 3
drivers/mtd/mtdcore.c | 4
drivers/mtd/spi-nor/hisi-sfc.c | 1
drivers/net/bonding/bond_sysfs_slave.c | 36 --
drivers/net/dsa/rtl8366rb.c | 2
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +
drivers/net/ethernet/cavium/thunder/nic_main.c | 2
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 2
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 9
drivers/net/ethernet/ibm/ibmvnic.c | 5
drivers/net/ethernet/netronome/nfp/bpf/main.c | 16 -
drivers/net/ethernet/netronome/nfp/bpf/main.h | 2
drivers/net/ethernet/netronome/nfp/bpf/offload.c | 17 +
drivers/net/ethernet/realtek/r8169_main.c | 1
drivers/net/ethernet/sfc/ptp.c | 4
drivers/net/ethernet/sfc/siena_sriov.c | 2
drivers/net/ethernet/ti/davinci_emac.c | 16 +
drivers/net/phy/micrel.c | 5
drivers/net/phy/phylink.c | 2
drivers/net/vmxnet3/vmxnet3_drv.c | 1
drivers/net/vrf.c | 28 +-
drivers/net/wireless/ath/ath10k/mac.c | 45 ++-
drivers/net/wireless/ath/ath10k/usb.c | 7
drivers/net/wireless/ath/ath10k/wmi.c | 4
drivers/net/wireless/ath/ath10k/wmi.h | 3
drivers/net/wireless/ath/ath6kl/usb.c | 7
drivers/net/wireless/ath/ath9k/main.c | 4
drivers/net/wireless/ath/dfs_pattern_detector.c | 10
drivers/net/wireless/ath/wcn36xx/dxe.c | 12
drivers/net/wireless/ath/wcn36xx/main.c | 4
drivers/net/wireless/ath/wcn36xx/smd.c | 44 ++-
drivers/net/wireless/broadcom/b43/phy_g.c | 2
drivers/net/wireless/broadcom/b43legacy/radio.c | 2
drivers/net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3
drivers/net/wireless/marvell/libertas/if_usb.c | 2
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2
drivers/net/wireless/marvell/mwifiex/11n.c | 5
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 --
drivers/net/wireless/marvell/mwifiex/pcie.c | 8
drivers/net/wireless/marvell/mwifiex/usb.c | 16 +
drivers/net/wireless/marvell/mwl8k.c | 2
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13 -
drivers/net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 -
drivers/net/wireless/rsi/rsi_91x_core.c | 2
drivers/net/wireless/rsi/rsi_91x_hal.c | 10
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 +----
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 +
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5
drivers/net/wireless/rsi/rsi_91x_usb.c | 5
drivers/net/wireless/rsi/rsi_hal.h | 11
drivers/net/wireless/rsi/rsi_main.h | 15 -
drivers/net/xen-netfront.c | 8
drivers/nfc/pn533/pn533.c | 6
drivers/nvme/host/multipath.c | 9
drivers/nvme/host/rdma.c | 2
drivers/nvme/target/configfs.c | 2
drivers/nvme/target/tcp.c | 21 +
drivers/opp/of.c | 2
drivers/pci/controller/pci-aardvark.c | 129 ++++++++--
drivers/pci/pci-bridge-emul.c | 13 +
drivers/pci/quirks.c | 1
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 -
drivers/pinctrl/core.c | 2
drivers/platform/x86/thinkpad_acpi.c | 2
drivers/platform/x86/wmi.c | 9
drivers/power/supply/bq27xxx_battery_i2c.c | 3
drivers/power/supply/max17042_battery.c | 8
drivers/power/supply/rt5033_battery.c | 2
drivers/regulator/s5m8767.c | 21 -
drivers/reset/reset-socfpga.c | 26 ++
drivers/s390/char/tape_std.c | 3
drivers/s390/cio/css.c | 4
drivers/s390/cio/device_ops.c | 12
drivers/scsi/csiostor/csio_lnode.c | 2
drivers/scsi/dc395x.c | 1
drivers/scsi/qla2xxx/qla_attr.c | 24 +
drivers/scsi/qla2xxx/qla_gbl.h | 2
drivers/scsi/qla2xxx/qla_init.c | 4
drivers/scsi/qla2xxx/qla_mr.c | 23 -
drivers/scsi/qla2xxx/qla_os.c | 37 --
drivers/scsi/qla2xxx/qla_target.c | 14 -
drivers/soc/fsl/dpaa2-console.c | 1
drivers/soc/tegra/pmc.c | 2
drivers/spi/spi-bcm-qspi.c | 5
drivers/spi/spi-pl022.c | 5
drivers/staging/ks7010/Kconfig | 3
drivers/staging/media/imx/imx-media-dev-common.c | 2
drivers/staging/media/ipu3/ipu3-v4l2.c | 7
drivers/staging/wilc1000/wilc_wfi_cfgoperations.c | 3
drivers/tty/serial/8250/8250_dw.c | 2
drivers/tty/serial/serial_core.c | 16 +
drivers/tty/serial/xilinx_uartps.c | 3
drivers/usb/chipidea/core.c | 23 +
drivers/usb/gadget/legacy/hid.c | 4
drivers/usb/host/xhci-hub.c | 3
drivers/usb/host/xhci-pci.c | 16 +
drivers/usb/misc/iowarrior.c | 8
drivers/usb/serial/keyspan.c | 15 -
drivers/video/backlight/backlight.c | 6
drivers/video/fbdev/chipsfb.c | 2
drivers/watchdog/Kconfig | 2
drivers/watchdog/f71808e_wdt.c | 4
drivers/watchdog/omap_wdt.c | 6
drivers/xen/balloon.c | 86 ++++--
drivers/xen/xen-pciback/conf_space_capability.c | 2
fs/btrfs/disk-io.c | 3
fs/btrfs/tree-log.c | 4
fs/btrfs/volumes.c | 14 -
fs/f2fs/inode.c | 2
fs/f2fs/namei.c | 2
fs/fuse/dev.c | 14 -
fs/jfs/jfs_mount.c | 51 +--
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4
fs/nfs/nfs4proc.c | 15 -
fs/nfs/pnfs_nfs.c | 4
fs/nfs/write.c | 17 -
fs/ocfs2/file.c | 8
fs/orangefs/dcache.c | 4
fs/overlayfs/file.c | 47 +++
fs/quota/quota_tree.c | 15 +
fs/tracefs/inode.c | 3
include/linux/console.h | 2
include/linux/filter.h | 1
include/linux/libata.h | 2
include/linux/lsm_hooks.h | 28 +-
include/linux/rpmsg.h | 2
include/linux/sched/task_stack.h | 4
include/linux/security.h | 33 +-
include/net/llc.h | 4
include/net/neighbour.h | 12
include/net/sch_generic.h | 4
include/net/strparser.h | 16 +
include/net/udp.h | 5
include/uapi/linux/pci_regs.h | 6
kernel/bpf/core.c | 4
kernel/cgroup/cgroup.c | 31 ++
kernel/kprobes.c | 3
kernel/locking/lockdep.c | 2
kernel/power/swap.c | 7
kernel/rcu/tree_exp.h | 2
kernel/signal.c | 18 -
kernel/trace/tracing_map.c | 40 +--
kernel/workqueue.c | 15 -
lib/decompress_unxz.c | 2
lib/iov_iter.c | 5
lib/xz/xz_dec_lzma2.c | 21 +
lib/xz/xz_dec_stream.c | 6
mm/oom_kill.c | 23 -
mm/zsmalloc.c | 7
net/8021q/vlan.c | 3
net/8021q/vlan_dev.c | 3
net/9p/client.c | 2
net/bluetooth/l2cap_sock.c | 10
net/bluetooth/sco.c | 33 +-
net/can/j1939/main.c | 7
net/can/j1939/transport.c | 6
net/core/dev.c | 5
net/core/filter.c | 21 +
net/core/neighbour.c | 48 ++-
net/core/net-sysfs.c | 55 ++++
net/core/net_namespace.c | 4
net/core/stream.c | 3
net/core/sysctl_net_core.c | 2
net/ipv4/tcp.c | 2
net/ipv6/addrconf.c | 3
net/ipv6/udp.c | 2
net/netfilter/nf_conntrack_proto_udp.c | 7
net/netfilter/nfnetlink_queue.c | 2
net/netfilter/nft_dynset.c | 11
net/rxrpc/rtt.c | 2
net/sched/sch_generic.c | 9
net/sched/sch_mq.c | 24 +
net/sched/sch_mqprio.c | 23 +
net/sched/sch_taprio.c | 27 +-
net/smc/af_smc.c | 20 -
net/strparser/strparser.c | 10
net/sunrpc/xprt.c | 28 +-
net/vmw_vsock/af_vsock.c | 2
samples/kprobes/kretprobe_example.c | 2
scripts/leaking_addresses.pl | 3
security/apparmor/label.c | 4
security/integrity/evm/evm_main.c | 2
security/security.c | 14 -
security/selinux/hooks.c | 36 +-
security/smack/smackfs.c | 11
sound/core/oss/mixer_oss.c | 43 ++-
sound/core/timer.c | 17 -
sound/pci/hda/hda_intel.c | 28 +-
sound/pci/hda/patch_realtek.c | 4
sound/soc/codecs/cs42l42.c | 9
sound/synth/emux/emux.c | 2
sound/usb/6fire/comm.c | 2
sound/usb/6fire/firmware.c | 6
sound/usb/line6/driver.c | 14 -
sound/usb/line6/driver.h | 2
sound/usb/line6/podhd.c | 6
sound/usb/line6/toneport.c | 2
sound/usb/misc/ua101.c | 4
sound/usb/quirks.c | 1
tools/lib/bpf/btf.c | 16 -
tools/perf/util/bpf-event.c | 4
tools/testing/selftests/bpf/progs/strobemeta.h | 4
tools/testing/selftests/bpf/test_progs.c | 4
tools/testing/selftests/kvm/x86_64/mmio_warning_test.c | 2
tools/testing/selftests/net/udpgso_bench_rx.c | 11
359 files changed, 2538 insertions(+), 1210 deletions(-)
Ahmad Fatoum (1):
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Ajay Singh (1):
wilc1000: fix possible memory leak in cfg_scan_result()
Alagu Sankar (1):
ath10k: high latency fixes for beacon buffer
Aleksander Jan Bajkowski (2):
MIPS: lantiq: dma: add small delay after reset
MIPS: lantiq: dma: reset correct number of channel
Alex Bee (1):
arm64: dts: rockchip: Fix GPU register width for RK3328
Alex Deucher (1):
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Alex Xu (Hello71) (1):
drm/plane-helper: fix uninitialized variable reference
Alexander Tsoy (1):
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Alok Prasad (1):
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Amit Engel (1):
nvmet-tcp: fix header digest verification
Anand Jain (1):
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Anand Moon (1):
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
Anant Thazhemadam (1):
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Anders Roxell (1):
PM: hibernate: fix sparse warnings
Andrea Righi (1):
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Andreas Gruenbacher (1):
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
Andreas Kemnade (1):
arm: dts: omap3-gta04a4: accelerometer irq fix
Andrej Shadura (2):
HID: u2fzero: clarify error check and length calculations
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrii Nakryiko (3):
selftests/bpf: Fix strobemeta selftest regression
libbpf: Fix BTF data layout checks and allow empty BTF
selftests/bpf: Fix also no-alu32 strobemeta selftest
André Almeida (1):
ACPI: battery: Accept charges over the design capacity as full
Andy Shevchenko (1):
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Anel Orazgaliyeva (1):
cpuidle: Fix kobject memory leaks in error paths
Anssi Hannula (1):
serial: xilinx_uartps: Fix race condition causing stuck TX
Antoine Tenart (1):
net-sysfs: try not to restart the syscall if it will fail eventually
Arnaud Pouliquen (1):
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Arnd Bergmann (8):
hyperv/vmbus: include linux/bitops.h
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
drm/amdgpu: fix warning for overflow check
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
memstick: avoid out-of-range warning
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
ARM: 9156/1: drop cc-option fallbacks for architecture selection
ath10k: fix invalid dma_addr_t token assignment
Arun Easi (1):
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Austin Kim (2):
ALSA: synth: missing check for possible NULL after the call to kstrdup
evm: mark evm_fixmode as __ro_after_init
Baptiste Lepers (1):
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Barnabás Pőcze (1):
platform/x86: wmi: do not fail if disabling fails
Bastien Roucariès (1):
ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
Benjamin Li (2):
wcn36xx: handle connection loss indication
wcn36xx: add proper DMA memory barriers in rx path
Bixuan Cui (1):
powerpc/44x/fsp2: add missing of_node_put
Bryant Mairs (1):
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Charan Teja Reddy (1):
dma-buf: WARN on dmabuf release with pending attachments
Chengfeng Ye (1):
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Christian Löhle (1):
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Christophe JAILLET (5):
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
mmc: mxs-mmc: disable regulator on error and in the remove function
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Christophe Leroy (1):
video: fbdev: chipsfb: use memset_io() instead of memset()
Claudiu Beznea (1):
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Clément Léger (1):
clk: at91: check pmc node status before registering syscore ops
Colin Ian King (3):
media: cxd2880-spi: Fix a null pointer dereference on error handling path
media: cx23885: Fix snd_card_free call on null card pointer
media: em28xx: Don't use ops->suspend if it is NULL
Corey Minyard (1):
ipmi: Disable some operations during a panic
Cyril Strejc (1):
net: multicast: calculate csum of looped-back and forwarded packets
Damien Le Moal (1):
libata: fix read log timeout value
Dan Carpenter (8):
tpm: Check for integer overflow in tpm2_map_response_body()
b43legacy: fix a lower bounds test
b43: fix a lower bounds test
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
drm/msm: uninitialized variable in msm_gem_import()
usb: gadget: hid: fix error code in do_config()
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
zram: off by one in read_block_state()
Daniel Borkmann (2):
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Daniel Jordan (1):
crypto: pcrypt - Delay write to padata->info
David Hildenbrand (1):
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
Desmond Cheong Zhi Xi (1):
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Dinghao Liu (1):
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Dirk Bender (1):
media: mt9p031: Fix corrupted frame after restarting stream
Dmitriy Ulitin (1):
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Dmitry Bogdanov (1):
scsi: qla2xxx: Fix unmap of already freed sgl
Dominique Martinet (1):
9p/net: fix missing error check in p9_check_errors
Dongli Zhang (2):
xen/netfront: stop tx queues during live migration
vmxnet3: do not stop tx queues after netif_device_detach()
Dongliang Mu (2):
JFS: fix memleak in jfs_mount
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Dust Li (1):
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata (1):
vsock: prevent unnecessary refcnt inc for nonblocking connect
Eric Badger (1):
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Eric Dumazet (3):
net: annotate data-race in neigh_output()
llc: fix out-of-bound array index in llc_sk_dev_hash()
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Eric W. Biederman (3):
signal: Remove the bogus sigkill_pending in ptrace_stop
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Erik Ekman (1):
sfc: Don't use netif_info before net_device setup
Evgeny Novikov (2):
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Filipe Manana (1):
btrfs: fix lost error handling when replaying directory deletes
Florian Westphal (2):
vrf: run conntrack only in context of lower/physdev for locally generated packets
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Geert Uytterhoeven (4):
mips: cm: Convert to bitfield API to fix out-of-bounds access
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
auxdisplay: ht16k33: Connect backlight to fbdev
auxdisplay: ht16k33: Fix frame buffer device blanking
Giovanni Cabiddu (2):
crypto: qat - detect PFVF collision after ACK
crypto: qat - disregard spurious PFVF interrupts
Greg Kroah-Hartman (1):
Linux 5.4.160
Guangbin Huang (1):
net: hns3: allow configure ETS bandwidth of all TCs
Guo Ren (1):
irqchip/sifive-plic: Fixup EOI failed when masked
Halil Pasic (1):
s390/cio: make ccw_device_dma_* more robust
Hannes Reinecke (1):
nvme: drop scan_lock and always kick requeue list when removing namespaces
Hans de Goede (6):
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Helge Deller (4):
parisc: Fix ptrace check on syscall return
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
parisc: Fix backtrace to always include init funtion names
parisc: Fix set_fixmap() on PA1.x CPUs
Henrik Grimler (1):
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Huang Guobin (1):
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Iago Toral Quiroga (1):
drm/v3d: fix wait for TMU write combiner flush
Ian Rogers (1):
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Ingmar Klein (1):
PCI: Mark Atheros QCA6174 to avoid bus reset
Israel Rukshin (2):
nvmet: fix use-after-free when a port is removed
nvmet-tcp: fix use-after-free when a port is removed
Jackie Liu (3):
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
ar7: fix kernel builds for compiler test
Jaegeuk Kim (1):
f2fs: should use GFP_NOFS for directory inodes
Jakob Hauser (1):
power: supply: rt5033_battery: Change voltage values to µV
Jakub Kicinski (3):
net: sched: update default qdisc visibility after Tx queue cnt changes
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
udp6: allow SO_MARK ctrl msg to affect routing
Jan Kara (1):
ocfs2: fix data corruption on truncate
Jane Malalane (1):
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Janghyub Seo (1):
r8169: Add device 10ec:8162 to driver r8169
Janis Schoetterl-Glausch (1):
KVM: s390: Fix handle_sske page fault handling
Jaroslav Kysela (1):
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jens Axboe (1):
block: remove inaccurate requeue check
Jessica Zhang (1):
drm/msm: Fix potential NULL dereference in DPU SSPP
Jia-Ju Bai (1):
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Jiasheng Jiang (1):
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Johan Hovold (12):
Input: iforce - fix control-message timeout
ALSA: ua101: fix division by zero at probe
ALSA: 6fire: fix control and bulk message timeouts
ALSA: line6: fix control and interrupt message timeouts
mwifiex: fix division by zero in fw download path
ath6kl: fix division by zero in send path
ath6kl: fix control-message timeout
ath10k: fix control-message timeout
ath10k: fix division by zero in send path
rtl8187: fix control-message timeouts
USB: iowarrior: fix control-message timeouts
USB: chipidea: fix interrupt deadlock
Johannes Berg (1):
iwlwifi: mvm: disable RX-diversity in powersave
John Fastabend (1):
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
Jon Maxwell (1):
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Jonas Dreßler (4):
mwifiex: Read a PCI register after writing the TX ring write pointer
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
mwifiex: Properly initialize private structure on interface type changes
mwifiex: Send DELBA requests according to spec
Josef Bacik (1):
btrfs: do not take the uuid_mutex in btrfs_rm_device
Juergen Gross (1):
xen/balloon: add late_initcall_sync() for initial ballooning done
Junji Wei (1):
RDMA/rxe: Fix wrong port_cap_flags
Kai-Heng Feng (1):
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Kalesh Singh (1):
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Kees Cook (5):
leaking_addresses: Always print a trailing newline
media: radio-wl1273: Avoid card name truncation
media: si470x: Avoid card name truncation
media: tm6000: Avoid card name truncation
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Krzysztof Kozlowski (2):
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Lars-Peter Clausen (1):
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Lasse Collin (2):
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
lib/xz: Validate the value before assigning it to an enum variable
Leon Romanovsky (1):
RDMA/mlx4: Return missed an error if device doesn't support steering
Li Zhang (1):
btrfs: clear MISSING device status bit in btrfs_close_one_device
Linus Lüssing (1):
ath9k: Fix potential interrupt storm on queue reset
Linus Walleij (1):
net: dsa: rtl8366rb: Fix off-by-one bug
Loic Poulain (2):
wcn36xx: Fix HT40 capability for 2Ghz band
ath10k: Fix missing frame timestamp for beacon/probe-resp
Lorenz Bauer (2):
bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
bpf: Prevent increasing bpf_jit_limit above max
Lorenzo Bianconi (1):
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
Marek Behún (4):
PCI: pci-bridge-emul: Fix emulation of W1C bits
PCI: aardvark: Fix return value of MSI domain .alloc() method
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
PCI: aardvark: Don't spam about PIO Response Status
Marek Vasut (2):
rsi: Fix module dev_oper_mode parameter description
video: backlight: Drop maximum brightness override for brightness zero
Marijn Suijten (1):
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Mario (1):
drm: panel-orientation-quirks: Add quirk for GPD Win3
Mark Rutland (1):
irq: mips: avoid nested irq_enter()
Markus Schneider-Pargmann (1):
hwrng: mtk - Force runtime pm ops for sleep ops
Martin Fuzzey (3):
rsi: fix occasional initialisation failure with BT coex
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
rsi: fix rate mask set leading to P2P failure
Martin Kepplinger (1):
media: imx: set a media_device bus_info string
Masami Hiramatsu (2):
ia64: kprobes: Fix to pass correct trampoline address to the handler
ARM: clang: Do not rely on lr register for stacktrace
Mathias Nyman (1):
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
Maurizio Lombardi (1):
nvmet-tcp: fix a memory leak when releasing a queue
Max Gurtovoy (1):
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Maxim Kiselev (1):
net: davinci_emac: Fix interrupt pacing disable
Menglong Dong (1):
workqueue: make sysfs of unbound kworker cpumask more clever
Miaohe Lin (1):
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Michael Schmitz (1):
block: ataflop: fix breakage introduced at blk-mq refactoring
Michael Walle (1):
crypto: caam - disable pkc for non-E SoCs
Michal Hocko (1):
mm, oom: do not trigger out_of_memory from the #PF
Michał Mirosław (1):
ARM: 9155/1: fix early early_iounmap()
Miklos Szeredi (2):
fuse: fix page stealing
ovl: fix deadlock in splice write
Nadezda Lutovinova (2):
media: s5p-mfc: Add checking to s5p_mfc_probe().
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Nathan Chancellor (1):
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Naveen N. Rao (5):
powerpc/lib: Add helper to check if offset is within conditional branch range
powerpc/bpf: Validate branch ranges
powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
powerpc/security: Add a helper to query stf_barrier type
powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
Neeraj Upadhyay (1):
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Nehal Bakulchandra Shah (1):
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Olivier Moysan (1):
ARM: dts: stm32: fix SAI sub nodes register range
Pablo Neira Ayuso (2):
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
netfilter: nft_dynset: relax superfluous check on set updates
Pali Rohár (7):
serial: core: Fix initializing and restoring termios speed
PCI: aardvark: Do not clear status bits of masked interrupts
PCI: aardvark: Fix checking for link up via LTSSM state
PCI: aardvark: Do not unmask unused interrupts
PCI: aardvark: Fix reporting Data Link Layer Link Active
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Pavel Skripkin (3):
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
media: em28xx: add missing em28xx_close_extension
media: dvb-usb: fix ununit-value in az6027_rc_query
Pawan Gupta (1):
smackfs: Fix use-after-free in netlbl_catmap_walk()
Paweł Anikiel (1):
reset: socfpga: add empty driver allowing consumers to probe
Pekka Korpinen (1):
iio: dac: ad5446: Fix ad5622_write() return value
Peter Rosin (1):
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Peter Zijlstra (2):
locking/lockdep: Avoid RCU-induced noinstr fail
x86: Increase exception stack sizes
Phoenix Huang (1):
Input: elantench - fix misreporting trackpoint coordinates
Punit Agrawal (1):
kprobes: Do not use local variable when creating debugfs file
Quinn Tran (3):
scsi: qla2xxx: Fix use after free in eh_abort path
scsi: qla2xxx: Fix gnl list corruption
scsi: qla2xxx: Turn off target reset during issue_lip
Rafael J. Wysocki (1):
ACPICA: Avoid evaluating methods too early during system resume
Rahul Lakkireddy (1):
cxgb4: fix eeprom len when diagnostics not implemented
Rajat Asthana (1):
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Randy Dunlap (3):
mmc: winbond: don't build on M68K
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
m68k: set a default value for MEMORY_RESERVE
Reimar Döffinger (1):
libata: fix checking of DMA state
Ricardo Ribalda (6):
media: v4l2-ioctl: Fix check_ext_ctrls
media: uvcvideo: Set capability in s_param
media: uvcvideo: Return -EIO for control errors
media: uvcvideo: Set unique vdev name based in type
media: ipu3-imgu: imgu_fmt: Handle properly try
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
Richard Fitzgerald (2):
ASoC: cs42l42: Correct some register default values
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Robert-Ionut Alexa (1):
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Russell King (Oracle) (1):
net: phylink: avoid mvneta warning when setting pause parameters
Sean Christopherson (2):
x86/irq: Ensure PI wakeup handler is unregistered before module unload
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Sean Young (2):
media: ite-cir: IR receiver stop working after receive overflow
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Selvin Xavier (1):
RDMA/bnxt_re: Fix query SRQ failure
Shuah Khan (1):
selftests: kvm: fix mismatched fclose() after popen()
Shyam Sundar S K (1):
net: amd-xgbe: Toggle PLL settings during rate change
Simon Ser (1):
drm/panel-orientation-quirks: add Valve Steam Deck
Stefan Agner (1):
phy: micrel: ksz8041nl: do not use power down mode
Stephen Suryaputra (1):
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Steven Rostedt (VMware) (1):
tracefs: Have tracefs directories not set OTH permission bits by default
Sukadev Bhattiprolu (2):
ibmvnic: don't stop queue in xmit
ibmvnic: Process crqs after enabling interrupts
Sven Eckelmann (1):
ath10k: fix max antenna gain unit
Sven Schnelle (4):
parisc: fix warning in flush_tlb_all
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
s390/tape: fix timer initialization in tape_std_assign()
Takashi Iwai (6):
Input: i8042 - Add quirk for Fujitsu Lifebook T725
ALSA: hda/realtek: Add quirk for ASUS UX550VE
ALSA: timer: Unconditionally unlink slave instances, too
ALSA: mixer: oss: Fix racy access to slots
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
ALSA: hda: Reduce udelay() at SKL+ position reporting
Tang Bin (1):
crypto: s5p-sss - Add error handling in s5p_aes_probe()
Tetsuo Handa (2):
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Thomas Perrot (1):
spi: spl022: fix Microwire full duplex mode
Tiezhu Yang (1):
samples/kretprobes: Fix return value if register_kretprobe() failed
Tim Crawford (1):
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Todd Kjos (3):
binder: use euid from cred instead of using task
binder: use cred instead of task for selinux checks
binder: use cred instead of task for getsecid
Tom Lendacky (1):
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Tom Rix (2):
media: TDA1997x: handle short reads of hdmi info frame.
apparmor: fix error check
Tong Zhang (1):
scsi: dc395: Fix error case unwinding
Tony Lindgren (1):
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Trond Myklebust (3):
NFS: Fix deadlocks in nfs_scan_commit_list()
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
SUNRPC: Partial revert of commit 6f9f17287e78
Tuo Li (2):
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Vasant Hegde (1):
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Vasily Averin (1):
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Vegard Nossum (1):
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Vineeth Vijayan (1):
s390/cio: check the subchannel validity for dev_busid
Vitaly Kuznetsov (1):
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Vladimir Zapolskiy (1):
phy: qcom-qusb2: Fix a memory leak on probe
Waiman Long (1):
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Walter Stoll (1):
watchdog: Fix OMAP watchdog early handling
Wang Hai (3):
USB: serial: keyspan: fix memleak on probe errors
libertas_tf: Fix possible memory leak in probe and disconnect
libertas: Fix possible memory leak in probe and disconnect
Wang ShaoBo (1):
Bluetooth: fix use-after-free error in lock_sock_nested()
Wang Wensheng (1):
ALSA: timer: Fix use-after-free problem
Wen Gu (1):
net/smc: Correct spelling mistake to TCPF_SYN_RECV
Willem de Bruijn (1):
selftests/net: udpgso_bench_rx: fix port argument
Xiaoming Ni (1):
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Yajun Deng (1):
net: net_namespace: Fix undefined member in key_remove_domain()
Yang Yingliang (3):
pinctrl: core: fix possible memory leak in pinctrl_enable()
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
hwmon: Fix possible memleak in __hwmon_device_register()
Yazen Ghannam (1):
EDAC/amd64: Handle three rank interleaving mode
Ye Bin (1):
PM: hibernate: Get block device exclusively in swsusp_check()
Yu Xiao (1):
nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
YueHaibing (2):
opp: Fix return in _opp_add_static_v2()
xen-pciback: Fix return in pm_ctrl_init()
Zev Weiss (3):
hwmon: (pmbus/lm25066) Add offset coefficients
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
mtd: core: don't remove debugfs directory if device is in use
Zhang Changzhong (2):
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Yi (2):
quota: check block number when reading the block in quota file
quota: correct error number in free_dqentry()
Zheyu Ma (6):
cavium: Return negative value when pci_alloc_irq_vectors() fails
scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
cavium: Fix return values of the probe function
media: netup_unidvb: handle interrupt properly according to the firmware
memstick: r592: Fix a UAF bug when removing the driver
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ziyang Xuan (2):
rsi: stop thread firstly in rsi_91x_init() error handling
net: vlan: fix a UAF in vlan_dev_real_dev()
jing yangyang (1):
firmware/psci: fix application of sizeof to pointer
liuyuntao (1):
virtio-gpu: fix possible memory allocation failure
^ permalink raw reply [relevance 2%]
* [PATCH 5.15 000/927] 5.15.3-rc2 review
@ 2021-11-16 15:01 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-16 15:01 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.15.3 release.
There are 927 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 18 Nov 2021 14:24:22 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.15.3-rc2
Hans de Goede <hdegoede@redhat.com>
media: videobuf2-dma-sg: Fix buf->vb NULL pointer dereference
Sergey Senozhatsky <senozhatsky@chromium.org>
media: videobuf2: always set buffer vb2 pointer
Borislav Petkov <bp@suse.de>
x86/sev: Make the #VC exception stacks part of the default stacks storage
Tom Lendacky <thomas.lendacky@amd.com>
x86/sev: Add an x86 version of cc_platform_has()
Tom Lendacky <thomas.lendacky@amd.com>
arch/cc: Introduce a function to check for confidential computing features
Herbert Xu <herbert@gondor.apana.org.au>
crypto: api - Fix boot-up crash when crypto manager is disabled
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix also no-alu32 strobemeta selftest
Borislav Petkov <bp@suse.de>
selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
Colin Ian King <colin.king@canonical.com>
mmc: moxart: Fix null pointer dereference on pointer host
Arnd Bergmann <arnd@arndb.de>
ath10k: fix invalid dma_addr_t token assignment
Paulo Alcantara <pc@cjr.nz>
cifs: fix memory leak of smb3_fs_context_dup::server_hostname
Hans Verkuil <hverkuil-cisco@xs4all.nl>
media: vidtv: move kfree(dvb) to vidtv_bridge_dev_release()
Herbert Xu <herbert@gondor.apana.org.au>
crypto: api - Do not create test larvals if manager is disabled
Herbert Xu <herbert@gondor.apana.org.au>
crypto: api - Export crypto_boot_test_finished
Mario Limonciello <mario.limonciello@amd.com>
drm/amd/display: Look at firmware version to determine using dmub on dcn21
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Partial revert of commit 6f9f17287e78
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix PCIe Max Payload Size setting
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: Fix macros in sun8i_csc.h
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
Nathan Lynch <nathanl@linux.ibm.com>
powerpc/pseries/mobility: ignore ibm, platform-facilities updates
Nicholas Piggin <npiggin@gmail.com>
powerpc/64s/interrupt: Fix check_return_regs_valid() false positive
Russell Currey <ruscur@russell.cc>
powerpc/security: Use a mutex for interrupt exit code patching
Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Nicholas Piggin <npiggin@gmail.com>
powerpc/32e: Ignore ESR in instruction storage interrupt handler
Hari Bathini <hbathini@linux.ibm.com>
powerpc/bpf: Fix write protecting JIT code
Gustavo A. R. Silva <gustavoars@kernel.org>
powerpc/vas: Fix potential NULL pointer dereference
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: fsmc: Fix use of SM ORDER
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix rsc-table name
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix ignoring mapping vdev regions
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: Fix the wrong default value of is_iomem
Peng Fan <peng.fan@nxp.com>
remoteproc: elf_loader: Fix loading segment when is_iomem true
Halil Pasic <pasic@linux.ibm.com>
s390/cio: make ccw_device_dma_* more robust
Harald Freudenberger <freude@linux.ibm.com>
s390/ap: Fix hanging ioctl caused by orphaned replies
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Thomas Richter <tmricht@linux.ibm.com>
s390/cpumf: cpum_cf PMU displays invalid value after hotplug remove
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Avoid calling put_device() under dpm_list_mtx
Coly Li <colyli@suse.de>
bcache: Revert "bcache: use bvec_virt"
Coly Li <colyli@suse.de>
bcache: fix use-after-free problem in bcache_device_free()
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Jack Andersen <jackoalan@gmail.com>
mfd: dln2: Add cell for initializing DLN2 ADC
Rongwei Wang <rongwei.wang@linux.alibaba.com>
mm, thp: fix incorrect unmap behavior for private pages
Rongwei Wang <rongwei.wang@linux.alibaba.com>
mm, thp: lock filemap when truncating page cache
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Vasily Averin <vvs@virtuozzo.com>
memcg: prohibit unconditional exceeding the limit of dying tasks
Matthew Wilcox (Oracle) <willy@infradead.org>
mm/filemap.c: remove bogus VM_BUG_ON
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Anatolij Gustschin <agust@denx.de>
dmaengine: bestcomm: fix system boot lockups
Kishon Vijay Abraham I <kishon@ti.com>
dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
Kishon Vijay Abraham I <kishon@ti.com>
dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: don't need 8byte alignment for request length in ksmbd_check_message
Marios Makassikis <mmakassikis@freebox.fr>
ksmbd: Fix buffer length check in fsctl_validate_negotiate_info()
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
block: Hold invalidate_lock in BLKRESETZONE ioctl
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
block: Hold invalidate_lock in BLKZEROOUT ioctl
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
block: Hold invalidate_lock in BLKDISCARD ioctl
Matthew Brost <matthew.brost@intel.com>
drm/i915/guc: Fix blocked context accounting
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: fix unsafe pagevec reuse of hooked pclusters
Xiubo Li <xiubli@redhat.com>
ceph: fix mdsmap decode when there are MDS's beyond max_mds
Dongliang Mu <mudongliangabcd@gmail.com>
f2fs: fix UAF in f2fs_available_free_memory
Daeho Jeong <daehojeong@google.com>
f2fs: include non-compressed blocks in compr_written_block
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Guo Ren <guoren@linux.alibaba.com>
irqchip/sifive-plic: Fixup EOI failed when masked
Michael Pratt <mpratt@google.com>
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
Paolo Bonzini <pbonzini@redhat.com>
KVM: x86: move guest_pv_has out of user_access section
Thomas Gleixner <tglx@linutronix.de>
PCI/MSI: Destroy sysfs before freeing entries
Thomas Gleixner <tglx@linutronix.de>
PCI/MSI: Move non-mask check back into low level accessors
Dave Jones <davej@codemonkey.org.uk>
x86/mce: Add errata workaround for Skylake SKX37
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
Masahiro Yamada <masahiroy@kernel.org>
MIPS: fix *-pkg builds for loongson2ef platform
Masahiro Yamada <masahiroy@kernel.org>
MIPS: fix duplicated slashes for Platform file path
John David Anglin <dave.anglin@bell.net>
parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
Helge Deller <deller@gmx.de>
parisc: Fix backtrace to always include init funtion names
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Steve French <stfrench@microsoft.com>
smb3: do not error on fsync when readonly
Linus Torvalds <torvalds@linux-foundation.org>
thermal: int340x: fix build on 32-bit targets
Willem de Bruijn <willemb@google.com>
selftests/net: udpgso_bench_rx: fix port argument
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Dust Li <dust.li@linux.alibaba.com>
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Marek Behún <kabel@kernel.org>
net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
Vladimir Oltean <vladimir.oltean@nxp.com>
net: stmmac: allow a tc-taprio base-time of zero
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: allow configure ETS bandwidth of all TCs
Yufeng Mo <moyufeng@huawei.com>
net: hns3: fix kernel crash when unload VF while it is being reset
Jie Wang <wangjie125@huawei.com>
net: hns3: fix pfc packet number incorrect after querying pfc parameters
Jie Wang <wangjie125@huawei.com>
net: hns3: fix ROCE base interrupt vector initialization bug
Eric Dumazet <edumazet@google.com>
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Marek Behún <kabel@kernel.org>
net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than 10
Evan Quan <evan.quan@amd.com>
drm/amdgpu: fix uvd crash on Polaris12 during driver unloading
Muchun Song <songmuchun@bytedance.com>
seq_file: fix passing wrong private data
Andrew Halaney <ahalaney@redhat.com>
init: make unknown command line param message clearer
Imre Deak <imre.deak@intel.com>
drm/i915/fb: Fix rounding error in subsampled plane size calculation
Dan Carpenter <dan.carpenter@oracle.com>
gve: Fix off by one in gve_tx_timeout()
Arnd Bergmann <arnd@arndb.de>
dmaengine: stm32-dma: avoid 64-bit division in stm32_dma_get_max_width
Amelie Delaunay <amelie.delaunay@foss.st.com>
dmaengine: stm32-dma: fix burst in case of unaligned memory address
Jussi Maki <joamaki@gmail.com>
bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
John Fastabend <john.fastabend@gmail.com>
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Fix race in ingress receive verdict with redirect to self
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Remove unhash handler for BPF sockmap usage
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Reiji Watanabe <reijiw@google.com>
arm64: arm64_ftr_reg->name may not be a human-readable string
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
litex_liteeth: Fix a double free in the remove function
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Ian Rogers <irogers@google.com>
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
Vincent Mailhol <mailhol.vincent@wanadoo.fr>
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/powerplay: fix sysfs_emit/sysfs_emit_at handling
Fabio Estevam <festevam@gmail.com>
Revert "drm/imx: Annotate dma-fence critical section in commit path"
Arnd Bergmann <arnd@arndb.de>
drm: fb_helper: improve CONFIG_FB dependency
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Limit the tests in netns
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Give tcpdump a chance to terminate cleanly
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Use arping to accurate the arp number
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Put the logs to tmp folder
Mehrdad Arshad Rad <arshad.rad@gmail.com>
libbpf: Fix lookup_and_delete_elem_flags error reporting
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Fix device wakeup power reference counting error
Kai Song <songkai01@inspur.com>
mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
Mark Brown <broonie@kernel.org>
mfd: sprd: Add SPI device ID table
Mark Brown <broonie@kernel.org>
mfd: cpcap: Add SPI device ID table
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
mfd: core: Add missing of_node_put for loop iteration
Takashi Iwai <tiwai@suse.de>
ALSA: memalloc: Catch call with NULL snd_dma_buffer pointer
Arnd Bergmann <arnd@arndb.de>
octeontx2-pf: select CONFIG_NET_DEVLINK
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Jason Gunthorpe <jgg@ziepe.ca>
drm/ttm: remove ttm_bo_vm_insert_huge()
Luis Chamberlain <mcgrof@kernel.org>
block: fix device_add_disk() kobject_create_and_add() error handling
Heiner Kallweit <hkallweit1@gmail.com>
net: phy: fix duplex out of sync problem while changing settings
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
Selvin Xavier <selvin.xavier@broadcom.com>
PCI: Do not enable AtomicOps on VFs
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
ataflop: remove ataflop_probe_lock mutex
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: provide a helper for cleanup up an atari disk
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: add registration bool before calling del_gendisk()
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: use the blk_cleanup_disk() helper
Luis Chamberlain <mcgrof@kernel.org>
nvdimm/pmem: cleanup the disk if pmem_release_disk() is yet assigned
Chenyuan Mi <cymi20@fudan.edu.cn>
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
Andrea Righi <andrea.righi@canonical.com>
selftests: net: properly support IPv6 in GSO GRE test
Avri Altman <avri.altman@wdc.com>
scsi: ufs: ufshpb: Properly handle max-single-cmd
Bean Huo <beanhuo@micron.com>
scsi: ufs: core: Fix NULL pointer dereference
Daejun Park <daejun7.park@samsung.com>
scsi: ufs: ufshpb: Use proper power management API
Jackie Liu <liuyun01@kylinos.cn>
scsi: bsg: Fix errno when scsi_bsg_register_queue() fails
Luis Chamberlain <mcgrof@kernel.org>
nvdimm/btt: do not call del_gendisk() if not needed
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
PCI: j721e: Fix j721e_pcie_probe() error path
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Daniel Thompson <daniel.thompson@linaro.org>
kdb: Adopt scheduler's task classification
Brett Creeley <brett.creeley@intel.com>
ice: Fix not stopping Tx queues for VFs
Sylwester Dziedziuch <sylwesterx.dziedziuch@intel.com>
ice: Fix replacing VF hardware MAC to existing MAC filter
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
Ziyang Xuan <william.xuanziyang@huawei.com>
net: vlan: fix a UAF in vlan_dev_real_dev()
Stafford Horne <shorne@gmail.com>
openrisc: fix SMP tlb flush NULL pointer dereference
Jakub Kicinski <kuba@kernel.org>
ethtool: fix ethtool msg len calculation for pause stats
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed toeplitz.sh/toeplitz_client.sh to Makefile
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed vrf_strict_mode_test.sh test to Makefile
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed SRv6 tests
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed setup_loopback.sh/setup_veth.sh to Makefile
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed icmp.sh test to Makefile
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
Beld Zhang <beldzhang@gmail.com>
io-wq: fix max-workers not correctly set on multi-node system
Yu Kuai <yukuai3@huawei.com>
nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
Yu Kuai <yukuai3@huawei.com>
nbd: fix max value for 'first_minor'
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Sander Vanheule <sander@svanheule.net>
gpio: realtek-otto: fix GPIO line IRQ offset
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Dave Jiang <dave.jiang@intel.com>
dmaengine: idxd: fix resource leak on dmaengine driver disable
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Fix EDIF bsg
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Increase ELS payload
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Flush stale events and msgs on session down
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Fix app start delay
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Fix app start fail
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Relogin during fabric disturbance
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: target: core: Remove from tmr_list during LUN unlink
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Eric W. Biederman <ebiederm@xmission.com>
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Dave Jiang <dave.jiang@intel.com>
dmaengine: idxd: reconfig device after device reset command
Dave Jiang <dave.jiang@intel.com>
dmanegine: idxd: fix resource free ordering on driver removal
Dongliang Mu <mudongliangabcd@gmail.com>
dmaengine: tegra210-adma: fix pm runtime unbalance
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Robert-Ionut Alexa <robert-ionut.alexa@nxp.com>
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Alexey Gladkov <legion@kernel.org>
Fix user namespace leak
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix an Oops in pnfs_mark_request_commit()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix up commit deadlocks
Amelie Delaunay <amelie.delaunay@foss.st.com>
dmaengine: stm32-dma: fix stm32_dma_get_max_width
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
Dan Carpenter <dan.carpenter@oracle.com>
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
Zev Weiss <zev@bewilderbeest.net>
mtd: core: don't remove debugfs directory if device is in use
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: arasan: Prevent an unsupported configuration
Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Guido Günther <agx@sigxcpu.org>
drm/bridge: nwl-dsi: Add atomic_get_input_bus_fmts
John Keeping <john@metanate.com>
Input: st1232 - increase "wait ready" timeout
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Kees Cook <keescook@chromium.org>
sparc: Add missing "FORCE" target when using if_changed
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
YueHaibing <yuehaibing@huawei.com>
opp: Fix return in _opp_add_static_v2()
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/bridge/lontium-lt9611uxc: fix provided connector suport
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix dentry verifier races
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Ignore the directory size when marking for revalidation
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
Kewei Xu <kewei.xu@mediatek.com>
i2c: mediatek: fixing the incorrect register offset
Mark Brown <broonie@kernel.org>
Input: ariel-pwrbutton - add SPI device ID table
Mark Brown <broonie@kernel.org>
rtc: mcp795: Add SPI ID table
Dave Jiang <dave.jiang@intel.com>
dmaengine: idxd: move out percpu_ref_exit() to ensure it's outside submission
Heiner Kallweit <hkallweit1@gmail.com>
i2c: i801: Use PCI bus rescan mutex to protect P2SB access
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix TCM io memory type
Mark Brown <broonie@kernel.org>
rtc: pcf2123: Add SPI ID table
Mark Brown <broonie@kernel.org>
rtc: ds1390: Add SPI ID table
Mark Brown <broonie@kernel.org>
rtc: ds1302: Add SPI ID table
J. Bruce Fields <bfields@redhat.com>
nfsd: don't alloc under spinlock in rpc_parse_scope_id
Evgeny Novikov <novikov@ispras.ru>
mtd: rawnand: intel: Fix potential buffer overflow in probe
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Aharon Landau <aharonl@nvidia.com>
RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Parav Pandit <parav@nvidia.com>
vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: check desc == NULL when using indirect with packed
Geert Uytterhoeven <geert@linux-m68k.org>
serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: rsnd: Fix an error handling path in 'rsnd_node_count()'
Yixing Liu <liuyixing1@huawei.com>
RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
Haoyue Xu <xuhaoyue1@hisilicon.com>
RDMA/hns: Fix initial arm_st of CQ
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc: Don't provide __kernel_map_pages() without ARCH_SUPPORTS_DEBUG_PAGEALLOC
Logan Gunthorpe <logang@deltatee.com>
iommu/dma: Fix incorrect error return on iommu deferred attach
Takashi Sakamoto <o-takashi@sakamocchi.jp>
ALSA: oxfw: fix functional regression for Mackie Onyx 1640i in v5.14 or later
Denis Kirjanov <kda@linux-powerpc.org>
powerpc/xmon: fix task state output
Bixuan Cui <cuibixuan@linux.alibaba.com>
powerpc/44x/fsp2: add missing of_node_put
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/book3e: Fix set_memory_x() and set_memory_nx()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: clarify error check and length calculations
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: clk-master: fix prescaler logic
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: clk-master: check if div or pres is zero
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Yang Yingliang <yangyingliang@huawei.com>
phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
Sandeep Maheswaram <quic_c_sanm@quicinc.com>
phy: qcom-snps: Correct the FSEL_MASK
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
phy: qcom-qmp: another fix for the sc8180x PCIe definition
Dan Carpenter <dan.carpenter@oracle.com>
phy: ti: gmii-sel: check of_get_address() for failure
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Mark Brown <broonie@kernel.org>
ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
Rahul Tanwar <rtanwar@maxlinear.com>
pinctrl: equilibrium: Fix function addition in multiple groups
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
Bhupesh Sharma <bhupesh.sharma@linaro.org>
arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
Marijn Suijten <marijn.suijten@somainline.org>
arm64: dts: qcom: pmi8994: Fix "eternal"->"external" typo in WLED node
Wan Jiabing <wanjiabing@vivo.com>
soc: qcom: apr: Add of_node_put() before return
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
Guru Das Srinagesh <quic_gurus@quicinc.com>
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
Jack Pham <jackp@codeaurora.org>
usb: dwc3: gadget: Skip resizing EP's TX FIFO if already resized
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: reset current session before setting the new one
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
Stefan Agner <stefan@agner.ch>
serial: imx: fix detach/attach of serial console
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: bus: stop dereferencing invalid slave pointer
Nuno Sá <nuno.sa@analog.com>
iio: adis: do not disabe IRQs in 'adis_init()'
Randy Dunlap <rdunlap@infradead.org>
usb: typec: STUSB160X should select REGMAP_I2C
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
soc: qcom: socinfo: add two missing PMIC IDs
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Make power_on actually enable the domain
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Always configure both ASP TX channels
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix SAI sub nodes register range
Fabrice Gasnier <fabrice.gasnier@foss.st.com>
ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
Geert Uytterhoeven <geert+renesas@glider.be>
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
Athira Rajeev <atrajeev@linux.vnet.ibm.cm>
powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
Andrew Halaney <ahalaney@redhat.com>
dyndbg: make dyndbg a known cli param
Logan Gunthorpe <logang@deltatee.com>
RDMA/core: Set sgtable nents when using ib_dma_virt_map_sg()
Vegard Nossum <vegard.nossum@oracle.com>
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Nikita Yushchenko <nikita.yoush@cogentembedded.com>
staging: most: dim2: do not double-register the same device
Randy Dunlap <rdunlap@infradead.org>
usb: musb: select GENERIC_PHY instead of depending on it
Leon Romanovsky <leon@kernel.org>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Yang Yingliang <yangyingliang@huawei.com>
power: supply: max17040: fix null-ptr-deref in max17040_probe()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc: fix unbalanced node refcount in check_kvm_guest()
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype for 'create_section_mapping'
Clément Léger <clement.leger@bootlin.com>
clk: at91: check pmc node status before registering syscore ops
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Mark Brown <broonie@kernel.org>
iio: st_pressure_spi: Add missing entries SPI to device ID table
Ranjani Sridharan <ranjani.sridharan@linux.intel.com>
ASoC: SOF: topology: do not power down primary core during topology removal
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Yang Yingliang <yangyingliang@huawei.com>
driver core: Fix possible memory leak in device_link_add()
Igor Pylypiv <ipylypiv@google.com>
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
Sumit Saxena <sumit.saxena@broadcom.com>
scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt
Bart Van Assche <bvanassche@google.com>
scsi: ufs: core: Stop clearing UNIT ATTENTIONS
Bean Huo <beanhuo@micron.com>
scsi: ufs: core: Fix ufshcd_probe_hba() prototype to match the definition
Claudiu Beznea <claudiu.beznea@microchip.com>
power: reset: at91-reset: check properly the return value of devm_of_iomap
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: debugfs: use controller id and link_id for debugfs
Takashi Iwai <tiwai@suse.de>
ALSA: usb-audio: Fix possible race at sync of urb completions
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Use position buffer for SKL+ again
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
David Stevens <stevensd@chromium.org>
iommu/dma: Fix arch_sync_dma for map
David Stevens <stevensd@chromium.org>
iommu/dma: Fix sync_sg with swiotlb
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
Arnd Bergmann <arnd@arndb.de>
iommu/mediatek: Fix out-of-range warning with clang
Geert Uytterhoeven <geert+renesas@glider.be>
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
Yassine Oudjana <y.oudjana@protonmail.com>
ASoC: wcd9335: Use correct version to initialize Class H
Biju Das <biju.das.jz@bp.renesas.com>
pinctrl: renesas: rzg2l: Fix missing port register 21h
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Kuogee Hsieh <khsieh@codeaurora.org>
arm64: dts: qcom: sc7280: fix display port phy reg property
Naina Mehta <nainmeht@codeaurora.org>
soc: qcom: llcc: Disable MMUHWT retention
Douglas Anderson <dianders@chromium.org>
arm64: dts: qcom: sc7180: Base dynamic CPU power coefficients in reality
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Tony Lindgren <tony@atomide.com>
bus: ti-sysc: Fix timekeeping_suspended warning on resume
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-sm1: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie node
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Marijn Suijten <marijn.suijten@somainline.org>
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Fix NVMe I/O failover to non-optimized path
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Use link event to wake up app
Ajish Koshy <Ajish.Koshy@microchip.com>
scsi: pm80xx: Fix lockup in outbound queue management
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
Rafał Miłecki <rafal@milecki.pl>
arm64: dts: broadcom: bcm4908: Fix UART clock name
Rafał Miłecki <rafal@milecki.pl>
ARM: dts: BCM5301X: Fix memory nodes names
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Alexandru Ardelean <aardelean@deviqon.com>
iio: st_sensors: disable regulators after device unregistration
Dongjin Kim <tobetter@gmail.com>
arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
Pavel Skripkin <paskripkin@gmail.com>
staging: r8188eu: fix memory leak in rtw_set_key
Hector.Yuan <hector.yuan@mediatek.com>
cpufreq: Fix parameter in parse_perf_domain()
Frank Rowand <frank.rowand@sony.com>
of: unittest: fix EXPECT text for gpio hog errors
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
Dan Schatzberg <schatzberg.dan@gmail.com>
cgroup: Fix rootcg cpu.stat guest double counting
Liu Jian <liujian56@huawei.com>
skmsg: Lose offset info in sk_psock_skb_ingress
Geliang Tang <geliang.tang@suse.com>
selftests: mptcp: fix proto type in link_failure tests
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: delay complete()
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: don't stop queue in xmit
Jakub Kicinski <kuba@kernel.org>
udp6: allow SO_MARK ctrl msg to affect routing
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Nikolay Aleksandrov <nikolay@nvidia.com>
selftests: net: bridge: update IGMP/MLD membership interval value
Ivan Vecera <ivecera@redhat.com>
net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Yinjun Zhang <yinjun.zhang@corigine.com>
nfp: fix potential deadlock when canceling dim work
Yinjun Zhang <yinjun.zhang@corigine.com>
nfp: fix NULL pointer access when scheduling dim work
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ipmi: kcs_bmc: Fix a memory leak in the error handling path of 'kcs_bmc_serio_add_device()'
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Xin Long <lucien.xin@gmail.com>
sctp: return true only for pathmtu update in sctp_transport_pl_toobig
Xin Long <lucien.xin@gmail.com>
sctp: subtract sctphdr len in sctp_transport_pl_hlen
Xin Long <lucien.xin@gmail.com>
sctp: reset probe_timer in sctp_transport_pl_update
Xin Long <lucien.xin@gmail.com>
sctp: allow IP fragmentation when PLPMTUD enters Error state
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix memory leak in test_ima
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix fd cleanup in sk_lookup test
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Lang Yu <lang.yu@amd.com>
drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw()
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Channel list update before hardware scan
Eric Dumazet <edumazet@google.com>
bpf: Fixes possible race in update_prog_stats() for 32bit arches
Eric Dumazet <edumazet@google.com>
bpf: Avoid races in __bpf_prog_run() for 32bit arches
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix discarded frames due to wrong sequence number
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Peter Zijlstra <peterz@infradead.org>
x86: Fix __get_wchan() for !STACKTRACE
Kees Cook <keescook@chromium.org>
sched: Add wrapper for get_wchan() to keep task blocked
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
spi: spi-rpc-if: Check return value of rpcif_sw_init()
Zhang Rui <rui.zhang@intel.com>
cpufreq: intel_pstate: Fix cpu->pstate.turbo_freq initialization
Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
tracing: Fix missing trace_boot_init_histograms kstrdup NULL checks
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Ilya Leoshkevich <iii@linux.ibm.com>
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
Mark Brown <broonie@kernel.org>
tpm_tis_spi: Add missing SPI ID
Hao Wu <hao.wu@rubrik.com>
tpm: fix Atmel TPM crash caused by too frequent queries
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix off-by-one bug in bpf_core_apply_relo()
Yu Kuai <yukuai3@huawei.com>
blk-cgroup: synchronize blkg creation against policy deactivation
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: more blk-mq refactoring fixes
Abinaya Kalaiselvan <akalaise@codeaurora.org>
ath10k: fix module load regression with iram-recovery feature
Arnd Bergmann <arnd@arndb.de>
ARM: 9142/1: kasan: work around LPAE build warning
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid double free of sida page
David Hildenbrand <david@redhat.com>
s390/uv: fully validate the VMA before calling follow_page()
David Hildenbrand <david@redhat.com>
s390/mm: fix VMA and page table handling code in storage key handling functions
David Hildenbrand <david@redhat.com>
s390/mm: validate VMA in PGSTE manipulation functions
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
David Hildenbrand <david@redhat.com>
s390/gmap: validate VMA in __gmap_zap()
Nick Hainke <vincent@systemli.org>
mt76: mt7615: mt7622: fix ibss and meshpoint
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF header parsing checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix overflow in BTF sanity checks
Quentin Monnet <quentin@isovalent.com>
bpftool: Avoid leaking the JSON writer prepared for program metadata
Mauricio Vásquez <mauricio@kinvolk.io>
libbpf: Fix memory leak in btf__dedup()
Jim Mattson <jmattson@google.com>
KVM: selftests: Fix nested SVM tests when built with clang
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Horia Geantă <horia.geanta@nxp.com>
crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm/dsi: fix wrong type in msm_dsi_host
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Joerg Roedel <jroedel@suse.de>
x86/sev: Fix stack type check in vc_switch_off_ist()
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Ye Bin <yebin10@huawei.com>
nbd: Fix use-after-free in pid_show
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Tim Gardner <tim.gardner@canonical.com>
net: enetc: unmap DMA in enetc_send_cmd()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pnvm: read EFI data only if long enough
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pnvm: don't kmemdup() more than we have
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: reset PM state on unsuccessful resume
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix sta_rec_wtbl tag len
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: connac: fix possible NULL pointer dereference in mt76_connac_get_phy_mode_v2
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7615: fix monitor mode tear down crash
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix retrying release semaphore without end
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix possible infinite loop release semaphore
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7615: fix hwmon temp sensor mem use-after-free
Ben Greear <greearb@candelatech.com>
mt76: mt7915: fix hwmon temp sensor mem use-after-free
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: always wake device if necessary in debugfs
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix firmware usage of RA info using legacy rates
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: report HE MU radiotap
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: overwrite default reg_ops if necessary
Leon Yen <Leon.Yen@mediatek.com>
mt76: connac: fix GTK rekey offload failure on WPA mixed mode
Deren Wu <deren.wu@mediatek.com>
mt76: mt7921: fix dma hang in rmmod
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix bit fields for HT rate idx
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix potential overflow of eeprom page index
Deren Wu <deren.wu@mediatek.com>
mt76: mt7921: Fix out of order process by invalid event pkt
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix survey-dump reporting
Sean Wang <sean.wang@mediatek.com>
mt76: fix build error implicit enumeration conversion
Leon Yen <Leon.Yen@mediatek.com>
mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
Dan Carpenter <dan.carpenter@oracle.com>
mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix endianness warning in mt7921_update_txs
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event
Lang Yu <lang.yu@amd.com>
drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Fix sharing of wakeup power resources
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Turn off unused wakeup power resources
Fei Shao <fshao@chromium.org>
mailbox: mtk-cmdq: Fix local clock ID usage
Fei Shao <fshao@chromium.org>
mailbox: mtk-cmdq: Validate alias_id on probe
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Andrea Righi <andrea.righi@canonical.com>
blk-wbt: prevent NULL pointer dereference in wb_timer_fn
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: fix breakage introduced at blk-mq refactoring
Bixuan Cui <cuibixuan@huawei.com>
io-wq: Remove duplicate code in io_workqueue_create()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Sean Young <sean@mess.org>
media: ir_toy: assignment to be16 should be of correct type
Randy Dunlap <rdunlap@infradead.org>
media: ivtv: fix build for UML
jason-jh.lin <jason-jh.lin@mediatek.com>
mailbox: Remove WARN_ON for async_cb.cb in cmdq_exec_done
Jackie Liu <liuyun01@kylinos.cn>
thermal/drivers/qcom/lmh: make QCOM_LMH depends on QCOM_SCM
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: fix potential NULL dereference in cleanup
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: unlock on error in get_sched_entity()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: potential error pointer dereference in init()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init()
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/msm/dsi: do not enable irq handler before powering up the host
Ziyang Xuan <william.xuanziyang@huawei.com>
thermal/core: fix a UAF bug in __thermal_cooling_device_register()
Ovidiu Panait <ovidiu.panait@windriver.com>
crypto: octeontx2 - set assoclen in aead_do_fallback()
Eric Dumazet <edumazet@google.com>
tcp: switch orphan_count to bare per-cpu counters
Qi Zheng <zhengqi.arch@bytedance.com>
x86: Fix get_wchan() to support the ORC unwinder
Randy Dunlap <rdunlap@infradead.org>
net: tulip: winbond-840: fix build for UML
Randy Dunlap <rdunlap@infradead.org>
net: intel: igc_ptp: fix build for UML
Randy Dunlap <rdunlap@infradead.org>
net: fealnx: fix build for UML
Zhang Qiao <zhangqiao22@huawei.com>
kernel/sched: Fix sched_fork() access an invalid sched_task_group
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix context restore
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Catherine Sullivan <csully@google.com>
gve: Track RX buffer allocation failures
John Fraker <jfraker@google.com>
gve: Recover from queue stall due to missed IRQ
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
liqiong <liqiong@nfschina.com>
ima: fix deadlock when traversing "ima_default_rules".
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Arnd Bergmann <arnd@arndb.de>
crypto: ccree - avoid out-of-range warnings from clang
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Mansur Alisha Shaik <mansur@codeaurora.org>
media: venus: fix vpp frequency calculation for decoder
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_dynset: relax superfluous check on set updates
Peter Zijlstra <peterz@infradead.org>
rcu: Fix rcu_dynticks_curr_cpu_in_eqs() vs noinstr
Peter Zijlstra <peterz@infradead.org>
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
Yazen Ghannam <yazen.ghannam@amd.com>
EDAC/amd64: Handle three rank interleaving mode
Borislav Petkov <bp@suse.de>
x86/insn: Use get_unaligned() instead of memcpy()
Vincent Donnefort <vincent.donnefort@arm.com>
PM: EM: Fix inefficient states detection
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Stephen Boyd <swboyd@chromium.org>
ath10k: Don't always treat modem stop events as crashes
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Arnd Bergmann <arnd@arndb.de>
drm: fb_helper: fix CONFIG_FB dependency
Arnd Bergmann <arnd@arndb.de>
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
Punit Agrawal <punitagrawal@gmail.com>
kprobes: Do not use local variable when creating debugfs file
Yee Lee <yee.lee@mediatek.com>
scs: Release kasan vmalloc poison in scs_free process
Eugen Hristev <eugen.hristev@microchip.com>
media: atmel: fix the ispck initialization
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: tm6000: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: radio-wl1273: Avoid card name truncation
Ondrej Jirman <megous@megous.com>
media: sun6i-csi: Allow the video device to be open multiple times
Randy Dunlap <rdunlap@infradead.org>
media: i2c: ths8200 needs V4L2_ASYNC
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Tom Rix <trix@redhat.com>
media: TDA1997x: handle short reads of hdmi info frame.
Dafna Hirschfeld <dafna.hirschfeld@collabora.com>
media: mtk-vcodec: venc: fix return value when start_streaming fails
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: S_CTRL output the right value
Sakari Ailus <sakari.ailus@linux.intel.com>
media: imx258: Fix getting clock frequency
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Evgeny Novikov <novikov@ispras.ru>
media: ttusb-dec: avoid release of non-acquired mutex
Colin Ian King <colin.king@canonical.com>
media: cxd2880-spi: Fix a null pointer dereference on error handling path
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: meson-ge2d: Fix rotation parameter changes detection in 'ge2d_s_ctrl()'
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Kumar Kartikeya Dwivedi <memxor@gmail.com>
libbpf: Fix skel_internal.h to set errno on loader retval < 0
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Sudarshan Rajagopalan <quic_sudaraja@quicinc.com>
arm64: mm: update max_pfn after memory hotplug
Matthew Auld <matthew.auld@intel.com>
drm/ttm: stop calling tt_swapin in vm_access
Fabio Estevam <festevam@denx.de>
ath10k: sdio: Add missing BH locking around napi_schdule()
Loic Poulain <loic.poulain@linaro.org>
ath10k: Fix missing frame timestamp for beacon/probe-resp
Arnd Bergmann <arnd@arndb.de>
gve: DQO: avoid unused variable warnings
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
Pradeep Kumar Chitrapu <pradeepc@codeaurora.org>
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid race during regd updates
Dan Carpenter <dan.carpenter@oracle.com>
ath11k: fix some sleeping in atomic bugs
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix error in tail call limit tests
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366: Fix a bug in deleting VLANs
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Leon Romanovsky <leon@kernel.org>
net/mlx5: Accept devlink user input after driver initialization complete
Johannes Berg <johannes.berg@intel.com>
cfg80211: always free wiphy specific regdomain
Johannes Berg <johannes.berg@intel.com>
mac80211: twt: don't use potentially unaligned pointer
Kees Cook <keescook@chromium.org>
fortify: Fix dropped strcpy() compile-time write overflow check
Florian Westphal <fw@strlen.de>
mptcp: do not shrink snd_nxt when recovering
Jiasheng Jiang <jiasheng@iscas.ac.cn>
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Leon Romanovsky <leon@kernel.org>
qed: Don't ignore devlink allocation failures
Leon Romanovsky <leon@kernel.org>
bnxt_en: Check devlink allocation and registration status
Hans de Goede <hdegoede@redhat.com>
Bluetooth: hci_h5: Fix (runtime)suspend issues on RTL8723BS HCIs
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - power up 4xxx device
Michael Walle <michael@walle.cc>
crypto: caam - disable pkc for non-E SoCs
Guchun Chen <guchun.chen@amd.com>
drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage
Harry Wentland <harry.wentland@amd.com>
drm/amd/display: Pass display_pipe_params_st as const in DML
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix crash on device remove/driver unload
Dinghao Liu <dinghao.liu@zju.edu.cn>
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Ajay Singh <ajay.kathat@microchip.com>
wilc1000: fix possible memory leak in cfg_scan_result()
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
wcn36xx: Fix Antenna Diversity Switching
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Yoshitaka Ikeda <ikeda@nskint.co.jp>
spi: Fixed division by zero warning
Alex Bee <knaerzche@gmail.com>
drm: bridge: it66121: Fix return value it66121_probe
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: don't call netif_carrier_off() with NULL netdev
Yajun Deng <yajun.deng@linux.dev>
net: net_namespace: Fix undefined member in key_remove_domain()
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
lockdep: Let lock_is_held_type() detect recursive read as read
liuyuntao <liuyuntao10@huawei.com>
virtio-gpu: fix possible memory allocation failure
Nathan Chancellor <nathan@kernel.org>
crypto: sm4 - Do not change section of ck and sbox
Iago Toral Quiroga <itoral@igalia.com>
drm/v3d: fix wait for TMU write combiner flush
Leon Romanovsky <leon@kernel.org>
net/mlx5: Publish and unpublish all devlink parameters at once
Peter Zijlstra <peterz@infradead.org>
objtool: Handle __sanitize_cov*() tail calls
Peter Zijlstra <peterz@infradead.org>
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: fix burst length for DEU
Neeraj Upadhyay <neeraju@codeaurora.org>
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: hci_uart: fix GPF in h5_recv
Toke Høiland-Jørgensen <toke@redhat.com>
libbpf: Don't crash on object files with no symbol tables
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Paul Cercueil <paul@crapouillou.net>
drm/bridge: it66121: Wait for next bridge to be probed
Paul Cercueil <paul@crapouillou.net>
drm/bridge: it66121: Initialize {device,vendor}_ids
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR M2PCIE event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR CHA event constraints
Robert Foss <robert.foss@linaro.org>
drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
Imre Deak <imre.deak@intel.com>
fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix strobemeta selftest regression
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: don't trigger WARN() when decompression fails
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Stephane Eranian <eranian@google.com>
perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
Shuah Khan <skhan@linuxfoundation.org>
selftests/core: fix conflicting types compile error for close_range()
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Eric Dumazet <edumazet@google.com>
inet: remove races in inet{6}_getname()
王贇 <yun.wang@linux.alibaba.com>
ftrace: do CPU checking after preemption disabled
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
Revert "wcn36xx: Enable firmware link monitoring"
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix packet drop on resume
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Correct band/freq reporting on RX
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Josef Bacik <josef@toxicpanda.com>
btrfs: do not take the uuid_mutex in btrfs_rm_device
Sidong Yang <realwakka@gmail.com>
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
Hui Wang <hui.wang@canonical.com>
ACPI: resources: Add one more Medion model in IRQ override quirk
Stefan Schaeckeler <schaecsn@gmx.net>
ACPI: AC: Quirk GK45 to skip reading _PSR
Eric Dumazet <edumazet@google.com>
net: annotate data-race in neigh_output()
Florian Westphal <fw@strlen.de>
vrf: run conntrack only in context of lower/physdev for locally generated packets
Viktor Rosendahl <Viktor.Rosendahl@bmw.de>
tools/latency-collector: Use correct size when writing queue_full_warning
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Fix glock_hash_walk bugs
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Cancel remote delete work asynchronously
Marc Kleine-Budde <mkl@pengutronix.de>
can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to unsigned int
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Jiri Olsa <jolsa@redhat.com>
selftests/bpf: Fix perf_buffer test on system with offline cpus
Shuah Khan <skhan@linuxfoundation.org>
selftests: kvm: fix mismatched fclose() after popen()
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Nick Desaulniers <ndesaulniers@google.com>
arm64: vdso32: suppress error message for 'make mrproper'
David Yang <davidcomponentone@gmail.com>
samples/bpf: Fix application of sizeof to pointer
Hannes Reinecke <hare@suse.de>
nvme: drop scan_lock and always kick requeue list when removing namespaces
Israel Rukshin <israelr@nvidia.com>
nvmet-tcp: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet-rdma: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet: fix use-after-free when a port is removed
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
Michael Tretter <m.tretter@pengutronix.de>
media: allegro: ignore interrupt if mailbox is not initialized
Jens Axboe <axboe@kernel.dk>
block: remove inaccurate requeue check
Yaara Baruch <yaara.baruch@intel.com>
iwlwifi: change all JnP to NO-160 configuration
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7915: fix an off-by-one bound check
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Yanfei Xu <yanfei.xu@windriver.com>
locking/rwsem: Disable preemption for spinning region
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Xiao Ni <xni@redhat.com>
md: update superblock after changing rdev flags in state_store
Luis Chamberlain <mcgrof@kernel.org>
floppy: fix calling platform_device_unregister() on invalid drives
Jens Axboe <axboe@kernel.dk>
block: bump max plugged deferred size from 16 to 32
Ansuel Smith <ansuelsmth@gmail.com>
thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
Tim Gardner <tim.gardner@canonical.com>
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
Yuanzheng Song <songyuanzheng@huawei.com>
thermal/core: Fix null pointer dereference in thermal_release()
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
net: phy: micrel: make *-skew-ps check more lenient
Yifan Zhang <yifan1.zhang@amd.com>
drm/amdkfd: fix resume error when iommu disabled in Picasso
Aurabindo Pillai <aurabindo.pillai@amd.com>
drm/amd/display: fix null pointer deref when plugging in display
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: scan: Release PM resources blocked by unused objects
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Andreas Gruenbacher <agruenba@redhat.com>
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
Xin Xiong <xiongx18@fudan.edu.cn>
mmc: moxart: Fix reference count leaks in moxart_probe
Will Deacon <will@kernel.org>
KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracing: Disable "other" permission bits in the tracefs files
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Alex Sierra <alex.sierra@amd.com>
drm/amdkfd: rm BO resv on validation to avoid deadlock
Antoine Tenart <atenart@kernel.org>
net-sysfs: try not to restart the syscall if it will fail eventually
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: imgu_fmt: Handle properly try
Mirela Rabulea <mirela.rabulea@nxp.com>
media: imx-jpeg: Fix possible null pointer dereference
Wojciech Drewek <wojciech.drewek@intel.com>
ice: Move devlink port to PF/VF struct
Vincent Donnefort <vincent.donnefort@arm.com>
cpufreq: Make policy min/max hard requirements
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Li Zhijian <lizhijian@cn.fujitsu.com>
kselftests/sched: cleanup the child processes
Josh Don <joshdon@google.com>
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
Corey Minyard <cminyard@mvista.com>
ipmi: Disable some operations during a panic
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Hans de Goede <hdegoede@redhat.com>
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Zong-Zhe Yang <kevin_yang@realtek.com>
rtw88: fix RX clock gate setting while fifo dump
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Niklas Söderlund <niklas.soderlund+renesas@ragnatech.se>
media: rcar-vin: Use user provided buffers when starting
Martin Kepplinger <martink@posteo.de>
media: imx: set a media_device bus_info string
Sergey Senozhatsky <senozhatsky@chromium.org>
media: videobuf2: rework vb2_mem_ops API
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Evgeny Novikov <novikov@ispras.ru>
media: vidtv: Fix memory leak in remove
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set unique vdev name based in type
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Dmitriy Ulitin <ulitin@ispras.ru>
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Evgeny Novikov <novikov@ispras.ru>
media: atomisp: Fix error handling in probe
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Rakesh Babu <rsaladi2@marvell.com>
octeontx2-pf: Enable promisc/allmulti match MCAM entries.
Alagu Sankar <alagusankar@silex-india.com>
ath10k: high latency fixes for beacon buffer
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
Wen Gong <wgong@codeaurora.org>
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid reg rules update during firmware recovery
Petr Machata <petrm@nvidia.com>
selftests: net: fib_nexthops: Wait before checking reported idle time
Herbert Xu <herbert@gondor.apana.org.au>
crypto: api - Fix built-in testing dependency failures
Jimmy Kizito <Jimmy.Kizito@amd.com>
drm/amd/display: Fix null pointer dereference for encoders
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix MMIO access page fault
Eric Biggers <ebiggers@google.com>
fscrypt: allow 256-bit master keys with AES-256-XTS
Mark Brown <broonie@kernel.org>
spi: Check we have a spi_device_id for each DT compatible
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Peter Zijlstra <peterz@infradead.org>
x86/mm/64: Improve stack overflow warnings
Shreyansh Chouhan <chouhan.shreyansh630@gmail.com>
crypto: aesni - check walk.nbytes instead of err
Seevalamuthu Mariappan <seevalam@codeaurora.org>
ath11k: Align bss_chan_info structure with firmware
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Paul E. McKenney <paulmck@kernel.org>
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
Hui Wang <hui.wang@canonical.com>
ACPI: resources: Add DMI-based legacy IRQ override quirk
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
James Zhu <James.Zhu@amd.com>
drm/amdgpu: move iommu_resume before ip init/resume
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Scott Wood <swood@redhat.com>
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
Simon Ser <contact@emersion.fr>
drm/panel-orientation-quirks: add Valve Steam Deck
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: call sock_hold earlier in sco_conn_del
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
Charan Teja Reddy <charante@codeaurora.org>
dma-buf: WARN on dmabuf release with pending attachments
Kai Vehmanen <kai.vehmanen@linux.intel.com>
component: do not leave master devres group open after bind
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Clear status bits in interrupt handler
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Johan Hovold <johan@kernel.org>
most: fix control-message timeouts
Johan Hovold <johan@kernel.org>
Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
Pali Rohár <pali@kernel.org>
serial: 8250: Fix reporting real baudrate value in c_ospeed field
Jens Axboe <axboe@kernel.dk>
io-wq: serialize hash clear with wakeup
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION
Johan Hovold <johan@kernel.org>
serial: 8250: fix racy uartclk update
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Mihail Chindris <mihail.chindris@analog.com>
Documentation:devicetree:bindings:iio:dac: Fix val
Nuno Sá <nuno.sa@analog.com>
iio: ad5770r: make devicetree property reading consistent
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Mihail Chindris <mihail.chindris@analog.com>
drivers: iio: dac: ad5766: Fix dt property name
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: check return value of kstrdup_const()
Suzuki K Poulose <suzuki.poulose@arm.com>
coresight: trbe: Defer the probe on offline CPUs
Suzuki K Poulose <suzuki.poulose@arm.com>
coresight: trbe: Fix incorrect access of the sink specific data
Tao Zhang <quic_taozha@quicinc.com>
coresight: cti: Correct the parameter for pm_runtime_put
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Robert Marko <robert.marko@sartura.hr>
mfd: simple-mfd-i2c: Select MFD_CORE to fix build error
Paulo Alcantara <pc@cjr.nz>
cifs: set a minimum of 120s for next dns resolution
Shyam Prasad N <sprasad@microsoft.com>
cifs: To match file servers, make sure the server hostname matches
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix configuring Reference clock
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix reporting Data Link Layer Link Active
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix checking for link up via LTSSM state
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Dan Williams <dan.j.williams@intel.com>
cxl/pci: Fix NULL vs ERR_PTR confusion
Li Chen <lchen@ambarella.com>
PCI: cadence: Add cdns_plat_pcie_probe() missing return
Marek Behún <kabel@kernel.org>
PCI: pci-bridge-emul: Fix emulation of W1C bits
Miklos Szeredi <mszeredi@redhat.com>
ovl: fix filattr copy-up failure
yangerkun <yangerkun@huawei.com>
ovl: fix use after free in struct ovl_aio_req
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Arnd Bergmann <arnd@arndb.de>
ifb: fix building without CONFIG_NET_CLS_ACT
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Steven Rostedt (VMware) <rostedt@goodmis.org>
ring-buffer: Protect ring_buffer_reset() from reentrancy
Pavel Begunkov <asml.silence@gmail.com>
io_uring: honour zeroes as io-wq worker limits
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Oleksij Rempel <linux@rempel-privat.de>
iio: adc: tsc2046: fix scan interval warning
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_irq(): add missing can_rx_offload_threaded_irq_finish() in case of bus off
Stephane Grosjean <s.grosjean@peak-system.com>
can: peak_usb: always ask for BERR reporting for PCAN-USB devices
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Handle dynamic MSR intercept toggling
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Sean Christopherson <seanjc@google.com>
KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
David Woodhouse <dwmw2@infradead.org>
KVM: x86: Fix recording of guest steal time / preempted status
Mark Rutland <mark.rutland@arm.com>
KVM: arm64: Extract ESR_ELx.EC only
Yang Yingliang <yangyingliang@huawei.com>
iio: core: check return value when calling dev_set_name()
Yang Yingliang <yangyingliang@huawei.com>
iio: core: fix double free in iio_device_unregister_sysfs()
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Eugene Syromiatnikov <esyr@redhat.com>
mctp: handle the struct sockaddr_mctp padding fields
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: use the combined functions to protect critical zone
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
David Virag <virag.david003@gmail.com>
soc: samsung: exynos-pmu: Fix compilation when nothing selects CONFIG_MFD_CORE
Eric W. Biederman <ebiederm@xmission.com>
signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Wolfram Sang <wsa+renesas@sang-engineering.com>
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Dmitry Osipenko <digetx@gmail.com>
ASoC: tegra: Restore AC97 support
Dmitry Osipenko <digetx@gmail.com>
ASoC: tegra: Set default card name for Trimslice
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix invalid unit check
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Christian König <christian.koenig@amd.com>
dma-buf: fix and rework dma_buf_poll v7
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Try waking the firmware until we get an interrupt
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix (QoS) null data frame bitrate/modulation
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix tx_status mechanism
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Maximilian Luz <luzmaximilian@gmail.com>
HID: surface-hid: Allow driver matching for target ID 1 devices
Maximilian Luz <luzmaximilian@gmail.com>
HID: surface-hid: Use correct event registry for managing HID events
Felix Fietkau <nbd@nbd.name>
mt76: mt7615: fix skb use-after-free on mac reset
Maximilian Luz <luzmaximilian@gmail.com>
platform/surface: aggregator_registry: Add support for Surface Laptop Studio
Lukas Wunner <lukas@wunner.de>
ifb: Depend on netfilter alternatively to tc
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Guoqing Jiang <guoqing.jiang@linux.dev>
md/raid1: only allocate write behind bio for WriteMostly device
Corey Minyard <cminyard@mvista.com>
ipmi:watchdog: Set panic count to proper value on a panic
Ondrej Mosnacek <omosnace@redhat.com>
selinux: fix race condition when computing ocontext SIDs
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Laurent Vivier <lvivier@redhat.com>
KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
Sean Christopherson <seanjc@google.com>
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
Sean Christopherson <seanjc@google.com>
KVM: x86/mmu: Drop a redundant, broken remote TLB flush
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
Peter Zijlstra <peterz@infradead.org>
x86/iopl: Fake iopl(3) CLI/STI usage
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix page stealing
yangerkun <yangerkun@huawei.com>
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
yangerkun <yangerkun@huawei.com>
ext4: ensure enough credits in ext4_ext_shift_path_extents
Shaoying Xu <shaoyi@amazon.com>
ext4: fix lazy initialization next schedule time computation in more granular unit
Eric Whitney <enwlinux@gmail.com>
Revert "ext4: enforce buffer head state assertion in ext4_da_map_blocks"
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Takashi Iwai <tiwai@suse.de>
ALSA: PCM: Fix NULL dereference at mmap checks
Takashi Iwai <tiwai@suse.de>
ALSA: pci: rme: Fix unaligned buffer addresses
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Free card instance properly at probe errors
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Jason Ormes <skryking@gmail.com>
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Kai-Heng Feng <kai.heng.feng@canonical.com>
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add quirk for ASUS UX550VE
Jaroslav Kysela <perex@perex.cz>
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jeremy Soller <jeremy@system76.com>
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
Johnathon Clark <john.clark@cantab.net>
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: Fix check_ext_ctrls
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Support dynamic resolution changes
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Do not override sizeimage for output format
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Helge Deller <deller@gmx.de>
parisc: Fix set_fixmap() on PA1.x CPUs
Pavel Begunkov <asml.silence@gmail.com>
io-wq: remove worker to owner tw dependency
Sungjong Seo <sj1557.seo@samsung.com>
exfat: fix incorrect loading of i_blocks for large files
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Derong Liu <derong.liu@mediatek.com>
mmc: mtk-sd: Add wait dma stop done flow
Ziyang Xuan <william.xuanziyang@huawei.com>
char: xillybus: fix msg_ep UAF in xillyusb_probe()
Ben Skeggs <bskeggs@redhat.com>
ce/gf100: fix incorrect CE0 address calculation on some GPUs
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix use after free in eh_abort path
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix crash in NVMe abort path
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
Ewan D. Milne <emilne@redhat.com>
scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: scsi_ioctl: Validate command size
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Johan Hovold <johan@kernel.org>
Input: iforce - fix control-message timeout
Nehal Bakulchandra Shah <Nehal-Bakulchandra.shah@amd.com>
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 +
.../devicetree/bindings/iio/dac/adi,ad5766.yaml | 2 +-
.../bindings/regulator/samsung,s5m8767.txt | 23 +-
Documentation/filesystems/fscrypt.rst | 10 +-
Makefile | 4 +-
arch/Kconfig | 3 +
arch/alpha/include/asm/processor.h | 2 +-
arch/alpha/kernel/process.c | 5 +-
arch/arc/include/asm/processor.h | 2 +-
arch/arc/kernel/stacktrace.c | 4 +-
arch/arm/Makefile | 22 +-
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/bcm4708-netgear-r6250.dts | 2 +-
arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts | 2 +-
arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts | 2 +-
arch/arm/boot/dts/bcm4709-linksys-ea9200.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r7000.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r8000.dts | 2 +-
arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts | 2 +-
arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts | 2 +-
arch/arm/boot/dts/bcm53016-meraki-mr32.dts | 2 +-
arch/arm/boot/dts/bcm94708.dts | 2 +-
arch/arm/boot/dts/bcm94709.dts | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/qcom-msm8974.dtsi | 4 +-
arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 8 +-
arch/arm/boot/dts/stm32mp151.dtsi | 16 +-
arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi | 2 +-
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 2 +-
arch/arm/include/asm/processor.h | 2 +-
arch/arm/kernel/process.c | 4 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mach-s3c/irq-s3c24xx.c | 22 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/kasan_init.c | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2 +-
.../boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi | 4 +-
.../boot/dts/amlogic/meson-g12b-odroid-n2.dtsi | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi | 4 +-
.../boot/dts/amlogic/meson-sm1-bananapi-m5.dts | 2 +-
.../boot/dts/amlogic/meson-sm1-khadas-vim3l.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-sm1-odroid.dtsi | 6 +-
arch/arm64/boot/dts/amlogic/meson-sm1-sei610.dts | 2 +-
arch/arm64/boot/dts/broadcom/bcm4908/bcm4908.dtsi | 2 +-
arch/arm64/boot/dts/qcom/msm8916.dtsi | 8 +-
arch/arm64/boot/dts/qcom/pm8916.dtsi | 1 -
arch/arm64/boot/dts/qcom/pmi8994.dtsi | 2 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-coachz.dtsi | 2 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-pompom.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sc7180.dtsi | 52 ++---
arch/arm64/boot/dts/qcom/sc7280.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sdm845.dtsi | 6 +-
.../arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 1 +
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
arch/arm64/boot/dts/ti/k3-j7200-main.dtsi | 6 +-
arch/arm64/boot/dts/ti/k3-j721e-main.dtsi | 16 +-
arch/arm64/include/asm/esr.h | 1 +
arch/arm64/include/asm/pgtable.h | 12 +-
arch/arm64/include/asm/processor.h | 2 +-
arch/arm64/kernel/cpufeature.c | 10 +-
arch/arm64/kernel/process.c | 4 +-
arch/arm64/kernel/vdso32/Makefile | 3 +-
arch/arm64/kvm/arm.c | 30 ++-
arch/arm64/kvm/hyp/hyp-entry.S | 2 +-
arch/arm64/kvm/hyp/nvhe/host.S | 2 +-
arch/arm64/mm/mmu.c | 5 +
arch/csky/include/asm/processor.h | 2 +-
arch/csky/kernel/stacktrace.c | 5 +-
arch/h8300/include/asm/processor.h | 2 +-
arch/h8300/kernel/process.c | 5 +-
arch/hexagon/include/asm/processor.h | 2 +-
arch/hexagon/kernel/process.c | 4 +-
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/include/asm/processor.h | 2 +-
arch/ia64/kernel/kprobes.c | 9 +-
arch/ia64/kernel/process.c | 5 +-
arch/m68k/Kconfig.machine | 1 +
arch/m68k/include/asm/processor.h | 2 +-
arch/m68k/kernel/process.c | 4 +-
arch/microblaze/include/asm/processor.h | 2 +-
arch/microblaze/kernel/process.c | 2 +-
arch/mips/Kbuild.platforms | 2 +-
arch/mips/Kconfig | 1 +
arch/mips/Makefile | 2 +
arch/mips/include/asm/cmpxchg.h | 5 +-
arch/mips/include/asm/mips-cm.h | 12 +-
arch/mips/include/asm/processor.h | 2 +-
arch/mips/kernel/mips-cm.c | 21 +-
arch/mips/kernel/process.c | 8 +-
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 -
arch/mips/lantiq/xway/dma.c | 23 +-
arch/nds32/include/asm/processor.h | 2 +-
arch/nds32/kernel/process.c | 7 +-
arch/nios2/include/asm/processor.h | 2 +-
arch/nios2/kernel/process.c | 5 +-
arch/openrisc/include/asm/processor.h | 2 +-
arch/openrisc/kernel/dma.c | 4 +-
arch/openrisc/kernel/process.c | 2 +-
arch/openrisc/kernel/smp.c | 6 +-
arch/parisc/include/asm/pgtable.h | 10 +-
arch/parisc/include/asm/processor.h | 2 +-
arch/parisc/kernel/cache.c | 4 +-
arch/parisc/kernel/entry.S | 2 +-
arch/parisc/kernel/process.c | 5 +-
arch/parisc/kernel/smp.c | 19 +-
arch/parisc/kernel/unwind.c | 21 +-
arch/parisc/kernel/vmlinux.lds.S | 3 +-
arch/parisc/mm/fixmap.c | 5 +-
arch/parisc/mm/init.c | 4 +-
arch/powerpc/Kconfig | 6 +-
arch/powerpc/include/asm/nohash/32/pgtable.h | 19 +-
arch/powerpc/include/asm/nohash/32/pte-8xx.h | 22 ++
arch/powerpc/include/asm/nohash/64/pgtable.h | 5 -
arch/powerpc/include/asm/nohash/pte-book3e.h | 18 +-
arch/powerpc/include/asm/paravirt.h | 18 +-
arch/powerpc/include/asm/processor.h | 2 +-
arch/powerpc/kernel/firmware.c | 7 +-
arch/powerpc/kernel/head_booke.h | 15 +-
arch/powerpc/kernel/interrupt.c | 2 +-
arch/powerpc/kernel/process.c | 9 +-
arch/powerpc/kvm/book3s_hv.c | 30 ++-
arch/powerpc/kvm/booke.c | 16 +-
arch/powerpc/lib/feature-fixups.c | 11 +
arch/powerpc/mm/mem.c | 2 +-
arch/powerpc/mm/nohash/tlb_low_64e.S | 8 +-
arch/powerpc/mm/pgtable_32.c | 2 +-
arch/powerpc/net/bpf_jit_comp.c | 2 +-
arch/powerpc/perf/power10-events-list.h | 8 +-
arch/powerpc/perf/power10-pmu.c | 44 ++--
arch/powerpc/platforms/44x/fsp2.c | 2 +
arch/powerpc/platforms/85xx/Makefile | 4 +-
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 7 +-
arch/powerpc/platforms/85xx/smp.c | 12 +-
arch/powerpc/platforms/book3s/vas-api.c | 4 +-
arch/powerpc/platforms/powernv/opal-prd.c | 12 +-
arch/powerpc/platforms/pseries/mobility.c | 34 +++
arch/powerpc/xmon/xmon.c | 3 +-
arch/riscv/include/asm/processor.h | 2 +-
arch/riscv/kernel/stacktrace.c | 12 +-
arch/s390/include/asm/processor.h | 2 +-
arch/s390/kernel/perf_cpum_cf.c | 4 +-
arch/s390/kernel/process.c | 4 +-
arch/s390/kernel/uv.c | 2 +-
arch/s390/kvm/priv.c | 2 +
arch/s390/kvm/pv.c | 21 +-
arch/s390/mm/gmap.c | 11 +-
arch/s390/mm/pgtable.c | 70 ++++--
arch/sh/include/asm/processor_32.h | 2 +-
arch/sh/kernel/cpu/fpu.c | 10 +-
arch/sh/kernel/process_32.c | 5 +-
arch/sparc/boot/Makefile | 8 +-
arch/sparc/include/asm/processor_32.h | 2 +-
arch/sparc/include/asm/processor_64.h | 2 +-
arch/sparc/kernel/process_32.c | 5 +-
arch/sparc/kernel/process_64.c | 5 +-
arch/um/include/asm/processor-generic.h | 2 +-
arch/um/kernel/process.c | 5 +-
arch/x86/Kconfig | 1 +
arch/x86/crypto/aesni-intel_glue.c | 2 +-
arch/x86/events/intel/core.c | 5 +-
arch/x86/events/intel/ds.c | 5 +-
arch/x86/events/intel/uncore_discovery.h | 2 +-
arch/x86/events/intel/uncore_snbep.c | 16 +-
arch/x86/hyperv/hv_init.c | 5 +-
arch/x86/include/asm/cpu_entry_area.h | 8 +-
arch/x86/include/asm/insn-eval.h | 1 +
arch/x86/include/asm/irq_stack.h | 37 ++-
arch/x86/include/asm/kvm_host.h | 2 +-
arch/x86/include/asm/mem_encrypt.h | 1 +
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/include/asm/processor.h | 3 +-
arch/x86/include/asm/stacktrace.h | 10 +
arch/x86/include/asm/traps.h | 6 +-
arch/x86/kernel/Makefile | 6 +
arch/x86/kernel/cc_platform.c | 69 ++++++
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 +++-
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/cpu/hygon.c | 2 +
arch/x86/kernel/cpu/mce/intel.c | 5 +-
arch/x86/kernel/dumpstack_64.c | 6 +
arch/x86/kernel/irq.c | 4 +-
arch/x86/kernel/process.c | 66 ++----
arch/x86/kernel/sev.c | 32 ---
arch/x86/kernel/traps.c | 60 +++--
arch/x86/kvm/cpuid.c | 47 ++--
arch/x86/kvm/mmu/mmu.c | 6 +-
arch/x86/kvm/vmx/nested.c | 103 ++++----
arch/x86/kvm/vmx/vmx.c | 68 +-----
arch/x86/kvm/vmx/vmx.h | 63 +++++
arch/x86/kvm/x86.c | 108 ++++++---
arch/x86/lib/insn-eval.c | 2 +-
arch/x86/lib/insn.c | 5 +-
arch/x86/mm/cpu_entry_area.c | 7 +
arch/x86/mm/fault.c | 20 +-
arch/x86/mm/mem_encrypt.c | 1 +
arch/x86/mm/mem_encrypt_identity.c | 9 +
arch/xtensa/include/asm/processor.h | 2 +-
arch/xtensa/kernel/process.c | 5 +-
block/blk-cgroup.c | 10 +
block/blk-mq.c | 5 +-
block/blk-wbt.c | 3 +
block/blk-zoned.c | 15 +-
block/blk.h | 6 +
block/genhd.c | 8 +-
block/ioctl.c | 24 +-
crypto/Kconfig | 2 +-
crypto/algapi.c | 125 ++++++----
crypto/api.c | 50 +++-
crypto/internal.h | 10 +
crypto/pcrypt.c | 12 +-
crypto/tcrypt.c | 5 +-
drivers/acpi/ac.c | 19 ++
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +-
drivers/acpi/acpica/hwxfsleep.c | 7 +
drivers/acpi/battery.c | 2 +-
drivers/acpi/glue.c | 25 ++
drivers/acpi/internal.h | 1 +
drivers/acpi/pmic/intel_pmic.c | 51 ++--
drivers/acpi/power.c | 86 +++----
drivers/acpi/resource.c | 56 ++++-
drivers/acpi/scan.c | 6 +
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 +
drivers/auxdisplay/ht16k33.c | 66 +++---
drivers/auxdisplay/img-ascii-lcd.c | 10 +
drivers/base/component.c | 5 +-
drivers/base/core.c | 4 +-
drivers/base/power/main.c | 93 +++++---
drivers/block/ataflop.c | 141 ++++++-----
drivers/block/floppy.c | 9 +-
drivers/block/nbd.c | 24 +-
drivers/block/zram/zram_drv.c | 2 +-
drivers/bluetooth/btmtkuart.c | 13 +-
drivers/bluetooth/hci_h5.c | 28 ++-
drivers/bus/ti-sysc.c | 65 +++++-
drivers/char/hw_random/mtk-rng.c | 9 +-
drivers/char/ipmi/ipmi_msghandler.c | 10 +-
drivers/char/ipmi/ipmi_watchdog.c | 25 +-
drivers/char/ipmi/kcs_bmc_serio.c | 4 +-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/char/tpm/tpm_tis_core.c | 26 ++-
drivers/char/tpm/tpm_tis_core.h | 4 +
drivers/char/tpm/tpm_tis_spi_main.c | 1 +
drivers/char/xillybus/xillyusb.c | 1 +
drivers/clk/at91/clk-master.c | 6 +-
drivers/clk/at91/clk-sam9x60-pll.c | 4 +-
drivers/clk/at91/pmc.c | 5 +
drivers/clk/mvebu/ap-cpu-clk.c | 14 +-
drivers/clocksource/Kconfig | 1 +
drivers/cpufreq/cpufreq.c | 7 +
drivers/cpufreq/intel_pstate.c | 35 ++-
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/caam/caampkc.c | 19 +-
drivers/crypto/caam/regs.h | 3 +
drivers/crypto/ccree/cc_driver.c | 3 +-
drivers/crypto/marvell/octeontx2/otx2_cptvf_algs.c | 1 +
drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.c | 31 +++
drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.h | 10 +
drivers/crypto/qat/qat_common/adf_accel_devices.h | 1 +
drivers/crypto/qat/qat_common/adf_init.c | 5 +
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 ++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +
drivers/crypto/s5p-sss.c | 2 +
drivers/cxl/pci.c | 2 +-
drivers/dma-buf/dma-buf.c | 153 ++++++------
drivers/dma/at_xdmac.c | 53 +++--
drivers/dma/bestcomm/ata.c | 2 +-
drivers/dma/bestcomm/bestcomm.c | 22 +-
drivers/dma/bestcomm/fec.c | 4 +-
drivers/dma/bestcomm/gen_bd.c | 4 +-
drivers/dma/dmaengine.h | 2 +-
drivers/dma/idxd/device.c | 3 +-
drivers/dma/idxd/dma.c | 5 +-
drivers/dma/idxd/init.c | 14 +-
drivers/dma/stm32-dma.c | 23 +-
drivers/dma/tegra210-adma.c | 2 +-
drivers/dma/ti/k3-udma.c | 32 ++-
drivers/edac/amd64_edac.c | 22 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci/psci_checker.c | 2 +-
drivers/firmware/qcom_scm.c | 2 +-
drivers/gpio/gpio-realtek-otto.c | 2 +-
drivers/gpu/drm/Kconfig | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 15 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 2 +-
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/uvd_v3_1.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v4_2.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v5_0.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v6_0.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v7_0.c | 32 +--
drivers/gpu/drm/amd/amdgpu/vce_v2_0.c | 19 +-
drivers/gpu/drm/amd/amdgpu/vce_v3_0.c | 28 +--
drivers/gpu/drm/amd/amdgpu/vce_v4_0.c | 44 ++--
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 8 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 17 +-
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 1 +
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 7 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 +-
drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c | 2 +-
.../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 2 +-
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 18 +-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3 +-
.../display/dc/dml/dcn20/display_rq_dlg_calc_20.c | 6 +-
.../display/dc/dml/dcn20/display_rq_dlg_calc_20.h | 4 +-
.../dc/dml/dcn20/display_rq_dlg_calc_20v2.c | 6 +-
.../dc/dml/dcn20/display_rq_dlg_calc_20v2.h | 4 +-
.../display/dc/dml/dcn21/display_rq_dlg_calc_21.c | 62 ++---
.../display/dc/dml/dcn21/display_rq_dlg_calc_21.h | 4 +-
.../display/dc/dml/dcn30/display_rq_dlg_calc_30.c | 72 +++---
.../display/dc/dml/dcn30/display_rq_dlg_calc_30.h | 4 +-
.../display/dc/dml/dcn31/display_rq_dlg_calc_31.c | 68 +++---
.../display/dc/dml/dcn31/display_rq_dlg_calc_31.h | 4 +-
.../gpu/drm/amd/display/dc/dml/display_mode_lib.h | 4 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu10_hwmgr.c | 8 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 10 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu8_hwmgr.c | 2 +
.../gpu/drm/amd/pm/powerplay/hwmgr/smu_helper.h | 13 ++
.../gpu/drm/amd/pm/powerplay/hwmgr/vega10_hwmgr.c | 12 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/vega12_hwmgr.c | 4 +
.../gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c | 14 +-
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 89 +++----
drivers/gpu/drm/bridge/analogix/anx7625.c | 12 +-
drivers/gpu/drm/bridge/ite-it66121.c | 21 +-
drivers/gpu/drm/bridge/lontium-lt9611uxc.c | 9 +-
drivers/gpu/drm/bridge/nwl-dsi.c | 35 +++
drivers/gpu/drm/drm_panel_orientation_quirks.c | 35 ++-
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/i915/display/intel_fb.c | 5 +-
drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c | 2 +-
drivers/gpu/drm/imx/imx-drm-core.c | 2 -
drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 6 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4 +
drivers/gpu/drm/msm/dsi/dsi.h | 2 +
drivers/gpu/drm/msm/dsi/dsi_host.c | 72 +++---
drivers/gpu/drm/msm/dsi/dsi_manager.c | 16 ++
drivers/gpu/drm/msm/msm_gem.c | 5 +-
drivers/gpu/drm/msm/msm_gpu.c | 2 +-
drivers/gpu/drm/msm/msm_submitqueue.c | 1 +
drivers/gpu/drm/nouveau/nouveau_gem.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_svm.c | 4 +
drivers/gpu/drm/nouveau/nvkm/engine/ce/gt215.c | 2 +-
drivers/gpu/drm/nouveau/nvkm/engine/device/base.c | 3 +-
drivers/gpu/drm/radeon/radeon_gem.c | 2 +-
drivers/gpu/drm/sun4i/sun8i_csc.h | 4 +-
drivers/gpu/drm/ttm/ttm_bo_vm.c | 99 +-------
drivers/gpu/drm/v3d/v3d_gem.c | 4 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 8 +-
drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 -
drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 72 +-----
drivers/gpu/drm/vmwgfx/vmwgfx_ttm_glue.c | 3 -
drivers/hid/hid-u2fzero.c | 10 +-
drivers/hid/surface-hid/surface_hid.c | 4 +-
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +-
drivers/hwtracing/coresight/coresight-cti-core.c | 2 +-
drivers/hwtracing/coresight/coresight-trbe.c | 10 +-
drivers/i2c/busses/i2c-i801.c | 5 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/accel/st_accel_i2c.c | 4 +-
drivers/iio/accel/st_accel_spi.c | 4 +-
drivers/iio/adc/ti-tsc2046.c | 2 +-
drivers/iio/dac/ad5446.c | 9 +-
drivers/iio/dac/ad5766.c | 6 +-
drivers/iio/dac/ad5770r.c | 2 +-
drivers/iio/gyro/st_gyro_i2c.c | 4 +-
drivers/iio/gyro/st_gyro_spi.c | 4 +-
drivers/iio/imu/adis.c | 4 +-
drivers/iio/industrialio-buffer.c | 28 ++-
drivers/iio/industrialio-core.c | 9 +-
drivers/iio/magnetometer/st_magn_i2c.c | 4 +-
drivers/iio/magnetometer/st_magn_spi.c | 4 +-
drivers/iio/pressure/st_pressure_i2c.c | 4 +-
drivers/iio/pressure/st_pressure_spi.c | 8 +-
drivers/infiniband/core/uverbs_cmd.c | 3 -
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 +-
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/joystick/iforce/iforce-usb.c | 2 +-
drivers/input/misc/ariel-pwrbutton.c | 7 +
drivers/input/mouse/elantech.c | 13 ++
drivers/input/serio/i8042-x86ia64io.h | 14 ++
drivers/input/touchscreen/st1232.c | 2 +-
drivers/iommu/dma-iommu.c | 52 ++---
drivers/iommu/mtk_iommu.c | 4 +-
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-sifive-plic.c | 8 +-
drivers/mailbox/mtk-cmdq-mailbox.c | 11 +-
drivers/md/bcache/btree.c | 2 +-
drivers/md/bcache/super.c | 2 +-
drivers/md/md.c | 11 +-
drivers/md/raid1.c | 2 +-
drivers/media/common/videobuf2/videobuf2-core.c | 42 ++--
.../media/common/videobuf2/videobuf2-dma-contig.c | 39 ++--
drivers/media/common/videobuf2/videobuf2-dma-sg.c | 35 +--
drivers/media/common/videobuf2/videobuf2-vmalloc.c | 30 +--
drivers/media/dvb-frontends/mn88443x.c | 18 +-
drivers/media/i2c/Kconfig | 1 +
drivers/media/i2c/imx258.c | 12 +-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++-
drivers/media/i2c/tda1997x.c | 8 +-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/ivtv/ivtvfb.c | 4 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++-
drivers/media/platform/allegro-dvt/allegro-core.c | 9 +
drivers/media/platform/atmel/atmel-isc-base.c | 25 +-
drivers/media/platform/atmel/atmel-isc.h | 2 +
drivers/media/platform/atmel/atmel-sama5d2-isc.c | 39 ++--
drivers/media/platform/atmel/atmel-sama7g5-isc.c | 22 +-
drivers/media/platform/imx-jpeg/mxc-jpeg.c | 6 +
drivers/media/platform/meson/ge2d/ge2d.c | 6 +-
drivers/media/platform/mtk-vcodec/mtk_vcodec_enc.c | 8 +-
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/qcom/venus/pm_helpers.c | 8 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/rcar-vin/rcar-dma.c | 3 +-
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/platform/stm32/stm32-dcmi.c | 19 +-
.../media/platform/sunxi/sun6i-csi/sun6i_video.c | 6 +-
drivers/media/radio/radio-wl1273.c | 2 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ir_toy.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/spi/cxd2880-spi.c | 2 +-
drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/tm6000/tm6000-video.c | 3 +-
drivers/media/usb/ttusb-dec/ttusb_dec.c | 10 +-
drivers/media/usb/uvc/uvc_driver.c | 7 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 +
drivers/media/v4l2-core/v4l2-ioctl.c | 67 ++++--
drivers/memory/fsl_ifc.c | 13 +-
drivers/memory/renesas-rpc-if.c | 113 ++++++---
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mfd/Kconfig | 1 +
drivers/mfd/altera-sysmgr.c | 2 +-
drivers/mfd/dln2.c | 18 ++
drivers/mfd/mfd-core.c | 2 +
drivers/mfd/motorola-cpcap.c | 8 +
drivers/mfd/sprd-sc27xx-spi.c | 7 +
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/moxart-mmc.c | 29 ++-
drivers/mmc/host/mtk-sd.c | 5 +
drivers/mmc/host/mxs-mmc.c | 10 +
drivers/mmc/host/sdhci-omap.c | 18 +-
drivers/most/most_usb.c | 5 +-
drivers/mtd/mtdcore.c | 4 +-
drivers/mtd/nand/raw/ams-delta.c | 12 +-
drivers/mtd/nand/raw/arasan-nand-controller.c | 15 ++
drivers/mtd/nand/raw/au1550nd.c | 12 +-
drivers/mtd/nand/raw/fsmc_nand.c | 4 +-
drivers/mtd/nand/raw/gpio.c | 12 +-
drivers/mtd/nand/raw/intel-nand-controller.c | 5 +
drivers/mtd/nand/raw/mpc5121_nfc.c | 12 +-
drivers/mtd/nand/raw/orion_nand.c | 12 +-
drivers/mtd/nand/raw/pasemi_nand.c | 12 +-
drivers/mtd/nand/raw/plat_nand.c | 12 +-
drivers/mtd/nand/raw/socrates_nand.c | 12 +-
drivers/mtd/nand/raw/xway_nand.c | 12 +-
drivers/mtd/spi-nor/controllers/hisi-sfc.c | 1 -
drivers/net/Kconfig | 2 +-
drivers/net/bonding/bond_sysfs_slave.c | 36 +--
drivers/net/can/dev/bittiming.c | 2 +-
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 6 +-
drivers/net/can/usb/etas_es58x/es58x_core.c | 6 +-
drivers/net/can/usb/peak_usb/pcan_usb.c | 17 +-
drivers/net/dsa/mv88e6xxx/chip.c | 5 +-
drivers/net/dsa/ocelot/felix.c | 9 +-
drivers/net/dsa/rtl8366.c | 2 +-
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 +
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 5 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c | 13 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.h | 13 --
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
.../chelsio/inline_crypto/chtls/chtls_cm.c | 2 +-
.../chelsio/inline_crypto/chtls/chtls_cm.h | 2 +-
drivers/net/ethernet/dec/tulip/winbond-840.c | 2 +-
drivers/net/ethernet/fealnx.c | 2 +-
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18 +-
drivers/net/ethernet/google/gve/gve.h | 17 +-
drivers/net/ethernet/google/gve/gve_adminq.h | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 48 +++-
drivers/net/ethernet/google/gve/gve_rx.c | 7 +-
drivers/net/ethernet/google/gve/gve_tx.c | 23 +-
drivers/net/ethernet/google/gve/gve_tx_dqo.c | 84 +++----
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 20 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 10 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 6 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 77 +++---
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.h | 4 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 10 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 4 +-
drivers/net/ethernet/ibm/ibmvnic.c | 21 +-
drivers/net/ethernet/intel/ice/ice.h | 7 +-
drivers/net/ethernet/intel/ice/ice_base.c | 2 +-
drivers/net/ethernet/intel/ice/ice_devlink.c | 109 ++++++---
drivers/net/ethernet/intel/ice/ice_devlink.h | 6 +-
drivers/net/ethernet/intel/ice/ice_lib.c | 3 +-
drivers/net/ethernet/intel/ice/ice_main.c | 4 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 22 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.h | 9 +
drivers/net/ethernet/intel/igc/igc_ptp.c | 2 +-
drivers/net/ethernet/litex/litex_liteeth.c | 1 -
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 38 +--
drivers/net/ethernet/marvell/octeontx2/Kconfig | 1 +
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 78 ++++---
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 18 +-
drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +
.../ethernet/mellanox/mlx5/core/sf/dev/driver.c | 2 +
.../net/ethernet/netronome/nfp/nfp_net_common.c | 8 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 12 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 2 -
drivers/net/ethernet/ti/cpsw_ale.c | 6 +-
drivers/net/ethernet/ti/davinci_emac.c | 16 +-
drivers/net/ifb.c | 2 +
drivers/net/phy/micrel.c | 9 +-
drivers/net/phy/phy.c | 7 +-
drivers/net/phy/phylink.c | 7 +-
drivers/net/vrf.c | 28 ++-
drivers/net/wireless/ath/ath10k/core.c | 11 +-
drivers/net/wireless/ath/ath10k/coredump.c | 11 +-
drivers/net/wireless/ath/ath10k/coredump.h | 7 +
drivers/net/wireless/ath/ath10k/mac.c | 45 +++-
drivers/net/wireless/ath/ath10k/qmi.c | 3 +-
drivers/net/wireless/ath/ath10k/sdio.c | 5 +-
drivers/net/wireless/ath/ath10k/snoc.c | 77 ++++++
drivers/net/wireless/ath/ath10k/snoc.h | 5 +
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.c | 4 +
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath11k/dbring.c | 16 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 13 +-
drivers/net/wireless/ath/ath11k/mac.c | 2 +-
drivers/net/wireless/ath/ath11k/qmi.c | 4 +-
drivers/net/wireless/ath/ath11k/reg.c | 11 +-
drivers/net/wireless/ath/ath11k/reg.h | 2 +-
drivers/net/wireless/ath/ath11k/wmi.c | 40 ++--
drivers/net/wireless/ath/ath11k/wmi.h | 3 +-
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +-
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 ++--
drivers/net/wireless/ath/wcn36xx/hal.h | 32 +++
drivers/net/wireless/ath/wcn36xx/main.c | 21 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 126 +++++++++-
drivers/net/wireless/ath/wcn36xx/smd.h | 1 +
drivers/net/wireless/ath/wcn36xx/txrx.c | 64 ++---
drivers/net/wireless/ath/wcn36xx/txrx.h | 3 +-
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10 +
drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 13 +-
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 5 +-
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 6 +-
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +--
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 ++-
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
drivers/net/wireless/mediatek/mt76/debugfs.c | 10 +-
drivers/net/wireless/mediatek/mt76/mt76.h | 8 +-
.../net/wireless/mediatek/mt76/mt7615/debugfs.c | 29 ++-
drivers/net/wireless/mediatek/mt76/mt7615/init.c | 6 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 60 ++---
drivers/net/wireless/mediatek/mt76/mt7615/main.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7615/mcu.c | 18 +-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 30 ++-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 8 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13 +-
drivers/net/wireless/mediatek/mt76/mt7915/init.c | 10 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.h | 3 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 22 +-
.../net/wireless/mediatek/mt76/mt7921/debugfs.c | 36 ++-
drivers/net/wireless/mediatek/mt76/mt7921/init.c | 13 ++
drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 68 +++++-
drivers/net/wireless/mediatek/mt76/mt7921/mac.h | 8 +
drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 22 +-
drivers/net/wireless/mediatek/mt76/mt7921/mcu.h | 10 +-
drivers/net/wireless/mediatek/mt76/mt7921/regs.h | 8 +-
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +-
drivers/net/wireless/realtek/rtw88/fw.c | 7 +-
drivers/net/wireless/realtek/rtw88/reg.h | 1 +
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 ++----
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 +-
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +
drivers/net/wireless/rsi/rsi_main.h | 15 +-
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvdimm/btt.c | 1 -
drivers/nvdimm/pmem.c | 13 +-
drivers/nvme/host/multipath.c | 9 +-
drivers/nvme/host/rdma.c | 2 +
drivers/nvme/target/configfs.c | 2 +
drivers/nvme/target/rdma.c | 24 ++
drivers/nvme/target/tcp.c | 16 ++
drivers/of/unittest.c | 16 +-
drivers/opp/of.c | 2 +-
drivers/pci/controller/cadence/pci-j721e.c | 2 +-
drivers/pci/controller/cadence/pcie-cadence-plat.c | 2 +
drivers/pci/controller/dwc/pcie-uniphier.c | 26 +--
drivers/pci/controller/pci-aardvark.c | 251 +++++++++++++++++---
drivers/pci/msi.c | 36 +--
drivers/pci/pci-bridge-emul.c | 13 ++
drivers/pci/pci.c | 8 +
drivers/pci/quirks.c | 1 +
drivers/phy/microchip/sparx5_serdes.c | 4 +-
drivers/phy/qualcomm/phy-qcom-qmp.c | 2 +-
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 +-
drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c | 2 +-
drivers/phy/ti/phy-gmii-sel.c | 2 +
drivers/pinctrl/core.c | 2 +
drivers/pinctrl/pinctrl-equilibrium.c | 7 +-
drivers/pinctrl/renesas/core.c | 2 +-
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 2 +-
.../platform/surface/surface_aggregator_registry.c | 54 +++++
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 +-
drivers/power/reset/at91-reset.c | 4 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17040_battery.c | 2 +
drivers/power/supply/max17042_battery.c | 12 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 +-
drivers/remoteproc/imx_rproc.c | 41 ++--
drivers/remoteproc/remoteproc_core.c | 8 +-
drivers/remoteproc/remoteproc_coredump.c | 2 +-
drivers/remoteproc/remoteproc_elf_loader.c | 4 +-
drivers/rtc/rtc-ds1302.c | 7 +
drivers/rtc/rtc-ds1390.c | 7 +
drivers/rtc/rtc-mcp795.c | 7 +
drivers/rtc/rtc-pcf2123.c | 9 +
drivers/rtc/rtc-rv3032.c | 4 +-
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/s390/cio/device_ops.c | 12 +-
drivers/s390/crypto/ap_queue.c | 2 +
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/hosts.c | 1 +
drivers/scsi/lpfc/lpfc_els.c | 12 +-
drivers/scsi/lpfc/lpfc_hbadisc.c | 10 +-
drivers/scsi/lpfc/lpfc_nvme.c | 5 +-
drivers/scsi/lpfc/lpfc_scsi.c | 7 +
drivers/scsi/lpfc/lpfc_sli.c | 101 ++++++--
drivers/scsi/megaraid/megaraid_sas_fusion.c | 11 +-
drivers/scsi/pm8001/pm8001_hwi.c | 2 +-
drivers/scsi/pm8001/pm8001_sas.h | 3 +-
drivers/scsi/pm8001/pm80xx_hwi.c | 53 ++++-
drivers/scsi/qedf/qedf_main.c | 2 +
drivers/scsi/qla2xxx/qla_attr.c | 24 +-
drivers/scsi/qla2xxx/qla_edif.c | 259 ++++++++++++---------
drivers/scsi/qla2xxx/qla_edif.h | 3 +-
drivers/scsi/qla2xxx/qla_edif_bsg.h | 2 +-
drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
drivers/scsi/qla2xxx/qla_init.c | 77 ++++--
drivers/scsi/qla2xxx/qla_mr.c | 23 --
drivers/scsi/qla2xxx/qla_nvme.c | 14 +-
drivers/scsi/qla2xxx/qla_os.c | 37 +--
drivers/scsi/qla2xxx/qla_target.c | 1 +
drivers/scsi/scsi_error.c | 25 ++
drivers/scsi/scsi_ioctl.c | 2 +
drivers/scsi/scsi_lib.c | 3 +-
drivers/scsi/scsi_sysfs.c | 1 +
drivers/scsi/ufs/ufshcd-pltfrm.c | 4 +-
drivers/scsi/ufs/ufshcd.c | 186 +--------------
drivers/scsi/ufs/ufshcd.h | 14 --
drivers/scsi/ufs/ufshpb.c | 31 ++-
drivers/scsi/ufs/ufshpb.h | 1 -
drivers/soc/fsl/dpaa2-console.c | 1 +
drivers/soc/fsl/dpio/dpio-service.c | 2 +-
drivers/soc/fsl/dpio/qbman-portal.c | 9 +-
drivers/soc/qcom/apr.c | 2 +
drivers/soc/qcom/llcc-qcom.c | 2 +-
drivers/soc/qcom/rpmhpd.c | 20 +-
drivers/soc/qcom/socinfo.c | 4 +-
drivers/soc/samsung/Kconfig | 1 +
drivers/soc/tegra/pmc.c | 2 +-
drivers/soundwire/bus.c | 2 +-
drivers/soundwire/debugfs.c | 2 +-
drivers/spi/atmel-quadspi.c | 2 +-
drivers/spi/spi-bcm-qspi.c | 8 +-
drivers/spi/spi-mtk-nor.c | 2 +-
drivers/spi/spi-rpc-if.c | 4 +-
drivers/spi/spi-stm32-qspi.c | 2 +-
drivers/spi/spi.c | 41 ++++
drivers/staging/ks7010/Kconfig | 3 +
drivers/staging/media/atomisp/i2c/atomisp-lm3554.c | 37 +--
drivers/staging/media/imx/imx-media-dev-common.c | 2 +
drivers/staging/media/ipu3/ipu3-v4l2.c | 7 +-
drivers/staging/media/rkvdec/rkvdec-h264.c | 5 +-
drivers/staging/media/rkvdec/rkvdec.c | 40 ++--
drivers/staging/most/dim2/Makefile | 2 +-
drivers/staging/most/dim2/dim2.c | 24 +-
drivers/staging/most/dim2/sysfs.c | 49 ----
drivers/staging/most/dim2/sysfs.h | 11 -
drivers/staging/r8188eu/core/rtw_mlme.c | 2 +
drivers/target/target_core_tmr.c | 17 +-
drivers/target/target_core_transport.c | 30 ++-
.../intel/int340x_thermal/processor_thermal_mbox.c | 1 +
drivers/thermal/qcom/Kconfig | 2 +-
drivers/thermal/qcom/tsens.c | 29 ++-
drivers/thermal/thermal_core.c | 16 +-
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 21 +-
drivers/tty/serial/cpm_uart/cpm_uart_core.c | 2 +
drivers/tty/serial/imx.c | 4 +-
drivers/tty/serial/serial_core.c | 16 +-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/usb/chipidea/core.c | 23 +-
drivers/usb/dwc2/drd.c | 24 +-
drivers/usb/dwc3/core.h | 1 +
drivers/usb/dwc3/gadget.c | 8 +-
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-pci.c | 16 ++
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/Kconfig | 2 +-
drivers/usb/serial/keyspan.c | 15 +-
drivers/usb/typec/Kconfig | 4 +-
drivers/vdpa/mlx5/net/mlx5_vnet.c | 1 -
drivers/video/backlight/backlight.c | 6 -
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/video/fbdev/efifb.c | 21 +-
drivers/virtio/virtio_ring.c | 14 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/xen/balloon.c | 86 +++++--
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/reflink.c | 2 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 14 +-
fs/ceph/mdsmap.c | 4 -
fs/cifs/cifsglob.h | 3 +-
fs/cifs/connect.c | 21 +-
fs/cifs/file.c | 35 ++-
fs/cifs/fs_context.c | 10 +
fs/cifs/fs_context.h | 1 +
fs/crypto/fscrypt_private.h | 5 +-
fs/crypto/hkdf.c | 11 +-
fs/crypto/keysetup.c | 57 ++++-
fs/erofs/decompressor.c | 1 -
fs/erofs/zdata.c | 13 +-
fs/erofs/zpvec.h | 13 +-
fs/exfat/inode.c | 2 +-
fs/ext4/extents.c | 63 +++--
fs/ext4/inode.c | 15 +-
fs/ext4/super.c | 9 +-
fs/f2fs/compress.c | 1 +
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/f2fs/super.c | 2 +
fs/fuse/dev.c | 14 +-
fs/gfs2/glock.c | 24 +-
fs/io-wq.c | 88 +++++--
fs/io_uring.c | 4 +-
fs/jfs/jfs_mount.c | 51 ++--
fs/ksmbd/Kconfig | 1 +
fs/ksmbd/server.c | 1 +
fs/ksmbd/smb2misc.c | 6 +-
fs/ksmbd/smb2pdu.c | 11 +-
fs/nfs/dir.c | 9 +-
fs/nfs/direct.c | 2 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/inode.c | 13 +-
fs/nfs/nfs3xdr.c | 2 +-
fs/nfs/nfs4idmap.c | 2 +-
fs/nfs/nfs4proc.c | 15 +-
fs/nfs/pnfs.h | 2 +-
fs/nfs/pnfs_nfs.c | 6 +-
fs/nfs/proc.c | 2 +-
fs/nfs/write.c | 26 +--
fs/ocfs2/file.c | 8 +-
fs/open.c | 16 +-
fs/orangefs/dcache.c | 4 +-
fs/overlayfs/copy_up.c | 23 +-
fs/overlayfs/file.c | 16 +-
fs/overlayfs/inode.c | 5 +-
fs/proc/stat.c | 4 +-
fs/proc/uptime.c | 14 +-
fs/quota/quota_tree.c | 15 ++
fs/tracefs/inode.c | 3 +-
include/drm/ttm/ttm_bo_api.h | 3 +-
include/linux/blkdev.h | 2 -
include/linux/bpf-cgroup.h | 1 +
include/linux/cc_platform.h | 88 +++++++
include/linux/console.h | 2 +
include/linux/cpufreq.h | 2 +-
include/linux/dma-buf.h | 2 +-
include/linux/dsa/ocelot.h | 1 +
include/linux/ethtool_netlink.h | 3 +
include/linux/filter.h | 5 +-
include/linux/fortify-string.h | 5 +-
include/linux/kernel_stat.h | 1 +
include/linux/libata.h | 2 +-
include/linux/msi.h | 2 +-
include/linux/nfs_fs.h | 1 +
include/linux/posix-timers.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched.h | 1 +
include/linux/sched/task.h | 3 +-
include/linux/sched/task_stack.h | 4 +
include/linux/seq_file.h | 2 +-
include/linux/signal_types.h | 3 +
include/linux/skmsg.h | 18 +-
include/linux/surface_aggregator/controller.h | 4 +-
include/linux/tpm.h | 1 +
include/media/videobuf2-core.h | 37 +--
include/memory/renesas-rpc-if.h | 1 +
include/net/inet_connection_sock.h | 2 +-
include/net/llc.h | 4 +-
include/net/neighbour.h | 12 +-
include/net/sch_generic.h | 4 +
include/net/sctp/sctp.h | 7 +-
include/net/sock.h | 2 +-
include/net/strparser.h | 20 +-
include/net/tcp.h | 17 +-
include/rdma/ib_verbs.h | 7 +-
include/scsi/scsi_cmnd.h | 2 +-
include/scsi/scsi_host.h | 1 +
include/sound/soc-topology.h | 3 +-
include/uapi/asm-generic/signal-defs.h | 1 +
include/uapi/linux/ethtool_netlink.h | 4 +-
include/uapi/linux/pci_regs.h | 6 +
init/main.c | 4 +-
kernel/bpf/trampoline.c | 6 +-
kernel/bpf/verifier.c | 4 +-
kernel/cgroup/cgroup.c | 31 ++-
kernel/cgroup/rstat.c | 2 -
kernel/debug/kdb/kdb_bt.c | 16 +-
kernel/debug/kdb/kdb_main.c | 37 +--
kernel/debug/kdb/kdb_private.h | 4 +-
kernel/debug/kdb/kdb_support.c | 118 ++--------
kernel/fork.c | 3 +-
kernel/irq/msi.c | 4 +-
kernel/kprobes.c | 3 +-
kernel/locking/lockdep.c | 4 +-
kernel/locking/rwsem.c | 53 +++--
kernel/power/energy_model.c | 23 +-
kernel/power/swap.c | 7 +-
kernel/rcu/rcutorture.c | 48 +++-
kernel/rcu/tasks.h | 3 +-
kernel/rcu/tree.c | 2 +-
kernel/rcu/tree_exp.h | 2 +-
kernel/rcu/tree_plugin.h | 8 +-
kernel/sched/core.c | 62 +++--
kernel/scs.c | 1 +
kernel/signal.c | 26 +--
kernel/time/posix-cpu-timers.c | 19 +-
kernel/trace/ftrace.c | 23 +-
kernel/trace/ring_buffer.c | 5 +
kernel/trace/trace.c | 73 +++---
kernel/trace/trace.h | 3 +
kernel/trace/trace_boot.c | 4 +
kernel/trace/trace_dynevent.c | 2 +-
kernel/trace/trace_event_perf.c | 6 +-
kernel/trace/trace_events.c | 42 ++--
kernel/trace/trace_events_synth.c | 4 +-
kernel/trace/trace_functions_graph.c | 2 +-
kernel/trace/trace_hwlat.c | 6 +-
kernel/trace/trace_kprobe.c | 8 +-
kernel/trace/trace_osnoise.c | 14 +-
kernel/trace/trace_printk.c | 2 +-
kernel/trace/trace_recursion_record.c | 4 +-
kernel/trace/trace_stack.c | 6 +-
kernel/trace/trace_stat.c | 6 +-
kernel/trace/trace_uprobe.c | 4 +-
kernel/trace/tracing_map.c | 40 ++--
kernel/workqueue.c | 15 +-
lib/crypto/sm4.c | 4 +-
lib/decompress_unxz.c | 2 +-
lib/dynamic_debug.c | 12 +
lib/iov_iter.c | 5 +-
lib/test_bpf.c | 37 ++-
lib/xz/xz_dec_lzma2.c | 21 +-
lib/xz/xz_dec_stream.c | 6 +-
mm/filemap.c | 1 -
mm/memcontrol.c | 27 +--
mm/oom_kill.c | 23 +-
mm/zsmalloc.c | 7 +-
net/8021q/vlan.c | 3 -
net/8021q/vlan_dev.c | 3 +
net/9p/client.c | 2 +
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/sco.c | 36 +--
net/bridge/br_private.h | 2 +
net/can/j1939/main.c | 7 +
net/can/j1939/transport.c | 11 +
net/core/dev.c | 2 +
net/core/filter.c | 58 ++++-
net/core/neighbour.c | 48 ++--
net/core/net-sysfs.c | 55 +++++
net/core/net_namespace.c | 4 +
net/core/skmsg.c | 43 +++-
net/core/stream.c | 3 -
net/dccp/dccp.h | 2 +-
net/dccp/proto.c | 14 +-
net/dsa/switch.c | 4 +-
net/dsa/tag_ocelot.c | 3 +
net/ethtool/pause.c | 3 +-
net/ipv4/af_inet.c | 16 +-
net/ipv4/inet_connection_sock.c | 4 +-
net/ipv4/inet_hashtables.c | 2 +-
net/ipv4/proc.c | 2 +-
net/ipv4/tcp.c | 40 +++-
net/ipv4/tcp_bpf.c | 48 +++-
net/ipv6/addrconf.c | 3 +
net/ipv6/af_inet6.c | 21 +-
net/ipv6/udp.c | 2 +-
net/mac80211/s1g.c | 8 +-
net/mctp/af_mctp.c | 13 ++
net/mptcp/options.c | 8 +-
net/mptcp/protocol.c | 43 +++-
net/netfilter/nf_conntrack_proto_udp.c | 7 +-
net/netfilter/nfnetlink_queue.c | 2 +-
net/netfilter/nft_dynset.c | 11 +-
net/rxrpc/rtt.c | 2 +-
net/sched/sch_generic.c | 9 +
net/sched/sch_mq.c | 24 ++
net/sched/sch_mqprio.c | 23 ++
net/sched/sch_taprio.c | 27 ++-
net/sctp/output.c | 13 +-
net/sctp/transport.c | 11 +-
net/smc/af_smc.c | 18 +-
net/strparser/strparser.c | 10 +-
net/sunrpc/addr.c | 40 ++--
net/sunrpc/xprt.c | 28 +--
net/vmw_vsock/af_vsock.c | 2 +
net/wireless/core.c | 10 +
samples/bpf/xdp_redirect_cpu_user.c | 6 +-
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/integrity/ima/ima_policy.c | 27 ++-
security/selinux/ss/services.c | 162 ++++++-------
security/smack/smackfs.c | 11 +-
sound/core/memalloc.c | 7 +-
sound/core/oss/mixer_oss.c | 44 +++-
sound/core/timer.c | 17 +-
sound/firewire/oxfw/oxfw-stream.c | 7 +-
sound/firewire/oxfw/oxfw.c | 8 +
sound/firewire/oxfw/oxfw.h | 5 +
sound/pci/hda/hda_intel.c | 52 ++---
sound/pci/hda/patch_realtek.c | 36 +++
sound/pci/rme9652/hdsp.c | 41 ++--
sound/pci/rme9652/rme9652.c | 41 ++--
sound/soc/codecs/cs42l42.c | 27 ++-
sound/soc/codecs/wcd9335.c | 2 +-
sound/soc/sh/rcar/core.c | 1 +
sound/soc/sof/topology.c | 9 +
sound/soc/tegra/tegra_asoc_machine.c | 60 ++++-
sound/soc/tegra/tegra_asoc_machine.h | 1 +
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/card.h | 1 +
sound/usb/endpoint.c | 7 +-
sound/usb/format.c | 1 +
sound/usb/line6/driver.c | 14 +-
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/arch/x86/lib/insn.c | 5 +-
tools/bpf/bpftool/prog.c | 16 +-
tools/include/asm-generic/unaligned.h | 23 ++
tools/lib/bpf/bpf.c | 4 +-
tools/lib/bpf/bpf_core_read.h | 2 +-
tools/lib/bpf/btf.c | 22 +-
tools/lib/bpf/libbpf.c | 8 +-
tools/lib/bpf/skel_internal.h | 6 +-
tools/objtool/arch/x86/decode.c | 20 ++
tools/objtool/check.c | 159 +++++++------
tools/objtool/include/objtool/arch.h | 1 +
tools/perf/util/bpf-event.c | 4 +-
tools/perf/util/intel-pt-decoder/Build | 2 +
.../testing/selftests/bpf/prog_tests/perf_buffer.c | 4 +-
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 4 +-
tools/testing/selftests/bpf/prog_tests/test_ima.c | 3 +-
tools/testing/selftests/bpf/progs/strobemeta.h | 4 +-
tools/testing/selftests/bpf/test_progs.c | 4 +-
.../selftests/bpf/test_xdp_redirect_multi.sh | 62 ++---
.../testing/selftests/bpf/verifier/array_access.c | 2 +-
tools/testing/selftests/bpf/xdp_redirect_multi.c | 4 +-
tools/testing/selftests/core/close_range_test.c | 2 +-
tools/testing/selftests/kvm/lib/x86_64/svm.c | 14 +-
.../selftests/kvm/x86_64/mmio_warning_test.c | 2 +-
tools/testing/selftests/net/Makefile | 9 +-
tools/testing/selftests/net/fib_nexthops.sh | 1 +
.../selftests/net/forwarding/bridge_igmp.sh | 12 +-
.../testing/selftests/net/forwarding/bridge_mld.sh | 12 +-
tools/testing/selftests/net/gre_gso.sh | 9 +-
tools/testing/selftests/net/mptcp/mptcp_join.sh | 2 +-
tools/testing/selftests/net/udpgso_bench_rx.c | 11 +-
tools/testing/selftests/sched/cs_prctl_test.c | 28 ++-
tools/testing/selftests/x86/iopl.c | 78 +++++--
tools/tracing/latency/latency-collector.c | 2 +-
1034 files changed, 9068 insertions(+), 5254 deletions(-)
^ permalink raw reply [relevance 1%]
* [PATCH 5.14 000/857] 5.14.19-rc2 review
@ 2021-11-16 15:01 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-16 15:01 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.14.19 release.
There are 857 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 18 Nov 2021 14:24:22 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.14.19-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.14.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.14.19-rc2
Hans de Goede <hdegoede@redhat.com>
media: videobuf2-dma-sg: Fix buf->vb NULL pointer dereference
Sergey Senozhatsky <senozhatsky@chromium.org>
media: videobuf2: always set buffer vb2 pointer
Borislav Petkov <bp@suse.de>
x86/sev: Make the #VC exception stacks part of the default stacks storage
Tom Lendacky <thomas.lendacky@amd.com>
x86/sev: Add an x86 version of cc_platform_has()
Tom Lendacky <thomas.lendacky@amd.com>
arch/cc: Introduce a function to check for confidential computing features
THOBY Simon <Simon.THOBY@viveris.fr>
IMA: reject unknown hash algorithms in ima_get_hash_algo
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix also no-alu32 strobemeta selftest
Borislav Petkov <bp@suse.de>
selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
Colin Ian King <colin.king@canonical.com>
mmc: moxart: Fix null pointer dereference on pointer host
Arnd Bergmann <arnd@arndb.de>
ath10k: fix invalid dma_addr_t token assignment
Paulo Alcantara <pc@cjr.nz>
cifs: fix memory leak of smb3_fs_context_dup::server_hostname
Hans Verkuil <hverkuil-cisco@xs4all.nl>
media: vidtv: move kfree(dvb) to vidtv_bridge_dev_release()
Mario Limonciello <mario.limonciello@amd.com>
drm/amd/display: Look at firmware version to determine using dmub on dcn21
Basavaraj Natikar <Basavaraj.Natikar@amd.com>
pinctrl: amd: Handle wake-up interrupt
Basavaraj Natikar <Basavaraj.Natikar@amd.com>
pinctrl: amd: Add irq field data
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Partial revert of commit 6f9f17287e78
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix PCIe Max Payload Size setting
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: Fix macros in sun8i_csc.h
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
Nathan Lynch <nathanl@linux.ibm.com>
powerpc/pseries/mobility: ignore ibm, platform-facilities updates
Nicholas Piggin <npiggin@gmail.com>
powerpc/64s/interrupt: Fix check_return_regs_valid() false positive
Russell Currey <ruscur@russell.cc>
powerpc/security: Use a mutex for interrupt exit code patching
Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Nicholas Piggin <npiggin@gmail.com>
powerpc/32e: Ignore ESR in instruction storage interrupt handler
Hari Bathini <hbathini@linux.ibm.com>
powerpc/bpf: Fix write protecting JIT code
Gustavo A. R. Silva <gustavoars@kernel.org>
powerpc/vas: Fix potential NULL pointer dereference
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: fsmc: Fix use of SM ORDER
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix rsc-table name
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix ignoring mapping vdev regions
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: Fix the wrong default value of is_iomem
Peng Fan <peng.fan@nxp.com>
remoteproc: elf_loader: Fix loading segment when is_iomem true
Halil Pasic <pasic@linux.ibm.com>
s390/cio: make ccw_device_dma_* more robust
Harald Freudenberger <freude@linux.ibm.com>
s390/ap: Fix hanging ioctl caused by orphaned replies
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Thomas Richter <tmricht@linux.ibm.com>
s390/cpumf: cpum_cf PMU displays invalid value after hotplug remove
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Avoid calling put_device() under dpm_list_mtx
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Jack Andersen <jackoalan@gmail.com>
mfd: dln2: Add cell for initializing DLN2 ADC
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Jens Axboe <axboe@kernel.dk>
io-wq: serialize hash clear with wakeup
Jens Axboe <axboe@kernel.dk>
io-wq: fix queue stalling race
Jens Axboe <axboe@kernel.dk>
io-wq: ensure that hash wait lock is IRQ disabling
Vasily Averin <vvs@virtuozzo.com>
memcg: prohibit unconditional exceeding the limit of dying tasks
Matthew Wilcox (Oracle) <willy@infradead.org>
mm/filemap.c: remove bogus VM_BUG_ON
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Daniel Borkmann <daniel@iogearbox.net>
bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
Daniel Borkmann <daniel@iogearbox.net>
bpf, cgroups: Fix cgroup v2 fallback on v1/v2 mixed mode
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Anatolij Gustschin <agust@denx.de>
dmaengine: bestcomm: fix system boot lockups
Kishon Vijay Abraham I <kishon@ti.com>
dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
Kishon Vijay Abraham I <kishon@ti.com>
dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: fix unsafe pagevec reuse of hooked pclusters
Dongliang Mu <mudongliangabcd@gmail.com>
f2fs: fix UAF in f2fs_available_free_memory
Daeho Jeong <daehojeong@google.com>
f2fs: include non-compressed blocks in compr_written_block
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Guo Ren <guoren@linux.alibaba.com>
irqchip/sifive-plic: Fixup EOI failed when masked
Michael Pratt <mpratt@google.com>
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
Paolo Bonzini <pbonzini@redhat.com>
KVM: x86: move guest_pv_has out of user_access section
Dave Jones <davej@codemonkey.org.uk>
x86/mce: Add errata workaround for Skylake SKX37
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
Masahiro Yamada <masahiroy@kernel.org>
MIPS: fix duplicated slashes for Platform file path
John David Anglin <dave.anglin@bell.net>
parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
Helge Deller <deller@gmx.de>
parisc: Fix backtrace to always include init funtion names
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Steve French <stfrench@microsoft.com>
smb3: do not error on fsync when readonly
Willem de Bruijn <willemb@google.com>
selftests/net: udpgso_bench_rx: fix port argument
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Dust Li <dust.li@linux.alibaba.com>
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Marek Behún <kabel@kernel.org>
net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
Vladimir Oltean <vladimir.oltean@nxp.com>
net: stmmac: allow a tc-taprio base-time of zero
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: allow configure ETS bandwidth of all TCs
Yufeng Mo <moyufeng@huawei.com>
net: hns3: fix kernel crash when unload VF while it is being reset
Jie Wang <wangjie125@huawei.com>
net: hns3: fix pfc packet number incorrect after querying pfc parameters
Jie Wang <wangjie125@huawei.com>
net: hns3: fix ROCE base interrupt vector initialization bug
Eric Dumazet <edumazet@google.com>
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Marek Behún <kabel@kernel.org>
net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than 10
Muchun Song <songmuchun@bytedance.com>
seq_file: fix passing wrong private data
Imre Deak <imre.deak@intel.com>
drm/i915/fb: Fix rounding error in subsampled plane size calculation
Dan Carpenter <dan.carpenter@oracle.com>
gve: Fix off by one in gve_tx_timeout()
Arnd Bergmann <arnd@arndb.de>
dmaengine: stm32-dma: avoid 64-bit division in stm32_dma_get_max_width
Amelie Delaunay <amelie.delaunay@foss.st.com>
dmaengine: stm32-dma: fix burst in case of unaligned memory address
Jussi Maki <joamaki@gmail.com>
bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
John Fastabend <john.fastabend@gmail.com>
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Fix race in ingress receive verdict with redirect to self
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Remove unhash handler for BPF sockmap usage
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Reiji Watanabe <reijiw@google.com>
arm64: arm64_ftr_reg->name may not be a human-readable string
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Ian Rogers <irogers@google.com>
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
Vincent Mailhol <mailhol.vincent@wanadoo.fr>
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
Fabio Estevam <festevam@gmail.com>
Revert "drm/imx: Annotate dma-fence critical section in commit path"
Arnd Bergmann <arnd@arndb.de>
drm: fb_helper: improve CONFIG_FB dependency
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Limit the tests in netns
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Give tcpdump a chance to terminate cleanly
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Use arping to accurate the arp number
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Put the logs to tmp folder
Mehrdad Arshad Rad <arshad.rad@gmail.com>
libbpf: Fix lookup_and_delete_elem_flags error reporting
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Fix device wakeup power reference counting error
Kai Song <songkai01@inspur.com>
mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
Mark Brown <broonie@kernel.org>
mfd: sprd: Add SPI device ID table
Mark Brown <broonie@kernel.org>
mfd: cpcap: Add SPI device ID table
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
mfd: core: Add missing of_node_put for loop iteration
Takashi Iwai <tiwai@suse.de>
ALSA: memalloc: Catch call with NULL snd_dma_buffer pointer
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Jason Gunthorpe <jgg@ziepe.ca>
drm/ttm: remove ttm_bo_vm_insert_huge()
Heiner Kallweit <hkallweit1@gmail.com>
net: phy: fix duplex out of sync problem while changing settings
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
Selvin Xavier <selvin.xavier@broadcom.com>
PCI: Do not enable AtomicOps on VFs
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
ataflop: remove ataflop_probe_lock mutex
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: provide a helper for cleanup up an atari disk
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: add registration bool before calling del_gendisk()
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: use the blk_cleanup_disk() helper
Chenyuan Mi <cymi20@fudan.edu.cn>
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
Luis Chamberlain <mcgrof@kernel.org>
nvdimm/btt: do not call del_gendisk() if not needed
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
PCI: j721e: Fix j721e_pcie_probe() error path
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Brett Creeley <brett.creeley@intel.com>
ice: Fix not stopping Tx queues for VFs
Sylwester Dziedziuch <sylwesterx.dziedziuch@intel.com>
ice: Fix replacing VF hardware MAC to existing MAC filter
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: tag_ocelot: break circular dependency with ocelot switch lib driver
Ziyang Xuan <william.xuanziyang@huawei.com>
net: vlan: fix a UAF in vlan_dev_real_dev()
Stafford Horne <shorne@gmail.com>
openrisc: fix SMP tlb flush NULL pointer dereference
Jakub Kicinski <kuba@kernel.org>
ethtool: fix ethtool msg len calculation for pause stats
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed icmp.sh test to Makefile
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
Yu Kuai <yukuai3@huawei.com>
nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
Yu Kuai <yukuai3@huawei.com>
nbd: fix max value for 'first_minor'
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Sander Vanheule <sander@svanheule.net>
gpio: realtek-otto: fix GPIO line IRQ offset
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: target: core: Remove from tmr_list during LUN unlink
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Eric W. Biederman <ebiederm@xmission.com>
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Robert-Ionut Alexa <robert-ionut.alexa@nxp.com>
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Alexey Gladkov <legion@kernel.org>
Fix user namespace leak
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix an Oops in pnfs_mark_request_commit()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix up commit deadlocks
Amelie Delaunay <amelie.delaunay@foss.st.com>
dmaengine: stm32-dma: fix stm32_dma_get_max_width
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
Dan Carpenter <dan.carpenter@oracle.com>
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
Zev Weiss <zev@bewilderbeest.net>
mtd: core: don't remove debugfs directory if device is in use
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: arasan: Prevent an unsupported configuration
Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
John Keeping <john@metanate.com>
Input: st1232 - increase "wait ready" timeout
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
YueHaibing <yuehaibing@huawei.com>
opp: Fix return in _opp_add_static_v2()
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/bridge/lontium-lt9611uxc: fix provided connector suport
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix dentry verifier races
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Ignore the directory size when marking for revalidation
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
Kewei Xu <kewei.xu@mediatek.com>
i2c: mediatek: fixing the incorrect register offset
Mark Brown <broonie@kernel.org>
Input: ariel-pwrbutton - add SPI device ID table
Mark Brown <broonie@kernel.org>
rtc: mcp795: Add SPI ID table
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix TCM io memory type
Mark Brown <broonie@kernel.org>
rtc: pcf2123: Add SPI ID table
Mark Brown <broonie@kernel.org>
rtc: ds1390: Add SPI ID table
Mark Brown <broonie@kernel.org>
rtc: ds1302: Add SPI ID table
J. Bruce Fields <bfields@redhat.com>
nfsd: don't alloc under spinlock in rpc_parse_scope_id
Evgeny Novikov <novikov@ispras.ru>
mtd: rawnand: intel: Fix potential buffer overflow in probe
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Aharon Landau <aharonl@nvidia.com>
RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: check desc == NULL when using indirect with packed
Geert Uytterhoeven <geert@linux-m68k.org>
serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: rsnd: Fix an error handling path in 'rsnd_node_count()'
Yixing Liu <liuyixing1@huawei.com>
RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
Haoyue Xu <xuhaoyue1@hisilicon.com>
RDMA/hns: Fix initial arm_st of CQ
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc: Don't provide __kernel_map_pages() without ARCH_SUPPORTS_DEBUG_PAGEALLOC
Takashi Sakamoto <o-takashi@sakamocchi.jp>
ALSA: oxfw: fix functional regression for Mackie Onyx 1640i in v5.14 or later
Denis Kirjanov <kda@linux-powerpc.org>
powerpc/xmon: fix task state output
Bixuan Cui <cuibixuan@linux.alibaba.com>
powerpc/44x/fsp2: add missing of_node_put
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/book3e: Fix set_memory_x() and set_memory_nx()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: clarify error check and length calculations
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: clk-master: fix prescaler logic
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: clk-master: check if div or pres is zero
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Yang Yingliang <yangyingliang@huawei.com>
phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
Sandeep Maheswaram <quic_c_sanm@quicinc.com>
phy: qcom-snps: Correct the FSEL_MASK
Dan Carpenter <dan.carpenter@oracle.com>
phy: ti: gmii-sel: check of_get_address() for failure
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Mark Brown <broonie@kernel.org>
ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
Rahul Tanwar <rtanwar@maxlinear.com>
pinctrl: equilibrium: Fix function addition in multiple groups
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
Bhupesh Sharma <bhupesh.sharma@linaro.org>
arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
Marijn Suijten <marijn.suijten@somainline.org>
arm64: dts: qcom: pmi8994: Fix "eternal"->"external" typo in WLED node
Wan Jiabing <wanjiabing@vivo.com>
soc: qcom: apr: Add of_node_put() before return
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
Guru Das Srinagesh <quic_gurus@quicinc.com>
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: reset current session before setting the new one
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
Stefan Agner <stefan@agner.ch>
serial: imx: fix detach/attach of serial console
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: bus: stop dereferencing invalid slave pointer
Nuno Sá <nuno.sa@analog.com>
iio: adis: do not disabe IRQs in 'adis_init()'
Randy Dunlap <rdunlap@infradead.org>
usb: typec: STUSB160X should select REGMAP_I2C
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
soc: qcom: socinfo: add two missing PMIC IDs
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Make power_on actually enable the domain
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Always configure both ASP TX channels
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix SAI sub nodes register range
Fabrice Gasnier <fabrice.gasnier@foss.st.com>
ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
Geert Uytterhoeven <geert+renesas@glider.be>
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
Athira Rajeev <atrajeev@linux.vnet.ibm.cm>
powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
Andrew Halaney <ahalaney@redhat.com>
dyndbg: make dyndbg a known cli param
Vegard Nossum <vegard.nossum@oracle.com>
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Nikita Yushchenko <nikita.yoush@cogentembedded.com>
staging: most: dim2: do not double-register the same device
Randy Dunlap <rdunlap@infradead.org>
usb: musb: select GENERIC_PHY instead of depending on it
Leon Romanovsky <leon@kernel.org>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Yang Yingliang <yangyingliang@huawei.com>
power: supply: max17040: fix null-ptr-deref in max17040_probe()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc: fix unbalanced node refcount in check_kvm_guest()
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype for 'create_section_mapping'
Clément Léger <clement.leger@bootlin.com>
clk: at91: check pmc node status before registering syscore ops
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Mark Brown <broonie@kernel.org>
iio: st_pressure_spi: Add missing entries SPI to device ID table
Ranjani Sridharan <ranjani.sridharan@linux.intel.com>
ASoC: SOF: topology: do not power down primary core during topology removal
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Yang Yingliang <yangyingliang@huawei.com>
driver core: Fix possible memory leak in device_link_add()
Igor Pylypiv <ipylypiv@google.com>
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
Sumit Saxena <sumit.saxena@broadcom.com>
scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt
Claudiu Beznea <claudiu.beznea@microchip.com>
power: reset: at91-reset: check properly the return value of devm_of_iomap
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: debugfs: use controller id and link_id for debugfs
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Use position buffer for SKL+ again
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
David Stevens <stevensd@chromium.org>
iommu/dma: Fix arch_sync_dma for map
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
Arnd Bergmann <arnd@arndb.de>
iommu/mediatek: Fix out-of-range warning with clang
Geert Uytterhoeven <geert+renesas@glider.be>
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
Yassine Oudjana <y.oudjana@protonmail.com>
ASoC: wcd9335: Use correct version to initialize Class H
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Naina Mehta <nainmeht@codeaurora.org>
soc: qcom: llcc: Disable MMUHWT retention
Douglas Anderson <dianders@chromium.org>
arm64: dts: qcom: sc7180: Base dynamic CPU power coefficients in reality
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Tony Lindgren <tony@atomide.com>
bus: ti-sysc: Fix timekeeping_suspended warning on resume
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-sm1: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie node
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Marijn Suijten <marijn.suijten@somainline.org>
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Peter Geis <pgwipeout@gmail.com>
arm64: dts: rockchip: fix rk3568 mbi-alias
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
Ajish Koshy <Ajish.Koshy@microchip.com>
scsi: pm80xx: Fix lockup in outbound queue management
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
Rafał Miłecki <rafal@milecki.pl>
arm64: dts: broadcom: bcm4908: Fix UART clock name
Rafał Miłecki <rafal@milecki.pl>
ARM: dts: BCM5301X: Fix memory nodes names
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Alexandru Ardelean <aardelean@deviqon.com>
iio: st_sensors: disable regulators after device unregistration
Dongjin Kim <tobetter@gmail.com>
arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
Frank Rowand <frank.rowand@sony.com>
of: unittest: fix EXPECT text for gpio hog errors
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
Dan Schatzberg <schatzberg.dan@gmail.com>
cgroup: Fix rootcg cpu.stat guest double counting
Liu Jian <liujian56@huawei.com>
skmsg: Lose offset info in sk_psock_skb_ingress
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: delay complete()
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: don't stop queue in xmit
Jakub Kicinski <kuba@kernel.org>
udp6: allow SO_MARK ctrl msg to affect routing
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Nikolay Aleksandrov <nikolay@nvidia.com>
selftests: net: bridge: update IGMP/MLD membership interval value
Ivan Vecera <ivecera@redhat.com>
net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ipmi: kcs_bmc: Fix a memory leak in the error handling path of 'kcs_bmc_serio_add_device()'
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Xin Long <lucien.xin@gmail.com>
sctp: return true only for pathmtu update in sctp_transport_pl_toobig
Xin Long <lucien.xin@gmail.com>
sctp: subtract sctphdr len in sctp_transport_pl_hlen
Xin Long <lucien.xin@gmail.com>
sctp: reset probe_timer in sctp_transport_pl_update
Xin Long <lucien.xin@gmail.com>
sctp: allow IP fragmentation when PLPMTUD enters Error state
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix memory leak in test_ima
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix fd cleanup in sk_lookup test
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Lang Yu <lang.yu@amd.com>
drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw()
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Channel list update before hardware scan
Eric Dumazet <edumazet@google.com>
bpf: Fixes possible race in update_prog_stats() for 32bit arches
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix discarded frames due to wrong sequence number
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Peter Zijlstra <peterz@infradead.org>
x86: Fix __get_wchan() for !STACKTRACE
Kees Cook <keescook@chromium.org>
sched: Add wrapper for get_wchan() to keep task blocked
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
spi: spi-rpc-if: Check return value of rpcif_sw_init()
Zhang Rui <rui.zhang@intel.com>
cpufreq: intel_pstate: Fix cpu->pstate.turbo_freq initialization
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Ilya Leoshkevich <iii@linux.ibm.com>
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
Mark Brown <broonie@kernel.org>
tpm_tis_spi: Add missing SPI ID
Hao Wu <hao.wu@rubrik.com>
tpm: fix Atmel TPM crash caused by too frequent queries
Yu Kuai <yukuai3@huawei.com>
blk-cgroup: synchronize blkg creation against policy deactivation
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: more blk-mq refactoring fixes
Abinaya Kalaiselvan <akalaise@codeaurora.org>
ath10k: fix module load regression with iram-recovery feature
Arnd Bergmann <arnd@arndb.de>
ARM: 9142/1: kasan: work around LPAE build warning
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid double free of sida page
David Hildenbrand <david@redhat.com>
s390/uv: fully validate the VMA before calling follow_page()
David Hildenbrand <david@redhat.com>
s390/mm: fix VMA and page table handling code in storage key handling functions
David Hildenbrand <david@redhat.com>
s390/mm: validate VMA in PGSTE manipulation functions
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
David Hildenbrand <david@redhat.com>
s390/gmap: validate VMA in __gmap_zap()
Nick Hainke <vincent@systemli.org>
mt76: mt7615: mt7622: fix ibss and meshpoint
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF header parsing checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix overflow in BTF sanity checks
Quentin Monnet <quentin@isovalent.com>
bpftool: Avoid leaking the JSON writer prepared for program metadata
Mauricio Vásquez <mauricio@kinvolk.io>
libbpf: Fix memory leak in btf__dedup()
Jim Mattson <jmattson@google.com>
KVM: selftests: Fix nested SVM tests when built with clang
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Horia Geantă <horia.geanta@nxp.com>
crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Joerg Roedel <jroedel@suse.de>
x86/sev: Fix stack type check in vc_switch_off_ist()
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Ye Bin <yebin10@huawei.com>
nbd: Fix use-after-free in pid_show
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Tim Gardner <tim.gardner@canonical.com>
net: enetc: unmap DMA in enetc_send_cmd()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pnvm: read EFI data only if long enough
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pnvm: don't kmemdup() more than we have
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: reset PM state on unsuccessful resume
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix sta_rec_wtbl tag len
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: connac: fix possible NULL pointer dereference in mt76_connac_get_phy_mode_v2
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7615: fix monitor mode tear down crash
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix retrying release semaphore without end
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix possible infinite loop release semaphore
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7615: fix hwmon temp sensor mem use-after-free
Ben Greear <greearb@candelatech.com>
mt76: mt7915: fix hwmon temp sensor mem use-after-free
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: always wake device if necessary in debugfs
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix firmware usage of RA info using legacy rates
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: report HE MU radiotap
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: overwrite default reg_ops if necessary
Leon Yen <Leon.Yen@mediatek.com>
mt76: connac: fix GTK rekey offload failure on WPA mixed mode
Deren Wu <deren.wu@mediatek.com>
mt76: mt7921: fix dma hang in rmmod
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix bit fields for HT rate idx
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix potential overflow of eeprom page index
Deren Wu <deren.wu@mediatek.com>
mt76: mt7921: Fix out of order process by invalid event pkt
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix survey-dump reporting
Sean Wang <sean.wang@mediatek.com>
mt76: fix build error implicit enumeration conversion
Leon Yen <Leon.Yen@mediatek.com>
mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
Dan Carpenter <dan.carpenter@oracle.com>
mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix endianness warning in mt7921_update_txs
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event
Lang Yu <lang.yu@amd.com>
drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Fix sharing of wakeup power resources
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Turn off unused wakeup power resources
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: fix breakage introduced at blk-mq refactoring
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Sean Young <sean@mess.org>
media: ir_toy: assignment to be16 should be of correct type
Randy Dunlap <rdunlap@infradead.org>
media: ivtv: fix build for UML
jason-jh.lin <jason-jh.lin@mediatek.com>
mailbox: Remove WARN_ON for async_cb.cb in cmdq_exec_done
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: fix potential NULL dereference in cleanup
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: potential error pointer dereference in init()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init()
Ziyang Xuan <william.xuanziyang@huawei.com>
thermal/core: fix a UAF bug in __thermal_cooling_device_register()
Ovidiu Panait <ovidiu.panait@windriver.com>
crypto: octeontx2 - set assoclen in aead_do_fallback()
Eric Dumazet <edumazet@google.com>
tcp: switch orphan_count to bare per-cpu counters
Qi Zheng <zhengqi.arch@bytedance.com>
x86: Fix get_wchan() to support the ORC unwinder
Randy Dunlap <rdunlap@infradead.org>
net: tulip: winbond-840: fix build for UML
Randy Dunlap <rdunlap@infradead.org>
net: fealnx: fix build for UML
Zhang Qiao <zhangqiao22@huawei.com>
kernel/sched: Fix sched_fork() access an invalid sched_task_group
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix context restore
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Catherine Sullivan <csully@google.com>
gve: Track RX buffer allocation failures
John Fraker <jfraker@google.com>
gve: Recover from queue stall due to missed IRQ
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
THOBY Simon <Simon.THOBY@viveris.fr>
IMA: block writes of the security.ima xattr with unsupported algorithms
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Arnd Bergmann <arnd@arndb.de>
crypto: ccree - avoid out-of-range warnings from clang
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Mansur Alisha Shaik <mansur@codeaurora.org>
media: venus: fix vpp frequency calculation for decoder
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_dynset: relax superfluous check on set updates
Peter Zijlstra <peterz@infradead.org>
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
Yazen Ghannam <yazen.ghannam@amd.com>
EDAC/amd64: Handle three rank interleaving mode
Borislav Petkov <bp@suse.de>
x86/insn: Use get_unaligned() instead of memcpy()
Vincent Donnefort <vincent.donnefort@arm.com>
PM: EM: Fix inefficient states detection
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Stephen Boyd <swboyd@chromium.org>
ath10k: Don't always treat modem stop events as crashes
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Arnd Bergmann <arnd@arndb.de>
drm: fb_helper: fix CONFIG_FB dependency
Arnd Bergmann <arnd@arndb.de>
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
Punit Agrawal <punitagrawal@gmail.com>
kprobes: Do not use local variable when creating debugfs file
Yee Lee <yee.lee@mediatek.com>
scs: Release kasan vmalloc poison in scs_free process
Eugen Hristev <eugen.hristev@microchip.com>
media: atmel: fix the ispck initialization
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: tm6000: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: radio-wl1273: Avoid card name truncation
Ondrej Jirman <megous@megous.com>
media: sun6i-csi: Allow the video device to be open multiple times
Randy Dunlap <rdunlap@infradead.org>
media: i2c: ths8200 needs V4L2_ASYNC
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Tom Rix <trix@redhat.com>
media: TDA1997x: handle short reads of hdmi info frame.
Dafna Hirschfeld <dafna.hirschfeld@collabora.com>
media: mtk-vcodec: venc: fix return value when start_streaming fails
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: S_CTRL output the right value
Sakari Ailus <sakari.ailus@linux.intel.com>
media: imx258: Fix getting clock frequency
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Evgeny Novikov <novikov@ispras.ru>
media: ttusb-dec: avoid release of non-acquired mutex
Colin Ian King <colin.king@canonical.com>
media: cxd2880-spi: Fix a null pointer dereference on error handling path
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: meson-ge2d: Fix rotation parameter changes detection in 'ge2d_s_ctrl()'
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Kumar Kartikeya Dwivedi <memxor@gmail.com>
libbpf: Fix skel_internal.h to set errno on loader retval < 0
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Sudarshan Rajagopalan <quic_sudaraja@quicinc.com>
arm64: mm: update max_pfn after memory hotplug
Matthew Auld <matthew.auld@intel.com>
drm/ttm: stop calling tt_swapin in vm_access
Fabio Estevam <festevam@denx.de>
ath10k: sdio: Add missing BH locking around napi_schdule()
Loic Poulain <loic.poulain@linaro.org>
ath10k: Fix missing frame timestamp for beacon/probe-resp
Arnd Bergmann <arnd@arndb.de>
gve: DQO: avoid unused variable warnings
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
Pradeep Kumar Chitrapu <pradeepc@codeaurora.org>
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid race during regd updates
Dan Carpenter <dan.carpenter@oracle.com>
ath11k: fix some sleeping in atomic bugs
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366: Fix a bug in deleting VLANs
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Johannes Berg <johannes.berg@intel.com>
cfg80211: always free wiphy specific regdomain
Kees Cook <keescook@chromium.org>
fortify: Fix dropped strcpy() compile-time write overflow check
Jiasheng Jiang <jiasheng@iscas.ac.cn>
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Leon Romanovsky <leon@kernel.org>
qed: Don't ignore devlink allocation failures
Leon Romanovsky <leon@kernel.org>
bnxt_en: Check devlink allocation and registration status
Michael Walle <michael@walle.cc>
crypto: caam - disable pkc for non-E SoCs
Guchun Chen <guchun.chen@amd.com>
drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage
Dinghao Liu <dinghao.liu@zju.edu.cn>
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Ajay Singh <ajay.kathat@microchip.com>
wilc1000: fix possible memory leak in cfg_scan_result()
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
wcn36xx: Fix Antenna Diversity Switching
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Yoshitaka Ikeda <ikeda@nskint.co.jp>
spi: Fixed division by zero warning
Alex Bee <knaerzche@gmail.com>
drm: bridge: it66121: Fix return value it66121_probe
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: don't call netif_carrier_off() with NULL netdev
Yajun Deng <yajun.deng@linux.dev>
net: net_namespace: Fix undefined member in key_remove_domain()
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
lockdep: Let lock_is_held_type() detect recursive read as read
liuyuntao <liuyuntao10@huawei.com>
virtio-gpu: fix possible memory allocation failure
Iago Toral Quiroga <itoral@igalia.com>
drm/v3d: fix wait for TMU write combiner flush
Peter Zijlstra <peterz@infradead.org>
objtool: Handle __sanitize_cov*() tail calls
Peter Zijlstra <peterz@infradead.org>
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: fix burst length for DEU
Neeraj Upadhyay <neeraju@codeaurora.org>
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Toke Høiland-Jørgensen <toke@redhat.com>
libbpf: Don't crash on object files with no symbol tables
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Paul Cercueil <paul@crapouillou.net>
drm/bridge: it66121: Wait for next bridge to be probed
Paul Cercueil <paul@crapouillou.net>
drm/bridge: it66121: Initialize {device,vendor}_ids
Robert Foss <robert.foss@linaro.org>
drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
Imre Deak <imre.deak@intel.com>
fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix strobemeta selftest regression
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: don't trigger WARN() when decompression fails
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Stephane Eranian <eranian@google.com>
perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
Shuah Khan <skhan@linuxfoundation.org>
selftests/core: fix conflicting types compile error for close_range()
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
王贇 <yun.wang@linux.alibaba.com>
ftrace: do CPU checking after preemption disabled
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
Revert "wcn36xx: Enable firmware link monitoring"
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix packet drop on resume
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Correct band/freq reporting on RX
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Josef Bacik <josef@toxicpanda.com>
btrfs: do not take the uuid_mutex in btrfs_rm_device
Sidong Yang <realwakka@gmail.com>
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
Hui Wang <hui.wang@canonical.com>
ACPI: resources: Add one more Medion model in IRQ override quirk
Stefan Schaeckeler <schaecsn@gmx.net>
ACPI: AC: Quirk GK45 to skip reading _PSR
Eric Dumazet <edumazet@google.com>
net: annotate data-race in neigh_output()
Florian Westphal <fw@strlen.de>
vrf: run conntrack only in context of lower/physdev for locally generated packets
Viktor Rosendahl <Viktor.Rosendahl@bmw.de>
tools/latency-collector: Use correct size when writing queue_full_warning
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Fix glock_hash_walk bugs
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Cancel remote delete work asynchronously
Marc Kleine-Budde <mkl@pengutronix.de>
can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to unsigned int
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Jiri Olsa <jolsa@redhat.com>
selftests/bpf: Fix perf_buffer test on system with offline cpus
Shuah Khan <skhan@linuxfoundation.org>
selftests: kvm: fix mismatched fclose() after popen()
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Nick Desaulniers <ndesaulniers@google.com>
arm64: vdso32: suppress error message for 'make mrproper'
Hannes Reinecke <hare@suse.de>
nvme: drop scan_lock and always kick requeue list when removing namespaces
Israel Rukshin <israelr@nvidia.com>
nvmet-tcp: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet-rdma: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet: fix use-after-free when a port is removed
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
Michael Tretter <m.tretter@pengutronix.de>
media: allegro: ignore interrupt if mailbox is not initialized
Jens Axboe <axboe@kernel.dk>
block: remove inaccurate requeue check
Yaara Baruch <yaara.baruch@intel.com>
iwlwifi: change all JnP to NO-160 configuration
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7915: fix an off-by-one bound check
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Yanfei Xu <yanfei.xu@windriver.com>
locking/rwsem: Disable preemption for spinning region
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Xiao Ni <xni@redhat.com>
md: update superblock after changing rdev flags in state_store
Luis Chamberlain <mcgrof@kernel.org>
floppy: fix calling platform_device_unregister() on invalid drives
Jens Axboe <axboe@kernel.dk>
block: bump max plugged deferred size from 16 to 32
Ansuel Smith <ansuelsmth@gmail.com>
thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
Tim Gardner <tim.gardner@canonical.com>
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
Yuanzheng Song <songyuanzheng@huawei.com>
thermal/core: Fix null pointer dereference in thermal_release()
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
net: phy: micrel: make *-skew-ps check more lenient
Yifan Zhang <yifan1.zhang@amd.com>
drm/amdkfd: fix resume error when iommu disabled in Picasso
Aurabindo Pillai <aurabindo.pillai@amd.com>
drm/amd/display: fix null pointer deref when plugging in display
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: scan: Release PM resources blocked by unused objects
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Andreas Gruenbacher <agruenba@redhat.com>
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
Xin Xiong <xiongx18@fudan.edu.cn>
mmc: moxart: Fix reference count leaks in moxart_probe
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracing: Disable "other" permission bits in the tracefs files
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Alex Sierra <alex.sierra@amd.com>
drm/amdkfd: rm BO resv on validation to avoid deadlock
Antoine Tenart <atenart@kernel.org>
net-sysfs: try not to restart the syscall if it will fail eventually
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: imgu_fmt: Handle properly try
Mirela Rabulea <mirela.rabulea@nxp.com>
media: imx-jpeg: Fix possible null pointer dereference
Wojciech Drewek <wojciech.drewek@intel.com>
ice: Move devlink port to PF/VF struct
Vincent Donnefort <vincent.donnefort@arm.com>
cpufreq: Make policy min/max hard requirements
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Li Zhijian <lizhijian@cn.fujitsu.com>
kselftests/sched: cleanup the child processes
Josh Don <joshdon@google.com>
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
Corey Minyard <cminyard@mvista.com>
ipmi: Disable some operations during a panic
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Hans de Goede <hdegoede@redhat.com>
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Zong-Zhe Yang <kevin_yang@realtek.com>
rtw88: fix RX clock gate setting while fifo dump
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Niklas Söderlund <niklas.soderlund+renesas@ragnatech.se>
media: rcar-vin: Use user provided buffers when starting
Martin Kepplinger <martink@posteo.de>
media: imx: set a media_device bus_info string
Sergey Senozhatsky <senozhatsky@chromium.org>
media: videobuf2: rework vb2_mem_ops API
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Evgeny Novikov <novikov@ispras.ru>
media: vidtv: Fix memory leak in remove
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set unique vdev name based in type
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Dmitriy Ulitin <ulitin@ispras.ru>
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Evgeny Novikov <novikov@ispras.ru>
media: atomisp: Fix error handling in probe
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Rakesh Babu <rsaladi2@marvell.com>
octeontx2-pf: Enable promisc/allmulti match MCAM entries.
Alagu Sankar <alagusankar@silex-india.com>
ath10k: high latency fixes for beacon buffer
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
Wen Gong <wgong@codeaurora.org>
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid reg rules update during firmware recovery
Petr Machata <petrm@nvidia.com>
selftests: net: fib_nexthops: Wait before checking reported idle time
Jimmy Kizito <Jimmy.Kizito@amd.com>
drm/amd/display: Fix null pointer dereference for encoders
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix MMIO access page fault
Eric Biggers <ebiggers@google.com>
fscrypt: allow 256-bit master keys with AES-256-XTS
Mark Brown <broonie@kernel.org>
spi: Check we have a spi_device_id for each DT compatible
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Peter Zijlstra <peterz@infradead.org>
x86/mm/64: Improve stack overflow warnings
Shreyansh Chouhan <chouhan.shreyansh630@gmail.com>
crypto: aesni - check walk.nbytes instead of err
Seevalamuthu Mariappan <seevalam@codeaurora.org>
ath11k: Align bss_chan_info structure with firmware
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Paul E. McKenney <paulmck@kernel.org>
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
Hui Wang <hui.wang@canonical.com>
ACPI: resources: Add DMI-based legacy IRQ override quirk
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Scott Wood <swood@redhat.com>
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
Simon Ser <contact@emersion.fr>
drm/panel-orientation-quirks: add Valve Steam Deck
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
Charan Teja Reddy <charante@codeaurora.org>
dma-buf: WARN on dmabuf release with pending attachments
Kai Vehmanen <kai.vehmanen@linux.intel.com>
component: do not leave master devres group open after bind
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Clear status bits in interrupt handler
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Johan Hovold <johan@kernel.org>
most: fix control-message timeouts
Johan Hovold <johan@kernel.org>
serial: 8250: fix racy uartclk update
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Mihail Chindris <mihail.chindris@analog.com>
Documentation:devicetree:bindings:iio:dac: Fix val
Nuno Sá <nuno.sa@analog.com>
iio: ad5770r: make devicetree property reading consistent
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Mihail Chindris <mihail.chindris@analog.com>
drivers: iio: dac: ad5766: Fix dt property name
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: check return value of kstrdup_const()
Suzuki K Poulose <suzuki.poulose@arm.com>
coresight: trbe: Defer the probe on offline CPUs
Suzuki K Poulose <suzuki.poulose@arm.com>
coresight: trbe: Fix incorrect access of the sink specific data
Tao Zhang <quic_taozha@quicinc.com>
coresight: cti: Correct the parameter for pm_runtime_put
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Paulo Alcantara <pc@cjr.nz>
cifs: set a minimum of 120s for next dns resolution
Shyam Prasad N <sprasad@microsoft.com>
cifs: To match file servers, make sure the server hostname matches
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix configuring Reference clock
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix reporting Data Link Layer Link Active
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix checking for link up via LTSSM state
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Dan Williams <dan.j.williams@intel.com>
cxl/pci: Fix NULL vs ERR_PTR confusion
Li Chen <lchen@ambarella.com>
PCI: cadence: Add cdns_plat_pcie_probe() missing return
Marek Behún <kabel@kernel.org>
PCI: pci-bridge-emul: Fix emulation of W1C bits
yangerkun <yangerkun@huawei.com>
ovl: fix use after free in struct ovl_aio_req
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Arnd Bergmann <arnd@arndb.de>
ifb: fix building without CONFIG_NET_CLS_ACT
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Steven Rostedt (VMware) <rostedt@goodmis.org>
ring-buffer: Protect ring_buffer_reset() from reentrancy
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Oleksij Rempel <linux@rempel-privat.de>
iio: adc: tsc2046: fix scan interval warning
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Handle dynamic MSR intercept toggling
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Sean Christopherson <seanjc@google.com>
KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
David Woodhouse <dwmw2@infradead.org>
KVM: x86: Fix recording of guest steal time / preempted status
Mark Rutland <mark.rutland@arm.com>
KVM: arm64: Extract ESR_ELx.EC only
Yang Yingliang <yangyingliang@huawei.com>
iio: core: check return value when calling dev_set_name()
Yang Yingliang <yangyingliang@huawei.com>
iio: core: fix double free in iio_device_unregister_sysfs()
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: use the combined functions to protect critical zone
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
David Virag <virag.david003@gmail.com>
soc: samsung: exynos-pmu: Fix compilation when nothing selects CONFIG_MFD_CORE
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Wolfram Sang <wsa+renesas@sang-engineering.com>
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Dmitry Osipenko <digetx@gmail.com>
ASoC: tegra: Restore AC97 support
Dmitry Osipenko <digetx@gmail.com>
ASoC: tegra: Set default card name for Trimslice
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix invalid unit check
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Try waking the firmware until we get an interrupt
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix (QoS) null data frame bitrate/modulation
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix tx_status mechanism
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Maximilian Luz <luzmaximilian@gmail.com>
HID: surface-hid: Allow driver matching for target ID 1 devices
Maximilian Luz <luzmaximilian@gmail.com>
HID: surface-hid: Use correct event registry for managing HID events
Felix Fietkau <nbd@nbd.name>
mt76: mt7615: fix skb use-after-free on mac reset
Maximilian Luz <luzmaximilian@gmail.com>
platform/surface: aggregator_registry: Add support for Surface Laptop Studio
Lukas Wunner <lukas@wunner.de>
ifb: Depend on netfilter alternatively to tc
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Guoqing Jiang <guoqing.jiang@linux.dev>
md/raid1: only allocate write behind bio for WriteMostly device
Corey Minyard <cminyard@mvista.com>
ipmi:watchdog: Set panic count to proper value on a panic
Ondrej Mosnacek <omosnace@redhat.com>
selinux: fix race condition when computing ocontext SIDs
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Laurent Vivier <lvivier@redhat.com>
KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
Sean Christopherson <seanjc@google.com>
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
David Yang <davidcomponentone@gmail.com>
tools/testing/selftests/vm/split_huge_page_test.c: fix application of sizeof to pointer
Wen Gu <guwen@linux.alibaba.com>
net/smc: Correct spelling mistake to TCPF_SYN_RECV
Tony Lu <tonylu@linux.alibaba.com>
net/smc: Fix smc_link->llc_testlink_time overflow
Yu Xiao <yu.xiao@corigine.com>
nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
Dongli Zhang <dongli.zhang@oracle.com>
vmxnet3: do not stop tx queues after netif_device_detach()
Janghyub Seo <jhyub06@gmail.com>
r8169: Add device 10ec:8162 to driver r8169
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: ignore reset event before initialization process is done
Yufeng Mo <moyufeng@huawei.com>
net: hns3: change hclge/hclgevf workqueue to WQ_UNBOUND mode
Amit Engel <amit.engel@dell.com>
nvmet-tcp: fix header digest verification
Naohiro Aota <naohiro.aota@wdc.com>
block: schedule queue restart after BLK_STS_ZONE_RESOURCE
Mario <awxkrnl@gmail.com>
drm: panel-orientation-quirks: Add quirk for GPD Win3
Walter Stoll <walter.stoll@duagon.com>
watchdog: Fix OMAP watchdog early handling
Cyril Strejc <cyril.strejc@skoda.cz>
net: multicast: calculate csum of looped-back and forwarded packets
Thomas Perrot <thomas.perrot@bootlin.com>
spi: spl022: fix Microwire full duplex mode
Maurizio Lombardi <mlombard@redhat.com>
nvmet-tcp: fix a memory leak when releasing a queue
Dongli Zhang <dongli.zhang@oracle.com>
xen/netfront: stop tx queues during live migration
Asmaa Mnebhi <asmaa@nvidia.com>
gpio: mlxbf2.c: Add check for bgpio_init failure
Lorenz Bauer <lmb@cloudflare.com>
bpf: Prevent increasing bpf_jit_limit above max
Lorenz Bauer <lmb@cloudflare.com>
bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
Lorenz Bauer <lmb@cloudflare.com>
bpf: Define bpf_jit_alloc_exec_limit for riscv JIT
Florian Westphal <fw@strlen.de>
fcnal-test: kill hanging ping/nettest binaries on cleanup
Bryant Mairs <bryant@mai.rs>
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Russ Weight <russell.h.weight@intel.com>
spi: altera: Change to dynamic allocation of spi id
Randy Dunlap <rdunlap@infradead.org>
mmc: winbond: don't build on M68K
Paweł Anikiel <pan@semihalf.com>
reset: socfpga: add empty driver allowing consumers to probe
Bastien Roucariès <rouca@debian.org>
ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
Arnd Bergmann <arnd@arndb.de>
hyperv/vmbus: include linux/bitops.h
Erik Ekman <erik@kryo.se>
sfc: Don't use netif_info before net_device setup
Erik Ekman <erik@kryo.se>
sfc: Export fibre-specific supported link modes
Zheyu Ma <zheyuma97@gmail.com>
cavium: Fix return values of the probe function
Zheyu Ma <zheyuma97@gmail.com>
mISDN: Fix return values of the probe function
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: qla2xxx: Fix unmap of already freed sgl
Zheyu Ma <zheyuma97@gmail.com>
scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
Zheyu Ma <zheyuma97@gmail.com>
cavium: Return negative value when pci_alloc_irq_vectors() fails
Wan Jiabing <wanjiabing@vivo.com>
net: mscc: ocelot: Add of_node_put() before goto
Wan Jiabing <wanjiabing@vivo.com>
net: sparx5: Add of_node_put() before goto
Kele Huang <huangkele@bytedance.com>
ptp: fix error print of ptp_kvm on X86_64 platform
Davide Baldo <davide@baldo.me>
ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
Stefan Binding <sbinding@opensource.cirrus.com>
ASoC: cs42l42: Ensure 0dB full scale volume is used for headsets
Yang Yingliang <yangyingliang@huawei.com>
ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
Quentin Perret <qperret@google.com>
KVM: arm64: Report corrupted refcount at EL2
Peter Zijlstra <peterz@infradead.org>
x86/iopl: Fake iopl(3) CLI/STI usage
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix page stealing
yangerkun <yangerkun@huawei.com>
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
yangerkun <yangerkun@huawei.com>
ext4: ensure enough credits in ext4_ext_shift_path_extents
Shaoying Xu <shaoyi@amazon.com>
ext4: fix lazy initialization next schedule time computation in more granular unit
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Takashi Iwai <tiwai@suse.de>
ALSA: PCM: Fix NULL dereference at mmap checks
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Free card instance properly at probe errors
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Jason Ormes <skryking@gmail.com>
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Kai-Heng Feng <kai.heng.feng@canonical.com>
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add quirk for ASUS UX550VE
Jaroslav Kysela <perex@perex.cz>
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jeremy Soller <jeremy@system76.com>
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
Johnathon Clark <john.clark@cantab.net>
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: Fix check_ext_ctrls
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Support dynamic resolution changes
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Do not override sizeimage for output format
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Helge Deller <deller@gmx.de>
parisc: Fix set_fixmap() on PA1.x CPUs
Sungjong Seo <sj1557.seo@samsung.com>
exfat: fix incorrect loading of i_blocks for large files
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Derong Liu <derong.liu@mediatek.com>
mmc: mtk-sd: Add wait dma stop done flow
Ziyang Xuan <william.xuanziyang@huawei.com>
char: xillybus: fix msg_ep UAF in xillyusb_probe()
Ben Skeggs <bskeggs@redhat.com>
ce/gf100: fix incorrect CE0 address calculation on some GPUs
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix use after free in eh_abort path
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
Ewan D. Milne <emilne@redhat.com>
scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Johan Hovold <johan@kernel.org>
Input: iforce - fix control-message timeout
Nehal Bakulchandra Shah <Nehal-Bakulchandra.shah@amd.com>
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 +
.../devicetree/bindings/iio/dac/adi,ad5766.yaml | 2 +-
.../bindings/regulator/samsung,s5m8767.txt | 23 +-
Documentation/filesystems/fscrypt.rst | 10 +-
Makefile | 4 +-
arch/Kconfig | 3 +
arch/alpha/include/asm/processor.h | 2 +-
arch/alpha/kernel/process.c | 5 +-
arch/arc/include/asm/processor.h | 2 +-
arch/arc/kernel/stacktrace.c | 4 +-
arch/arm/Makefile | 22 +-
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/bcm4708-netgear-r6250.dts | 2 +-
arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts | 2 +-
arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts | 2 +-
arch/arm/boot/dts/bcm4709-linksys-ea9200.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r7000.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r8000.dts | 2 +-
arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts | 2 +-
arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts | 2 +-
arch/arm/boot/dts/bcm53016-meraki-mr32.dts | 2 +-
arch/arm/boot/dts/bcm94708.dts | 2 +-
arch/arm/boot/dts/bcm94709.dts | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/qcom-msm8974.dtsi | 4 +-
arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 8 +-
arch/arm/boot/dts/stm32mp151.dtsi | 16 +-
arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi | 2 +-
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 2 +-
arch/arm/boot/dts/sun7i-a20-olinuxino-lime2.dts | 2 +-
arch/arm/include/asm/processor.h | 2 +-
arch/arm/kernel/process.c | 4 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mach-s3c/irq-s3c24xx.c | 22 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/kasan_init.c | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2 +-
.../boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi | 4 +-
.../boot/dts/amlogic/meson-g12b-odroid-n2.dtsi | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi | 4 +-
.../boot/dts/amlogic/meson-sm1-bananapi-m5.dts | 2 +-
.../boot/dts/amlogic/meson-sm1-khadas-vim3l.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-sm1-odroid.dtsi | 6 +-
arch/arm64/boot/dts/amlogic/meson-sm1-sei610.dts | 2 +-
arch/arm64/boot/dts/broadcom/bcm4908/bcm4908.dtsi | 2 +-
arch/arm64/boot/dts/qcom/msm8916.dtsi | 8 +-
arch/arm64/boot/dts/qcom/pm8916.dtsi | 1 -
arch/arm64/boot/dts/qcom/pmi8994.dtsi | 2 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-coachz.dtsi | 2 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-pompom.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sc7180.dtsi | 52 ++---
arch/arm64/boot/dts/qcom/sdm845.dtsi | 6 +-
.../arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 1 +
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
arch/arm64/boot/dts/rockchip/rk3568.dtsi | 2 +-
arch/arm64/boot/dts/ti/k3-j7200-main.dtsi | 6 +-
arch/arm64/boot/dts/ti/k3-j721e-main.dtsi | 16 +-
arch/arm64/include/asm/esr.h | 1 +
arch/arm64/include/asm/pgtable.h | 12 +-
arch/arm64/include/asm/processor.h | 2 +-
arch/arm64/kernel/cpufeature.c | 10 +-
arch/arm64/kernel/process.c | 4 +-
arch/arm64/kernel/vdso32/Makefile | 3 +-
arch/arm64/kvm/hyp/hyp-entry.S | 2 +-
arch/arm64/kvm/hyp/nvhe/host.S | 2 +-
arch/arm64/kvm/hyp/nvhe/page_alloc.c | 1 +
arch/arm64/mm/mmu.c | 5 +
arch/arm64/net/bpf_jit_comp.c | 5 +
arch/csky/include/asm/processor.h | 2 +-
arch/csky/kernel/stacktrace.c | 5 +-
arch/h8300/include/asm/processor.h | 2 +-
arch/h8300/kernel/process.c | 5 +-
arch/hexagon/include/asm/processor.h | 2 +-
arch/hexagon/kernel/process.c | 4 +-
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/include/asm/processor.h | 2 +-
arch/ia64/kernel/kprobes.c | 9 +-
arch/ia64/kernel/process.c | 5 +-
arch/m68k/Kconfig.machine | 1 +
arch/m68k/include/asm/processor.h | 2 +-
arch/m68k/kernel/process.c | 4 +-
arch/microblaze/include/asm/processor.h | 2 +-
arch/microblaze/kernel/process.c | 2 +-
arch/mips/Kconfig | 1 +
arch/mips/Makefile | 2 +
arch/mips/include/asm/cmpxchg.h | 5 +-
arch/mips/include/asm/mips-cm.h | 12 +-
arch/mips/include/asm/processor.h | 2 +-
arch/mips/kernel/mips-cm.c | 21 +-
arch/mips/kernel/process.c | 8 +-
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 -
arch/mips/lantiq/xway/dma.c | 23 +-
arch/nds32/include/asm/processor.h | 2 +-
arch/nds32/kernel/process.c | 7 +-
arch/nios2/include/asm/processor.h | 2 +-
arch/nios2/kernel/process.c | 5 +-
arch/openrisc/include/asm/processor.h | 2 +-
arch/openrisc/kernel/dma.c | 4 +-
arch/openrisc/kernel/process.c | 2 +-
arch/openrisc/kernel/smp.c | 6 +-
arch/parisc/include/asm/pgtable.h | 10 +-
arch/parisc/include/asm/processor.h | 2 +-
arch/parisc/kernel/cache.c | 4 +-
arch/parisc/kernel/entry.S | 2 +-
arch/parisc/kernel/process.c | 5 +-
arch/parisc/kernel/smp.c | 19 +-
arch/parisc/kernel/unwind.c | 21 +-
arch/parisc/kernel/vmlinux.lds.S | 3 +-
arch/parisc/mm/fixmap.c | 5 +-
arch/parisc/mm/init.c | 4 +-
arch/powerpc/Kconfig | 6 +-
arch/powerpc/include/asm/nohash/32/pgtable.h | 19 +-
arch/powerpc/include/asm/nohash/32/pte-8xx.h | 22 ++
arch/powerpc/include/asm/nohash/64/pgtable.h | 5 -
arch/powerpc/include/asm/nohash/pte-book3e.h | 18 +-
arch/powerpc/include/asm/paravirt.h | 18 +-
arch/powerpc/include/asm/processor.h | 2 +-
arch/powerpc/kernel/firmware.c | 7 +-
arch/powerpc/kernel/head_booke.h | 15 +-
arch/powerpc/kernel/interrupt.c | 2 +-
arch/powerpc/kernel/process.c | 9 +-
arch/powerpc/kvm/book3s_hv.c | 30 ++-
arch/powerpc/kvm/booke.c | 16 +-
arch/powerpc/lib/feature-fixups.c | 11 +
arch/powerpc/mm/mem.c | 2 +-
arch/powerpc/mm/nohash/tlb_low_64e.S | 8 +-
arch/powerpc/mm/pgtable_32.c | 2 +-
arch/powerpc/net/bpf_jit_comp.c | 2 +-
arch/powerpc/perf/power10-events-list.h | 8 +-
arch/powerpc/perf/power10-pmu.c | 44 ++--
arch/powerpc/platforms/44x/fsp2.c | 2 +
arch/powerpc/platforms/85xx/Makefile | 4 +-
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 7 +-
arch/powerpc/platforms/85xx/smp.c | 12 +-
arch/powerpc/platforms/book3s/vas-api.c | 4 +-
arch/powerpc/platforms/powernv/opal-prd.c | 12 +-
arch/powerpc/platforms/pseries/mobility.c | 34 +++
arch/powerpc/xmon/xmon.c | 3 +-
arch/riscv/include/asm/processor.h | 2 +-
arch/riscv/kernel/stacktrace.c | 12 +-
arch/riscv/net/bpf_jit_core.c | 5 +
arch/s390/include/asm/processor.h | 2 +-
arch/s390/kernel/perf_cpum_cf.c | 4 +-
arch/s390/kernel/process.c | 4 +-
arch/s390/kernel/uv.c | 2 +-
arch/s390/kvm/priv.c | 2 +
arch/s390/kvm/pv.c | 21 +-
arch/s390/mm/gmap.c | 11 +-
arch/s390/mm/pgtable.c | 70 ++++--
arch/sh/include/asm/processor_32.h | 2 +-
arch/sh/kernel/cpu/fpu.c | 10 +-
arch/sh/kernel/process_32.c | 5 +-
arch/sparc/include/asm/processor_32.h | 2 +-
arch/sparc/include/asm/processor_64.h | 2 +-
arch/sparc/kernel/process_32.c | 5 +-
arch/sparc/kernel/process_64.c | 5 +-
arch/um/include/asm/processor-generic.h | 2 +-
arch/um/kernel/process.c | 5 +-
arch/x86/Kconfig | 1 +
arch/x86/crypto/aesni-intel_glue.c | 2 +-
arch/x86/events/intel/core.c | 5 +-
arch/x86/events/intel/ds.c | 5 +-
arch/x86/events/intel/uncore_discovery.h | 2 +-
arch/x86/events/intel/uncore_snbep.c | 6 +-
arch/x86/hyperv/hv_init.c | 5 +-
arch/x86/include/asm/cpu_entry_area.h | 8 +-
arch/x86/include/asm/insn-eval.h | 1 +
arch/x86/include/asm/irq_stack.h | 37 ++-
arch/x86/include/asm/kvm_host.h | 2 +-
arch/x86/include/asm/mem_encrypt.h | 1 +
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/include/asm/processor.h | 3 +-
arch/x86/include/asm/stacktrace.h | 10 +
arch/x86/include/asm/traps.h | 6 +-
arch/x86/kernel/Makefile | 6 +
arch/x86/kernel/cc_platform.c | 69 ++++++
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 +++-
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/cpu/hygon.c | 2 +
arch/x86/kernel/cpu/mce/intel.c | 5 +-
arch/x86/kernel/dumpstack_64.c | 6 +
arch/x86/kernel/irq.c | 4 +-
arch/x86/kernel/process.c | 66 ++----
arch/x86/kernel/sev.c | 32 ---
arch/x86/kernel/traps.c | 60 +++--
arch/x86/kvm/cpuid.c | 47 ++--
arch/x86/kvm/vmx/nested.c | 103 ++++-----
arch/x86/kvm/vmx/vmx.c | 68 +-----
arch/x86/kvm/vmx/vmx.h | 63 ++++++
arch/x86/kvm/x86.c | 108 ++++++---
arch/x86/lib/insn-eval.c | 2 +-
arch/x86/lib/insn.c | 5 +-
arch/x86/mm/cpu_entry_area.c | 7 +
arch/x86/mm/fault.c | 20 +-
arch/x86/mm/mem_encrypt.c | 1 +
arch/x86/mm/mem_encrypt_identity.c | 9 +
arch/xtensa/include/asm/processor.h | 2 +-
arch/xtensa/kernel/process.c | 5 +-
block/blk-cgroup.c | 10 +
block/blk-mq.c | 18 +-
block/blk.h | 6 +
crypto/Kconfig | 2 +-
crypto/pcrypt.c | 12 +-
crypto/tcrypt.c | 5 +-
drivers/acpi/ac.c | 19 ++
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +-
drivers/acpi/acpica/hwxfsleep.c | 7 +
drivers/acpi/battery.c | 2 +-
drivers/acpi/glue.c | 25 ++
drivers/acpi/internal.h | 1 +
drivers/acpi/pmic/intel_pmic.c | 51 +++--
drivers/acpi/power.c | 86 +++----
drivers/acpi/resource.c | 56 ++++-
drivers/acpi/scan.c | 6 +
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 +
drivers/auxdisplay/ht16k33.c | 66 +++---
drivers/auxdisplay/img-ascii-lcd.c | 10 +
drivers/base/component.c | 5 +-
drivers/base/core.c | 4 +-
drivers/base/power/main.c | 93 +++++---
drivers/block/ataflop.c | 141 +++++++-----
drivers/block/floppy.c | 9 +-
drivers/block/nbd.c | 24 +-
drivers/block/zram/zram_drv.c | 2 +-
drivers/bluetooth/btmtkuart.c | 13 +-
drivers/bus/ti-sysc.c | 65 +++++-
drivers/char/hw_random/mtk-rng.c | 9 +-
drivers/char/ipmi/ipmi_msghandler.c | 10 +-
drivers/char/ipmi/ipmi_watchdog.c | 25 +-
drivers/char/ipmi/kcs_bmc_serio.c | 4 +-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/char/tpm/tpm_tis_core.c | 26 ++-
drivers/char/tpm/tpm_tis_core.h | 4 +
drivers/char/tpm/tpm_tis_spi_main.c | 1 +
drivers/char/xillybus/xillyusb.c | 1 +
drivers/clk/at91/clk-master.c | 6 +-
drivers/clk/at91/clk-sam9x60-pll.c | 4 +-
drivers/clk/at91/pmc.c | 5 +
drivers/clk/mvebu/ap-cpu-clk.c | 14 +-
drivers/clocksource/Kconfig | 1 +
drivers/cpufreq/cpufreq.c | 7 +
drivers/cpufreq/intel_pstate.c | 37 ++-
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/caam/caampkc.c | 19 +-
drivers/crypto/caam/regs.h | 3 +
drivers/crypto/ccree/cc_driver.c | 3 +-
drivers/crypto/marvell/octeontx2/otx2_cptvf_algs.c | 1 +
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 ++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +
drivers/crypto/s5p-sss.c | 2 +
drivers/cxl/pci.c | 2 +-
drivers/dma-buf/dma-buf.c | 1 +
drivers/dma/at_xdmac.c | 53 +++--
drivers/dma/bestcomm/ata.c | 2 +-
drivers/dma/bestcomm/bestcomm.c | 22 +-
drivers/dma/bestcomm/fec.c | 4 +-
drivers/dma/bestcomm/gen_bd.c | 4 +-
drivers/dma/dmaengine.h | 2 +-
drivers/dma/stm32-dma.c | 23 +-
drivers/dma/ti/k3-udma.c | 32 ++-
drivers/edac/amd64_edac.c | 22 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci/psci_checker.c | 2 +-
drivers/firmware/qcom_scm.c | 2 +-
drivers/gpio/gpio-mlxbf2.c | 5 +
drivers/gpio/gpio-realtek-otto.c | 2 +-
drivers/gpu/drm/Kconfig | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 11 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 2 +-
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 8 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 17 +-
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 1 +
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 7 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 +-
drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c | 2 +-
.../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 2 +-
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 16 +-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3 +-
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 89 +++-----
drivers/gpu/drm/bridge/analogix/anx7625.c | 12 +-
drivers/gpu/drm/bridge/ite-it66121.c | 21 +-
drivers/gpu/drm/bridge/lontium-lt9611uxc.c | 9 +-
drivers/gpu/drm/drm_panel_orientation_quirks.c | 47 +++-
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/i915/display/intel_fb.c | 5 +-
drivers/gpu/drm/imx/imx-drm-core.c | 2 -
drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 6 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4 +
drivers/gpu/drm/msm/msm_gem.c | 5 +-
drivers/gpu/drm/msm/msm_gpu.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_gem.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_svm.c | 4 +
drivers/gpu/drm/nouveau/nvkm/engine/ce/gt215.c | 2 +-
drivers/gpu/drm/nouveau/nvkm/engine/device/base.c | 3 +-
drivers/gpu/drm/radeon/radeon_gem.c | 2 +-
drivers/gpu/drm/sun4i/sun8i_csc.h | 4 +-
drivers/gpu/drm/ttm/ttm_bo_vm.c | 99 +-------
drivers/gpu/drm/v3d/v3d_gem.c | 4 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 8 +-
drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 -
drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 72 +-----
drivers/gpu/drm/vmwgfx/vmwgfx_ttm_glue.c | 3 -
drivers/hid/hid-u2fzero.c | 10 +-
drivers/hid/surface-hid/surface_hid.c | 4 +-
drivers/hv/hyperv_vmbus.h | 1 +
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +-
drivers/hwtracing/coresight/coresight-cti-core.c | 2 +-
drivers/hwtracing/coresight/coresight-trbe.c | 10 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/accel/st_accel_i2c.c | 4 +-
drivers/iio/accel/st_accel_spi.c | 4 +-
drivers/iio/adc/ti-tsc2046.c | 2 +-
drivers/iio/dac/ad5446.c | 9 +-
drivers/iio/dac/ad5766.c | 6 +-
drivers/iio/dac/ad5770r.c | 2 +-
drivers/iio/gyro/st_gyro_i2c.c | 4 +-
drivers/iio/gyro/st_gyro_spi.c | 4 +-
drivers/iio/imu/adis.c | 4 +-
drivers/iio/industrialio-buffer.c | 28 ++-
drivers/iio/industrialio-core.c | 9 +-
drivers/iio/magnetometer/st_magn_i2c.c | 4 +-
drivers/iio/magnetometer/st_magn_spi.c | 4 +-
drivers/iio/pressure/st_pressure_i2c.c | 4 +-
drivers/iio/pressure/st_pressure_spi.c | 8 +-
drivers/infiniband/core/uverbs_cmd.c | 3 -
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 +-
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/joystick/iforce/iforce-usb.c | 2 +-
drivers/input/misc/ariel-pwrbutton.c | 7 +
drivers/input/mouse/elantech.c | 13 ++
drivers/input/serio/i8042-x86ia64io.h | 14 ++
drivers/input/touchscreen/st1232.c | 2 +-
drivers/iommu/dma-iommu.c | 16 +-
drivers/iommu/mtk_iommu.c | 4 +-
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-sifive-plic.c | 8 +-
drivers/isdn/hardware/mISDN/hfcpci.c | 8 +-
drivers/mailbox/mtk-cmdq-mailbox.c | 1 -
drivers/md/md.c | 11 +-
drivers/md/raid1.c | 2 +-
drivers/media/common/videobuf2/videobuf2-core.c | 42 ++--
.../media/common/videobuf2/videobuf2-dma-contig.c | 39 ++--
drivers/media/common/videobuf2/videobuf2-dma-sg.c | 35 +--
drivers/media/common/videobuf2/videobuf2-vmalloc.c | 30 +--
drivers/media/dvb-frontends/mn88443x.c | 18 +-
drivers/media/i2c/Kconfig | 1 +
drivers/media/i2c/imx258.c | 12 +-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++-
drivers/media/i2c/tda1997x.c | 8 +-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/ivtv/ivtvfb.c | 4 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++-
drivers/media/platform/allegro-dvt/allegro-core.c | 9 +
drivers/media/platform/atmel/atmel-isc-base.c | 25 +-
drivers/media/platform/atmel/atmel-isc.h | 2 +
drivers/media/platform/atmel/atmel-sama5d2-isc.c | 39 ++--
drivers/media/platform/atmel/atmel-sama7g5-isc.c | 22 +-
drivers/media/platform/imx-jpeg/mxc-jpeg.c | 6 +
drivers/media/platform/meson/ge2d/ge2d.c | 6 +-
drivers/media/platform/mtk-vcodec/mtk_vcodec_enc.c | 8 +-
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/qcom/venus/pm_helpers.c | 8 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/rcar-vin/rcar-dma.c | 3 +-
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/platform/stm32/stm32-dcmi.c | 19 +-
.../media/platform/sunxi/sun6i-csi/sun6i_video.c | 6 +-
drivers/media/radio/radio-wl1273.c | 2 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ir_toy.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/spi/cxd2880-spi.c | 2 +-
drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/tm6000/tm6000-video.c | 3 +-
drivers/media/usb/ttusb-dec/ttusb_dec.c | 10 +-
drivers/media/usb/uvc/uvc_driver.c | 7 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 +
drivers/media/v4l2-core/v4l2-ioctl.c | 67 ++++--
drivers/memory/fsl_ifc.c | 13 +-
drivers/memory/renesas-rpc-if.c | 113 +++++++---
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mfd/altera-sysmgr.c | 2 +-
drivers/mfd/dln2.c | 18 ++
drivers/mfd/mfd-core.c | 2 +
drivers/mfd/motorola-cpcap.c | 8 +
drivers/mfd/sprd-sc27xx-spi.c | 7 +
drivers/mmc/host/Kconfig | 2 +-
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/moxart-mmc.c | 29 ++-
drivers/mmc/host/mtk-sd.c | 5 +
drivers/mmc/host/mxs-mmc.c | 10 +
drivers/mmc/host/sdhci-omap.c | 18 +-
drivers/most/most_usb.c | 5 +-
drivers/mtd/mtdcore.c | 4 +-
drivers/mtd/nand/raw/ams-delta.c | 12 +-
drivers/mtd/nand/raw/arasan-nand-controller.c | 15 ++
drivers/mtd/nand/raw/au1550nd.c | 12 +-
drivers/mtd/nand/raw/fsmc_nand.c | 4 +-
drivers/mtd/nand/raw/gpio.c | 12 +-
drivers/mtd/nand/raw/intel-nand-controller.c | 5 +
drivers/mtd/nand/raw/mpc5121_nfc.c | 12 +-
drivers/mtd/nand/raw/orion_nand.c | 12 +-
drivers/mtd/nand/raw/pasemi_nand.c | 12 +-
drivers/mtd/nand/raw/plat_nand.c | 12 +-
drivers/mtd/nand/raw/socrates_nand.c | 12 +-
drivers/mtd/nand/raw/xway_nand.c | 12 +-
drivers/mtd/spi-nor/controllers/hisi-sfc.c | 1 -
drivers/net/Kconfig | 2 +-
drivers/net/bonding/bond_sysfs_slave.c | 36 +--
drivers/net/can/dev/bittiming.c | 2 +-
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 2 +-
drivers/net/can/usb/etas_es58x/es58x_core.c | 6 +-
drivers/net/dsa/mv88e6xxx/chip.c | 5 +-
drivers/net/dsa/ocelot/felix.c | 9 +-
drivers/net/dsa/rtl8366.c | 2 +-
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 +
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 5 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c | 13 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.h | 13 --
drivers/net/ethernet/cavium/thunder/nic_main.c | 2 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
.../chelsio/inline_crypto/chtls/chtls_cm.c | 2 +-
.../chelsio/inline_crypto/chtls/chtls_cm.h | 2 +-
drivers/net/ethernet/dec/tulip/winbond-840.c | 2 +-
drivers/net/ethernet/fealnx.c | 2 +-
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18 +-
drivers/net/ethernet/google/gve/gve.h | 17 +-
drivers/net/ethernet/google/gve/gve_adminq.h | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 48 +++-
drivers/net/ethernet/google/gve/gve_rx.c | 7 +-
drivers/net/ethernet/google/gve/gve_tx.c | 23 +-
drivers/net/ethernet/google/gve/gve_tx_dqo.c | 84 ++++---
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 20 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 45 +---
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 7 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 77 +++----
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.h | 4 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 15 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 5 +-
drivers/net/ethernet/ibm/ibmvnic.c | 21 +-
drivers/net/ethernet/intel/ice/ice.h | 7 +-
drivers/net/ethernet/intel/ice/ice_base.c | 2 +-
drivers/net/ethernet/intel/ice/ice_devlink.c | 109 ++++++---
drivers/net/ethernet/intel/ice/ice_devlink.h | 6 +-
drivers/net/ethernet/intel/ice/ice_lib.c | 3 +-
drivers/net/ethernet/intel/ice/ice_main.c | 4 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 22 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.h | 9 +
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 38 ++--
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 78 ++++---
.../net/ethernet/microchip/sparx5/sparx5_main.c | 1 +
drivers/net/ethernet/mscc/ocelot.c | 17 --
drivers/net/ethernet/mscc/ocelot_net.c | 1 +
drivers/net/ethernet/mscc/ocelot_vsc7514.c | 1 +
drivers/net/ethernet/netronome/nfp/bpf/main.c | 16 +-
drivers/net/ethernet/netronome/nfp/bpf/main.h | 2 +
drivers/net/ethernet/netronome/nfp/bpf/offload.c | 17 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 12 +-
drivers/net/ethernet/realtek/r8169_main.c | 1 +
drivers/net/ethernet/sfc/mcdi_port_common.c | 37 ++-
drivers/net/ethernet/sfc/ptp.c | 4 +-
drivers/net/ethernet/sfc/siena_sriov.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 2 -
drivers/net/ethernet/ti/cpsw_ale.c | 6 +-
drivers/net/ethernet/ti/davinci_emac.c | 16 +-
drivers/net/ifb.c | 2 +
drivers/net/phy/micrel.c | 9 +-
drivers/net/phy/phy.c | 7 +-
drivers/net/phy/phylink.c | 7 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 1 -
drivers/net/vrf.c | 28 ++-
drivers/net/wireless/ath/ath10k/core.c | 11 +-
drivers/net/wireless/ath/ath10k/coredump.c | 11 +-
drivers/net/wireless/ath/ath10k/coredump.h | 7 +
drivers/net/wireless/ath/ath10k/mac.c | 45 +++-
drivers/net/wireless/ath/ath10k/qmi.c | 3 +-
drivers/net/wireless/ath/ath10k/sdio.c | 5 +-
drivers/net/wireless/ath/ath10k/snoc.c | 77 +++++++
drivers/net/wireless/ath/ath10k/snoc.h | 5 +
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.c | 4 +
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath11k/dbring.c | 16 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 13 +-
drivers/net/wireless/ath/ath11k/mac.c | 2 +-
drivers/net/wireless/ath/ath11k/qmi.c | 4 +-
drivers/net/wireless/ath/ath11k/reg.c | 11 +-
drivers/net/wireless/ath/ath11k/reg.h | 2 +-
drivers/net/wireless/ath/ath11k/wmi.c | 40 ++--
drivers/net/wireless/ath/ath11k/wmi.h | 3 +-
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +-
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 ++--
drivers/net/wireless/ath/wcn36xx/hal.h | 32 +++
drivers/net/wireless/ath/wcn36xx/main.c | 21 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 126 ++++++++++-
drivers/net/wireless/ath/wcn36xx/smd.h | 1 +
drivers/net/wireless/ath/wcn36xx/txrx.c | 64 +++---
drivers/net/wireless/ath/wcn36xx/txrx.h | 3 +-
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10 +
drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 13 +-
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 5 +-
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 6 +-
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +--
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 ++-
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
drivers/net/wireless/mediatek/mt76/debugfs.c | 10 +-
drivers/net/wireless/mediatek/mt76/mt76.h | 8 +-
.../net/wireless/mediatek/mt76/mt7615/debugfs.c | 29 ++-
drivers/net/wireless/mediatek/mt76/mt7615/init.c | 6 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 60 ++---
drivers/net/wireless/mediatek/mt76/mt7615/main.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7615/mcu.c | 18 +-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 30 ++-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 8 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13 +-
drivers/net/wireless/mediatek/mt76/mt7915/init.c | 10 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.h | 3 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 22 +-
.../net/wireless/mediatek/mt76/mt7921/debugfs.c | 36 ++-
drivers/net/wireless/mediatek/mt76/mt7921/init.c | 13 ++
drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 68 +++++-
drivers/net/wireless/mediatek/mt76/mt7921/mac.h | 8 +
drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 22 +-
drivers/net/wireless/mediatek/mt76/mt7921/mcu.h | 10 +-
drivers/net/wireless/mediatek/mt76/mt7921/regs.h | 8 +-
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +-
drivers/net/wireless/realtek/rtw88/fw.c | 7 +-
drivers/net/wireless/realtek/rtw88/reg.h | 1 +
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 ++----
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 +-
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +
drivers/net/wireless/rsi/rsi_main.h | 15 +-
drivers/net/xen-netfront.c | 8 +
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvdimm/btt.c | 1 -
drivers/nvme/host/multipath.c | 9 +-
drivers/nvme/host/rdma.c | 2 +
drivers/nvme/target/configfs.c | 2 +
drivers/nvme/target/rdma.c | 24 ++
drivers/nvme/target/tcp.c | 21 +-
drivers/of/unittest.c | 16 +-
drivers/opp/of.c | 2 +-
drivers/pci/controller/cadence/pci-j721e.c | 2 +-
drivers/pci/controller/cadence/pcie-cadence-plat.c | 2 +
drivers/pci/controller/dwc/pcie-uniphier.c | 26 +--
drivers/pci/controller/pci-aardvark.c | 251 ++++++++++++++++++---
drivers/pci/pci-bridge-emul.c | 13 ++
drivers/pci/pci.c | 8 +
drivers/pci/quirks.c | 1 +
drivers/phy/microchip/sparx5_serdes.c | 4 +-
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 +-
drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c | 2 +-
drivers/phy/ti/phy-gmii-sel.c | 2 +
drivers/pinctrl/core.c | 2 +
drivers/pinctrl/pinctrl-amd.c | 19 +-
drivers/pinctrl/pinctrl-amd.h | 1 +
drivers/pinctrl/pinctrl-equilibrium.c | 7 +-
drivers/pinctrl/renesas/core.c | 2 +-
.../platform/surface/surface_aggregator_registry.c | 54 +++++
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 +-
drivers/power/reset/at91-reset.c | 4 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17040_battery.c | 2 +
drivers/power/supply/max17042_battery.c | 12 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/ptp/ptp_kvm_x86.c | 4 +-
drivers/regulator/s5m8767.c | 21 +-
drivers/remoteproc/imx_rproc.c | 41 ++--
drivers/remoteproc/remoteproc_core.c | 8 +-
drivers/remoteproc/remoteproc_coredump.c | 2 +-
drivers/remoteproc/remoteproc_elf_loader.c | 4 +-
drivers/reset/reset-socfpga.c | 26 +++
drivers/rtc/rtc-ds1302.c | 7 +
drivers/rtc/rtc-ds1390.c | 7 +
drivers/rtc/rtc-mcp795.c | 7 +
drivers/rtc/rtc-pcf2123.c | 9 +
drivers/rtc/rtc-rv3032.c | 4 +-
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/s390/cio/device_ops.c | 12 +-
drivers/s390/crypto/ap_queue.c | 2 +
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/hosts.c | 1 +
drivers/scsi/lpfc/lpfc_els.c | 11 +-
drivers/scsi/lpfc/lpfc_hbadisc.c | 10 +-
drivers/scsi/lpfc/lpfc_nvme.c | 5 +-
drivers/scsi/lpfc/lpfc_scsi.c | 7 +
drivers/scsi/lpfc/lpfc_sli.c | 101 +++++++--
drivers/scsi/megaraid/megaraid_sas_fusion.c | 11 +-
drivers/scsi/pm8001/pm8001_hwi.c | 2 +-
drivers/scsi/pm8001/pm8001_sas.h | 3 +-
drivers/scsi/pm8001/pm80xx_hwi.c | 53 ++++-
drivers/scsi/qedf/qedf_main.c | 2 +
drivers/scsi/qla2xxx/qla_attr.c | 24 +-
drivers/scsi/qla2xxx/qla_gbl.h | 2 -
drivers/scsi/qla2xxx/qla_init.c | 4 +-
drivers/scsi/qla2xxx/qla_mr.c | 23 --
drivers/scsi/qla2xxx/qla_os.c | 37 +--
drivers/scsi/qla2xxx/qla_target.c | 14 +-
drivers/scsi/scsi_error.c | 25 ++
drivers/scsi/scsi_lib.c | 3 +-
drivers/scsi/ufs/ufshcd-pltfrm.c | 4 +-
drivers/soc/fsl/dpaa2-console.c | 1 +
drivers/soc/fsl/dpio/dpio-service.c | 2 +-
drivers/soc/fsl/dpio/qbman-portal.c | 9 +-
drivers/soc/qcom/apr.c | 2 +
drivers/soc/qcom/llcc-qcom.c | 2 +-
drivers/soc/qcom/rpmhpd.c | 20 +-
drivers/soc/qcom/socinfo.c | 4 +-
drivers/soc/samsung/Kconfig | 1 +
drivers/soc/tegra/pmc.c | 2 +-
drivers/soundwire/bus.c | 2 +-
drivers/soundwire/debugfs.c | 2 +-
drivers/spi/atmel-quadspi.c | 2 +-
drivers/spi/spi-altera-dfl.c | 2 +-
drivers/spi/spi-altera-platform.c | 2 +-
drivers/spi/spi-bcm-qspi.c | 8 +-
drivers/spi/spi-mtk-nor.c | 2 +-
drivers/spi/spi-pl022.c | 5 +-
drivers/spi/spi-rpc-if.c | 4 +-
drivers/spi/spi-stm32-qspi.c | 2 +-
drivers/spi/spi.c | 41 ++++
drivers/staging/ks7010/Kconfig | 3 +
drivers/staging/media/atomisp/i2c/atomisp-lm3554.c | 37 +--
drivers/staging/media/imx/imx-media-dev-common.c | 2 +
drivers/staging/media/ipu3/ipu3-v4l2.c | 7 +-
drivers/staging/media/rkvdec/rkvdec-h264.c | 5 +-
drivers/staging/media/rkvdec/rkvdec.c | 40 ++--
drivers/staging/most/dim2/Makefile | 2 +-
drivers/staging/most/dim2/dim2.c | 24 +-
drivers/staging/most/dim2/sysfs.c | 49 ----
drivers/staging/most/dim2/sysfs.h | 11 -
drivers/target/target_core_tmr.c | 17 +-
drivers/target/target_core_transport.c | 30 ++-
drivers/thermal/qcom/tsens.c | 29 ++-
drivers/thermal/thermal_core.c | 16 +-
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 21 +-
drivers/tty/serial/cpm_uart/cpm_uart_core.c | 2 +
drivers/tty/serial/imx.c | 4 +-
drivers/tty/serial/serial_core.c | 16 +-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/usb/chipidea/core.c | 23 +-
drivers/usb/dwc2/drd.c | 24 +-
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-pci.c | 16 ++
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/Kconfig | 2 +-
drivers/usb/serial/keyspan.c | 15 +-
drivers/usb/typec/Kconfig | 4 +-
drivers/video/backlight/backlight.c | 6 -
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/video/fbdev/efifb.c | 21 +-
drivers/virtio/virtio_ring.c | 14 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/watchdog/omap_wdt.c | 6 +-
drivers/xen/balloon.c | 86 +++++--
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/reflink.c | 2 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 14 +-
fs/cifs/cifsglob.h | 3 +-
fs/cifs/connect.c | 21 +-
fs/cifs/file.c | 35 ++-
fs/cifs/fs_context.c | 10 +
fs/cifs/fs_context.h | 1 +
fs/crypto/fscrypt_private.h | 5 +-
fs/crypto/hkdf.c | 11 +-
fs/crypto/keysetup.c | 57 ++++-
fs/erofs/decompressor.c | 1 -
fs/erofs/zdata.c | 13 +-
fs/erofs/zpvec.h | 13 +-
fs/exfat/inode.c | 2 +-
fs/ext4/extents.c | 63 +++---
fs/ext4/super.c | 9 +-
fs/f2fs/compress.c | 1 +
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/f2fs/super.c | 2 +
fs/fuse/dev.c | 14 +-
fs/gfs2/glock.c | 24 +-
fs/io-wq.c | 38 ++--
fs/jfs/jfs_mount.c | 51 ++---
fs/nfs/dir.c | 9 +-
fs/nfs/direct.c | 2 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/inode.c | 13 +-
fs/nfs/nfs3xdr.c | 2 +-
fs/nfs/nfs4idmap.c | 2 +-
fs/nfs/nfs4proc.c | 15 +-
fs/nfs/pnfs.h | 2 +-
fs/nfs/pnfs_nfs.c | 6 +-
fs/nfs/proc.c | 2 +-
fs/nfs/write.c | 26 +--
fs/ocfs2/file.c | 8 +-
fs/orangefs/dcache.c | 4 +-
fs/overlayfs/file.c | 16 +-
fs/proc/stat.c | 4 +-
fs/proc/uptime.c | 14 +-
fs/quota/quota_tree.c | 15 ++
fs/tracefs/inode.c | 3 +-
include/drm/ttm/ttm_bo_api.h | 3 +-
include/linux/blkdev.h | 2 -
include/linux/cc_platform.h | 88 ++++++++
include/linux/cgroup-defs.h | 107 +++------
include/linux/cgroup.h | 22 +-
include/linux/console.h | 2 +
include/linux/dsa/ocelot.h | 38 ++++
include/linux/ethtool_netlink.h | 3 +
include/linux/filter.h | 1 +
include/linux/fortify-string.h | 5 +-
include/linux/kernel_stat.h | 1 +
include/linux/libata.h | 2 +-
include/linux/nfs_fs.h | 1 +
include/linux/posix-timers.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched.h | 1 +
include/linux/sched/task.h | 3 +-
include/linux/sched/task_stack.h | 4 +
include/linux/seq_file.h | 2 +-
include/linux/skmsg.h | 18 +-
include/linux/surface_aggregator/controller.h | 4 +-
include/linux/tpm.h | 1 +
include/media/videobuf2-core.h | 37 +--
include/memory/renesas-rpc-if.h | 1 +
include/net/inet_connection_sock.h | 2 +-
include/net/llc.h | 4 +-
include/net/neighbour.h | 12 +-
include/net/sch_generic.h | 4 +
include/net/sctp/sctp.h | 7 +-
include/net/sock.h | 2 +-
include/net/strparser.h | 20 +-
include/net/tcp.h | 17 +-
include/net/udp.h | 5 +-
include/scsi/scsi_cmnd.h | 2 +-
include/scsi/scsi_host.h | 1 +
include/soc/mscc/ocelot.h | 24 --
include/sound/soc-topology.h | 3 +-
include/uapi/linux/ethtool_netlink.h | 4 +-
include/uapi/linux/pci_regs.h | 6 +
kernel/bpf/core.c | 4 +-
kernel/bpf/trampoline.c | 6 +-
kernel/bpf/verifier.c | 4 +-
kernel/cgroup/cgroup.c | 94 ++++----
kernel/cgroup/rstat.c | 2 -
kernel/fork.c | 3 +-
kernel/kprobes.c | 3 +-
kernel/locking/lockdep.c | 4 +-
kernel/locking/rwsem.c | 53 +++--
kernel/power/energy_model.c | 23 +-
kernel/power/swap.c | 7 +-
kernel/rcu/rcutorture.c | 48 +++-
kernel/rcu/tasks.h | 3 +-
kernel/rcu/tree_exp.h | 2 +-
kernel/rcu/tree_plugin.h | 8 +-
kernel/sched/core.c | 62 +++--
kernel/scs.c | 1 +
kernel/signal.c | 18 +-
kernel/time/posix-cpu-timers.c | 19 +-
kernel/trace/ftrace.c | 23 +-
kernel/trace/ring_buffer.c | 5 +
kernel/trace/trace.c | 73 +++---
kernel/trace/trace.h | 3 +
kernel/trace/trace_dynevent.c | 2 +-
kernel/trace/trace_event_perf.c | 6 +-
kernel/trace/trace_events.c | 42 ++--
kernel/trace/trace_events_synth.c | 4 +-
kernel/trace/trace_functions_graph.c | 2 +-
kernel/trace/trace_hwlat.c | 6 +-
kernel/trace/trace_kprobe.c | 8 +-
kernel/trace/trace_osnoise.c | 14 +-
kernel/trace/trace_printk.c | 2 +-
kernel/trace/trace_recursion_record.c | 4 +-
kernel/trace/trace_stack.c | 6 +-
kernel/trace/trace_stat.c | 6 +-
kernel/trace/trace_uprobe.c | 4 +-
kernel/trace/tracing_map.c | 40 ++--
kernel/workqueue.c | 15 +-
lib/decompress_unxz.c | 2 +-
lib/dynamic_debug.c | 12 +
lib/iov_iter.c | 5 +-
lib/xz/xz_dec_lzma2.c | 21 +-
lib/xz/xz_dec_stream.c | 6 +-
mm/filemap.c | 1 -
mm/memcontrol.c | 27 +--
mm/oom_kill.c | 23 +-
mm/zsmalloc.c | 7 +-
net/8021q/vlan.c | 3 -
net/8021q/vlan_dev.c | 3 +
net/9p/client.c | 2 +
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/sco.c | 33 +--
net/bridge/br_private.h | 2 +
net/can/j1939/main.c | 7 +
net/can/j1939/transport.c | 6 +
net/core/dev.c | 5 +-
net/core/filter.c | 58 ++++-
net/core/neighbour.c | 48 ++--
net/core/net-sysfs.c | 55 +++++
net/core/net_namespace.c | 4 +
net/core/netclassid_cgroup.c | 7 +-
net/core/netprio_cgroup.c | 10 +-
net/core/skmsg.c | 43 +++-
net/core/stream.c | 3 -
net/core/sysctl_net_core.c | 2 +-
net/dccp/dccp.h | 2 +-
net/dccp/proto.c | 14 +-
net/dsa/Kconfig | 2 -
net/dsa/switch.c | 4 +-
net/dsa/tag_ocelot.c | 4 +-
net/dsa/tag_ocelot_8021q.c | 1 +
net/ethtool/pause.c | 3 +-
net/ipv4/inet_connection_sock.c | 4 +-
net/ipv4/inet_hashtables.c | 2 +-
net/ipv4/proc.c | 2 +-
net/ipv4/tcp.c | 40 +++-
net/ipv4/tcp_bpf.c | 48 +++-
net/ipv6/addrconf.c | 3 +
net/ipv6/udp.c | 2 +-
net/netfilter/nf_conntrack_proto_udp.c | 7 +-
net/netfilter/nfnetlink_queue.c | 2 +-
net/netfilter/nft_dynset.c | 11 +-
net/rxrpc/rtt.c | 2 +-
net/sched/sch_generic.c | 9 +
net/sched/sch_mq.c | 24 ++
net/sched/sch_mqprio.c | 23 ++
net/sched/sch_taprio.c | 27 ++-
net/sctp/output.c | 13 +-
net/sctp/transport.c | 11 +-
net/smc/af_smc.c | 20 +-
net/smc/smc_llc.c | 2 +-
net/strparser/strparser.c | 10 +-
net/sunrpc/addr.c | 40 ++--
net/sunrpc/xprt.c | 28 +--
net/vmw_vsock/af_vsock.c | 2 +
net/wireless/core.c | 10 +
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/integrity/ima/ima.h | 2 +-
security/integrity/ima/ima_appraise.c | 52 ++++-
security/selinux/ss/services.c | 162 +++++++------
security/smack/smackfs.c | 11 +-
sound/core/memalloc.c | 7 +-
sound/core/oss/mixer_oss.c | 44 +++-
sound/core/timer.c | 17 +-
sound/firewire/oxfw/oxfw-stream.c | 7 +-
sound/firewire/oxfw/oxfw.c | 8 +
sound/firewire/oxfw/oxfw.h | 5 +
sound/pci/hda/hda_intel.c | 52 ++---
sound/pci/hda/patch_realtek.c | 82 +++++++
sound/soc/codecs/cs42l42.c | 43 ++--
sound/soc/codecs/wcd9335.c | 2 +-
sound/soc/sh/rcar/core.c | 1 +
sound/soc/soc-core.c | 1 +
sound/soc/sof/topology.c | 9 +
sound/soc/tegra/tegra_asoc_machine.c | 60 ++++-
sound/soc/tegra/tegra_asoc_machine.h | 1 +
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/format.c | 1 +
sound/usb/line6/driver.c | 14 +-
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/arch/x86/lib/insn.c | 5 +-
tools/bpf/bpftool/prog.c | 16 +-
tools/include/asm-generic/unaligned.h | 23 ++
tools/lib/bpf/bpf.c | 4 +-
tools/lib/bpf/bpf_core_read.h | 2 +-
tools/lib/bpf/btf.c | 22 +-
tools/lib/bpf/libbpf.c | 6 +
tools/lib/bpf/skel_internal.h | 6 +-
tools/objtool/arch/x86/decode.c | 20 ++
tools/objtool/check.c | 159 +++++++------
tools/objtool/include/objtool/arch.h | 1 +
tools/perf/util/bpf-event.c | 4 +-
tools/perf/util/intel-pt-decoder/Build | 2 +
.../testing/selftests/bpf/prog_tests/perf_buffer.c | 4 +-
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 4 +-
tools/testing/selftests/bpf/prog_tests/test_ima.c | 3 +-
tools/testing/selftests/bpf/progs/strobemeta.h | 4 +-
tools/testing/selftests/bpf/test_progs.c | 4 +-
.../selftests/bpf/test_xdp_redirect_multi.sh | 62 ++---
.../testing/selftests/bpf/verifier/array_access.c | 2 +-
tools/testing/selftests/bpf/xdp_redirect_multi.c | 4 +-
tools/testing/selftests/core/close_range_test.c | 2 +-
tools/testing/selftests/kvm/lib/x86_64/svm.c | 14 +-
.../selftests/kvm/x86_64/mmio_warning_test.c | 2 +-
tools/testing/selftests/net/Makefile | 2 +-
tools/testing/selftests/net/fcnal-test.sh | 3 +
tools/testing/selftests/net/fib_nexthops.sh | 1 +
.../selftests/net/forwarding/bridge_igmp.sh | 12 +-
.../testing/selftests/net/forwarding/bridge_mld.sh | 12 +-
tools/testing/selftests/net/udpgso_bench_rx.c | 11 +-
tools/testing/selftests/sched/cs_prctl_test.c | 28 ++-
tools/testing/selftests/vm/split_huge_page_test.c | 2 +-
tools/testing/selftests/x86/iopl.c | 78 +++++--
tools/tracing/latency/latency-collector.c | 2 +-
956 files changed, 7997 insertions(+), 4408 deletions(-)
^ permalink raw reply [relevance 1%]
* [PATCH 5.10 000/578] 5.10.80-rc2 review
@ 2021-11-16 15:00 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-16 15:00 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.10.80 release.
There are 578 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 18 Nov 2021 14:24:22 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.80-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.10.80-rc2
Borislav Petkov <bp@suse.de>
x86/sev: Make the #VC exception stacks part of the default stacks storage
Tom Lendacky <thomas.lendacky@amd.com>
x86/sev: Add an x86 version of cc_platform_has()
Tom Lendacky <thomas.lendacky@amd.com>
arch/cc: Introduce a function to check for confidential computing features
Dan Carpenter <dan.carpenter@oracle.com>
ataflop: fix off by one in ataflop_probe()
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix also no-alu32 strobemeta selftest
Colin Ian King <colin.king@canonical.com>
mmc: moxart: Fix null pointer dereference on pointer host
Arnd Bergmann <arnd@arndb.de>
ath10k: fix invalid dma_addr_t token assignment
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Partial revert of commit 6f9f17287e78
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix PCIe Max Payload Size setting
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: Fix macros in sun8i_csc.h
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
Halil Pasic <pasic@linux.ibm.com>
s390/cio: make ccw_device_dma_* more robust
Harald Freudenberger <freude@linux.ibm.com>
s390/ap: Fix hanging ioctl caused by orphaned replies
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Jack Andersen <jackoalan@gmail.com>
mfd: dln2: Add cell for initializing DLN2 ADC
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/security: Add a helper to query stf_barrier type
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Validate branch ranges
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/lib: Add helper to check if offset is within conditional branch range
Vasily Averin <vvs@virtuozzo.com>
memcg: prohibit unconditional exceeding the limit of dying tasks
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Guo Ren <guoren@linux.alibaba.com>
irqchip/sifive-plic: Fixup EOI failed when masked
Michael Pratt <mpratt@google.com>
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
Dave Jones <davej@codemonkey.org.uk>
x86/mce: Add errata workaround for Skylake SKX37
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
Helge Deller <deller@gmx.de>
parisc: Fix backtrace to always include init funtion names
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Willem de Bruijn <willemb@google.com>
selftests/net: udpgso_bench_rx: fix port argument
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Dust Li <dust.li@linux.alibaba.com>
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Vladimir Oltean <vladimir.oltean@nxp.com>
net: stmmac: allow a tc-taprio base-time of zero
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: allow configure ETS bandwidth of all TCs
Yufeng Mo <moyufeng@huawei.com>
net: hns3: fix kernel crash when unload VF while it is being reset
Eric Dumazet <edumazet@google.com>
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Muchun Song <songmuchun@bytedance.com>
seq_file: fix passing wrong private data
Dan Carpenter <dan.carpenter@oracle.com>
gve: Fix off by one in gve_tx_timeout()
John Fastabend <john.fastabend@gmail.com>
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Remove unhash handler for BPF sockmap usage
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Ian Rogers <irogers@google.com>
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
mfd: core: Add missing of_node_put for loop iteration
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Heiner Kallweit <hkallweit1@gmail.com>
net: phy: fix duplex out of sync problem while changing settings
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
ataflop: remove ataflop_probe_lock mutex
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: provide a helper for cleanup up an atari disk
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: add registration bool before calling del_gendisk()
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: use the blk_cleanup_disk() helper
Chenyuan Mi <cymi20@fudan.edu.cn>
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Brett Creeley <brett.creeley@intel.com>
ice: Fix not stopping Tx queues for VFs
Sylwester Dziedziuch <sylwesterx.dziedziuch@intel.com>
ice: Fix replacing VF hardware MAC to existing MAC filter
Ziyang Xuan <william.xuanziyang@huawei.com>
net: vlan: fix a UAF in vlan_dev_real_dev()
Stafford Horne <shorne@gmail.com>
openrisc: fix SMP tlb flush NULL pointer dereference
Jakub Kicinski <kuba@kernel.org>
ethtool: fix ethtool msg len calculation for pause stats
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Relogin during fabric disturbance
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Changes to support FCP2 Target
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Eric W. Biederman <ebiederm@xmission.com>
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Robert-Ionut Alexa <robert-ionut.alexa@nxp.com>
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Alexey Gladkov <legion@kernel.org>
Fix user namespace leak
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix an Oops in pnfs_mark_request_commit()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix up commit deadlocks
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Dan Carpenter <dan.carpenter@oracle.com>
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
Zev Weiss <zev@bewilderbeest.net>
mtd: core: don't remove debugfs directory if device is in use
Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
YueHaibing <yuehaibing@huawei.com>
opp: Fix return in _opp_add_static_v2()
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix dentry verifier races
Kewei Xu <kewei.xu@mediatek.com>
i2c: mediatek: fixing the incorrect register offset
J. Bruce Fields <bfields@redhat.com>
nfsd: don't alloc under spinlock in rpc_parse_scope_id
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: check desc == NULL when using indirect with packed
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Use device_property API instead of of_property
Lucas Tanure <tanureal@opensource.cirrus.com>
ASoC: cs42l42: Disable regulators if probe fails
Bixuan Cui <cuibixuan@linux.alibaba.com>
powerpc/44x/fsp2: add missing of_node_put
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: clarify error check and length calculations
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Sandeep Maheswaram <quic_c_sanm@quicinc.com>
phy: qcom-snps: Correct the FSEL_MASK
Dan Carpenter <dan.carpenter@oracle.com>
phy: ti: gmii-sel: check of_get_address() for failure
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Rahul Tanwar <rtanwar@maxlinear.com>
pinctrl: equilibrium: Fix function addition in multiple groups
Wan Jiabing <wanjiabing@vivo.com>
soc: qcom: apr: Add of_node_put() before return
Guru Das Srinagesh <quic_gurus@quicinc.com>
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: reset current session before setting the new one
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
Stefan Agner <stefan@agner.ch>
serial: imx: fix detach/attach of serial console
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
Can Guo <cang@codeaurora.org>
scsi: ufs: Refactor ufshcd_setup_clocks() to remove skip_ref_clk
Nuno Sá <nuno.sa@analog.com>
iio: adis: do not disabe IRQs in 'adis_init()'
Randy Dunlap <rdunlap@infradead.org>
usb: typec: STUSB160X should select REGMAP_I2C
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Make power_on actually enable the domain
Lee Jones <lee.jones@linaro.org>
soc: qcom: rpmhpd: Provide some missing struct member descriptions
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix SAI sub nodes register range
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
Geert Uytterhoeven <geert+renesas@glider.be>
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
Vegard Nossum <vegard.nossum@oracle.com>
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Nikita Yushchenko <nikita.yoush@cogentembedded.com>
staging: most: dim2: do not double-register the same device
Randy Dunlap <rdunlap@infradead.org>
usb: musb: select GENERIC_PHY instead of depending on it
Leon Romanovsky <leon@kernel.org>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Yang Yingliang <yangyingliang@huawei.com>
power: supply: max17040: fix null-ptr-deref in max17040_probe()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc: fix unbalanced node refcount in check_kvm_guest()
Michael Ellerman <mpe@ellerman.id.au>
powerpc: Fix is_kvm_guest() / kvm_para_available()
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc: Reintroduce is_kvm_guest() as a fast-path check
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc: Rename is_kvm_guest() to check_kvm_guest()
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc: Refactor is_kvm_guest() declaration to new header
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Clément Léger <clement.leger@bootlin.com>
clk: at91: check pmc node status before registering syscore ops
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Ranjani Sridharan <ranjani.sridharan@linux.intel.com>
ASoC: SOF: topology: do not power down primary core during topology removal
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Yang Yingliang <yangyingliang@huawei.com>
driver core: Fix possible memory leak in device_link_add()
Igor Pylypiv <ipylypiv@google.com>
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: debugfs: use controller id and link_id for debugfs
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Use position buffer for SKL+ again
Imre Deak <imre.deak@intel.com>
ALSA: hda: Fix hang during shutdown due to link reset
Imre Deak <imre.deak@intel.com>
ALSA: hda: Release controller display power during shutdown/reboot
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
Geert Uytterhoeven <geert+renesas@glider.be>
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Tony Lindgren <tony@atomide.com>
bus: ti-sysc: Fix timekeeping_suspended warning on resume
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Marijn Suijten <marijn.suijten@somainline.org>
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
Rafał Miłecki <rafal@milecki.pl>
ARM: dts: BCM5301X: Fix memory nodes names
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Alexandru Ardelean <aardelean@deviqon.com>
iio: st_sensors: disable regulators after device unregistration
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
iio: st_sensors: Call st_sensors_power_enable() from bus drivers
Frank Rowand <frank.rowand@sony.com>
of: unittest: fix EXPECT text for gpio hog errors
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
Dan Schatzberg <schatzberg.dan@gmail.com>
cgroup: Fix rootcg cpu.stat guest double counting
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: don't stop queue in xmit
Jakub Kicinski <kuba@kernel.org>
udp6: allow SO_MARK ctrl msg to affect routing
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix fd cleanup in sk_lookup test
Lorenz Bauer <lmb@cloudflare.com>
selftests: bpf: Convert sk_lookup ctx access tests to PROG_TEST_RUN
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix discarded frames due to wrong sequence number
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
spi: spi-rpc-if: Check return value of rpcif_sw_init()
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Ilya Leoshkevich <iii@linux.ibm.com>
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
Mark Brown <broonie@kernel.org>
tpm_tis_spi: Add missing SPI ID
Hao Wu <hao.wu@rubrik.com>
tpm: fix Atmel TPM crash caused by too frequent queries
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: more blk-mq refactoring fixes
Dan Carpenter <dan.carpenter@oracle.com>
ataflop: potential out of bounds in do_format()
Christoph Hellwig <hch@lst.de>
ataflop: use a separate gendisk for each media format
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid double free of sida page
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF header parsing checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix overflow in BTF sanity checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Allow loading empty BTFs
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF data layout checks and allow empty BTF
Quentin Monnet <quentin@isovalent.com>
bpftool: Avoid leaking the JSON writer prepared for program metadata
Jim Mattson <jmattson@google.com>
KVM: selftests: Fix nested SVM tests when built with clang
Ricardo Koller <ricarkol@google.com>
KVM: selftests: Add operand to vmsave/vmload/vmrun in svm.c
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Joerg Roedel <jroedel@suse.de>
x86/sev: Fix stack type check in vc_switch_off_ist()
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Tim Gardner <tim.gardner@canonical.com>
net: enetc: unmap DMA in enetc_send_cmd()
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix sta_rec_wtbl tag len
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix possible infinite loop release semaphore
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: fix breakage introduced at blk-mq refactoring
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Sean Young <sean@mess.org>
media: ir_toy: assignment to be16 should be of correct type
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: potential error pointer dereference in init()
Eric Dumazet <edumazet@google.com>
tcp: switch orphan_count to bare per-cpu counters
Zhang Qiao <zhangqiao22@huawei.com>
kernel/sched: Fix sched_fork() access an invalid sched_task_group
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix context restore
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
John Fraker <jfraker@google.com>
gve: Recover from queue stall due to missed IRQ
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_dynset: relax superfluous check on set updates
Peter Zijlstra <peterz@infradead.org>
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
Yazen Ghannam <yazen.ghannam@amd.com>
EDAC/amd64: Handle three rank interleaving mode
Vincent Donnefort <vincent.donnefort@arm.com>
PM: EM: Fix inefficient states detection
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Arnd Bergmann <arnd@arndb.de>
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
Punit Agrawal <punitagrawal@gmail.com>
kprobes: Do not use local variable when creating debugfs file
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: tm6000: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: radio-wl1273: Avoid card name truncation
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Tom Rix <trix@redhat.com>
media: TDA1997x: handle short reads of hdmi info frame.
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: S_CTRL output the right value
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Colin Ian King <colin.king@canonical.com>
media: cxd2880-spi: Fix a null pointer dereference on error handling path
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Sudarshan Rajagopalan <quic_sudaraja@quicinc.com>
arm64: mm: update max_pfn after memory hotplug
Matthew Auld <matthew.auld@intel.com>
drm/ttm: stop calling tt_swapin in vm_access
Fabio Estevam <festevam@denx.de>
ath10k: sdio: Add missing BH locking around napi_schdule()
Loic Poulain <loic.poulain@linaro.org>
ath10k: Fix missing frame timestamp for beacon/probe-resp
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
Pradeep Kumar Chitrapu <pradeepc@codeaurora.org>
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid race during regd updates
Dan Carpenter <dan.carpenter@oracle.com>
ath11k: fix some sleeping in atomic bugs
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Jiasheng Jiang <jiasheng@iscas.ac.cn>
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Michael Walle <michael@walle.cc>
crypto: caam - disable pkc for non-E SoCs
Dinghao Liu <dinghao.liu@zju.edu.cn>
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Ajay Singh <ajay.kathat@microchip.com>
wilc1000: fix possible memory leak in cfg_scan_result()
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
wcn36xx: Fix Antenna Diversity Switching
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Yajun Deng <yajun.deng@linux.dev>
net: net_namespace: Fix undefined member in key_remove_domain()
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
lockdep: Let lock_is_held_type() detect recursive read as read
liuyuntao <liuyuntao10@huawei.com>
virtio-gpu: fix possible memory allocation failure
Iago Toral Quiroga <itoral@igalia.com>
drm/v3d: fix wait for TMU write combiner flush
Peter Zijlstra <peterz@infradead.org>
objtool: Fix static_call list generation
Peter Zijlstra <peterz@infradead.org>
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
Josh Poimboeuf <jpoimboe@redhat.com>
objtool: Add xen_start_kernel() to noreturn list
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: fix burst length for DEU
Neeraj Upadhyay <neeraju@codeaurora.org>
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix strobemeta selftest regression
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: don't trigger WARN() when decompression fails
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Shuah Khan <skhan@linuxfoundation.org>
selftests/core: fix conflicting types compile error for close_range()
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Correct band/freq reporting on RX
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Josef Bacik <josef@toxicpanda.com>
btrfs: do not take the uuid_mutex in btrfs_rm_device
Sidong Yang <realwakka@gmail.com>
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
Stefan Schaeckeler <schaecsn@gmx.net>
ACPI: AC: Quirk GK45 to skip reading _PSR
Eric Dumazet <edumazet@google.com>
net: annotate data-race in neigh_output()
Florian Westphal <fw@strlen.de>
vrf: run conntrack only in context of lower/physdev for locally generated packets
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Fix glock_hash_walk bugs
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Cancel remote delete work asynchronously
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Jiri Olsa <jolsa@redhat.com>
selftests/bpf: Fix perf_buffer test on system with offline cpus
Shuah Khan <skhan@linuxfoundation.org>
selftests: kvm: fix mismatched fclose() after popen()
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Hannes Reinecke <hare@suse.de>
nvme: drop scan_lock and always kick requeue list when removing namespaces
Israel Rukshin <israelr@nvidia.com>
nvmet-tcp: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet-rdma: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet: fix use-after-free when a port is removed
Michael Tretter <m.tretter@pengutronix.de>
media: allegro: ignore interrupt if mailbox is not initialized
Jens Axboe <axboe@kernel.dk>
block: remove inaccurate requeue check
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7915: fix an off-by-one bound check
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Xiao Ni <xni@redhat.com>
md: update superblock after changing rdev flags in state_store
Jens Axboe <axboe@kernel.dk>
block: bump max plugged deferred size from 16 to 32
Tim Gardner <tim.gardner@canonical.com>
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
net: phy: micrel: make *-skew-ps check more lenient
Yifan Zhang <yifan1.zhang@amd.com>
drm/amdkfd: fix resume error when iommu disabled in Picasso
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Andreas Gruenbacher <agruenba@redhat.com>
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
Xin Xiong <xiongx18@fudan.edu.cn>
mmc: moxart: Fix reference count leaks in moxart_probe
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Antoine Tenart <atenart@kernel.org>
net-sysfs: try not to restart the syscall if it will fail eventually
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: imgu_fmt: Handle properly try
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Josh Don <joshdon@google.com>
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
Corey Minyard <cminyard@mvista.com>
ipmi: Disable some operations during a panic
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Hans de Goede <hdegoede@redhat.com>
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Zong-Zhe Yang <kevin_yang@realtek.com>
rtw88: fix RX clock gate setting while fifo dump
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Martin Kepplinger <martink@posteo.de>
media: imx: set a media_device bus_info string
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set unique vdev name based in type
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Dmitriy Ulitin <ulitin@ispras.ru>
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Evgeny Novikov <novikov@ispras.ru>
media: atomisp: Fix error handling in probe
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Alagu Sankar <alagusankar@silex-india.com>
ath10k: high latency fixes for beacon buffer
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
Wen Gong <wgong@codeaurora.org>
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid reg rules update during firmware recovery
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix MMIO access page fault
Eric Biggers <ebiggers@google.com>
fscrypt: allow 256-bit master keys with AES-256-XTS
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Seevalamuthu Mariappan <seevalam@codeaurora.org>
ath11k: Align bss_chan_info structure with firmware
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Paul E. McKenney <paulmck@kernel.org>
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Scott Wood <swood@redhat.com>
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
Simon Ser <contact@emersion.fr>
drm/panel-orientation-quirks: add Valve Steam Deck
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
Charan Teja Reddy <charante@codeaurora.org>
dma-buf: WARN on dmabuf release with pending attachments
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Clear status bits in interrupt handler
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Johan Hovold <johan@kernel.org>
most: fix control-message timeouts
Johan Hovold <johan@kernel.org>
serial: 8250: fix racy uartclk update
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Nuno Sá <nuno.sa@analog.com>
iio: ad5770r: make devicetree property reading consistent
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Tao Zhang <quic_taozha@quicinc.com>
coresight: cti: Correct the parameter for pm_runtime_put
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix configuring Reference clock
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix reporting Data Link Layer Link Active
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix checking for link up via LTSSM state
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Li Chen <lchen@ambarella.com>
PCI: cadence: Add cdns_plat_pcie_probe() missing return
Marek Behún <kabel@kernel.org>
PCI: pci-bridge-emul: Fix emulation of W1C bits
yangerkun <yangerkun@huawei.com>
ovl: fix use after free in struct ovl_aio_req
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Arnd Bergmann <arnd@arndb.de>
ifb: fix building without CONFIG_NET_CLS_ACT
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Steven Rostedt (VMware) <rostedt@goodmis.org>
ring-buffer: Protect ring_buffer_reset() from reentrancy
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Mark Rutland <mark.rutland@arm.com>
KVM: arm64: Extract ESR_ELx.EC only
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: use the combined functions to protect critical zone
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Wolfram Sang <wsa+renesas@sang-engineering.com>
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Try waking the firmware until we get an interrupt
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix (QoS) null data frame bitrate/modulation
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix tx_status mechanism
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Lukas Wunner <lukas@wunner.de>
ifb: Depend on netfilter alternatively to tc
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Ondrej Mosnacek <omosnace@redhat.com>
selinux: fix race condition when computing ocontext SIDs
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Sean Christopherson <seanjc@google.com>
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
Christoph Hellwig <hch@lst.de>
rds: stop using dmapool
Wen Gu <guwen@linux.alibaba.com>
net/smc: Correct spelling mistake to TCPF_SYN_RECV
Tony Lu <tonylu@linux.alibaba.com>
net/smc: Fix smc_link->llc_testlink_time overflow
Yu Xiao <yu.xiao@corigine.com>
nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
Dongli Zhang <dongli.zhang@oracle.com>
vmxnet3: do not stop tx queues after netif_device_detach()
Janghyub Seo <jhyub06@gmail.com>
r8169: Add device 10ec:8162 to driver r8169
Amit Engel <amit.engel@dell.com>
nvmet-tcp: fix header digest verification
Naohiro Aota <naohiro.aota@wdc.com>
block: schedule queue restart after BLK_STS_ZONE_RESOURCE
Mario <awxkrnl@gmail.com>
drm: panel-orientation-quirks: Add quirk for GPD Win3
Walter Stoll <walter.stoll@duagon.com>
watchdog: Fix OMAP watchdog early handling
Cyril Strejc <cyril.strejc@skoda.cz>
net: multicast: calculate csum of looped-back and forwarded packets
Thomas Perrot <thomas.perrot@bootlin.com>
spi: spl022: fix Microwire full duplex mode
Maurizio Lombardi <mlombard@redhat.com>
nvmet-tcp: fix a memory leak when releasing a queue
Dongli Zhang <dongli.zhang@oracle.com>
xen/netfront: stop tx queues during live migration
Asmaa Mnebhi <asmaa@nvidia.com>
gpio: mlxbf2.c: Add check for bgpio_init failure
Lorenz Bauer <lmb@cloudflare.com>
bpf: Prevent increasing bpf_jit_limit above max
Lorenz Bauer <lmb@cloudflare.com>
bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
Florian Westphal <fw@strlen.de>
fcnal-test: kill hanging ping/nettest binaries on cleanup
Bryant Mairs <bryant@mai.rs>
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Randy Dunlap <rdunlap@infradead.org>
mmc: winbond: don't build on M68K
Paweł Anikiel <pan@semihalf.com>
reset: socfpga: add empty driver allowing consumers to probe
Bastien Roucariès <rouca@debian.org>
ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
Arnd Bergmann <arnd@arndb.de>
hyperv/vmbus: include linux/bitops.h
Erik Ekman <erik@kryo.se>
sfc: Don't use netif_info before net_device setup
Erik Ekman <erik@kryo.se>
sfc: Export fibre-specific supported link modes
Zheyu Ma <zheyuma97@gmail.com>
cavium: Fix return values of the probe function
Zheyu Ma <zheyuma97@gmail.com>
mISDN: Fix return values of the probe function
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: qla2xxx: Fix unmap of already freed sgl
Zheyu Ma <zheyuma97@gmail.com>
scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
Zheyu Ma <zheyuma97@gmail.com>
cavium: Return negative value when pci_alloc_irq_vectors() fails
Davide Baldo <davide@baldo.me>
ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
Yang Yingliang <yangyingliang@huawei.com>
ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix page stealing
yangerkun <yangerkun@huawei.com>
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
yangerkun <yangerkun@huawei.com>
ext4: ensure enough credits in ext4_ext_shift_path_extents
Shaoying Xu <shaoyi@amazon.com>
ext4: fix lazy initialization next schedule time computation in more granular unit
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Free card instance properly at probe errors
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Jason Ormes <skryking@gmail.com>
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Kai-Heng Feng <kai.heng.feng@canonical.com>
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add quirk for ASUS UX550VE
Jaroslav Kysela <perex@perex.cz>
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jeremy Soller <jeremy@system76.com>
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
Johnathon Clark <john.clark@cantab.net>
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: Fix check_ext_ctrls
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Support dynamic resolution changes
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Do not override sizeimage for output format
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Helge Deller <deller@gmx.de>
parisc: Fix set_fixmap() on PA1.x CPUs
Sungjong Seo <sj1557.seo@samsung.com>
exfat: fix incorrect loading of i_blocks for large files
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Derong Liu <derong.liu@mediatek.com>
mmc: mtk-sd: Add wait dma stop done flow
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix use after free in eh_abort path
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Johan Hovold <johan@kernel.org>
Input: iforce - fix control-message timeout
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for getsecid
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for selinux checks
Todd Kjos <tkjos@google.com>
binder: use euid from cred instead of using task
Nehal Bakulchandra Shah <Nehal-Bakulchandra.shah@amd.com>
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 +
.../bindings/regulator/samsung,s5m8767.txt | 23 +-
Documentation/filesystems/fscrypt.rst | 10 +-
Makefile | 4 +-
arch/Kconfig | 3 +
arch/arm/Makefile | 22 +-
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/bcm4708-netgear-r6250.dts | 2 +-
arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts | 2 +-
arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts | 2 +-
arch/arm/boot/dts/bcm4709-linksys-ea9200.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r7000.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r8000.dts | 2 +-
arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts | 2 +-
arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts | 2 +-
arch/arm/boot/dts/bcm53016-meraki-mr32.dts | 2 +-
arch/arm/boot/dts/bcm94708.dts | 2 +-
arch/arm/boot/dts/bcm94709.dts | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/qcom-msm8974.dtsi | 4 +-
arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 8 +-
arch/arm/boot/dts/stm32mp151.dtsi | 16 +-
arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi | 2 +-
arch/arm/boot/dts/sun7i-a20-olinuxino-lime2.dts | 2 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mach-s3c/irq-s3c24xx.c | 22 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2 +-
.../boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi | 4 +-
.../boot/dts/amlogic/meson-g12b-odroid-n2.dtsi | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi | 4 +-
arch/arm64/boot/dts/qcom/msm8916.dtsi | 8 +-
arch/arm64/boot/dts/qcom/pm8916.dtsi | 1 -
.../arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 1 +
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
arch/arm64/boot/dts/ti/k3-j721e-main.dtsi | 16 +-
arch/arm64/include/asm/esr.h | 1 +
arch/arm64/include/asm/pgtable.h | 12 +-
arch/arm64/kvm/hyp/hyp-entry.S | 2 +-
arch/arm64/kvm/hyp/nvhe/host.S | 2 +-
arch/arm64/mm/mmu.c | 5 +
arch/arm64/net/bpf_jit_comp.c | 5 +
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/kernel/kprobes.c | 9 +-
arch/m68k/Kconfig.machine | 1 +
arch/mips/Kconfig | 1 +
arch/mips/include/asm/cmpxchg.h | 5 +-
arch/mips/include/asm/mips-cm.h | 12 +-
arch/mips/kernel/mips-cm.c | 21 +-
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 -
arch/mips/lantiq/xway/dma.c | 23 +-
arch/openrisc/kernel/dma.c | 4 +-
arch/openrisc/kernel/smp.c | 6 +-
arch/parisc/kernel/entry.S | 2 +-
arch/parisc/kernel/smp.c | 19 +-
arch/parisc/kernel/unwind.c | 21 +-
arch/parisc/kernel/vmlinux.lds.S | 3 +-
arch/parisc/mm/fixmap.c | 5 +-
arch/parisc/mm/init.c | 4 +-
arch/powerpc/include/asm/code-patching.h | 1 +
arch/powerpc/include/asm/firmware.h | 6 -
arch/powerpc/include/asm/kvm_guest.h | 25 ++
arch/powerpc/include/asm/kvm_para.h | 2 +-
arch/powerpc/include/asm/security_features.h | 5 +
arch/powerpc/kernel/firmware.c | 12 +-
arch/powerpc/kernel/security.c | 5 +
arch/powerpc/lib/code-patching.c | 7 +-
arch/powerpc/net/bpf_jit.h | 33 ++-
arch/powerpc/net/bpf_jit64.h | 8 +-
arch/powerpc/net/bpf_jit_comp64.c | 64 +++++-
arch/powerpc/platforms/44x/fsp2.c | 2 +
arch/powerpc/platforms/85xx/Makefile | 4 +-
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 7 +-
arch/powerpc/platforms/85xx/smp.c | 12 +-
arch/powerpc/platforms/powernv/opal-prd.c | 12 +-
arch/powerpc/platforms/pseries/smp.c | 3 +
arch/s390/kvm/priv.c | 2 +
arch/s390/kvm/pv.c | 21 +-
arch/s390/mm/gmap.c | 5 +-
arch/sh/kernel/cpu/fpu.c | 10 +-
arch/x86/Kconfig | 1 +
arch/x86/events/intel/uncore_snbep.c | 6 +-
arch/x86/hyperv/hv_init.c | 5 +-
arch/x86/include/asm/cpu_entry_area.h | 8 +-
arch/x86/include/asm/mem_encrypt.h | 1 +
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/kernel/Makefile | 6 +
arch/x86/kernel/cc_platform.c | 69 ++++++
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 +++-
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/cpu/hygon.c | 2 +
arch/x86/kernel/cpu/mce/intel.c | 5 +-
arch/x86/kernel/irq.c | 4 +-
arch/x86/kernel/sev-es.c | 32 ---
arch/x86/kernel/traps.c | 2 +-
arch/x86/kvm/vmx/vmx.c | 15 +-
arch/x86/mm/cpu_entry_area.c | 7 +
arch/x86/mm/mem_encrypt.c | 1 +
arch/x86/mm/mem_encrypt_identity.c | 9 +
block/blk-mq.c | 18 +-
block/blk.h | 6 +
crypto/Kconfig | 2 +-
crypto/pcrypt.c | 12 +-
drivers/acpi/ac.c | 19 ++
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +-
drivers/acpi/acpica/hwxfsleep.c | 7 +
drivers/acpi/battery.c | 2 +-
drivers/acpi/pmic/intel_pmic.c | 51 +++--
drivers/android/binder.c | 22 +-
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 +
drivers/auxdisplay/ht16k33.c | 66 +++---
drivers/auxdisplay/img-ascii-lcd.c | 10 +
drivers/base/core.c | 4 +-
drivers/base/power/main.c | 9 +-
drivers/block/ataflop.c | 242 +++++++++++++-------
drivers/block/zram/zram_drv.c | 2 +-
drivers/bluetooth/btmtkuart.c | 13 +-
drivers/bus/ti-sysc.c | 65 +++++-
drivers/char/hw_random/mtk-rng.c | 9 +-
drivers/char/ipmi/ipmi_msghandler.c | 10 +-
drivers/char/ipmi/ipmi_watchdog.c | 17 +-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/char/tpm/tpm_tis_core.c | 26 ++-
drivers/char/tpm/tpm_tis_core.h | 4 +
drivers/char/tpm/tpm_tis_spi_main.c | 1 +
drivers/clk/at91/clk-sam9x60-pll.c | 4 +-
drivers/clk/at91/pmc.c | 5 +
drivers/clk/mvebu/ap-cpu-clk.c | 14 +-
drivers/clocksource/Kconfig | 1 +
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/caam/caampkc.c | 19 +-
drivers/crypto/caam/regs.h | 3 +
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 ++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +
drivers/crypto/s5p-sss.c | 2 +
drivers/dma-buf/dma-buf.c | 1 +
drivers/dma/at_xdmac.c | 2 +-
drivers/dma/dmaengine.h | 2 +-
drivers/edac/amd64_edac.c | 22 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci/psci_checker.c | 2 +-
drivers/firmware/qcom_scm.c | 2 +-
drivers/gpio/gpio-mlxbf2.c | 5 +
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 8 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 17 +-
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 1 +
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 16 +-
drivers/gpu/drm/drm_panel_orientation_quirks.c | 47 +++-
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4 +
drivers/gpu/drm/msm/msm_gem.c | 4 +-
drivers/gpu/drm/msm/msm_gpu.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_svm.c | 4 +
drivers/gpu/drm/sun4i/sun8i_csc.h | 4 +-
drivers/gpu/drm/ttm/ttm_bo_vm.c | 5 -
drivers/gpu/drm/v3d/v3d_gem.c | 4 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 8 +-
drivers/hid/hid-u2fzero.c | 10 +-
drivers/hv/hyperv_vmbus.h | 1 +
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +-
drivers/hwtracing/coresight/coresight-cti-core.c | 2 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/accel/st_accel_core.c | 21 +-
drivers/iio/accel/st_accel_i2c.c | 17 +-
drivers/iio/accel/st_accel_spi.c | 17 +-
drivers/iio/dac/ad5446.c | 9 +-
drivers/iio/dac/ad5770r.c | 2 +-
drivers/iio/gyro/st_gyro_core.c | 15 +-
drivers/iio/gyro/st_gyro_i2c.c | 17 +-
drivers/iio/gyro/st_gyro_spi.c | 17 +-
drivers/iio/imu/adis.c | 4 +-
drivers/iio/magnetometer/st_magn_core.c | 15 +-
drivers/iio/magnetometer/st_magn_i2c.c | 14 +-
drivers/iio/magnetometer/st_magn_spi.c | 14 +-
drivers/iio/pressure/st_pressure_core.c | 15 +-
drivers/iio/pressure/st_pressure_i2c.c | 17 +-
drivers/iio/pressure/st_pressure_spi.c | 17 +-
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 +-
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/joystick/iforce/iforce-usb.c | 2 +-
drivers/input/mouse/elantech.c | 13 ++
drivers/input/serio/i8042-x86ia64io.h | 14 ++
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-sifive-plic.c | 8 +-
drivers/isdn/hardware/mISDN/hfcpci.c | 8 +-
drivers/md/md.c | 11 +-
drivers/media/dvb-frontends/mn88443x.c | 18 +-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++-
drivers/media/i2c/tda1997x.c | 8 +-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++-
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/platform/stm32/stm32-dcmi.c | 19 +-
drivers/media/radio/radio-wl1273.c | 2 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ir_toy.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/spi/cxd2880-spi.c | 2 +-
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/tm6000/tm6000-video.c | 3 +-
drivers/media/usb/uvc/uvc_driver.c | 7 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 +
drivers/media/v4l2-core/v4l2-ioctl.c | 67 ++++--
drivers/memory/fsl_ifc.c | 13 +-
drivers/memory/renesas-rpc-if.c | 113 +++++++---
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mfd/dln2.c | 18 ++
drivers/mfd/mfd-core.c | 2 +
drivers/mmc/host/Kconfig | 2 +-
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/moxart-mmc.c | 29 ++-
drivers/mmc/host/mtk-sd.c | 5 +
drivers/mmc/host/mxs-mmc.c | 10 +
drivers/mmc/host/sdhci-omap.c | 18 +-
drivers/most/most_usb.c | 5 +-
drivers/mtd/mtdcore.c | 4 +-
drivers/mtd/nand/raw/ams-delta.c | 12 +-
drivers/mtd/nand/raw/au1550nd.c | 12 +-
drivers/mtd/nand/raw/gpio.c | 12 +-
drivers/mtd/nand/raw/mpc5121_nfc.c | 12 +-
drivers/mtd/nand/raw/orion_nand.c | 12 +-
drivers/mtd/nand/raw/pasemi_nand.c | 12 +-
drivers/mtd/nand/raw/plat_nand.c | 12 +-
drivers/mtd/nand/raw/socrates_nand.c | 12 +-
drivers/mtd/nand/raw/xway_nand.c | 12 +-
drivers/mtd/spi-nor/controllers/hisi-sfc.c | 1 -
drivers/net/Kconfig | 2 +-
drivers/net/bonding/bond_sysfs_slave.c | 36 +--
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 2 +-
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 +
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +-
drivers/net/ethernet/cavium/thunder/nic_main.c | 2 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
.../chelsio/inline_crypto/chtls/chtls_cm.c | 2 +-
.../chelsio/inline_crypto/chtls/chtls_cm.h | 2 +-
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18 +-
drivers/net/ethernet/google/gve/gve.h | 4 +-
drivers/net/ethernet/google/gve/gve_adminq.h | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 48 +++-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 2 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 9 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 5 +
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 2 +
drivers/net/ethernet/ibm/ibmvnic.c | 5 +-
drivers/net/ethernet/intel/ice/ice_base.c | 2 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 20 +-
drivers/net/ethernet/netronome/nfp/bpf/main.c | 16 +-
drivers/net/ethernet/netronome/nfp/bpf/main.h | 2 +
drivers/net/ethernet/netronome/nfp/bpf/offload.c | 17 +-
drivers/net/ethernet/realtek/r8169_main.c | 1 +
drivers/net/ethernet/sfc/mcdi_port_common.c | 37 ++-
drivers/net/ethernet/sfc/ptp.c | 4 +-
drivers/net/ethernet/sfc/siena_sriov.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 2 -
drivers/net/ethernet/ti/davinci_emac.c | 16 +-
drivers/net/ifb.c | 2 +
drivers/net/phy/micrel.c | 9 +-
drivers/net/phy/phy.c | 7 +-
drivers/net/phy/phylink.c | 2 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 1 -
drivers/net/vrf.c | 28 ++-
drivers/net/wireless/ath/ath10k/mac.c | 45 +++-
drivers/net/wireless/ath/ath10k/sdio.c | 5 +-
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.c | 4 +
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath11k/dbring.c | 16 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 13 +-
drivers/net/wireless/ath/ath11k/mac.c | 2 +-
drivers/net/wireless/ath/ath11k/qmi.c | 4 +-
drivers/net/wireless/ath/ath11k/reg.c | 11 +-
drivers/net/wireless/ath/ath11k/reg.h | 2 +-
drivers/net/wireless/ath/ath11k/wmi.c | 40 ++--
drivers/net/wireless/ath/ath11k/wmi.h | 3 +-
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +-
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 ++--
drivers/net/wireless/ath/wcn36xx/main.c | 8 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 44 +++-
drivers/net/wireless/ath/wcn36xx/txrx.c | 64 +++---
drivers/net/wireless/ath/wcn36xx/txrx.h | 3 +-
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10 +
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +--
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 ++-
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 15 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 8 +-
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +-
drivers/net/wireless/realtek/rtw88/fw.c | 7 +-
drivers/net/wireless/realtek/rtw88/reg.h | 1 +
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 ++----
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 +-
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +
drivers/net/wireless/rsi/rsi_main.h | 15 +-
drivers/net/xen-netfront.c | 8 +
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvme/host/multipath.c | 9 +-
drivers/nvme/host/rdma.c | 2 +
drivers/nvme/target/configfs.c | 2 +
drivers/nvme/target/rdma.c | 24 ++
drivers/nvme/target/tcp.c | 21 +-
drivers/of/unittest.c | 16 +-
drivers/opp/of.c | 2 +-
drivers/pci/controller/cadence/pcie-cadence-plat.c | 2 +
drivers/pci/controller/dwc/pcie-uniphier.c | 26 +--
drivers/pci/controller/pci-aardvark.c | 251 ++++++++++++++++++---
drivers/pci/pci-bridge-emul.c | 13 ++
drivers/pci/quirks.c | 1 +
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 +-
drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c | 2 +-
drivers/phy/ti/phy-gmii-sel.c | 2 +
drivers/pinctrl/core.c | 2 +
drivers/pinctrl/pinctrl-equilibrium.c | 7 +-
drivers/pinctrl/renesas/core.c | 2 +-
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17040_battery.c | 2 +
drivers/power/supply/max17042_battery.c | 12 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 +-
drivers/remoteproc/remoteproc_core.c | 8 +-
drivers/reset/reset-socfpga.c | 26 +++
drivers/rtc/rtc-rv3032.c | 4 +-
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/s390/cio/device_ops.c | 12 +-
drivers/s390/crypto/ap_queue.c | 2 +
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/pm8001/pm8001_hwi.c | 2 +-
drivers/scsi/qla2xxx/qla_attr.c | 24 +-
drivers/scsi/qla2xxx/qla_dbg.c | 3 +-
drivers/scsi/qla2xxx/qla_gbl.h | 2 -
drivers/scsi/qla2xxx/qla_init.c | 54 ++++-
drivers/scsi/qla2xxx/qla_mr.c | 23 --
drivers/scsi/qla2xxx/qla_os.c | 47 ++--
drivers/scsi/qla2xxx/qla_target.c | 14 +-
drivers/scsi/scsi_lib.c | 2 -
drivers/scsi/ufs/ufshcd-pltfrm.c | 6 +-
drivers/scsi/ufs/ufshcd.c | 29 +--
drivers/scsi/ufs/ufshcd.h | 3 +
drivers/soc/fsl/dpaa2-console.c | 1 +
drivers/soc/fsl/dpio/dpio-service.c | 2 +-
drivers/soc/fsl/dpio/qbman-portal.c | 9 +-
drivers/soc/qcom/apr.c | 2 +
drivers/soc/qcom/rpmhpd.c | 21 +-
drivers/soc/tegra/pmc.c | 2 +-
drivers/soundwire/debugfs.c | 2 +-
drivers/spi/spi-bcm-qspi.c | 5 +-
drivers/spi/spi-pl022.c | 5 +-
drivers/spi/spi-rpc-if.c | 4 +-
drivers/staging/ks7010/Kconfig | 3 +
drivers/staging/media/allegro-dvt/allegro-core.c | 9 +
drivers/staging/media/atomisp/i2c/atomisp-lm3554.c | 37 +--
drivers/staging/media/imx/imx-media-dev-common.c | 2 +
drivers/staging/media/ipu3/ipu3-v4l2.c | 7 +-
drivers/staging/media/rkvdec/rkvdec-h264.c | 5 +-
drivers/staging/media/rkvdec/rkvdec.c | 40 ++--
drivers/staging/most/dim2/Makefile | 2 +-
drivers/staging/most/dim2/dim2.c | 24 +-
drivers/staging/most/dim2/sysfs.c | 49 ----
drivers/staging/most/dim2/sysfs.h | 11 -
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 21 +-
drivers/tty/serial/imx.c | 4 +-
drivers/tty/serial/serial_core.c | 16 +-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/usb/chipidea/core.c | 23 +-
drivers/usb/dwc2/drd.c | 24 +-
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-pci.c | 16 ++
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/Kconfig | 2 +-
drivers/usb/serial/keyspan.c | 15 +-
drivers/usb/typec/Kconfig | 4 +-
drivers/video/backlight/backlight.c | 6 -
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/virtio/virtio_ring.c | 14 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/watchdog/omap_wdt.c | 6 +-
drivers/xen/balloon.c | 86 +++++--
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/reflink.c | 2 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 14 +-
fs/crypto/fscrypt_private.h | 5 +-
fs/crypto/hkdf.c | 11 +-
fs/crypto/keysetup.c | 57 ++++-
fs/erofs/decompressor.c | 1 -
fs/exfat/inode.c | 2 +-
fs/ext4/extents.c | 63 +++---
fs/ext4/super.c | 9 +-
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/fuse/dev.c | 14 +-
fs/gfs2/glock.c | 24 +-
fs/jfs/jfs_mount.c | 51 ++---
fs/nfs/dir.c | 7 +-
fs/nfs/direct.c | 2 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/nfs4idmap.c | 2 +-
fs/nfs/nfs4proc.c | 15 +-
fs/nfs/pnfs.h | 2 +-
fs/nfs/pnfs_nfs.c | 6 +-
fs/nfs/write.c | 26 +--
fs/ocfs2/file.c | 8 +-
fs/orangefs/dcache.c | 4 +-
fs/overlayfs/file.c | 16 +-
fs/proc/stat.c | 4 +-
fs/proc/uptime.c | 14 +-
fs/quota/quota_tree.c | 15 ++
fs/tracefs/inode.c | 3 +-
include/linux/blkdev.h | 2 -
include/linux/cc_platform.h | 88 ++++++++
include/linux/console.h | 2 +
include/linux/ethtool_netlink.h | 3 +
include/linux/filter.h | 1 +
include/linux/kernel_stat.h | 1 +
include/linux/libata.h | 2 +-
include/linux/lsm_hook_defs.h | 14 +-
include/linux/lsm_hooks.h | 14 +-
include/linux/nfs_fs.h | 1 +
include/linux/posix-timers.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched/task.h | 3 +-
include/linux/sched/task_stack.h | 4 +
include/linux/security.h | 33 +--
include/linux/seq_file.h | 2 +-
include/linux/tpm.h | 1 +
include/memory/renesas-rpc-if.h | 1 +
include/net/inet_connection_sock.h | 2 +-
include/net/llc.h | 4 +-
include/net/neighbour.h | 12 +-
include/net/sch_generic.h | 4 +
include/net/sock.h | 2 +-
include/net/strparser.h | 16 +-
include/net/tcp.h | 17 +-
include/net/udp.h | 5 +-
include/uapi/linux/ethtool_netlink.h | 4 +-
include/uapi/linux/pci_regs.h | 6 +
kernel/bpf/core.c | 4 +-
kernel/bpf/verifier.c | 4 +-
kernel/cgroup/cgroup.c | 31 ++-
kernel/cgroup/rstat.c | 2 -
kernel/fork.c | 3 +-
kernel/kprobes.c | 3 +-
kernel/locking/lockdep.c | 4 +-
kernel/power/energy_model.c | 23 +-
kernel/power/swap.c | 7 +-
kernel/rcu/rcutorture.c | 48 +++-
kernel/rcu/tasks.h | 3 +-
kernel/rcu/tree_exp.h | 2 +-
kernel/rcu/tree_plugin.h | 8 +-
kernel/sched/core.c | 43 ++--
kernel/signal.c | 18 +-
kernel/time/posix-cpu-timers.c | 19 +-
kernel/trace/ring_buffer.c | 5 +
kernel/trace/tracing_map.c | 40 ++--
kernel/workqueue.c | 15 +-
lib/decompress_unxz.c | 2 +-
lib/iov_iter.c | 5 +-
lib/xz/xz_dec_lzma2.c | 21 +-
lib/xz/xz_dec_stream.c | 6 +-
mm/memcontrol.c | 27 +--
mm/oom_kill.c | 23 +-
mm/zsmalloc.c | 7 +-
net/8021q/vlan.c | 3 -
net/8021q/vlan_dev.c | 3 +
net/9p/client.c | 2 +
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/sco.c | 33 +--
net/can/j1939/main.c | 7 +
net/can/j1939/transport.c | 6 +
net/core/dev.c | 5 +-
net/core/filter.c | 21 ++
net/core/neighbour.c | 48 ++--
net/core/net-sysfs.c | 55 +++++
net/core/net_namespace.c | 4 +
net/core/stream.c | 3 -
net/core/sysctl_net_core.c | 2 +-
net/dccp/dccp.h | 2 +-
net/dccp/proto.c | 14 +-
net/ethtool/pause.c | 3 +-
net/ipv4/inet_connection_sock.c | 4 +-
net/ipv4/inet_hashtables.c | 2 +-
net/ipv4/proc.c | 2 +-
net/ipv4/tcp.c | 40 +++-
net/ipv4/tcp_bpf.c | 1 -
net/ipv6/addrconf.c | 3 +
net/ipv6/udp.c | 2 +-
net/netfilter/nf_conntrack_proto_udp.c | 7 +-
net/netfilter/nfnetlink_queue.c | 2 +-
net/netfilter/nft_dynset.c | 11 +-
net/rds/ib.c | 10 -
net/rds/ib.h | 6 -
net/rds/ib_cm.c | 128 +++++++----
net/rds/ib_recv.c | 18 +-
net/rds/ib_send.c | 8 +
net/rxrpc/rtt.c | 2 +-
net/sched/sch_generic.c | 9 +
net/sched/sch_mq.c | 24 ++
net/sched/sch_mqprio.c | 23 ++
net/sched/sch_taprio.c | 27 ++-
net/smc/af_smc.c | 20 +-
net/smc/smc_llc.c | 2 +-
net/strparser/strparser.c | 10 +-
net/sunrpc/addr.c | 40 ++--
net/sunrpc/xprt.c | 28 +--
net/vmw_vsock/af_vsock.c | 2 +
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/security.c | 14 +-
security/selinux/hooks.c | 36 ++-
security/selinux/ss/services.c | 162 +++++++------
security/smack/smackfs.c | 11 +-
sound/core/oss/mixer_oss.c | 43 +++-
sound/core/timer.c | 17 +-
sound/pci/hda/hda_intel.c | 74 +++---
sound/pci/hda/patch_realtek.c | 82 +++++++
sound/soc/codecs/cs42l42.c | 88 ++++----
sound/soc/soc-core.c | 1 +
sound/soc/sof/topology.c | 9 +
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/format.c | 1 +
sound/usb/line6/driver.c | 14 +-
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/bpf/bpftool/prog.c | 16 +-
tools/lib/bpf/bpf_core_read.h | 2 +-
tools/lib/bpf/btf.c | 25 +-
tools/objtool/check.c | 19 +-
tools/perf/util/bpf-event.c | 4 +-
.../testing/selftests/bpf/prog_tests/perf_buffer.c | 4 +-
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 85 +++++--
tools/testing/selftests/bpf/progs/strobemeta.h | 4 +-
tools/testing/selftests/bpf/progs/test_sk_lookup.c | 62 +++--
tools/testing/selftests/bpf/test_progs.c | 4 +-
.../testing/selftests/bpf/verifier/array_access.c | 2 +-
tools/testing/selftests/core/close_range_test.c | 2 +-
tools/testing/selftests/kvm/lib/x86_64/svm.c | 22 +-
.../selftests/kvm/x86_64/mmio_warning_test.c | 2 +-
tools/testing/selftests/net/fcnal-test.sh | 3 +
tools/testing/selftests/net/udpgso_bench_rx.c | 11 +-
599 files changed, 4981 insertions(+), 2487 deletions(-)
^ permalink raw reply [relevance 1%]
* [PATCH 5.4 000/353] 5.4.160-rc2 review
@ 2021-11-16 15:00 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-16 15:00 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.4.160 release.
There are 353 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 18 Nov 2021 14:24:22 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.160-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.4.160-rc2
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix also no-alu32 strobemeta selftest
Arnd Bergmann <arnd@arndb.de>
ath10k: fix invalid dma_addr_t token assignment
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Partial revert of commit 6f9f17287e78
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Halil Pasic <pasic@linux.ibm.com>
s390/cio: make ccw_device_dma_* more robust
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/security: Add a helper to query stf_barrier type
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Validate branch ranges
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/lib: Add helper to check if offset is within conditional branch range
Miklos Szeredi <mszeredi@redhat.com>
ovl: fix deadlock in splice write
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Guo Ren <guoren@linux.alibaba.com>
irqchip/sifive-plic: Fixup EOI failed when masked
Helge Deller <deller@gmx.de>
parisc: Fix set_fixmap() on PA1.x CPUs
Helge Deller <deller@gmx.de>
parisc: Fix backtrace to always include init funtion names
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Willem de Bruijn <willemb@google.com>
selftests/net: udpgso_bench_rx: fix port argument
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Dust Li <dust.li@linux.alibaba.com>
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: allow configure ETS bandwidth of all TCs
Eric Dumazet <edumazet@google.com>
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
John Fastabend <john.fastabend@gmail.com>
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Ian Rogers <irogers@google.com>
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Ziyang Xuan <william.xuanziyang@huawei.com>
net: vlan: fix a UAF in vlan_dev_real_dev()
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Eric W. Biederman <ebiederm@xmission.com>
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Robert-Ionut Alexa <robert-ionut.alexa@nxp.com>
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Zev Weiss <zev@bewilderbeest.net>
mtd: core: don't remove debugfs directory if device is in use
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
YueHaibing <yuehaibing@huawei.com>
opp: Fix return in _opp_add_static_v2()
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Bixuan Cui <cuibixuan@linux.alibaba.com>
powerpc/44x/fsp2: add missing of_node_put
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: clarify error check and length calculations
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix SAI sub nodes register range
Vegard Nossum <vegard.nossum@oracle.com>
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Leon Romanovsky <leonro@nvidia.com>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Clément Léger <clement.leger@bootlin.com>
clk: at91: check pmc node status before registering syscore ops
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Marijn Suijten <marijn.suijten@somainline.org>
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: don't stop queue in xmit
Jakub Kicinski <kuba@kernel.org>
udp6: allow SO_MARK ctrl msg to affect routing
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF data layout checks and allow empty BTF
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: fix breakage introduced at blk-mq refactoring
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_dynset: relax superfluous check on set updates
Yazen Ghannam <yazen.ghannam@amd.com>
EDAC/amd64: Handle three rank interleaving mode
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Arnd Bergmann <arnd@arndb.de>
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
Punit Agrawal <punitagrawal@gmail.com>
kprobes: Do not use local variable when creating debugfs file
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: tm6000: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: radio-wl1273: Avoid card name truncation
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Tom Rix <trix@redhat.com>
media: TDA1997x: handle short reads of hdmi info frame.
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Colin Ian King <colin.king@canonical.com>
media: cxd2880-spi: Fix a null pointer dereference on error handling path
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Loic Poulain <loic.poulain@linaro.org>
ath10k: Fix missing frame timestamp for beacon/probe-resp
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Jiasheng Jiang <jiasheng@iscas.ac.cn>
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Michael Walle <michael@walle.cc>
crypto: caam - disable pkc for non-E SoCs
Dinghao Liu <dinghao.liu@zju.edu.cn>
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Ajay Singh <ajay.kathat@microchip.com>
wilc1000: fix possible memory leak in cfg_scan_result()
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Yajun Deng <yajun.deng@linux.dev>
net: net_namespace: Fix undefined member in key_remove_domain()
liuyuntao <liuyuntao10@huawei.com>
virtio-gpu: fix possible memory allocation failure
Iago Toral Quiroga <itoral@igalia.com>
drm/v3d: fix wait for TMU write combiner flush
Neeraj Upadhyay <neeraju@codeaurora.org>
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix strobemeta selftest regression
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Josef Bacik <josef@toxicpanda.com>
btrfs: do not take the uuid_mutex in btrfs_rm_device
Eric Dumazet <edumazet@google.com>
net: annotate data-race in neigh_output()
Florian Westphal <fw@strlen.de>
vrf: run conntrack only in context of lower/physdev for locally generated packets
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Shuah Khan <skhan@linuxfoundation.org>
selftests: kvm: fix mismatched fclose() after popen()
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Hannes Reinecke <hare@suse.de>
nvme: drop scan_lock and always kick requeue list when removing namespaces
Israel Rukshin <israelr@nvidia.com>
nvmet-tcp: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet: fix use-after-free when a port is removed
Jens Axboe <axboe@kernel.dk>
block: remove inaccurate requeue check
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Andreas Gruenbacher <agruenba@redhat.com>
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Antoine Tenart <atenart@kernel.org>
net-sysfs: try not to restart the syscall if it will fail eventually
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: imgu_fmt: Handle properly try
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Corey Minyard <cminyard@mvista.com>
ipmi: Disable some operations during a panic
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Hans de Goede <hdegoede@redhat.com>
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Martin Kepplinger <martin.kepplinger@puri.sm>
media: imx: set a media_device bus_info string
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set unique vdev name based in type
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Dmitriy Ulitin <ulitin@ispras.ru>
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Alagu Sankar <alagusankar@silex-india.com>
ath10k: high latency fixes for beacon buffer
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Simon Ser <contact@emersion.fr>
drm/panel-orientation-quirks: add Valve Steam Deck
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
Charan Teja Reddy <charante@codeaurora.org>
dma-buf: WARN on dmabuf release with pending attachments
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix reporting Data Link Layer Link Active
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix checking for link up via LTSSM state
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Marek Behún <kabel@kernel.org>
PCI: pci-bridge-emul: Fix emulation of W1C bits
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
Wen Gu <guwen@linux.alibaba.com>
net/smc: Correct spelling mistake to TCPF_SYN_RECV
Yu Xiao <yu.xiao@corigine.com>
nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
Dongli Zhang <dongli.zhang@oracle.com>
vmxnet3: do not stop tx queues after netif_device_detach()
Janghyub Seo <jhyub06@gmail.com>
r8169: Add device 10ec:8162 to driver r8169
Amit Engel <amit.engel@dell.com>
nvmet-tcp: fix header digest verification
Mario <awxkrnl@gmail.com>
drm: panel-orientation-quirks: Add quirk for GPD Win3
Walter Stoll <walter.stoll@duagon.com>
watchdog: Fix OMAP watchdog early handling
Cyril Strejc <cyril.strejc@skoda.cz>
net: multicast: calculate csum of looped-back and forwarded packets
Thomas Perrot <thomas.perrot@bootlin.com>
spi: spl022: fix Microwire full duplex mode
Maurizio Lombardi <mlombard@redhat.com>
nvmet-tcp: fix a memory leak when releasing a queue
Dongli Zhang <dongli.zhang@oracle.com>
xen/netfront: stop tx queues during live migration
Lorenz Bauer <lmb@cloudflare.com>
bpf: Prevent increasing bpf_jit_limit above max
Lorenz Bauer <lmb@cloudflare.com>
bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
Bryant Mairs <bryant@mai.rs>
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Randy Dunlap <rdunlap@infradead.org>
mmc: winbond: don't build on M68K
Paweł Anikiel <pan@semihalf.com>
reset: socfpga: add empty driver allowing consumers to probe
Bastien Roucariès <rouca@debian.org>
ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
Arnd Bergmann <arnd@arndb.de>
hyperv/vmbus: include linux/bitops.h
Erik Ekman <erik@kryo.se>
sfc: Don't use netif_info before net_device setup
Zheyu Ma <zheyuma97@gmail.com>
cavium: Fix return values of the probe function
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: qla2xxx: Fix unmap of already freed sgl
Zheyu Ma <zheyuma97@gmail.com>
scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
Zheyu Ma <zheyuma97@gmail.com>
cavium: Return negative value when pci_alloc_irq_vectors() fails
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix page stealing
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Kai-Heng Feng <kai.heng.feng@canonical.com>
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add quirk for ASUS UX550VE
Jaroslav Kysela <perex@perex.cz>
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: Fix check_ext_ctrls
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix use after free in eh_abort path
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Johan Hovold <johan@kernel.org>
Input: iforce - fix control-message timeout
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for getsecid
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for selinux checks
Todd Kjos <tkjos@google.com>
binder: use euid from cred instead of using task
Nehal Bakulchandra Shah <Nehal-Bakulchandra.shah@amd.com>
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 ++
.../bindings/regulator/samsung,s5m8767.txt | 23 ++--
Makefile | 4 +-
arch/arm/Makefile | 22 ++--
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/qcom-msm8974.dtsi | 4 +-
arch/arm/boot/dts/stm32mp157c.dtsi | 16 +--
arch/arm/boot/dts/sun7i-a20-olinuxino-lime2.dts | 2 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2 +-
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
arch/arm64/include/asm/pgtable.h | 12 +-
arch/arm64/net/bpf_jit_comp.c | 5 +
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/kernel/kprobes.c | 9 +-
arch/m68k/Kconfig.machine | 1 +
arch/mips/Kconfig | 1 +
arch/mips/include/asm/mips-cm.h | 12 +-
arch/mips/kernel/mips-cm.c | 21 ++--
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 --
arch/mips/lantiq/xway/dma.c | 14 ++-
arch/parisc/kernel/entry.S | 2 +-
arch/parisc/kernel/smp.c | 19 ++-
arch/parisc/kernel/unwind.c | 21 ++--
arch/parisc/kernel/vmlinux.lds.S | 3 +-
arch/parisc/mm/fixmap.c | 5 +-
arch/parisc/mm/init.c | 4 +-
arch/powerpc/include/asm/code-patching.h | 1 +
arch/powerpc/include/asm/security_features.h | 5 +
arch/powerpc/kernel/security.c | 5 +
arch/powerpc/lib/code-patching.c | 7 +-
arch/powerpc/net/bpf_jit.h | 33 ++++--
arch/powerpc/net/bpf_jit64.h | 8 +-
arch/powerpc/net/bpf_jit_comp64.c | 91 ++++++++++++---
arch/powerpc/platforms/44x/fsp2.c | 2 +
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 3 +-
arch/powerpc/platforms/powernv/opal-prd.c | 12 +-
arch/s390/kvm/priv.c | 2 +
arch/s390/mm/gmap.c | 5 +-
arch/sh/kernel/cpu/fpu.c | 10 +-
arch/x86/hyperv/hv_init.c | 5 +-
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 +++++--
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/cpu/hygon.c | 2 +
arch/x86/kernel/irq.c | 4 +-
arch/x86/kvm/vmx/vmx.c | 8 +-
arch/x86/mm/mem_encrypt_identity.c | 9 ++
block/blk-mq.c | 1 -
crypto/Kconfig | 2 +-
crypto/pcrypt.c | 12 +-
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +-
drivers/acpi/acpica/hwxfsleep.c | 7 ++
drivers/acpi/battery.c | 2 +-
drivers/acpi/pmic/intel_pmic.c | 51 ++++----
drivers/android/binder.c | 22 ++--
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 ++
drivers/auxdisplay/ht16k33.c | 66 ++++++-----
drivers/auxdisplay/img-ascii-lcd.c | 10 ++
drivers/block/ataflop.c | 18 +--
drivers/block/zram/zram_drv.c | 2 +-
drivers/bluetooth/btmtkuart.c | 13 ++-
drivers/char/hw_random/mtk-rng.c | 9 +-
drivers/char/ipmi/ipmi_msghandler.c | 10 +-
drivers/char/ipmi/ipmi_watchdog.c | 17 ++-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/clk/at91/pmc.c | 5 +
drivers/clk/mvebu/ap-cpu-clk.c | 14 ++-
drivers/clocksource/Kconfig | 1 +
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/caam/caampkc.c | 19 ++-
drivers/crypto/caam/regs.h | 3 +
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 +++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +
drivers/crypto/s5p-sss.c | 2 +
drivers/dma-buf/dma-buf.c | 1 +
drivers/dma/at_xdmac.c | 2 +-
drivers/dma/dmaengine.h | 2 +-
drivers/edac/amd64_edac.c | 22 +++-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci/psci_checker.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +-
drivers/gpu/drm/drm_panel_orientation_quirks.c | 47 +++++++-
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/msm_gem.c | 4 +-
drivers/gpu/drm/v3d/v3d_gem.c | 4 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 8 +-
drivers/hid/hid-u2fzero.c | 10 +-
drivers/hv/hyperv_vmbus.h | 1 +
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +++-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/dac/ad5446.c | 9 +-
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 ++-
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/joystick/iforce/iforce-usb.c | 2 +-
drivers/input/mouse/elantech.c | 13 +++
drivers/input/serio/i8042-x86ia64io.h | 14 +++
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-s3c24xx.c | 22 +++-
drivers/irqchip/irq-sifive-plic.c | 8 +-
drivers/media/dvb-frontends/mn88443x.c | 18 ++-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++++-
drivers/media/i2c/tda1997x.c | 8 +-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 +++--
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/platform/stm32/stm32-dcmi.c | 19 +--
drivers/media/radio/radio-wl1273.c | 2 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/spi/cxd2880-spi.c | 2 +-
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/tm6000/tm6000-video.c | 3 +-
drivers/media/usb/uvc/uvc_driver.c | 7 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 +
drivers/media/v4l2-core/v4l2-ioctl.c | 60 ++++++----
drivers/memory/fsl_ifc.c | 13 +--
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mmc/host/Kconfig | 2 +-
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/mxs-mmc.c | 10 ++
drivers/mmc/host/sdhci-omap.c | 3 +-
drivers/mtd/mtdcore.c | 4 +-
drivers/mtd/spi-nor/hisi-sfc.c | 1 -
drivers/net/bonding/bond_sysfs_slave.c | 36 ++----
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 ++
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +++-
drivers/net/ethernet/cavium/thunder/nic_main.c | 2 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 2 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 9 +-
drivers/net/ethernet/ibm/ibmvnic.c | 5 +-
drivers/net/ethernet/netronome/nfp/bpf/main.c | 16 ++-
drivers/net/ethernet/netronome/nfp/bpf/main.h | 2 +
drivers/net/ethernet/netronome/nfp/bpf/offload.c | 17 ++-
drivers/net/ethernet/realtek/r8169_main.c | 1 +
drivers/net/ethernet/sfc/ptp.c | 4 +-
drivers/net/ethernet/sfc/siena_sriov.c | 2 +-
drivers/net/ethernet/ti/davinci_emac.c | 16 ++-
drivers/net/phy/micrel.c | 5 +-
drivers/net/phy/phylink.c | 2 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 1 -
drivers/net/vrf.c | 28 ++++-
drivers/net/wireless/ath/ath10k/mac.c | 45 +++++--
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.c | 4 +
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +-
drivers/net/wireless/ath/wcn36xx/dxe.c | 12 +-
drivers/net/wireless/ath/wcn36xx/main.c | 4 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 44 +++++--
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10 ++
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 ++---
drivers/net/wireless/marvell/mwifiex/pcie.c | 8 ++
drivers/net/wireless/marvell/mwifiex/usb.c | 16 +++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13 ++-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +--
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 ++++--------
drivers/net/wireless/rsi/rsi_91x_main.c | 17 ++-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 ++--
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 ++
drivers/net/wireless/rsi/rsi_main.h | 15 ++-
drivers/net/xen-netfront.c | 8 ++
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvme/host/multipath.c | 9 +-
drivers/nvme/host/rdma.c | 2 +
drivers/nvme/target/configfs.c | 2 +
drivers/nvme/target/tcp.c | 21 +++-
drivers/opp/of.c | 2 +-
drivers/pci/controller/pci-aardvark.c | 129 ++++++++++++++++++---
drivers/pci/pci-bridge-emul.c | 13 +++
drivers/pci/quirks.c | 1 +
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 ++-
drivers/pinctrl/core.c | 2 +
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17042_battery.c | 8 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 ++--
drivers/reset/reset-socfpga.c | 26 +++++
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/s390/cio/device_ops.c | 12 +-
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/qla2xxx/qla_attr.c | 24 +++-
drivers/scsi/qla2xxx/qla_gbl.h | 2 -
drivers/scsi/qla2xxx/qla_init.c | 4 +-
drivers/scsi/qla2xxx/qla_mr.c | 23 ----
drivers/scsi/qla2xxx/qla_os.c | 37 ++----
drivers/scsi/qla2xxx/qla_target.c | 14 +--
drivers/soc/fsl/dpaa2-console.c | 1 +
drivers/soc/tegra/pmc.c | 2 +-
drivers/spi/spi-bcm-qspi.c | 5 +-
drivers/spi/spi-pl022.c | 5 +-
drivers/staging/ks7010/Kconfig | 3 +
drivers/staging/media/imx/imx-media-dev-common.c | 2 +
drivers/staging/media/ipu3/ipu3-v4l2.c | 7 +-
drivers/staging/wilc1000/wilc_wfi_cfgoperations.c | 3 +-
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/serial_core.c | 16 ++-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/usb/chipidea/core.c | 23 ++--
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-pci.c | 16 +++
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/serial/keyspan.c | 15 ++-
drivers/video/backlight/backlight.c | 6 -
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/watchdog/omap_wdt.c | 6 +-
drivers/xen/balloon.c | 86 ++++++++++----
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 14 ++-
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/fuse/dev.c | 14 ++-
fs/jfs/jfs_mount.c | 51 ++++----
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/nfs4proc.c | 15 +--
fs/nfs/pnfs_nfs.c | 4 +-
fs/nfs/write.c | 17 +--
fs/ocfs2/file.c | 8 +-
fs/orangefs/dcache.c | 4 +-
fs/overlayfs/file.c | 47 +++++++-
fs/quota/quota_tree.c | 15 +++
fs/tracefs/inode.c | 3 +-
include/linux/console.h | 2 +
include/linux/filter.h | 1 +
include/linux/libata.h | 2 +-
include/linux/lsm_hooks.h | 28 ++---
include/linux/rpmsg.h | 2 +-
include/linux/sched/task_stack.h | 4 +
include/linux/security.h | 33 +++---
include/net/llc.h | 4 +-
include/net/neighbour.h | 12 +-
include/net/sch_generic.h | 4 +
include/net/strparser.h | 16 ++-
include/net/udp.h | 5 +-
include/uapi/linux/pci_regs.h | 6 +
kernel/bpf/core.c | 4 +-
kernel/cgroup/cgroup.c | 31 ++++-
kernel/kprobes.c | 3 +-
kernel/locking/lockdep.c | 2 +-
kernel/power/swap.c | 7 +-
kernel/rcu/tree_exp.h | 2 +-
kernel/signal.c | 18 +--
kernel/trace/tracing_map.c | 40 ++++---
kernel/workqueue.c | 15 ++-
lib/decompress_unxz.c | 2 +-
lib/iov_iter.c | 5 +-
lib/xz/xz_dec_lzma2.c | 21 +++-
lib/xz/xz_dec_stream.c | 6 +-
mm/oom_kill.c | 23 ++--
mm/zsmalloc.c | 7 +-
net/8021q/vlan.c | 3 -
net/8021q/vlan_dev.c | 3 +
net/9p/client.c | 2 +
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/sco.c | 33 +++---
net/can/j1939/main.c | 7 ++
net/can/j1939/transport.c | 6 +
net/core/dev.c | 5 +-
net/core/filter.c | 21 ++++
net/core/neighbour.c | 48 ++++----
net/core/net-sysfs.c | 55 +++++++++
net/core/net_namespace.c | 4 +
net/core/stream.c | 3 -
net/core/sysctl_net_core.c | 2 +-
net/ipv4/tcp.c | 2 +-
net/ipv6/addrconf.c | 3 +
net/ipv6/udp.c | 2 +-
net/netfilter/nf_conntrack_proto_udp.c | 7 +-
net/netfilter/nfnetlink_queue.c | 2 +-
net/netfilter/nft_dynset.c | 11 +-
net/rxrpc/rtt.c | 2 +-
net/sched/sch_generic.c | 9 ++
net/sched/sch_mq.c | 24 ++++
net/sched/sch_mqprio.c | 23 ++++
net/sched/sch_taprio.c | 27 +++--
net/smc/af_smc.c | 20 ++--
net/strparser/strparser.c | 10 +-
net/sunrpc/xprt.c | 28 ++---
net/vmw_vsock/af_vsock.c | 2 +
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/security.c | 14 +--
security/selinux/hooks.c | 36 +++---
security/smack/smackfs.c | 11 +-
sound/core/oss/mixer_oss.c | 43 +++++--
sound/core/timer.c | 17 ++-
sound/pci/hda/hda_intel.c | 28 ++++-
sound/pci/hda/patch_realtek.c | 4 +
sound/soc/codecs/cs42l42.c | 9 +-
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/line6/driver.c | 14 +--
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/lib/bpf/btf.c | 16 +--
tools/perf/util/bpf-event.c | 4 +-
tools/testing/selftests/bpf/progs/strobemeta.h | 4 +-
tools/testing/selftests/bpf/test_progs.c | 4 +-
.../selftests/kvm/x86_64/mmio_warning_test.c | 2 +-
tools/testing/selftests/net/udpgso_bench_rx.c | 11 +-
359 files changed, 2539 insertions(+), 1211 deletions(-)
^ permalink raw reply [relevance 1%]
* [PATCH 5.10 262/575] Bluetooth: fix init and cleanup of sco_conn.timeout_work
2021-11-15 16:55 1% [PATCH 5.10 000/575] 5.10.80-rc1 review Greg Kroah-Hartman
@ 2021-11-15 16:59 11% ` Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-15 16:59 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 49d8a5606428ca0962d09050a5af81461ff90fbb ]
Before freeing struct sco_conn, all delayed timeout work should be
cancelled. Otherwise, sco_sock_timeout could potentially use the
sco_conn after it has been freed.
Additionally, sco_conn.timeout_work should be initialized when the
connection is allocated, not when the channel is added. This is
because an sco_conn can create channels with multiple sockets over its
lifetime, which happens if sockets are released but the connection
isn't deleted.
Fixes: ba316be1b6a0 ("Bluetooth: schedule SCO timeouts with delayed_work")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 9 ++++-----
1 file changed, 4 insertions(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 93df269a64707..2f2b8ddc4dd5d 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -134,6 +134,7 @@ static struct sco_conn *sco_conn_add(struct hci_conn *hcon)
return NULL;
spin_lock_init(&conn->lock);
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
hcon->sco_data = conn;
conn->hcon = hcon;
@@ -197,11 +198,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_chan_del(sk, err);
bh_unlock_sock(sk);
sock_put(sk);
-
- /* Ensure no more work items will run before freeing conn. */
- cancel_delayed_work_sync(&conn->timeout_work);
}
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
+
hcon->sco_data = NULL;
kfree(conn);
}
@@ -214,8 +215,6 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
- INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
-
if (parent)
bt_accept_enqueue(parent, sk, true);
}
--
2.33.0
^ permalink raw reply related [relevance 11%]
* [PATCH 5.14 000/849] 5.14.19-rc1 review
@ 2021-11-15 16:51 1% Greg Kroah-Hartman
2021-11-15 16:57 11% ` [PATCH 5.14 341/849] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
0 siblings, 1 reply; 200+ results
From: Greg Kroah-Hartman @ 2021-11-15 16:51 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.14.19 release.
There are 849 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 17 Nov 2021 16:52:23 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.14.19-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.14.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.14.19-rc1
Mario Limonciello <mario.limonciello@amd.com>
drm/amd/display: Look at firmware version to determine using dmub on dcn21
Basavaraj Natikar <Basavaraj.Natikar@amd.com>
pinctrl: amd: Handle wake-up interrupt
Basavaraj Natikar <Basavaraj.Natikar@amd.com>
pinctrl: amd: Add irq field data
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Partial revert of commit 6f9f17287e78
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix PCIe Max Payload Size setting
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: Fix macros in sun8i_csc.h
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
Nathan Lynch <nathanl@linux.ibm.com>
powerpc/pseries/mobility: ignore ibm, platform-facilities updates
Nicholas Piggin <npiggin@gmail.com>
powerpc/64s/interrupt: Fix check_return_regs_valid() false positive
Russell Currey <ruscur@russell.cc>
powerpc/security: Use a mutex for interrupt exit code patching
Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Nicholas Piggin <npiggin@gmail.com>
powerpc/32e: Ignore ESR in instruction storage interrupt handler
Hari Bathini <hbathini@linux.ibm.com>
powerpc/bpf: Fix write protecting JIT code
Gustavo A. R. Silva <gustavoars@kernel.org>
powerpc/vas: Fix potential NULL pointer dereference
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: fsmc: Fix use of SM ORDER
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix rsc-table name
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix ignoring mapping vdev regions
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: Fix the wrong default value of is_iomem
Peng Fan <peng.fan@nxp.com>
remoteproc: elf_loader: Fix loading segment when is_iomem true
Halil Pasic <pasic@linux.ibm.com>
s390/cio: make ccw_device_dma_* more robust
Harald Freudenberger <freude@linux.ibm.com>
s390/ap: Fix hanging ioctl caused by orphaned replies
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Thomas Richter <tmricht@linux.ibm.com>
s390/cpumf: cpum_cf PMU displays invalid value after hotplug remove
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Avoid calling put_device() under dpm_list_mtx
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Jack Andersen <jackoalan@gmail.com>
mfd: dln2: Add cell for initializing DLN2 ADC
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Jens Axboe <axboe@kernel.dk>
io-wq: serialize hash clear with wakeup
Jens Axboe <axboe@kernel.dk>
io-wq: fix queue stalling race
Jens Axboe <axboe@kernel.dk>
io-wq: ensure that hash wait lock is IRQ disabling
Vasily Averin <vvs@virtuozzo.com>
memcg: prohibit unconditional exceeding the limit of dying tasks
Matthew Wilcox (Oracle) <willy@infradead.org>
mm/filemap.c: remove bogus VM_BUG_ON
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Daniel Borkmann <daniel@iogearbox.net>
bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
Daniel Borkmann <daniel@iogearbox.net>
bpf, cgroups: Fix cgroup v2 fallback on v1/v2 mixed mode
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Anatolij Gustschin <agust@denx.de>
dmaengine: bestcomm: fix system boot lockups
Kishon Vijay Abraham I <kishon@ti.com>
dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
Kishon Vijay Abraham I <kishon@ti.com>
dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: fix unsafe pagevec reuse of hooked pclusters
Dongliang Mu <mudongliangabcd@gmail.com>
f2fs: fix UAF in f2fs_available_free_memory
Daeho Jeong <daehojeong@google.com>
f2fs: include non-compressed blocks in compr_written_block
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Guo Ren <guoren@linux.alibaba.com>
irqchip/sifive-plic: Fixup EOI failed when masked
Michael Pratt <mpratt@google.com>
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
Paolo Bonzini <pbonzini@redhat.com>
KVM: x86: move guest_pv_has out of user_access section
Dave Jones <davej@codemonkey.org.uk>
x86/mce: Add errata workaround for Skylake SKX37
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
Masahiro Yamada <masahiroy@kernel.org>
MIPS: fix duplicated slashes for Platform file path
John David Anglin <dave.anglin@bell.net>
parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
Helge Deller <deller@gmx.de>
parisc: Fix backtrace to always include init funtion names
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Steve French <stfrench@microsoft.com>
smb3: do not error on fsync when readonly
Willem de Bruijn <willemb@google.com>
selftests/net: udpgso_bench_rx: fix port argument
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Dust Li <dust.li@linux.alibaba.com>
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Marek Behún <kabel@kernel.org>
net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
Vladimir Oltean <vladimir.oltean@nxp.com>
net: stmmac: allow a tc-taprio base-time of zero
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: allow configure ETS bandwidth of all TCs
Yufeng Mo <moyufeng@huawei.com>
net: hns3: fix kernel crash when unload VF while it is being reset
Jie Wang <wangjie125@huawei.com>
net: hns3: fix pfc packet number incorrect after querying pfc parameters
Jie Wang <wangjie125@huawei.com>
net: hns3: fix ROCE base interrupt vector initialization bug
Eric Dumazet <edumazet@google.com>
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Marek Behún <kabel@kernel.org>
net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than 10
Muchun Song <songmuchun@bytedance.com>
seq_file: fix passing wrong private data
Imre Deak <imre.deak@intel.com>
drm/i915/fb: Fix rounding error in subsampled plane size calculation
Dan Carpenter <dan.carpenter@oracle.com>
gve: Fix off by one in gve_tx_timeout()
Arnd Bergmann <arnd@arndb.de>
dmaengine: stm32-dma: avoid 64-bit division in stm32_dma_get_max_width
Amelie Delaunay <amelie.delaunay@foss.st.com>
dmaengine: stm32-dma: fix burst in case of unaligned memory address
Jussi Maki <joamaki@gmail.com>
bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
John Fastabend <john.fastabend@gmail.com>
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Fix race in ingress receive verdict with redirect to self
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Remove unhash handler for BPF sockmap usage
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Reiji Watanabe <reijiw@google.com>
arm64: arm64_ftr_reg->name may not be a human-readable string
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Ian Rogers <irogers@google.com>
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
Vincent Mailhol <mailhol.vincent@wanadoo.fr>
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
Fabio Estevam <festevam@gmail.com>
Revert "drm/imx: Annotate dma-fence critical section in commit path"
Arnd Bergmann <arnd@arndb.de>
drm: fb_helper: improve CONFIG_FB dependency
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Limit the tests in netns
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Give tcpdump a chance to terminate cleanly
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Use arping to accurate the arp number
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Put the logs to tmp folder
Mehrdad Arshad Rad <arshad.rad@gmail.com>
libbpf: Fix lookup_and_delete_elem_flags error reporting
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Fix device wakeup power reference counting error
Kai Song <songkai01@inspur.com>
mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
Mark Brown <broonie@kernel.org>
mfd: sprd: Add SPI device ID table
Mark Brown <broonie@kernel.org>
mfd: cpcap: Add SPI device ID table
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
mfd: core: Add missing of_node_put for loop iteration
Takashi Iwai <tiwai@suse.de>
ALSA: memalloc: Catch call with NULL snd_dma_buffer pointer
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Jason Gunthorpe <jgg@ziepe.ca>
drm/ttm: remove ttm_bo_vm_insert_huge()
Heiner Kallweit <hkallweit1@gmail.com>
net: phy: fix duplex out of sync problem while changing settings
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
Selvin Xavier <selvin.xavier@broadcom.com>
PCI: Do not enable AtomicOps on VFs
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
ataflop: remove ataflop_probe_lock mutex
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: provide a helper for cleanup up an atari disk
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: add registration bool before calling del_gendisk()
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: use the blk_cleanup_disk() helper
Chenyuan Mi <cymi20@fudan.edu.cn>
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
Luis Chamberlain <mcgrof@kernel.org>
nvdimm/btt: do not call del_gendisk() if not needed
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
PCI: j721e: Fix j721e_pcie_probe() error path
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Brett Creeley <brett.creeley@intel.com>
ice: Fix not stopping Tx queues for VFs
Sylwester Dziedziuch <sylwesterx.dziedziuch@intel.com>
ice: Fix replacing VF hardware MAC to existing MAC filter
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: tag_ocelot: break circular dependency with ocelot switch lib driver
Ziyang Xuan <william.xuanziyang@huawei.com>
net: vlan: fix a UAF in vlan_dev_real_dev()
Stafford Horne <shorne@gmail.com>
openrisc: fix SMP tlb flush NULL pointer dereference
Jakub Kicinski <kuba@kernel.org>
ethtool: fix ethtool msg len calculation for pause stats
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed icmp.sh test to Makefile
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
Yu Kuai <yukuai3@huawei.com>
nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
Yu Kuai <yukuai3@huawei.com>
nbd: fix max value for 'first_minor'
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Sander Vanheule <sander@svanheule.net>
gpio: realtek-otto: fix GPIO line IRQ offset
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: target: core: Remove from tmr_list during LUN unlink
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Eric W. Biederman <ebiederm@xmission.com>
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Robert-Ionut Alexa <robert-ionut.alexa@nxp.com>
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Alexey Gladkov <legion@kernel.org>
Fix user namespace leak
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix an Oops in pnfs_mark_request_commit()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix up commit deadlocks
Amelie Delaunay <amelie.delaunay@foss.st.com>
dmaengine: stm32-dma: fix stm32_dma_get_max_width
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
Dan Carpenter <dan.carpenter@oracle.com>
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
Zev Weiss <zev@bewilderbeest.net>
mtd: core: don't remove debugfs directory if device is in use
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: arasan: Prevent an unsupported configuration
Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
John Keeping <john@metanate.com>
Input: st1232 - increase "wait ready" timeout
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
YueHaibing <yuehaibing@huawei.com>
opp: Fix return in _opp_add_static_v2()
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/bridge/lontium-lt9611uxc: fix provided connector suport
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix dentry verifier races
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Ignore the directory size when marking for revalidation
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
Kewei Xu <kewei.xu@mediatek.com>
i2c: mediatek: fixing the incorrect register offset
Mark Brown <broonie@kernel.org>
Input: ariel-pwrbutton - add SPI device ID table
Mark Brown <broonie@kernel.org>
rtc: mcp795: Add SPI ID table
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix TCM io memory type
Mark Brown <broonie@kernel.org>
rtc: pcf2123: Add SPI ID table
Mark Brown <broonie@kernel.org>
rtc: ds1390: Add SPI ID table
Mark Brown <broonie@kernel.org>
rtc: ds1302: Add SPI ID table
J. Bruce Fields <bfields@redhat.com>
nfsd: don't alloc under spinlock in rpc_parse_scope_id
Evgeny Novikov <novikov@ispras.ru>
mtd: rawnand: intel: Fix potential buffer overflow in probe
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Aharon Landau <aharonl@nvidia.com>
RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: check desc == NULL when using indirect with packed
Geert Uytterhoeven <geert@linux-m68k.org>
serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: rsnd: Fix an error handling path in 'rsnd_node_count()'
Yixing Liu <liuyixing1@huawei.com>
RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
Haoyue Xu <xuhaoyue1@hisilicon.com>
RDMA/hns: Fix initial arm_st of CQ
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc: Don't provide __kernel_map_pages() without ARCH_SUPPORTS_DEBUG_PAGEALLOC
Takashi Sakamoto <o-takashi@sakamocchi.jp>
ALSA: oxfw: fix functional regression for Mackie Onyx 1640i in v5.14 or later
Denis Kirjanov <kda@linux-powerpc.org>
powerpc/xmon: fix task state output
Bixuan Cui <cuibixuan@linux.alibaba.com>
powerpc/44x/fsp2: add missing of_node_put
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/book3e: Fix set_memory_x() and set_memory_nx()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: clarify error check and length calculations
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: clk-master: fix prescaler logic
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: clk-master: check if div or pres is zero
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Yang Yingliang <yangyingliang@huawei.com>
phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
Sandeep Maheswaram <quic_c_sanm@quicinc.com>
phy: qcom-snps: Correct the FSEL_MASK
Dan Carpenter <dan.carpenter@oracle.com>
phy: ti: gmii-sel: check of_get_address() for failure
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Mark Brown <broonie@kernel.org>
ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
Rahul Tanwar <rtanwar@maxlinear.com>
pinctrl: equilibrium: Fix function addition in multiple groups
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
Bhupesh Sharma <bhupesh.sharma@linaro.org>
arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
Marijn Suijten <marijn.suijten@somainline.org>
arm64: dts: qcom: pmi8994: Fix "eternal"->"external" typo in WLED node
Wan Jiabing <wanjiabing@vivo.com>
soc: qcom: apr: Add of_node_put() before return
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
Guru Das Srinagesh <quic_gurus@quicinc.com>
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: reset current session before setting the new one
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
Stefan Agner <stefan@agner.ch>
serial: imx: fix detach/attach of serial console
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: bus: stop dereferencing invalid slave pointer
Nuno Sá <nuno.sa@analog.com>
iio: adis: do not disabe IRQs in 'adis_init()'
Randy Dunlap <rdunlap@infradead.org>
usb: typec: STUSB160X should select REGMAP_I2C
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
soc: qcom: socinfo: add two missing PMIC IDs
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Make power_on actually enable the domain
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Always configure both ASP TX channels
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix SAI sub nodes register range
Fabrice Gasnier <fabrice.gasnier@foss.st.com>
ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
Geert Uytterhoeven <geert+renesas@glider.be>
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
Athira Rajeev <atrajeev@linux.vnet.ibm.cm>
powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
Andrew Halaney <ahalaney@redhat.com>
dyndbg: make dyndbg a known cli param
Vegard Nossum <vegard.nossum@oracle.com>
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Nikita Yushchenko <nikita.yoush@cogentembedded.com>
staging: most: dim2: do not double-register the same device
Randy Dunlap <rdunlap@infradead.org>
usb: musb: select GENERIC_PHY instead of depending on it
Leon Romanovsky <leon@kernel.org>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Yang Yingliang <yangyingliang@huawei.com>
power: supply: max17040: fix null-ptr-deref in max17040_probe()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc: fix unbalanced node refcount in check_kvm_guest()
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype for 'create_section_mapping'
Clément Léger <clement.leger@bootlin.com>
clk: at91: check pmc node status before registering syscore ops
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Mark Brown <broonie@kernel.org>
iio: st_pressure_spi: Add missing entries SPI to device ID table
Ranjani Sridharan <ranjani.sridharan@linux.intel.com>
ASoC: SOF: topology: do not power down primary core during topology removal
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Yang Yingliang <yangyingliang@huawei.com>
driver core: Fix possible memory leak in device_link_add()
Igor Pylypiv <ipylypiv@google.com>
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
Sumit Saxena <sumit.saxena@broadcom.com>
scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt
Claudiu Beznea <claudiu.beznea@microchip.com>
power: reset: at91-reset: check properly the return value of devm_of_iomap
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: debugfs: use controller id and link_id for debugfs
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Use position buffer for SKL+ again
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
David Stevens <stevensd@chromium.org>
iommu/dma: Fix arch_sync_dma for map
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
Arnd Bergmann <arnd@arndb.de>
iommu/mediatek: Fix out-of-range warning with clang
Geert Uytterhoeven <geert+renesas@glider.be>
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
Yassine Oudjana <y.oudjana@protonmail.com>
ASoC: wcd9335: Use correct version to initialize Class H
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Naina Mehta <nainmeht@codeaurora.org>
soc: qcom: llcc: Disable MMUHWT retention
Douglas Anderson <dianders@chromium.org>
arm64: dts: qcom: sc7180: Base dynamic CPU power coefficients in reality
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Tony Lindgren <tony@atomide.com>
bus: ti-sysc: Fix timekeeping_suspended warning on resume
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-sm1: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie node
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Marijn Suijten <marijn.suijten@somainline.org>
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Peter Geis <pgwipeout@gmail.com>
arm64: dts: rockchip: fix rk3568 mbi-alias
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
Ajish Koshy <Ajish.Koshy@microchip.com>
scsi: pm80xx: Fix lockup in outbound queue management
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
Rafał Miłecki <rafal@milecki.pl>
arm64: dts: broadcom: bcm4908: Fix UART clock name
Rafał Miłecki <rafal@milecki.pl>
ARM: dts: BCM5301X: Fix memory nodes names
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Alexandru Ardelean <aardelean@deviqon.com>
iio: st_sensors: disable regulators after device unregistration
Dongjin Kim <tobetter@gmail.com>
arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
Frank Rowand <frank.rowand@sony.com>
of: unittest: fix EXPECT text for gpio hog errors
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
Dan Schatzberg <schatzberg.dan@gmail.com>
cgroup: Fix rootcg cpu.stat guest double counting
Liu Jian <liujian56@huawei.com>
skmsg: Lose offset info in sk_psock_skb_ingress
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: delay complete()
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: don't stop queue in xmit
Jakub Kicinski <kuba@kernel.org>
udp6: allow SO_MARK ctrl msg to affect routing
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Nikolay Aleksandrov <nikolay@nvidia.com>
selftests: net: bridge: update IGMP/MLD membership interval value
Ivan Vecera <ivecera@redhat.com>
net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ipmi: kcs_bmc: Fix a memory leak in the error handling path of 'kcs_bmc_serio_add_device()'
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Xin Long <lucien.xin@gmail.com>
sctp: return true only for pathmtu update in sctp_transport_pl_toobig
Xin Long <lucien.xin@gmail.com>
sctp: subtract sctphdr len in sctp_transport_pl_hlen
Xin Long <lucien.xin@gmail.com>
sctp: reset probe_timer in sctp_transport_pl_update
Xin Long <lucien.xin@gmail.com>
sctp: allow IP fragmentation when PLPMTUD enters Error state
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix memory leak in test_ima
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix fd cleanup in sk_lookup test
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Lang Yu <lang.yu@amd.com>
drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw()
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Channel list update before hardware scan
Eric Dumazet <edumazet@google.com>
bpf: Fixes possible race in update_prog_stats() for 32bit arches
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix discarded frames due to wrong sequence number
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Peter Zijlstra <peterz@infradead.org>
x86: Fix __get_wchan() for !STACKTRACE
Kees Cook <keescook@chromium.org>
sched: Add wrapper for get_wchan() to keep task blocked
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
spi: spi-rpc-if: Check return value of rpcif_sw_init()
Zhang Rui <rui.zhang@intel.com>
cpufreq: intel_pstate: Fix cpu->pstate.turbo_freq initialization
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Ilya Leoshkevich <iii@linux.ibm.com>
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
Mark Brown <broonie@kernel.org>
tpm_tis_spi: Add missing SPI ID
Hao Wu <hao.wu@rubrik.com>
tpm: fix Atmel TPM crash caused by too frequent queries
Yu Kuai <yukuai3@huawei.com>
blk-cgroup: synchronize blkg creation against policy deactivation
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: more blk-mq refactoring fixes
Abinaya Kalaiselvan <akalaise@codeaurora.org>
ath10k: fix module load regression with iram-recovery feature
Arnd Bergmann <arnd@arndb.de>
ARM: 9142/1: kasan: work around LPAE build warning
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid double free of sida page
David Hildenbrand <david@redhat.com>
s390/uv: fully validate the VMA before calling follow_page()
David Hildenbrand <david@redhat.com>
s390/mm: fix VMA and page table handling code in storage key handling functions
David Hildenbrand <david@redhat.com>
s390/mm: validate VMA in PGSTE manipulation functions
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
David Hildenbrand <david@redhat.com>
s390/gmap: validate VMA in __gmap_zap()
Nick Hainke <vincent@systemli.org>
mt76: mt7615: mt7622: fix ibss and meshpoint
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF header parsing checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix overflow in BTF sanity checks
Quentin Monnet <quentin@isovalent.com>
bpftool: Avoid leaking the JSON writer prepared for program metadata
Mauricio Vásquez <mauricio@kinvolk.io>
libbpf: Fix memory leak in btf__dedup()
Jim Mattson <jmattson@google.com>
KVM: selftests: Fix nested SVM tests when built with clang
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Horia Geantă <horia.geanta@nxp.com>
crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Joerg Roedel <jroedel@suse.de>
x86/sev: Fix stack type check in vc_switch_off_ist()
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Ye Bin <yebin10@huawei.com>
nbd: Fix use-after-free in pid_show
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Tim Gardner <tim.gardner@canonical.com>
net: enetc: unmap DMA in enetc_send_cmd()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pnvm: read EFI data only if long enough
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pnvm: don't kmemdup() more than we have
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: reset PM state on unsuccessful resume
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix sta_rec_wtbl tag len
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: connac: fix possible NULL pointer dereference in mt76_connac_get_phy_mode_v2
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7615: fix monitor mode tear down crash
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix retrying release semaphore without end
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix possible infinite loop release semaphore
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7615: fix hwmon temp sensor mem use-after-free
Ben Greear <greearb@candelatech.com>
mt76: mt7915: fix hwmon temp sensor mem use-after-free
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: always wake device if necessary in debugfs
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix firmware usage of RA info using legacy rates
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: report HE MU radiotap
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: overwrite default reg_ops if necessary
Leon Yen <Leon.Yen@mediatek.com>
mt76: connac: fix GTK rekey offload failure on WPA mixed mode
Deren Wu <deren.wu@mediatek.com>
mt76: mt7921: fix dma hang in rmmod
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix bit fields for HT rate idx
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix potential overflow of eeprom page index
Deren Wu <deren.wu@mediatek.com>
mt76: mt7921: Fix out of order process by invalid event pkt
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix survey-dump reporting
Sean Wang <sean.wang@mediatek.com>
mt76: fix build error implicit enumeration conversion
Leon Yen <Leon.Yen@mediatek.com>
mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
Dan Carpenter <dan.carpenter@oracle.com>
mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix endianness warning in mt7921_update_txs
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event
Lang Yu <lang.yu@amd.com>
drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Fix sharing of wakeup power resources
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Turn off unused wakeup power resources
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: fix breakage introduced at blk-mq refactoring
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Sean Young <sean@mess.org>
media: ir_toy: assignment to be16 should be of correct type
Randy Dunlap <rdunlap@infradead.org>
media: ivtv: fix build for UML
jason-jh.lin <jason-jh.lin@mediatek.com>
mailbox: Remove WARN_ON for async_cb.cb in cmdq_exec_done
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: fix potential NULL dereference in cleanup
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: potential error pointer dereference in init()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init()
Ziyang Xuan <william.xuanziyang@huawei.com>
thermal/core: fix a UAF bug in __thermal_cooling_device_register()
Ovidiu Panait <ovidiu.panait@windriver.com>
crypto: octeontx2 - set assoclen in aead_do_fallback()
Eric Dumazet <edumazet@google.com>
tcp: switch orphan_count to bare per-cpu counters
Qi Zheng <zhengqi.arch@bytedance.com>
x86: Fix get_wchan() to support the ORC unwinder
Randy Dunlap <rdunlap@infradead.org>
net: tulip: winbond-840: fix build for UML
Randy Dunlap <rdunlap@infradead.org>
net: fealnx: fix build for UML
Zhang Qiao <zhangqiao22@huawei.com>
kernel/sched: Fix sched_fork() access an invalid sched_task_group
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix context restore
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Catherine Sullivan <csully@google.com>
gve: Track RX buffer allocation failures
John Fraker <jfraker@google.com>
gve: Recover from queue stall due to missed IRQ
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
THOBY Simon <Simon.THOBY@viveris.fr>
IMA: block writes of the security.ima xattr with unsupported algorithms
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Arnd Bergmann <arnd@arndb.de>
crypto: ccree - avoid out-of-range warnings from clang
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Mansur Alisha Shaik <mansur@codeaurora.org>
media: venus: fix vpp frequency calculation for decoder
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_dynset: relax superfluous check on set updates
Peter Zijlstra <peterz@infradead.org>
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
Yazen Ghannam <yazen.ghannam@amd.com>
EDAC/amd64: Handle three rank interleaving mode
Borislav Petkov <bp@suse.de>
x86/insn: Use get_unaligned() instead of memcpy()
Vincent Donnefort <vincent.donnefort@arm.com>
PM: EM: Fix inefficient states detection
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Stephen Boyd <swboyd@chromium.org>
ath10k: Don't always treat modem stop events as crashes
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Arnd Bergmann <arnd@arndb.de>
drm: fb_helper: fix CONFIG_FB dependency
Arnd Bergmann <arnd@arndb.de>
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
Punit Agrawal <punitagrawal@gmail.com>
kprobes: Do not use local variable when creating debugfs file
Yee Lee <yee.lee@mediatek.com>
scs: Release kasan vmalloc poison in scs_free process
Eugen Hristev <eugen.hristev@microchip.com>
media: atmel: fix the ispck initialization
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: tm6000: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: radio-wl1273: Avoid card name truncation
Ondrej Jirman <megous@megous.com>
media: sun6i-csi: Allow the video device to be open multiple times
Randy Dunlap <rdunlap@infradead.org>
media: i2c: ths8200 needs V4L2_ASYNC
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Tom Rix <trix@redhat.com>
media: TDA1997x: handle short reads of hdmi info frame.
Dafna Hirschfeld <dafna.hirschfeld@collabora.com>
media: mtk-vcodec: venc: fix return value when start_streaming fails
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: S_CTRL output the right value
Sakari Ailus <sakari.ailus@linux.intel.com>
media: imx258: Fix getting clock frequency
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Evgeny Novikov <novikov@ispras.ru>
media: ttusb-dec: avoid release of non-acquired mutex
Colin Ian King <colin.king@canonical.com>
media: cxd2880-spi: Fix a null pointer dereference on error handling path
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: meson-ge2d: Fix rotation parameter changes detection in 'ge2d_s_ctrl()'
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Kumar Kartikeya Dwivedi <memxor@gmail.com>
libbpf: Fix skel_internal.h to set errno on loader retval < 0
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Sudarshan Rajagopalan <quic_sudaraja@quicinc.com>
arm64: mm: update max_pfn after memory hotplug
Matthew Auld <matthew.auld@intel.com>
drm/ttm: stop calling tt_swapin in vm_access
Fabio Estevam <festevam@denx.de>
ath10k: sdio: Add missing BH locking around napi_schdule()
Loic Poulain <loic.poulain@linaro.org>
ath10k: Fix missing frame timestamp for beacon/probe-resp
Arnd Bergmann <arnd@arndb.de>
gve: DQO: avoid unused variable warnings
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
Pradeep Kumar Chitrapu <pradeepc@codeaurora.org>
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid race during regd updates
Dan Carpenter <dan.carpenter@oracle.com>
ath11k: fix some sleeping in atomic bugs
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366: Fix a bug in deleting VLANs
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Johannes Berg <johannes.berg@intel.com>
cfg80211: always free wiphy specific regdomain
Kees Cook <keescook@chromium.org>
fortify: Fix dropped strcpy() compile-time write overflow check
Jiasheng Jiang <jiasheng@iscas.ac.cn>
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Leon Romanovsky <leon@kernel.org>
qed: Don't ignore devlink allocation failures
Leon Romanovsky <leon@kernel.org>
bnxt_en: Check devlink allocation and registration status
Michael Walle <michael@walle.cc>
crypto: caam - disable pkc for non-E SoCs
Guchun Chen <guchun.chen@amd.com>
drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage
Dinghao Liu <dinghao.liu@zju.edu.cn>
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Ajay Singh <ajay.kathat@microchip.com>
wilc1000: fix possible memory leak in cfg_scan_result()
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
wcn36xx: Fix Antenna Diversity Switching
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Yoshitaka Ikeda <ikeda@nskint.co.jp>
spi: Fixed division by zero warning
Alex Bee <knaerzche@gmail.com>
drm: bridge: it66121: Fix return value it66121_probe
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: don't call netif_carrier_off() with NULL netdev
Yajun Deng <yajun.deng@linux.dev>
net: net_namespace: Fix undefined member in key_remove_domain()
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
lockdep: Let lock_is_held_type() detect recursive read as read
liuyuntao <liuyuntao10@huawei.com>
virtio-gpu: fix possible memory allocation failure
Iago Toral Quiroga <itoral@igalia.com>
drm/v3d: fix wait for TMU write combiner flush
Peter Zijlstra <peterz@infradead.org>
objtool: Handle __sanitize_cov*() tail calls
Peter Zijlstra <peterz@infradead.org>
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: fix burst length for DEU
Neeraj Upadhyay <neeraju@codeaurora.org>
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Toke Høiland-Jørgensen <toke@redhat.com>
libbpf: Don't crash on object files with no symbol tables
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Paul Cercueil <paul@crapouillou.net>
drm/bridge: it66121: Wait for next bridge to be probed
Paul Cercueil <paul@crapouillou.net>
drm/bridge: it66121: Initialize {device,vendor}_ids
Robert Foss <robert.foss@linaro.org>
drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
Imre Deak <imre.deak@intel.com>
fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix strobemeta selftest regression
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: don't trigger WARN() when decompression fails
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Stephane Eranian <eranian@google.com>
perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
Shuah Khan <skhan@linuxfoundation.org>
selftests/core: fix conflicting types compile error for close_range()
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
王贇 <yun.wang@linux.alibaba.com>
ftrace: do CPU checking after preemption disabled
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
Revert "wcn36xx: Enable firmware link monitoring"
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix packet drop on resume
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Correct band/freq reporting on RX
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Josef Bacik <josef@toxicpanda.com>
btrfs: do not take the uuid_mutex in btrfs_rm_device
Sidong Yang <realwakka@gmail.com>
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
Hui Wang <hui.wang@canonical.com>
ACPI: resources: Add one more Medion model in IRQ override quirk
Stefan Schaeckeler <schaecsn@gmx.net>
ACPI: AC: Quirk GK45 to skip reading _PSR
Eric Dumazet <edumazet@google.com>
net: annotate data-race in neigh_output()
Florian Westphal <fw@strlen.de>
vrf: run conntrack only in context of lower/physdev for locally generated packets
Viktor Rosendahl <Viktor.Rosendahl@bmw.de>
tools/latency-collector: Use correct size when writing queue_full_warning
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Fix glock_hash_walk bugs
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Cancel remote delete work asynchronously
Marc Kleine-Budde <mkl@pengutronix.de>
can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to unsigned int
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: lantiq_gswip: serialize access to the PCE table
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Jiri Olsa <jolsa@redhat.com>
selftests/bpf: Fix perf_buffer test on system with offline cpus
Shuah Khan <skhan@linuxfoundation.org>
selftests: kvm: fix mismatched fclose() after popen()
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Nick Desaulniers <ndesaulniers@google.com>
arm64: vdso32: suppress error message for 'make mrproper'
Hannes Reinecke <hare@suse.de>
nvme: drop scan_lock and always kick requeue list when removing namespaces
Israel Rukshin <israelr@nvidia.com>
nvmet-tcp: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet-rdma: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet: fix use-after-free when a port is removed
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
Michael Tretter <m.tretter@pengutronix.de>
media: allegro: ignore interrupt if mailbox is not initialized
Jens Axboe <axboe@kernel.dk>
block: remove inaccurate requeue check
Yaara Baruch <yaara.baruch@intel.com>
iwlwifi: change all JnP to NO-160 configuration
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7915: fix an off-by-one bound check
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Yanfei Xu <yanfei.xu@windriver.com>
locking/rwsem: Disable preemption for spinning region
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Xiao Ni <xni@redhat.com>
md: update superblock after changing rdev flags in state_store
Luis Chamberlain <mcgrof@kernel.org>
floppy: fix calling platform_device_unregister() on invalid drives
Jens Axboe <axboe@kernel.dk>
block: bump max plugged deferred size from 16 to 32
Ansuel Smith <ansuelsmth@gmail.com>
thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
Tim Gardner <tim.gardner@canonical.com>
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
Yuanzheng Song <songyuanzheng@huawei.com>
thermal/core: Fix null pointer dereference in thermal_release()
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
net: phy: micrel: make *-skew-ps check more lenient
Yifan Zhang <yifan1.zhang@amd.com>
drm/amdkfd: fix resume error when iommu disabled in Picasso
Aurabindo Pillai <aurabindo.pillai@amd.com>
drm/amd/display: fix null pointer deref when plugging in display
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: scan: Release PM resources blocked by unused objects
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Andreas Gruenbacher <agruenba@redhat.com>
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
Xin Xiong <xiongx18@fudan.edu.cn>
mmc: moxart: Fix reference count leaks in moxart_probe
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracing: Disable "other" permission bits in the tracefs files
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Alex Sierra <alex.sierra@amd.com>
drm/amdkfd: rm BO resv on validation to avoid deadlock
Antoine Tenart <atenart@kernel.org>
net-sysfs: try not to restart the syscall if it will fail eventually
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: imgu_fmt: Handle properly try
Mirela Rabulea <mirela.rabulea@nxp.com>
media: imx-jpeg: Fix possible null pointer dereference
Wojciech Drewek <wojciech.drewek@intel.com>
ice: Move devlink port to PF/VF struct
Vincent Donnefort <vincent.donnefort@arm.com>
cpufreq: Make policy min/max hard requirements
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Li Zhijian <lizhijian@cn.fujitsu.com>
kselftests/sched: cleanup the child processes
Josh Don <joshdon@google.com>
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
Corey Minyard <cminyard@mvista.com>
ipmi: Disable some operations during a panic
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Hans de Goede <hdegoede@redhat.com>
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Zong-Zhe Yang <kevin_yang@realtek.com>
rtw88: fix RX clock gate setting while fifo dump
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Niklas Söderlund <niklas.soderlund+renesas@ragnatech.se>
media: rcar-vin: Use user provided buffers when starting
Martin Kepplinger <martink@posteo.de>
media: imx: set a media_device bus_info string
Sergey Senozhatsky <senozhatsky@chromium.org>
media: videobuf2: rework vb2_mem_ops API
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Evgeny Novikov <novikov@ispras.ru>
media: vidtv: Fix memory leak in remove
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set unique vdev name based in type
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Dmitriy Ulitin <ulitin@ispras.ru>
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Evgeny Novikov <novikov@ispras.ru>
media: atomisp: Fix error handling in probe
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Rakesh Babu <rsaladi2@marvell.com>
octeontx2-pf: Enable promisc/allmulti match MCAM entries.
Alagu Sankar <alagusankar@silex-india.com>
ath10k: high latency fixes for beacon buffer
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
Wen Gong <wgong@codeaurora.org>
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid reg rules update during firmware recovery
Johannes Berg <johannes.berg@intel.com>
leds: trigger: use RCU to protect the led_cdevs list
Petr Machata <petrm@nvidia.com>
selftests: net: fib_nexthops: Wait before checking reported idle time
Jimmy Kizito <Jimmy.Kizito@amd.com>
drm/amd/display: Fix null pointer dereference for encoders
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix MMIO access page fault
Eric Biggers <ebiggers@google.com>
fscrypt: allow 256-bit master keys with AES-256-XTS
Mark Brown <broonie@kernel.org>
spi: Check we have a spi_device_id for each DT compatible
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Peter Zijlstra <peterz@infradead.org>
x86/mm/64: Improve stack overflow warnings
Shreyansh Chouhan <chouhan.shreyansh630@gmail.com>
crypto: aesni - check walk.nbytes instead of err
Seevalamuthu Mariappan <seevalam@codeaurora.org>
ath11k: Align bss_chan_info structure with firmware
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Paul E. McKenney <paulmck@kernel.org>
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
Hui Wang <hui.wang@canonical.com>
ACPI: resources: Add DMI-based legacy IRQ override quirk
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Scott Wood <swood@redhat.com>
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
Simon Ser <contact@emersion.fr>
drm/panel-orientation-quirks: add Valve Steam Deck
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
Charan Teja Reddy <charante@codeaurora.org>
dma-buf: WARN on dmabuf release with pending attachments
Kai Vehmanen <kai.vehmanen@linux.intel.com>
component: do not leave master devres group open after bind
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Clear status bits in interrupt handler
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Johan Hovold <johan@kernel.org>
most: fix control-message timeouts
Johan Hovold <johan@kernel.org>
serial: 8250: fix racy uartclk update
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Mihail Chindris <mihail.chindris@analog.com>
Documentation:devicetree:bindings:iio:dac: Fix val
Nuno Sá <nuno.sa@analog.com>
iio: ad5770r: make devicetree property reading consistent
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Mihail Chindris <mihail.chindris@analog.com>
drivers: iio: dac: ad5766: Fix dt property name
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: check return value of kstrdup_const()
Suzuki K Poulose <suzuki.poulose@arm.com>
coresight: trbe: Defer the probe on offline CPUs
Suzuki K Poulose <suzuki.poulose@arm.com>
coresight: trbe: Fix incorrect access of the sink specific data
Tao Zhang <quic_taozha@quicinc.com>
coresight: cti: Correct the parameter for pm_runtime_put
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Paulo Alcantara <pc@cjr.nz>
cifs: set a minimum of 120s for next dns resolution
Shyam Prasad N <sprasad@microsoft.com>
cifs: To match file servers, make sure the server hostname matches
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix configuring Reference clock
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix reporting Data Link Layer Link Active
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix checking for link up via LTSSM state
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Dan Williams <dan.j.williams@intel.com>
cxl/pci: Fix NULL vs ERR_PTR confusion
Li Chen <lchen@ambarella.com>
PCI: cadence: Add cdns_plat_pcie_probe() missing return
Marek Behún <kabel@kernel.org>
PCI: pci-bridge-emul: Fix emulation of W1C bits
yangerkun <yangerkun@huawei.com>
ovl: fix use after free in struct ovl_aio_req
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Arnd Bergmann <arnd@arndb.de>
ifb: fix building without CONFIG_NET_CLS_ACT
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Steven Rostedt (VMware) <rostedt@goodmis.org>
ring-buffer: Protect ring_buffer_reset() from reentrancy
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Oleksij Rempel <linux@rempel-privat.de>
iio: adc: tsc2046: fix scan interval warning
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Handle dynamic MSR intercept toggling
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Sean Christopherson <seanjc@google.com>
KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
David Woodhouse <dwmw2@infradead.org>
KVM: x86: Fix recording of guest steal time / preempted status
Mark Rutland <mark.rutland@arm.com>
KVM: arm64: Extract ESR_ELx.EC only
Yang Yingliang <yangyingliang@huawei.com>
iio: core: check return value when calling dev_set_name()
Yang Yingliang <yangyingliang@huawei.com>
iio: core: fix double free in iio_device_unregister_sysfs()
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: use the combined functions to protect critical zone
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
David Virag <virag.david003@gmail.com>
soc: samsung: exynos-pmu: Fix compilation when nothing selects CONFIG_MFD_CORE
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Wolfram Sang <wsa+renesas@sang-engineering.com>
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Dmitry Osipenko <digetx@gmail.com>
ASoC: tegra: Restore AC97 support
Dmitry Osipenko <digetx@gmail.com>
ASoC: tegra: Set default card name for Trimslice
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix invalid unit check
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Try waking the firmware until we get an interrupt
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix (QoS) null data frame bitrate/modulation
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix tx_status mechanism
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Maximilian Luz <luzmaximilian@gmail.com>
HID: surface-hid: Allow driver matching for target ID 1 devices
Maximilian Luz <luzmaximilian@gmail.com>
HID: surface-hid: Use correct event registry for managing HID events
Felix Fietkau <nbd@nbd.name>
mt76: mt7615: fix skb use-after-free on mac reset
Maximilian Luz <luzmaximilian@gmail.com>
platform/surface: aggregator_registry: Add support for Surface Laptop Studio
Lukas Wunner <lukas@wunner.de>
ifb: Depend on netfilter alternatively to tc
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Guoqing Jiang <guoqing.jiang@linux.dev>
md/raid1: only allocate write behind bio for WriteMostly device
Corey Minyard <cminyard@mvista.com>
ipmi:watchdog: Set panic count to proper value on a panic
Ondrej Mosnacek <omosnace@redhat.com>
selinux: fix race condition when computing ocontext SIDs
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Laurent Vivier <lvivier@redhat.com>
KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
Andreas Gruenbacher <agruenba@redhat.com>
powerpc/kvm: Fix kvm_use_magic_page
Sean Christopherson <seanjc@google.com>
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
David Yang <davidcomponentone@gmail.com>
tools/testing/selftests/vm/split_huge_page_test.c: fix application of sizeof to pointer
Wen Gu <guwen@linux.alibaba.com>
net/smc: Correct spelling mistake to TCPF_SYN_RECV
Tony Lu <tonylu@linux.alibaba.com>
net/smc: Fix smc_link->llc_testlink_time overflow
Yu Xiao <yu.xiao@corigine.com>
nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
Dongli Zhang <dongli.zhang@oracle.com>
vmxnet3: do not stop tx queues after netif_device_detach()
Janghyub Seo <jhyub06@gmail.com>
r8169: Add device 10ec:8162 to driver r8169
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: ignore reset event before initialization process is done
Yufeng Mo <moyufeng@huawei.com>
net: hns3: change hclge/hclgevf workqueue to WQ_UNBOUND mode
Amit Engel <amit.engel@dell.com>
nvmet-tcp: fix header digest verification
Naohiro Aota <naohiro.aota@wdc.com>
block: schedule queue restart after BLK_STS_ZONE_RESOURCE
Mario <awxkrnl@gmail.com>
drm: panel-orientation-quirks: Add quirk for GPD Win3
Walter Stoll <walter.stoll@duagon.com>
watchdog: Fix OMAP watchdog early handling
Cyril Strejc <cyril.strejc@skoda.cz>
net: multicast: calculate csum of looped-back and forwarded packets
Thomas Perrot <thomas.perrot@bootlin.com>
spi: spl022: fix Microwire full duplex mode
Maurizio Lombardi <mlombard@redhat.com>
nvmet-tcp: fix a memory leak when releasing a queue
Dongli Zhang <dongli.zhang@oracle.com>
xen/netfront: stop tx queues during live migration
Asmaa Mnebhi <asmaa@nvidia.com>
gpio: mlxbf2.c: Add check for bgpio_init failure
Lorenz Bauer <lmb@cloudflare.com>
bpf: Prevent increasing bpf_jit_limit above max
Lorenz Bauer <lmb@cloudflare.com>
bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
Lorenz Bauer <lmb@cloudflare.com>
bpf: Define bpf_jit_alloc_exec_limit for riscv JIT
Florian Westphal <fw@strlen.de>
fcnal-test: kill hanging ping/nettest binaries on cleanup
Bryant Mairs <bryant@mai.rs>
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Russ Weight <russell.h.weight@intel.com>
spi: altera: Change to dynamic allocation of spi id
Randy Dunlap <rdunlap@infradead.org>
mmc: winbond: don't build on M68K
Paweł Anikiel <pan@semihalf.com>
reset: socfpga: add empty driver allowing consumers to probe
Mikko Perttunen <mperttunen@nvidia.com>
reset: tegra-bpmp: Handle errors in BPMP response
Bastien Roucariès <rouca@debian.org>
ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
Arnd Bergmann <arnd@arndb.de>
hyperv/vmbus: include linux/bitops.h
Erik Ekman <erik@kryo.se>
sfc: Don't use netif_info before net_device setup
Erik Ekman <erik@kryo.se>
sfc: Export fibre-specific supported link modes
Zheyu Ma <zheyuma97@gmail.com>
cavium: Fix return values of the probe function
Zheyu Ma <zheyuma97@gmail.com>
mISDN: Fix return values of the probe function
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: qla2xxx: Fix unmap of already freed sgl
Zheyu Ma <zheyuma97@gmail.com>
scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
Zheyu Ma <zheyuma97@gmail.com>
cavium: Return negative value when pci_alloc_irq_vectors() fails
Wan Jiabing <wanjiabing@vivo.com>
net: mscc: ocelot: Add of_node_put() before goto
Wan Jiabing <wanjiabing@vivo.com>
net: sparx5: Add of_node_put() before goto
Kele Huang <huangkele@bytedance.com>
ptp: fix error print of ptp_kvm on X86_64 platform
Davide Baldo <davide@baldo.me>
ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
Stefan Binding <sbinding@opensource.cirrus.com>
ASoC: cs42l42: Ensure 0dB full scale volume is used for headsets
Yang Yingliang <yangyingliang@huawei.com>
ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
Quentin Perret <qperret@google.com>
KVM: arm64: Report corrupted refcount at EL2
Peter Zijlstra <peterz@infradead.org>
x86/iopl: Fake iopl(3) CLI/STI usage
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix page stealing
yangerkun <yangerkun@huawei.com>
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
yangerkun <yangerkun@huawei.com>
ext4: ensure enough credits in ext4_ext_shift_path_extents
Shaoying Xu <shaoyi@amazon.com>
ext4: fix lazy initialization next schedule time computation in more granular unit
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Takashi Iwai <tiwai@suse.de>
ALSA: PCM: Fix NULL dereference at mmap checks
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Free card instance properly at probe errors
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Jason Ormes <skryking@gmail.com>
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Kai-Heng Feng <kai.heng.feng@canonical.com>
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add quirk for ASUS UX550VE
Jaroslav Kysela <perex@perex.cz>
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jeremy Soller <jeremy@system76.com>
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
Johnathon Clark <john.clark@cantab.net>
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: Fix check_ext_ctrls
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Support dynamic resolution changes
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Do not override sizeimage for output format
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Helge Deller <deller@gmx.de>
parisc: Fix set_fixmap() on PA1.x CPUs
Sungjong Seo <sj1557.seo@samsung.com>
exfat: fix incorrect loading of i_blocks for large files
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Derong Liu <derong.liu@mediatek.com>
mmc: mtk-sd: Add wait dma stop done flow
Ziyang Xuan <william.xuanziyang@huawei.com>
char: xillybus: fix msg_ep UAF in xillyusb_probe()
Ben Skeggs <bskeggs@redhat.com>
ce/gf100: fix incorrect CE0 address calculation on some GPUs
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix use after free in eh_abort path
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
Ewan D. Milne <emilne@redhat.com>
scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Johan Hovold <johan@kernel.org>
Input: iforce - fix control-message timeout
Nehal Bakulchandra Shah <Nehal-Bakulchandra.shah@amd.com>
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 +
.../devicetree/bindings/iio/dac/adi,ad5766.yaml | 2 +-
.../bindings/regulator/samsung,s5m8767.txt | 23 +-
Documentation/filesystems/fscrypt.rst | 10 +-
Makefile | 4 +-
arch/alpha/include/asm/processor.h | 2 +-
arch/alpha/kernel/process.c | 5 +-
arch/arc/include/asm/processor.h | 2 +-
arch/arc/kernel/stacktrace.c | 4 +-
arch/arm/Makefile | 22 +-
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/bcm4708-netgear-r6250.dts | 2 +-
arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts | 2 +-
arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts | 2 +-
arch/arm/boot/dts/bcm4709-linksys-ea9200.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r7000.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r8000.dts | 2 +-
arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts | 2 +-
arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts | 2 +-
arch/arm/boot/dts/bcm53016-meraki-mr32.dts | 2 +-
arch/arm/boot/dts/bcm94708.dts | 2 +-
arch/arm/boot/dts/bcm94709.dts | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/qcom-msm8974.dtsi | 4 +-
arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 8 +-
arch/arm/boot/dts/stm32mp151.dtsi | 16 +-
arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi | 2 +-
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 2 +-
arch/arm/boot/dts/sun7i-a20-olinuxino-lime2.dts | 2 +-
arch/arm/include/asm/processor.h | 2 +-
arch/arm/kernel/process.c | 4 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mach-s3c/irq-s3c24xx.c | 22 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/kasan_init.c | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2 +-
.../boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi | 4 +-
.../boot/dts/amlogic/meson-g12b-odroid-n2.dtsi | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi | 4 +-
.../boot/dts/amlogic/meson-sm1-bananapi-m5.dts | 2 +-
.../boot/dts/amlogic/meson-sm1-khadas-vim3l.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-sm1-odroid.dtsi | 6 +-
arch/arm64/boot/dts/amlogic/meson-sm1-sei610.dts | 2 +-
arch/arm64/boot/dts/broadcom/bcm4908/bcm4908.dtsi | 2 +-
arch/arm64/boot/dts/qcom/msm8916.dtsi | 8 +-
arch/arm64/boot/dts/qcom/pm8916.dtsi | 1 -
arch/arm64/boot/dts/qcom/pmi8994.dtsi | 2 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-coachz.dtsi | 2 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-pompom.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sc7180.dtsi | 52 ++---
arch/arm64/boot/dts/qcom/sdm845.dtsi | 6 +-
.../arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 1 +
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
arch/arm64/boot/dts/rockchip/rk3568.dtsi | 2 +-
arch/arm64/boot/dts/ti/k3-j7200-main.dtsi | 6 +-
arch/arm64/boot/dts/ti/k3-j721e-main.dtsi | 16 +-
arch/arm64/include/asm/esr.h | 1 +
arch/arm64/include/asm/pgtable.h | 12 +-
arch/arm64/include/asm/processor.h | 2 +-
arch/arm64/kernel/cpufeature.c | 10 +-
arch/arm64/kernel/process.c | 4 +-
arch/arm64/kernel/vdso32/Makefile | 3 +-
arch/arm64/kvm/hyp/hyp-entry.S | 2 +-
arch/arm64/kvm/hyp/nvhe/host.S | 2 +-
arch/arm64/kvm/hyp/nvhe/page_alloc.c | 1 +
arch/arm64/mm/mmu.c | 5 +
arch/arm64/net/bpf_jit_comp.c | 5 +
arch/csky/include/asm/processor.h | 2 +-
arch/csky/kernel/stacktrace.c | 5 +-
arch/h8300/include/asm/processor.h | 2 +-
arch/h8300/kernel/process.c | 5 +-
arch/hexagon/include/asm/processor.h | 2 +-
arch/hexagon/kernel/process.c | 4 +-
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/include/asm/processor.h | 2 +-
arch/ia64/kernel/kprobes.c | 9 +-
arch/ia64/kernel/process.c | 5 +-
arch/m68k/Kconfig.machine | 1 +
arch/m68k/include/asm/processor.h | 2 +-
arch/m68k/kernel/process.c | 4 +-
arch/microblaze/include/asm/processor.h | 2 +-
arch/microblaze/kernel/process.c | 2 +-
arch/mips/Kconfig | 1 +
arch/mips/Makefile | 2 +
arch/mips/include/asm/cmpxchg.h | 5 +-
arch/mips/include/asm/mips-cm.h | 12 +-
arch/mips/include/asm/processor.h | 2 +-
arch/mips/kernel/mips-cm.c | 21 +-
arch/mips/kernel/process.c | 8 +-
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 -
arch/mips/lantiq/xway/dma.c | 23 +-
arch/nds32/include/asm/processor.h | 2 +-
arch/nds32/kernel/process.c | 7 +-
arch/nios2/include/asm/processor.h | 2 +-
arch/nios2/kernel/process.c | 5 +-
arch/openrisc/include/asm/processor.h | 2 +-
arch/openrisc/kernel/dma.c | 4 +-
arch/openrisc/kernel/process.c | 2 +-
arch/openrisc/kernel/smp.c | 6 +-
arch/parisc/include/asm/pgtable.h | 10 +-
arch/parisc/include/asm/processor.h | 2 +-
arch/parisc/kernel/cache.c | 4 +-
arch/parisc/kernel/entry.S | 2 +-
arch/parisc/kernel/process.c | 5 +-
arch/parisc/kernel/smp.c | 19 +-
arch/parisc/kernel/unwind.c | 21 +-
arch/parisc/kernel/vmlinux.lds.S | 3 +-
arch/parisc/mm/fixmap.c | 5 +-
arch/parisc/mm/init.c | 4 +-
arch/powerpc/Kconfig | 6 +-
arch/powerpc/include/asm/nohash/32/pgtable.h | 19 +-
arch/powerpc/include/asm/nohash/32/pte-8xx.h | 22 ++
arch/powerpc/include/asm/nohash/64/pgtable.h | 5 -
arch/powerpc/include/asm/nohash/pte-book3e.h | 18 +-
arch/powerpc/include/asm/paravirt.h | 18 +-
arch/powerpc/include/asm/processor.h | 2 +-
arch/powerpc/kernel/firmware.c | 7 +-
arch/powerpc/kernel/head_booke.h | 15 +-
arch/powerpc/kernel/interrupt.c | 2 +-
arch/powerpc/kernel/kvm.c | 2 +-
arch/powerpc/kernel/process.c | 9 +-
arch/powerpc/kvm/book3s_hv.c | 30 ++-
arch/powerpc/kvm/booke.c | 16 +-
arch/powerpc/lib/feature-fixups.c | 11 +
arch/powerpc/mm/mem.c | 2 +-
arch/powerpc/mm/nohash/tlb_low_64e.S | 8 +-
arch/powerpc/mm/pgtable_32.c | 2 +-
arch/powerpc/net/bpf_jit_comp.c | 2 +-
arch/powerpc/perf/power10-events-list.h | 8 +-
arch/powerpc/perf/power10-pmu.c | 44 ++--
arch/powerpc/platforms/44x/fsp2.c | 2 +
arch/powerpc/platforms/85xx/Makefile | 4 +-
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 7 +-
arch/powerpc/platforms/85xx/smp.c | 12 +-
arch/powerpc/platforms/book3s/vas-api.c | 4 +-
arch/powerpc/platforms/powernv/opal-prd.c | 12 +-
arch/powerpc/platforms/pseries/mobility.c | 34 +++
arch/powerpc/xmon/xmon.c | 3 +-
arch/riscv/include/asm/processor.h | 2 +-
arch/riscv/kernel/stacktrace.c | 12 +-
arch/riscv/net/bpf_jit_core.c | 5 +
arch/s390/include/asm/processor.h | 2 +-
arch/s390/kernel/perf_cpum_cf.c | 4 +-
arch/s390/kernel/process.c | 4 +-
arch/s390/kernel/uv.c | 2 +-
arch/s390/kvm/priv.c | 2 +
arch/s390/kvm/pv.c | 21 +-
arch/s390/mm/gmap.c | 11 +-
arch/s390/mm/pgtable.c | 70 ++++--
arch/sh/include/asm/processor_32.h | 2 +-
arch/sh/kernel/cpu/fpu.c | 10 +-
arch/sh/kernel/process_32.c | 5 +-
arch/sparc/include/asm/processor_32.h | 2 +-
arch/sparc/include/asm/processor_64.h | 2 +-
arch/sparc/kernel/process_32.c | 5 +-
arch/sparc/kernel/process_64.c | 5 +-
arch/um/include/asm/processor-generic.h | 2 +-
arch/um/kernel/process.c | 5 +-
arch/x86/crypto/aesni-intel_glue.c | 2 +-
arch/x86/events/intel/core.c | 5 +-
arch/x86/events/intel/ds.c | 5 +-
arch/x86/events/intel/uncore_discovery.h | 2 +-
arch/x86/events/intel/uncore_snbep.c | 6 +-
arch/x86/hyperv/hv_init.c | 5 +-
arch/x86/include/asm/insn-eval.h | 1 +
arch/x86/include/asm/irq_stack.h | 37 ++-
arch/x86/include/asm/kvm_host.h | 2 +-
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/include/asm/processor.h | 3 +-
arch/x86/include/asm/stacktrace.h | 10 +
arch/x86/include/asm/traps.h | 6 +-
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 +++-
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/cpu/hygon.c | 2 +
arch/x86/kernel/cpu/mce/intel.c | 5 +-
arch/x86/kernel/dumpstack_64.c | 6 +
arch/x86/kernel/irq.c | 4 +-
arch/x86/kernel/process.c | 66 ++----
arch/x86/kernel/traps.c | 60 +++--
arch/x86/kvm/cpuid.c | 47 ++--
arch/x86/kvm/vmx/nested.c | 103 ++++-----
arch/x86/kvm/vmx/vmx.c | 68 +-----
arch/x86/kvm/vmx/vmx.h | 63 ++++++
arch/x86/kvm/x86.c | 108 ++++++---
arch/x86/lib/insn-eval.c | 2 +-
arch/x86/lib/insn.c | 5 +-
arch/x86/mm/fault.c | 20 +-
arch/x86/mm/mem_encrypt_identity.c | 9 +
arch/xtensa/include/asm/processor.h | 2 +-
arch/xtensa/kernel/process.c | 5 +-
block/blk-cgroup.c | 10 +
block/blk-mq.c | 18 +-
block/blk.h | 6 +
crypto/Kconfig | 2 +-
crypto/pcrypt.c | 12 +-
crypto/tcrypt.c | 5 +-
drivers/acpi/ac.c | 19 ++
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +-
drivers/acpi/acpica/hwxfsleep.c | 7 +
drivers/acpi/battery.c | 2 +-
drivers/acpi/glue.c | 25 ++
drivers/acpi/internal.h | 1 +
drivers/acpi/pmic/intel_pmic.c | 51 +++--
drivers/acpi/power.c | 86 +++----
drivers/acpi/resource.c | 56 ++++-
drivers/acpi/scan.c | 6 +
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 +
drivers/auxdisplay/ht16k33.c | 66 +++---
drivers/auxdisplay/img-ascii-lcd.c | 10 +
drivers/base/component.c | 5 +-
drivers/base/core.c | 4 +-
drivers/base/power/main.c | 93 +++++---
drivers/block/ataflop.c | 141 +++++++-----
drivers/block/floppy.c | 9 +-
drivers/block/nbd.c | 24 +-
drivers/block/zram/zram_drv.c | 2 +-
drivers/bluetooth/btmtkuart.c | 13 +-
drivers/bus/ti-sysc.c | 65 +++++-
drivers/char/hw_random/mtk-rng.c | 9 +-
drivers/char/ipmi/ipmi_msghandler.c | 10 +-
drivers/char/ipmi/ipmi_watchdog.c | 25 +-
drivers/char/ipmi/kcs_bmc_serio.c | 4 +-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/char/tpm/tpm_tis_core.c | 26 ++-
drivers/char/tpm/tpm_tis_core.h | 4 +
drivers/char/tpm/tpm_tis_spi_main.c | 1 +
drivers/char/xillybus/xillyusb.c | 1 +
drivers/clk/at91/clk-master.c | 6 +-
drivers/clk/at91/clk-sam9x60-pll.c | 4 +-
drivers/clk/at91/pmc.c | 5 +
drivers/clk/mvebu/ap-cpu-clk.c | 14 +-
drivers/clocksource/Kconfig | 1 +
drivers/cpufreq/cpufreq.c | 7 +
drivers/cpufreq/intel_pstate.c | 37 ++-
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/caam/caampkc.c | 19 +-
drivers/crypto/caam/regs.h | 3 +
drivers/crypto/ccree/cc_driver.c | 3 +-
drivers/crypto/marvell/octeontx2/otx2_cptvf_algs.c | 1 +
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 ++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +
drivers/crypto/s5p-sss.c | 2 +
drivers/cxl/pci.c | 2 +-
drivers/dma-buf/dma-buf.c | 1 +
drivers/dma/at_xdmac.c | 53 +++--
drivers/dma/bestcomm/ata.c | 2 +-
drivers/dma/bestcomm/bestcomm.c | 22 +-
drivers/dma/bestcomm/fec.c | 4 +-
drivers/dma/bestcomm/gen_bd.c | 4 +-
drivers/dma/dmaengine.h | 2 +-
drivers/dma/stm32-dma.c | 23 +-
drivers/dma/ti/k3-udma.c | 32 ++-
drivers/edac/amd64_edac.c | 22 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci/psci_checker.c | 2 +-
drivers/firmware/qcom_scm.c | 2 +-
drivers/gpio/gpio-mlxbf2.c | 5 +
drivers/gpio/gpio-realtek-otto.c | 2 +-
drivers/gpu/drm/Kconfig | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 11 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 2 +-
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 8 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 17 +-
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 1 +
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 7 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 +-
drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c | 2 +-
.../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 2 +-
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 16 +-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3 +-
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 89 +++-----
drivers/gpu/drm/bridge/analogix/anx7625.c | 12 +-
drivers/gpu/drm/bridge/ite-it66121.c | 21 +-
drivers/gpu/drm/bridge/lontium-lt9611uxc.c | 9 +-
drivers/gpu/drm/drm_panel_orientation_quirks.c | 47 +++-
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/i915/display/intel_fb.c | 5 +-
drivers/gpu/drm/imx/imx-drm-core.c | 2 -
drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 6 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4 +
drivers/gpu/drm/msm/msm_gem.c | 5 +-
drivers/gpu/drm/msm/msm_gpu.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_gem.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_svm.c | 4 +
drivers/gpu/drm/nouveau/nvkm/engine/ce/gt215.c | 2 +-
drivers/gpu/drm/nouveau/nvkm/engine/device/base.c | 3 +-
drivers/gpu/drm/radeon/radeon_gem.c | 2 +-
drivers/gpu/drm/sun4i/sun8i_csc.h | 4 +-
drivers/gpu/drm/ttm/ttm_bo_vm.c | 99 +-------
drivers/gpu/drm/v3d/v3d_gem.c | 4 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 8 +-
drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 -
drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 72 +-----
drivers/gpu/drm/vmwgfx/vmwgfx_ttm_glue.c | 3 -
drivers/hid/hid-u2fzero.c | 10 +-
drivers/hid/surface-hid/surface_hid.c | 4 +-
drivers/hv/hyperv_vmbus.h | 1 +
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +-
drivers/hwtracing/coresight/coresight-cti-core.c | 2 +-
drivers/hwtracing/coresight/coresight-trbe.c | 10 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/accel/st_accel_i2c.c | 4 +-
drivers/iio/accel/st_accel_spi.c | 4 +-
drivers/iio/adc/ti-tsc2046.c | 2 +-
drivers/iio/dac/ad5446.c | 9 +-
drivers/iio/dac/ad5766.c | 6 +-
drivers/iio/dac/ad5770r.c | 2 +-
drivers/iio/gyro/st_gyro_i2c.c | 4 +-
drivers/iio/gyro/st_gyro_spi.c | 4 +-
drivers/iio/imu/adis.c | 4 +-
drivers/iio/industrialio-buffer.c | 28 ++-
drivers/iio/industrialio-core.c | 9 +-
drivers/iio/magnetometer/st_magn_i2c.c | 4 +-
drivers/iio/magnetometer/st_magn_spi.c | 4 +-
drivers/iio/pressure/st_pressure_i2c.c | 4 +-
drivers/iio/pressure/st_pressure_spi.c | 8 +-
drivers/infiniband/core/uverbs_cmd.c | 3 -
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 +-
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/joystick/iforce/iforce-usb.c | 2 +-
drivers/input/misc/ariel-pwrbutton.c | 7 +
drivers/input/mouse/elantech.c | 13 ++
drivers/input/serio/i8042-x86ia64io.h | 14 ++
drivers/input/touchscreen/st1232.c | 2 +-
drivers/iommu/dma-iommu.c | 16 +-
drivers/iommu/mtk_iommu.c | 4 +-
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-sifive-plic.c | 8 +-
drivers/isdn/hardware/mISDN/hfcpci.c | 8 +-
drivers/leds/led-triggers.c | 41 ++--
drivers/mailbox/mtk-cmdq-mailbox.c | 1 -
drivers/md/md.c | 11 +-
drivers/md/raid1.c | 2 +-
drivers/media/common/videobuf2/videobuf2-core.c | 42 ++--
.../media/common/videobuf2/videobuf2-dma-contig.c | 36 +--
drivers/media/common/videobuf2/videobuf2-dma-sg.c | 33 +--
drivers/media/common/videobuf2/videobuf2-vmalloc.c | 30 +--
drivers/media/dvb-frontends/mn88443x.c | 18 +-
drivers/media/i2c/Kconfig | 1 +
drivers/media/i2c/imx258.c | 12 +-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++-
drivers/media/i2c/tda1997x.c | 8 +-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/ivtv/ivtvfb.c | 4 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++-
drivers/media/platform/allegro-dvt/allegro-core.c | 9 +
drivers/media/platform/atmel/atmel-isc-base.c | 25 +-
drivers/media/platform/atmel/atmel-isc.h | 2 +
drivers/media/platform/atmel/atmel-sama5d2-isc.c | 39 ++--
drivers/media/platform/atmel/atmel-sama7g5-isc.c | 22 +-
drivers/media/platform/imx-jpeg/mxc-jpeg.c | 6 +
drivers/media/platform/meson/ge2d/ge2d.c | 6 +-
drivers/media/platform/mtk-vcodec/mtk_vcodec_enc.c | 8 +-
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/qcom/venus/pm_helpers.c | 8 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/rcar-vin/rcar-dma.c | 3 +-
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/platform/stm32/stm32-dcmi.c | 19 +-
.../media/platform/sunxi/sun6i-csi/sun6i_video.c | 6 +-
drivers/media/radio/radio-wl1273.c | 2 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ir_toy.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/spi/cxd2880-spi.c | 2 +-
drivers/media/test-drivers/vidtv/vidtv_bridge.c | 1 +
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/tm6000/tm6000-video.c | 3 +-
drivers/media/usb/ttusb-dec/ttusb_dec.c | 10 +-
drivers/media/usb/uvc/uvc_driver.c | 7 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 +
drivers/media/v4l2-core/v4l2-ioctl.c | 67 ++++--
drivers/memory/fsl_ifc.c | 13 +-
drivers/memory/renesas-rpc-if.c | 113 +++++++---
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mfd/altera-sysmgr.c | 2 +-
drivers/mfd/dln2.c | 18 ++
drivers/mfd/mfd-core.c | 2 +
drivers/mfd/motorola-cpcap.c | 8 +
drivers/mfd/sprd-sc27xx-spi.c | 7 +
drivers/mmc/host/Kconfig | 2 +-
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/moxart-mmc.c | 16 +-
drivers/mmc/host/mtk-sd.c | 5 +
drivers/mmc/host/mxs-mmc.c | 10 +
drivers/mmc/host/sdhci-omap.c | 18 +-
drivers/most/most_usb.c | 5 +-
drivers/mtd/mtdcore.c | 4 +-
drivers/mtd/nand/raw/ams-delta.c | 12 +-
drivers/mtd/nand/raw/arasan-nand-controller.c | 15 ++
drivers/mtd/nand/raw/au1550nd.c | 12 +-
drivers/mtd/nand/raw/fsmc_nand.c | 4 +-
drivers/mtd/nand/raw/gpio.c | 12 +-
drivers/mtd/nand/raw/intel-nand-controller.c | 5 +
drivers/mtd/nand/raw/mpc5121_nfc.c | 12 +-
drivers/mtd/nand/raw/orion_nand.c | 12 +-
drivers/mtd/nand/raw/pasemi_nand.c | 12 +-
drivers/mtd/nand/raw/plat_nand.c | 12 +-
drivers/mtd/nand/raw/socrates_nand.c | 12 +-
drivers/mtd/nand/raw/xway_nand.c | 12 +-
drivers/mtd/spi-nor/controllers/hisi-sfc.c | 1 -
drivers/net/Kconfig | 2 +-
drivers/net/bonding/bond_sysfs_slave.c | 36 +--
drivers/net/can/dev/bittiming.c | 2 +-
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 2 +-
drivers/net/can/usb/etas_es58x/es58x_core.c | 6 +-
drivers/net/dsa/lantiq_gswip.c | 28 ++-
drivers/net/dsa/mv88e6xxx/chip.c | 5 +-
drivers/net/dsa/ocelot/felix.c | 9 +-
drivers/net/dsa/rtl8366.c | 2 +-
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 +
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 5 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c | 13 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.h | 13 --
drivers/net/ethernet/cavium/thunder/nic_main.c | 2 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
.../chelsio/inline_crypto/chtls/chtls_cm.c | 2 +-
.../chelsio/inline_crypto/chtls/chtls_cm.h | 2 +-
drivers/net/ethernet/dec/tulip/winbond-840.c | 2 +-
drivers/net/ethernet/fealnx.c | 2 +-
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18 +-
drivers/net/ethernet/google/gve/gve.h | 17 +-
drivers/net/ethernet/google/gve/gve_adminq.h | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 48 +++-
drivers/net/ethernet/google/gve/gve_rx.c | 7 +-
drivers/net/ethernet/google/gve/gve_tx.c | 23 +-
drivers/net/ethernet/google/gve/gve_tx_dqo.c | 84 ++++---
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 20 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 45 +---
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 7 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 77 +++----
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.h | 4 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 15 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 5 +-
drivers/net/ethernet/ibm/ibmvnic.c | 21 +-
drivers/net/ethernet/intel/ice/ice.h | 7 +-
drivers/net/ethernet/intel/ice/ice_base.c | 2 +-
drivers/net/ethernet/intel/ice/ice_devlink.c | 109 ++++++---
drivers/net/ethernet/intel/ice/ice_devlink.h | 6 +-
drivers/net/ethernet/intel/ice/ice_lib.c | 3 +-
drivers/net/ethernet/intel/ice/ice_main.c | 4 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 22 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.h | 9 +
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 38 ++--
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 78 ++++---
.../net/ethernet/microchip/sparx5/sparx5_main.c | 1 +
drivers/net/ethernet/mscc/ocelot.c | 17 --
drivers/net/ethernet/mscc/ocelot_net.c | 1 +
drivers/net/ethernet/mscc/ocelot_vsc7514.c | 1 +
drivers/net/ethernet/netronome/nfp/bpf/main.c | 16 +-
drivers/net/ethernet/netronome/nfp/bpf/main.h | 2 +
drivers/net/ethernet/netronome/nfp/bpf/offload.c | 17 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 12 +-
drivers/net/ethernet/realtek/r8169_main.c | 1 +
drivers/net/ethernet/sfc/mcdi_port_common.c | 37 ++-
drivers/net/ethernet/sfc/ptp.c | 4 +-
drivers/net/ethernet/sfc/siena_sriov.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 2 -
drivers/net/ethernet/ti/cpsw_ale.c | 6 +-
drivers/net/ethernet/ti/davinci_emac.c | 16 +-
drivers/net/ifb.c | 2 +
drivers/net/phy/micrel.c | 9 +-
drivers/net/phy/phy.c | 7 +-
drivers/net/phy/phylink.c | 7 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 1 -
drivers/net/vrf.c | 28 ++-
drivers/net/wireless/ath/ath10k/core.c | 11 +-
drivers/net/wireless/ath/ath10k/coredump.c | 11 +-
drivers/net/wireless/ath/ath10k/coredump.h | 7 +
drivers/net/wireless/ath/ath10k/mac.c | 37 ++-
drivers/net/wireless/ath/ath10k/qmi.c | 3 +-
drivers/net/wireless/ath/ath10k/sdio.c | 5 +-
drivers/net/wireless/ath/ath10k/snoc.c | 77 +++++++
drivers/net/wireless/ath/ath10k/snoc.h | 5 +
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.c | 4 +
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath11k/dbring.c | 16 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 13 +-
drivers/net/wireless/ath/ath11k/mac.c | 2 +-
drivers/net/wireless/ath/ath11k/qmi.c | 4 +-
drivers/net/wireless/ath/ath11k/reg.c | 11 +-
drivers/net/wireless/ath/ath11k/reg.h | 2 +-
drivers/net/wireless/ath/ath11k/wmi.c | 40 ++--
drivers/net/wireless/ath/ath11k/wmi.h | 3 +-
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +-
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 ++--
drivers/net/wireless/ath/wcn36xx/hal.h | 32 +++
drivers/net/wireless/ath/wcn36xx/main.c | 21 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 126 ++++++++++-
drivers/net/wireless/ath/wcn36xx/smd.h | 1 +
drivers/net/wireless/ath/wcn36xx/txrx.c | 64 +++---
drivers/net/wireless/ath/wcn36xx/txrx.h | 3 +-
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10 +
drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 13 +-
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 5 +-
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 6 +-
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +--
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 ++-
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
drivers/net/wireless/mediatek/mt76/debugfs.c | 10 +-
drivers/net/wireless/mediatek/mt76/mt76.h | 8 +-
.../net/wireless/mediatek/mt76/mt7615/debugfs.c | 29 ++-
drivers/net/wireless/mediatek/mt76/mt7615/init.c | 6 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 60 ++---
drivers/net/wireless/mediatek/mt76/mt7615/main.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7615/mcu.c | 18 +-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 30 ++-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 8 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13 +-
drivers/net/wireless/mediatek/mt76/mt7915/init.c | 10 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.h | 3 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 22 +-
.../net/wireless/mediatek/mt76/mt7921/debugfs.c | 36 ++-
drivers/net/wireless/mediatek/mt76/mt7921/init.c | 13 ++
drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 68 +++++-
drivers/net/wireless/mediatek/mt76/mt7921/mac.h | 8 +
drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 22 +-
drivers/net/wireless/mediatek/mt76/mt7921/mcu.h | 10 +-
drivers/net/wireless/mediatek/mt76/mt7921/regs.h | 8 +-
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +-
drivers/net/wireless/realtek/rtw88/fw.c | 7 +-
drivers/net/wireless/realtek/rtw88/reg.h | 1 +
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 ++----
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 +-
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +
drivers/net/wireless/rsi/rsi_main.h | 15 +-
drivers/net/xen-netfront.c | 8 +
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvdimm/btt.c | 1 -
drivers/nvme/host/multipath.c | 9 +-
drivers/nvme/host/rdma.c | 2 +
drivers/nvme/target/configfs.c | 2 +
drivers/nvme/target/rdma.c | 24 ++
drivers/nvme/target/tcp.c | 21 +-
drivers/of/unittest.c | 16 +-
drivers/opp/of.c | 2 +-
drivers/pci/controller/cadence/pci-j721e.c | 2 +-
drivers/pci/controller/cadence/pcie-cadence-plat.c | 2 +
drivers/pci/controller/dwc/pcie-uniphier.c | 26 +--
drivers/pci/controller/pci-aardvark.c | 251 ++++++++++++++++++---
drivers/pci/pci-bridge-emul.c | 13 ++
drivers/pci/pci.c | 8 +
drivers/pci/quirks.c | 1 +
drivers/phy/microchip/sparx5_serdes.c | 4 +-
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 +-
drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c | 2 +-
drivers/phy/ti/phy-gmii-sel.c | 2 +
drivers/pinctrl/core.c | 2 +
drivers/pinctrl/pinctrl-amd.c | 19 +-
drivers/pinctrl/pinctrl-amd.h | 1 +
drivers/pinctrl/pinctrl-equilibrium.c | 7 +-
drivers/pinctrl/renesas/core.c | 2 +-
.../platform/surface/surface_aggregator_registry.c | 54 +++++
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 +-
drivers/power/reset/at91-reset.c | 4 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17040_battery.c | 2 +
drivers/power/supply/max17042_battery.c | 12 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/ptp/ptp_kvm_x86.c | 4 +-
drivers/regulator/s5m8767.c | 21 +-
drivers/remoteproc/imx_rproc.c | 41 ++--
drivers/remoteproc/remoteproc_core.c | 8 +-
drivers/remoteproc/remoteproc_coredump.c | 2 +-
drivers/remoteproc/remoteproc_elf_loader.c | 4 +-
drivers/reset/reset-socfpga.c | 26 +++
drivers/reset/tegra/reset-bpmp.c | 9 +-
drivers/rtc/rtc-ds1302.c | 7 +
drivers/rtc/rtc-ds1390.c | 7 +
drivers/rtc/rtc-mcp795.c | 7 +
drivers/rtc/rtc-pcf2123.c | 9 +
drivers/rtc/rtc-rv3032.c | 4 +-
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/s390/cio/device_ops.c | 12 +-
drivers/s390/crypto/ap_queue.c | 2 +
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/hosts.c | 1 +
drivers/scsi/lpfc/lpfc_els.c | 11 +-
drivers/scsi/lpfc/lpfc_hbadisc.c | 10 +-
drivers/scsi/lpfc/lpfc_nvme.c | 5 +-
drivers/scsi/lpfc/lpfc_scsi.c | 7 +
drivers/scsi/lpfc/lpfc_sli.c | 101 +++++++--
drivers/scsi/megaraid/megaraid_sas_fusion.c | 11 +-
drivers/scsi/pm8001/pm8001_hwi.c | 2 +-
drivers/scsi/pm8001/pm8001_sas.h | 3 +-
drivers/scsi/pm8001/pm80xx_hwi.c | 53 ++++-
drivers/scsi/qedf/qedf_main.c | 2 +
drivers/scsi/qla2xxx/qla_attr.c | 24 +-
drivers/scsi/qla2xxx/qla_gbl.h | 2 -
drivers/scsi/qla2xxx/qla_init.c | 4 +-
drivers/scsi/qla2xxx/qla_mr.c | 23 --
drivers/scsi/qla2xxx/qla_os.c | 37 +--
drivers/scsi/qla2xxx/qla_target.c | 14 +-
drivers/scsi/scsi_error.c | 25 ++
drivers/scsi/scsi_lib.c | 3 +-
drivers/scsi/ufs/ufshcd-pltfrm.c | 4 +-
drivers/soc/fsl/dpaa2-console.c | 1 +
drivers/soc/fsl/dpio/dpio-service.c | 2 +-
drivers/soc/fsl/dpio/qbman-portal.c | 9 +-
drivers/soc/qcom/apr.c | 2 +
drivers/soc/qcom/llcc-qcom.c | 2 +-
drivers/soc/qcom/rpmhpd.c | 20 +-
drivers/soc/qcom/socinfo.c | 4 +-
drivers/soc/samsung/Kconfig | 1 +
drivers/soc/tegra/pmc.c | 2 +-
drivers/soundwire/bus.c | 2 +-
drivers/soundwire/debugfs.c | 2 +-
drivers/spi/atmel-quadspi.c | 2 +-
drivers/spi/spi-altera-dfl.c | 2 +-
drivers/spi/spi-altera-platform.c | 2 +-
drivers/spi/spi-bcm-qspi.c | 8 +-
drivers/spi/spi-mtk-nor.c | 2 +-
drivers/spi/spi-pl022.c | 5 +-
drivers/spi/spi-rpc-if.c | 4 +-
drivers/spi/spi-stm32-qspi.c | 2 +-
drivers/spi/spi.c | 41 ++++
drivers/staging/ks7010/Kconfig | 3 +
drivers/staging/media/atomisp/i2c/atomisp-lm3554.c | 37 +--
drivers/staging/media/imx/imx-media-dev-common.c | 2 +
drivers/staging/media/ipu3/ipu3-v4l2.c | 7 +-
drivers/staging/media/rkvdec/rkvdec-h264.c | 5 +-
drivers/staging/media/rkvdec/rkvdec.c | 40 ++--
drivers/staging/most/dim2/Makefile | 2 +-
drivers/staging/most/dim2/dim2.c | 24 +-
drivers/staging/most/dim2/sysfs.c | 49 ----
drivers/staging/most/dim2/sysfs.h | 11 -
drivers/target/target_core_tmr.c | 17 +-
drivers/target/target_core_transport.c | 30 ++-
drivers/thermal/qcom/tsens.c | 29 ++-
drivers/thermal/thermal_core.c | 16 +-
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 21 +-
drivers/tty/serial/cpm_uart/cpm_uart_core.c | 2 +
drivers/tty/serial/imx.c | 4 +-
drivers/tty/serial/serial_core.c | 16 +-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/usb/chipidea/core.c | 23 +-
drivers/usb/dwc2/drd.c | 24 +-
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-pci.c | 16 ++
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/Kconfig | 2 +-
drivers/usb/serial/keyspan.c | 15 +-
drivers/usb/typec/Kconfig | 4 +-
drivers/video/backlight/backlight.c | 6 -
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/video/fbdev/efifb.c | 21 +-
drivers/virtio/virtio_ring.c | 14 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/watchdog/omap_wdt.c | 6 +-
drivers/xen/balloon.c | 86 +++++--
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/reflink.c | 2 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 14 +-
fs/cifs/cifsglob.h | 3 +-
fs/cifs/connect.c | 21 +-
fs/cifs/file.c | 35 ++-
fs/cifs/fs_context.c | 8 +
fs/cifs/fs_context.h | 1 +
fs/crypto/fscrypt_private.h | 5 +-
fs/crypto/hkdf.c | 11 +-
fs/crypto/keysetup.c | 57 ++++-
fs/erofs/decompressor.c | 1 -
fs/erofs/zdata.c | 13 +-
fs/erofs/zpvec.h | 13 +-
fs/exfat/inode.c | 2 +-
fs/ext4/extents.c | 63 +++---
fs/ext4/super.c | 9 +-
fs/f2fs/compress.c | 1 +
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/f2fs/super.c | 2 +
fs/fuse/dev.c | 14 +-
fs/gfs2/glock.c | 24 +-
fs/io-wq.c | 38 ++--
fs/jfs/jfs_mount.c | 51 ++---
fs/nfs/dir.c | 9 +-
fs/nfs/direct.c | 2 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/inode.c | 13 +-
fs/nfs/nfs3xdr.c | 2 +-
fs/nfs/nfs4idmap.c | 2 +-
fs/nfs/nfs4proc.c | 15 +-
fs/nfs/pnfs.h | 2 +-
fs/nfs/pnfs_nfs.c | 6 +-
fs/nfs/proc.c | 2 +-
fs/nfs/write.c | 26 +--
fs/ocfs2/file.c | 8 +-
fs/orangefs/dcache.c | 4 +-
fs/overlayfs/file.c | 16 +-
fs/proc/stat.c | 4 +-
fs/proc/uptime.c | 14 +-
fs/quota/quota_tree.c | 15 ++
fs/tracefs/inode.c | 3 +-
include/drm/ttm/ttm_bo_api.h | 3 +-
include/linux/blkdev.h | 2 -
include/linux/cgroup-defs.h | 107 +++------
include/linux/cgroup.h | 22 +-
include/linux/console.h | 2 +
include/linux/dsa/ocelot.h | 38 ++++
include/linux/ethtool_netlink.h | 3 +
include/linux/filter.h | 1 +
include/linux/fortify-string.h | 5 +-
include/linux/kernel_stat.h | 1 +
include/linux/leds.h | 2 +-
include/linux/libata.h | 2 +-
include/linux/nfs_fs.h | 1 +
include/linux/posix-timers.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched.h | 1 +
include/linux/sched/task.h | 3 +-
include/linux/sched/task_stack.h | 4 +
include/linux/seq_file.h | 2 +-
include/linux/skmsg.h | 18 +-
include/linux/surface_aggregator/controller.h | 4 +-
include/linux/tpm.h | 1 +
include/media/videobuf2-core.h | 37 +--
include/memory/renesas-rpc-if.h | 1 +
include/net/inet_connection_sock.h | 2 +-
include/net/llc.h | 4 +-
include/net/neighbour.h | 12 +-
include/net/sch_generic.h | 4 +
include/net/sctp/sctp.h | 7 +-
include/net/sock.h | 2 +-
include/net/strparser.h | 20 +-
include/net/tcp.h | 17 +-
include/net/udp.h | 5 +-
include/scsi/scsi_cmnd.h | 2 +-
include/scsi/scsi_host.h | 1 +
include/soc/mscc/ocelot.h | 24 --
include/sound/soc-topology.h | 3 +-
include/uapi/linux/ethtool_netlink.h | 4 +-
include/uapi/linux/pci_regs.h | 6 +
kernel/bpf/core.c | 4 +-
kernel/bpf/trampoline.c | 6 +-
kernel/bpf/verifier.c | 4 +-
kernel/cgroup/cgroup.c | 94 ++++----
kernel/cgroup/rstat.c | 2 -
kernel/fork.c | 3 +-
kernel/kprobes.c | 3 +-
kernel/locking/lockdep.c | 4 +-
kernel/locking/rwsem.c | 53 +++--
kernel/power/energy_model.c | 23 +-
kernel/power/swap.c | 7 +-
kernel/rcu/rcutorture.c | 48 +++-
kernel/rcu/tasks.h | 3 +-
kernel/rcu/tree_exp.h | 2 +-
kernel/rcu/tree_plugin.h | 8 +-
kernel/sched/core.c | 62 +++--
kernel/scs.c | 1 +
kernel/signal.c | 18 +-
kernel/time/posix-cpu-timers.c | 19 +-
kernel/trace/ftrace.c | 23 +-
kernel/trace/ring_buffer.c | 5 +
kernel/trace/trace.c | 73 +++---
kernel/trace/trace.h | 3 +
kernel/trace/trace_dynevent.c | 2 +-
kernel/trace/trace_event_perf.c | 6 +-
kernel/trace/trace_events.c | 42 ++--
kernel/trace/trace_events_synth.c | 4 +-
kernel/trace/trace_functions_graph.c | 2 +-
kernel/trace/trace_hwlat.c | 6 +-
kernel/trace/trace_kprobe.c | 8 +-
kernel/trace/trace_osnoise.c | 14 +-
kernel/trace/trace_printk.c | 2 +-
kernel/trace/trace_recursion_record.c | 4 +-
kernel/trace/trace_stack.c | 6 +-
kernel/trace/trace_stat.c | 6 +-
kernel/trace/trace_uprobe.c | 4 +-
kernel/trace/tracing_map.c | 40 ++--
kernel/workqueue.c | 15 +-
lib/decompress_unxz.c | 2 +-
lib/dynamic_debug.c | 12 +
lib/iov_iter.c | 5 +-
lib/xz/xz_dec_lzma2.c | 21 +-
lib/xz/xz_dec_stream.c | 6 +-
mm/filemap.c | 1 -
mm/memcontrol.c | 27 +--
mm/oom_kill.c | 23 +-
mm/zsmalloc.c | 7 +-
net/8021q/vlan.c | 3 -
net/8021q/vlan_dev.c | 3 +
net/9p/client.c | 2 +
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/sco.c | 33 +--
net/bridge/br_private.h | 2 +
net/can/j1939/main.c | 7 +
net/can/j1939/transport.c | 6 +
net/core/dev.c | 5 +-
net/core/filter.c | 58 ++++-
net/core/neighbour.c | 48 ++--
net/core/net-sysfs.c | 55 +++++
net/core/net_namespace.c | 4 +
net/core/netclassid_cgroup.c | 7 +-
net/core/netprio_cgroup.c | 10 +-
net/core/skmsg.c | 43 +++-
net/core/stream.c | 3 -
net/core/sysctl_net_core.c | 2 +-
net/dccp/dccp.h | 2 +-
net/dccp/proto.c | 14 +-
net/dsa/Kconfig | 2 -
net/dsa/switch.c | 4 +-
net/dsa/tag_ocelot.c | 4 +-
net/dsa/tag_ocelot_8021q.c | 1 +
net/ethtool/pause.c | 3 +-
net/ipv4/inet_connection_sock.c | 4 +-
net/ipv4/inet_hashtables.c | 2 +-
net/ipv4/proc.c | 2 +-
net/ipv4/tcp.c | 40 +++-
net/ipv4/tcp_bpf.c | 48 +++-
net/ipv6/addrconf.c | 3 +
net/ipv6/udp.c | 2 +-
net/netfilter/nf_conntrack_proto_udp.c | 7 +-
net/netfilter/nfnetlink_queue.c | 2 +-
net/netfilter/nft_dynset.c | 11 +-
net/rxrpc/rtt.c | 2 +-
net/sched/sch_generic.c | 9 +
net/sched/sch_mq.c | 24 ++
net/sched/sch_mqprio.c | 23 ++
net/sched/sch_taprio.c | 27 ++-
net/sctp/output.c | 13 +-
net/sctp/transport.c | 11 +-
net/smc/af_smc.c | 20 +-
net/smc/smc_llc.c | 2 +-
net/strparser/strparser.c | 10 +-
net/sunrpc/addr.c | 40 ++--
net/sunrpc/xprt.c | 28 +--
net/vmw_vsock/af_vsock.c | 2 +
net/wireless/core.c | 10 +
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/integrity/ima/ima.h | 2 +-
security/integrity/ima/ima_appraise.c | 49 +++-
security/selinux/ss/services.c | 162 +++++++------
security/smack/smackfs.c | 11 +-
sound/core/memalloc.c | 7 +-
sound/core/oss/mixer_oss.c | 44 +++-
sound/core/timer.c | 17 +-
sound/firewire/oxfw/oxfw-stream.c | 7 +-
sound/firewire/oxfw/oxfw.c | 8 +
sound/firewire/oxfw/oxfw.h | 5 +
sound/pci/hda/hda_intel.c | 52 ++---
sound/pci/hda/patch_realtek.c | 82 +++++++
sound/soc/codecs/cs42l42.c | 43 ++--
sound/soc/codecs/wcd9335.c | 2 +-
sound/soc/sh/rcar/core.c | 1 +
sound/soc/soc-core.c | 1 +
sound/soc/sof/topology.c | 9 +
sound/soc/tegra/tegra_asoc_machine.c | 60 ++++-
sound/soc/tegra/tegra_asoc_machine.h | 1 +
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/format.c | 1 +
sound/usb/line6/driver.c | 14 +-
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/arch/x86/lib/insn.c | 5 +-
tools/bpf/bpftool/prog.c | 16 +-
tools/include/asm-generic/unaligned.h | 23 ++
tools/lib/bpf/bpf.c | 4 +-
tools/lib/bpf/bpf_core_read.h | 2 +-
tools/lib/bpf/btf.c | 22 +-
tools/lib/bpf/libbpf.c | 6 +
tools/lib/bpf/skel_internal.h | 6 +-
tools/objtool/arch/x86/decode.c | 20 ++
tools/objtool/check.c | 159 +++++++------
tools/objtool/include/objtool/arch.h | 1 +
tools/perf/util/bpf-event.c | 4 +-
tools/perf/util/intel-pt-decoder/Build | 2 +
.../testing/selftests/bpf/prog_tests/perf_buffer.c | 4 +-
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 4 +-
tools/testing/selftests/bpf/prog_tests/test_ima.c | 3 +-
tools/testing/selftests/bpf/progs/strobemeta.h | 11 +
tools/testing/selftests/bpf/test_progs.c | 4 +-
.../selftests/bpf/test_xdp_redirect_multi.sh | 62 ++---
.../testing/selftests/bpf/verifier/array_access.c | 2 +-
tools/testing/selftests/bpf/xdp_redirect_multi.c | 4 +-
tools/testing/selftests/core/close_range_test.c | 2 +-
tools/testing/selftests/kvm/lib/x86_64/svm.c | 14 +-
.../selftests/kvm/x86_64/mmio_warning_test.c | 2 +-
tools/testing/selftests/net/Makefile | 2 +-
tools/testing/selftests/net/fcnal-test.sh | 3 +
tools/testing/selftests/net/fib_nexthops.sh | 1 +
.../selftests/net/forwarding/bridge_igmp.sh | 12 +-
.../testing/selftests/net/forwarding/bridge_mld.sh | 12 +-
tools/testing/selftests/net/udpgso_bench_rx.c | 11 +-
tools/testing/selftests/sched/cs_prctl_test.c | 28 ++-
tools/testing/selftests/vm/split_huge_page_test.c | 2 +-
tools/tracing/latency/latency-collector.c | 2 +-
950 files changed, 7792 insertions(+), 4374 deletions(-)
^ permalink raw reply [relevance 1%]
* [PATCH 5.15 000/917] 5.15.3-rc1 review
@ 2021-11-15 16:51 1% Greg Kroah-Hartman
2021-11-15 16:54 12% ` [PATCH 5.15 188/917] Bluetooth: call sock_hold earlier in sco_conn_del Greg Kroah-Hartman
2021-11-15 16:57 11% ` [PATCH 5.15 329/917] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
0 siblings, 2 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-15 16:51 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.15.3 release.
There are 917 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 17 Nov 2021 16:52:23 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.15.3-rc1
Mario Limonciello <mario.limonciello@amd.com>
drm/amd/display: Look at firmware version to determine using dmub on dcn21
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Partial revert of commit 6f9f17287e78
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix PCIe Max Payload Size setting
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: Fix macros in sun8i_csc.h
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
Nathan Lynch <nathanl@linux.ibm.com>
powerpc/pseries/mobility: ignore ibm, platform-facilities updates
Nicholas Piggin <npiggin@gmail.com>
powerpc/64s/interrupt: Fix check_return_regs_valid() false positive
Russell Currey <ruscur@russell.cc>
powerpc/security: Use a mutex for interrupt exit code patching
Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Nicholas Piggin <npiggin@gmail.com>
powerpc/32e: Ignore ESR in instruction storage interrupt handler
Hari Bathini <hbathini@linux.ibm.com>
powerpc/bpf: Fix write protecting JIT code
Gustavo A. R. Silva <gustavoars@kernel.org>
powerpc/vas: Fix potential NULL pointer dereference
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: fsmc: Fix use of SM ORDER
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix rsc-table name
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix ignoring mapping vdev regions
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: Fix the wrong default value of is_iomem
Peng Fan <peng.fan@nxp.com>
remoteproc: elf_loader: Fix loading segment when is_iomem true
Halil Pasic <pasic@linux.ibm.com>
s390/cio: make ccw_device_dma_* more robust
Harald Freudenberger <freude@linux.ibm.com>
s390/ap: Fix hanging ioctl caused by orphaned replies
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Thomas Richter <tmricht@linux.ibm.com>
s390/cpumf: cpum_cf PMU displays invalid value after hotplug remove
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Avoid calling put_device() under dpm_list_mtx
Coly Li <colyli@suse.de>
bcache: Revert "bcache: use bvec_virt"
Coly Li <colyli@suse.de>
bcache: fix use-after-free problem in bcache_device_free()
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Jack Andersen <jackoalan@gmail.com>
mfd: dln2: Add cell for initializing DLN2 ADC
Rongwei Wang <rongwei.wang@linux.alibaba.com>
mm, thp: fix incorrect unmap behavior for private pages
Rongwei Wang <rongwei.wang@linux.alibaba.com>
mm, thp: lock filemap when truncating page cache
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Vasily Averin <vvs@virtuozzo.com>
memcg: prohibit unconditional exceeding the limit of dying tasks
Matthew Wilcox (Oracle) <willy@infradead.org>
mm/filemap.c: remove bogus VM_BUG_ON
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Anatolij Gustschin <agust@denx.de>
dmaengine: bestcomm: fix system boot lockups
Kishon Vijay Abraham I <kishon@ti.com>
dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
Kishon Vijay Abraham I <kishon@ti.com>
dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: don't need 8byte alignment for request length in ksmbd_check_message
Marios Makassikis <mmakassikis@freebox.fr>
ksmbd: Fix buffer length check in fsctl_validate_negotiate_info()
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
block: Hold invalidate_lock in BLKRESETZONE ioctl
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
block: Hold invalidate_lock in BLKZEROOUT ioctl
Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
block: Hold invalidate_lock in BLKDISCARD ioctl
Matthew Brost <matthew.brost@intel.com>
drm/i915/guc: Fix blocked context accounting
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: fix unsafe pagevec reuse of hooked pclusters
Xiubo Li <xiubli@redhat.com>
ceph: fix mdsmap decode when there are MDS's beyond max_mds
Dongliang Mu <mudongliangabcd@gmail.com>
f2fs: fix UAF in f2fs_available_free_memory
Daeho Jeong <daehojeong@google.com>
f2fs: include non-compressed blocks in compr_written_block
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Guo Ren <guoren@linux.alibaba.com>
irqchip/sifive-plic: Fixup EOI failed when masked
Michael Pratt <mpratt@google.com>
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
Paolo Bonzini <pbonzini@redhat.com>
KVM: x86: move guest_pv_has out of user_access section
Thomas Gleixner <tglx@linutronix.de>
PCI/MSI: Destroy sysfs before freeing entries
Thomas Gleixner <tglx@linutronix.de>
PCI/MSI: Move non-mask check back into low level accessors
Dave Jones <davej@codemonkey.org.uk>
x86/mce: Add errata workaround for Skylake SKX37
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
Masahiro Yamada <masahiroy@kernel.org>
MIPS: fix *-pkg builds for loongson2ef platform
Masahiro Yamada <masahiroy@kernel.org>
MIPS: fix duplicated slashes for Platform file path
John David Anglin <dave.anglin@bell.net>
parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
Helge Deller <deller@gmx.de>
parisc: Fix backtrace to always include init funtion names
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Steve French <stfrench@microsoft.com>
smb3: do not error on fsync when readonly
Linus Torvalds <torvalds@linux-foundation.org>
thermal: int340x: fix build on 32-bit targets
Willem de Bruijn <willemb@google.com>
selftests/net: udpgso_bench_rx: fix port argument
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Dust Li <dust.li@linux.alibaba.com>
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Marek Behún <kabel@kernel.org>
net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
Vladimir Oltean <vladimir.oltean@nxp.com>
net: stmmac: allow a tc-taprio base-time of zero
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: allow configure ETS bandwidth of all TCs
Yufeng Mo <moyufeng@huawei.com>
net: hns3: fix kernel crash when unload VF while it is being reset
Jie Wang <wangjie125@huawei.com>
net: hns3: fix pfc packet number incorrect after querying pfc parameters
Jie Wang <wangjie125@huawei.com>
net: hns3: fix ROCE base interrupt vector initialization bug
Eric Dumazet <edumazet@google.com>
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Marek Behún <kabel@kernel.org>
net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than 10
Evan Quan <evan.quan@amd.com>
drm/amdgpu: fix uvd crash on Polaris12 during driver unloading
Muchun Song <songmuchun@bytedance.com>
seq_file: fix passing wrong private data
Andrew Halaney <ahalaney@redhat.com>
init: make unknown command line param message clearer
Imre Deak <imre.deak@intel.com>
drm/i915/fb: Fix rounding error in subsampled plane size calculation
Dan Carpenter <dan.carpenter@oracle.com>
gve: Fix off by one in gve_tx_timeout()
Arnd Bergmann <arnd@arndb.de>
dmaengine: stm32-dma: avoid 64-bit division in stm32_dma_get_max_width
Amelie Delaunay <amelie.delaunay@foss.st.com>
dmaengine: stm32-dma: fix burst in case of unaligned memory address
Jussi Maki <joamaki@gmail.com>
bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
John Fastabend <john.fastabend@gmail.com>
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Fix race in ingress receive verdict with redirect to self
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Remove unhash handler for BPF sockmap usage
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Reiji Watanabe <reijiw@google.com>
arm64: arm64_ftr_reg->name may not be a human-readable string
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
litex_liteeth: Fix a double free in the remove function
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Ian Rogers <irogers@google.com>
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
Vincent Mailhol <mailhol.vincent@wanadoo.fr>
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/powerplay: fix sysfs_emit/sysfs_emit_at handling
Fabio Estevam <festevam@gmail.com>
Revert "drm/imx: Annotate dma-fence critical section in commit path"
Arnd Bergmann <arnd@arndb.de>
drm: fb_helper: improve CONFIG_FB dependency
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Limit the tests in netns
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Give tcpdump a chance to terminate cleanly
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Use arping to accurate the arp number
Hangbin Liu <liuhangbin@gmail.com>
selftests/bpf/xdp_redirect_multi: Put the logs to tmp folder
Mehrdad Arshad Rad <arshad.rad@gmail.com>
libbpf: Fix lookup_and_delete_elem_flags error reporting
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Fix device wakeup power reference counting error
Kai Song <songkai01@inspur.com>
mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
Mark Brown <broonie@kernel.org>
mfd: sprd: Add SPI device ID table
Mark Brown <broonie@kernel.org>
mfd: cpcap: Add SPI device ID table
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
mfd: core: Add missing of_node_put for loop iteration
Takashi Iwai <tiwai@suse.de>
ALSA: memalloc: Catch call with NULL snd_dma_buffer pointer
Arnd Bergmann <arnd@arndb.de>
octeontx2-pf: select CONFIG_NET_DEVLINK
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Jason Gunthorpe <jgg@ziepe.ca>
drm/ttm: remove ttm_bo_vm_insert_huge()
Luis Chamberlain <mcgrof@kernel.org>
block: fix device_add_disk() kobject_create_and_add() error handling
Heiner Kallweit <hkallweit1@gmail.com>
net: phy: fix duplex out of sync problem while changing settings
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
Selvin Xavier <selvin.xavier@broadcom.com>
PCI: Do not enable AtomicOps on VFs
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
ataflop: remove ataflop_probe_lock mutex
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: provide a helper for cleanup up an atari disk
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: add registration bool before calling del_gendisk()
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: use the blk_cleanup_disk() helper
Luis Chamberlain <mcgrof@kernel.org>
nvdimm/pmem: cleanup the disk if pmem_release_disk() is yet assigned
Chenyuan Mi <cymi20@fudan.edu.cn>
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
Andrea Righi <andrea.righi@canonical.com>
selftests: net: properly support IPv6 in GSO GRE test
Avri Altman <avri.altman@wdc.com>
scsi: ufs: ufshpb: Properly handle max-single-cmd
Bean Huo <beanhuo@micron.com>
scsi: ufs: core: Fix NULL pointer dereference
Daejun Park <daejun7.park@samsung.com>
scsi: ufs: ufshpb: Use proper power management API
Jackie Liu <liuyun01@kylinos.cn>
scsi: bsg: Fix errno when scsi_bsg_register_queue() fails
Luis Chamberlain <mcgrof@kernel.org>
nvdimm/btt: do not call del_gendisk() if not needed
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
PCI: j721e: Fix j721e_pcie_probe() error path
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Daniel Thompson <daniel.thompson@linaro.org>
kdb: Adopt scheduler's task classification
Brett Creeley <brett.creeley@intel.com>
ice: Fix not stopping Tx queues for VFs
Sylwester Dziedziuch <sylwesterx.dziedziuch@intel.com>
ice: Fix replacing VF hardware MAC to existing MAC filter
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
Ziyang Xuan <william.xuanziyang@huawei.com>
net: vlan: fix a UAF in vlan_dev_real_dev()
Stafford Horne <shorne@gmail.com>
openrisc: fix SMP tlb flush NULL pointer dereference
Jakub Kicinski <kuba@kernel.org>
ethtool: fix ethtool msg len calculation for pause stats
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed toeplitz.sh/toeplitz_client.sh to Makefile
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed vrf_strict_mode_test.sh test to Makefile
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed SRv6 tests
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed setup_loopback.sh/setup_veth.sh to Makefile
Hangbin Liu <liuhangbin@gmail.com>
kselftests/net: add missed icmp.sh test to Makefile
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
Beld Zhang <beldzhang@gmail.com>
io-wq: fix max-workers not correctly set on multi-node system
Yu Kuai <yukuai3@huawei.com>
nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
Yu Kuai <yukuai3@huawei.com>
nbd: fix max value for 'first_minor'
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Sander Vanheule <sander@svanheule.net>
gpio: realtek-otto: fix GPIO line IRQ offset
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Dave Jiang <dave.jiang@intel.com>
dmaengine: idxd: fix resource leak on dmaengine driver disable
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Fix EDIF bsg
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Increase ELS payload
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Flush stale events and msgs on session down
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Fix app start delay
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Fix app start fail
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Relogin during fabric disturbance
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: target: core: Remove from tmr_list during LUN unlink
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Eric W. Biederman <ebiederm@xmission.com>
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Dave Jiang <dave.jiang@intel.com>
dmaengine: idxd: reconfig device after device reset command
Dave Jiang <dave.jiang@intel.com>
dmanegine: idxd: fix resource free ordering on driver removal
Dongliang Mu <mudongliangabcd@gmail.com>
dmaengine: tegra210-adma: fix pm runtime unbalance
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Robert-Ionut Alexa <robert-ionut.alexa@nxp.com>
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Alexey Gladkov <legion@kernel.org>
Fix user namespace leak
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix an Oops in pnfs_mark_request_commit()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix up commit deadlocks
Amelie Delaunay <amelie.delaunay@foss.st.com>
dmaengine: stm32-dma: fix stm32_dma_get_max_width
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
Dan Carpenter <dan.carpenter@oracle.com>
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
Zev Weiss <zev@bewilderbeest.net>
mtd: core: don't remove debugfs directory if device is in use
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: arasan: Prevent an unsupported configuration
Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Guido Günther <agx@sigxcpu.org>
drm/bridge: nwl-dsi: Add atomic_get_input_bus_fmts
John Keeping <john@metanate.com>
Input: st1232 - increase "wait ready" timeout
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Kees Cook <keescook@chromium.org>
sparc: Add missing "FORCE" target when using if_changed
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
YueHaibing <yuehaibing@huawei.com>
opp: Fix return in _opp_add_static_v2()
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/bridge/lontium-lt9611uxc: fix provided connector suport
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix dentry verifier races
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Ignore the directory size when marking for revalidation
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
Kewei Xu <kewei.xu@mediatek.com>
i2c: mediatek: fixing the incorrect register offset
Mark Brown <broonie@kernel.org>
Input: ariel-pwrbutton - add SPI device ID table
Mark Brown <broonie@kernel.org>
rtc: mcp795: Add SPI ID table
Dave Jiang <dave.jiang@intel.com>
dmaengine: idxd: move out percpu_ref_exit() to ensure it's outside submission
Heiner Kallweit <hkallweit1@gmail.com>
i2c: i801: Use PCI bus rescan mutex to protect P2SB access
Dong Aisheng <aisheng.dong@nxp.com>
remoteproc: imx_rproc: Fix TCM io memory type
Mark Brown <broonie@kernel.org>
rtc: pcf2123: Add SPI ID table
Mark Brown <broonie@kernel.org>
rtc: ds1390: Add SPI ID table
Mark Brown <broonie@kernel.org>
rtc: ds1302: Add SPI ID table
J. Bruce Fields <bfields@redhat.com>
nfsd: don't alloc under spinlock in rpc_parse_scope_id
Evgeny Novikov <novikov@ispras.ru>
mtd: rawnand: intel: Fix potential buffer overflow in probe
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Aharon Landau <aharonl@nvidia.com>
RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Parav Pandit <parav@nvidia.com>
vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: check desc == NULL when using indirect with packed
Geert Uytterhoeven <geert@linux-m68k.org>
serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: rsnd: Fix an error handling path in 'rsnd_node_count()'
Yixing Liu <liuyixing1@huawei.com>
RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
Haoyue Xu <xuhaoyue1@hisilicon.com>
RDMA/hns: Fix initial arm_st of CQ
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc: Don't provide __kernel_map_pages() without ARCH_SUPPORTS_DEBUG_PAGEALLOC
Logan Gunthorpe <logang@deltatee.com>
iommu/dma: Fix incorrect error return on iommu deferred attach
Takashi Sakamoto <o-takashi@sakamocchi.jp>
ALSA: oxfw: fix functional regression for Mackie Onyx 1640i in v5.14 or later
Denis Kirjanov <kda@linux-powerpc.org>
powerpc/xmon: fix task state output
Bixuan Cui <cuibixuan@linux.alibaba.com>
powerpc/44x/fsp2: add missing of_node_put
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/book3e: Fix set_memory_x() and set_memory_nx()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: clarify error check and length calculations
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: clk-master: fix prescaler logic
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: clk-master: check if div or pres is zero
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Yang Yingliang <yangyingliang@huawei.com>
phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
Sandeep Maheswaram <quic_c_sanm@quicinc.com>
phy: qcom-snps: Correct the FSEL_MASK
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
phy: qcom-qmp: another fix for the sc8180x PCIe definition
Dan Carpenter <dan.carpenter@oracle.com>
phy: ti: gmii-sel: check of_get_address() for failure
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Mark Brown <broonie@kernel.org>
ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
Rahul Tanwar <rtanwar@maxlinear.com>
pinctrl: equilibrium: Fix function addition in multiple groups
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
Bhupesh Sharma <bhupesh.sharma@linaro.org>
arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
Marijn Suijten <marijn.suijten@somainline.org>
arm64: dts: qcom: pmi8994: Fix "eternal"->"external" typo in WLED node
Wan Jiabing <wanjiabing@vivo.com>
soc: qcom: apr: Add of_node_put() before return
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
Guru Das Srinagesh <quic_gurus@quicinc.com>
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
Jack Pham <jackp@codeaurora.org>
usb: dwc3: gadget: Skip resizing EP's TX FIFO if already resized
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: reset current session before setting the new one
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
Stefan Agner <stefan@agner.ch>
serial: imx: fix detach/attach of serial console
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: bus: stop dereferencing invalid slave pointer
Nuno Sá <nuno.sa@analog.com>
iio: adis: do not disabe IRQs in 'adis_init()'
Randy Dunlap <rdunlap@infradead.org>
usb: typec: STUSB160X should select REGMAP_I2C
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
soc: qcom: socinfo: add two missing PMIC IDs
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Make power_on actually enable the domain
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Always configure both ASP TX channels
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix SAI sub nodes register range
Fabrice Gasnier <fabrice.gasnier@foss.st.com>
ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
Geert Uytterhoeven <geert+renesas@glider.be>
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
Athira Rajeev <atrajeev@linux.vnet.ibm.cm>
powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
Andrew Halaney <ahalaney@redhat.com>
dyndbg: make dyndbg a known cli param
Logan Gunthorpe <logang@deltatee.com>
RDMA/core: Set sgtable nents when using ib_dma_virt_map_sg()
Vegard Nossum <vegard.nossum@oracle.com>
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Nikita Yushchenko <nikita.yoush@cogentembedded.com>
staging: most: dim2: do not double-register the same device
Randy Dunlap <rdunlap@infradead.org>
usb: musb: select GENERIC_PHY instead of depending on it
Leon Romanovsky <leon@kernel.org>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Yang Yingliang <yangyingliang@huawei.com>
power: supply: max17040: fix null-ptr-deref in max17040_probe()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc: fix unbalanced node refcount in check_kvm_guest()
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Christophe Leroy <christophe.leroy@csgroup.eu>
powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype for 'create_section_mapping'
Clément Léger <clement.leger@bootlin.com>
clk: at91: check pmc node status before registering syscore ops
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Mark Brown <broonie@kernel.org>
iio: st_pressure_spi: Add missing entries SPI to device ID table
Ranjani Sridharan <ranjani.sridharan@linux.intel.com>
ASoC: SOF: topology: do not power down primary core during topology removal
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Yang Yingliang <yangyingliang@huawei.com>
driver core: Fix possible memory leak in device_link_add()
Igor Pylypiv <ipylypiv@google.com>
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
Sumit Saxena <sumit.saxena@broadcom.com>
scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt
Bart Van Assche <bvanassche@google.com>
scsi: ufs: core: Stop clearing UNIT ATTENTIONS
Bean Huo <beanhuo@micron.com>
scsi: ufs: core: Fix ufshcd_probe_hba() prototype to match the definition
Claudiu Beznea <claudiu.beznea@microchip.com>
power: reset: at91-reset: check properly the return value of devm_of_iomap
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: debugfs: use controller id and link_id for debugfs
Takashi Iwai <tiwai@suse.de>
ALSA: usb-audio: Fix possible race at sync of urb completions
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Use position buffer for SKL+ again
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
David Stevens <stevensd@chromium.org>
iommu/dma: Fix arch_sync_dma for map
David Stevens <stevensd@chromium.org>
iommu/dma: Fix sync_sg with swiotlb
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
Arnd Bergmann <arnd@arndb.de>
iommu/mediatek: Fix out-of-range warning with clang
Geert Uytterhoeven <geert+renesas@glider.be>
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
Yassine Oudjana <y.oudjana@protonmail.com>
ASoC: wcd9335: Use correct version to initialize Class H
Biju Das <biju.das.jz@bp.renesas.com>
pinctrl: renesas: rzg2l: Fix missing port register 21h
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Kuogee Hsieh <khsieh@codeaurora.org>
arm64: dts: qcom: sc7280: fix display port phy reg property
Naina Mehta <nainmeht@codeaurora.org>
soc: qcom: llcc: Disable MMUHWT retention
Douglas Anderson <dianders@chromium.org>
arm64: dts: qcom: sc7180: Base dynamic CPU power coefficients in reality
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Tony Lindgren <tony@atomide.com>
bus: ti-sysc: Fix timekeeping_suspended warning on resume
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-sm1: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie node
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Marijn Suijten <marijn.suijten@somainline.org>
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Fix NVMe I/O failover to non-optimized path
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: edif: Use link event to wake up app
Ajish Koshy <Ajish.Koshy@microchip.com>
scsi: pm80xx: Fix lockup in outbound queue management
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
Rafał Miłecki <rafal@milecki.pl>
arm64: dts: broadcom: bcm4908: Fix UART clock name
Rafał Miłecki <rafal@milecki.pl>
ARM: dts: BCM5301X: Fix memory nodes names
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Alexandru Ardelean <aardelean@deviqon.com>
iio: st_sensors: disable regulators after device unregistration
Dongjin Kim <tobetter@gmail.com>
arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
Pavel Skripkin <paskripkin@gmail.com>
staging: r8188eu: fix memory leak in rtw_set_key
Hector.Yuan <hector.yuan@mediatek.com>
cpufreq: Fix parameter in parse_perf_domain()
Frank Rowand <frank.rowand@sony.com>
of: unittest: fix EXPECT text for gpio hog errors
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
Dan Schatzberg <schatzberg.dan@gmail.com>
cgroup: Fix rootcg cpu.stat guest double counting
Liu Jian <liujian56@huawei.com>
skmsg: Lose offset info in sk_psock_skb_ingress
Geliang Tang <geliang.tang@suse.com>
selftests: mptcp: fix proto type in link_failure tests
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: delay complete()
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: don't stop queue in xmit
Jakub Kicinski <kuba@kernel.org>
udp6: allow SO_MARK ctrl msg to affect routing
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Nikolay Aleksandrov <nikolay@nvidia.com>
selftests: net: bridge: update IGMP/MLD membership interval value
Ivan Vecera <ivecera@redhat.com>
net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Yinjun Zhang <yinjun.zhang@corigine.com>
nfp: fix potential deadlock when canceling dim work
Yinjun Zhang <yinjun.zhang@corigine.com>
nfp: fix NULL pointer access when scheduling dim work
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ipmi: kcs_bmc: Fix a memory leak in the error handling path of 'kcs_bmc_serio_add_device()'
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Xin Long <lucien.xin@gmail.com>
sctp: return true only for pathmtu update in sctp_transport_pl_toobig
Xin Long <lucien.xin@gmail.com>
sctp: subtract sctphdr len in sctp_transport_pl_hlen
Xin Long <lucien.xin@gmail.com>
sctp: reset probe_timer in sctp_transport_pl_update
Xin Long <lucien.xin@gmail.com>
sctp: allow IP fragmentation when PLPMTUD enters Error state
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix memory leak in test_ima
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix fd cleanup in sk_lookup test
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Lang Yu <lang.yu@amd.com>
drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw()
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Channel list update before hardware scan
Eric Dumazet <edumazet@google.com>
bpf: Fixes possible race in update_prog_stats() for 32bit arches
Eric Dumazet <edumazet@google.com>
bpf: Avoid races in __bpf_prog_run() for 32bit arches
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix discarded frames due to wrong sequence number
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Peter Zijlstra <peterz@infradead.org>
x86: Fix __get_wchan() for !STACKTRACE
Kees Cook <keescook@chromium.org>
sched: Add wrapper for get_wchan() to keep task blocked
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
spi: spi-rpc-if: Check return value of rpcif_sw_init()
Zhang Rui <rui.zhang@intel.com>
cpufreq: intel_pstate: Fix cpu->pstate.turbo_freq initialization
Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
tracing: Fix missing trace_boot_init_histograms kstrdup NULL checks
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Ilya Leoshkevich <iii@linux.ibm.com>
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
Mark Brown <broonie@kernel.org>
tpm_tis_spi: Add missing SPI ID
Hao Wu <hao.wu@rubrik.com>
tpm: fix Atmel TPM crash caused by too frequent queries
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix off-by-one bug in bpf_core_apply_relo()
Yu Kuai <yukuai3@huawei.com>
blk-cgroup: synchronize blkg creation against policy deactivation
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: more blk-mq refactoring fixes
Abinaya Kalaiselvan <akalaise@codeaurora.org>
ath10k: fix module load regression with iram-recovery feature
Arnd Bergmann <arnd@arndb.de>
ARM: 9142/1: kasan: work around LPAE build warning
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid double free of sida page
David Hildenbrand <david@redhat.com>
s390/uv: fully validate the VMA before calling follow_page()
David Hildenbrand <david@redhat.com>
s390/mm: fix VMA and page table handling code in storage key handling functions
David Hildenbrand <david@redhat.com>
s390/mm: validate VMA in PGSTE manipulation functions
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
David Hildenbrand <david@redhat.com>
s390/gmap: validate VMA in __gmap_zap()
Nick Hainke <vincent@systemli.org>
mt76: mt7615: mt7622: fix ibss and meshpoint
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF header parsing checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix overflow in BTF sanity checks
Quentin Monnet <quentin@isovalent.com>
bpftool: Avoid leaking the JSON writer prepared for program metadata
Mauricio Vásquez <mauricio@kinvolk.io>
libbpf: Fix memory leak in btf__dedup()
Jim Mattson <jmattson@google.com>
KVM: selftests: Fix nested SVM tests when built with clang
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Horia Geantă <horia.geanta@nxp.com>
crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm/dsi: fix wrong type in msm_dsi_host
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Joerg Roedel <jroedel@suse.de>
x86/sev: Fix stack type check in vc_switch_off_ist()
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Ye Bin <yebin10@huawei.com>
nbd: Fix use-after-free in pid_show
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Tim Gardner <tim.gardner@canonical.com>
net: enetc: unmap DMA in enetc_send_cmd()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pnvm: read EFI data only if long enough
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pnvm: don't kmemdup() more than we have
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: reset PM state on unsuccessful resume
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix sta_rec_wtbl tag len
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: connac: fix possible NULL pointer dereference in mt76_connac_get_phy_mode_v2
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7615: fix monitor mode tear down crash
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix retrying release semaphore without end
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix possible infinite loop release semaphore
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7615: fix hwmon temp sensor mem use-after-free
Ben Greear <greearb@candelatech.com>
mt76: mt7915: fix hwmon temp sensor mem use-after-free
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: always wake device if necessary in debugfs
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: fix firmware usage of RA info using legacy rates
Sean Wang <sean.wang@mediatek.com>
mt76: mt7921: report HE MU radiotap
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: overwrite default reg_ops if necessary
Leon Yen <Leon.Yen@mediatek.com>
mt76: connac: fix GTK rekey offload failure on WPA mixed mode
Deren Wu <deren.wu@mediatek.com>
mt76: mt7921: fix dma hang in rmmod
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix bit fields for HT rate idx
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix potential overflow of eeprom page index
Deren Wu <deren.wu@mediatek.com>
mt76: mt7921: Fix out of order process by invalid event pkt
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix survey-dump reporting
Sean Wang <sean.wang@mediatek.com>
mt76: fix build error implicit enumeration conversion
Leon Yen <Leon.Yen@mediatek.com>
mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
Dan Carpenter <dan.carpenter@oracle.com>
mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix endianness warning in mt7921_update_txs
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event
Lang Yu <lang.yu@amd.com>
drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Fix sharing of wakeup power resources
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: PM: Turn off unused wakeup power resources
Fei Shao <fshao@chromium.org>
mailbox: mtk-cmdq: Fix local clock ID usage
Fei Shao <fshao@chromium.org>
mailbox: mtk-cmdq: Validate alias_id on probe
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Andrea Righi <andrea.righi@canonical.com>
blk-wbt: prevent NULL pointer dereference in wb_timer_fn
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: fix breakage introduced at blk-mq refactoring
Bixuan Cui <cuibixuan@huawei.com>
io-wq: Remove duplicate code in io_workqueue_create()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Sean Young <sean@mess.org>
media: ir_toy: assignment to be16 should be of correct type
Randy Dunlap <rdunlap@infradead.org>
media: ivtv: fix build for UML
jason-jh.lin <jason-jh.lin@mediatek.com>
mailbox: Remove WARN_ON for async_cb.cb in cmdq_exec_done
Jackie Liu <liuyun01@kylinos.cn>
thermal/drivers/qcom/lmh: make QCOM_LMH depends on QCOM_SCM
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: fix potential NULL dereference in cleanup
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: unlock on error in get_sched_entity()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: potential error pointer dereference in init()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init()
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/msm/dsi: do not enable irq handler before powering up the host
Ziyang Xuan <william.xuanziyang@huawei.com>
thermal/core: fix a UAF bug in __thermal_cooling_device_register()
Ovidiu Panait <ovidiu.panait@windriver.com>
crypto: octeontx2 - set assoclen in aead_do_fallback()
Eric Dumazet <edumazet@google.com>
tcp: switch orphan_count to bare per-cpu counters
Qi Zheng <zhengqi.arch@bytedance.com>
x86: Fix get_wchan() to support the ORC unwinder
Randy Dunlap <rdunlap@infradead.org>
net: tulip: winbond-840: fix build for UML
Randy Dunlap <rdunlap@infradead.org>
net: intel: igc_ptp: fix build for UML
Randy Dunlap <rdunlap@infradead.org>
net: fealnx: fix build for UML
Zhang Qiao <zhangqiao22@huawei.com>
kernel/sched: Fix sched_fork() access an invalid sched_task_group
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix context restore
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Catherine Sullivan <csully@google.com>
gve: Track RX buffer allocation failures
John Fraker <jfraker@google.com>
gve: Recover from queue stall due to missed IRQ
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
liqiong <liqiong@nfschina.com>
ima: fix deadlock when traversing "ima_default_rules".
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Arnd Bergmann <arnd@arndb.de>
crypto: ccree - avoid out-of-range warnings from clang
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Mansur Alisha Shaik <mansur@codeaurora.org>
media: venus: fix vpp frequency calculation for decoder
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_dynset: relax superfluous check on set updates
Peter Zijlstra <peterz@infradead.org>
rcu: Fix rcu_dynticks_curr_cpu_in_eqs() vs noinstr
Peter Zijlstra <peterz@infradead.org>
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
Yazen Ghannam <yazen.ghannam@amd.com>
EDAC/amd64: Handle three rank interleaving mode
Borislav Petkov <bp@suse.de>
x86/insn: Use get_unaligned() instead of memcpy()
Vincent Donnefort <vincent.donnefort@arm.com>
PM: EM: Fix inefficient states detection
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Stephen Boyd <swboyd@chromium.org>
ath10k: Don't always treat modem stop events as crashes
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Arnd Bergmann <arnd@arndb.de>
drm: fb_helper: fix CONFIG_FB dependency
Arnd Bergmann <arnd@arndb.de>
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
Punit Agrawal <punitagrawal@gmail.com>
kprobes: Do not use local variable when creating debugfs file
Yee Lee <yee.lee@mediatek.com>
scs: Release kasan vmalloc poison in scs_free process
Eugen Hristev <eugen.hristev@microchip.com>
media: atmel: fix the ispck initialization
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: tm6000: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: radio-wl1273: Avoid card name truncation
Ondrej Jirman <megous@megous.com>
media: sun6i-csi: Allow the video device to be open multiple times
Randy Dunlap <rdunlap@infradead.org>
media: i2c: ths8200 needs V4L2_ASYNC
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Tom Rix <trix@redhat.com>
media: TDA1997x: handle short reads of hdmi info frame.
Dafna Hirschfeld <dafna.hirschfeld@collabora.com>
media: mtk-vcodec: venc: fix return value when start_streaming fails
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: S_CTRL output the right value
Sakari Ailus <sakari.ailus@linux.intel.com>
media: imx258: Fix getting clock frequency
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Evgeny Novikov <novikov@ispras.ru>
media: ttusb-dec: avoid release of non-acquired mutex
Colin Ian King <colin.king@canonical.com>
media: cxd2880-spi: Fix a null pointer dereference on error handling path
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: meson-ge2d: Fix rotation parameter changes detection in 'ge2d_s_ctrl()'
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Kumar Kartikeya Dwivedi <memxor@gmail.com>
libbpf: Fix skel_internal.h to set errno on loader retval < 0
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Sudarshan Rajagopalan <quic_sudaraja@quicinc.com>
arm64: mm: update max_pfn after memory hotplug
Matthew Auld <matthew.auld@intel.com>
drm/ttm: stop calling tt_swapin in vm_access
Fabio Estevam <festevam@denx.de>
ath10k: sdio: Add missing BH locking around napi_schdule()
Loic Poulain <loic.poulain@linaro.org>
ath10k: Fix missing frame timestamp for beacon/probe-resp
Arnd Bergmann <arnd@arndb.de>
gve: DQO: avoid unused variable warnings
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
Pradeep Kumar Chitrapu <pradeepc@codeaurora.org>
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid race during regd updates
Dan Carpenter <dan.carpenter@oracle.com>
ath11k: fix some sleeping in atomic bugs
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix error in tail call limit tests
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366: Fix a bug in deleting VLANs
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Leon Romanovsky <leon@kernel.org>
net/mlx5: Accept devlink user input after driver initialization complete
Johannes Berg <johannes.berg@intel.com>
cfg80211: always free wiphy specific regdomain
Johannes Berg <johannes.berg@intel.com>
mac80211: twt: don't use potentially unaligned pointer
Kees Cook <keescook@chromium.org>
fortify: Fix dropped strcpy() compile-time write overflow check
Florian Westphal <fw@strlen.de>
mptcp: do not shrink snd_nxt when recovering
Jiasheng Jiang <jiasheng@iscas.ac.cn>
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Leon Romanovsky <leon@kernel.org>
qed: Don't ignore devlink allocation failures
Leon Romanovsky <leon@kernel.org>
bnxt_en: Check devlink allocation and registration status
Hans de Goede <hdegoede@redhat.com>
Bluetooth: hci_h5: Fix (runtime)suspend issues on RTL8723BS HCIs
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - power up 4xxx device
Michael Walle <michael@walle.cc>
crypto: caam - disable pkc for non-E SoCs
Guchun Chen <guchun.chen@amd.com>
drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage
Harry Wentland <harry.wentland@amd.com>
drm/amd/display: Pass display_pipe_params_st as const in DML
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix crash on device remove/driver unload
Dinghao Liu <dinghao.liu@zju.edu.cn>
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Ajay Singh <ajay.kathat@microchip.com>
wilc1000: fix possible memory leak in cfg_scan_result()
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
wcn36xx: Fix Antenna Diversity Switching
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Yoshitaka Ikeda <ikeda@nskint.co.jp>
spi: Fixed division by zero warning
Alex Bee <knaerzche@gmail.com>
drm: bridge: it66121: Fix return value it66121_probe
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: don't call netif_carrier_off() with NULL netdev
Yajun Deng <yajun.deng@linux.dev>
net: net_namespace: Fix undefined member in key_remove_domain()
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
lockdep: Let lock_is_held_type() detect recursive read as read
liuyuntao <liuyuntao10@huawei.com>
virtio-gpu: fix possible memory allocation failure
Nathan Chancellor <nathan@kernel.org>
crypto: sm4 - Do not change section of ck and sbox
Iago Toral Quiroga <itoral@igalia.com>
drm/v3d: fix wait for TMU write combiner flush
Leon Romanovsky <leon@kernel.org>
net/mlx5: Publish and unpublish all devlink parameters at once
Peter Zijlstra <peterz@infradead.org>
objtool: Handle __sanitize_cov*() tail calls
Peter Zijlstra <peterz@infradead.org>
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: fix burst length for DEU
Neeraj Upadhyay <neeraju@codeaurora.org>
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: hci_uart: fix GPF in h5_recv
Toke Høiland-Jørgensen <toke@redhat.com>
libbpf: Don't crash on object files with no symbol tables
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Paul Cercueil <paul@crapouillou.net>
drm/bridge: it66121: Wait for next bridge to be probed
Paul Cercueil <paul@crapouillou.net>
drm/bridge: it66121: Initialize {device,vendor}_ids
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR M2PCIE event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel SPR CHA event constraints
Robert Foss <robert.foss@linaro.org>
drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
Imre Deak <imre.deak@intel.com>
fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix strobemeta selftest regression
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: don't trigger WARN() when decompression fails
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Stephane Eranian <eranian@google.com>
perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
Shuah Khan <skhan@linuxfoundation.org>
selftests/core: fix conflicting types compile error for close_range()
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Eric Dumazet <edumazet@google.com>
inet: remove races in inet{6}_getname()
王贇 <yun.wang@linux.alibaba.com>
ftrace: do CPU checking after preemption disabled
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
Revert "wcn36xx: Enable firmware link monitoring"
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix packet drop on resume
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Correct band/freq reporting on RX
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Josef Bacik <josef@toxicpanda.com>
btrfs: do not take the uuid_mutex in btrfs_rm_device
Sidong Yang <realwakka@gmail.com>
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: flush switchdev workqueue when leaving the bridge
Hui Wang <hui.wang@canonical.com>
ACPI: resources: Add one more Medion model in IRQ override quirk
Stefan Schaeckeler <schaecsn@gmx.net>
ACPI: AC: Quirk GK45 to skip reading _PSR
Eric Dumazet <edumazet@google.com>
net: annotate data-race in neigh_output()
Florian Westphal <fw@strlen.de>
vrf: run conntrack only in context of lower/physdev for locally generated packets
Viktor Rosendahl <Viktor.Rosendahl@bmw.de>
tools/latency-collector: Use correct size when writing queue_full_warning
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Fix glock_hash_walk bugs
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Cancel remote delete work asynchronously
Marc Kleine-Budde <mkl@pengutronix.de>
can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to unsigned int
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: lantiq_gswip: serialize access to the PCE table
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Jiri Olsa <jolsa@redhat.com>
selftests/bpf: Fix perf_buffer test on system with offline cpus
Shuah Khan <skhan@linuxfoundation.org>
selftests: kvm: fix mismatched fclose() after popen()
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Nick Desaulniers <ndesaulniers@google.com>
arm64: vdso32: suppress error message for 'make mrproper'
David Yang <davidcomponentone@gmail.com>
samples/bpf: Fix application of sizeof to pointer
Hannes Reinecke <hare@suse.de>
nvme: drop scan_lock and always kick requeue list when removing namespaces
Israel Rukshin <israelr@nvidia.com>
nvmet-tcp: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet-rdma: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet: fix use-after-free when a port is removed
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
Michael Tretter <m.tretter@pengutronix.de>
media: allegro: ignore interrupt if mailbox is not initialized
Jens Axboe <axboe@kernel.dk>
block: remove inaccurate requeue check
Yaara Baruch <yaara.baruch@intel.com>
iwlwifi: change all JnP to NO-160 configuration
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7915: fix an off-by-one bound check
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Yanfei Xu <yanfei.xu@windriver.com>
locking/rwsem: Disable preemption for spinning region
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Xiao Ni <xni@redhat.com>
md: update superblock after changing rdev flags in state_store
Luis Chamberlain <mcgrof@kernel.org>
floppy: fix calling platform_device_unregister() on invalid drives
Jens Axboe <axboe@kernel.dk>
block: bump max plugged deferred size from 16 to 32
Ansuel Smith <ansuelsmth@gmail.com>
thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
Tim Gardner <tim.gardner@canonical.com>
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
Yuanzheng Song <songyuanzheng@huawei.com>
thermal/core: Fix null pointer dereference in thermal_release()
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
net: phy: micrel: make *-skew-ps check more lenient
Yifan Zhang <yifan1.zhang@amd.com>
drm/amdkfd: fix resume error when iommu disabled in Picasso
Aurabindo Pillai <aurabindo.pillai@amd.com>
drm/amd/display: fix null pointer deref when plugging in display
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: scan: Release PM resources blocked by unused objects
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Andreas Gruenbacher <agruenba@redhat.com>
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
Xin Xiong <xiongx18@fudan.edu.cn>
mmc: moxart: Fix reference count leaks in moxart_probe
Will Deacon <will@kernel.org>
KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracing: Disable "other" permission bits in the tracefs files
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Alex Sierra <alex.sierra@amd.com>
drm/amdkfd: rm BO resv on validation to avoid deadlock
Antoine Tenart <atenart@kernel.org>
net-sysfs: try not to restart the syscall if it will fail eventually
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: imgu_fmt: Handle properly try
Mirela Rabulea <mirela.rabulea@nxp.com>
media: imx-jpeg: Fix possible null pointer dereference
Wojciech Drewek <wojciech.drewek@intel.com>
ice: Move devlink port to PF/VF struct
Vincent Donnefort <vincent.donnefort@arm.com>
cpufreq: Make policy min/max hard requirements
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Li Zhijian <lizhijian@cn.fujitsu.com>
kselftests/sched: cleanup the child processes
Josh Don <joshdon@google.com>
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
Corey Minyard <cminyard@mvista.com>
ipmi: Disable some operations during a panic
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Hans de Goede <hdegoede@redhat.com>
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Zong-Zhe Yang <kevin_yang@realtek.com>
rtw88: fix RX clock gate setting while fifo dump
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Niklas Söderlund <niklas.soderlund+renesas@ragnatech.se>
media: rcar-vin: Use user provided buffers when starting
Martin Kepplinger <martink@posteo.de>
media: imx: set a media_device bus_info string
Sergey Senozhatsky <senozhatsky@chromium.org>
media: videobuf2: rework vb2_mem_ops API
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Evgeny Novikov <novikov@ispras.ru>
media: vidtv: Fix memory leak in remove
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set unique vdev name based in type
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Dmitriy Ulitin <ulitin@ispras.ru>
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Evgeny Novikov <novikov@ispras.ru>
media: atomisp: Fix error handling in probe
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Rakesh Babu <rsaladi2@marvell.com>
octeontx2-pf: Enable promisc/allmulti match MCAM entries.
Alagu Sankar <alagusankar@silex-india.com>
ath10k: high latency fixes for beacon buffer
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
Wen Gong <wgong@codeaurora.org>
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid reg rules update during firmware recovery
Johannes Berg <johannes.berg@intel.com>
leds: trigger: use RCU to protect the led_cdevs list
Petr Machata <petrm@nvidia.com>
selftests: net: fib_nexthops: Wait before checking reported idle time
Herbert Xu <herbert@gondor.apana.org.au>
crypto: api - Fix built-in testing dependency failures
Jimmy Kizito <Jimmy.Kizito@amd.com>
drm/amd/display: Fix null pointer dereference for encoders
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix MMIO access page fault
Eric Biggers <ebiggers@google.com>
fscrypt: allow 256-bit master keys with AES-256-XTS
Mark Brown <broonie@kernel.org>
spi: Check we have a spi_device_id for each DT compatible
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Peter Zijlstra <peterz@infradead.org>
x86/mm/64: Improve stack overflow warnings
Shreyansh Chouhan <chouhan.shreyansh630@gmail.com>
crypto: aesni - check walk.nbytes instead of err
Seevalamuthu Mariappan <seevalam@codeaurora.org>
ath11k: Align bss_chan_info structure with firmware
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Paul E. McKenney <paulmck@kernel.org>
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
Hui Wang <hui.wang@canonical.com>
ACPI: resources: Add DMI-based legacy IRQ override quirk
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
James Zhu <James.Zhu@amd.com>
drm/amdgpu: move iommu_resume before ip init/resume
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Scott Wood <swood@redhat.com>
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
Simon Ser <contact@emersion.fr>
drm/panel-orientation-quirks: add Valve Steam Deck
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: call sock_hold earlier in sco_conn_del
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
Charan Teja Reddy <charante@codeaurora.org>
dma-buf: WARN on dmabuf release with pending attachments
Kai Vehmanen <kai.vehmanen@linux.intel.com>
component: do not leave master devres group open after bind
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Clear status bits in interrupt handler
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Johan Hovold <johan@kernel.org>
most: fix control-message timeouts
Johan Hovold <johan@kernel.org>
Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
Pali Rohár <pali@kernel.org>
serial: 8250: Fix reporting real baudrate value in c_ospeed field
Jens Axboe <axboe@kernel.dk>
io-wq: serialize hash clear with wakeup
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION
Johan Hovold <johan@kernel.org>
serial: 8250: fix racy uartclk update
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Mihail Chindris <mihail.chindris@analog.com>
Documentation:devicetree:bindings:iio:dac: Fix val
Nuno Sá <nuno.sa@analog.com>
iio: ad5770r: make devicetree property reading consistent
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Mihail Chindris <mihail.chindris@analog.com>
drivers: iio: dac: ad5766: Fix dt property name
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
Yang Yingliang <yangyingliang@huawei.com>
iio: buffer: check return value of kstrdup_const()
Suzuki K Poulose <suzuki.poulose@arm.com>
coresight: trbe: Defer the probe on offline CPUs
Suzuki K Poulose <suzuki.poulose@arm.com>
coresight: trbe: Fix incorrect access of the sink specific data
Tao Zhang <quic_taozha@quicinc.com>
coresight: cti: Correct the parameter for pm_runtime_put
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Robert Marko <robert.marko@sartura.hr>
mfd: simple-mfd-i2c: Select MFD_CORE to fix build error
Paulo Alcantara <pc@cjr.nz>
cifs: set a minimum of 120s for next dns resolution
Shyam Prasad N <sprasad@microsoft.com>
cifs: To match file servers, make sure the server hostname matches
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix configuring Reference clock
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix reporting Data Link Layer Link Active
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix checking for link up via LTSSM state
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Dan Williams <dan.j.williams@intel.com>
cxl/pci: Fix NULL vs ERR_PTR confusion
Li Chen <lchen@ambarella.com>
PCI: cadence: Add cdns_plat_pcie_probe() missing return
Marek Behún <kabel@kernel.org>
PCI: pci-bridge-emul: Fix emulation of W1C bits
Miklos Szeredi <mszeredi@redhat.com>
ovl: fix filattr copy-up failure
yangerkun <yangerkun@huawei.com>
ovl: fix use after free in struct ovl_aio_req
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Arnd Bergmann <arnd@arndb.de>
ifb: fix building without CONFIG_NET_CLS_ACT
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Steven Rostedt (VMware) <rostedt@goodmis.org>
ring-buffer: Protect ring_buffer_reset() from reentrancy
Pavel Begunkov <asml.silence@gmail.com>
io_uring: honour zeroes as io-wq worker limits
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Oleksij Rempel <linux@rempel-privat.de>
iio: adc: tsc2046: fix scan interval warning
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_irq(): add missing can_rx_offload_threaded_irq_finish() in case of bus off
Stephane Grosjean <s.grosjean@peak-system.com>
can: peak_usb: always ask for BERR reporting for PCAN-USB devices
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Handle dynamic MSR intercept toggling
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Sean Christopherson <seanjc@google.com>
KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
David Woodhouse <dwmw2@infradead.org>
KVM: x86: Fix recording of guest steal time / preempted status
Mark Rutland <mark.rutland@arm.com>
KVM: arm64: Extract ESR_ELx.EC only
Yang Yingliang <yangyingliang@huawei.com>
iio: core: check return value when calling dev_set_name()
Yang Yingliang <yangyingliang@huawei.com>
iio: core: fix double free in iio_device_unregister_sysfs()
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Eugene Syromiatnikov <esyr@redhat.com>
mctp: handle the struct sockaddr_mctp padding fields
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: use the combined functions to protect critical zone
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
David Virag <virag.david003@gmail.com>
soc: samsung: exynos-pmu: Fix compilation when nothing selects CONFIG_MFD_CORE
Eric W. Biederman <ebiederm@xmission.com>
signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Wolfram Sang <wsa+renesas@sang-engineering.com>
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Dmitry Osipenko <digetx@gmail.com>
ASoC: tegra: Restore AC97 support
Dmitry Osipenko <digetx@gmail.com>
ASoC: tegra: Set default card name for Trimslice
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix invalid unit check
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Christian König <christian.koenig@amd.com>
dma-buf: fix and rework dma_buf_poll v7
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Try waking the firmware until we get an interrupt
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix (QoS) null data frame bitrate/modulation
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix tx_status mechanism
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Maximilian Luz <luzmaximilian@gmail.com>
HID: surface-hid: Allow driver matching for target ID 1 devices
Maximilian Luz <luzmaximilian@gmail.com>
HID: surface-hid: Use correct event registry for managing HID events
Felix Fietkau <nbd@nbd.name>
mt76: mt7615: fix skb use-after-free on mac reset
Maximilian Luz <luzmaximilian@gmail.com>
platform/surface: aggregator_registry: Add support for Surface Laptop Studio
Lukas Wunner <lukas@wunner.de>
ifb: Depend on netfilter alternatively to tc
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Guoqing Jiang <guoqing.jiang@linux.dev>
md/raid1: only allocate write behind bio for WriteMostly device
Corey Minyard <cminyard@mvista.com>
ipmi:watchdog: Set panic count to proper value on a panic
Ondrej Mosnacek <omosnace@redhat.com>
selinux: fix race condition when computing ocontext SIDs
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Laurent Vivier <lvivier@redhat.com>
KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
Andreas Gruenbacher <agruenba@redhat.com>
powerpc/kvm: Fix kvm_use_magic_page
Sean Christopherson <seanjc@google.com>
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
Sean Christopherson <seanjc@google.com>
KVM: x86/mmu: Drop a redundant, broken remote TLB flush
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
Peter Zijlstra <peterz@infradead.org>
x86/iopl: Fake iopl(3) CLI/STI usage
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix page stealing
yangerkun <yangerkun@huawei.com>
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
yangerkun <yangerkun@huawei.com>
ext4: ensure enough credits in ext4_ext_shift_path_extents
Shaoying Xu <shaoyi@amazon.com>
ext4: fix lazy initialization next schedule time computation in more granular unit
Eric Whitney <enwlinux@gmail.com>
Revert "ext4: enforce buffer head state assertion in ext4_da_map_blocks"
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Takashi Iwai <tiwai@suse.de>
ALSA: PCM: Fix NULL dereference at mmap checks
Takashi Iwai <tiwai@suse.de>
ALSA: pci: rme: Fix unaligned buffer addresses
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Free card instance properly at probe errors
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Jason Ormes <skryking@gmail.com>
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Kai-Heng Feng <kai.heng.feng@canonical.com>
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add quirk for ASUS UX550VE
Jaroslav Kysela <perex@perex.cz>
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jeremy Soller <jeremy@system76.com>
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
Johnathon Clark <john.clark@cantab.net>
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: Fix check_ext_ctrls
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Support dynamic resolution changes
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Do not override sizeimage for output format
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Helge Deller <deller@gmx.de>
parisc: Fix set_fixmap() on PA1.x CPUs
Pavel Begunkov <asml.silence@gmail.com>
io-wq: remove worker to owner tw dependency
Sungjong Seo <sj1557.seo@samsung.com>
exfat: fix incorrect loading of i_blocks for large files
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Derong Liu <derong.liu@mediatek.com>
mmc: mtk-sd: Add wait dma stop done flow
Ziyang Xuan <william.xuanziyang@huawei.com>
char: xillybus: fix msg_ep UAF in xillyusb_probe()
Ben Skeggs <bskeggs@redhat.com>
ce/gf100: fix incorrect CE0 address calculation on some GPUs
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix use after free in eh_abort path
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix crash in NVMe abort path
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
James Smart <jsmart2021@gmail.com>
scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
Ewan D. Milne <emilne@redhat.com>
scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: scsi_ioctl: Validate command size
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Johan Hovold <johan@kernel.org>
Input: iforce - fix control-message timeout
Nehal Bakulchandra Shah <Nehal-Bakulchandra.shah@amd.com>
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 +
.../devicetree/bindings/iio/dac/adi,ad5766.yaml | 2 +-
.../bindings/regulator/samsung,s5m8767.txt | 23 +-
Documentation/filesystems/fscrypt.rst | 10 +-
Makefile | 4 +-
arch/alpha/include/asm/processor.h | 2 +-
arch/alpha/kernel/process.c | 5 +-
arch/arc/include/asm/processor.h | 2 +-
arch/arc/kernel/stacktrace.c | 4 +-
arch/arm/Makefile | 22 +-
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/bcm4708-netgear-r6250.dts | 2 +-
arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts | 2 +-
arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts | 2 +-
arch/arm/boot/dts/bcm4709-linksys-ea9200.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r7000.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r8000.dts | 2 +-
arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts | 2 +-
arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts | 2 +-
arch/arm/boot/dts/bcm53016-meraki-mr32.dts | 2 +-
arch/arm/boot/dts/bcm94708.dts | 2 +-
arch/arm/boot/dts/bcm94709.dts | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/qcom-msm8974.dtsi | 4 +-
arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 8 +-
arch/arm/boot/dts/stm32mp151.dtsi | 16 +-
arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi | 2 +-
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 2 +-
arch/arm/include/asm/processor.h | 2 +-
arch/arm/kernel/process.c | 4 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mach-s3c/irq-s3c24xx.c | 22 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/kasan_init.c | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2 +-
.../boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi | 4 +-
.../boot/dts/amlogic/meson-g12b-odroid-n2.dtsi | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi | 4 +-
.../boot/dts/amlogic/meson-sm1-bananapi-m5.dts | 2 +-
.../boot/dts/amlogic/meson-sm1-khadas-vim3l.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-sm1-odroid.dtsi | 6 +-
arch/arm64/boot/dts/amlogic/meson-sm1-sei610.dts | 2 +-
arch/arm64/boot/dts/broadcom/bcm4908/bcm4908.dtsi | 2 +-
arch/arm64/boot/dts/qcom/msm8916.dtsi | 8 +-
arch/arm64/boot/dts/qcom/pm8916.dtsi | 1 -
arch/arm64/boot/dts/qcom/pmi8994.dtsi | 2 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-coachz.dtsi | 2 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-pompom.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sc7180.dtsi | 52 ++---
arch/arm64/boot/dts/qcom/sc7280.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sdm845.dtsi | 6 +-
.../arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 1 +
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
arch/arm64/boot/dts/ti/k3-j7200-main.dtsi | 6 +-
arch/arm64/boot/dts/ti/k3-j721e-main.dtsi | 16 +-
arch/arm64/include/asm/esr.h | 1 +
arch/arm64/include/asm/pgtable.h | 12 +-
arch/arm64/include/asm/processor.h | 2 +-
arch/arm64/kernel/cpufeature.c | 10 +-
arch/arm64/kernel/process.c | 4 +-
arch/arm64/kernel/vdso32/Makefile | 3 +-
arch/arm64/kvm/arm.c | 30 ++-
arch/arm64/kvm/hyp/hyp-entry.S | 2 +-
arch/arm64/kvm/hyp/nvhe/host.S | 2 +-
arch/arm64/mm/mmu.c | 5 +
arch/csky/include/asm/processor.h | 2 +-
arch/csky/kernel/stacktrace.c | 5 +-
arch/h8300/include/asm/processor.h | 2 +-
arch/h8300/kernel/process.c | 5 +-
arch/hexagon/include/asm/processor.h | 2 +-
arch/hexagon/kernel/process.c | 4 +-
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/include/asm/processor.h | 2 +-
arch/ia64/kernel/kprobes.c | 9 +-
arch/ia64/kernel/process.c | 5 +-
arch/m68k/Kconfig.machine | 1 +
arch/m68k/include/asm/processor.h | 2 +-
arch/m68k/kernel/process.c | 4 +-
arch/microblaze/include/asm/processor.h | 2 +-
arch/microblaze/kernel/process.c | 2 +-
arch/mips/Kbuild.platforms | 2 +-
arch/mips/Kconfig | 1 +
arch/mips/Makefile | 2 +
arch/mips/include/asm/cmpxchg.h | 5 +-
arch/mips/include/asm/mips-cm.h | 12 +-
arch/mips/include/asm/processor.h | 2 +-
arch/mips/kernel/mips-cm.c | 21 +-
arch/mips/kernel/process.c | 8 +-
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 -
arch/mips/lantiq/xway/dma.c | 23 +-
arch/nds32/include/asm/processor.h | 2 +-
arch/nds32/kernel/process.c | 7 +-
arch/nios2/include/asm/processor.h | 2 +-
arch/nios2/kernel/process.c | 5 +-
arch/openrisc/include/asm/processor.h | 2 +-
arch/openrisc/kernel/dma.c | 4 +-
arch/openrisc/kernel/process.c | 2 +-
arch/openrisc/kernel/smp.c | 6 +-
arch/parisc/include/asm/pgtable.h | 10 +-
arch/parisc/include/asm/processor.h | 2 +-
arch/parisc/kernel/cache.c | 4 +-
arch/parisc/kernel/entry.S | 2 +-
arch/parisc/kernel/process.c | 5 +-
arch/parisc/kernel/smp.c | 19 +-
arch/parisc/kernel/unwind.c | 21 +-
arch/parisc/kernel/vmlinux.lds.S | 3 +-
arch/parisc/mm/fixmap.c | 5 +-
arch/parisc/mm/init.c | 4 +-
arch/powerpc/Kconfig | 6 +-
arch/powerpc/include/asm/nohash/32/pgtable.h | 19 +-
arch/powerpc/include/asm/nohash/32/pte-8xx.h | 22 ++
arch/powerpc/include/asm/nohash/64/pgtable.h | 5 -
arch/powerpc/include/asm/nohash/pte-book3e.h | 18 +-
arch/powerpc/include/asm/paravirt.h | 18 +-
arch/powerpc/include/asm/processor.h | 2 +-
arch/powerpc/kernel/firmware.c | 7 +-
arch/powerpc/kernel/head_booke.h | 15 +-
arch/powerpc/kernel/interrupt.c | 2 +-
arch/powerpc/kernel/kvm.c | 2 +-
arch/powerpc/kernel/process.c | 9 +-
arch/powerpc/kvm/book3s_hv.c | 30 ++-
arch/powerpc/kvm/booke.c | 16 +-
arch/powerpc/lib/feature-fixups.c | 11 +
arch/powerpc/mm/mem.c | 2 +-
arch/powerpc/mm/nohash/tlb_low_64e.S | 8 +-
arch/powerpc/mm/pgtable_32.c | 2 +-
arch/powerpc/net/bpf_jit_comp.c | 2 +-
arch/powerpc/perf/power10-events-list.h | 8 +-
arch/powerpc/perf/power10-pmu.c | 44 ++--
arch/powerpc/platforms/44x/fsp2.c | 2 +
arch/powerpc/platforms/85xx/Makefile | 4 +-
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 7 +-
arch/powerpc/platforms/85xx/smp.c | 12 +-
arch/powerpc/platforms/book3s/vas-api.c | 4 +-
arch/powerpc/platforms/powernv/opal-prd.c | 12 +-
arch/powerpc/platforms/pseries/mobility.c | 34 +++
arch/powerpc/xmon/xmon.c | 3 +-
arch/riscv/include/asm/processor.h | 2 +-
arch/riscv/kernel/stacktrace.c | 12 +-
arch/s390/include/asm/processor.h | 2 +-
arch/s390/kernel/perf_cpum_cf.c | 4 +-
arch/s390/kernel/process.c | 4 +-
arch/s390/kernel/uv.c | 2 +-
arch/s390/kvm/priv.c | 2 +
arch/s390/kvm/pv.c | 21 +-
arch/s390/mm/gmap.c | 11 +-
arch/s390/mm/pgtable.c | 70 ++++--
arch/sh/include/asm/processor_32.h | 2 +-
arch/sh/kernel/cpu/fpu.c | 10 +-
arch/sh/kernel/process_32.c | 5 +-
arch/sparc/boot/Makefile | 8 +-
arch/sparc/include/asm/processor_32.h | 2 +-
arch/sparc/include/asm/processor_64.h | 2 +-
arch/sparc/kernel/process_32.c | 5 +-
arch/sparc/kernel/process_64.c | 5 +-
arch/um/include/asm/processor-generic.h | 2 +-
arch/um/kernel/process.c | 5 +-
arch/x86/crypto/aesni-intel_glue.c | 2 +-
arch/x86/events/intel/core.c | 5 +-
arch/x86/events/intel/ds.c | 5 +-
arch/x86/events/intel/uncore_discovery.h | 2 +-
arch/x86/events/intel/uncore_snbep.c | 16 +-
arch/x86/hyperv/hv_init.c | 5 +-
arch/x86/include/asm/insn-eval.h | 1 +
arch/x86/include/asm/irq_stack.h | 37 ++-
arch/x86/include/asm/kvm_host.h | 2 +-
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/include/asm/processor.h | 3 +-
arch/x86/include/asm/stacktrace.h | 10 +
arch/x86/include/asm/traps.h | 6 +-
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 +++-
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/cpu/hygon.c | 2 +
arch/x86/kernel/cpu/mce/intel.c | 5 +-
arch/x86/kernel/dumpstack_64.c | 6 +
arch/x86/kernel/irq.c | 4 +-
arch/x86/kernel/process.c | 66 ++----
arch/x86/kernel/traps.c | 60 +++--
arch/x86/kvm/cpuid.c | 47 ++--
arch/x86/kvm/mmu/mmu.c | 6 +-
arch/x86/kvm/vmx/nested.c | 103 ++++----
arch/x86/kvm/vmx/vmx.c | 68 +-----
arch/x86/kvm/vmx/vmx.h | 63 +++++
arch/x86/kvm/x86.c | 108 ++++++---
arch/x86/lib/insn-eval.c | 2 +-
arch/x86/lib/insn.c | 5 +-
arch/x86/mm/fault.c | 20 +-
arch/x86/mm/mem_encrypt_identity.c | 9 +
arch/xtensa/include/asm/processor.h | 2 +-
arch/xtensa/kernel/process.c | 5 +-
block/blk-cgroup.c | 10 +
block/blk-mq.c | 5 +-
block/blk-wbt.c | 3 +
block/blk-zoned.c | 15 +-
block/blk.h | 6 +
block/genhd.c | 8 +-
block/ioctl.c | 24 +-
crypto/Kconfig | 2 +-
crypto/algapi.c | 73 ++++--
crypto/api.c | 52 ++++-
crypto/internal.h | 10 +
crypto/pcrypt.c | 12 +-
crypto/tcrypt.c | 5 +-
drivers/acpi/ac.c | 19 ++
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +-
drivers/acpi/acpica/hwxfsleep.c | 7 +
drivers/acpi/battery.c | 2 +-
drivers/acpi/glue.c | 25 ++
drivers/acpi/internal.h | 1 +
drivers/acpi/pmic/intel_pmic.c | 51 ++--
drivers/acpi/power.c | 86 +++----
drivers/acpi/resource.c | 56 ++++-
drivers/acpi/scan.c | 6 +
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 +
drivers/auxdisplay/ht16k33.c | 66 +++---
drivers/auxdisplay/img-ascii-lcd.c | 10 +
drivers/base/component.c | 5 +-
drivers/base/core.c | 4 +-
drivers/base/power/main.c | 93 +++++---
drivers/block/ataflop.c | 141 ++++++-----
drivers/block/floppy.c | 9 +-
drivers/block/nbd.c | 24 +-
drivers/block/zram/zram_drv.c | 2 +-
drivers/bluetooth/btmtkuart.c | 13 +-
drivers/bluetooth/hci_h5.c | 28 ++-
drivers/bus/ti-sysc.c | 65 +++++-
drivers/char/hw_random/mtk-rng.c | 9 +-
drivers/char/ipmi/ipmi_msghandler.c | 10 +-
drivers/char/ipmi/ipmi_watchdog.c | 25 +-
drivers/char/ipmi/kcs_bmc_serio.c | 4 +-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/char/tpm/tpm_tis_core.c | 26 ++-
drivers/char/tpm/tpm_tis_core.h | 4 +
drivers/char/tpm/tpm_tis_spi_main.c | 1 +
drivers/char/xillybus/xillyusb.c | 1 +
drivers/clk/at91/clk-master.c | 6 +-
drivers/clk/at91/clk-sam9x60-pll.c | 4 +-
drivers/clk/at91/pmc.c | 5 +
drivers/clk/mvebu/ap-cpu-clk.c | 14 +-
drivers/clocksource/Kconfig | 1 +
drivers/cpufreq/cpufreq.c | 7 +
drivers/cpufreq/intel_pstate.c | 35 ++-
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/caam/caampkc.c | 19 +-
drivers/crypto/caam/regs.h | 3 +
drivers/crypto/ccree/cc_driver.c | 3 +-
drivers/crypto/marvell/octeontx2/otx2_cptvf_algs.c | 1 +
drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.c | 31 +++
drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.h | 10 +
drivers/crypto/qat/qat_common/adf_accel_devices.h | 1 +
drivers/crypto/qat/qat_common/adf_init.c | 5 +
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 ++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +
drivers/crypto/s5p-sss.c | 2 +
drivers/cxl/pci.c | 2 +-
drivers/dma-buf/dma-buf.c | 153 ++++++------
drivers/dma/at_xdmac.c | 53 +++--
drivers/dma/bestcomm/ata.c | 2 +-
drivers/dma/bestcomm/bestcomm.c | 22 +-
drivers/dma/bestcomm/fec.c | 4 +-
drivers/dma/bestcomm/gen_bd.c | 4 +-
drivers/dma/dmaengine.h | 2 +-
drivers/dma/idxd/device.c | 3 +-
drivers/dma/idxd/dma.c | 5 +-
drivers/dma/idxd/init.c | 14 +-
drivers/dma/stm32-dma.c | 23 +-
drivers/dma/tegra210-adma.c | 2 +-
drivers/dma/ti/k3-udma.c | 32 ++-
drivers/edac/amd64_edac.c | 22 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci/psci_checker.c | 2 +-
drivers/firmware/qcom_scm.c | 2 +-
drivers/gpio/gpio-realtek-otto.c | 2 +-
drivers/gpu/drm/Kconfig | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 15 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 2 +-
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/uvd_v3_1.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v4_2.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v5_0.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v6_0.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v7_0.c | 32 +--
drivers/gpu/drm/amd/amdgpu/vce_v2_0.c | 19 +-
drivers/gpu/drm/amd/amdgpu/vce_v3_0.c | 28 +--
drivers/gpu/drm/amd/amdgpu/vce_v4_0.c | 44 ++--
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 8 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 17 +-
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 1 +
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 7 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 +-
drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c | 2 +-
.../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 2 +-
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 18 +-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3 +-
.../display/dc/dml/dcn20/display_rq_dlg_calc_20.c | 6 +-
.../display/dc/dml/dcn20/display_rq_dlg_calc_20.h | 4 +-
.../dc/dml/dcn20/display_rq_dlg_calc_20v2.c | 6 +-
.../dc/dml/dcn20/display_rq_dlg_calc_20v2.h | 4 +-
.../display/dc/dml/dcn21/display_rq_dlg_calc_21.c | 62 ++---
.../display/dc/dml/dcn21/display_rq_dlg_calc_21.h | 4 +-
.../display/dc/dml/dcn30/display_rq_dlg_calc_30.c | 72 +++---
.../display/dc/dml/dcn30/display_rq_dlg_calc_30.h | 4 +-
.../display/dc/dml/dcn31/display_rq_dlg_calc_31.c | 68 +++---
.../display/dc/dml/dcn31/display_rq_dlg_calc_31.h | 4 +-
.../gpu/drm/amd/display/dc/dml/display_mode_lib.h | 4 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu10_hwmgr.c | 8 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 10 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu8_hwmgr.c | 2 +
.../gpu/drm/amd/pm/powerplay/hwmgr/smu_helper.h | 13 ++
.../gpu/drm/amd/pm/powerplay/hwmgr/vega10_hwmgr.c | 12 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/vega12_hwmgr.c | 4 +
.../gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c | 14 +-
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 89 +++----
drivers/gpu/drm/bridge/analogix/anx7625.c | 12 +-
drivers/gpu/drm/bridge/ite-it66121.c | 21 +-
drivers/gpu/drm/bridge/lontium-lt9611uxc.c | 9 +-
drivers/gpu/drm/bridge/nwl-dsi.c | 35 +++
drivers/gpu/drm/drm_panel_orientation_quirks.c | 35 ++-
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/i915/display/intel_fb.c | 5 +-
drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c | 2 +-
drivers/gpu/drm/imx/imx-drm-core.c | 2 -
drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 6 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4 +
drivers/gpu/drm/msm/dsi/dsi.h | 2 +
drivers/gpu/drm/msm/dsi/dsi_host.c | 72 +++---
drivers/gpu/drm/msm/dsi/dsi_manager.c | 16 ++
drivers/gpu/drm/msm/msm_gem.c | 5 +-
drivers/gpu/drm/msm/msm_gpu.c | 2 +-
drivers/gpu/drm/msm/msm_submitqueue.c | 1 +
drivers/gpu/drm/nouveau/nouveau_gem.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_svm.c | 4 +
drivers/gpu/drm/nouveau/nvkm/engine/ce/gt215.c | 2 +-
drivers/gpu/drm/nouveau/nvkm/engine/device/base.c | 3 +-
drivers/gpu/drm/radeon/radeon_gem.c | 2 +-
drivers/gpu/drm/sun4i/sun8i_csc.h | 4 +-
drivers/gpu/drm/ttm/ttm_bo_vm.c | 99 +-------
drivers/gpu/drm/v3d/v3d_gem.c | 4 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 8 +-
drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 -
drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 72 +-----
drivers/gpu/drm/vmwgfx/vmwgfx_ttm_glue.c | 3 -
drivers/hid/hid-u2fzero.c | 10 +-
drivers/hid/surface-hid/surface_hid.c | 4 +-
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +-
drivers/hwtracing/coresight/coresight-cti-core.c | 2 +-
drivers/hwtracing/coresight/coresight-trbe.c | 10 +-
drivers/i2c/busses/i2c-i801.c | 5 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/accel/st_accel_i2c.c | 4 +-
drivers/iio/accel/st_accel_spi.c | 4 +-
drivers/iio/adc/ti-tsc2046.c | 2 +-
drivers/iio/dac/ad5446.c | 9 +-
drivers/iio/dac/ad5766.c | 6 +-
drivers/iio/dac/ad5770r.c | 2 +-
drivers/iio/gyro/st_gyro_i2c.c | 4 +-
drivers/iio/gyro/st_gyro_spi.c | 4 +-
drivers/iio/imu/adis.c | 4 +-
drivers/iio/industrialio-buffer.c | 28 ++-
drivers/iio/industrialio-core.c | 9 +-
drivers/iio/magnetometer/st_magn_i2c.c | 4 +-
drivers/iio/magnetometer/st_magn_spi.c | 4 +-
drivers/iio/pressure/st_pressure_i2c.c | 4 +-
drivers/iio/pressure/st_pressure_spi.c | 8 +-
drivers/infiniband/core/uverbs_cmd.c | 3 -
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 +-
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/joystick/iforce/iforce-usb.c | 2 +-
drivers/input/misc/ariel-pwrbutton.c | 7 +
drivers/input/mouse/elantech.c | 13 ++
drivers/input/serio/i8042-x86ia64io.h | 14 ++
drivers/input/touchscreen/st1232.c | 2 +-
drivers/iommu/dma-iommu.c | 52 ++---
drivers/iommu/mtk_iommu.c | 4 +-
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-sifive-plic.c | 8 +-
drivers/leds/led-triggers.c | 41 ++--
drivers/mailbox/mtk-cmdq-mailbox.c | 11 +-
drivers/md/bcache/btree.c | 2 +-
drivers/md/bcache/super.c | 2 +-
drivers/md/md.c | 11 +-
drivers/md/raid1.c | 2 +-
drivers/media/common/videobuf2/videobuf2-core.c | 42 ++--
.../media/common/videobuf2/videobuf2-dma-contig.c | 36 +--
drivers/media/common/videobuf2/videobuf2-dma-sg.c | 33 +--
drivers/media/common/videobuf2/videobuf2-vmalloc.c | 30 +--
drivers/media/dvb-frontends/mn88443x.c | 18 +-
drivers/media/i2c/Kconfig | 1 +
drivers/media/i2c/imx258.c | 12 +-
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++-
drivers/media/i2c/tda1997x.c | 8 +-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/ivtv/ivtvfb.c | 4 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++-
drivers/media/platform/allegro-dvt/allegro-core.c | 9 +
drivers/media/platform/atmel/atmel-isc-base.c | 25 +-
drivers/media/platform/atmel/atmel-isc.h | 2 +
drivers/media/platform/atmel/atmel-sama5d2-isc.c | 39 ++--
drivers/media/platform/atmel/atmel-sama7g5-isc.c | 22 +-
drivers/media/platform/imx-jpeg/mxc-jpeg.c | 6 +
drivers/media/platform/meson/ge2d/ge2d.c | 6 +-
drivers/media/platform/mtk-vcodec/mtk_vcodec_enc.c | 8 +-
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/qcom/venus/pm_helpers.c | 8 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/rcar-vin/rcar-dma.c | 3 +-
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/platform/stm32/stm32-dcmi.c | 19 +-
.../media/platform/sunxi/sun6i-csi/sun6i_video.c | 6 +-
drivers/media/radio/radio-wl1273.c | 2 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ir_toy.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/spi/cxd2880-spi.c | 2 +-
drivers/media/test-drivers/vidtv/vidtv_bridge.c | 1 +
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/tm6000/tm6000-video.c | 3 +-
drivers/media/usb/ttusb-dec/ttusb_dec.c | 10 +-
drivers/media/usb/uvc/uvc_driver.c | 7 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 +
drivers/media/v4l2-core/v4l2-ioctl.c | 67 ++++--
drivers/memory/fsl_ifc.c | 13 +-
drivers/memory/renesas-rpc-if.c | 113 ++++++---
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mfd/Kconfig | 1 +
drivers/mfd/altera-sysmgr.c | 2 +-
drivers/mfd/dln2.c | 18 ++
drivers/mfd/mfd-core.c | 2 +
drivers/mfd/motorola-cpcap.c | 8 +
drivers/mfd/sprd-sc27xx-spi.c | 7 +
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/moxart-mmc.c | 16 +-
drivers/mmc/host/mtk-sd.c | 5 +
drivers/mmc/host/mxs-mmc.c | 10 +
drivers/mmc/host/sdhci-omap.c | 18 +-
drivers/most/most_usb.c | 5 +-
drivers/mtd/mtdcore.c | 4 +-
drivers/mtd/nand/raw/ams-delta.c | 12 +-
drivers/mtd/nand/raw/arasan-nand-controller.c | 15 ++
drivers/mtd/nand/raw/au1550nd.c | 12 +-
drivers/mtd/nand/raw/fsmc_nand.c | 4 +-
drivers/mtd/nand/raw/gpio.c | 12 +-
drivers/mtd/nand/raw/intel-nand-controller.c | 5 +
drivers/mtd/nand/raw/mpc5121_nfc.c | 12 +-
drivers/mtd/nand/raw/orion_nand.c | 12 +-
drivers/mtd/nand/raw/pasemi_nand.c | 12 +-
drivers/mtd/nand/raw/plat_nand.c | 12 +-
drivers/mtd/nand/raw/socrates_nand.c | 12 +-
drivers/mtd/nand/raw/xway_nand.c | 12 +-
drivers/mtd/spi-nor/controllers/hisi-sfc.c | 1 -
drivers/net/Kconfig | 2 +-
drivers/net/bonding/bond_sysfs_slave.c | 36 +--
drivers/net/can/dev/bittiming.c | 2 +-
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 6 +-
drivers/net/can/usb/etas_es58x/es58x_core.c | 6 +-
drivers/net/can/usb/peak_usb/pcan_usb.c | 17 +-
drivers/net/dsa/lantiq_gswip.c | 28 ++-
drivers/net/dsa/mv88e6xxx/chip.c | 5 +-
drivers/net/dsa/ocelot/felix.c | 9 +-
drivers/net/dsa/rtl8366.c | 2 +-
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 +
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 5 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c | 13 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.h | 13 --
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
.../chelsio/inline_crypto/chtls/chtls_cm.c | 2 +-
.../chelsio/inline_crypto/chtls/chtls_cm.h | 2 +-
drivers/net/ethernet/dec/tulip/winbond-840.c | 2 +-
drivers/net/ethernet/fealnx.c | 2 +-
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18 +-
drivers/net/ethernet/google/gve/gve.h | 17 +-
drivers/net/ethernet/google/gve/gve_adminq.h | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 48 +++-
drivers/net/ethernet/google/gve/gve_rx.c | 7 +-
drivers/net/ethernet/google/gve/gve_tx.c | 23 +-
drivers/net/ethernet/google/gve/gve_tx_dqo.c | 84 +++----
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 20 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 10 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 6 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 77 +++---
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.h | 4 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 10 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 4 +-
drivers/net/ethernet/ibm/ibmvnic.c | 21 +-
drivers/net/ethernet/intel/ice/ice.h | 7 +-
drivers/net/ethernet/intel/ice/ice_base.c | 2 +-
drivers/net/ethernet/intel/ice/ice_devlink.c | 109 ++++++---
drivers/net/ethernet/intel/ice/ice_devlink.h | 6 +-
drivers/net/ethernet/intel/ice/ice_lib.c | 3 +-
drivers/net/ethernet/intel/ice/ice_main.c | 4 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 22 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.h | 9 +
drivers/net/ethernet/intel/igc/igc_ptp.c | 2 +-
drivers/net/ethernet/litex/litex_liteeth.c | 1 -
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 38 +--
drivers/net/ethernet/marvell/octeontx2/Kconfig | 1 +
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 78 ++++---
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 18 +-
drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +
.../ethernet/mellanox/mlx5/core/sf/dev/driver.c | 2 +
.../net/ethernet/netronome/nfp/nfp_net_common.c | 8 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 12 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 2 -
drivers/net/ethernet/ti/cpsw_ale.c | 6 +-
drivers/net/ethernet/ti/davinci_emac.c | 16 +-
drivers/net/ifb.c | 2 +
drivers/net/phy/micrel.c | 9 +-
drivers/net/phy/phy.c | 7 +-
drivers/net/phy/phylink.c | 7 +-
drivers/net/vrf.c | 28 ++-
drivers/net/wireless/ath/ath10k/core.c | 11 +-
drivers/net/wireless/ath/ath10k/coredump.c | 11 +-
drivers/net/wireless/ath/ath10k/coredump.h | 7 +
drivers/net/wireless/ath/ath10k/mac.c | 37 ++-
drivers/net/wireless/ath/ath10k/qmi.c | 3 +-
drivers/net/wireless/ath/ath10k/sdio.c | 5 +-
drivers/net/wireless/ath/ath10k/snoc.c | 77 ++++++
drivers/net/wireless/ath/ath10k/snoc.h | 5 +
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.c | 4 +
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath11k/dbring.c | 16 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 13 +-
drivers/net/wireless/ath/ath11k/mac.c | 2 +-
drivers/net/wireless/ath/ath11k/qmi.c | 4 +-
drivers/net/wireless/ath/ath11k/reg.c | 11 +-
drivers/net/wireless/ath/ath11k/reg.h | 2 +-
drivers/net/wireless/ath/ath11k/wmi.c | 40 ++--
drivers/net/wireless/ath/ath11k/wmi.h | 3 +-
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +-
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 ++--
drivers/net/wireless/ath/wcn36xx/hal.h | 32 +++
drivers/net/wireless/ath/wcn36xx/main.c | 21 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 126 +++++++++-
drivers/net/wireless/ath/wcn36xx/smd.h | 1 +
drivers/net/wireless/ath/wcn36xx/txrx.c | 64 ++---
drivers/net/wireless/ath/wcn36xx/txrx.h | 3 +-
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10 +
drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 13 +-
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 5 +-
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 6 +-
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +--
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 ++-
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
drivers/net/wireless/mediatek/mt76/debugfs.c | 10 +-
drivers/net/wireless/mediatek/mt76/mt76.h | 8 +-
.../net/wireless/mediatek/mt76/mt7615/debugfs.c | 29 ++-
drivers/net/wireless/mediatek/mt76/mt7615/init.c | 6 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 60 ++---
drivers/net/wireless/mediatek/mt76/mt7615/main.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7615/mcu.c | 18 +-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 30 ++-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 8 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13 +-
drivers/net/wireless/mediatek/mt76/mt7915/init.c | 10 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.h | 3 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 22 +-
.../net/wireless/mediatek/mt76/mt7921/debugfs.c | 36 ++-
drivers/net/wireless/mediatek/mt76/mt7921/init.c | 13 ++
drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 68 +++++-
drivers/net/wireless/mediatek/mt76/mt7921/mac.h | 8 +
drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 22 +-
drivers/net/wireless/mediatek/mt76/mt7921/mcu.h | 10 +-
drivers/net/wireless/mediatek/mt76/mt7921/regs.h | 8 +-
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +-
drivers/net/wireless/realtek/rtw88/fw.c | 7 +-
drivers/net/wireless/realtek/rtw88/reg.h | 1 +
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 ++----
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 +-
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +
drivers/net/wireless/rsi/rsi_main.h | 15 +-
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvdimm/btt.c | 1 -
drivers/nvdimm/pmem.c | 13 +-
drivers/nvme/host/multipath.c | 9 +-
drivers/nvme/host/rdma.c | 2 +
drivers/nvme/target/configfs.c | 2 +
drivers/nvme/target/rdma.c | 24 ++
drivers/nvme/target/tcp.c | 16 ++
drivers/of/unittest.c | 16 +-
drivers/opp/of.c | 2 +-
drivers/pci/controller/cadence/pci-j721e.c | 2 +-
drivers/pci/controller/cadence/pcie-cadence-plat.c | 2 +
drivers/pci/controller/dwc/pcie-uniphier.c | 26 +--
drivers/pci/controller/pci-aardvark.c | 251 +++++++++++++++++---
drivers/pci/msi.c | 36 +--
drivers/pci/pci-bridge-emul.c | 13 ++
drivers/pci/pci.c | 8 +
drivers/pci/quirks.c | 1 +
drivers/phy/microchip/sparx5_serdes.c | 4 +-
drivers/phy/qualcomm/phy-qcom-qmp.c | 2 +-
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 +-
drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c | 2 +-
drivers/phy/ti/phy-gmii-sel.c | 2 +
drivers/pinctrl/core.c | 2 +
drivers/pinctrl/pinctrl-equilibrium.c | 7 +-
drivers/pinctrl/renesas/core.c | 2 +-
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 2 +-
.../platform/surface/surface_aggregator_registry.c | 54 +++++
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 +-
drivers/power/reset/at91-reset.c | 4 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17040_battery.c | 2 +
drivers/power/supply/max17042_battery.c | 12 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 +-
drivers/remoteproc/imx_rproc.c | 41 ++--
drivers/remoteproc/remoteproc_core.c | 8 +-
drivers/remoteproc/remoteproc_coredump.c | 2 +-
drivers/remoteproc/remoteproc_elf_loader.c | 4 +-
drivers/rtc/rtc-ds1302.c | 7 +
drivers/rtc/rtc-ds1390.c | 7 +
drivers/rtc/rtc-mcp795.c | 7 +
drivers/rtc/rtc-pcf2123.c | 9 +
drivers/rtc/rtc-rv3032.c | 4 +-
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/s390/cio/device_ops.c | 12 +-
drivers/s390/crypto/ap_queue.c | 2 +
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/hosts.c | 1 +
drivers/scsi/lpfc/lpfc_els.c | 12 +-
drivers/scsi/lpfc/lpfc_hbadisc.c | 10 +-
drivers/scsi/lpfc/lpfc_nvme.c | 5 +-
drivers/scsi/lpfc/lpfc_scsi.c | 7 +
drivers/scsi/lpfc/lpfc_sli.c | 101 ++++++--
drivers/scsi/megaraid/megaraid_sas_fusion.c | 11 +-
drivers/scsi/pm8001/pm8001_hwi.c | 2 +-
drivers/scsi/pm8001/pm8001_sas.h | 3 +-
drivers/scsi/pm8001/pm80xx_hwi.c | 53 ++++-
drivers/scsi/qedf/qedf_main.c | 2 +
drivers/scsi/qla2xxx/qla_attr.c | 24 +-
drivers/scsi/qla2xxx/qla_edif.c | 259 ++++++++++++---------
drivers/scsi/qla2xxx/qla_edif.h | 3 +-
drivers/scsi/qla2xxx/qla_edif_bsg.h | 2 +-
drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
drivers/scsi/qla2xxx/qla_init.c | 77 ++++--
drivers/scsi/qla2xxx/qla_mr.c | 23 --
drivers/scsi/qla2xxx/qla_nvme.c | 14 +-
drivers/scsi/qla2xxx/qla_os.c | 37 +--
drivers/scsi/qla2xxx/qla_target.c | 1 +
drivers/scsi/scsi_error.c | 25 ++
drivers/scsi/scsi_ioctl.c | 2 +
drivers/scsi/scsi_lib.c | 3 +-
drivers/scsi/scsi_sysfs.c | 1 +
drivers/scsi/ufs/ufshcd-pltfrm.c | 4 +-
drivers/scsi/ufs/ufshcd.c | 186 +--------------
drivers/scsi/ufs/ufshcd.h | 14 --
drivers/scsi/ufs/ufshpb.c | 31 ++-
drivers/scsi/ufs/ufshpb.h | 1 -
drivers/soc/fsl/dpaa2-console.c | 1 +
drivers/soc/fsl/dpio/dpio-service.c | 2 +-
drivers/soc/fsl/dpio/qbman-portal.c | 9 +-
drivers/soc/qcom/apr.c | 2 +
drivers/soc/qcom/llcc-qcom.c | 2 +-
drivers/soc/qcom/rpmhpd.c | 20 +-
drivers/soc/qcom/socinfo.c | 4 +-
drivers/soc/samsung/Kconfig | 1 +
drivers/soc/tegra/pmc.c | 2 +-
drivers/soundwire/bus.c | 2 +-
drivers/soundwire/debugfs.c | 2 +-
drivers/spi/atmel-quadspi.c | 2 +-
drivers/spi/spi-bcm-qspi.c | 8 +-
drivers/spi/spi-mtk-nor.c | 2 +-
drivers/spi/spi-rpc-if.c | 4 +-
drivers/spi/spi-stm32-qspi.c | 2 +-
drivers/spi/spi.c | 41 ++++
drivers/staging/ks7010/Kconfig | 3 +
drivers/staging/media/atomisp/i2c/atomisp-lm3554.c | 37 +--
drivers/staging/media/imx/imx-media-dev-common.c | 2 +
drivers/staging/media/ipu3/ipu3-v4l2.c | 7 +-
drivers/staging/media/rkvdec/rkvdec-h264.c | 5 +-
drivers/staging/media/rkvdec/rkvdec.c | 40 ++--
drivers/staging/most/dim2/Makefile | 2 +-
drivers/staging/most/dim2/dim2.c | 24 +-
drivers/staging/most/dim2/sysfs.c | 49 ----
drivers/staging/most/dim2/sysfs.h | 11 -
drivers/staging/r8188eu/core/rtw_mlme.c | 2 +
drivers/target/target_core_tmr.c | 17 +-
drivers/target/target_core_transport.c | 30 ++-
.../intel/int340x_thermal/processor_thermal_mbox.c | 1 +
drivers/thermal/qcom/Kconfig | 2 +-
drivers/thermal/qcom/tsens.c | 29 ++-
drivers/thermal/thermal_core.c | 16 +-
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 21 +-
drivers/tty/serial/cpm_uart/cpm_uart_core.c | 2 +
drivers/tty/serial/imx.c | 4 +-
drivers/tty/serial/serial_core.c | 16 +-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/usb/chipidea/core.c | 23 +-
drivers/usb/dwc2/drd.c | 24 +-
drivers/usb/dwc3/core.h | 1 +
drivers/usb/dwc3/gadget.c | 8 +-
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-pci.c | 16 ++
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/Kconfig | 2 +-
drivers/usb/serial/keyspan.c | 15 +-
drivers/usb/typec/Kconfig | 4 +-
drivers/vdpa/mlx5/net/mlx5_vnet.c | 1 -
drivers/video/backlight/backlight.c | 6 -
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/video/fbdev/efifb.c | 21 +-
drivers/virtio/virtio_ring.c | 14 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/xen/balloon.c | 86 +++++--
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/reflink.c | 2 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 14 +-
fs/ceph/mdsmap.c | 4 -
fs/cifs/cifsglob.h | 3 +-
fs/cifs/connect.c | 21 +-
fs/cifs/file.c | 35 ++-
fs/cifs/fs_context.c | 8 +
fs/cifs/fs_context.h | 1 +
fs/crypto/fscrypt_private.h | 5 +-
fs/crypto/hkdf.c | 11 +-
fs/crypto/keysetup.c | 57 ++++-
fs/erofs/decompressor.c | 1 -
fs/erofs/zdata.c | 13 +-
fs/erofs/zpvec.h | 13 +-
fs/exfat/inode.c | 2 +-
fs/ext4/extents.c | 63 +++--
fs/ext4/inode.c | 15 +-
fs/ext4/super.c | 9 +-
fs/f2fs/compress.c | 1 +
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/f2fs/super.c | 2 +
fs/fuse/dev.c | 14 +-
fs/gfs2/glock.c | 24 +-
fs/io-wq.c | 88 +++++--
fs/io_uring.c | 4 +-
fs/jfs/jfs_mount.c | 51 ++--
fs/ksmbd/Kconfig | 1 +
fs/ksmbd/server.c | 1 +
fs/ksmbd/smb2misc.c | 6 +-
fs/ksmbd/smb2pdu.c | 11 +-
fs/nfs/dir.c | 9 +-
fs/nfs/direct.c | 2 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/inode.c | 13 +-
fs/nfs/nfs3xdr.c | 2 +-
fs/nfs/nfs4idmap.c | 2 +-
fs/nfs/nfs4proc.c | 15 +-
fs/nfs/pnfs.h | 2 +-
fs/nfs/pnfs_nfs.c | 6 +-
fs/nfs/proc.c | 2 +-
fs/nfs/write.c | 26 +--
fs/ocfs2/file.c | 8 +-
fs/open.c | 16 +-
fs/orangefs/dcache.c | 4 +-
fs/overlayfs/copy_up.c | 23 +-
fs/overlayfs/file.c | 16 +-
fs/overlayfs/inode.c | 5 +-
fs/proc/stat.c | 4 +-
fs/proc/uptime.c | 14 +-
fs/quota/quota_tree.c | 15 ++
fs/tracefs/inode.c | 3 +-
include/drm/ttm/ttm_bo_api.h | 3 +-
include/linux/blkdev.h | 2 -
include/linux/bpf-cgroup.h | 1 +
include/linux/console.h | 2 +
include/linux/cpufreq.h | 2 +-
include/linux/dma-buf.h | 2 +-
include/linux/dsa/ocelot.h | 1 +
include/linux/ethtool_netlink.h | 3 +
include/linux/filter.h | 5 +-
include/linux/fortify-string.h | 5 +-
include/linux/kernel_stat.h | 1 +
include/linux/leds.h | 2 +-
include/linux/libata.h | 2 +-
include/linux/msi.h | 2 +-
include/linux/nfs_fs.h | 1 +
include/linux/posix-timers.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched.h | 1 +
include/linux/sched/task.h | 3 +-
include/linux/sched/task_stack.h | 4 +
include/linux/seq_file.h | 2 +-
include/linux/signal_types.h | 3 +
include/linux/skmsg.h | 18 +-
include/linux/surface_aggregator/controller.h | 4 +-
include/linux/tpm.h | 1 +
include/media/videobuf2-core.h | 37 +--
include/memory/renesas-rpc-if.h | 1 +
include/net/inet_connection_sock.h | 2 +-
include/net/llc.h | 4 +-
include/net/neighbour.h | 12 +-
include/net/sch_generic.h | 4 +
include/net/sctp/sctp.h | 7 +-
include/net/sock.h | 2 +-
include/net/strparser.h | 20 +-
include/net/tcp.h | 17 +-
include/rdma/ib_verbs.h | 7 +-
include/scsi/scsi_cmnd.h | 2 +-
include/scsi/scsi_host.h | 1 +
include/sound/soc-topology.h | 3 +-
include/uapi/asm-generic/signal-defs.h | 1 +
include/uapi/linux/ethtool_netlink.h | 4 +-
include/uapi/linux/pci_regs.h | 6 +
init/main.c | 4 +-
kernel/bpf/trampoline.c | 6 +-
kernel/bpf/verifier.c | 4 +-
kernel/cgroup/cgroup.c | 31 ++-
kernel/cgroup/rstat.c | 2 -
kernel/debug/kdb/kdb_bt.c | 16 +-
kernel/debug/kdb/kdb_main.c | 37 +--
kernel/debug/kdb/kdb_private.h | 4 +-
kernel/debug/kdb/kdb_support.c | 118 ++--------
kernel/fork.c | 3 +-
kernel/irq/msi.c | 4 +-
kernel/kprobes.c | 3 +-
kernel/locking/lockdep.c | 4 +-
kernel/locking/rwsem.c | 53 +++--
kernel/power/energy_model.c | 23 +-
kernel/power/swap.c | 7 +-
kernel/rcu/rcutorture.c | 48 +++-
kernel/rcu/tasks.h | 3 +-
kernel/rcu/tree.c | 2 +-
kernel/rcu/tree_exp.h | 2 +-
kernel/rcu/tree_plugin.h | 8 +-
kernel/sched/core.c | 62 +++--
kernel/scs.c | 1 +
kernel/signal.c | 26 +--
kernel/time/posix-cpu-timers.c | 19 +-
kernel/trace/ftrace.c | 23 +-
kernel/trace/ring_buffer.c | 5 +
kernel/trace/trace.c | 73 +++---
kernel/trace/trace.h | 3 +
kernel/trace/trace_boot.c | 4 +
kernel/trace/trace_dynevent.c | 2 +-
kernel/trace/trace_event_perf.c | 6 +-
kernel/trace/trace_events.c | 42 ++--
kernel/trace/trace_events_synth.c | 4 +-
kernel/trace/trace_functions_graph.c | 2 +-
kernel/trace/trace_hwlat.c | 6 +-
kernel/trace/trace_kprobe.c | 8 +-
kernel/trace/trace_osnoise.c | 14 +-
kernel/trace/trace_printk.c | 2 +-
kernel/trace/trace_recursion_record.c | 4 +-
kernel/trace/trace_stack.c | 6 +-
kernel/trace/trace_stat.c | 6 +-
kernel/trace/trace_uprobe.c | 4 +-
kernel/trace/tracing_map.c | 40 ++--
kernel/workqueue.c | 15 +-
lib/crypto/sm4.c | 4 +-
lib/decompress_unxz.c | 2 +-
lib/dynamic_debug.c | 12 +
lib/iov_iter.c | 5 +-
lib/test_bpf.c | 37 ++-
lib/xz/xz_dec_lzma2.c | 21 +-
lib/xz/xz_dec_stream.c | 6 +-
mm/filemap.c | 1 -
mm/memcontrol.c | 27 +--
mm/oom_kill.c | 23 +-
mm/zsmalloc.c | 7 +-
net/8021q/vlan.c | 3 -
net/8021q/vlan_dev.c | 3 +
net/9p/client.c | 2 +
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/sco.c | 36 +--
net/bridge/br_private.h | 2 +
net/can/j1939/main.c | 7 +
net/can/j1939/transport.c | 11 +
net/core/dev.c | 2 +
net/core/filter.c | 58 ++++-
net/core/neighbour.c | 48 ++--
net/core/net-sysfs.c | 55 +++++
net/core/net_namespace.c | 4 +
net/core/skmsg.c | 43 +++-
net/core/stream.c | 3 -
net/dccp/dccp.h | 2 +-
net/dccp/proto.c | 14 +-
net/dsa/port.c | 2 +
net/dsa/switch.c | 4 +-
net/dsa/tag_ocelot.c | 3 +
net/ethtool/pause.c | 3 +-
net/ipv4/af_inet.c | 16 +-
net/ipv4/inet_connection_sock.c | 4 +-
net/ipv4/inet_hashtables.c | 2 +-
net/ipv4/proc.c | 2 +-
net/ipv4/tcp.c | 40 +++-
net/ipv4/tcp_bpf.c | 48 +++-
net/ipv6/addrconf.c | 3 +
net/ipv6/af_inet6.c | 21 +-
net/ipv6/udp.c | 2 +-
net/mac80211/s1g.c | 8 +-
net/mctp/af_mctp.c | 13 ++
net/mptcp/options.c | 8 +-
net/mptcp/protocol.c | 43 +++-
net/netfilter/nf_conntrack_proto_udp.c | 7 +-
net/netfilter/nfnetlink_queue.c | 2 +-
net/netfilter/nft_dynset.c | 11 +-
net/rxrpc/rtt.c | 2 +-
net/sched/sch_generic.c | 9 +
net/sched/sch_mq.c | 24 ++
net/sched/sch_mqprio.c | 23 ++
net/sched/sch_taprio.c | 27 ++-
net/sctp/output.c | 13 +-
net/sctp/transport.c | 11 +-
net/smc/af_smc.c | 18 +-
net/strparser/strparser.c | 10 +-
net/sunrpc/addr.c | 40 ++--
net/sunrpc/xprt.c | 28 +--
net/vmw_vsock/af_vsock.c | 2 +
net/wireless/core.c | 10 +
samples/bpf/xdp_redirect_cpu_user.c | 6 +-
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/integrity/ima/ima_policy.c | 27 ++-
security/selinux/ss/services.c | 162 ++++++-------
security/smack/smackfs.c | 11 +-
sound/core/memalloc.c | 7 +-
sound/core/oss/mixer_oss.c | 44 +++-
sound/core/timer.c | 17 +-
sound/firewire/oxfw/oxfw-stream.c | 7 +-
sound/firewire/oxfw/oxfw.c | 8 +
sound/firewire/oxfw/oxfw.h | 5 +
sound/pci/hda/hda_intel.c | 52 ++---
sound/pci/hda/patch_realtek.c | 36 +++
sound/pci/rme9652/hdsp.c | 41 ++--
sound/pci/rme9652/rme9652.c | 41 ++--
sound/soc/codecs/cs42l42.c | 27 ++-
sound/soc/codecs/wcd9335.c | 2 +-
sound/soc/sh/rcar/core.c | 1 +
sound/soc/sof/topology.c | 9 +
sound/soc/tegra/tegra_asoc_machine.c | 60 ++++-
sound/soc/tegra/tegra_asoc_machine.h | 1 +
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/card.h | 1 +
sound/usb/endpoint.c | 7 +-
sound/usb/format.c | 1 +
sound/usb/line6/driver.c | 14 +-
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/arch/x86/lib/insn.c | 5 +-
tools/bpf/bpftool/prog.c | 16 +-
tools/include/asm-generic/unaligned.h | 23 ++
tools/lib/bpf/bpf.c | 4 +-
tools/lib/bpf/bpf_core_read.h | 2 +-
tools/lib/bpf/btf.c | 22 +-
tools/lib/bpf/libbpf.c | 8 +-
tools/lib/bpf/skel_internal.h | 6 +-
tools/objtool/arch/x86/decode.c | 20 ++
tools/objtool/check.c | 159 +++++++------
tools/objtool/include/objtool/arch.h | 1 +
tools/perf/util/bpf-event.c | 4 +-
tools/perf/util/intel-pt-decoder/Build | 2 +
.../testing/selftests/bpf/prog_tests/perf_buffer.c | 4 +-
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 4 +-
tools/testing/selftests/bpf/prog_tests/test_ima.c | 3 +-
tools/testing/selftests/bpf/progs/strobemeta.h | 11 +
tools/testing/selftests/bpf/test_progs.c | 4 +-
.../selftests/bpf/test_xdp_redirect_multi.sh | 62 ++---
.../testing/selftests/bpf/verifier/array_access.c | 2 +-
tools/testing/selftests/bpf/xdp_redirect_multi.c | 4 +-
tools/testing/selftests/core/close_range_test.c | 2 +-
tools/testing/selftests/kvm/lib/x86_64/svm.c | 14 +-
.../selftests/kvm/x86_64/mmio_warning_test.c | 2 +-
tools/testing/selftests/net/Makefile | 9 +-
tools/testing/selftests/net/fib_nexthops.sh | 1 +
.../selftests/net/forwarding/bridge_igmp.sh | 12 +-
.../testing/selftests/net/forwarding/bridge_mld.sh | 12 +-
tools/testing/selftests/net/gre_gso.sh | 9 +-
tools/testing/selftests/net/mptcp/mptcp_join.sh | 2 +-
tools/testing/selftests/net/udpgso_bench_rx.c | 11 +-
tools/testing/selftests/sched/cs_prctl_test.c | 28 ++-
tools/tracing/latency/latency-collector.c | 2 +-
1028 files changed, 8826 insertions(+), 5203 deletions(-)
^ permalink raw reply [relevance 1%]
* [PATCH 5.15 329/917] Bluetooth: fix init and cleanup of sco_conn.timeout_work
2021-11-15 16:51 1% [PATCH 5.15 000/917] 5.15.3-rc1 review Greg Kroah-Hartman
2021-11-15 16:54 12% ` [PATCH 5.15 188/917] Bluetooth: call sock_hold earlier in sco_conn_del Greg Kroah-Hartman
@ 2021-11-15 16:57 11% ` Greg Kroah-Hartman
1 sibling, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-15 16:57 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 49d8a5606428ca0962d09050a5af81461ff90fbb ]
Before freeing struct sco_conn, all delayed timeout work should be
cancelled. Otherwise, sco_sock_timeout could potentially use the
sco_conn after it has been freed.
Additionally, sco_conn.timeout_work should be initialized when the
connection is allocated, not when the channel is added. This is
because an sco_conn can create channels with multiple sockets over its
lifetime, which happens if sockets are released but the connection
isn't deleted.
Fixes: ba316be1b6a0 ("Bluetooth: schedule SCO timeouts with delayed_work")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 9 ++++-----
1 file changed, 4 insertions(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 4a057f99b60aa..6e047e178c0ab 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -133,6 +133,7 @@ static struct sco_conn *sco_conn_add(struct hci_conn *hcon)
return NULL;
spin_lock_init(&conn->lock);
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
hcon->sco_data = conn;
conn->hcon = hcon;
@@ -197,11 +198,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_chan_del(sk, err);
release_sock(sk);
sock_put(sk);
-
- /* Ensure no more work items will run before freeing conn. */
- cancel_delayed_work_sync(&conn->timeout_work);
}
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
+
hcon->sco_data = NULL;
kfree(conn);
}
@@ -214,8 +215,6 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
- INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
-
if (parent)
bt_accept_enqueue(parent, sk, true);
}
--
2.33.0
^ permalink raw reply related [relevance 11%]
* [PATCH 5.15 188/917] Bluetooth: call sock_hold earlier in sco_conn_del
2021-11-15 16:51 1% [PATCH 5.15 000/917] 5.15.3-rc1 review Greg Kroah-Hartman
@ 2021-11-15 16:54 12% ` Greg Kroah-Hartman
2021-11-15 16:57 11% ` [PATCH 5.15 329/917] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
1 sibling, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-15 16:54 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit f4712fa993f688d0a48e0c28728fcdeb88c1ea58 ]
In sco_conn_del, conn->sk is read while holding on to the
sco_conn.lock to avoid races with a socket that could be released
concurrently.
However, in between unlocking sco_conn.lock and calling sock_hold,
it's possible for the socket to be freed, which would cause a
use-after-free write when sock_hold is finally called.
To fix this, the reference count of the socket should be increased
while the sco_conn.lock is still held.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index b62c91c627e2c..4a057f99b60aa 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -187,10 +187,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
/* Kill socket */
sco_conn_lock(conn);
sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
sco_conn_unlock(conn);
if (sk) {
- sock_hold(sk);
lock_sock(sk);
sco_sock_clear_timer(sk);
sco_chan_del(sk, err);
--
2.33.0
^ permalink raw reply related [relevance 12%]
* [PATCH 5.14 341/849] Bluetooth: fix init and cleanup of sco_conn.timeout_work
2021-11-15 16:51 1% [PATCH 5.14 000/849] 5.14.19-rc1 review Greg Kroah-Hartman
@ 2021-11-15 16:57 11% ` Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-15 16:57 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 49d8a5606428ca0962d09050a5af81461ff90fbb ]
Before freeing struct sco_conn, all delayed timeout work should be
cancelled. Otherwise, sco_sock_timeout could potentially use the
sco_conn after it has been freed.
Additionally, sco_conn.timeout_work should be initialized when the
connection is allocated, not when the channel is added. This is
because an sco_conn can create channels with multiple sockets over its
lifetime, which happens if sockets are released but the connection
isn't deleted.
Fixes: ba316be1b6a0 ("Bluetooth: schedule SCO timeouts with delayed_work")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 9 ++++-----
1 file changed, 4 insertions(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 2766faf95c534..2e251ac89da58 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -134,6 +134,7 @@ static struct sco_conn *sco_conn_add(struct hci_conn *hcon)
return NULL;
spin_lock_init(&conn->lock);
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
hcon->sco_data = conn;
conn->hcon = hcon;
@@ -197,11 +198,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_chan_del(sk, err);
bh_unlock_sock(sk);
sock_put(sk);
-
- /* Ensure no more work items will run before freeing conn. */
- cancel_delayed_work_sync(&conn->timeout_work);
}
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
+
hcon->sco_data = NULL;
kfree(conn);
}
@@ -214,8 +215,6 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
- INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
-
if (parent)
bt_accept_enqueue(parent, sk, true);
}
--
2.33.0
^ permalink raw reply related [relevance 11%]
* [PATCH 5.10 000/575] 5.10.80-rc1 review
@ 2021-11-15 16:55 1% Greg Kroah-Hartman
2021-11-15 16:59 11% ` [PATCH 5.10 262/575] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
0 siblings, 1 reply; 200+ results
From: Greg Kroah-Hartman @ 2021-11-15 16:55 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.10.80 release.
There are 575 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 17 Nov 2021 16:52:23 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.80-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.10.80-rc1
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Partial revert of commit 6f9f17287e78
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix PCIe Max Payload Size setting
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Jernej Skrabec <jernej.skrabec@gmail.com>
drm/sun4i: Fix macros in sun8i_csc.h
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
Halil Pasic <pasic@linux.ibm.com>
s390/cio: make ccw_device_dma_* more robust
Harald Freudenberger <freude@linux.ibm.com>
s390/ap: Fix hanging ioctl caused by orphaned replies
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Jack Andersen <jackoalan@gmail.com>
mfd: dln2: Add cell for initializing DLN2 ADC
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/security: Add a helper to query stf_barrier type
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Validate branch ranges
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/lib: Add helper to check if offset is within conditional branch range
Vasily Averin <vvs@virtuozzo.com>
memcg: prohibit unconditional exceeding the limit of dying tasks
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Guo Ren <guoren@linux.alibaba.com>
irqchip/sifive-plic: Fixup EOI failed when masked
Michael Pratt <mpratt@google.com>
posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
Dave Jones <davej@codemonkey.org.uk>
x86/mce: Add errata workaround for Skylake SKX37
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
Helge Deller <deller@gmx.de>
parisc: Fix backtrace to always include init funtion names
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Willem de Bruijn <willemb@google.com>
selftests/net: udpgso_bench_rx: fix port argument
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Dust Li <dust.li@linux.alibaba.com>
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Vladimir Oltean <vladimir.oltean@nxp.com>
net: stmmac: allow a tc-taprio base-time of zero
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: allow configure ETS bandwidth of all TCs
Yufeng Mo <moyufeng@huawei.com>
net: hns3: fix kernel crash when unload VF while it is being reset
Eric Dumazet <edumazet@google.com>
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
Muchun Song <songmuchun@bytedance.com>
seq_file: fix passing wrong private data
Dan Carpenter <dan.carpenter@oracle.com>
gve: Fix off by one in gve_tx_timeout()
John Fastabend <john.fastabend@gmail.com>
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
John Fastabend <john.fastabend@gmail.com>
bpf, sockmap: Remove unhash handler for BPF sockmap usage
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Ian Rogers <irogers@google.com>
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Marc Kleine-Budde <mkl@pengutronix.de>
can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
mfd: core: Add missing of_node_put for loop iteration
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Heiner Kallweit <hkallweit1@gmail.com>
net: phy: fix duplex out of sync problem while changing settings
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
ataflop: remove ataflop_probe_lock mutex
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: provide a helper for cleanup up an atari disk
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: add registration bool before calling del_gendisk()
Luis Chamberlain <mcgrof@kernel.org>
block/ataflop: use the blk_cleanup_disk() helper
Chenyuan Mi <cymi20@fudan.edu.cn>
drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Brett Creeley <brett.creeley@intel.com>
ice: Fix not stopping Tx queues for VFs
Sylwester Dziedziuch <sylwesterx.dziedziuch@intel.com>
ice: Fix replacing VF hardware MAC to existing MAC filter
Ziyang Xuan <william.xuanziyang@huawei.com>
net: vlan: fix a UAF in vlan_dev_real_dev()
Stafford Horne <shorne@gmail.com>
openrisc: fix SMP tlb flush NULL pointer dereference
Jakub Kicinski <kuba@kernel.org>
ethtool: fix ethtool msg len calculation for pause stats
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Relogin during fabric disturbance
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Changes to support FCP2 Target
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Eric W. Biederman <ebiederm@xmission.com>
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Robert-Ionut Alexa <robert-ionut.alexa@nxp.com>
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Alexey Gladkov <legion@kernel.org>
Fix user namespace leak
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix an Oops in pnfs_mark_request_commit()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix up commit deadlocks
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Dan Carpenter <dan.carpenter@oracle.com>
rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
Zev Weiss <zev@bewilderbeest.net>
mtd: core: don't remove debugfs directory if device is in use
Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
YueHaibing <yuehaibing@huawei.com>
opp: Fix return in _opp_add_static_v2()
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix dentry verifier races
Kewei Xu <kewei.xu@mediatek.com>
i2c: mediatek: fixing the incorrect register offset
J. Bruce Fields <bfields@redhat.com>
nfsd: don't alloc under spinlock in rpc_parse_scope_id
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: check desc == NULL when using indirect with packed
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Use device_property API instead of of_property
Lucas Tanure <tanureal@opensource.cirrus.com>
ASoC: cs42l42: Disable regulators if probe fails
Bixuan Cui <cuibixuan@linux.alibaba.com>
powerpc/44x/fsp2: add missing of_node_put
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: clarify error check and length calculations
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Sandeep Maheswaram <quic_c_sanm@quicinc.com>
phy: qcom-snps: Correct the FSEL_MASK
Dan Carpenter <dan.carpenter@oracle.com>
phy: ti: gmii-sel: check of_get_address() for failure
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Rahul Tanwar <rtanwar@maxlinear.com>
pinctrl: equilibrium: Fix function addition in multiple groups
Wan Jiabing <wanjiabing@vivo.com>
soc: qcom: apr: Add of_node_put() before return
Guru Das Srinagesh <quic_gurus@quicinc.com>
firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: reset current session before setting the new one
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
Amelie Delaunay <amelie.delaunay@foss.st.com>
usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
Stefan Agner <stefan@agner.ch>
serial: imx: fix detach/attach of serial console
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
Can Guo <cang@codeaurora.org>
scsi: ufs: Refactor ufshcd_setup_clocks() to remove skip_ref_clk
Nuno Sá <nuno.sa@analog.com>
iio: adis: do not disabe IRQs in 'adis_init()'
Randy Dunlap <rdunlap@infradead.org>
usb: typec: STUSB160X should select REGMAP_I2C
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Make power_on actually enable the domain
Lee Jones <lee.jones@linaro.org>
soc: qcom: rpmhpd: Provide some missing struct member descriptions
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix SAI sub nodes register range
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
Geert Uytterhoeven <geert+renesas@glider.be>
pinctrl: renesas: checker: Fix off-by-one bug in drive register check
Vegard Nossum <vegard.nossum@oracle.com>
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Nikita Yushchenko <nikita.yoush@cogentembedded.com>
staging: most: dim2: do not double-register the same device
Randy Dunlap <rdunlap@infradead.org>
usb: musb: select GENERIC_PHY instead of depending on it
Leon Romanovsky <leon@kernel.org>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Yang Yingliang <yangyingliang@huawei.com>
power: supply: max17040: fix null-ptr-deref in max17040_probe()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Nathan Lynch <nathanl@linux.ibm.com>
powerpc: fix unbalanced node refcount in check_kvm_guest()
Michael Ellerman <mpe@ellerman.id.au>
powerpc: Fix is_kvm_guest() / kvm_para_available()
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc: Reintroduce is_kvm_guest() as a fast-path check
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc: Rename is_kvm_guest() to check_kvm_guest()
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc: Refactor is_kvm_guest() declaration to new header
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Clément Léger <clement.leger@bootlin.com>
clk: at91: check pmc node status before registering syscore ops
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Ranjani Sridharan <ranjani.sridharan@linux.intel.com>
ASoC: SOF: topology: do not power down primary core during topology removal
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Yang Yingliang <yangyingliang@huawei.com>
driver core: Fix possible memory leak in device_link_add()
Igor Pylypiv <ipylypiv@google.com>
scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
soundwire: debugfs: use controller id and link_id for debugfs
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Use position buffer for SKL+ again
Imre Deak <imre.deak@intel.com>
ALSA: hda: Fix hang during shutdown due to link reset
Imre Deak <imre.deak@intel.com>
ALSA: hda: Release controller display power during shutdown/reboot
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
Geert Uytterhoeven <geert+renesas@glider.be>
arm64: dts: renesas: beacon: Fix Ethernet PHY mode
Stephan Gerhold <stephan@gerhold.net>
arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Tony Lindgren <tony@atomide.com>
bus: ti-sysc: Fix timekeeping_suspended warning on resume
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12b: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
Kishon Vijay Abraham I <kishon@ti.com>
arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Marijn Suijten <marijn.suijten@somainline.org>
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
Rafał Miłecki <rafal@milecki.pl>
ARM: dts: BCM5301X: Fix memory nodes names
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Alexandru Ardelean <aardelean@deviqon.com>
iio: st_sensors: disable regulators after device unregistration
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
iio: st_sensors: Call st_sensors_power_enable() from bus drivers
Frank Rowand <frank.rowand@sony.com>
of: unittest: fix EXPECT text for gpio hog errors
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
Alexei Starovoitov <ast@kernel.org>
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
Dan Schatzberg <schatzberg.dan@gmail.com>
cgroup: Fix rootcg cpu.stat guest double counting
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: don't stop queue in xmit
Jakub Kicinski <kuba@kernel.org>
udp6: allow SO_MARK ctrl msg to affect routing
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Kumar Kartikeya Dwivedi <memxor@gmail.com>
selftests/bpf: Fix fd cleanup in sk_lookup test
Lorenz Bauer <lmb@cloudflare.com>
selftests: bpf: Convert sk_lookup ctx access tests to PROG_TEST_RUN
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix discarded frames due to wrong sequence number
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
spi: spi-rpc-if: Check return value of rpcif_sw_init()
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Ilya Leoshkevich <iii@linux.ibm.com>
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
Mark Brown <broonie@kernel.org>
tpm_tis_spi: Add missing SPI ID
Hao Wu <hao.wu@rubrik.com>
tpm: fix Atmel TPM crash caused by too frequent queries
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: more blk-mq refactoring fixes
Dan Carpenter <dan.carpenter@oracle.com>
ataflop: potential out of bounds in do_format()
Christoph Hellwig <hch@lst.de>
ataflop: use a separate gendisk for each media format
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
Claudio Imbrenda <imbrenda@linux.ibm.com>
KVM: s390: pv: avoid double free of sida page
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF header parsing checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix overflow in BTF sanity checks
Andrii Nakryiko <andrii@kernel.org>
libbpf: Allow loading empty BTFs
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF data layout checks and allow empty BTF
Quentin Monnet <quentin@isovalent.com>
bpftool: Avoid leaking the JSON writer prepared for program metadata
Jim Mattson <jmattson@google.com>
KVM: selftests: Fix nested SVM tests when built with clang
Ricardo Koller <ricarkol@google.com>
KVM: selftests: Add operand to vmsave/vmload/vmrun in svm.c
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Joerg Roedel <jroedel@suse.de>
x86/sev: Fix stack type check in vc_switch_off_ist()
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Tim Gardner <tim.gardner@canonical.com>
net: enetc: unmap DMA in enetc_send_cmd()
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
Shayne Chen <shayne.chen@mediatek.com>
mt76: mt7915: fix sta_rec_wtbl tag len
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7915: fix possible infinite loop release semaphore
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: fix breakage introduced at blk-mq refactoring
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Sean Young <sean@mess.org>
media: ir_toy: assignment to be16 should be of correct type
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: potential error pointer dereference in init()
Eric Dumazet <edumazet@google.com>
tcp: switch orphan_count to bare per-cpu counters
Zhang Qiao <zhangqiao22@huawei.com>
kernel/sched: Fix sched_fork() access an invalid sched_task_group
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix context restore
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
John Fraker <jfraker@google.com>
gve: Recover from queue stall due to missed IRQ
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_dynset: relax superfluous check on set updates
Peter Zijlstra <peterz@infradead.org>
rcu: Always inline rcu_dynticks_task*_{enter,exit}()
Yazen Ghannam <yazen.ghannam@amd.com>
EDAC/amd64: Handle three rank interleaving mode
Vincent Donnefort <vincent.donnefort@arm.com>
PM: EM: Fix inefficient states detection
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Arnd Bergmann <arnd@arndb.de>
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
Punit Agrawal <punitagrawal@gmail.com>
kprobes: Do not use local variable when creating debugfs file
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: tm6000: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: radio-wl1273: Avoid card name truncation
Randy Dunlap <rdunlap@infradead.org>
media: i2c: ths8200 needs V4L2_ASYNC
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Tom Rix <trix@redhat.com>
media: TDA1997x: handle short reads of hdmi info frame.
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: S_CTRL output the right value
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Colin Ian King <colin.king@canonical.com>
media: cxd2880-spi: Fix a null pointer dereference on error handling path
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Sudarshan Rajagopalan <quic_sudaraja@quicinc.com>
arm64: mm: update max_pfn after memory hotplug
Matthew Auld <matthew.auld@intel.com>
drm/ttm: stop calling tt_swapin in vm_access
Fabio Estevam <festevam@denx.de>
ath10k: sdio: Add missing BH locking around napi_schdule()
Loic Poulain <loic.poulain@linaro.org>
ath10k: Fix missing frame timestamp for beacon/probe-resp
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
Pradeep Kumar Chitrapu <pradeepc@codeaurora.org>
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid race during regd updates
Dan Carpenter <dan.carpenter@oracle.com>
ath11k: fix some sleeping in atomic bugs
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Jiasheng Jiang <jiasheng@iscas.ac.cn>
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Michael Walle <michael@walle.cc>
crypto: caam - disable pkc for non-E SoCs
Dinghao Liu <dinghao.liu@zju.edu.cn>
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Ajay Singh <ajay.kathat@microchip.com>
wilc1000: fix possible memory leak in cfg_scan_result()
Bryan O'Donoghue <bryan.odonoghue@linaro.org>
wcn36xx: Fix Antenna Diversity Switching
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Yajun Deng <yajun.deng@linux.dev>
net: net_namespace: Fix undefined member in key_remove_domain()
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
lockdep: Let lock_is_held_type() detect recursive read as read
liuyuntao <liuyuntao10@huawei.com>
virtio-gpu: fix possible memory allocation failure
Iago Toral Quiroga <itoral@igalia.com>
drm/v3d: fix wait for TMU write combiner flush
Peter Zijlstra <peterz@infradead.org>
objtool: Fix static_call list generation
Peter Zijlstra <peterz@infradead.org>
x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
Josh Poimboeuf <jpoimboe@redhat.com>
objtool: Add xen_start_kernel() to noreturn list
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: fix burst length for DEU
Neeraj Upadhyay <neeraju@codeaurora.org>
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix strobemeta selftest regression
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Gao Xiang <hsiangkao@linux.alibaba.com>
erofs: don't trigger WARN() when decompression fails
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Shuah Khan <skhan@linuxfoundation.org>
selftests/core: fix conflicting types compile error for close_range()
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Correct band/freq reporting on RX
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Josef Bacik <josef@toxicpanda.com>
btrfs: do not take the uuid_mutex in btrfs_rm_device
Sidong Yang <realwakka@gmail.com>
btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
Stefan Schaeckeler <schaecsn@gmx.net>
ACPI: AC: Quirk GK45 to skip reading _PSR
Eric Dumazet <edumazet@google.com>
net: annotate data-race in neigh_output()
Florian Westphal <fw@strlen.de>
vrf: run conntrack only in context of lower/physdev for locally generated packets
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Fix glock_hash_walk bugs
Andreas Gruenbacher <agruenba@redhat.com>
gfs2: Cancel remote delete work asynchronously
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: lantiq_gswip: serialize access to the PCE table
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Jiri Olsa <jolsa@redhat.com>
selftests/bpf: Fix perf_buffer test on system with offline cpus
Shuah Khan <skhan@linuxfoundation.org>
selftests: kvm: fix mismatched fclose() after popen()
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Hannes Reinecke <hare@suse.de>
nvme: drop scan_lock and always kick requeue list when removing namespaces
Israel Rukshin <israelr@nvidia.com>
nvmet-tcp: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet-rdma: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet: fix use-after-free when a port is removed
Michael Tretter <m.tretter@pengutronix.de>
media: allegro: ignore interrupt if mailbox is not initialized
Jens Axboe <axboe@kernel.dk>
block: remove inaccurate requeue check
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ryder Lee <ryder.lee@mediatek.com>
mt76: mt7915: fix an off-by-one bound check
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Xiao Ni <xni@redhat.com>
md: update superblock after changing rdev flags in state_store
Jens Axboe <axboe@kernel.dk>
block: bump max plugged deferred size from 16 to 32
Tim Gardner <tim.gardner@canonical.com>
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
net: phy: micrel: make *-skew-ps check more lenient
Yifan Zhang <yifan1.zhang@amd.com>
drm/amdkfd: fix resume error when iommu disabled in Picasso
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Andreas Gruenbacher <agruenba@redhat.com>
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
Xin Xiong <xiongx18@fudan.edu.cn>
mmc: moxart: Fix reference count leaks in moxart_probe
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Antoine Tenart <atenart@kernel.org>
net-sysfs: try not to restart the syscall if it will fail eventually
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: imgu_fmt: Handle properly try
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Josh Don <joshdon@google.com>
fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
Corey Minyard <cminyard@mvista.com>
ipmi: Disable some operations during a panic
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Hans de Goede <hdegoede@redhat.com>
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Zong-Zhe Yang <kevin_yang@realtek.com>
rtw88: fix RX clock gate setting while fifo dump
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Martin Kepplinger <martink@posteo.de>
media: imx: set a media_device bus_info string
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set unique vdev name based in type
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Dmitriy Ulitin <ulitin@ispras.ru>
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Evgeny Novikov <novikov@ispras.ru>
media: atomisp: Fix error handling in probe
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Alagu Sankar <alagusankar@silex-india.com>
ath10k: high latency fixes for beacon buffer
Baochen Qiang <bqiang@codeaurora.org>
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
Wen Gong <wgong@codeaurora.org>
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
Sriram R <srirrama@codeaurora.org>
ath11k: Avoid reg rules update during firmware recovery
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix MMIO access page fault
Eric Biggers <ebiggers@google.com>
fscrypt: allow 256-bit master keys with AES-256-XTS
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Seevalamuthu Mariappan <seevalam@codeaurora.org>
ath11k: Align bss_chan_info structure with firmware
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Paul E. McKenney <paulmck@kernel.org>
rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Scott Wood <swood@redhat.com>
rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
Simon Ser <contact@emersion.fr>
drm/panel-orientation-quirks: add Valve Steam Deck
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
Charan Teja Reddy <charante@codeaurora.org>
dma-buf: WARN on dmabuf release with pending attachments
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Clear status bits in interrupt handler
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Johan Hovold <johan@kernel.org>
most: fix control-message timeouts
Johan Hovold <johan@kernel.org>
serial: 8250: fix racy uartclk update
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Nuno Sá <nuno.sa@analog.com>
iio: ad5770r: make devicetree property reading consistent
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Tao Zhang <quic_taozha@quicinc.com>
coresight: cti: Correct the parameter for pm_runtime_put
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix configuring Reference clock
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix reporting Data Link Layer Link Active
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix checking for link up via LTSSM state
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Li Chen <lchen@ambarella.com>
PCI: cadence: Add cdns_plat_pcie_probe() missing return
Marek Behún <kabel@kernel.org>
PCI: pci-bridge-emul: Fix emulation of W1C bits
yangerkun <yangerkun@huawei.com>
ovl: fix use after free in struct ovl_aio_req
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Arnd Bergmann <arnd@arndb.de>
ifb: fix building without CONFIG_NET_CLS_ACT
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Steven Rostedt (VMware) <rostedt@goodmis.org>
ring-buffer: Protect ring_buffer_reset() from reentrancy
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Mark Rutland <mark.rutland@arm.com>
KVM: arm64: Extract ESR_ELx.EC only
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: use the combined functions to protect critical zone
Meng Li <Meng.Li@windriver.com>
soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Wolfram Sang <wsa+renesas@sang-engineering.com>
memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
Kan Liang <kan.liang@linux.intel.com>
perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Try waking the firmware until we get an interrupt
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix (QoS) null data frame bitrate/modulation
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix tx_status mechanism
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Lukas Wunner <lukas@wunner.de>
ifb: Depend on netfilter alternatively to tc
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Ondrej Mosnacek <omosnace@redhat.com>
selinux: fix race condition when computing ocontext SIDs
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Andreas Gruenbacher <agruenba@redhat.com>
powerpc/kvm: Fix kvm_use_magic_page
Sean Christopherson <seanjc@google.com>
KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
Christoph Hellwig <hch@lst.de>
rds: stop using dmapool
Wen Gu <guwen@linux.alibaba.com>
net/smc: Correct spelling mistake to TCPF_SYN_RECV
Tony Lu <tonylu@linux.alibaba.com>
net/smc: Fix smc_link->llc_testlink_time overflow
Yu Xiao <yu.xiao@corigine.com>
nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
Dongli Zhang <dongli.zhang@oracle.com>
vmxnet3: do not stop tx queues after netif_device_detach()
Janghyub Seo <jhyub06@gmail.com>
r8169: Add device 10ec:8162 to driver r8169
Amit Engel <amit.engel@dell.com>
nvmet-tcp: fix header digest verification
Naohiro Aota <naohiro.aota@wdc.com>
block: schedule queue restart after BLK_STS_ZONE_RESOURCE
Mario <awxkrnl@gmail.com>
drm: panel-orientation-quirks: Add quirk for GPD Win3
Walter Stoll <walter.stoll@duagon.com>
watchdog: Fix OMAP watchdog early handling
Cyril Strejc <cyril.strejc@skoda.cz>
net: multicast: calculate csum of looped-back and forwarded packets
Thomas Perrot <thomas.perrot@bootlin.com>
spi: spl022: fix Microwire full duplex mode
Maurizio Lombardi <mlombard@redhat.com>
nvmet-tcp: fix a memory leak when releasing a queue
Dongli Zhang <dongli.zhang@oracle.com>
xen/netfront: stop tx queues during live migration
Asmaa Mnebhi <asmaa@nvidia.com>
gpio: mlxbf2.c: Add check for bgpio_init failure
Lorenz Bauer <lmb@cloudflare.com>
bpf: Prevent increasing bpf_jit_limit above max
Lorenz Bauer <lmb@cloudflare.com>
bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
Florian Westphal <fw@strlen.de>
fcnal-test: kill hanging ping/nettest binaries on cleanup
Bryant Mairs <bryant@mai.rs>
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Randy Dunlap <rdunlap@infradead.org>
mmc: winbond: don't build on M68K
Paweł Anikiel <pan@semihalf.com>
reset: socfpga: add empty driver allowing consumers to probe
Mikko Perttunen <mperttunen@nvidia.com>
reset: tegra-bpmp: Handle errors in BPMP response
Bastien Roucariès <rouca@debian.org>
ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
Arnd Bergmann <arnd@arndb.de>
hyperv/vmbus: include linux/bitops.h
Erik Ekman <erik@kryo.se>
sfc: Don't use netif_info before net_device setup
Erik Ekman <erik@kryo.se>
sfc: Export fibre-specific supported link modes
Zheyu Ma <zheyuma97@gmail.com>
cavium: Fix return values of the probe function
Zheyu Ma <zheyuma97@gmail.com>
mISDN: Fix return values of the probe function
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: qla2xxx: Fix unmap of already freed sgl
Zheyu Ma <zheyuma97@gmail.com>
scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
Zheyu Ma <zheyuma97@gmail.com>
cavium: Return negative value when pci_alloc_irq_vectors() fails
Davide Baldo <davide@baldo.me>
ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
Yang Yingliang <yangyingliang@huawei.com>
ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix page stealing
yangerkun <yangerkun@huawei.com>
ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
yangerkun <yangerkun@huawei.com>
ext4: ensure enough credits in ext4_ext_shift_path_extents
Shaoying Xu <shaoyi@amazon.com>
ext4: fix lazy initialization next schedule time computation in more granular unit
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Free card instance properly at probe errors
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Jason Ormes <skryking@gmail.com>
ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Kai-Heng Feng <kai.heng.feng@canonical.com>
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add quirk for ASUS UX550VE
Jaroslav Kysela <perex@perex.cz>
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Jeremy Soller <jeremy@system76.com>
ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
Johnathon Clark <john.clark@cantab.net>
ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: Fix check_ext_ctrls
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Support dynamic resolution changes
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Chen-Yu Tsai <wenst@chromium.org>
media: rkvdec: Do not override sizeimage for output format
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Helge Deller <deller@gmx.de>
parisc: Fix set_fixmap() on PA1.x CPUs
Sungjong Seo <sj1557.seo@samsung.com>
exfat: fix incorrect loading of i_blocks for large files
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Derong Liu <derong.liu@mediatek.com>
mmc: mtk-sd: Add wait dma stop done flow
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix use after free in eh_abort path
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Tadeusz Struk <tadeusz.struk@linaro.org>
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Johan Hovold <johan@kernel.org>
Input: iforce - fix control-message timeout
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for getsecid
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for selinux checks
Todd Kjos <tkjos@google.com>
binder: use euid from cred instead of using task
Nehal Bakulchandra Shah <Nehal-Bakulchandra.shah@amd.com>
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 +
.../bindings/regulator/samsung,s5m8767.txt | 23 +-
Documentation/filesystems/fscrypt.rst | 10 +-
Makefile | 4 +-
arch/arm/Makefile | 22 +-
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/bcm4708-netgear-r6250.dts | 2 +-
arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts | 2 +-
arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts | 2 +-
arch/arm/boot/dts/bcm4709-linksys-ea9200.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r7000.dts | 2 +-
arch/arm/boot/dts/bcm4709-netgear-r8000.dts | 2 +-
arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts | 2 +-
arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts | 2 +-
arch/arm/boot/dts/bcm53016-meraki-mr32.dts | 2 +-
arch/arm/boot/dts/bcm94708.dts | 2 +-
arch/arm/boot/dts/bcm94709.dts | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/qcom-msm8974.dtsi | 4 +-
arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 8 +-
arch/arm/boot/dts/stm32mp151.dtsi | 16 +-
arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi | 2 +-
arch/arm/boot/dts/sun7i-a20-olinuxino-lime2.dts | 2 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mach-s3c/irq-s3c24xx.c | 22 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2 +-
.../boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi | 4 +-
.../boot/dts/amlogic/meson-g12b-odroid-n2.dtsi | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi | 4 +-
arch/arm64/boot/dts/qcom/msm8916.dtsi | 8 +-
arch/arm64/boot/dts/qcom/pm8916.dtsi | 1 -
.../arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 1 +
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
arch/arm64/boot/dts/ti/k3-j721e-main.dtsi | 16 +-
arch/arm64/include/asm/esr.h | 1 +
arch/arm64/include/asm/pgtable.h | 12 +-
arch/arm64/kvm/hyp/hyp-entry.S | 2 +-
arch/arm64/kvm/hyp/nvhe/host.S | 2 +-
arch/arm64/mm/mmu.c | 5 +
arch/arm64/net/bpf_jit_comp.c | 5 +
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/kernel/kprobes.c | 9 +-
arch/m68k/Kconfig.machine | 1 +
arch/mips/Kconfig | 1 +
arch/mips/include/asm/cmpxchg.h | 5 +-
arch/mips/include/asm/mips-cm.h | 12 +-
arch/mips/kernel/mips-cm.c | 21 +-
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 -
arch/mips/lantiq/xway/dma.c | 23 +-
arch/openrisc/kernel/dma.c | 4 +-
arch/openrisc/kernel/smp.c | 6 +-
arch/parisc/kernel/entry.S | 2 +-
arch/parisc/kernel/smp.c | 19 +-
arch/parisc/kernel/unwind.c | 21 +-
arch/parisc/kernel/vmlinux.lds.S | 3 +-
arch/parisc/mm/fixmap.c | 5 +-
arch/parisc/mm/init.c | 4 +-
arch/powerpc/include/asm/code-patching.h | 1 +
arch/powerpc/include/asm/firmware.h | 6 -
arch/powerpc/include/asm/kvm_guest.h | 25 ++
arch/powerpc/include/asm/kvm_para.h | 2 +-
arch/powerpc/include/asm/security_features.h | 5 +
arch/powerpc/kernel/firmware.c | 12 +-
arch/powerpc/kernel/kvm.c | 2 +-
arch/powerpc/kernel/security.c | 5 +
arch/powerpc/lib/code-patching.c | 7 +-
arch/powerpc/net/bpf_jit.h | 33 ++-
arch/powerpc/net/bpf_jit64.h | 8 +-
arch/powerpc/net/bpf_jit_comp64.c | 64 +++++-
arch/powerpc/platforms/44x/fsp2.c | 2 +
arch/powerpc/platforms/85xx/Makefile | 4 +-
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 7 +-
arch/powerpc/platforms/85xx/smp.c | 12 +-
arch/powerpc/platforms/powernv/opal-prd.c | 12 +-
arch/powerpc/platforms/pseries/smp.c | 3 +
arch/s390/kvm/priv.c | 2 +
arch/s390/kvm/pv.c | 21 +-
arch/s390/mm/gmap.c | 5 +-
arch/sh/kernel/cpu/fpu.c | 10 +-
arch/x86/events/intel/uncore_snbep.c | 6 +-
arch/x86/hyperv/hv_init.c | 5 +-
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 +++-
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/cpu/hygon.c | 2 +
arch/x86/kernel/cpu/mce/intel.c | 5 +-
arch/x86/kernel/irq.c | 4 +-
arch/x86/kernel/traps.c | 2 +-
arch/x86/kvm/vmx/vmx.c | 15 +-
arch/x86/mm/mem_encrypt_identity.c | 9 +
block/blk-mq.c | 18 +-
block/blk.h | 6 +
crypto/Kconfig | 2 +-
crypto/pcrypt.c | 12 +-
drivers/acpi/ac.c | 19 ++
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +-
drivers/acpi/acpica/hwxfsleep.c | 7 +
drivers/acpi/battery.c | 2 +-
drivers/acpi/pmic/intel_pmic.c | 51 +++--
drivers/android/binder.c | 22 +-
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 +
drivers/auxdisplay/ht16k33.c | 66 +++---
drivers/auxdisplay/img-ascii-lcd.c | 10 +
drivers/base/core.c | 4 +-
drivers/base/power/main.c | 9 +-
drivers/block/ataflop.c | 237 ++++++++++++-------
drivers/block/zram/zram_drv.c | 2 +-
drivers/bluetooth/btmtkuart.c | 13 +-
drivers/bus/ti-sysc.c | 65 +++++-
drivers/char/hw_random/mtk-rng.c | 9 +-
drivers/char/ipmi/ipmi_msghandler.c | 10 +-
drivers/char/ipmi/ipmi_watchdog.c | 17 +-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/char/tpm/tpm_tis_core.c | 26 ++-
drivers/char/tpm/tpm_tis_core.h | 4 +
drivers/char/tpm/tpm_tis_spi_main.c | 1 +
drivers/clk/at91/clk-sam9x60-pll.c | 4 +-
drivers/clk/at91/pmc.c | 5 +
drivers/clk/mvebu/ap-cpu-clk.c | 14 +-
drivers/clocksource/Kconfig | 1 +
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/caam/caampkc.c | 19 +-
drivers/crypto/caam/regs.h | 3 +
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 ++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +
drivers/crypto/s5p-sss.c | 2 +
drivers/dma-buf/dma-buf.c | 1 +
drivers/dma/at_xdmac.c | 2 +-
drivers/dma/dmaengine.h | 2 +-
drivers/edac/amd64_edac.c | 22 +-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci/psci_checker.c | 2 +-
drivers/firmware/qcom_scm.c | 2 +-
drivers/gpio/gpio-mlxbf2.c | 5 +
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 8 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 17 +-
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 1 +
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 16 +-
drivers/gpu/drm/drm_panel_orientation_quirks.c | 47 +++-
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4 +
drivers/gpu/drm/msm/msm_gem.c | 4 +-
drivers/gpu/drm/msm/msm_gpu.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_svm.c | 4 +
drivers/gpu/drm/sun4i/sun8i_csc.h | 4 +-
drivers/gpu/drm/ttm/ttm_bo_vm.c | 5 -
drivers/gpu/drm/v3d/v3d_gem.c | 4 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 8 +-
drivers/hid/hid-u2fzero.c | 10 +-
drivers/hv/hyperv_vmbus.h | 1 +
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +-
drivers/hwtracing/coresight/coresight-cti-core.c | 2 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/accel/st_accel_core.c | 21 +-
drivers/iio/accel/st_accel_i2c.c | 17 +-
drivers/iio/accel/st_accel_spi.c | 17 +-
drivers/iio/dac/ad5446.c | 9 +-
drivers/iio/dac/ad5770r.c | 2 +-
drivers/iio/gyro/st_gyro_core.c | 15 +-
drivers/iio/gyro/st_gyro_i2c.c | 17 +-
drivers/iio/gyro/st_gyro_spi.c | 17 +-
drivers/iio/imu/adis.c | 4 +-
drivers/iio/magnetometer/st_magn_core.c | 15 +-
drivers/iio/magnetometer/st_magn_i2c.c | 14 +-
drivers/iio/magnetometer/st_magn_spi.c | 14 +-
drivers/iio/pressure/st_pressure_core.c | 15 +-
drivers/iio/pressure/st_pressure_i2c.c | 17 +-
drivers/iio/pressure/st_pressure_spi.c | 17 +-
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 +-
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/joystick/iforce/iforce-usb.c | 2 +-
drivers/input/mouse/elantech.c | 13 ++
drivers/input/serio/i8042-x86ia64io.h | 14 ++
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-sifive-plic.c | 8 +-
drivers/isdn/hardware/mISDN/hfcpci.c | 8 +-
drivers/md/md.c | 11 +-
drivers/media/dvb-frontends/mn88443x.c | 18 +-
drivers/media/i2c/Kconfig | 1 +
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++-
drivers/media/i2c/tda1997x.c | 8 +-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 ++-
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/platform/stm32/stm32-dcmi.c | 19 +-
drivers/media/radio/radio-wl1273.c | 2 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ir_toy.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/spi/cxd2880-spi.c | 2 +-
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/tm6000/tm6000-video.c | 3 +-
drivers/media/usb/uvc/uvc_driver.c | 7 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 +
drivers/media/v4l2-core/v4l2-ioctl.c | 67 ++++--
drivers/memory/fsl_ifc.c | 13 +-
drivers/memory/renesas-rpc-if.c | 113 +++++++---
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mfd/dln2.c | 18 ++
drivers/mfd/mfd-core.c | 2 +
drivers/mmc/host/Kconfig | 2 +-
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/moxart-mmc.c | 16 +-
drivers/mmc/host/mtk-sd.c | 5 +
drivers/mmc/host/mxs-mmc.c | 10 +
drivers/mmc/host/sdhci-omap.c | 18 +-
drivers/most/most_usb.c | 5 +-
drivers/mtd/mtdcore.c | 4 +-
drivers/mtd/nand/raw/ams-delta.c | 12 +-
drivers/mtd/nand/raw/au1550nd.c | 12 +-
drivers/mtd/nand/raw/gpio.c | 12 +-
drivers/mtd/nand/raw/mpc5121_nfc.c | 12 +-
drivers/mtd/nand/raw/orion_nand.c | 12 +-
drivers/mtd/nand/raw/pasemi_nand.c | 12 +-
drivers/mtd/nand/raw/plat_nand.c | 12 +-
drivers/mtd/nand/raw/socrates_nand.c | 12 +-
drivers/mtd/nand/raw/xway_nand.c | 12 +-
drivers/mtd/spi-nor/controllers/hisi-sfc.c | 1 -
drivers/net/Kconfig | 2 +-
drivers/net/bonding/bond_sysfs_slave.c | 36 +--
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 2 +-
drivers/net/dsa/lantiq_gswip.c | 28 ++-
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 +
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +-
drivers/net/ethernet/cavium/thunder/nic_main.c | 2 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
.../chelsio/inline_crypto/chtls/chtls_cm.c | 2 +-
.../chelsio/inline_crypto/chtls/chtls_cm.h | 2 +-
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18 +-
drivers/net/ethernet/google/gve/gve.h | 4 +-
drivers/net/ethernet/google/gve/gve_adminq.h | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 48 +++-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 2 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 9 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 5 +
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 2 +
drivers/net/ethernet/ibm/ibmvnic.c | 5 +-
drivers/net/ethernet/intel/ice/ice_base.c | 2 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 20 +-
drivers/net/ethernet/netronome/nfp/bpf/main.c | 16 +-
drivers/net/ethernet/netronome/nfp/bpf/main.h | 2 +
drivers/net/ethernet/netronome/nfp/bpf/offload.c | 17 +-
drivers/net/ethernet/realtek/r8169_main.c | 1 +
drivers/net/ethernet/sfc/mcdi_port_common.c | 37 ++-
drivers/net/ethernet/sfc/ptp.c | 4 +-
drivers/net/ethernet/sfc/siena_sriov.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 2 -
drivers/net/ethernet/ti/davinci_emac.c | 16 +-
drivers/net/ifb.c | 2 +
drivers/net/phy/micrel.c | 9 +-
drivers/net/phy/phy.c | 7 +-
drivers/net/phy/phylink.c | 2 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 1 -
drivers/net/vrf.c | 28 ++-
drivers/net/wireless/ath/ath10k/mac.c | 37 ++-
drivers/net/wireless/ath/ath10k/sdio.c | 5 +-
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.c | 4 +
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath11k/dbring.c | 16 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 13 +-
drivers/net/wireless/ath/ath11k/mac.c | 2 +-
drivers/net/wireless/ath/ath11k/qmi.c | 4 +-
drivers/net/wireless/ath/ath11k/reg.c | 11 +-
drivers/net/wireless/ath/ath11k/reg.h | 2 +-
drivers/net/wireless/ath/ath11k/wmi.c | 40 ++--
drivers/net/wireless/ath/ath11k/wmi.h | 3 +-
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +-
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 ++--
drivers/net/wireless/ath/wcn36xx/main.c | 8 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 44 +++-
drivers/net/wireless/ath/wcn36xx/txrx.c | 64 +++---
drivers/net/wireless/ath/wcn36xx/txrx.h | 3 +-
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10 +
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 +--
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 ++-
drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 15 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 8 +-
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3 +-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +-
drivers/net/wireless/realtek/rtw88/fw.c | 7 +-
drivers/net/wireless/realtek/rtw88/reg.h | 1 +
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 ++----
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 +-
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +
drivers/net/wireless/rsi/rsi_main.h | 15 +-
drivers/net/xen-netfront.c | 8 +
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvme/host/multipath.c | 9 +-
drivers/nvme/host/rdma.c | 2 +
drivers/nvme/target/configfs.c | 2 +
drivers/nvme/target/rdma.c | 24 ++
drivers/nvme/target/tcp.c | 21 +-
drivers/of/unittest.c | 16 +-
drivers/opp/of.c | 2 +-
drivers/pci/controller/cadence/pcie-cadence-plat.c | 2 +
drivers/pci/controller/dwc/pcie-uniphier.c | 26 +--
drivers/pci/controller/pci-aardvark.c | 251 ++++++++++++++++++---
drivers/pci/pci-bridge-emul.c | 13 ++
drivers/pci/quirks.c | 1 +
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 +-
drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c | 2 +-
drivers/phy/ti/phy-gmii-sel.c | 2 +
drivers/pinctrl/core.c | 2 +
drivers/pinctrl/pinctrl-equilibrium.c | 7 +-
drivers/pinctrl/renesas/core.c | 2 +-
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17040_battery.c | 2 +
drivers/power/supply/max17042_battery.c | 12 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 +-
drivers/remoteproc/remoteproc_core.c | 8 +-
drivers/reset/reset-socfpga.c | 26 +++
drivers/reset/tegra/reset-bpmp.c | 9 +-
drivers/rtc/rtc-rv3032.c | 4 +-
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/s390/cio/device_ops.c | 12 +-
drivers/s390/crypto/ap_queue.c | 2 +
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/pm8001/pm8001_hwi.c | 2 +-
drivers/scsi/qla2xxx/qla_attr.c | 24 +-
drivers/scsi/qla2xxx/qla_dbg.c | 3 +-
drivers/scsi/qla2xxx/qla_gbl.h | 2 -
drivers/scsi/qla2xxx/qla_init.c | 54 ++++-
drivers/scsi/qla2xxx/qla_mr.c | 23 --
drivers/scsi/qla2xxx/qla_os.c | 47 ++--
drivers/scsi/qla2xxx/qla_target.c | 14 +-
drivers/scsi/scsi_lib.c | 2 -
drivers/scsi/ufs/ufshcd-pltfrm.c | 6 +-
drivers/scsi/ufs/ufshcd.c | 29 +--
drivers/scsi/ufs/ufshcd.h | 3 +
drivers/soc/fsl/dpaa2-console.c | 1 +
drivers/soc/fsl/dpio/dpio-service.c | 2 +-
drivers/soc/fsl/dpio/qbman-portal.c | 9 +-
drivers/soc/qcom/apr.c | 2 +
drivers/soc/qcom/rpmhpd.c | 21 +-
drivers/soc/tegra/pmc.c | 2 +-
drivers/soundwire/debugfs.c | 2 +-
drivers/spi/spi-bcm-qspi.c | 5 +-
drivers/spi/spi-pl022.c | 5 +-
drivers/spi/spi-rpc-if.c | 4 +-
drivers/staging/ks7010/Kconfig | 3 +
drivers/staging/media/allegro-dvt/allegro-core.c | 9 +
drivers/staging/media/atomisp/i2c/atomisp-lm3554.c | 37 +--
drivers/staging/media/imx/imx-media-dev-common.c | 2 +
drivers/staging/media/ipu3/ipu3-v4l2.c | 7 +-
drivers/staging/media/rkvdec/rkvdec-h264.c | 5 +-
drivers/staging/media/rkvdec/rkvdec.c | 40 ++--
drivers/staging/most/dim2/Makefile | 2 +-
drivers/staging/most/dim2/dim2.c | 24 +-
drivers/staging/most/dim2/sysfs.c | 49 ----
drivers/staging/most/dim2/sysfs.h | 11 -
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 21 +-
drivers/tty/serial/imx.c | 4 +-
drivers/tty/serial/serial_core.c | 16 +-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/usb/chipidea/core.c | 23 +-
drivers/usb/dwc2/drd.c | 24 +-
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-pci.c | 16 ++
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/musb/Kconfig | 2 +-
drivers/usb/serial/keyspan.c | 15 +-
drivers/usb/typec/Kconfig | 4 +-
drivers/video/backlight/backlight.c | 6 -
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/virtio/virtio_ring.c | 14 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/watchdog/omap_wdt.c | 6 +-
drivers/xen/balloon.c | 86 +++++--
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/reflink.c | 2 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 14 +-
fs/crypto/fscrypt_private.h | 5 +-
fs/crypto/hkdf.c | 11 +-
fs/crypto/keysetup.c | 57 ++++-
fs/erofs/decompressor.c | 1 -
fs/exfat/inode.c | 2 +-
fs/ext4/extents.c | 63 +++---
fs/ext4/super.c | 9 +-
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/fuse/dev.c | 14 +-
fs/gfs2/glock.c | 24 +-
fs/jfs/jfs_mount.c | 51 ++---
fs/nfs/dir.c | 7 +-
fs/nfs/direct.c | 2 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/nfs4idmap.c | 2 +-
fs/nfs/nfs4proc.c | 15 +-
fs/nfs/pnfs.h | 2 +-
fs/nfs/pnfs_nfs.c | 6 +-
fs/nfs/write.c | 26 +--
fs/ocfs2/file.c | 8 +-
fs/orangefs/dcache.c | 4 +-
fs/overlayfs/file.c | 16 +-
fs/proc/stat.c | 4 +-
fs/proc/uptime.c | 14 +-
fs/quota/quota_tree.c | 15 ++
fs/tracefs/inode.c | 3 +-
include/linux/blkdev.h | 2 -
include/linux/console.h | 2 +
include/linux/ethtool_netlink.h | 3 +
include/linux/filter.h | 1 +
include/linux/kernel_stat.h | 1 +
include/linux/libata.h | 2 +-
include/linux/lsm_hook_defs.h | 14 +-
include/linux/lsm_hooks.h | 14 +-
include/linux/nfs_fs.h | 1 +
include/linux/posix-timers.h | 2 +
include/linux/rpmsg.h | 2 +-
include/linux/sched/task.h | 3 +-
include/linux/sched/task_stack.h | 4 +
include/linux/security.h | 33 +--
include/linux/seq_file.h | 2 +-
include/linux/tpm.h | 1 +
include/memory/renesas-rpc-if.h | 1 +
include/net/inet_connection_sock.h | 2 +-
include/net/llc.h | 4 +-
include/net/neighbour.h | 12 +-
include/net/sch_generic.h | 4 +
include/net/sock.h | 2 +-
include/net/strparser.h | 16 +-
include/net/tcp.h | 17 +-
include/net/udp.h | 5 +-
include/uapi/linux/ethtool_netlink.h | 4 +-
include/uapi/linux/pci_regs.h | 6 +
kernel/bpf/core.c | 4 +-
kernel/bpf/verifier.c | 4 +-
kernel/cgroup/cgroup.c | 31 ++-
kernel/cgroup/rstat.c | 2 -
kernel/fork.c | 3 +-
kernel/kprobes.c | 3 +-
kernel/locking/lockdep.c | 4 +-
kernel/power/energy_model.c | 23 +-
kernel/power/swap.c | 7 +-
kernel/rcu/rcutorture.c | 48 +++-
kernel/rcu/tasks.h | 3 +-
kernel/rcu/tree_exp.h | 2 +-
kernel/rcu/tree_plugin.h | 8 +-
kernel/sched/core.c | 43 ++--
kernel/signal.c | 18 +-
kernel/time/posix-cpu-timers.c | 19 +-
kernel/trace/ring_buffer.c | 5 +
kernel/trace/tracing_map.c | 40 ++--
kernel/workqueue.c | 15 +-
lib/decompress_unxz.c | 2 +-
lib/iov_iter.c | 5 +-
lib/xz/xz_dec_lzma2.c | 21 +-
lib/xz/xz_dec_stream.c | 6 +-
mm/memcontrol.c | 27 +--
mm/oom_kill.c | 23 +-
mm/zsmalloc.c | 7 +-
net/8021q/vlan.c | 3 -
net/8021q/vlan_dev.c | 3 +
net/9p/client.c | 2 +
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/sco.c | 33 +--
net/can/j1939/main.c | 7 +
net/can/j1939/transport.c | 6 +
net/core/dev.c | 5 +-
net/core/filter.c | 21 ++
net/core/neighbour.c | 48 ++--
net/core/net-sysfs.c | 55 +++++
net/core/net_namespace.c | 4 +
net/core/stream.c | 3 -
net/core/sysctl_net_core.c | 2 +-
net/dccp/dccp.h | 2 +-
net/dccp/proto.c | 14 +-
net/ethtool/pause.c | 3 +-
net/ipv4/inet_connection_sock.c | 4 +-
net/ipv4/inet_hashtables.c | 2 +-
net/ipv4/proc.c | 2 +-
net/ipv4/tcp.c | 40 +++-
net/ipv4/tcp_bpf.c | 1 -
net/ipv6/addrconf.c | 3 +
net/ipv6/udp.c | 2 +-
net/netfilter/nf_conntrack_proto_udp.c | 7 +-
net/netfilter/nfnetlink_queue.c | 2 +-
net/netfilter/nft_dynset.c | 11 +-
net/rds/ib.c | 10 -
net/rds/ib.h | 6 -
net/rds/ib_cm.c | 128 +++++++----
net/rds/ib_recv.c | 18 +-
net/rds/ib_send.c | 8 +
net/rxrpc/rtt.c | 2 +-
net/sched/sch_generic.c | 9 +
net/sched/sch_mq.c | 24 ++
net/sched/sch_mqprio.c | 23 ++
net/sched/sch_taprio.c | 27 ++-
net/smc/af_smc.c | 20 +-
net/smc/smc_llc.c | 2 +-
net/strparser/strparser.c | 10 +-
net/sunrpc/addr.c | 40 ++--
net/sunrpc/xprt.c | 28 +--
net/vmw_vsock/af_vsock.c | 2 +
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/security.c | 14 +-
security/selinux/hooks.c | 36 ++-
security/selinux/ss/services.c | 162 +++++++------
security/smack/smackfs.c | 11 +-
sound/core/oss/mixer_oss.c | 43 +++-
sound/core/timer.c | 17 +-
sound/pci/hda/hda_intel.c | 74 +++---
sound/pci/hda/patch_realtek.c | 82 +++++++
sound/soc/codecs/cs42l42.c | 88 ++++----
sound/soc/soc-core.c | 1 +
sound/soc/sof/topology.c | 9 +
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/format.c | 1 +
sound/usb/line6/driver.c | 14 +-
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/bpf/bpftool/prog.c | 16 +-
tools/lib/bpf/bpf_core_read.h | 2 +-
tools/lib/bpf/btf.c | 25 +-
tools/objtool/check.c | 19 +-
tools/perf/util/bpf-event.c | 4 +-
.../testing/selftests/bpf/prog_tests/perf_buffer.c | 4 +-
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 85 +++++--
tools/testing/selftests/bpf/progs/strobemeta.h | 11 +
tools/testing/selftests/bpf/progs/test_sk_lookup.c | 62 +++--
tools/testing/selftests/bpf/test_progs.c | 4 +-
.../testing/selftests/bpf/verifier/array_access.c | 2 +-
tools/testing/selftests/core/close_range_test.c | 2 +-
tools/testing/selftests/kvm/lib/x86_64/svm.c | 22 +-
.../selftests/kvm/x86_64/mmio_warning_test.c | 2 +-
tools/testing/selftests/net/fcnal-test.sh | 3 +
tools/testing/selftests/net/udpgso_bench_rx.c | 11 +-
593 files changed, 4821 insertions(+), 2452 deletions(-)
^ permalink raw reply [relevance 1%]
* [PATCH 5.4 182/355] Bluetooth: fix init and cleanup of sco_conn.timeout_work
2021-11-15 16:58 1% [PATCH 5.4 000/355] 5.4.160-rc1 review Greg Kroah-Hartman
@ 2021-11-15 17:01 11% ` Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-11-15 17:01 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 49d8a5606428ca0962d09050a5af81461ff90fbb ]
Before freeing struct sco_conn, all delayed timeout work should be
cancelled. Otherwise, sco_sock_timeout could potentially use the
sco_conn after it has been freed.
Additionally, sco_conn.timeout_work should be initialized when the
connection is allocated, not when the channel is added. This is
because an sco_conn can create channels with multiple sockets over its
lifetime, which happens if sockets are released but the connection
isn't deleted.
Fixes: ba316be1b6a0 ("Bluetooth: schedule SCO timeouts with delayed_work")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 9 ++++-----
1 file changed, 4 insertions(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index cc5a1d2545679..2c616c1c62958 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -133,6 +133,7 @@ static struct sco_conn *sco_conn_add(struct hci_conn *hcon)
return NULL;
spin_lock_init(&conn->lock);
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
hcon->sco_data = conn;
conn->hcon = hcon;
@@ -196,11 +197,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_chan_del(sk, err);
bh_unlock_sock(sk);
sock_put(sk);
-
- /* Ensure no more work items will run before freeing conn. */
- cancel_delayed_work_sync(&conn->timeout_work);
}
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
+
hcon->sco_data = NULL;
kfree(conn);
}
@@ -213,8 +214,6 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
- INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
-
if (parent)
bt_accept_enqueue(parent, sk, true);
}
--
2.33.0
^ permalink raw reply related [relevance 11%]
* [PATCH 5.4 000/355] 5.4.160-rc1 review
@ 2021-11-15 16:58 1% Greg Kroah-Hartman
2021-11-15 17:01 11% ` [PATCH 5.4 182/355] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
0 siblings, 1 reply; 200+ results
From: Greg Kroah-Hartman @ 2021-11-15 16:58 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.4.160 release.
There are 355 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 17 Nov 2021 16:52:23 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.160-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.4.160-rc1
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Partial revert of commit 6f9f17287e78
Pali Rohár <pali@kernel.org>
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
Halil Pasic <pasic@linux.ibm.com>
s390/cio: make ccw_device_dma_* more robust
Sven Schnelle <svens@linux.ibm.com>
s390/tape: fix timer initialization in tape_std_assign()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: check the subchannel validity for dev_busid
Marek Vasut <marex@denx.de>
video: backlight: Drop maximum brightness override for brightness zero
Michal Hocko <mhocko@suse.com>
mm, oom: do not trigger out_of_memory from the #PF
Vasily Averin <vvs@virtuozzo.com>
mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/security: Add a helper to query stf_barrier type
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/bpf: Validate branch ranges
Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
powerpc/lib: Add helper to check if offset is within conditional branch range
Miklos Szeredi <mszeredi@redhat.com>
ovl: fix deadlock in splice write
Dominique Martinet <asmadeus@codewreck.org>
9p/net: fix missing error check in p9_check_errors
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should use GFP_NOFS for directory inodes
Guo Ren <guoren@linux.alibaba.com>
irqchip/sifive-plic: Fixup EOI failed when masked
Helge Deller <deller@gmx.de>
parisc: Fix set_fixmap() on PA1.x CPUs
Helge Deller <deller@gmx.de>
parisc: Fix backtrace to always include init funtion names
Arnd Bergmann <arnd@arndb.de>
ARM: 9156/1: drop cc-option fallbacks for architecture selection
Michał Mirosław <mirq-linux@rere.qmqm.pl>
ARM: 9155/1: fix early early_iounmap()
Willem de Bruijn <willemb@google.com>
selftests/net: udpgso_bench_rx: fix port argument
Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
cxgb4: fix eeprom len when diagnostics not implemented
Dust Li <dust.li@linux.alibaba.com>
net/smc: fix sk_refcnt underflow on linkdown and fallback
Eiichi Tsukata <eiichi.tsukata@nutanix.com>
vsock: prevent unnecessary refcnt inc for nonblocking connect
Guangbin Huang <huangguangbin2@huawei.com>
net: hns3: allow configure ETS bandwidth of all TCs
Eric Dumazet <edumazet@google.com>
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
John Fastabend <john.fastabend@gmail.com>
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
Arnd Bergmann <arnd@arndb.de>
arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
Chengfeng Ye <cyeaa@connect.ust.hk>
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
Eric Dumazet <edumazet@google.com>
llc: fix out-of-bound array index in llc_sk_dev_hash()
Ian Rogers <irogers@google.com>
perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
Dan Carpenter <dan.carpenter@oracle.com>
zram: off by one in read_block_state()
Miaohe Lin <linmiaohe@huawei.com>
mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
Huang Guobin <huangguobin4@huawei.com>
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
Hans de Goede <hdegoede@redhat.com>
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
Ziyang Xuan <william.xuanziyang@huawei.com>
net: vlan: fix a UAF in vlan_dev_real_dev()
Maxim Kiselev <bigunclemax@gmail.com>
net: davinci_emac: Fix interrupt pacing disable
YueHaibing <yuehaibing@huawei.com>
xen-pciback: Fix return in pm_ctrl_init()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4: Fix a regression in nfs_set_open_stateid_locked()
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Turn off target reset during issue_lip
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix gnl list corruption
Jackie Liu <liuyun01@kylinos.cn>
ar7: fix kernel builds for compiler test
Ahmad Fatoum <a.fatoum@pengutronix.de>
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Randy Dunlap <rdunlap@infradead.org>
m68k: set a default value for MEMORY_RESERVE
Eric W. Biederman <ebiederm@xmission.com>
signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
Lars-Peter Clausen <lars@metafoo.de>
dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
Florian Westphal <fw@strlen.de>
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Robert-Ionut Alexa <robert-ionut.alexa@nxp.com>
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Fix frame buffer device blanking
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: ht16k33: Connect backlight to fbdev
Geert Uytterhoeven <geert@linux-m68k.org>
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
Claudiu Beznea <claudiu.beznea@microchip.com>
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Zev Weiss <zev@bewilderbeest.net>
mtd: core: don't remove debugfs directory if device is in use
Evgeny Novikov <novikov@ispras.ru>
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
Jia-Ju Bai <baijiaju1990@gmail.com>
fs: orangefs: fix error return code of orangefs_revalidate_lookup()
Trond Myklebust <trond.myklebust@hammerspace.com>
NFS: Fix deadlocks in nfs_scan_commit_list()
YueHaibing <yuehaibing@huawei.com>
opp: Fix return in _opp_add_static_v2()
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
Marek Behún <kabel@kernel.org>
PCI: aardvark: Don't spam about PIO Response Status
Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
drm/plane-helper: fix uninitialized variable reference
Baptiste Lepers <baptiste.lepers@gmail.com>
pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
Tom Rix <trix@redhat.com>
apparmor: fix error check
Hans de Goede <hdegoede@redhat.com>
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
Geert Uytterhoeven <geert+renesas@glider.be>
mips: cm: Convert to bitfield API to fix out-of-bounds access
Bixuan Cui <cuibixuan@linux.alibaba.com>
powerpc/44x/fsp2: add missing of_node_put
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: properly handle timeouts in usb_submit_urb
Andrej Shadura <andrew.shadura@collabora.co.uk>
HID: u2fzero: clarify error check and length calculations
Anssi Hannula <anssi.hannula@bitwise.fi>
serial: xilinx_uartps: Fix race condition causing stuck TX
Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
phy: qcom-qusb2: Fix a memory leak on probe
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
Richard Fitzgerald <rf@opensource.cirrus.com>
ASoC: cs42l42: Correct some register default values
Olivier Moysan <olivier.moysan@foss.st.com>
ARM: dts: stm32: fix SAI sub nodes register range
Vegard Nossum <vegard.nossum@oracle.com>
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
Leon Romanovsky <leonro@nvidia.com>
RDMA/mlx4: Return missed an error if device doesn't support steering
Dan Carpenter <dan.carpenter@oracle.com>
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
Jakob Hauser <jahau@rocketmail.com>
power: supply: rt5033_battery: Change voltage values to µV
Dan Carpenter <dan.carpenter@oracle.com>
usb: gadget: hid: fix error code in do_config()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Christophe Leroy <christophe.leroy@csgroup.eu>
video: fbdev: chipsfb: use memset_io() instead of memset()
Clément Léger <clement.leger@bootlin.com>
clk: at91: check pmc node status before registering syscore ops
Dongliang Mu <mudongliangabcd@gmail.com>
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
soc/tegra: Fix an error handling path in tegra_powergate_power_up()
Andreas Kemnade <andreas@kemnade.info>
arm: dts: omap3-gta04a4: accelerometer irq fix
Takashi Iwai <tiwai@suse.de>
ALSA: hda: Reduce udelay() at SKL+ position reporting
Dongliang Mu <mudongliangabcd@gmail.com>
JFS: fix memleak in jfs_mount
Jackie Liu <liuyun01@kylinos.cn>
MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
Tong Zhang <ztong0001@gmail.com>
scsi: dc395: Fix error case unwinding
Peter Rosin <peda@axentia.se>
ARM: dts: at91: tse850: the emac<->phy interface is rmii
Anand Moon <linux.amoon@gmail.com>
arm64: dts: meson-g12a: Fix the pwm regulator supply properties
Selvin Xavier <selvin.xavier@broadcom.com>
RDMA/bnxt_re: Fix query SRQ failure
Marijn Suijten <marijn.suijten@somainline.org>
ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
Alex Bee <knaerzche@gmail.com>
arm64: dts: rockchip: Fix GPU register width for RK3328
Jackie Liu <liuyun01@kylinos.cn>
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
Junji Wei <weijunji@bytedance.com>
RDMA/rxe: Fix wrong port_cap_flags
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: Process crqs after enabling interrupts
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: don't stop queue in xmit
Jakub Kicinski <kuba@kernel.org>
udp6: allow SO_MARK ctrl msg to affect routing
Andrea Righi <andrea.righi@canonical.com>
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Daniel Jordan <daniel.m.jordan@oracle.com>
crypto: pcrypt - Delay write to padata->info
Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
net: phylink: avoid mvneta warning when setting pause parameters
Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
net: amd-xgbe: Toggle PLL settings during rate change
Alex Deucher <alexander.deucher@amd.com>
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Benjamin Li <benl@squareup.com>
wcn36xx: add proper DMA memory barriers in rx path
Wang Hai <wanghai38@huawei.com>
libertas: Fix possible memory leak in probe and disconnect
Wang Hai <wanghai38@huawei.com>
libertas_tf: Fix possible memory leak in probe and disconnect
Janis Schoetterl-Glausch <scgl@linux.ibm.com>
KVM: s390: Fix handle_sske page fault handling
Tiezhu Yang <yangtiezhu@loongson.cn>
samples/kretprobes: Fix return value if register_kretprobe() failed
Jon Maxwell <jmaxwell37@gmail.com>
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Mark Rutland <mark.rutland@arm.com>
irq: mips: avoid nested irq_enter()
David Hildenbrand <david@redhat.com>
s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
Andrii Nakryiko <andrii@kernel.org>
libbpf: Fix BTF data layout checks and allow empty BTF
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Jessica Zhang <jesszhan@codeaurora.org>
drm/msm: Fix potential NULL dereference in DPU SSPP
Kees Cook <keescook@chromium.org>
clocksource/drivers/timer-ti-dm: Select TIMER_OF
Anders Roxell <anders.roxell@linaro.org>
PM: hibernate: fix sparse warnings
Max Gurtovoy <mgurtovoy@nvidia.com>
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
Stefan Agner <stefan@agner.ch>
phy: micrel: ksz8041nl: do not use power down mode
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Send DELBA requests according to spec
Ziyang Xuan <william.xuanziyang@huawei.com>
rsi: stop thread firstly in rsi_91x_init() error handling
Lorenzo Bianconi <lorenzo@kernel.org>
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
Nathan Chancellor <nathan@kernel.org>
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
Michael Schmitz <schmitzmic@gmail.com>
block: ataflop: fix breakage introduced at blk-mq refactoring
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mmc: mxs-mmc: disable regulator on error and in the remove function
Jakub Kicinski <kuba@kernel.org>
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
Dan Carpenter <dan.carpenter@oracle.com>
drm/msm: uninitialized variable in msm_gem_import()
Sven Eckelmann <seckelmann@datto.com>
ath10k: fix max antenna gain unit
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
Yang Yingliang <yangyingliang@huawei.com>
hwmon: Fix possible memleak in __hwmon_device_register()
Daniel Borkmann <daniel@iogearbox.net>
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
Dan Carpenter <dan.carpenter@oracle.com>
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
Arnd Bergmann <arnd@arndb.de>
memstick: avoid out-of-range warning
Tony Lindgren <tony@atomide.com>
mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
Dan Carpenter <dan.carpenter@oracle.com>
b43: fix a lower bounds test
Dan Carpenter <dan.carpenter@oracle.com>
b43legacy: fix a lower bounds test
Markus Schneider-Pargmann <msp@baylibre.com>
hwrng: mtk - Force runtime pm ops for sleep ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - disregard spurious PFVF interrupts
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - detect PFVF collision after ACK
Evgeny Novikov <novikov@ispras.ru>
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_dynset: relax superfluous check on set updates
Yazen Ghannam <yazen.ghannam@amd.com>
EDAC/amd64: Handle three rank interleaving mode
Linus Lüssing <ll@simonwunderlich.de>
ath9k: Fix potential interrupt storm on queue reset
Colin Ian King <colin.king@canonical.com>
media: em28xx: Don't use ops->suspend if it is NULL
Anel Orazgaliyeva <anelkz@amazon.de>
cpuidle: Fix kobject memory leaks in error paths
Arnd Bergmann <arnd@arndb.de>
crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
Punit Agrawal <punitagrawal@gmail.com>
kprobes: Do not use local variable when creating debugfs file
Colin Ian King <colin.king@canonical.com>
media: cx23885: Fix snd_card_free call on null card pointer
Kees Cook <keescook@chromium.org>
media: tm6000: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: si470x: Avoid card name truncation
Kees Cook <keescook@chromium.org>
media: radio-wl1273: Avoid card name truncation
Randy Dunlap <rdunlap@infradead.org>
media: i2c: ths8200 needs V4L2_ASYNC
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
Tom Rix <trix@redhat.com>
media: TDA1997x: handle short reads of hdmi info frame.
Pavel Skripkin <paskripkin@gmail.com>
media: dvb-usb: fix ununit-value in az6027_rc_query
Colin Ian King <colin.king@canonical.com>
media: cxd2880-spi: Fix a null pointer dereference on error handling path
Pavel Skripkin <paskripkin@gmail.com>
media: em28xx: add missing em28xx_close_extension
Arnd Bergmann <arnd@arndb.de>
drm/amdgpu: fix warning for overflow check
Loic Poulain <loic.poulain@linaro.org>
ath10k: Fix missing frame timestamp for beacon/probe-resp
Linus Walleij <linus.walleij@linaro.org>
net: dsa: rtl8366rb: Fix off-by-one bug
Jiasheng Jiang <jiasheng@iscas.ac.cn>
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
Michael Walle <michael@walle.cc>
crypto: caam - disable pkc for non-E SoCs
Dinghao Liu <dinghao.liu@zju.edu.cn>
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Ajay Singh <ajay.kathat@microchip.com>
wilc1000: fix possible memory leak in cfg_scan_result()
Waiman Long <longman@redhat.com>
cgroup: Make rebind_subsystems() disable v2 controllers all at once
Yajun Deng <yajun.deng@linux.dev>
net: net_namespace: Fix undefined member in key_remove_domain()
liuyuntao <liuyuntao10@huawei.com>
virtio-gpu: fix possible memory allocation failure
Iago Toral Quiroga <itoral@igalia.com>
drm/v3d: fix wait for TMU write combiner flush
Neeraj Upadhyay <neeraju@codeaurora.org>
rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Andrii Nakryiko <andrii@kernel.org>
selftests/bpf: Fix strobemeta selftest regression
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
Sven Schnelle <svens@stackframe.org>
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
Sven Schnelle <svens@stackframe.org>
parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
Helge Deller <deller@gmx.de>
task_stack: Fix end_of_stack() for architectures with upwards-growing stack
Sven Schnelle <svens@stackframe.org>
parisc: fix warning in flush_tlb_all
Vitaly Kuznetsov <vkuznets@redhat.com>
x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
Yang Yingliang <yangyingliang@huawei.com>
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
Josef Bacik <josef@toxicpanda.com>
btrfs: do not take the uuid_mutex in btrfs_rm_device
Eric Dumazet <edumazet@google.com>
net: annotate data-race in neigh_output()
Florian Westphal <fw@strlen.de>
vrf: run conntrack only in context of lower/physdev for locally generated packets
Arnd Bergmann <arnd@arndb.de>
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: lantiq_gswip: serialize access to the PCE table
Stephen Suryaputra <ssuryaextr@gmail.com>
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Masami Hiramatsu <mhiramat@kernel.org>
ARM: clang: Do not rely on lr register for stacktrace
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: disable RX-diversity in powersave
Shuah Khan <skhan@linuxfoundation.org>
selftests: kvm: fix mismatched fclose() after popen()
Ye Bin <yebin10@huawei.com>
PM: hibernate: Get block device exclusively in swsusp_check()
Hannes Reinecke <hare@suse.de>
nvme: drop scan_lock and always kick requeue list when removing namespaces
Israel Rukshin <israelr@nvidia.com>
nvmet-tcp: fix use-after-free when a port is removed
Israel Rukshin <israelr@nvidia.com>
nvmet: fix use-after-free when a port is removed
Jens Axboe <axboe@kernel.dk>
block: remove inaccurate requeue check
Zheyu Ma <zheyuma97@gmail.com>
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Kalesh Singh <kaleshsingh@google.com>
tracing/cfi: Fix cmp_entries_* functions signature mismatch
Menglong Dong <imagedong@tencent.com>
workqueue: make sysfs of unbound kworker cpumask more clever
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Validate the value before assigning it to an enum variable
Lasse Collin <lasse.collin@tukaani.org>
lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
Zheyu Ma <zheyuma97@gmail.com>
memstick: r592: Fix a UAF bug when removing the driver
Kees Cook <keescook@chromium.org>
leaking_addresses: Always print a trailing newline
André Almeida <andrealmeid@collabora.com>
ACPI: battery: Accept charges over the design capacity as full
Andreas Gruenbacher <agruenba@redhat.com>
iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
Tuo Li <islituo@gmail.com>
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Steven Rostedt (VMware) <rostedt@goodmis.org>
tracefs: Have tracefs directories not set OTH permission bits by default
Antoine Tenart <atenart@kernel.org>
net-sysfs: try not to restart the syscall if it will fail eventually
Anant Thazhemadam <anant.thazhemadam@gmail.com>
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
Ricardo Ribalda <ribalda@chromium.org>
media: ipu3-imgu: imgu_fmt: Handle properly try
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPICA: Avoid evaluating methods too early during system resume
Corey Minyard <cminyard@mvista.com>
ipmi: Disable some operations during a panic
Nadezda Lutovinova <lutovinova@ispras.ru>
media: rcar-csi2: Add checking to rcsi2_start_receiver()
Hans de Goede <hdegoede@redhat.com>
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Randy Dunlap <rdunlap@infradead.org>
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
Rajat Asthana <rajatasthana4@gmail.com>
media: mceusb: return without resubmitting URB in case of -EPROTO error.
Martin Kepplinger <martin.kepplinger@puri.sm>
media: imx: set a media_device bus_info string
Nadezda Lutovinova <lutovinova@ispras.ru>
media: s5p-mfc: Add checking to s5p_mfc_probe().
Tuo Li <islituo@gmail.com>
media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set unique vdev name based in type
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Return -EIO for control errors
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Set capability in s_param
Dmitriy Ulitin <ulitin@ispras.ru>
media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
Zheyu Ma <zheyuma97@gmail.com>
media: netup_unidvb: handle interrupt properly according to the firmware
Dirk Bender <d.bender@phytec.de>
media: mt9p031: Fix corrupted frame after restarting stream
Alagu Sankar <alagusankar@silex-india.com>
ath10k: high latency fixes for beacon buffer
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Properly initialize private structure on interface type changes
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
Peter Zijlstra <peterz@infradead.org>
x86: Increase exception stack sizes
Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
smackfs: Fix use-after-free in netlbl_catmap_walk()
Jakub Kicinski <kuba@kernel.org>
net: sched: update default qdisc visibility after Tx queue cnt changes
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Avoid RCU-induced noinstr fail
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: reset correct number of channel
Aleksander Jan Bajkowski <olek2@wp.pl>
MIPS: lantiq: dma: add small delay after reset
Barnabás Pőcze <pobrn@protonmail.com>
platform/x86: wmi: do not fail if disabling fails
Simon Ser <contact@emersion.fr>
drm/panel-orientation-quirks: add Valve Steam Deck
Wang ShaoBo <bobo.shaobowang@huawei.com>
Bluetooth: fix use-after-free error in lock_sock_nested()
Takashi Iwai <tiwai@suse.de>
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
Hans de Goede <hdegoede@redhat.com>
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
Charan Teja Reddy <charante@codeaurora.org>
dma-buf: WARN on dmabuf release with pending attachments
Johan Hovold <johan@kernel.org>
USB: chipidea: fix interrupt deadlock
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix control-message timeouts
Wang Hai <wanghai38@huawei.com>
USB: serial: keyspan: fix memleak on probe errors
Pekka Korpinen <pekka.korpinen@iki.fi>
iio: dac: ad5446: Fix ad5622_write() return value
Yang Yingliang <yangyingliang@huawei.com>
pinctrl: core: fix possible memory leak in pinctrl_enable()
Zhang Yi <yi.zhang@huawei.com>
quota: correct error number in free_dqentry()
Zhang Yi <yi.zhang@huawei.com>
quota: check block number when reading the block in quota file
Marek Behún <kabel@kernel.org>
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
Marek Behún <kabel@kernel.org>
PCI: aardvark: Fix return value of MSI domain .alloc() method
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix reporting Data Link Layer Link Active
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not unmask unused interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix checking for link up via LTSSM state
Pali Rohár <pali@kernel.org>
PCI: aardvark: Do not clear status bits of masked interrupts
Marek Behún <kabel@kernel.org>
PCI: pci-bridge-emul: Fix emulation of W1C bits
Juergen Gross <jgross@suse.com>
xen/balloon: add late_initcall_sync() for initial ballooning done
Pavel Skripkin <paskripkin@gmail.com>
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
Takashi Iwai <tiwai@suse.de>
ALSA: mixer: oss: Fix racy access to slots
Pali Rohár <pali@kernel.org>
serial: core: Fix initializing and restoring termios speed
Xiaoming Ni <nixiaoming@huawei.com>
powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_can_recv(): ignore messages with invalid source address
Zhang Changzhong <zhangchangzhong@huawei.com>
can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
Henrik Grimler <henrik@grimler.se>
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
Eric W. Biederman <ebiederm@xmission.com>
signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
Eric W. Biederman <ebiederm@xmission.com>
signal: Remove the bogus sigkill_pending in ptrace_stop
Alok Prasad <palok@marvell.com>
RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
Marek Vasut <marex@denx.de>
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix rate mask set leading to P2P failure
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
Martin Fuzzey <martin.fuzzey@flowbird.group>
rsi: fix occasional initialisation failure with BT coex
Benjamin Li <benl@squareup.com>
wcn36xx: handle connection loss indication
Reimar Döffinger <Reimar.Doeffinger@gmx.de>
libata: fix checking of DMA state
Jonas Dreßler <verdre@v0yd.nl>
mwifiex: Read a PCI register after writing the TX ring write pointer
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix HT40 capability for 2Ghz band
Austin Kim <austin.kim@lge.com>
evm: mark evm_fixmode as __ro_after_init
Johan Hovold <johan@kernel.org>
rtl8187: fix control-message timeouts
Ingmar Klein <ingmar_klein@web.de>
PCI: Mark Atheros QCA6174 to avoid bus reset
Johan Hovold <johan@kernel.org>
ath10k: fix division by zero in send path
Johan Hovold <johan@kernel.org>
ath10k: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix control-message timeout
Johan Hovold <johan@kernel.org>
ath6kl: fix division by zero in send path
Johan Hovold <johan@kernel.org>
mwifiex: fix division by zero in fw download path
Eric Badger <ebadger@purestorage.com>
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
Zev Weiss <zev@bewilderbeest.net>
hwmon: (pmbus/lm25066) Add offset coefficients
Masami Hiramatsu <mhiramat@kernel.org>
ia64: kprobes: Fix to pass correct trampoline address to the handler
Andreas Gruenbacher <agruenba@redhat.com>
powerpc/kvm: Fix kvm_use_magic_page
Anand Jain <anand.jain@oracle.com>
btrfs: call btrfs_check_rw_degradable only if there is a missing device
Filipe Manana <fdmanana@suse.com>
btrfs: fix lost error handling when replaying directory deletes
Li Zhang <zhanglikernel@gmail.com>
btrfs: clear MISSING device status bit in btrfs_close_one_device
Wen Gu <guwen@linux.alibaba.com>
net/smc: Correct spelling mistake to TCPF_SYN_RECV
Yu Xiao <yu.xiao@corigine.com>
nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
Dongli Zhang <dongli.zhang@oracle.com>
vmxnet3: do not stop tx queues after netif_device_detach()
Janghyub Seo <jhyub06@gmail.com>
r8169: Add device 10ec:8162 to driver r8169
Amit Engel <amit.engel@dell.com>
nvmet-tcp: fix header digest verification
Mario <awxkrnl@gmail.com>
drm: panel-orientation-quirks: Add quirk for GPD Win3
Walter Stoll <walter.stoll@duagon.com>
watchdog: Fix OMAP watchdog early handling
Cyril Strejc <cyril.strejc@skoda.cz>
net: multicast: calculate csum of looped-back and forwarded packets
Thomas Perrot <thomas.perrot@bootlin.com>
spi: spl022: fix Microwire full duplex mode
Maurizio Lombardi <mlombard@redhat.com>
nvmet-tcp: fix a memory leak when releasing a queue
Dongli Zhang <dongli.zhang@oracle.com>
xen/netfront: stop tx queues during live migration
Lorenz Bauer <lmb@cloudflare.com>
bpf: Prevent increasing bpf_jit_limit above max
Lorenz Bauer <lmb@cloudflare.com>
bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
Bryant Mairs <bryant@mai.rs>
drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
Randy Dunlap <rdunlap@infradead.org>
mmc: winbond: don't build on M68K
Paweł Anikiel <pan@semihalf.com>
reset: socfpga: add empty driver allowing consumers to probe
Mikko Perttunen <mperttunen@nvidia.com>
reset: tegra-bpmp: Handle errors in BPMP response
Bastien Roucariès <rouca@debian.org>
ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
Arnd Bergmann <arnd@arndb.de>
hyperv/vmbus: include linux/bitops.h
Erik Ekman <erik@kryo.se>
sfc: Don't use netif_info before net_device setup
Zheyu Ma <zheyuma97@gmail.com>
cavium: Fix return values of the probe function
Dmitry Bogdanov <d.bogdanov@yadro.com>
scsi: qla2xxx: Fix unmap of already freed sgl
Zheyu Ma <zheyuma97@gmail.com>
scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
Zheyu Ma <zheyuma97@gmail.com>
cavium: Return negative value when pci_alloc_irq_vectors() fails
Sean Christopherson <seanjc@google.com>
x86/irq: Ensure PI wakeup handler is unregistered before module unload
Jane Malalane <jane.malalane@citrix.com>
x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
Tom Lendacky <thomas.lendacky@amd.com>
x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix page stealing
Takashi Iwai <tiwai@suse.de>
ALSA: timer: Unconditionally unlink slave instances, too
Wang Wensheng <wangwensheng4@huawei.com>
ALSA: timer: Fix use-after-free problem
Austin Kim <austin.kim@lge.com>
ALSA: synth: missing check for possible NULL after the call to kstrdup
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 400
Johan Hovold <johan@kernel.org>
ALSA: line6: fix control and interrupt message timeouts
Johan Hovold <johan@kernel.org>
ALSA: 6fire: fix control and bulk message timeouts
Johan Hovold <johan@kernel.org>
ALSA: ua101: fix division by zero at probe
Kai-Heng Feng <kai.heng.feng@canonical.com>
ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
Takashi Iwai <tiwai@suse.de>
ALSA: hda/realtek: Add quirk for ASUS UX550VE
Jaroslav Kysela <perex@perex.cz>
ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
Tim Crawford <tcrawford@system76.com>
ALSA: hda/realtek: Add quirk for Clevo PC70HS
Ricardo Ribalda <ribalda@chromium.org>
media: v4l2-ioctl: Fix check_ext_ctrls
Sean Young <sean@mess.org>
media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
Sean Young <sean@mess.org>
media: ite-cir: IR receiver stop working after receive overflow
Tang Bin <tangbin@cmss.chinamobile.com>
crypto: s5p-sss - Add error handling in s5p_aes_probe()
jing yangyang <cgel.zte@gmail.com>
firmware/psci: fix application of sizeof to pointer
Dan Carpenter <dan.carpenter@oracle.com>
tpm: Check for integer overflow in tpm2_map_response_body()
Helge Deller <deller@gmx.de>
parisc: Fix ptrace check on syscall return
Christian Löhle <CLoehle@hyperstone.com>
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Quinn Tran <qutran@marvell.com>
scsi: qla2xxx: Fix use after free in eh_abort path
Arun Easi <aeasi@marvell.com>
scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
Jan Kara <jack@suse.cz>
ocfs2: fix data corruption on truncate
Damien Le Moal <damien.lemoal@opensource.wdc.com>
libata: fix read log timeout value
Takashi Iwai <tiwai@suse.de>
Input: i8042 - Add quirk for Fujitsu Lifebook T725
Phoenix Huang <phoenix@emc.com.tw>
Input: elantench - fix misreporting trackpoint coordinates
Johan Hovold <johan@kernel.org>
Input: iforce - fix control-message timeout
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for getsecid
Todd Kjos <tkjos@google.com>
binder: use cred instead of task for selinux checks
Todd Kjos <tkjos@google.com>
binder: use euid from cred instead of using task
Nehal Bakulchandra Shah <Nehal-Bakulchandra.shah@amd.com>
usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 ++
.../bindings/regulator/samsung,s5m8767.txt | 23 ++--
Makefile | 4 +-
arch/arm/Makefile | 22 ++--
arch/arm/boot/dts/at91-tse850-3.dts | 2 +-
arch/arm/boot/dts/omap3-gta04.dtsi | 2 +-
arch/arm/boot/dts/qcom-msm8974.dtsi | 4 +-
arch/arm/boot/dts/stm32mp157c.dtsi | 16 +--
arch/arm/boot/dts/sun7i-a20-olinuxino-lime2.dts | 2 +-
arch/arm/kernel/stacktrace.c | 3 +-
arch/arm/mm/Kconfig | 2 +-
arch/arm/mm/mmu.c | 4 +-
arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts | 2 +-
arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts | 2 +-
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 2 +-
arch/arm64/include/asm/pgtable.h | 12 +-
arch/arm64/net/bpf_jit_comp.c | 5 +
arch/ia64/Kconfig.debug | 2 +-
arch/ia64/kernel/kprobes.c | 9 +-
arch/m68k/Kconfig.machine | 1 +
arch/mips/Kconfig | 1 +
arch/mips/include/asm/mips-cm.h | 12 +-
arch/mips/kernel/mips-cm.c | 21 ++--
arch/mips/kernel/r2300_fpu.S | 4 +-
arch/mips/kernel/syscall.c | 9 --
arch/mips/lantiq/xway/dma.c | 14 ++-
arch/parisc/kernel/entry.S | 2 +-
arch/parisc/kernel/smp.c | 19 ++-
arch/parisc/kernel/unwind.c | 21 ++--
arch/parisc/kernel/vmlinux.lds.S | 3 +-
arch/parisc/mm/fixmap.c | 5 +-
arch/parisc/mm/init.c | 4 +-
arch/powerpc/include/asm/code-patching.h | 1 +
arch/powerpc/include/asm/security_features.h | 5 +
arch/powerpc/kernel/kvm.c | 2 +-
arch/powerpc/kernel/security.c | 5 +
arch/powerpc/lib/code-patching.c | 7 +-
arch/powerpc/net/bpf_jit.h | 33 ++++--
arch/powerpc/net/bpf_jit64.h | 8 +-
arch/powerpc/net/bpf_jit_comp64.c | 91 ++++++++++++---
arch/powerpc/platforms/44x/fsp2.c | 2 +
arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 3 +-
arch/powerpc/platforms/powernv/opal-prd.c | 12 +-
arch/s390/kvm/priv.c | 2 +
arch/s390/mm/gmap.c | 5 +-
arch/sh/kernel/cpu/fpu.c | 10 +-
arch/x86/hyperv/hv_init.c | 5 +-
arch/x86/include/asm/page_64_types.h | 2 +-
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/common.c | 44 +++++--
arch/x86/kernel/cpu/cpu.h | 1 +
arch/x86/kernel/cpu/hygon.c | 2 +
arch/x86/kernel/irq.c | 4 +-
arch/x86/kvm/vmx/vmx.c | 8 +-
arch/x86/mm/mem_encrypt_identity.c | 9 ++
block/blk-mq.c | 1 -
crypto/Kconfig | 2 +-
crypto/pcrypt.c | 12 +-
drivers/acpi/acpica/acglobal.h | 2 +
drivers/acpi/acpica/hwesleep.c | 8 +-
drivers/acpi/acpica/hwsleep.c | 11 +-
drivers/acpi/acpica/hwxfsleep.c | 7 ++
drivers/acpi/battery.c | 2 +-
drivers/acpi/pmic/intel_pmic.c | 51 ++++----
drivers/android/binder.c | 22 ++--
drivers/ata/libata-core.c | 2 +-
drivers/ata/libata-eh.c | 8 ++
drivers/auxdisplay/ht16k33.c | 66 ++++++-----
drivers/auxdisplay/img-ascii-lcd.c | 10 ++
drivers/block/ataflop.c | 18 +--
drivers/block/zram/zram_drv.c | 2 +-
drivers/bluetooth/btmtkuart.c | 13 ++-
drivers/char/hw_random/mtk-rng.c | 9 +-
drivers/char/ipmi/ipmi_msghandler.c | 10 +-
drivers/char/ipmi/ipmi_watchdog.c | 17 ++-
drivers/char/tpm/tpm2-space.c | 3 +
drivers/clk/at91/pmc.c | 5 +
drivers/clk/mvebu/ap-cpu-clk.c | 14 ++-
drivers/clocksource/Kconfig | 1 +
drivers/cpuidle/sysfs.c | 5 +-
drivers/crypto/caam/caampkc.c | 19 ++-
drivers/crypto/caam/regs.h | 3 +
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 +++
drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +
drivers/crypto/s5p-sss.c | 2 +
drivers/dma-buf/dma-buf.c | 1 +
drivers/dma/at_xdmac.c | 2 +-
drivers/dma/dmaengine.h | 2 +-
drivers/edac/amd64_edac.c | 22 +++-
drivers/edac/sb_edac.c | 2 +-
drivers/firmware/psci/psci_checker.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +-
drivers/gpu/drm/drm_panel_orientation_quirks.c | 47 +++++++-
drivers/gpu/drm/drm_plane_helper.c | 1 -
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/msm_gem.c | 4 +-
drivers/gpu/drm/v3d/v3d_gem.c | 4 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 8 +-
drivers/hid/hid-u2fzero.c | 10 +-
drivers/hv/hyperv_vmbus.h | 1 +
drivers/hwmon/hwmon.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 25 +++-
drivers/i2c/busses/i2c-xlr.c | 6 +-
drivers/iio/dac/ad5446.c | 9 +-
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/mlx4/qp.c | 4 +-
drivers/infiniband/hw/qedr/verbs.c | 15 ++-
drivers/infiniband/sw/rxe/rxe_param.h | 2 +-
drivers/input/joystick/iforce/iforce-usb.c | 2 +-
drivers/input/mouse/elantech.c | 13 +++
drivers/input/serio/i8042-x86ia64io.h | 14 +++
drivers/irqchip/irq-bcm6345-l1.c | 2 +-
drivers/irqchip/irq-s3c24xx.c | 22 +++-
drivers/irqchip/irq-sifive-plic.c | 8 +-
drivers/media/dvb-frontends/mn88443x.c | 18 ++-
drivers/media/i2c/Kconfig | 1 +
drivers/media/i2c/ir-kbd-i2c.c | 1 +
drivers/media/i2c/mt9p031.c | 28 ++++-
drivers/media/i2c/tda1997x.c | 8 +-
drivers/media/pci/cx23885/cx23885-alsa.c | 3 +-
drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 +++--
drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 2 +
drivers/media/platform/s5p-mfc/s5p_mfc.c | 6 +-
drivers/media/platform/stm32/stm32-dcmi.c | 19 +--
drivers/media/radio/radio-wl1273.c | 2 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +-
drivers/media/radio/si470x/radio-si470x-usb.c | 2 +-
drivers/media/rc/ite-cir.c | 2 +-
drivers/media/rc/mceusb.c | 1 +
drivers/media/spi/cxd2880-spi.c | 2 +-
drivers/media/usb/dvb-usb/az6027.c | 1 +
drivers/media/usb/dvb-usb/dibusb-common.c | 2 +-
drivers/media/usb/em28xx/em28xx-cards.c | 5 +-
drivers/media/usb/em28xx/em28xx-core.c | 5 +-
drivers/media/usb/tm6000/tm6000-video.c | 3 +-
drivers/media/usb/uvc/uvc_driver.c | 7 +-
drivers/media/usb/uvc/uvc_v4l2.c | 7 +-
drivers/media/usb/uvc/uvc_video.c | 5 +
drivers/media/v4l2-core/v4l2-ioctl.c | 60 ++++++----
drivers/memory/fsl_ifc.c | 13 +--
drivers/memstick/core/ms_block.c | 2 +-
drivers/memstick/host/jmb38x_ms.c | 2 +-
drivers/memstick/host/r592.c | 8 +-
drivers/mmc/host/Kconfig | 2 +-
drivers/mmc/host/dw_mmc.c | 3 +-
drivers/mmc/host/mxs-mmc.c | 10 ++
drivers/mmc/host/sdhci-omap.c | 3 +-
drivers/mtd/mtdcore.c | 4 +-
drivers/mtd/spi-nor/hisi-sfc.c | 1 -
drivers/net/bonding/bond_sysfs_slave.c | 36 ++----
drivers/net/dsa/lantiq_gswip.c | 28 ++++-
drivers/net/dsa/rtl8366rb.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 ++
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +++-
drivers/net/ethernet/cavium/thunder/nic_main.c | 2 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 7 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.h | 2 +
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 2 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 9 +-
drivers/net/ethernet/ibm/ibmvnic.c | 5 +-
drivers/net/ethernet/netronome/nfp/bpf/main.c | 16 ++-
drivers/net/ethernet/netronome/nfp/bpf/main.h | 2 +
drivers/net/ethernet/netronome/nfp/bpf/offload.c | 17 ++-
drivers/net/ethernet/realtek/r8169_main.c | 1 +
drivers/net/ethernet/sfc/ptp.c | 4 +-
drivers/net/ethernet/sfc/siena_sriov.c | 2 +-
drivers/net/ethernet/ti/davinci_emac.c | 16 ++-
drivers/net/phy/micrel.c | 5 +-
drivers/net/phy/phylink.c | 2 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 1 -
drivers/net/vrf.c | 28 ++++-
drivers/net/wireless/ath/ath10k/mac.c | 37 ++++--
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.c | 4 +
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +-
drivers/net/wireless/ath/wcn36xx/dxe.c | 12 +-
drivers/net/wireless/ath/wcn36xx/main.c | 4 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 44 +++++--
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10 ++
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 +
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 5 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 ++---
drivers/net/wireless/marvell/mwifiex/pcie.c | 8 ++
drivers/net/wireless/marvell/mwifiex/usb.c | 16 +++
drivers/net/wireless/marvell/mwl8k.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 13 ++-
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +--
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 ++++--------
drivers/net/wireless/rsi/rsi_91x_main.c | 17 ++-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 ++--
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 5 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 ++
drivers/net/wireless/rsi/rsi_main.h | 15 ++-
drivers/net/xen-netfront.c | 8 ++
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nvme/host/multipath.c | 9 +-
drivers/nvme/host/rdma.c | 2 +
drivers/nvme/target/configfs.c | 2 +
drivers/nvme/target/tcp.c | 21 +++-
drivers/opp/of.c | 2 +-
drivers/pci/controller/pci-aardvark.c | 129 ++++++++++++++++++---
drivers/pci/pci-bridge-emul.c | 13 +++
drivers/pci/quirks.c | 1 +
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 ++-
drivers/pinctrl/core.c | 2 +
drivers/platform/x86/thinkpad_acpi.c | 2 +-
drivers/platform/x86/wmi.c | 9 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 3 +-
drivers/power/supply/max17042_battery.c | 8 +-
drivers/power/supply/rt5033_battery.c | 2 +-
drivers/regulator/s5m8767.c | 21 ++--
drivers/reset/reset-socfpga.c | 26 +++++
drivers/reset/tegra/reset-bpmp.c | 9 +-
drivers/s390/char/tape_std.c | 3 +-
drivers/s390/cio/css.c | 4 +-
drivers/s390/cio/device_ops.c | 12 +-
drivers/scsi/csiostor/csio_lnode.c | 2 +-
drivers/scsi/dc395x.c | 1 +
drivers/scsi/qla2xxx/qla_attr.c | 24 +++-
drivers/scsi/qla2xxx/qla_gbl.h | 2 -
drivers/scsi/qla2xxx/qla_init.c | 4 +-
drivers/scsi/qla2xxx/qla_mr.c | 23 ----
drivers/scsi/qla2xxx/qla_os.c | 37 ++----
drivers/scsi/qla2xxx/qla_target.c | 14 +--
drivers/soc/fsl/dpaa2-console.c | 1 +
drivers/soc/tegra/pmc.c | 2 +-
drivers/spi/spi-bcm-qspi.c | 5 +-
drivers/spi/spi-pl022.c | 5 +-
drivers/staging/ks7010/Kconfig | 3 +
drivers/staging/media/imx/imx-media-dev-common.c | 2 +
drivers/staging/media/ipu3/ipu3-v4l2.c | 7 +-
drivers/staging/wilc1000/wilc_wfi_cfgoperations.c | 3 +-
drivers/tty/serial/8250/8250_dw.c | 2 +-
drivers/tty/serial/serial_core.c | 16 ++-
drivers/tty/serial/xilinx_uartps.c | 3 +-
drivers/usb/chipidea/core.c | 23 ++--
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-pci.c | 16 +++
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/serial/keyspan.c | 15 ++-
drivers/video/backlight/backlight.c | 6 -
drivers/video/fbdev/chipsfb.c | 2 +-
drivers/watchdog/Kconfig | 2 +-
drivers/watchdog/f71808e_wdt.c | 4 +-
drivers/watchdog/omap_wdt.c | 6 +-
drivers/xen/balloon.c | 86 ++++++++++----
drivers/xen/xen-pciback/conf_space_capability.c | 2 +-
fs/btrfs/disk-io.c | 3 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 14 ++-
fs/f2fs/inode.c | 2 +-
fs/f2fs/namei.c | 2 +-
fs/fuse/dev.c | 14 ++-
fs/jfs/jfs_mount.c | 51 ++++----
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +-
fs/nfs/nfs4proc.c | 15 +--
fs/nfs/pnfs_nfs.c | 4 +-
fs/nfs/write.c | 17 +--
fs/ocfs2/file.c | 8 +-
fs/orangefs/dcache.c | 4 +-
fs/overlayfs/file.c | 47 +++++++-
fs/quota/quota_tree.c | 15 +++
fs/tracefs/inode.c | 3 +-
include/linux/console.h | 2 +
include/linux/filter.h | 1 +
include/linux/libata.h | 2 +-
include/linux/lsm_hooks.h | 28 ++---
include/linux/rpmsg.h | 2 +-
include/linux/sched/task_stack.h | 4 +
include/linux/security.h | 33 +++---
include/net/llc.h | 4 +-
include/net/neighbour.h | 12 +-
include/net/sch_generic.h | 4 +
include/net/strparser.h | 16 ++-
include/net/udp.h | 5 +-
include/uapi/linux/pci_regs.h | 6 +
kernel/bpf/core.c | 4 +-
kernel/cgroup/cgroup.c | 31 ++++-
kernel/kprobes.c | 3 +-
kernel/locking/lockdep.c | 2 +-
kernel/power/swap.c | 7 +-
kernel/rcu/tree_exp.h | 2 +-
kernel/signal.c | 18 +--
kernel/trace/tracing_map.c | 40 ++++---
kernel/workqueue.c | 15 ++-
lib/decompress_unxz.c | 2 +-
lib/iov_iter.c | 5 +-
lib/xz/xz_dec_lzma2.c | 21 +++-
lib/xz/xz_dec_stream.c | 6 +-
mm/oom_kill.c | 23 ++--
mm/zsmalloc.c | 7 +-
net/8021q/vlan.c | 3 -
net/8021q/vlan_dev.c | 3 +
net/9p/client.c | 2 +
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/sco.c | 33 +++---
net/can/j1939/main.c | 7 ++
net/can/j1939/transport.c | 6 +
net/core/dev.c | 5 +-
net/core/filter.c | 21 ++++
net/core/neighbour.c | 48 ++++----
net/core/net-sysfs.c | 55 +++++++++
net/core/net_namespace.c | 4 +
net/core/stream.c | 3 -
net/core/sysctl_net_core.c | 2 +-
net/ipv4/tcp.c | 2 +-
net/ipv6/addrconf.c | 3 +
net/ipv6/udp.c | 2 +-
net/netfilter/nf_conntrack_proto_udp.c | 7 +-
net/netfilter/nfnetlink_queue.c | 2 +-
net/netfilter/nft_dynset.c | 11 +-
net/rxrpc/rtt.c | 2 +-
net/sched/sch_generic.c | 9 ++
net/sched/sch_mq.c | 24 ++++
net/sched/sch_mqprio.c | 23 ++++
net/sched/sch_taprio.c | 27 +++--
net/smc/af_smc.c | 20 ++--
net/strparser/strparser.c | 10 +-
net/sunrpc/xprt.c | 28 ++---
net/vmw_vsock/af_vsock.c | 2 +
samples/kprobes/kretprobe_example.c | 2 +-
scripts/leaking_addresses.pl | 3 +-
security/apparmor/label.c | 4 +-
security/integrity/evm/evm_main.c | 2 +-
security/security.c | 14 +--
security/selinux/hooks.c | 36 +++---
security/smack/smackfs.c | 11 +-
sound/core/oss/mixer_oss.c | 43 +++++--
sound/core/timer.c | 17 ++-
sound/pci/hda/hda_intel.c | 28 ++++-
sound/pci/hda/patch_realtek.c | 4 +
sound/soc/codecs/cs42l42.c | 9 +-
sound/synth/emux/emux.c | 2 +-
sound/usb/6fire/comm.c | 2 +-
sound/usb/6fire/firmware.c | 6 +-
sound/usb/line6/driver.c | 14 +--
sound/usb/line6/driver.h | 2 +-
sound/usb/line6/podhd.c | 6 +-
sound/usb/line6/toneport.c | 2 +-
sound/usb/misc/ua101.c | 4 +-
sound/usb/quirks.c | 1 +
tools/lib/bpf/btf.c | 16 +--
tools/perf/util/bpf-event.c | 4 +-
tools/testing/selftests/bpf/progs/strobemeta.h | 11 ++
tools/testing/selftests/bpf/test_progs.c | 4 +-
.../selftests/kvm/x86_64/mmio_warning_test.c | 2 +-
tools/testing/selftests/net/udpgso_bench_rx.c | 11 +-
363 files changed, 2573 insertions(+), 1216 deletions(-)
^ permalink raw reply [relevance 1%]
* [PATCH AUTOSEL 5.15 007/146] Bluetooth: call sock_hold earlier in sco_conn_del
@ 2021-11-08 17:42 12% ` Sasha Levin
0 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-11-08 17:42 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Sasha Levin,
marcel, johan.hedberg, luiz.dentz, davem, kuba, linux-bluetooth,
netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit f4712fa993f688d0a48e0c28728fcdeb88c1ea58 ]
In sco_conn_del, conn->sk is read while holding on to the
sco_conn.lock to avoid races with a socket that could be released
concurrently.
However, in between unlocking sco_conn.lock and calling sock_hold,
it's possible for the socket to be freed, which would cause a
use-after-free write when sock_hold is finally called.
To fix this, the reference count of the socket should be increased
while the sco_conn.lock is still held.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index b62c91c627e2c..4a057f99b60aa 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -187,10 +187,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
/* Kill socket */
sco_conn_lock(conn);
sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
sco_conn_unlock(conn);
if (sk) {
- sock_hold(sk);
lock_sock(sk);
sco_sock_clear_timer(sk);
sco_chan_del(sk, err);
--
2.33.0
^ permalink raw reply related [relevance 12%]
* [git pull] drm for 5.16-rc1
@ 2021-11-02 23:34 1% Dave Airlie
0 siblings, 0 replies; 200+ results
From: Dave Airlie @ 2021-11-02 23:34 UTC (permalink / raw)
To: Linus Torvalds, Daniel Vetter; +Cc: dri-devel, LKML
Hi Linus,
This is the main drm pull for 5.16-rc1.
This contains a shared tip ww mutex tree but I think that's all landed now.
There are only 2 minor conflicts, both solved easily for me on a test
pull just after I generated this, let me know if there is anything I
missed.
Otherwise summary below, i915 starts to add support for DG2 GPUs,
enables DG1 and ADL-S support by default, lots of work to enable
DisplayPort 2.0 across drivers. Lots of documentation updates and
fixes across the board.
Regards,
Dave.
drm-next-2021-11-03:
drm for 5.16-rc1
core:
- improve dma_fence, lease and resv documentation
- shmem-helpers: allocate WC pages on x86, use vmf_insert_pin
- sched fixes/improvements
- allow empty drm leases
- add dma resv iterator
- add more DP 2.0 headers
- DP MST helper improvements for DP2.0
dma-buf:
- avoid warnings, remove fence trace macros
bridge:
- new helper to get rid of panels
- probe improvements for it66121
- enable DSI EOTP for anx7625
fbdev:
- efifb: release runtime PM on destroy
ttm:
- kerneldoc switch
- helper to clear all DMA mappings
- pool shrinker optimizaton
- remove ttm_tt_destroy_common
- update ttm_move_memcpy for async use
panel:
- add new panel-edp driver
amdgpu:
- Initial DP 2.0 support
- Initial USB4 DP tunnelling support
- Aldebaran MCE support
- Modifier support for DCC image stores for GFX 10.3
- Display rework for better FP code handling
- Yellow Carp/Cyan Skillfish updates
- Cyan Skillfish display support
- convert vega/navi to IP discovery asic enumeration
- validate IP discovery table
- RAS improvements
- Lots of fixes
i915:
- DG1 PCI IDs + LMEM discovery/placement
- DG1 GuC submission by default
- ADL-S PCI IDs updated + enabled by default
- ADL-P (XE_LPD) fixed and updates
- DG2 display fixes
- PXP protected object support for Gen12 integrated
- expose multi-LRC submission interface for GuC
- export logical engine instance to user
- Disable engine bonding on Gen12+
- PSR cleanup
- PSR2 selective fetch by default
- DP 2.0 prep work
- VESA vendor block + MSO use of it
- FBC refactor
- try again to fix fast-narrow vs slow-wide eDP training
- use THP when IOMMU enabled
- LMEM backup/restore for suspend/resume
- locking simplification
- GuC major reworking
- async flip VT-D workaround changes
- DP link training improvements
- misc display refactorings
bochs:
- new PCI ID
rcar-du:
- Non-contiguious buffer import support for rcar-du
- r8a779a0 support prep
omapdrm:
- COMPILE_TEST fixes
sti:
- COMPILE_TEST fixes
msm:
- fence ordering improvements
- eDP support in DP sub-driver
- dpu irq handling cleanup
- CRC support for making igt happy
- NO_CONNECTOR bridge support
- dsi: 14nm phy support for msm8953
- mdp5: msm8x53, sdm450, sdm632 support
stm:
- layer alpha + zpo support
v3d:
- fix Vulkan CTS failure
- support multiple sync objects
gud:
- add R8/RGB332/RGB888 pixel formats
vc4:
- convert to new bridge helpers
vgem:
- use shmem helpers
virtio:
- support mapping exported vram
zte:
- remove obsolete driver
rockchip:
- use bridge attach no connector for LVDS/RGB
The following changes since commit 3906fe9bb7f1a2c8667ae54e967dc8690824f4ea:
Linux 5.15-rc7 (2021-10-25 11:30:31 -0700)
are available in the Git repository at:
git://anongit.freedesktop.org/drm/drm tags/drm-next-2021-11-03
for you to fetch changes up to d9bd054177fbd2c4762546aec40fc3071bfe4cc0:
Merge tag 'amd-drm-next-5.16-2021-10-29' of
https://gitlab.freedesktop.org/agd5f/linux into drm-next (2021-11-02
12:40:58 +1000)
----------------------------------------------------------------
drm for 5.16-rc1
core:
- improve dma_fence, lease and resv documentation
- shmem-helpers: allocate WC pages on x86, use vmf_insert_pin
- sched fixes/improvements
- allow empty drm leases
- add dma resv iterator
- add more DP 2.0 headers
- DP MST helper improvements for DP2.0
dma-buf:
- avoid warnings, remove fence trace macros
bridge:
- new helper to get rid of panels
- probe improvements for it66121
- enable DSI EOTP for anx7625
fbdev:
- efifb: release runtime PM on destroy
ttm:
- kerneldoc switch
- helper to clear all DMA mappings
- pool shrinker optimizaton
- remove ttm_tt_destroy_common
- update ttm_move_memcpy for async use
panel:
- add new panel-edp driver
amdgpu:
- Initial DP 2.0 support
- Initial USB4 DP tunnelling support
- Aldebaran MCE support
- Modifier support for DCC image stores for GFX 10.3
- Display rework for better FP code handling
- Yellow Carp/Cyan Skillfish updates
- Cyan Skillfish display support
- convert vega/navi to IP discovery asic enumeration
- validate IP discovery table
- RAS improvements
- Lots of fixes
i915:
- DG1 PCI IDs + LMEM discovery/placement
- DG1 GuC submission by default
- ADL-S PCI IDs updated + enabled by default
- ADL-P (XE_LPD) fixed and updates
- DG2 display fixes
- PXP protected object support for Gen12 integrated
- expose multi-LRC submission interface for GuC
- export logical engine instance to user
- Disable engine bonding on Gen12+
- PSR cleanup
- PSR2 selective fetch by default
- DP 2.0 prep work
- VESA vendor block + MSO use of it
- FBC refactor
- try again to fix fast-narrow vs slow-wide eDP training
- use THP when IOMMU enabled
- LMEM backup/restore for suspend/resume
- locking simplification
- GuC major reworking
- async flip VT-D workaround changes
- DP link training improvements
- misc display refactorings
bochs:
- new PCI ID
rcar-du:
- Non-contiguious buffer import support for rcar-du
- r8a779a0 support prep
omapdrm:
- COMPILE_TEST fixes
sti:
- COMPILE_TEST fixes
msm:
- fence ordering improvements
- eDP support in DP sub-driver
- dpu irq handling cleanup
- CRC support for making igt happy
- NO_CONNECTOR bridge support
- dsi: 14nm phy support for msm8953
- mdp5: msm8x53, sdm450, sdm632 support
stm:
- layer alpha + zpo support
v3d:
- fix Vulkan CTS failure
- support multiple sync objects
gud:
- add R8/RGB332/RGB888 pixel formats
vc4:
- convert to new bridge helpers
vgem:
- use shmem helpers
virtio:
- support mapping exported vram
zte:
- remove obsolete driver
rockchip:
- use bridge attach no connector for LVDS/RGB
----------------------------------------------------------------
Aaron Liu (1):
drm/amdgpu: support B0&B1 external revision id for yellow carp
Agustin Gutierrez (2):
Revert "drm/amd/display: Fix error in dmesg at boot"
Revert "drm/amd/display: Add helper for blanking all dp displays"
Ahmad Othman (2):
drm/amd/display: Add support for USB4 on C20 PHY for DCN3.1
drm/amd/display: fix a crash on USB4 over C20 PHY
Akeem G Abodunrin (1):
drm/i915/dg2: Add new LRI reg offsets
Akira Yokosawa (1):
drm/i915/guc, docs: Fix pdfdocs build error by removing nested grid
Alex Bee (3):
drm: bridge: it66121: Fix return value it66121_probe
drm/rockchip: handle non-platform devices in
rockchip_drm_endpoint_is_subdriver
drm/rockchip: add DRM_BRIDGE_ATTACH_NO_CONNECTOR flag to drm_bridge_attach
Alex Deucher (100):
MAINTAINERS: add Andrey as the DRM GPU scheduler maintainer
drm/amdgpu/display: add a proper license to dc_link_dp.c
MAINTAINERS: fix up entry for AMD Powerplay
drm/amdgpu: make soc15_common_ip_funcs static
drm/amdgpu: move headless sku check into harvest function
drm/amdgpu: add debugfs access to the IP discovery table
drm/amdgpu: store HW IP versions in the driver structure
drm/amdgpu: fill in IP versions from IP discovery table
drm/amdgpu: add XGMI HWIP
drm/amdgpu/nv: export common IP functions
drm/amdgpu: add initial IP enumeration via IP discovery table
drm/amdgpu/sdma5.0: convert to IP version checking
drm/amdgpu/sdma5.2: convert to IP version checking
drm/amdgpu/gfx10: convert to IP version checking
drm/amdgpu: filter out radeon PCI device IDs
drm/amdgpu: bind to any 0x1002 PCI diplay class device
drm/amdgpu/gmc10.0: convert to IP version checking
drm/amdgpu: Use IP discovery to drive setting IP blocks by default
drm/amdgpu: drive nav10 from the IP discovery table
drm/amdgpu/gfxhub2.1: convert to IP version checking
drm/amdgpu/mmhub2.0: convert to IP version checking
drm/amdgpu/mmhub2.1: convert to IP version checking
drm/amdgpu/vcn3.0: convert to IP version checking
drm/amdgpu/athub2.0: convert to IP version checking
drm/amdgpu/athub2.1: convert to IP version checking
drm/amdgpu/navi10_ih: convert to IP version checking
drm/amdgpu/amdgpu_smu: convert to IP version checking
drm/amdgpu/smu11.0: convert to IP version checking
drm/amdgpu/navi10_ppt: convert to IP version checking
drm/amdgpu/sienna_cichlid_ppt: convert to IP version checking
drm/amdgpu/nv: convert to IP version checking
drm/amdgpu: drive all navi asics from the IP discovery table
drm/amdgpu/display/dm: convert to IP version checking
drm/amdgpu: add DCI HWIP
drm/amdgpu/soc15: export common IP functions
drm/amdgpu: add initial IP discovery support for vega based parts
drm/amdgpu/soc15: get rev_id in soc15_common_early_init
drm/amdgpu: drive all vega asics from the IP discovery table
drm/amdgpu: default to true in amdgpu_device_asic_has_dc_support
drm/amdgpu/display/dm: convert RAVEN to IP version checking
drm/amdgpu/sdma4.0: convert to IP version checking
drm/amdgpu/hdp4.0: convert to IP version checking
drm/amdgpu/gfx9.0: convert to IP version checking
drm/amdgpu/amdgpu_psp: convert to IP version checking
drm/amdgpu/psp_v11.0: convert to IP version checking
drm/amdgpu/psp_v13.0: convert to IP version checking
drm/amdgpu/pm/smu_v11.0: update IP version checking
drm/amdgpu/pm/smu_v13.0: convert IP version checking
drm/amdgpu/pm/amdgpu_smu: convert more IP version checking
drm/amdgpu/amdgpu_vcn: convert to IP version checking
drm/amdgpu/vcn2.5: convert to IP version checking
drm/amdgpu/soc15: convert to IP version checking
drm/amdgpu: add VCN1 hardware IP
drm/amdgpu: get VCN and SDMA instances from IP discovery table
drm/amdgpu/sdma: remove manual instance setting
drm/amdgpu/vcn: remove manual instance setting
drm/amdgpu: get VCN harvest information from IP discovery table
drm/amdgpu/ucode: add default behavior
drm/amdgpu: add new asic_type for IP discovery
drm/amdgpu: set CHIP_IP_DISCOVERY as the asic type by default
drm/amdgpu: convert IP version array to include instances
drm/amdgpu: clean up set IP function
drm/amdgpu: add support for SRIOV in IP discovery path
drm/amdkfd: clean up parameters in kgd2kfd_probe
drm/amdkfd: convert kfd_device.c to use GC IP version
drm/amdgpu: add an option to override IP discovery table from a file
drm/amdgpu: consolidate case statements
Documentation/gpu: remove spurious "+" in amdgpu.rst
drm/amdgpu/display: fold DRM_AMD_DC_DCN201 into DRM_AMD_DC_DCN
drm/amdgpu/gmc9: convert to IP version checking
drm/amdgpu/display: fix dependencies for DRM_AMD_DC_SI
drm/amdgpu/discovery: add missing case for SMU 11.0.5
drm/amdgpu: add missing case for HDP for renoir
drm/amdgpu/nbio7.4: don't use GPU_HDP_FLUSH bit 12
drm/amdgpu/nbio2.3: don't use GPU_HDP_FLUSH bit 12
drm/amdgpu/smu11: fix firmware version check for vangogh
drm/amdgpu/swsmu: fix is_support_sw_smu() for VEGA20
drm/amdgpu/psp: add some missing cases to
psp_check_pmfw_centralized_cstate_management
drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
drm/amdgpu/gfx10: fix typo in gfx_v10_0_update_gfx_clock_gating()
drm/amdkfd: protect hawaii_device_info with CONFIG_DRM_AMDGPU_CIK
drm/amdkfd: protect raven_device_info with KFD_SUPPORT_IOMMU_V2
drm/amdgpu: drop soc15_set_ip_blocks()
drm/amdgpu: drop nv_set_ip_blocks()
drm/amdgpu: drop navi reg init functions
drm/amdgpu/vcn3.0: handle harvesting in firmware setup
drm/amdgpu: Consolidate VCN firmware setup code
drm/amdgpu/vcn2.0: remove intermediate variable
drm/amdgpu/vcn3.0: remove intermediate variable
drm/amdgpu: Workaround harvesting info for some navy flounder boards
drm/amdgpu/swsmu: handle VCN harvesting for VCN SMU setup
drm/amdgpu/smu11.0: add missing IP version check
drm/amdgpu/nbio7.4: use original HDP_FLUSH bits
drm/amdgpu/display: fix build when CONFIG_DRM_AMD_DC_DCN is not set
drm/amdgpu/display: add quirk handling for stutter mode
drm/amdgpu/pm: look up current_level for asics without pm callback
drm/amdgpu/UAPI: rearrange header to better align related items
drm/amdgpu/discovery: add UVD/VCN IP instance info for soc15 parts
drm/amdgpu/discovery: add SDMA IP instance info for soc15 parts
drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
Alex Sierra (3):
drm/amdkfd: rm BO resv on validation to avoid deadlock
drm/amdkfd: avoid conflicting address mappings
amd/amdkfd: remove svms declaration to avoid werror
Alvin Lee (1):
drm/amd/display: Update swizzle mode enums
Alyssa Rosenzweig (2):
drm/panfrost: Use upper/lower_32_bits helpers
drm/plane: Fix comment typo
Andi Shyti (1):
drm/i915/gt: move remaining debugfs interfaces into gt
Andrey Grodzovsky (8):
drm/ttm: Create pinned list
drm/ttm: Clear all DMA mappings on demand
drm/amd/display: Fix crash on device remove/driver unload
drm/amdgpu: Fix crash on device remove/driver unload
drm/amdgpu: Fix MMIO access page fault
drm/amdgpu: Fix resume failures when device is gone
drm/amdgpu: drm/amdgpu: Handle IOMMU enabled case
drm/amdgpu: Add a UAPI flag for hot plug/unplug
Andy Yan (1):
drm/rockchip: Check iommu itself instead of it's parent for
device_is_available
Animesh Manna (3):
drm/i915/dg2: UHBR tables added for pll programming
drm/i915/dp: fix EHL/JSL max source rates calculation
drm/i915/dp: fix for ADL_P/S dp/edp max source rates
Ankit Nautiyal (2):
drm/i915/display: Fix the 12 BPC bits for PIPE_MISC reg
drm/i915/dg2: Configure PCON in DP pre-enable path
Anshuman Gupta (3):
drm/i915: Tweaked Wa_14010685332 for all PCHs
drm/i915/pxp: Add plane decryption support
drm/i915/pxp: black pixels on pxp disabled
Anson Jacob (6):
drm/amd/display: dc_assert_fp_enabled assert only if FPU is not enabled
drm/amd/display: Fix false BAD_FREE warning from Coverity
drm/amd/display: Fix multiple memory leaks reported by coverity
drm/amd/display: Revert "Directly retrain link from debugfs"
drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
drm/amd/display: Remove unused macros
Anthoine Bourgeois (2):
drm/virtio: implement context init: probe for feature
drm/virtio: implement context init: support init ioctl
Anthony Koo (12):
drm/amd/display: [FW Promotion] Release 0.0.80
drm/amd/display: [FW Promotion] Release 0.0.81
drm/amd/display: [FW Promotion] Release 0.0.82
drm/amd/display: [FW Promotion] Release 0.0.83
drm/amd/display: [FW Promotion] Release 0.0.84
drm/amd/display: [FW Promotion] Release 0.0.85
drm/amd/display: [FW Promotion] Release 0.0.86
drm/amd/display: [FW Promotion] Release 0.0.87
drm/amd/display: Change initializer to single brace
drm/amd/display: [FW Promotion] Release 0.0.88
drm/amd/display: [FW Promotion] Release 0.0.89
drm/amd/display: [FW Promotion] Release 0.0.90
Anusha Srivatsa (1):
drm/i915/dmc: Update to DMC v2.12
Aric Cyr (13):
drm/amd/display: 3.2.150
drm/amd/display: 3.2.151
drm/amd/display: 3.2.152
drm/amd/display: 3.2.153
drm/amd/display: 3.2.154
drm/amd/display: 3.2.155
drm/amd/display: 3.2.156
drm/amd/display: Validate plane rects before use
drm/amd/display: 3.2.157
drm/amd/display: Handle I2C-over-AUX write channel status update
drm/amd/display: 3.2.158
drm/amd/display: Fix 3DLUT skipped programming
drm/amd/display: 3.2.159
Arnd Bergmann (5):
drm/amd/display: fix empty debug macros
drm/amdgpu: fix warning for overflow check
gpu: amd: replace open-coded offsetof() with builtin
drm: fb_helper: fix CONFIG_FB dependency
drm/msm/dp: fix missing #include
Aurabindo Pillai (3):
drm/amd/display: Add emulated sink support for updating FS
drm/amd/display: Add flag to detect dpms force off during HPD
drm/amd/display: fix null pointer deref when plugging in display
Ayaz A Siddiqui (6):
drm/i915/gt: Add support of mocs propagation
drm/i915/gt: Set CMD_CCTL to UC for Gen12 Onward
drm/i915/gt: Set BLIT_CCTL reg to un-cached
drm/i915/gt: Initialize unused MOCS entries with device specific values
drm/i915/gt: Add separate MOCS table for Gen12 devices other than TGL/RKL
drm/i915/gt: Add "intel_" as prefix in set_mocs_index()
Bernard (1):
drm/msm: delete conversion from bool value to bool return
Bernard Zhao (1):
drm/msm: fix warning "using plain integer as NULL pointer"
Bhawanpreet Lakha (3):
drm: Remove slot checks in dp mst topology during commit
drm: Update MST First Link Slot Information Based on Encoding Format
drm/amd/display: Add DP 2.0 MST DM Support
Bjorn Andersson (13):
dt-bindings: msm/dp: Change reg definition
drm/msm/dp: Use devres for ioremap()
drm/msm/dp: Refactor ioremap wrapper
drm/msm/dp: Store each subblock in the io region
drm/msm/dp: Allow sub-regions to be specified in DT
drm/msm/dp: Use the connector passed to dp_debug_get()
drm/msm/dp: Simplify the dp_debug debugfs show function
drm/msm/dp: Remove global g_dp_display variable
drm/msm/dp: Modify prototype of encoder based API
drm/msm/dp: Allow specifying connector_type per controller
drm/msm/dp: Allow attaching a drm_panel
drm/msm/dp: Support up to 3 DP controllers
dt-bindings: msm/dp: Add SC8180x compatibles
Boris Brezillon (2):
panfrost: Don't cleanup the job if it was successfully queued
drm/sched: Fix drm_sched_fence_free() so it can be passed an
uninitialized fence
Brian Norris (1):
drm/rockchip: remove unused psr_list{,_lock}
Cai Huoqing (15):
drm/bridge: cdns: Make use of the helper function
devm_platform_ioremap_resource()
drm: adv7511: Convert to SPDX identifier
drm/vc4: Make use of the helper function devm_platform_ioremap_resource()
drm/sun4i: Make use of the helper function
devm_platform_ioremap_resource()
drm/panfrost: Make use of the helper function
devm_platform_ioremap_resource()
drm/mcde: Make use of the helper function devm_platform_ioremap_resource()
drm/meson: Make use of the helper function
devm_platform_ioremap_resourcexxx()
drm/sun4i: dsi: Make use of the helper function dev_err_probe()
drm/sun4i: dw-hdmi: Make use of the helper function dev_err_probe()
drm/v3d: Make use of the helper function
devm_platform_ioremap_resource_byname()
drm/rockchip: Make use of the helper function
devm_platform_ioremap_resource()
drm/i915: Use direction definition DMA_BIDIRECTIONAL instead of
PCI_DMA_BIDIRECTIONAL
drm/bridge: dw-hdmi-cec: Make use of the helper function
devm_add_action_or_reset()
drm/shmobile: Make use of the helper function
devm_platform_ioremap_resource()
drm: rcar-du: Make use of the helper function
devm_platform_ioremap_resource()
Candice Li (9):
drm/amd/amdgpu: consolidate PSP TA unload function
drm/amd/amdgpu: add mpio to ras block
drm/amdgpu: Create common PSP TA load function
drm/amdgpu: Unify PSP TA context
drm/amdgpu: Conform ASD header/loading to generic TA systems
drm/amdgpu: Update PSP TA unload function
drm/amdgpu: Remove all code paths under the EAGAIN path in RAS late init
drm/amdgpu: Update PSP TA Invoke to use common TA context as input
drm/amdgpu: Update TA version output in driver
Charan Teja Reddy (1):
dma-buf: WARN on dmabuf release with pending attachments
Charlene Liu (1):
drm/amd/display: Pass PCI deviceid into DC
Chi Minghao (1):
drm/msm: remove unneeded variable
Chris Wilson (1):
drm/i915: Free all DMC payloads
Christian König (32):
dma-buf: nuke seqno-fence
drm/vmwgfx: unbind in vmw_ttm_unpopulate
drm/amdgpu: unbind in amdgpu_ttm_tt_unpopulate
drm/nouveau: unbind in nouveau_ttm_tt_unpopulate
drm/radeon: unbind in radeon_ttm_tt_unpopulate()
drm/ttm: remove ttm_tt_destroy_common v2
mm/vmscan: add sync_shrinkers function v3
drm/ttm: optimize the pool shrinker a bit v2
dma-buf: nuke DMA_FENCE_TRACE macros v2
dma-buf: cleanup kerneldoc of removed component
dma-buf: clarify dma_fence_ops->wait documentation
dma-buf: clarify dma_fence_add_callback documentation
drm/ttm: cleanup ttm_resource_compat
drm/amdgpu: fix use after free during BO move
drm/amdgpu: remove unused amdgpu_bo_validate
drm/ttm: remove the outdated kerneldoc section
drm/ttm: add some general module kerneldoc
drm/ttm: add kerneldoc for enum ttm_caching
drm/ttm: enable TTM device object kerneldoc v2
drm/ttm: enable TTM resource object kerneldoc v2
drm/ttm: enable TTM placement kerneldoc
drm/ttm: enable TTM TT object kerneldoc v2
drm/ttm: enable TTM page pool kerneldoc
drm/msm: allow compile_test on !ARM
dma-buf: fix and rework dma_buf_poll v7
drm/amdgpu: revert "Add autodump debugfs node for gpu reset v8"
drm/amdgpu: print warning and taint kernel if lockup timeout is disabled
dma-buf: add dma_resv_for_each_fence_unlocked v8
dma-buf: use new iterator in dma_resv_copy_fences
dma-buf: use new iterator in dma_resv_get_fences v3
dma-buf: use new iterator in dma_resv_wait_timeout
dma-buf: use new iterator in dma_resv_test_signaled
Christophe JAILLET (2):
drm/r128: switch from 'pci_' to 'dma_' API
drm: Remove redundant 'flush_workqueue()' calls
Colin Ian King (9):
drm/amd/display: fix spelling mistake "alidation" -> "validation"
drm/amd/display: Fix unused initialization of pointer sink
drm/amdgpu: clean up inconsistent indenting
drm/amdgpu: sdma: clean up identation
drm/radeon/ci_dpm: Remove redundant initialization of variables
hi_sidd, lo_sidd
drm/i915: clean up inconsistent indenting
drm/radeon: make array encoded_lanes static
drm/amd/display: Remove redundant initialization of variable result
drm/msm/dp: Remove redundant initialization of variable bpp
Dale Zhao (1):
drm/amd/display: Refine condition of cursor visibility for pipe-split
Dan Carpenter (7):
drm/i915/gt: Potential error pointer dereference in pinned_context()
drm/i915/tc: Delete bogus NULL check in intel_ddi_encoder_destroy()
drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init()
drm/msm: potential error pointer dereference in init()
drm/msm: unlock on error in get_sched_entity()
drm/msm: fix potential NULL dereference in cleanup
drm/msm: uninitialized variable in msm_gem_import()
Daniel Vetter (30):
drm/doc/rfc: drop lmem uapi section
drm/i915: Use locked access to ctx->engines in set_priority
drm/shmem-helper: Switch to vmf_insert_pfn
drm/shmem-helpers: Allocate wc pages on x86
drm/vgem: use shmem helpers
drm/i915: Actually delete gpu reloc selftests
drm/sched: Split drm_sched_job_init
drm/msm: Improve drm/sched point of no return rules
drm/sched: Barriers are needed for entity->last_scheduled
drm/sched: Add dependency tracking
drm/sched: drop entity parameter from drm_sched_push_job
drm/sched: improve docs around drm_sched_entity
drm/panfrost: use scheduler dependency tracking
drm/lima: use scheduler dependency tracking
drm/v3d: Move drm_sched_job_init to v3d_job_init
drm/v3d: Use scheduler dependency handling
drm/msm: Use scheduler dependency handling
drm/msm: Don't break exclusive fence ordering
dma-resv: Give the docs a do-over
drm/i915: Release i915_gem_context from a worker
drm/i915: Release ctx->syncobj on final put, not on ctx close
drm/i915: Keep gem ctx->vm alive until the final put
drm/i915: Drop code to handle set-vm races from execbuf
drm/i915: Rename i915_gem_context_get_vm_rcu to i915_gem_context_get_eb_vm
drm/i915: Use i915_gem_context_get_eb_vm in ctx_getparam
drm/i915: Add i915_gem_context_is_full_ppgtt
drm/i915: Use i915_gem_context_get_eb_vm in intel_context_set_gem
drm/i915: Drop __rcu from gem_context->vm
drm/i915: use xa_lock/unlock for fpriv->vm_xa lookups
drm/i915: Stop rcu support for i915_address_space
Daniele Ceraolo Spurio (12):
drm/i915/guc: drop guc_communication_enabled
drm/i915/guc: put all guc objects in lmem when available
drm/i915/guc: Add DG1 GuC / HuC firmware defs
drm/i915/pxp: Define PXP component interface
drm/i915/pxp: define PXP device flag and kconfig
drm/i915/pxp: allocate a vcs context for pxp usage
drm/i915/pxp: set KCR reg init
drm/i915/pxp: interfaces for using protected objects
drm/i915/pxp: start the arb session on demand
drm/i915/pxp: add pxp debugfs
drm/i915/pxp: add PXP documentation
drm/i915/pxp: enable PXP for integrated Gen12
Darren Powell (2):
amdgpu/pm: (v2) add limit_type to
(pptable_funcs)->set_power_limit signature
drm/amd/pm: Fix incorrect power limit readback in smu11 if POWER_SOURCE_DC
Dave Airlie (45):
Merge tag 'drm-misc-next-2021-09-16' of
git://anongit.freedesktop.org/drm/drm-misc into drm-next
Merge tag 'drm-misc-next-2021-09-23' of
git://anongit.freedesktop.org/drm/drm-misc into drm-next
Merge tag 'amd-drm-next-5.16-2021-09-27' of
https://gitlab.freedesktop.org/agd5f/linux into drm-next
drm/i915/uncore: split the fw get function into separate vfunc
drm/i915/pm: drop get_fifo_size vfunc.
drm/i915: make update_wm take a dev_priv.
drm/i915/wm: provide wrappers around watermark vfuncs calls (v3)
drm/i915: add wrappers around cdclk vtable funcs.
drm/i915/display: add intel_fdi_link_train wrapper.
drm/i915: split clock gating init from display vtable
drm/i915: split watermark vfuncs from display vtable.
drm/i915: split color functions from display vtable
drm/i915: split audio functions from display vtable
drm/i915: split cdclk functions from display vtable.
drm/i915: split irq hotplug function from display vtable
drm/i915: split fdi link training from display vtable.
drm/i915: split the dpll clock compute out from display vtable.
drm/i915: constify fdi link training vtable
drm/i915: constify hotplug function vtable.
drm/i915: constify color function vtable.
drm/i915: constify the audio function vtable
drm/i915: constify the dpll clock vtable
drm/i915: constify the cdclk vtable
drm/i915: drop unused function ptr and comments.
drm/i915: constify display function vtable
drm/i915: constify clock gating init vtable.
drm/i915: constify display wm vtable
drm/i915: fix regression with uncore refactoring.
Merge tag 'du-next-20211007' of
git://linuxtv.org/pinchartl/media into drm-next
Merge tag 'amd-drm-next-5.16-2021-10-08' of
https://gitlab.freedesktop.org/agd5f/linux into drm-next
Merge tag 'drm-misc-next-2021-10-06' of
git://anongit.freedesktop.org/drm/drm-misc into drm-next
Merge tag 'drm-intel-next-2021-10-04' of
git://anongit.freedesktop.org/drm/drm-intel into drm-next
Merge tag 'drm-intel-gt-next-2021-10-08' of
git://anongit.freedesktop.org/drm/drm-intel into drm-next
drm/i915/display: move plane prepare/cleanup to intel_atomic_plane.c
drm/i915/display: let intel_plane_uses_fence be used from other places.
drm/i915/display: refactor out initial plane config for crtcs
drm/i915/display: refactor initial plane config to a separate file
drm/i915/display: move pin/unpin fb/plane code to a new file.
Merge tag 'drm-intel-next-2021-10-15' of
git://anongit.freedesktop.org/drm/drm-intel into drm-next
Merge tag 'drm-intel-gt-next-2021-10-21' of
git://anongit.freedesktop.org/drm/drm-intel into drm-next
Merge tag 'amd-drm-next-5.16-2021-10-22' of
https://gitlab.freedesktop.org/agd5f/linux into drm-next
Merge tag 'topic/amdgpu-dp2.0-mst-2021-10-27' of
git://anongit.freedesktop.org/drm/drm-misc into drm-next
BackMerge tag 'v5.15-rc7' into drm-next
Merge tag 'drm-msm-next-2021-10-26' of
https://gitlab.freedesktop.org/drm/msm into drm-next
Merge tag 'amd-drm-next-5.16-2021-10-29' of
https://gitlab.freedesktop.org/agd5f/linux into drm-next
David Galiffi (1):
drm/amd/display: Add debug support to override the Minimum DRAM Clock
David Heidelberg (1):
dt-bindings: drm/msm/gpu: convert to YAML
David Stevens (1):
drm/virtio: support mapping exported vram
Deepak R Varma (1):
drm: msm: adreno: use DEFINE_DEBUGFS_ATTRIBUTE with
debugfs_create_file_unsafe()
Desmond Cheong Zhi Xi (1):
drm: unexport drm_ioctl_permit
Dmitry Baryshkov (7):
drm/msm/dpu: squash dpu_core_irq into dpu_hw_interrupts
drm/msm/dpu: don't clear IRQ register twice
drm/msm/dpu: merge struct dpu_irq into struct dpu_hw_intr
drm/msm/dsi: do not enable irq handler before powering up the host
drm/msm/dsi: use bulk clk API
drm/msm/a6xx: correct cx_debugbus_read arguments
drm/msm/hdmi: use bulk regulator API
Dmytro Laktyushkin (3):
drm/amd/display: clean up dcn31 revision check
drm/amd/display: restyle dcn31 resource header inline with other asics
drm/amd/display: allow windowed mpo + odm
Douglas Anderson (20):
drm/panel-simple: Reorder logicpd_type_28 / mitsubishi_aa070mc01
dt-bindings: drm/panel-simple-edp: Introduce generic eDP panels
drm/edid: Break out reading block 0 of the EDID
drm/edid: Allow querying/working with the panel ID from the EDID
drm/edid: Use new encoded panel id style for quirks matching
ARM: configs: Everyone who had PANEL_SIMPLE now gets PANEL_EDP
arm64: defconfig: Everyone who had PANEL_SIMPLE now gets PANEL_EDP
drm/panel-edp: Split eDP panels out of panel-simple
drm/panel-edp: Move some wayward panels to the eDP driver
drm/panel-simple: Non-eDP panels don't need "HPD" handling
drm/panel-edp: Split the delay structure out
drm/panel-edp: Better describe eDP panel delays
drm/panel-edp: hpd_reliable shouldn't be subtraced from hpd_absent
drm/panel-edp: Fix "prepare_to_enable" if panel doesn't handle HPD
drm/panel-edp: Don't re-read the EDID every time we power off the panel
drm/panel-edp: Implement generic "edp-panel"s probed by EDID
drm/edid: Fix EDID quirk compile error on older compilers
drm/print: Add deprecation notes to DRM_...() functions
drm/edid: Fix drm_edid_encode_panel_id() kerneldoc warning
drm/edid: Fix crash with zero/invalid EDID
Eric Yang (3):
drm/amd/display: Add periodic detection when zstate is enabled
drm/amd/display: add vsync notify to dmub for abm pause
drm/amd/display: increase Z9 latency to workaround underflow in Z9
Ernst Sjöstrand (2):
drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
drm/amd/amdgpu: Validate ip discovery blob
Evan Quan (1):
drm/amd/pm: fix runpm hang when amdgpu loaded prior to sound driver
F.A.Sulaiman (1):
GPU: drm: fix style errors
Fangzhi Zuo (8):
drm/amd/display: Add DP 2.0 Audio Package Generator
drm/amd/display: Add DP 2.0 HPO Stream Encoder
drm/amd/display: Add DP 2.0 HPO Link Encoder
drm/amd/display: Add DP 2.0 DCCG
drm/amd/display: Add DP 2.0 BIOS and DMUB Support
drm/amd/display: Add DP 2.0 SST DC Support
drm/dp: Add Additional DP2 Headers
drm/amd/display: Add DP 2.0 MST DC Support
Felix Kuehling (1):
drm/amdkfd: make needs_pcie_atomics FW-version dependent
Fernando Ramos (17):
drm: cleanup: drm_modeset_lock_all_ctx() --> DRM_MODESET_LOCK_ALL_BEGIN()
drm/i915: cleanup: drm_modeset_lock_all_ctx() -->
DRM_MODESET_LOCK_ALL_BEGIN()
drm/msm: cleanup: drm_modeset_lock_all_ctx() -->
DRM_MODESET_LOCK_ALL_BEGIN()
drm: cleanup: drm_modeset_lock_all() --> DRM_MODESET_LOCK_ALL_BEGIN()
drm/vmwgfx: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()
drm/tegra: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()
drm/shmobile: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()
drm/radeon: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()
drm/omapdrm: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()
drm/nouveau: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()
drm/msm: cleanup: drm_modeset_lock_all() --> DRM_MODESET_LOCK_ALL_BEGIN()
drm/i915: cleanup: drm_modeset_lock_all() --> DRM_MODESET_LOCK_ALL_BEGIN()
drm/i915: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN() part 2
drm/gma500: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()
drm/amd: cleanup: drm_modeset_lock_all() --> DRM_MODESET_LOCK_ALL_BEGIN()
drm: cleanup: remove drm_modeset_(un)lock_all()
doc: drm: remove TODO entry regarding DRM_MODSET_LOCK_ALL cleanup
George Shen (5):
drm/amd/display: Handle Y carry-over in VCP X.Y calculation
drm/amd/display: Update VCP X.Y logging to improve usefulness
drm/amd/display: Skip override for preferred link settings
during link training
drm/amd/display: Implement fixed DP drive settings
drm/amd/display: Add comment for preferred_training_settings
Guchun Chen (6):
drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage
drm/amd/display: fix error case handling
drm/amdgpu: add HWID of SDMA instance 2 and 3
drm/amdgpu: handle the case of pci_channel_io_frozen only in
amdgpu_pci_resume
drm/amdgpu: use adev_to_drm for consistency when accessing drm_device
drm/amdgpu/discovery: parse hw_id_name for SDMA instance 2 and 3
Guo Zhengkui (1):
drm/amdgpu: remove some repeated includings
Guo, Bing (3):
drm/amd/display: Fix issue with dynamic bpp change for DCN3x
drm/amd/display: Get ceiling for v_total calc
drm/amd/display: set Layout properly for 8ch audio at timing validation
Gurchetan Singh (10):
virtio-gpu api: multiple context types with explicit initialization
drm/virtgpu api: create context init feature
drm/virtio: implement context init: track valid capabilities in a mask
drm/virtio: implement context init: track {ring_idx,
emit_fence_info} in virtio_gpu_fence
drm/virtio: implement context init: plumb {base_fence_ctx,
ring_idx} to virtio_gpu_fence_alloc
drm/virtio: implement context init: stop using drv->context when
creating fence
drm/virtio: implement context init: allocate an array of fence contexts
drm/virtio: implement context init: handle
VIRTGPU_CONTEXT_PARAM_POLL_RINGS_MASK
drm/virtio: implement context init: add virtio_gpu_fence_event
drm/virtio: implement context init: advertise feature to userspace
Gwan-gyeong Mun (1):
drm/i915/display/psr: Do full fetch when handling multi-planar formats
H. Peter Anvin (Intel) (1):
drm/bochs: add Bochs PCI ID for Simics model
Hans de Goede (12):
drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
drm: panel-orientation-quirks: Add quirk for the Chuwi Hi10 Pro
drm/connector: Give connector sysfs devices there own device_type
drm/connector: Add a fwnode pointer to drm_connector and
register with ACPI (v2)
drm/connector: Add drm_connector_find_by_fwnode() function (v3)
drm/connector: Add support for out-of-band hotplug notification (v3)
usb: typec: altmodes/displayport: Make dp_altmode_notify() more generic
usb: typec: altmodes/displayport: Notify drm subsys of hotplug events
drm/i915/dp: Add support for out-of-bound hotplug events
drm: panel-orientation-quirks: Add quirk for the Chuwi HiBook
Hansen (3):
drm/amd/display: Fix detection of 4 lane for DPALT
drm/amd/display: Fix DP2 SE and LE SYMCLK selection for B0 PHY
drm/amd/display: Set phy_mux_sel bit in dmub scratch register
Harry Wentland (8):
drm/amd/display: Get backlight from PWM if DMCU is not initialized
drm/amd/display: Pass display_pipe_params_st as const in DML
drm/amd/display: Pass all structs in display_rq_dlg_helpers by pointer
drm/amd/display: Fix rest of pass-by-value structs in DML
drm/amd/display: Allocate structs needed by
dcn_bw_calc_rq_dlg_ttu in pipe_ctx
drm/amd/display: Reduce stack size for
dml21_ModeSupportAndSystemConfigurationFull
drm/amd/display: Only define DP 2.0 symbols if not already defined
MAINTAINERS: Add Siqueira for AMD DC
Hawking Zhang (1):
drm/amdgpu: correct initial cp_hqd_quantum for gfx9
Hayden Goodfellow (1):
drm/amd/display: Fix wrong format specifier in amdgpu_dm.c
Heikki Krogerus (1):
drm/i915: Associate ACPI connector nodes with connector entries (v2)
Hersen Wu (1):
drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3
Huang Rui (2):
drm/ttm: fix the type mismatch error on sparc64
drm/amdgpu: remove grbm cam index/data operations for gfx v10
Huang, Sean Z (5):
drm/i915/pxp: Implement funcs to create the TEE channel
drm/i915/pxp: Create the arbitrary session after boot
drm/i915/pxp: Implement arb session teardown
drm/i915/pxp: Implement PXP irq handler
drm/i915/pxp: Enable PXP power management
Hugh Dickins (1):
drm/i915: fix blank screen booting crashes
Iago Toral Quiroga (1):
drm/v3d: fix wait for TMU write combiner flush
Ian Chen (1):
drm/amd/display: remove force_enable_edp_fec param.
Ilya (1):
drm/amd/display: Add PPS immediate update flag for DCN2
Imre Deak (19):
fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
drm/i915: Use tile block based dimensions for CCS origin x, y check
drm/i915/adlp: Require always a power-of-two sized CCS surface stride
drm/i915/adlp: Assert that VMAs in DPT start at 0
drm/i915: Follow a new->old platform check order in
intel_fb_stride_alignment
drm/i915/adlp: Add support for remapping CCS FBs
drm/i915/tc: Fix TypeC port init/resume time sanitization
drm/i915/adlp/tc: Fix PHY connected check for Thunderbolt mode
drm/i915/tc: Remove waiting for PHY complete during releasing ownership
drm/i915/tc: Check for DP-alt, legacy sinks before taking PHY ownership
drm/i915/tc: Add/use helpers to retrieve TypeC port properties
drm/i915/tc: Don't keep legacy TypeC ports in connected state w/o a sink
drm/i915/tc: Add a mode for the TypeC PHY's disconnected state
drm/i915/tc: Refactor TC-cold block/unblock helpers
drm/i915/tc: Avoid using legacy AUX PW in TBT mode
drm/i915/icl/tc: Remove the ICL special casing during TC-cold blocking
drm/i915/tc: Fix TypeC PHY connect/disconnect logic on ADL-P
drm/i915/tc: Drop extra TC cold blocking from intel_tc_port_connected()
drm/i915/tc: Fix system hang on ADL-P during TypeC PHY disconnect
Jaehyun Chung (3):
drm/amd/display: Add regamma/degamma coefficients and set sRGB
when TF is BT709
drm/amd/display: Correct degamma coefficients
drm/amd/display: Revert adding degamma coefficients
Jake Wang (7):
drm/amd/display: Added root clock optimization flags
drm/amd/display: Disable dpp root clock when not being used
drm/amd/display: Disable dsc root clock when not being used
drm/amd/display: Disable dpstreamclk, symclk32_se, and symclk32_le
drm/amd/display: Removed z10 save after dsc disable
drm/amd/display: Moved dccg init to after bios golden init
drm/amd/display: Disable hdmistream and hdmichar clocks
James Zhu (5):
drm/amdkfd: separate kfd_iommu_resume from kfd_resume
drm/amdgpu: add amdgpu_amdkfd_resume_iommu
drm/amdgpu: move iommu_resume before ip init/resume
drm/amdgpu/jpeg2: move jpeg2 shared macro to header file
drm/amdgpu/jpeg: add jpeg2.6 start/end
Jani Nikula (91):
drm/i915/edp: fix eDP MSO pipe sanity checks for ADL-P
drm/i915/mst: use intel_de_rmw() to simplify VC payload alloc set/clear
drm/i915/dp: pass crtc_state to intel_ddi_dp_level()
drm/i915/dg2: use existing mechanisms for SNPS PHY translations
drm/i915/dg2: add SNPS PHY translations for UHBR link rates
Merge drm/drm-next into drm-intel-next
drm/i915/dp: remove superfluous EXPORT_SYMBOL()
drm/i915/irq: reduce inlines to reduce header dependencies
drm/i915: intel_runtime_pm.h does not actually need intel_display.h
drm/i915/pm: use forward declaration to remove an include
drm/i915/panel: move intel_panel_use_ssc() out of headers
drm/i915/fdi: move intel_fdi_link_freq() to intel_fdi.[ch]
drm/i915/dp: use actual link rate values in struct link_config_limits
drm/i915/dp: read sink UHBR rates
drm/i915/dg2: add TRANS_DP2_CTL register definition
drm/i915/dg2: add TRANS_DP2_VFREQHIGH and TRANS_DP2_VFREQLOW
drm/i915/dg2: add DG2 UHBR source rates
drm/i915/dp: add max data rate calculation for UHBR rates
drm/i915/fdi: make intel_fdi_link_freq() return int
drm/i915/display: split out dpt out of intel_display.c
drm/i915: add HAS_ASYNC_FLIPS feature macro
drm/i915/fb: move intel_tile_width_bytes() to intel_fb.c
drm/i915/fb: move intel_fb_align_height() to intel_fb.c
drm/i915/fb: move intel_surf_alignment() to intel_fb.c
drm/i915/fb: move user framebuffer stuff to intel_fb.c
drm/i915/backlight: extract backlight code to a separate file
drm/i915/backlight: mass rename functions to have intel_backlight_ prefix
drm/i915/panel: mass rename functions to have intel_panel_ prefix
drm/i915/pci: rename functions to have i915_pci prefix
drm/i915/snps: constify struct intel_mpllb_state arrays harder
drm/i915/fdi: move intel_update_fdi_pll_freq to intel_fdi.c
drm/i915/fdi: move fdi bc bifurcation functions to intel_fdi.c
drm/i915/fdi: move more FDI stuff to FDI link train hooks
drm/i915/fdi: move fdi mphy reset and programming to intel_fdi.c
drm/i915/fdi: convert BUG()'s to MISSING_CASE()
drm/i915: remove unused i915->active_pipes
drm/i915/dp: fix DG2 max source rate check
drm/i915/debugfs: clean up LPSP status
drm/i915/debugfs: clean up LPSP capable
drm/i915/dp: fix TGL and ICL max source rates
drm/i915/dp: fix DG1 and RKL max source rates
drm/i915/bios: use hdmi level shift directly from child data
drm/i915/bios: use max tmds clock directly from child data
drm/i915/bios: use dp max link rate directly from child data
drm/i915/bios: use alternate aux channel directly from child data
drm/i915/bios: move ddc pin mapping code next to ddc pin sanitize
drm/i915/bios: use ddc pin directly from child data
drm/i915/bios: get rid of vbt ddi_port_info
drm/displayid: re-align data block macros
drm/displayid: add DisplayID v2.0 data blocks and primary use cases
drm/edid: abstract OUI conversion to 24-bit int
drm/edid: parse the DisplayID v2.0 VESA vendor block for MSO
drm/i915/edp: postpone MSO init until after EDID read
drm/i915/edp: use MSO pixel overlap from DisplayID data
drm/dp: add DP 2.0 UHBR link rate and bw code conversions
drm/dp: use more of the extended receiver cap
drm/dp: add LTTPR DP 2.0 DPCD addresses
drm/dp: add helper for extracting adjust 128b/132b TX FFE preset
drm/i915/dg2: add DG2+ TRANS_DDI_FUNC_CTL DP 2.0 128b/132b mode
drm/i915/dp: add helper for checking for UHBR link rate
drm/i915/dp: use 128b/132b TPS2 for UHBR+ link rates
drm/i915/dp: select 128b/132b channel encoding for UHBR rates
drm/i915/dg2: configure TRANS_DP2_CTL for DP 2.0
drm/i915/dp: add HAS_DP20 macro
drm/i915/dg2: use 128b/132b transcoder DDI mode
drm/i915/dg2: configure TRANS_DP2_VFREQ{HIGH,LOW} for 128b/132b
drm/i915/fdi: move fdi modeset asserts to intel_fdi.c
drm/i915/pps: move pps (panel) modeset asserts to intel_pps.c
drm/i915/dpll: move dpll modeset asserts to intel_dpll.c
drm/i915/dsi: move dsi pll modeset asserts to vlv_dsi_pll.c
drm/i915/dsi: pass struct mipi_dsi_packet pointer, not the entire struct
drm/i915/dsi: fuse dsi_send_pkt_payld() and add_payld_to_queue()
drm/i915/dsi: return -EBUSY instead of -1
drm/i915/hdmi: return -EINVAL instead of -1
drm/i915/drv: return -EIO instead of -1
drm/i915/dram: return -EINVAL instead of -1
drm/i915/fdi: use -EAGAIN instead of local special return value
drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915
drm/i915/debugfs: register LPSP capability on all platforms
drm/i915/display: stop returning errors from debugfs registration
drm/i915/debugfs: pass intel_connector to intel_connector_debugfs_add()
drm/i915/reg: add AUD_TCA_DP_2DOT0_CTRL registers
drm/i915/dg2: fix snps buf trans for uhbr
drm/i915/dp: take LTTPR into account in 128b/132b rates
drm/i915/mst: abstract intel_dp_mst_source_support()
drm/i915/dp: abstract intel_dp_lane_max_vswing_reached()
drm/i915/dg2: update link training for 128b/132b
drm/i915: split out vlv sideband to a separate file
drm/i915/bios: gracefully disable dual eDP for now
drm/i915: split out intel_pcode.[ch] to separate file
drm/i915: rename intel_sideband.[ch] to intel_sbi.[ch]
Janusz Krzysztofik (2):
drm/i915: Mark GPU wedging on driver unregister unrecoverable
drm/i915: Flush buffer pools on driver remove
Javier Martinez Canillas (1):
drm: Remove unused code to load the non-existing fbcon.ko
Jernej Skrabec (1):
drm/sun4i: Fix macros in sun8i_csc.h
Jessica Zhang (3):
drm/msm/dpu: Add CRC support for DPU
drm/msm: Fix potential NULL dereference in DPU SSPP
drm/msm/dsi: fix wrong type in msm_dsi_host
Jiapeng Chong (3):
panfrost: make mediatek_mt8183_supplies and
mediatek_mt8183_pm_domains static
drm/rockchip: dsi: Fix duplicate included linux/phy/phy.h
drm/rockchip: dsi: make hstt_table static
Jimmy Kizito (24):
drm/amd/display: Fix dynamic link encoder access.
drm/amd/display: Fix link training fallback logic
drm/amd/display: Fix concurrent dynamic encoder assignment
drm/amd/display: Fix dynamic encoder reassignment
drm/amd/display: Fix null pointer dereference for encoders
drm/amd/display: Fix MST link encoder availability check.
drm/amd/display: Fix concurrent dynamic encoder assignment.
drm/amd/display: Update link encoder object creation.
drm/amd/display: Set DPIA link endpoint type
drm/amd/display: Stub out DPIA link training call
drm/amd/display: Add stub to get DPIA tunneling device data
drm/amd/display: Skip DPCD read for DPTX-to-DPIA hop
drm/amd/display: Train DPIA links with fallback
drm/amd/display: Implement DPIA training loop
drm/amd/display: Implement DPIA link configuration
drm/amd/display: Implement DPIA clock recovery phase
drm/amd/display: Implement DPIA equalisation phase
drm/amd/display: Implement end of training for hop in DPIA display path
drm/amd/display: Read USB4 DP tunneling data from DPCD.
drm/amd/display: Fix DIG_HPD_SELECT for USB4 display endpoints.
drm/amd/display: Add debug flags for USB4 DP link training.
drm/amd/display: Clear encoder assignment for copied streams
drm/amd/display: Do not skip link training on DP quick hot plug
drm/amd/display: Add workaround flag for EDID read on certain docks
Jingwen Chen (1):
drm/amd/amdgpu: add dummy_page_addr to sriov msg
John Clements (6):
drm/amdgpu: Update RAS status print
drm/amdgpu: Update RAS trigger error block support
drm/amdgpu: Resolve nBIF RAS error harvesting bug
drm/amdgpu: Updated RAS infrastructure
drm/amdgpu: Consolidate RAS cmd warning messages
drm/amdgpu: resolve RAS query bug
John Stultz (1):
dma-buf: system_heap: Avoid warning on mid-order allocations
Jonathan Kim (1):
drm/amdkfd: map gpu hive id to xgmi connected cpu
Joonas Lahtinen (2):
Merge drm/drm-next into drm-intel-gt-next
Merge remote-tracking branch 'tip/locking/wwmutex' into drm-intel-gt-next
Joshua Ashton (3):
drm/amd/display: Use dcc_ind_blk value to set register directly
drm/amd/display: Handle GFX10_RBPLUS modifiers for dcc_ind_blk
drm/amd/display: Add modifiers capable of DCC image stores for gfx10_3
Josip Pavic (4):
drm/amd/display: add missing ABM register offsets
drm/amd/display: unblock abm when odm is enabled only on configs
that support it
drm/amd/display: initialize backlight_ramping_override to false
drm/amd/display: do not compare integers of different widths
José Roberto de Souza (25):
drm/i915/display: Fix sel fetch plane offset calculation
drm/i915: Nuke ORIGIN_GTT
drm/i915/display: Drop PSR support from HSW and BDW
drm/i915/display: Move DRRS code its own file
drm/i915/display: Renaming DRRS functions to intel_drrs_*()
drm/i915/display: Some code improvements and code style fixes for DRRS
drm/i915/display: Share code between intel_drrs_flush and
intel_drrs_invalidate
drm/i915/display: Prepare DRRS for frontbuffer rendering drop
drm/i915/dg1: Add new PCI id
drm/i915/display/adlp: Fix PSR2_MAN_TRK_CTL_SU_REGION_END_ADDR calculation
drm/i915/display: Wait at least 2 frames before selective update
drm/i915/display: Workaround cursor left overs with PSR2
selective fetch enabled
drm/i915/display/psr: Use drm damage helpers to calculate plane
damaged area
drm/i915/display/adlp: Add new PSR2 workarounds
drm/i915/display/dmc: Set DC_STATE_DEBUG_MASK_CORES after firmware load
drm/i915/display: Match PSR2 selective fetch sequences with specification
drm/i915/display: Only keep PSR enabled if there is active planes
drm/i915/display/psr: Handle plane and pipe restrictions at
every page flip
drm/i915/display: Drop unnecessary frontbuffer flushes
drm/i915/display: Handle frontbuffer rendering when PSR2
selective fetch is enabled
drm/i915/display: Fix glitches when moving cursor with PSR2
selective fetch enabled
drm/i915/display/adlp: Optimize PSR2 power-savings in corner cases
drm/i915/display/adlp: Allow PSR2 to be enabled
drm/i915/display: Enable PSR2 selective fetch by default
drm/i915: Remove memory frequency calculation
Jude Shih (7):
drm/amd/display: Support for DMUB HPD interrupt handling
drm/amd/display: Support for SET_CONFIG processing with DMUB
drm/amd/display: Deadlock/HPD Status/Crash Bug Fix
drm/amd/display: Fix USB4 Aux via DMUB terminate unexpectedly
drm/amd/display: USB4 bring up set correct address
drm/amd/display: Fix USB4 hot plug crash issue
drm/amd/display: Enable dpia in dmub only for DCN31 B0
Juston Li (3):
drm/i915/hdcp: update cp_irq_count_cached in intel_dp_hdcp2_read_msg()
drm/i915/hdcp: read RxInfo once when reading
RepeaterAuth_Send_ReceiverID_List
drm/i915/hdcp: reuse rx_info for mst stream type1 capability check
Kai-Heng Feng (2):
drm/i915/dp: Use max params for panels < eDP 1.4
drm/i915/audio: Use BIOS provided value for RKL HDA link
Kees Cook (1):
drm/i915: Use designated initializers for init/exit table
Kenneth Feng (1):
drm/amd/pm: fix the issue of uploading powerplay table
Kent Russell (3):
drm/amdgpu: Clarify error when hitting bad page threshold
drm/amdgpu: Warn when bad pages approaches 90% threshold
drm/amdgpu: Add kernel parameter support for ignoring bad page threshold
Kieran Bingham (6):
dt-bindings: display: renesas,du: Provide bindings for r8a779a0
drm: rcar-du: Sort the DU outputs
drm: rcar-du: Only initialise TVM_TVSYNC mode when supported
drm: rcar-du: Fix DIDSR field name
drm: rcar-du: Split CRTC IRQ and Clock features
drm: rcar-du: Add r8a779a0 device support
Krishna Manikandan (1):
dt-bindings: msm: add DT bindings for sc7280
Krzysztof Kozlowski (1):
dt-bindings: panel: ili9341: correct indentation
Lai, Derek (2):
drm/amd/display: Added power down on boot for DCN3
drm/amd/display: Removed power down on boot from DCN31
Lang Yu (13):
drm/amdgpu: fix sysfs_emit/sysfs_emit_at warnings(v2)
drm/amdgpu: update SMU PPSMC for cyan skilfish
drm/amdgpu: update SMU driver interface for cyan skilfish(v3)
drm/amdgpu: add some pptable funcs for cyan skilfish(v3)
drm/amdgpu: add manual sclk/vddc setting support for cyan skilfish(v3)
drm/amdkfd: fix a potential ttm->sg memory leak
drm/amdgpu: query default sclk from smu for cyan_skillfish
drm/amdgpu: enable display for cyan skillfish
drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
drm/amdkfd: Separate pinned BOs destruction from general routine
drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw()
drm/amdkfd: Add an optional argument into update queue operation(v2)
drm/amdkfd: Remove cu mask from struct queue_properties(v2)
Laurent Pinchart (10):
drm: rcar-du: Don't create encoder for unconnected LVDS outputs
drm: rcar-du: Improve kernel log messages when initializing encoders
drm: rcar-du: Set the DMA coherent mask for the DU device
drm: rcar-du: Allow importing non-contiguous dma-buf with VSP
drm: property: Replace strncpy() with strscpy_pad()
drm/omap: Use correct printk format specifiers for size_t
drm/omap: Cast pointer to integer without generating warning
drm/omap: Depend on CONFIG_OF
drm/sti: Use correct printk format specifiers for size_t
drm: Add R10 and R12 FourCC
Lee Shawn C (6):
drm/i915/dp: return proper DPRX link training result
drm/i915/dsi: wait for header and payload credit available
drm/i915/dsi: refine send MIPI DCS command sequence
drm/i915: Get proper min cdclk if vDSC enabled
drm/i915/dsi: Retrieve max brightness level from VBT
drm/i915/dsi: Read/write proper brightness value via MIPI DCS command
Len Baker (1):
drm/radeon: Prefer kcalloc over open coded arithmetic
Leo (Hanghong) Ma (4):
drm/amd/display: Add DPCD writes at key points
drm/amd/display: Fix system hang at boot
drm/amd/display: Add helper for blanking all dp displays
drm/amd/display: Fix error in dmesg at boot
Leslie Shi (1):
drm/amdgpu: fix gart.bo pin_count leak
Lewis Huang (1):
drm/amd/display: Align bw context with hw config when system resume
Lijo Lazar (3):
drm/amd/pm: Update intermediate power state for SI
drm/amdgpu: During s0ix don't wait to signal GFXOFF
drm/amd/pm: Disable fan control if not supported
Likun Gao (1):
drm/amdgpu: refactor function to init no-psp fw
Liu, Zhan (3):
drm/amd/display: Fix DCN3 B0 DP Alt Mapping
drm/amd/display: Fix B0 USB-C DP Alt mode
drm/amd/display: DIG mapping change is causing a blocker
Lucas De Marchi (11):
drm/i915/xehpsdv: factor out function to read RP_STATE_CAP
drm/i915/dg1: remove __maybe_unused leftover
drm/i915/xehpsdv: Define MOCS table for XeHP SDV
drm/i915: rename debugfs_gt files
drm/i915: rename debugfs_engines files
drm/i915: rename debugfs_gt_pm files
drm/i915: deduplicate frequency dump on debugfs
drm/i915: remove IS_ACTIVE
drm/i915/gt: include tsc.h where used
drm/i915/gt: add asm/cacheflush.h for use of clflush()
drm/i915/display: remove unused intel-mid.h include
Lukas Bulwahn (5):
drm: rockchip: remove reference to non-existing config DRM_RGB
drm: v3d: correct reference to config ARCH_BRCMSTB
drm: zte: remove obsolete DRM Support for ZTE SoCs
drm: omap: remove obsolete selection of OMAP2_DSS in config DRM_OMAP
MAINTAINERS: fix typo in DRM DRIVER FOR SAMSUNG S6D27A1 PANELS
Lukasz Majczak (1):
drm/i915/bdb: Fix version check
Lv Ruyi (1):
drm/amd/display: remove duplicate include in dcn201_clk_mgr.c
Maarten Lankhorst (5):
drm/i915: Add pci ids and uapi for DG1
drm/i915: Add mmap lock around vma_lookup() in the mman selftest.
drm/i915: Move __i915_gem_free_object to ttm_bo_destroy
drm/i915: Fix runtime pm handling in i915_gem_shrink
drm/i915: Add ww context to intel_dpt_pin, v2.
Marek Olšák (1):
drm/amd/display: fix DCC settings for DCN3
Marijn Suijten (1):
drm/msm/dsi: Use division result from div_u64_rem in 7nm and 14nm PLL
Mark Yacoub (1):
drm/msm: Change dpu_crtc_get_vblank_counter to use vsync count.
Markuss Broks (2):
drm/panel: Add DT bindings for Samsung S6D27A1 display panel
drm/panel: s6d27a1: Add driver for Samsung S6D27A1 display panel
Martin Leung (1):
drm/amd/display: Manually adjust strobe for DCN303
Matt Atwood (1):
drm/i915/dp: Fix eDP max rate for display 11+
Matt Roper (26):
drm/i915: correct name of GT forcewake domain in error messages
drm/i915: Re-use gen11 forcewake read functions on gen12
drm/i915: Make shadow tables range-based
drm/i915/gen11: Update shadowed register table
drm/i915/gen12: Update shadowed register table
drm/i915/xehp: Xe_HP shadowed registers are a strict superset of gen12
drm/i915/xehp: Loop over all gslices for INSTDONE processing
drm/i915/dg2: Report INSTDONE_GEOM values in error state
drm/i915: Only access SFC_DONE when media domain is not fused off
drm/i915/xehpsdv: Read correct RP_STATE_CAP register
drm/i915/adl_p: Also disable underrun recovery with MSO
drm/i915/dg2: Maintain backward-compatible nested batch behavior
drm/i915/dg2: Memory latency values from pcode must be doubled
drm/i915: Ensure wa_init_finish() is called for ctx workaround list
drm/i915/dg2: Define MOCS table for DG2
drm/i915/xehp: Check new fuse bits for SFC availability
drm/i915: Check SFC fusing before recording/dumping SFC_DONE
drm/i915/uncore: Convert gen6/gen7 read operations to fwtable
drm/i915/uncore: Associate shadow table with uncore
drm/i915/uncore: Replace gen8 write functions with general fwtable
drm/i915/uncore: Drop gen11/gen12 mmio write handlers
drm/i915/uncore: Drop gen11 mmio read handlers
drm/i915/dg2: Add DG2-specific shadow register table
drm/i915/uncore: fwtable read handlers are now used on all
forcewake platforms
drm/i915: Stop using I915_TILING_* in client blit selftest
drm/i915/uapi: Add comment clarifying purpose of I915_TILING_* values
Matthew Auld (23):
drm/i915/buddy: add some pretty printing
drm/i915/debugfs: hook up ttm_resource_manager_debug
drm/i915/gtt: add some flushing for the 64K GTT path
drm/i915/selftests: fixup igt_shrink_thp
drm/i915/request: fix early tracepoints
drm/i915/selftests: exercise shmem_writeback with THP
drm/i915: remember to call i915_sw_fence_fini
drm/ttm: stop calling tt_swapin in vm_access
drm/ttm: stop setting page->index for the ttm_tt
drm/ttm: move ttm_tt_{add, clear}_mapping into amdgpu
drm/ttm: remove TTM_PAGE_FLAG_NO_RETRY
drm/ttm: s/FLAG_SG/FLAG_EXTERNAL/
drm/ttm: add some kernel-doc for TTM_TT_FLAG_*
drm/ttm: add TTM_TT_FLAG_EXTERNAL_MAPPABLE
drm/i915: mark dmabuf objects as ALLOC_USER
drm/i915: mark userptr objects as ALLOC_USER
drm/i915: extract bypass-llc check into helper
drm/i915/dmabuf: add paranoid flush-on-acquire
drm/i915/userptr: add paranoid flush-on-acquire
drm/i915/shmem: ensure flush during swap-in on non-LLC
drm/i915: expand on the kernel-doc for cache_dirty
drm/i915: mark up internal objects with start_cpu_write
drm/i915/selftests: mark up hugepages object with start_cpu_write
Matthew Brost (53):
drm/i915: Disable bonding on gen12+ platforms
drm/i915: Fix syncmap memory leak
drm/i915/selftests: Increase timeout in i915_gem_contexts selftests
drm/i915/guc: Fix blocked context accounting
drm/i915/guc: Fix outstanding G2H accounting
drm/i915/guc: Unwind context requests in reverse order
drm/i915/guc: Don't drop ce->guc_active.lock when unwinding context
drm/i915/guc: Process all G2H message at once in work queue
drm/i915/guc: Workaround reset G2H is received after schedule done G2H
Revert "drm/i915/gt: Propagate change in error status to
children on unhold"
drm/i915/guc: Kick tasklet after queuing a request
drm/i915/guc: Don't enable scheduling on a banned context,
guc_id invalid, not registered
drm/i915/guc: Copy whole golden context, set engine state size of subset
drm/i915/selftests: Add initial GuC selftest for scrubbing lost G2H
drm/i915/guc: Take context ref when cancelling request
drm/i915/guc: Don't touch guc_state.sched_state without a lock
drm/i915/guc: Reset LRC descriptor if register returns -ENODEV
drm/i915/guc: Release submit fence from an irq_work
drm/i915/guc: Move guc_blocked fence to struct guc_state
drm/i915/guc: Rework and simplify locking
drm/i915/guc: Proper xarray usage for contexts_lookup
drm/i915/guc: Drop pin count check trick between sched_disable and re-pin
drm/i915/guc: Move GuC priority fields in context under guc_active
drm/i915/guc: Move fields protected by guc->contexts_lock into
sub structure
drm/i915/guc: Drop guc_active move everything into guc_state
drm/i915/guc: Add GuC kernel doc
drm/i915/guc: Enable GuC submission by default on DG1
drm/i915: Take pinning into account in __i915_gem_object_is_lmem
drm/i915: Fix bug in user proto-context creation that leaked contexts
drm/i915/guc: Move GuC guc_id allocation under submission state sub-struct
drm/i915/guc: Take GT PM ref when deregistering context
drm/i915/guc: Take engine PM when a context is pinned with GuC submission
drm/i915/guc: Don't call switch_to_kernel_context with GuC submission
drm/i915: Add logical engine mapping
drm/i915: Expose logical engine instance to user
drm/i915/guc: Introduce context parent-child relationship
drm/i915/guc: Add multi-lrc context registration
drm/i915/guc: Ensure GuC schedule operations do not operate on
child contexts
drm/i915/guc: Assign contexts in parent-child relationship
consecutive guc_ids
drm/i915/guc: Implement parallel context pin / unpin functions
drm/i915/guc: Implement multi-lrc submission
drm/i915/guc: Insert submit fences between requests in
parent-child relationship
drm/i915/guc: Implement multi-lrc reset
drm/i915/guc: Update debugfs for GuC multi-lrc
drm/i915/guc: Connect UAPI to GuC multi-lrc interface
drm/i915/doc: Update parallel submit doc to point to i915_drm.h
drm/i915/guc: Add basic GuC multi-lrc selftest
drm/i915/guc: Implement no mid batch preemption for multi-lrc
drm/i915: Multi-BB execbuf
drm/i915/guc: Handle errors in multi-lrc requests
drm/i915: Make request conflict tracking understand parallel submits
drm/i915: Update I915_GEM_BUSY IOCTL to understand composite fences
drm/i915: Enable multi-bb execbuf
Maxime Ripard (14):
Merge tag 'drm-misc-intel-oob-hotplug-v1' of
git://git.kernel.org/pub/scm/linux/kernel/git/hansg/linux into
drm-misc-next
Merge drm/drm-next into drm-misc-next
drm/bridge: Add a function to abstract away panels
drm/vc4: dpi: Switch to devm_drm_of_get_bridge
drm/vc4: dsi: Switch to devm_drm_of_get_bridge
drm/bridge: Move devm_drm_of_get_bridge to bridge/panel.c
drm/bridge: Add documentation sections
drm/bridge: Document the probe issue with MIPI-DSI bridges
drm/mipi-dsi: Create devm device registration
drm/mipi-dsi: Create devm device attachment
drm/probe-helper: Document drm_helper_hpd_irq_event() return value
drm/probe-helper: Create a HPD IRQ event helper for a single connector
drm/vc4: hdmi: Actually check for the connector status in hotplug
drm/bridge: Add stubs for devm_drm_of_get_bridge when OF is disabled
Meenakshikumar Somasundaram (12):
drm/amd/display: Fix for null pointer access for ddc pin and aux engine.
drm/amd/display: Link training retry fix for abort case
drm/amd/display: Creating a fw boot options bit for an upcoming feature
drm/amd/display: Fix for link encoder access for MST.
drm/amd/display: USB4 DPIA enumeration and AUX Tunneling
drm/amd/display: Support for DMUB HPD and HPD RX interrupt handling
drm/amd/display: Support for SET_CONFIG processing with DMUB
drm/amd/display: Add dpia debug options
drm/amd/display: Fix for access for ddc pin and aux engine.
drm/amd/display: FEC configuration for dpia links
drm/amd/display: FEC configuration for dpia links in MST mode
drm/amd/display: MST support for DPIA
Melissa Wen (5):
drm/v3d: fix sched job resources cleanup when a job is aborted
drm/v3d: decouple adding job dependencies steps from job init
drm/v3d: alloc and init job in one shot
drm/v3d: add generic ioctl extension
drm/v3d: add multiple syncobjs support
Michael Strauss (10):
drm/amd/display: Set min dcfclk if pipe count is 0
drm/amd/display: Add VPG and AFMT low power support for DCN3.1
drm/amd/display: Enable mem low power control for DCN3.1 sub-IP blocks
drm/amd/display: Disable mem low power for CM HW block on DCN3.1
drm/amd/display: Don't enable AFMT for DP audio stream
drm/amd/display: Defer LUT memory powerdown until LUT bypass latches
drm/amd/display: Clean Up VPG Low Mem Power
drm/amd/display: Set i2c memory to light sleep during hw init
drm/amd/display: Defer GAMCOR and DSCL power down sequence to vupdate
drm/amd/display: Fallback to clocks which meet requested voltage on DCN31
Michal Wajdeczko (5):
drm/i915: Use fixed offset for PTEs location
drm/i915/guc: Verify result from CTB (de)register action
drm/i915/guc: Print error name on CTB (de)registration failure
drm/i915/guc: Print error name on CTB send failure
drm/i915/guc: Move and improve error message for missed CTB reply
Michel Dänzer (1):
drm/amdgpu: Drop inline from amdgpu_ras_eeprom_max_record_count
Mikita Lipski (1):
drm/amd/display: Add missing PSR state
Monk Liu (1):
drm/sched: fix the bug of time out calculation(v4)
Mukul Joshi (4):
x86/MCE/AMD: Export smca_get_bank_type symbol
drm/amdgpu: Register MCE notifier for Aldebaran RAS
drm/amdgpu: Enable RAS error injection after mode2 reset on Aldebaran
drm/amdgpu: Fix RAS page retirement with mode2 reset on Aldebaran
Nathan Chancellor (6):
drm/i915/selftest: Fix use of err in igt_reset_{fail, nop}_engine()
drm/i915/selftests: Do not use import_obj uninitialized
drm/i915/selftests: Always initialize err in
igt_dmabuf_import_same_driver_lmem()
drm/i915: Enable -Wsometimes-uninitialized
drm/i915: Clean up disabled warnings
drm/msm/dpu: Remove commit and its uses in dpu_crtc_set_crc_source()
Nevenko Stupar (1):
drm/amd/display: Add bios parser support for latest firmware_info
Nicholas Kazlauskas (8):
drm/amd/display: Add NULL checks for vblank workqueue
drm/amd/display: Optimize bandwidth on following fast update
drm/amd/display: Fix white screen page fault for gpuvm
drm/amd/display: Enable PSR by default on newer DCN
drm/amd/display: Fix surface optimization regression on Carrizo
drm/amd/display: Fix prefetch bandwidth calculation for DCN3.1
drm/amd/display: Require immediate flip support for DCN3.1 planes
drm/amd/display: Fix deadlock when falling back to v2 from v3
Nikola Cornij (4):
drm/amd/display: Use adjusted DCN301 watermarks
drm/amd/display: Limit display scaling to up to 4k for DCN 3.1
drm/amd/display: Limit display scaling to up to true 4k for DCN 3.1
drm/amd/display: Increase watermark latencies for DCN3.1
Nirmoy Das (7):
drm/amdgpu: rework context priority handling
drm/amdgpu: detach ring priority from gfx priority
drm/amdgpu: use IS_ERR for debugfs APIs
drm/amdgpu: cleanup debugfs for amdgpu rings
drm/radeon: pass drm dev radeon_agp_head_init directly
drm/amdgpu: return early if debugfs is not initialized
drm/amdgpu: unify BO evicting method in amdgpu_ttm
Noralf Trønnes (6):
drm/fourcc: Add R8 to drm_format_info
drm/format-helper: Add drm_fb_xrgb8888_to_rgb332()
drm/format-helper: Add drm_fb_xrgb8888_to_rgb888()
drm/gud: Add GUD_PIXEL_FORMAT_R8
drm/gud: Add GUD_PIXEL_FORMAT_RGB332
drm/gud: Add GUD_PIXEL_FORMAT_RGB888
Oliver Logush (1):
drm/amd/display: Add an extra check for dcn10 OPTC data format
Patrik Jakobsson (1):
drm/amdgpu: Fix even more out of bound writes from debugfs
Paul Cercueil (2):
drm/bridge: it66121: Initialize {device,vendor}_ids
drm/bridge: it66121: Wait for next bridge to be probed
Paul Menzel (1):
drm/amdgpu: Demote TMZ unsupported log message from warning to info
Philip Chen (3):
drm/bridge: parade-ps8640: Reorg the macros
drm/bridge: parade-ps8640: Use regmap APIs
drm/bridge: parade-ps8640: Add support for AUX channel
Philip Yang (10):
drm/amdkfd: SVM map to gpus check vma boundary
drm/amdkfd: fix dma mapping leaking warning
drm/amdkfd: handle svm migrate init error
drm/amdkfd: fix svm_migrate_fini warning
drm/amdkfd: ratelimited svm debug messages
drm/amdkfd: handle svm partial migration cpages 0
drm/amdkfd: unregistered svm range not overlap with TTM range
drm/amdkfd: clarify the origin of cpages returned by migration functions
drm/amdkfd: debug message to count successfully migrated pages
drm/amdkfd: restore userptr ignore bad address error
Praful Swarnakar (1):
drm/amd/display: Fix Display Flicker on embedded panels
Prike Liang (1):
drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
Qing Wang (1):
drm/amdgpu: replace snprintf in show functions with sysfs_emit
Qingqing Zhuo (8):
drm/amd/display: Revert "dc: w/a for hard hang on HPD on native DP"
drm/amd/display: Apply w/a for hard hang on HPD
drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo
drm/amd/display: Extend w/a for hard hang on HPD to dcn20
drm/amd/display: Replace referral of dal with dc
drm/amd/display: Re-arrange FPU code structure for dcn2x
drm/amd/display: move FPU associated DSC code to DML folder
drm/amd/display: move FPU associated DCN301 code to DML folder
Radhakrishna Sripada (1):
drm/i915: Update memory bandwidth parameters
Ran Jianping (1):
drm/i915/selftests: remove duplicate include in mock_region.c
Raphael GALLAIS-POU - foss (1):
drm/panel: otm8009a: add a 60 fps mode
Raphael Gallais-Pou (2):
drm/stm: ltdc: attach immutable zpos property to planes
drm/stm: ltdc: add layer alpha support
Rikard Falkeborn (1):
drm: msm: hdmi: Constify static structs
Rob Clark (7):
drm/bridge: ti-sn65dsi86: Implement bridge->mode_valid()
drm/msm/dsi: Support NO_CONNECTOR bridges
drm/msm/dpu: Remove some nonsense
drm/msm: Add hrtimer + kthread_work helper
drm/msm/devfreq: Add 1ms delay before clamping freq
drm/msm/dpu: Remove impossible NULL check
drm/msm/dpu: Remove dynamic allocation from atomic context
Robert Foss (2):
drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
drm/bridge: anx7625: Propagate errors from sp_tx_edid_read()
Robin Chen (1):
drm/amd/display: dc_link_set_psr_allow_active refactoring
Rodrigo Vivi (4):
Merge tag 'drm-misc-intel-oob-hotplug-v1' of
git://git.kernel.org/pub/scm/linux/kernel/git/hansg/linux into
drm-intel-next
Merge drm/drm-next into drm-intel-next
Merge drm/drm-next into drm-intel-next
drm/i915: Clean up PXP Kconfig info.
Roman Li (3):
drm/amd/display: Use max target bpp override option
drm/amd/display: Limit max DSC target bpp for specific monitors
drm/amd/display: Fully switch to dmub for all dcn21 asics
Roy Sun (1):
drm/amd/amdgpu: Enable some sysnodes for guest smi
Satyajit Sahu (3):
drm/amdgpu/vce: set the priority for each ring
drm/amdgpu/vcn: set the priority for each encode ring
drm/amdgpu:schedule vce/vcn encode based on priority
Sean Paul (16):
Revert "drm: cleanup: remove drm_modeset_(un)lock_all()"
Revert "drm/amd: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Revert "drm/gma500: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Revert "drm/i915: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN() part 2"
Revert "drm/i915: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Revert "drm/msm: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Revert "drm/nouveau: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Revert "drm/omapdrm: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Revert "drm/radeon: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Revert "drm/shmobile: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Revert "drm/tegra: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Revert "drm/vmwgfx: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Revert "drm: cleanup: drm_modeset_lock_all() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Revert "drm/msm: cleanup: drm_modeset_lock_all_ctx() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Revert "drm/i915: cleanup: drm_modeset_lock_all_ctx() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Revert "drm: cleanup: drm_modeset_lock_all_ctx() -->
DRM_MODESET_LOCK_ALL_BEGIN()"
Simon Ser (8):
amd/display: downgrade validation failure log level
drm: document drm_mode_create_lease object requirements
drm/panel-orientation-quirks: add Valve Steam Deck
amd/display: enable panel orientation quirks
drm/amdgpu: check tiling flags when creating FB on GFX8-
drm/lease: allow empty leases
amd/display: check cursor plane matches underlying plane
amd/display: remove ChromeOS workaround
Sireesh Kodali (1):
dt-bindings: msm: dsi: Add MSM8953 dsi phy
Solomon Chiu (1):
drm/amd/display: Add 120Hz support for freesync video mode
Souptick Joarder (2):
drm/rockchip: remove of_match_ptr() from vop_driver_dt_match
drm/rockchip: remove of_match_ptr() from analogix dp driver
Sreedhar Telukuntla (1):
drm/i915/gt: Initialize L3CC table in mocs init
Steven Price (1):
drm/panfrost: Calculate lock region size correctly
Stuart Summers (1):
drm/i915/xehpsdv: Add compute DSS type
Swati Sharma (1):
drm/i915/dp: Drop redundant debug print
Tao Zhou (10):
drm/amdgpu: add poison mode query for DF (v2)
drm/amdgpu: add poison mode query for UMC
drm/amdgpu: set poison supported flag for RAS (v2)
drm/amdgpu: skip umc ras irq handling in poison mode (v2)
amd/amdkfd: add ras page retirement handling for sq/sdma (v3)
drm/amdgpu: load PSP RL in resume path
drm/amdgpu: centralize checking for RAS TA status
drm/amdgpu: output warning for unsupported ras error inject (v2)
drm/amdgpu: skip GPRs init for some CU settings on ALDEBARAN
drm/amdgpu: remove GPRs init for ALDEBARAN in gpu reset (v3)
Tejas Upadhyay (4):
drm/i915/adl_s: Update ADL-S PCI IDs
drm/i915/display: Add HDR mode helper function
drm/i915: Remove warning from the rps worker
drm/i915/gen11: Disable cursor clock gating in HDR mode
Thelford Williams (1):
drm/amdgpu: fix out of bounds write
Thierry Reding (3):
drm/fourcc: Add macros to determine the modifier vendor
drm/arm: malidp: Use fourcc_mod_is_vendor() helper
drm/tegra: Use fourcc_mod_is_vendor() helper
Thomas Hellström (13):
drm/i915: Ditch the i915_gem_ww_ctx loop member
drm/i915/ttm: Reorganize the ttm move code somewhat
drm/ttm, drm/i915: Update ttm_move_memcpy for async use
drm/i915/gem: Fix the mman selftest
drm/i915/gem: Fix a lockdep warning the __i915_gem_is_lmem() function
drm/i915/ttm: Implement a function to copy the contents of two
TTM-based objects
drm/i915/gem: Implement a function to process all gem objects of a region
drm/i915/gt: Increase suspend timeout
drm/i915 Implement LMEM backup and restore for suspend / resume
drm/i915/gt: Register the migrate contexts with their engines
drm/i915: Don't back up pinned LMEM context images and rings
during suspend
drm/i915: Reduce the number of objects subject to memcpy recover
drm/i915/ttm: Rework object initialization slightly
Thomas Zimmermann (10):
lib: devres: Add managed arch_phys_wc_add()
lib: devres: Add managed arch_io_reserve_memtype_wc()
drm/ast: Use managed interfaces for framebuffer write combining
drm/mgag200: Use managed interfaces for framebuffer write combining
drm/vboxvideo: Use managed interfaces for framebuffer write combining
drm/gma500: Replace references to dev_private with helper function
drm/gma500: Disable PCI device during shutdown
drm/gma500: Embed struct drm_device in struct drm_psb_private
drm/gma500: Remove dev_priv branch from unload function
drm/gma500: Managed device release
Tim Gardner (1):
drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
Tom St Denis (2):
drm/amd/amdgpu: New debugfs interface for MMIO registers (v5)
drm/amd/amdgpu: Add missing mp_11_0_8_sh_mask.h header
Tvrtko Ursulin (3):
drm/i915: Use Transparent Hugepages when IOMMU is enabled
drm/i915/debugfs: Do not report currently active engine when
describing objects
drm/i915: Handle Intel igfx + Intel dgfx hybrid graphics setup
Vandita Kulkarni (4):
drm/i915/display: Update small joiner ram size
drm/i915/dsi/xelpd: Add WA to program LP to HS wakeup guardband
drm/i915/dsi/xelpd: Enable mipi dsi support.
drm/i915/display: Fix the dsc check while selecting min_cdclk
Venkata Sandeep Dhanalakota (2):
drm/i915: Make wa list per-gt
drm/i915: Do not define vma on stack
Vignesh Chander (1):
drm/amd/pm: Enable GPU metrics for One VF mode
Ville Syrjälä (82):
drm/i915/fbc: Rewrite the FBC tiling check a bit
drm/i915/fbc: Extract intel_fbc_update()
drm/i915/fbc: Move the "recompress on activate" to a central place
drm/i915/fbc: Polish the skl+ FBC stride override handling
drm/i915: Silence __iomem sparse warn
drm/i915: s/0/NULL/
drm/i915: Set output_types to EDP for vlv/chv DPLL forcing
drm/i915: Clean up gen2 DPLL readout
drm/i915: Extract ilk_update_pll_dividers()
drm/i915: Constify struct dpll all over
drm/i915: Clean dpll calling convention
drm/i915: Clean up variable names in old dpll functions
drm/i915: Remove the 'reg' local variable
drm/i915: Program DPLL P1 dividers consistently
drm/i915: Call {vlv,chv}_prepare_pll() from {vlv,chv}_enable_pll()
drm/i915: Reuse ilk_needs_fb_cb_tune() for the reduced clock as well
drm/i915: Fold i9xx_set_pll_dividers() into i9xx_enable_pll()
drm/i915: Fold ibx_pch_dpll_prepare() into ibx_pch_dpll_enable()
drm/i915: Nuke intel_prepare_shared_dpll()
drm/i915: Extract intel_dp_need_bigjoiner()
drm/i915: Flatten hsw_crtc_compute_clock()
drm/i915: s/pipe/transcoder/ when dealing with PIPECONF/TRANSCONF
drm/i915: Introduce with_intel_display_power_if_enabled()
drm/i915: Adjust intel_dsc_power_domain() calling convention
drm/i915: Extract hsw_panel_transcoders()
drm/i915: s/crtc_state/new_crtc_state/ etc.
drm/i915: Use u8 consistently for active_planes bitmask
drm/i915: Fix g4x cxsr enable condition
drm/i915: Apply WaUse32BppForSRWM to elk as well as ctg
drm: Fix scaling_mode docs
drm/i915: Fix HPLL watermark readout for g4x
drm/i915/fbc: Rework cfb stride/size calculations
drm/i915/fbc: Align FBC segments to 512B on glk+
drm/i915/fbc: Implement Wa_16011863758 for icl+
drm/i915/fbc: Allow higher compression limits on FBC1
drm/i915: Extract intel_panel_mode_valid()
drm/i915: Use intel_panel_mode_valid() for DSI/LVDS/(s)DVO
drm/i915: Reject modes that don't match fixed_mode vrefresh
drm/i915: Introduce intel_panel_compute_config()
drm/i915: Reject user modes that don't match fixed mode's refresh rate
drm/i915: Drop pointless fixed_mode checks from dsi code
drm/i915: Enable TPS3/4 on all platforms that support them
drm/i915/fbc: Allow FBC with Yf tiling
drm/i915: Pimp HSW+ transcoder state readout
drm/i915: Configure TRANSCONF just the once with bigjoiner
drm/i915: Clear leftover DP vswing/preemphasis values before modeset
drm/i915: Call intel_ddi_init_dp_buf_reg() earlier
drm/i915: Remove DP_PORT_EN stuff from link training code
drm/i915: Nuke local copies/pointers of intel_dp->DP
drm/i915: s/ddi_translations/trans/
drm/i915: Use standard form -EDEADLK check
drm/i915: Adjust intel_crtc_compute_config() debug message
drm/i915: Move WaPruneModeWithIncorrectHsyncOffset into intel_mode_valid()
drm/i915: Stop force enabling pipe bottom color gammma/csc
drm/i915: Fix DP clock recovery "voltage_tries" handling
drm/i915: Introduce has_iboost()
drm/i915: Introduce has_buf_trans_select()
drm/i915: Generalize .set_signal_levels()
drm/i915: Nuke useless .set_signal_levels() wrappers
drm/i915: De-wrapper bxt_ddi_phy_set_signal_levels()
drm/i915: Hoover the level>=n_entries WARN into intel_ddi_level()
drm/i915: Nuke intel_ddi_hdmi_num_entries()
drm/i915: Pass the lane to intel_ddi_level()
drm/i915: Prepare link training for per-lane drive settings
drm/i915: Allow per-lane drive settings with LTTPRs
drm/i915: Extend the async flip VT-d w/a to skl/bxt
drm/i195: Make the async flip VT-d workaround dynamic
drm/i915: Tweak the DP "max vswing reached?" condition
drm/i915: Show LTTPR in the TPS debug print
drm/i915: Print the DP vswing adjustment request
drm/i915: Pimp link training debug prints
drm/i915: Call intel_dp_dump_link_status() for CR failures
drm/i915: Remove pointless extra namespace from dkl/snps buf trans structs
drm/i915: Shrink {icl_mg,tgl_dkl}_phy_ddi_buf_trans
drm/i915: Use standard form terminating condition for lane for loops
drm/i915: Remove dead DKL_TX_LOADGEN_SHARING_PMD_DISABLE stuff
drm/i915: Extract icl_combo_phy_loadgen_select()
drm/i915: Add all per-lane register definitions for icl combo phy
drm/i915: Fix oops on platforms w/o hpd support
drm/i915: Replace the unconditional clflush with drm_clflush_virt_range()
drm/i915: Convert unconditional clflush to drm_clflush_virt_range()
drm/i915: Catch yet another unconditioal clflush
Vinay Belgaumkar (1):
drm/i915: Get PM ref before accessing HW register
Vitaly Lubart (1):
mei: pxp: export pavp client to me client bus
Vladimir Lypak (2):
drm/msm/dsi: Add phy configuration for MSM8953
drm/msm/mdp5: Add configuration for MDP v1.16
Wang Qing (1):
drm: Use IS_ERR() instead of IS_ERR_OR_NULL()
Wayne Lin (3):
drm/amd/display: Add option to defer works of hpd_rx_irq
drm/amd/display: Fork thread to offload work of hpd_rx_irq
drm/amd/display: Fix Werror when building
Wenjing Liu (14):
drm/amd/display: expose dsc overhead bw in dc dsc header
drm/amd/display: move bpp range decision in decide dsc bw range function
drm/amd/display: update conditions to do dfp cap ext validation
drm/amd/display: use correct vpg instance for 128b/132b encoding
drm/amd/display: update cur_lane_setting to an array one for each lane
drm/amd/display: add function to convert hw to dpcd lane settings
drm/amd/display: make verified link cap not exceeding max link cap
drm/amd/display: add DP2.0 debug option to set MST_EN for SST stream
drm/amd/display: correct apg audio channel enable golden value
drm/amd/display: adopt DP2.0 LT SCR revision 8
drm/amd/display: implement decide lane settings
drm/amd/display: decouple hw_lane_settings from dpcd_lane_settings
drm/amd/display: add two lane settings training options
drm/amd/display: fix link training regression for 1 or 2 lane
Wolfram Sang (1):
drm/panfrost: simplify getting .driver_data
Wyatt Wood (2):
drm/amd/display: Initialize GSP1 SDP header
drm/amd/display: Prevent using DMUB rptr that is out-of-bounds
Xin Ji (1):
drm/bridge: anx7625: enable DSI EOTP
Xu Wang (3):
drm/msm/mdp4: Remove redundant null check before
clk_prepare_enable/clk_disable_unprepare
drm/msm: dsi: Remove redundant null check before
clk_prepare_enable/clk_disable_unprepare
drm/msm/mdp5: Remove redundant null check before
clk_prepare_enable/clk_disable_unprepare
Yang Li (1):
drm/amdkfd: fix resource_size.cocci warnings
Yang Yingliang (1):
drm/gma500: Fix wrong pointer passed to PTR_ERR()
Yanteng Si (2):
drm/msm: Fix missing include files in msm_gem.c
drm/msm: Fix missing include files in msm_gem_shrinker.c
Yifan Zha (1):
drm/amd/pm: Update navi12 smu message mapping table in sriov
Yifan Zhang (6):
drm/amdkfd: remove redundant iommu cleanup code
drm/amdgpu: init iommu after amdkfd device init
drm/amdkfd: export svm_range_list_lock_and_flush_work
drm/amdkfd: fix KFDSVMRangeTest.PartialUnmapSysMemTest fails
drm/amdkfd: fix boot failure when iommu is disabled in Picasso.
drm/amdkfd: fix resume error when iommu disabled in Picasso
YuBiao Wang (1):
drm/amd/amdgpu: Do irq_fini_hw after ip_fini_early
Zenghui Yu (1):
drm/i915: Free the returned object of acpi_evaluate_dsm()
Zhan Liu (2):
drm/amdgpu: add cyan_skillfish asic header files
drm/amd/display: add cyan_skillfish display support
bibo mao (1):
drm/qxl: User page size macro for qxl release bo
chongjiapeng (2):
drm/amd/display: Fix warning comparing pointer to 0
drm/amd/display: make configure_lttpr_mode_transparent and
configure_lttpr_mode_non_transparent static
kernel test robot (1):
drm/amd/display: fix duplicated inclusion
liuyuntao (1):
virtio-gpu: fix possible memory allocation failure
ravitejax (1):
drm/i915/adl_s: Remove require_force_probe protection
shaoyunl (1):
drm/amdgpu: Get atomicOps info from Host for sriov setup
xinhui pan (8):
drm/ttm: Try to check if new ttm man out of bounds during compile
drm/amdgpu: Increase direct IB pool size
drm/amdgpu: UVD avoid memory allocation during IB test
drm/amdgpu: VCE avoid memory allocation during IB test
drm/amdgpu: VCN avoid memory allocation during IB test
drm/amdgpu: Fix a race of IB test
drm/amdgpu: Put drm_dev_enter/exit outside hot codepath
drm/amdgpu: Fix uvd ib test timeout when use pre-allocated BO
yangcong (4):
dt-bindings: drm/panel: boe-tv101wum-nl6: Support enabling a 3.3V rail
drm/panel: boe-tv101wum-nl6: Support enabling a 3.3V rail
dt-bindings: boe, tv101wum-n16: Add compatible for boe
tv110c9m-ll3 and inx hj110iz-01a
drm/panel: support for BOE and INX video mode panel
zhangzhijie (1):
drm: Improve the output_poll_changed description
zhaoxiao (1):
drm/msm: Remove initialization of static variables
.../bindings/display/msm/dp-controller.yaml | 15 +-
.../bindings/display/msm/dpu-sc7280.yaml | 232 +
.../bindings/display/msm/dsi-phy-14nm.yaml | 1 +
.../devicetree/bindings/display/msm/gpu.txt | 157 -
.../devicetree/bindings/display/msm/gpu.yaml | 288 +
.../bindings/display/panel/boe,tv101wum-nl6.yaml | 7 +
.../bindings/display/panel/panel-edp.yaml | 188 +
.../bindings/display/panel/samsung,s6d27a1.yaml | 98 +
.../devicetree/bindings/display/renesas,du.yaml | 51 +
Documentation/driver-api/dma-buf.rst | 6 -
Documentation/gpu/drm-kms-helpers.rst | 12 +
Documentation/gpu/drm-mm.rst | 84 +-
Documentation/gpu/i915.rst | 35 +-
Documentation/gpu/rfc/i915_parallel_execbuf.h | 122 -
Documentation/gpu/rfc/i915_scheduler.rst | 4 +-
Documentation/gpu/todo.rst | 17 -
Documentation/locking/ww-mutex-design.rst | 2 +-
MAINTAINERS | 15 +
arch/arm/configs/at91_dt_defconfig | 1 +
arch/arm/configs/exynos_defconfig | 1 +
arch/arm/configs/imx_v6_v7_defconfig | 1 +
arch/arm/configs/lpc32xx_defconfig | 1 +
arch/arm/configs/multi_v5_defconfig | 1 +
arch/arm/configs/multi_v7_defconfig | 1 +
arch/arm/configs/omap2plus_defconfig | 1 +
arch/arm/configs/qcom_defconfig | 1 +
arch/arm/configs/realview_defconfig | 1 +
arch/arm/configs/sama5_defconfig | 1 +
arch/arm/configs/shmobile_defconfig | 1 +
arch/arm/configs/sunxi_defconfig | 1 +
arch/arm/configs/tegra_defconfig | 1 +
arch/arm/configs/versatile_defconfig | 1 +
arch/arm/configs/vexpress_defconfig | 1 +
arch/arm64/configs/defconfig | 1 +
arch/x86/include/asm/mce.h | 2 +-
arch/x86/kernel/cpu/mce/amd.c | 3 +-
drivers/dma-buf/Makefile | 2 +-
drivers/dma-buf/dma-buf.c | 153 +-
drivers/dma-buf/dma-fence.c | 13 +-
drivers/dma-buf/dma-resv.c | 442 +-
drivers/dma-buf/heaps/system_heap.c | 5 +-
drivers/dma-buf/seqno-fence.c | 71 -
drivers/gpu/drm/Kconfig | 11 +-
drivers/gpu/drm/Makefile | 1 -
drivers/gpu/drm/amd/amdgpu/Makefile | 6 +-
drivers/gpu/drm/amd/amdgpu/aldebaran.c | 2 +
drivers/gpu/drm/amd/amdgpu/amdgpu.h | 11 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 17 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 9 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 39 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 4 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c | 143 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.h | 8 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 256 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.h | 6 -
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 122 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_df.h | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 871 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.h | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 665 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_fence.c | 12 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c | 11 +
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 7 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.h | 7 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 11 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c | 9 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_job.c | 6 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 35 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c | 8 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_mca.h | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 57 -
drivers/gpu/drm/amd/amdgpu/amdgpu_object.h | 2 -
drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 755 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_psp.h | 46 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c | 394 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ras.h | 25 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 22 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 18 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ring.h | 19 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_sched.c | 44 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 66 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.h | 3 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.c | 175 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_umc.h | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_umr.h | 51 +
drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 119 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.h | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 43 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vce.h | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.c | 191 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h | 4 +
drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 10 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 30 +-
drivers/gpu/drm/amd/amdgpu/amdgv_sriovmsg.h | 7 +-
drivers/gpu/drm/amd/amdgpu/athub_v2_0.c | 7 +-
drivers/gpu/drm/amd/amdgpu/athub_v2_1.c | 9 +-
drivers/gpu/drm/amd/amdgpu/beige_goby_reg_init.c | 54 -
.../gpu/drm/amd/amdgpu/cyan_skillfish_reg_init.c | 51 -
drivers/gpu/drm/amd/amdgpu/df_v3_6.c | 31 +
drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 403 +-
drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 227 +-
drivers/gpu/drm/amd/amdgpu/gfx_v9_4_2.c | 5 +
drivers/gpu/drm/amd/amdgpu/gfxhub_v2_1.c | 6 +-
drivers/gpu/drm/amd/amdgpu/gmc_v10_0.c | 91 +-
drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 136 +-
drivers/gpu/drm/amd/amdgpu/hdp_v4_0.c | 15 +-
drivers/gpu/drm/amd/amdgpu/jpeg_v2_0.c | 20 -
drivers/gpu/drm/amd/amdgpu/jpeg_v2_0.h | 20 +
drivers/gpu/drm/amd/amdgpu/jpeg_v2_5.c | 40 +-
drivers/gpu/drm/amd/amdgpu/mca_v3_0.c | 9 +-
drivers/gpu/drm/amd/amdgpu/mmhub_v2_0.c | 73 +-
drivers/gpu/drm/amd/amdgpu/mmhub_v2_3.c | 6 +-
drivers/gpu/drm/amd/amdgpu/navi10_ih.c | 13 +-
drivers/gpu/drm/amd/amdgpu/navi10_reg_init.c | 55 -
drivers/gpu/drm/amd/amdgpu/navi12_reg_init.c | 52 -
drivers/gpu/drm/amd/amdgpu/navi14_reg_init.c | 53 -
drivers/gpu/drm/amd/amdgpu/nbio_v2_3.c | 31 +
drivers/gpu/drm/amd/amdgpu/nbio_v2_3.h | 1 +
drivers/gpu/drm/amd/amdgpu/nbio_v7_4.c | 66 +-
drivers/gpu/drm/amd/amdgpu/nbio_v7_4.h | 1 +
drivers/gpu/drm/amd/amdgpu/nv.c | 382 +-
drivers/gpu/drm/amd/amdgpu/nv.h | 12 +-
drivers/gpu/drm/amd/amdgpu/psp_v10_0.c | 22 +-
drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 93 +-
drivers/gpu/drm/amd/amdgpu/psp_v12_0.c | 14 +-
drivers/gpu/drm/amd/amdgpu/psp_v13_0.c | 14 +-
drivers/gpu/drm/amd/amdgpu/sdma_v4_0.c | 100 +-
drivers/gpu/drm/amd/amdgpu/sdma_v5_0.c | 32 +-
drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c | 59 +-
.../gpu/drm/amd/amdgpu/sienna_cichlid_reg_init.c | 54 -
drivers/gpu/drm/amd/amdgpu/soc15.c | 346 +-
drivers/gpu/drm/amd/amdgpu/soc15.h | 5 +-
drivers/gpu/drm/amd/amdgpu/ta_ras_if.h | 51 +-
drivers/gpu/drm/amd/amdgpu/umc_v6_7.c | 34 +
drivers/gpu/drm/amd/amdgpu/uvd_v3_1.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v4_2.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v5_0.c | 24 +-
drivers/gpu/drm/amd/amdgpu/uvd_v6_0.c | 11 +-
drivers/gpu/drm/amd/amdgpu/uvd_v7_0.c | 43 +-
drivers/gpu/drm/amd/amdgpu/vangogh_reg_init.c | 50 -
drivers/gpu/drm/amd/amdgpu/vce_v2_0.c | 23 +-
drivers/gpu/drm/amd/amdgpu/vce_v3_0.c | 32 +-
drivers/gpu/drm/amd/amdgpu/vce_v4_0.c | 52 +-
drivers/gpu/drm/amd/amdgpu/vcn_v1_0.c | 15 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 28 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 44 +-
drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 62 +-
drivers/gpu/drm/amd/amdgpu/yellow_carp_reg_init.c | 51 -
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 79 +-
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 267 +-
.../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 5 +-
.../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_int_process_v9.c | 4 +-
drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 1 -
drivers/gpu/drm/amd/amdkfd/kfd_migrate.c | 153 +-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.h | 3 +-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_cik.c | 32 +-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v10.c | 19 +-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 19 +-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_vi.c | 35 +-
drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 26 +-
drivers/gpu/drm/amd/amdkfd/kfd_process.c | 109 +-
.../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 24 +-
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 192 +-
drivers/gpu/drm/amd/amdkfd/kfd_svm.h | 1 +
drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 19 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 1024 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 103 +-
.../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 34 +-
.../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c | 16 +-
.../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 71 +-
.../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 6 +-
.../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_psr.c | 10 +-
drivers/gpu/drm/amd/display/amdgpu_dm/dc_fpu.c | 2 +-
drivers/gpu/drm/amd/display/dc/Makefile | 3 +-
drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c | 102 +-
.../gpu/drm/amd/display/dc/bios/command_table2.c | 14 +-
.../amd/display/dc/bios/command_table_helper2.c | 1 +
drivers/gpu/drm/amd/display/dc/calcs/dcn_calcs.c | 55 +-
drivers/gpu/drm/amd/display/dc/clk_mgr/Makefile | 9 +
drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 21 +-
.../amd/display/dc/clk_mgr/dcn20/dcn20_clk_mgr.c | 12 +-
.../amd/display/dc/clk_mgr/dcn201/dcn201_clk_mgr.c | 258 +
.../amd/display/dc/clk_mgr/dcn201/dcn201_clk_mgr.h | 34 +
.../drm/amd/display/dc/clk_mgr/dcn21/rn_clk_mgr.c | 16 +-
.../drm/amd/display/dc/clk_mgr/dcn301/vg_clk_mgr.c | 4 +-
.../amd/display/dc/clk_mgr/dcn31/dcn31_clk_mgr.c | 40 +-
drivers/gpu/drm/amd/display/dc/core/dc.c | 381 +-
drivers/gpu/drm/amd/display/dc/core/dc_link.c | 1107 +-
drivers/gpu/drm/amd/display/dc/core/dc_link_ddc.c | 26 +-
drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c | 1822 +-
drivers/gpu/drm/amd/display/dc/core/dc_link_dpcd.c | 11 +-
drivers/gpu/drm/amd/display/dc/core/dc_link_dpia.c | 962 +
.../gpu/drm/amd/display/dc/core/dc_link_enc_cfg.c | 496 +-
drivers/gpu/drm/amd/display/dc/core/dc_link_hwss.c | 361 +-
drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 165 +-
drivers/gpu/drm/amd/display/dc/core/dc_stat.c | 8 +
drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 4 +
drivers/gpu/drm/amd/display/dc/dc.h | 107 +-
drivers/gpu/drm/amd/display/dc/dc_dp_types.h | 302 +-
drivers/gpu/drm/amd/display/dc/dc_dsc.h | 11 +-
drivers/gpu/drm/amd/display/dc/dc_link.h | 38 +-
drivers/gpu/drm/amd/display/dc/dc_stream.h | 13 +
drivers/gpu/drm/amd/display/dc/dc_types.h | 23 +
drivers/gpu/drm/amd/display/dc/dce/dce_abm.h | 16 +
drivers/gpu/drm/amd/display/dc/dce/dce_audio.c | 6 +-
drivers/gpu/drm/amd/display/dc/dce/dce_aux.c | 49 +-
.../gpu/drm/amd/display/dc/dce/dce_clock_source.h | 9 +
drivers/gpu/drm/amd/display/dc/dce/dce_hwseq.h | 42 +-
.../drm/amd/display/dc/dce/dce_stream_encoder.c | 2 +
drivers/gpu/drm/amd/display/dc/dce/dmub_abm.c | 21 +
drivers/gpu/drm/amd/display/dc/dce/dmub_psr.c | 22 +
drivers/gpu/drm/amd/display/dc/dce/dmub_psr.h | 1 +
.../amd/display/dc/dce110/dce110_hw_sequencer.c | 164 +-
.../gpu/drm/amd/display/dc/dcn10/dcn10_dpp_dscl.c | 12 +-
.../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 128 +-
drivers/gpu/drm/amd/display/dc/dcn10/dcn10_ipp.h | 33 +-
.../drm/amd/display/dc/dcn10/dcn10_link_encoder.c | 9 +
drivers/gpu/drm/amd/display/dc/dcn10/dcn10_optc.c | 2 +-
.../gpu/drm/amd/display/dc/dcn10/dcn10_resource.c | 2 +-
.../amd/display/dc/dcn10/dcn10_stream_encoder.c | 31 +
.../amd/display/dc/dcn10/dcn10_stream_encoder.h | 2 +
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_dccg.h | 34 +-
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 49 +-
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_optc.c | 5 +
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 57 +-
.../amd/display/dc/dcn20/dcn20_stream_encoder.c | 17 +-
.../amd/display/dc/dcn20/dcn20_stream_encoder.h | 1 +
drivers/gpu/drm/amd/display/dc/dcn201/Makefile | 36 +
.../gpu/drm/amd/display/dc/dcn201/dcn201_dccg.c | 84 +
.../gpu/drm/amd/display/dc/dcn201/dcn201_dccg.h | 37 +
drivers/gpu/drm/amd/display/dc/dcn201/dcn201_dpp.c | 316 +
drivers/gpu/drm/amd/display/dc/dcn201/dcn201_dpp.h | 83 +
.../gpu/drm/amd/display/dc/dcn201/dcn201_hubbub.c | 107 +
.../gpu/drm/amd/display/dc/dcn201/dcn201_hubbub.h | 45 +
.../gpu/drm/amd/display/dc/dcn201/dcn201_hubp.c | 150 +
.../gpu/drm/amd/display/dc/dcn201/dcn201_hubp.h | 132 +
.../gpu/drm/amd/display/dc/dcn201/dcn201_hwseq.c | 630 +
.../gpu/drm/amd/display/dc/dcn201/dcn201_hwseq.h | 46 +
.../gpu/drm/amd/display/dc/dcn201/dcn201_init.c | 131 +
.../gpu/drm/amd/display/dc/dcn201/dcn201_init.h | 33 +
.../amd/display/dc/dcn201/dcn201_link_encoder.c | 209 +
.../amd/display/dc/dcn201/dcn201_link_encoder.h | 59 +
drivers/gpu/drm/amd/display/dc/dcn201/dcn201_mpc.c | 125 +
drivers/gpu/drm/amd/display/dc/dcn201/dcn201_mpc.h | 86 +
drivers/gpu/drm/amd/display/dc/dcn201/dcn201_opp.c | 72 +
drivers/gpu/drm/amd/display/dc/dcn201/dcn201_opp.h | 74 +
.../gpu/drm/amd/display/dc/dcn201/dcn201_optc.c | 203 +
.../gpu/drm/amd/display/dc/dcn201/dcn201_optc.h | 74 +
.../drm/amd/display/dc/dcn201/dcn201_resource.c | 1307 ++
.../drm/amd/display/dc/dcn201/dcn201_resource.h | 50 +
.../gpu/drm/amd/display/dc/dcn21/dcn21_resource.c | 2 +-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_afmt.c | 24 +-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_afmt.h | 24 +
.../amd/display/dc/dcn30/dcn30_dio_link_encoder.c | 4 +
.../display/dc/dcn30/dcn30_dio_stream_encoder.c | 18 +-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_dpp.c | 73 +-
.../gpu/drm/amd/display/dc/dcn30/dcn30_dpp_cm.c | 8 +-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hubp.c | 6 -
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 5 +-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_init.c | 1 +
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_optc.c | 17 +-
.../gpu/drm/amd/display/dc/dcn30/dcn30_resource.c | 43 +-
.../gpu/drm/amd/display/dc/dcn30/dcn30_resource.h | 7 +
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_vpg.c | 200 +-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_vpg.h | 15 +-
drivers/gpu/drm/amd/display/dc/dcn301/Makefile | 26 -
.../drm/amd/display/dc/dcn301/dcn301_resource.c | 263 +-
.../drm/amd/display/dc/dcn301/dcn301_resource.h | 3 +
.../drm/amd/display/dc/dcn302/dcn302_resource.c | 8 +-
.../drm/amd/display/dc/dcn303/dcn303_resource.c | 16 +-
drivers/gpu/drm/amd/display/dc/dcn31/Makefile | 4 +-
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_afmt.c | 92 +
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_afmt.h | 126 +
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_apg.c | 173 +
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_apg.h | 115 +
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_dccg.c | 383 +-
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_dccg.h | 52 +-
.../amd/display/dc/dcn31/dcn31_dio_link_encoder.c | 136 +-
.../display/dc/dcn31/dcn31_hpo_dp_link_encoder.c | 616 +
.../display/dc/dcn31/dcn31_hpo_dp_link_encoder.h | 222 +
.../display/dc/dcn31/dcn31_hpo_dp_stream_encoder.c | 752 +
.../display/dc/dcn31/dcn31_hpo_dp_stream_encoder.h | 241 +
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_hwseq.c | 113 +-
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_hwseq.h | 2 +-
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_init.c | 3 +-
.../gpu/drm/amd/display/dc/dcn31/dcn31_resource.c | 345 +-
.../gpu/drm/amd/display/dc/dcn31/dcn31_resource.h | 10 +
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_vpg.c | 87 +
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_vpg.h | 162 +
drivers/gpu/drm/amd/display/dc/dm_cp_psp.h | 3 +
drivers/gpu/drm/amd/display/dc/dm_helpers.h | 11 +
drivers/gpu/drm/amd/display/dc/dml/Makefile | 10 +-
.../dc/dml/{dcn2x/dcn2x.c => dcn20/dcn20_fpu.c} | 2 +-
.../dc/dml/{dcn2x/dcn2x.h => dcn20/dcn20_fpu.h} | 6 +-
.../display/dc/dml/dcn20/display_rq_dlg_calc_20.c | 158 +-
.../display/dc/dml/dcn20/display_rq_dlg_calc_20.h | 4 +-
.../dc/dml/dcn20/display_rq_dlg_calc_20v2.c | 156 +-
.../dc/dml/dcn20/display_rq_dlg_calc_20v2.h | 4 +-
.../amd/display/dc/dml/dcn21/display_mode_vba_21.c | 236 +-
.../display/dc/dml/dcn21/display_rq_dlg_calc_21.c | 156 +-
.../display/dc/dml/dcn21/display_rq_dlg_calc_21.h | 4 +-
.../display/dc/dml/dcn30/display_rq_dlg_calc_30.c | 132 +-
.../display/dc/dml/dcn30/display_rq_dlg_calc_30.h | 4 +-
.../gpu/drm/amd/display/dc/dml/dcn301/dcn301_fpu.c | 390 +
.../gpu/drm/amd/display/dc/dml/dcn301/dcn301_fpu.h | 42 +
.../amd/display/dc/dml/dcn31/display_mode_vba_31.c | 6 +-
.../display/dc/dml/dcn31/display_rq_dlg_calc_31.c | 166 +-
.../display/dc/dml/dcn31/display_rq_dlg_calc_31.h | 4 +-
.../drm/amd/display/dc/dml/display_mode_enums.h | 4 +-
.../gpu/drm/amd/display/dc/dml/display_mode_lib.c | 1 +
.../gpu/drm/amd/display/dc/dml/display_mode_lib.h | 5 +-
.../amd/display/dc/dml/display_rq_dlg_helpers.c | 256 +-
.../amd/display/dc/dml/display_rq_dlg_helpers.h | 20 +-
.../amd/display/dc/dml/dml1_display_rq_dlg_calc.c | 246 +-
.../amd/display/dc/dml/dml1_display_rq_dlg_calc.h | 10 +-
.../drm/amd/display/dc/{ => dml}/dsc/qp_tables.h | 0
.../gpu/drm/amd/display/dc/dml/dsc/rc_calc_fpu.c | 291 +
.../gpu/drm/amd/display/dc/dml/dsc/rc_calc_fpu.h | 94 +
drivers/gpu/drm/amd/display/dc/dsc/Makefile | 29 -
drivers/gpu/drm/amd/display/dc/dsc/dc_dsc.c | 195 +-
drivers/gpu/drm/amd/display/dc/dsc/rc_calc.c | 259 -
drivers/gpu/drm/amd/display/dc/dsc/rc_calc.h | 50 +-
drivers/gpu/drm/amd/display/dc/dsc/rc_calc_dpi.c | 1 -
drivers/gpu/drm/amd/display/dc/gpio/hw_factory.c | 1 +
drivers/gpu/drm/amd/display/dc/gpio/hw_translate.c | 1 +
drivers/gpu/drm/amd/display/dc/inc/core_types.h | 36 +-
drivers/gpu/drm/amd/display/dc/inc/dc_link_ddc.h | 1 +
drivers/gpu/drm/amd/display/dc/inc/dc_link_dp.h | 45 +-
drivers/gpu/drm/amd/display/dc/inc/dc_link_dpia.h | 99 +
drivers/gpu/drm/amd/display/dc/inc/hw/abm.h | 1 +
.../drm/amd/display/dc/inc/hw/clk_mgr_internal.h | 13 +
drivers/gpu/drm/amd/display/dc/inc/hw/dccg.h | 32 +
drivers/gpu/drm/amd/display/dc/inc/hw/dpp.h | 14 +
drivers/gpu/drm/amd/display/dc/inc/hw/dwb.h | 5 +-
drivers/gpu/drm/amd/display/dc/inc/hw/hw_shared.h | 4 +
.../gpu/drm/amd/display/dc/inc/hw/link_encoder.h | 97 +
drivers/gpu/drm/amd/display/dc/inc/hw/mpc.h | 1 +
.../gpu/drm/amd/display/dc/inc/hw/stream_encoder.h | 87 +-
.../drm/amd/display/dc/inc/hw/timing_generator.h | 3 +
drivers/gpu/drm/amd/display/dc/inc/hw_sequencer.h | 2 +-
.../drm/amd/display/dc/inc/hw_sequencer_private.h | 7 +
drivers/gpu/drm/amd/display/dc/inc/link_enc_cfg.h | 26 +-
drivers/gpu/drm/amd/display/dc/inc/link_hwss.h | 1 +
drivers/gpu/drm/amd/display/dc/inc/resource.h | 19 +
drivers/gpu/drm/amd/display/dc/irq/Makefile | 10 +
.../amd/display/dc/irq/dcn20/irq_service_dcn20.c | 25 +
.../amd/display/dc/irq/dcn20/irq_service_dcn20.h | 2 +
.../amd/display/dc/irq/dcn201/irq_service_dcn201.c | 374 +
.../amd/display/dc/irq/dcn201/irq_service_dcn201.h | 34 +
.../amd/display/dc/irq/dcn21/irq_service_dcn21.c | 25 +
.../amd/display/dc/irq/dcn21/irq_service_dcn21.h | 2 +
drivers/gpu/drm/amd/display/dc/irq/irq_service.c | 2 +-
drivers/gpu/drm/amd/display/dc/irq/irq_service.h | 4 +
drivers/gpu/drm/amd/display/dc/os_types.h | 2 +
.../display/dc/virtual/virtual_stream_encoder.c | 5 +-
drivers/gpu/drm/amd/display/dmub/dmub_srv.h | 10 +
drivers/gpu/drm/amd/display/dmub/inc/dmub_cmd.h | 275 +-
drivers/gpu/drm/amd/display/dmub/src/dmub_dcn31.c | 12 +
drivers/gpu/drm/amd/display/dmub/src/dmub_dcn31.h | 2 +
drivers/gpu/drm/amd/display/dmub/src/dmub_srv.c | 21 +-
.../gpu/drm/amd/display/dmub/src/dmub_srv_stat.c | 16 +
.../drm/amd/display/include/bios_parser_types.h | 8 +
drivers/gpu/drm/amd/display/include/dal_asic_id.h | 1 +
drivers/gpu/drm/amd/display/include/dal_types.h | 1 +
drivers/gpu/drm/amd/display/include/dpcd_defs.h | 17 +
.../amd/display/include/grph_object_ctrl_defs.h | 1 +
.../gpu/drm/amd/display/include/grph_object_defs.h | 12 +
.../gpu/drm/amd/display/include/grph_object_id.h | 8 +
.../gpu/drm/amd/display/include/i2caux_interface.h | 3 +
.../drm/amd/display/include/link_service_types.h | 86 +-
drivers/gpu/drm/amd/display/include/logger_types.h | 6 +
.../drm/amd/display/modules/color/color_gamma.c | 32 +-
.../drm/amd/display/modules/freesync/freesync.c | 15 +-
.../gpu/drm/amd/display/modules/hdcp/hdcp_psp.c | 6 +-
drivers/gpu/drm/amd/display/modules/inc/mod_hdcp.h | 2 +
drivers/gpu/drm/amd/include/amd_shared.h | 5 +-
.../amd/include/asic_reg/clk/clk_11_0_1_offset.h | 32 +
.../amd/include/asic_reg/clk/clk_11_0_1_sh_mask.h | 37 +
.../amd/include/asic_reg/dcn/dcn_2_0_3_offset.h | 6193 ++++++
.../amd/include/asic_reg/dcn/dcn_2_0_3_sh_mask.h | 22091 +++++++++++++++++++
.../amd/include/asic_reg/dcn/dcn_3_1_2_offset.h | 2 +
.../amd/include/asic_reg/dcn/dcn_3_1_2_sh_mask.h | 8 +
.../drm/amd/include/asic_reg/df/df_3_6_offset.h | 5 +
.../drm/amd/include/asic_reg/df/df_3_6_sh_mask.h | 132 +
.../amd/include/asic_reg/dpcs/dpcs_2_0_3_offset.h | 151 +
.../amd/include/asic_reg/dpcs/dpcs_2_0_3_sh_mask.h | 952 +
.../amd/include/asic_reg/mp/mp_11_0_8_sh_mask.h | 355 +
drivers/gpu/drm/amd/include/atombios.h | 2 +-
drivers/gpu/drm/amd/include/atomfirmware.h | 4 +
drivers/gpu/drm/amd/include/soc15_hw_ip.h | 2 +
drivers/gpu/drm/amd/pm/amdgpu_pm.c | 22 +-
drivers/gpu/drm/amd/pm/inc/amdgpu_smu.h | 4 +-
drivers/gpu/drm/amd/pm/inc/smu_v11_0.h | 4 +-
drivers/gpu/drm/amd/pm/inc/smu_v13_0.h | 4 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/ppatomfwctrl.h | 4 +-
drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 135 +-
drivers/gpu/drm/amd/pm/swsmu/smu11/arcturus_ppt.c | 14 +
.../drm/amd/pm/swsmu/smu11/cyan_skillfish_ppt.c | 17 +-
drivers/gpu/drm/amd/pm/swsmu/smu11/navi10_ppt.c | 64 +-
.../drm/amd/pm/swsmu/smu11/sienna_cichlid_ppt.c | 119 +-
drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 117 +-
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 96 +-
drivers/gpu/drm/amd/pm/swsmu/smu13/aldebaran_ppt.c | 6 +-
drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c | 33 +-
drivers/gpu/drm/arm/malidp_planes.c | 2 +-
drivers/gpu/drm/ast/ast_drv.h | 2 -
drivers/gpu/drm/ast/ast_mm.c | 27 +-
drivers/gpu/drm/bridge/adv7511/adv7511_cec.c | 15 +-
drivers/gpu/drm/bridge/analogix/anx7625.c | 27 +-
drivers/gpu/drm/bridge/cdns-dsi.c | 4 +-
drivers/gpu/drm/bridge/ite-it66121.c | 21 +-
drivers/gpu/drm/bridge/panel.c | 37 +
drivers/gpu/drm/bridge/parade-ps8640.c | 292 +-
drivers/gpu/drm/bridge/synopsys/dw-hdmi-cec.c | 6 +-
drivers/gpu/drm/bridge/ti-sn65dsi86.c | 25 +-
drivers/gpu/drm/drm_bridge.c | 78 +-
drivers/gpu/drm/drm_connector.c | 83 +-
drivers/gpu/drm/drm_crtc_internal.h | 2 +
drivers/gpu/drm/drm_dp_helper.c | 42 +-
drivers/gpu/drm/drm_dp_mst_topology.c | 42 +-
drivers/gpu/drm/drm_edid.c | 367 +-
drivers/gpu/drm/drm_format_helper.c | 88 +
drivers/gpu/drm/drm_fourcc.c | 3 +
drivers/gpu/drm/drm_gem_shmem_helper.c | 23 +-
drivers/gpu/drm/drm_gem_vram_helper.c | 1 -
drivers/gpu/drm/drm_ioctl.c | 21 +-
drivers/gpu/drm/drm_kms_helper_common.c | 11 -
drivers/gpu/drm/drm_lease.c | 39 +-
drivers/gpu/drm/drm_mipi_dsi.c | 81 +
drivers/gpu/drm/drm_modeset_lock.c | 2 +-
drivers/gpu/drm/drm_of.c | 3 +
drivers/gpu/drm/drm_panel_orientation_quirks.c | 49 +-
drivers/gpu/drm/drm_probe_helper.c | 119 +-
drivers/gpu/drm/drm_property.c | 9 +-
drivers/gpu/drm/drm_sysfs.c | 87 +-
drivers/gpu/drm/etnaviv/etnaviv_gpu.c | 1 -
drivers/gpu/drm/etnaviv/etnaviv_sched.c | 4 +-
drivers/gpu/drm/gma500/backlight.c | 12 +-
drivers/gpu/drm/gma500/cdv_device.c | 24 +-
drivers/gpu/drm/gma500/cdv_intel_display.c | 10 +-
drivers/gpu/drm/gma500/cdv_intel_dp.c | 12 +-
drivers/gpu/drm/gma500/cdv_intel_lvds.c | 22 +-
drivers/gpu/drm/gma500/framebuffer.c | 16 +-
drivers/gpu/drm/gma500/gem.c | 2 +-
drivers/gpu/drm/gma500/gma_device.c | 2 +-
drivers/gpu/drm/gma500/gma_display.c | 14 +-
drivers/gpu/drm/gma500/gtt.c | 18 +-
drivers/gpu/drm/gma500/intel_bios.c | 10 +-
drivers/gpu/drm/gma500/intel_gmbus.c | 12 +-
drivers/gpu/drm/gma500/mid_bios.c | 11 +-
drivers/gpu/drm/gma500/mmu.c | 12 +-
drivers/gpu/drm/gma500/oaktrail_crtc.c | 8 +-
drivers/gpu/drm/gma500/oaktrail_device.c | 20 +-
drivers/gpu/drm/gma500/oaktrail_hdmi.c | 18 +-
drivers/gpu/drm/gma500/oaktrail_lvds.c | 14 +-
drivers/gpu/drm/gma500/oaktrail_lvds_i2c.c | 2 +-
drivers/gpu/drm/gma500/opregion.c | 14 +-
drivers/gpu/drm/gma500/power.c | 20 +-
drivers/gpu/drm/gma500/psb_device.c | 16 +-
drivers/gpu/drm/gma500/psb_drv.c | 147 +-
drivers/gpu/drm/gma500/psb_drv.h | 24 +-
drivers/gpu/drm/gma500/psb_intel_display.c | 10 +-
drivers/gpu/drm/gma500/psb_intel_lvds.c | 31 +-
drivers/gpu/drm/gma500/psb_intel_sdvo.c | 10 +-
drivers/gpu/drm/gma500/psb_irq.c | 26 +-
drivers/gpu/drm/gma500/psb_lid.c | 2 +-
drivers/gpu/drm/gud/Kconfig | 2 +-
drivers/gpu/drm/gud/gud_drv.c | 6 +
drivers/gpu/drm/gud/gud_internal.h | 12 +
drivers/gpu/drm/gud/gud_pipe.c | 6 +
drivers/gpu/drm/i915/Kconfig | 11 +
drivers/gpu/drm/i915/Makefile | 36 +-
drivers/gpu/drm/i915/display/g4x_dp.c | 90 +-
drivers/gpu/drm/i915/display/g4x_hdmi.c | 2 +-
drivers/gpu/drm/i915/display/icl_dsi.c | 165 +-
drivers/gpu/drm/i915/display/intel_acpi.c | 46 +
drivers/gpu/drm/i915/display/intel_acpi.h | 3 +
drivers/gpu/drm/i915/display/intel_atomic_plane.c | 209 +
drivers/gpu/drm/i915/display/intel_audio.c | 43 +-
drivers/gpu/drm/i915/display/intel_backlight.c | 1776 ++
drivers/gpu/drm/i915/display/intel_backlight.h | 52 +
drivers/gpu/drm/i915/display/intel_bios.c | 420 +-
drivers/gpu/drm/i915/display/intel_bw.c | 2 +-
drivers/gpu/drm/i915/display/intel_cdclk.c | 348 +-
drivers/gpu/drm/i915/display/intel_cdclk.h | 4 +-
drivers/gpu/drm/i915/display/intel_color.c | 140 +-
drivers/gpu/drm/i915/display/intel_combo_phy.c | 8 +-
drivers/gpu/drm/i915/display/intel_connector.c | 6 +-
drivers/gpu/drm/i915/display/intel_crt.c | 4 +-
drivers/gpu/drm/i915/display/intel_cursor.c | 11 +-
drivers/gpu/drm/i915/display/intel_ddi.c | 535 +-
drivers/gpu/drm/i915/display/intel_ddi.h | 7 +-
drivers/gpu/drm/i915/display/intel_ddi_buf_trans.c | 672 +-
drivers/gpu/drm/i915/display/intel_ddi_buf_trans.h | 23 +-
drivers/gpu/drm/i915/display/intel_display.c | 2523 +--
drivers/gpu/drm/i915/display/intel_display.h | 47 +-
.../gpu/drm/i915/display/intel_display_debugfs.c | 127 +-
.../gpu/drm/i915/display/intel_display_debugfs.h | 10 +-
drivers/gpu/drm/i915/display/intel_display_power.c | 15 +-
drivers/gpu/drm/i915/display/intel_display_power.h | 4 +
drivers/gpu/drm/i915/display/intel_display_types.h | 48 +-
drivers/gpu/drm/i915/display/intel_dmc.c | 20 +-
drivers/gpu/drm/i915/display/intel_dp.c | 777 +-
drivers/gpu/drm/i915/display/intel_dp.h | 22 +-
drivers/gpu/drm/i915/display/intel_dp_aux.c | 6 +-
.../gpu/drm/i915/display/intel_dp_aux_backlight.c | 12 +-
drivers/gpu/drm/i915/display/intel_dp_hdcp.c | 78 +-
.../gpu/drm/i915/display/intel_dp_link_training.c | 467 +-
.../gpu/drm/i915/display/intel_dp_link_training.h | 1 +
drivers/gpu/drm/i915/display/intel_dp_mst.c | 49 +-
drivers/gpu/drm/i915/display/intel_dp_mst.h | 4 +-
drivers/gpu/drm/i915/display/intel_dpio_phy.c | 33 +-
drivers/gpu/drm/i915/display/intel_dpio_phy.h | 5 +-
drivers/gpu/drm/i915/display/intel_dpll.c | 674 +-
drivers/gpu/drm/i915/display/intel_dpll.h | 26 +-
drivers/gpu/drm/i915/display/intel_dpll_mgr.c | 46 +-
drivers/gpu/drm/i915/display/intel_dpll_mgr.h | 11 -
drivers/gpu/drm/i915/display/intel_dpt.c | 239 +
drivers/gpu/drm/i915/display/intel_dpt.h | 19 +
drivers/gpu/drm/i915/display/intel_drrs.c | 437 +
drivers/gpu/drm/i915/display/intel_drrs.h | 36 +
drivers/gpu/drm/i915/display/intel_dsi.c | 16 +-
drivers/gpu/drm/i915/display/intel_dsi.h | 3 +
.../gpu/drm/i915/display/intel_dsi_dcs_backlight.c | 33 +-
drivers/gpu/drm/i915/display/intel_dsi_vbt.c | 3 +-
drivers/gpu/drm/i915/display/intel_dvo.c | 24 +-
drivers/gpu/drm/i915/display/intel_fb.c | 606 +-
drivers/gpu/drm/i915/display/intel_fb.h | 20 +-
drivers/gpu/drm/i915/display/intel_fb_pin.c | 274 +
drivers/gpu/drm/i915/display/intel_fb_pin.h | 28 +
drivers/gpu/drm/i915/display/intel_fbc.c | 292 +-
drivers/gpu/drm/i915/display/intel_fbc.h | 2 +-
drivers/gpu/drm/i915/display/intel_fbdev.c | 4 +-
drivers/gpu/drm/i915/display/intel_fdi.c | 321 +-
drivers/gpu/drm/i915/display/intel_fdi.h | 17 +-
drivers/gpu/drm/i915/display/intel_frontbuffer.c | 5 +-
drivers/gpu/drm/i915/display/intel_frontbuffer.h | 4 +-
drivers/gpu/drm/i915/display/intel_hdcp.c | 70 +-
drivers/gpu/drm/i915/display/intel_hdmi.c | 20 +-
drivers/gpu/drm/i915/display/intel_hotplug.c | 4 +-
drivers/gpu/drm/i915/display/intel_lvds.c | 33 +-
drivers/gpu/drm/i915/display/intel_opregion.c | 5 +-
drivers/gpu/drm/i915/display/intel_panel.c | 1835 +-
drivers/gpu/drm/i915/display/intel_panel.h | 48 +-
drivers/gpu/drm/i915/display/intel_plane_initial.c | 283 +
drivers/gpu/drm/i915/display/intel_plane_initial.h | 13 +
drivers/gpu/drm/i915/display/intel_pps.c | 59 +
drivers/gpu/drm/i915/display/intel_pps.h | 3 +
drivers/gpu/drm/i915/display/intel_psr.c | 476 +-
drivers/gpu/drm/i915/display/intel_psr.h | 13 +-
drivers/gpu/drm/i915/display/intel_sdvo.c | 19 +-
drivers/gpu/drm/i915/display/intel_snps_phy.c | 225 +-
drivers/gpu/drm/i915/display/intel_snps_phy.h | 4 +-
drivers/gpu/drm/i915/display/intel_tc.c | 290 +-
drivers/gpu/drm/i915/display/intel_tc.h | 6 +-
drivers/gpu/drm/i915/display/intel_tv.c | 2 +-
drivers/gpu/drm/i915/display/intel_vdsc.c | 77 +-
drivers/gpu/drm/i915/display/intel_vdsc.h | 6 +-
drivers/gpu/drm/i915/display/skl_universal_plane.c | 58 +-
drivers/gpu/drm/i915/display/vlv_dsi.c | 53 +-
drivers/gpu/drm/i915/display/vlv_dsi_pll.c | 25 +-
drivers/gpu/drm/i915/gem/i915_gem_busy.c | 57 +-
drivers/gpu/drm/i915/gem/i915_gem_context.c | 514 +-
drivers/gpu/drm/i915/gem/i915_gem_context.h | 19 +-
drivers/gpu/drm/i915/gem/i915_gem_context_types.h | 58 +-
drivers/gpu/drm/i915/gem/i915_gem_create.c | 75 +-
drivers/gpu/drm/i915/gem/i915_gem_dmabuf.c | 9 +-
drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 823 +-
drivers/gpu/drm/i915/gem/i915_gem_internal.c | 2 +
drivers/gpu/drm/i915/gem/i915_gem_lmem.c | 33 +-
drivers/gpu/drm/i915/gem/i915_gem_lmem.h | 4 +
drivers/gpu/drm/i915/gem/i915_gem_mman.c | 2 +-
drivers/gpu/drm/i915/gem/i915_gem_object.c | 70 +-
drivers/gpu/drm/i915/gem/i915_gem_object.h | 29 +-
drivers/gpu/drm/i915/gem/i915_gem_object_types.h | 57 +-
drivers/gpu/drm/i915/gem/i915_gem_pm.c | 91 +
drivers/gpu/drm/i915/gem/i915_gem_pm.h | 1 +
drivers/gpu/drm/i915/gem/i915_gem_region.c | 70 +
drivers/gpu/drm/i915/gem/i915_gem_region.h | 37 +
drivers/gpu/drm/i915/gem/i915_gem_shmem.c | 29 +-
drivers/gpu/drm/i915/gem/i915_gem_ttm.c | 201 +-
drivers/gpu/drm/i915/gem/i915_gem_ttm.h | 14 +
drivers/gpu/drm/i915/gem/i915_gem_ttm_pm.c | 206 +
drivers/gpu/drm/i915/gem/i915_gem_ttm_pm.h | 26 +
drivers/gpu/drm/i915/gem/i915_gem_userptr.c | 8 +-
drivers/gpu/drm/i915/gem/i915_gemfs.c | 22 +-
drivers/gpu/drm/i915/gem/selftests/huge_pages.c | 48 +-
.../drm/i915/gem/selftests/i915_gem_client_blt.c | 29 +-
.../gpu/drm/i915/gem/selftests/i915_gem_context.c | 36 +-
.../drm/i915/gem/selftests/i915_gem_execbuffer.c | 190 -
drivers/gpu/drm/i915/gem/selftests/i915_gem_mman.c | 2 +
drivers/gpu/drm/i915/gem/selftests/mock_context.c | 5 +-
drivers/gpu/drm/i915/gt/debugfs_engines.h | 14 -
drivers/gpu/drm/i915/gt/debugfs_gt.c | 47 -
drivers/gpu/drm/i915/gt/debugfs_gt_pm.h | 14 -
drivers/gpu/drm/i915/gt/gen6_ppgtt.c | 2 +-
drivers/gpu/drm/i915/gt/gen8_ppgtt.c | 7 +-
drivers/gpu/drm/i915/gt/gen8_ppgtt.h | 4 +-
drivers/gpu/drm/i915/gt/intel_context.c | 61 +-
drivers/gpu/drm/i915/gt/intel_context.h | 56 +-
drivers/gpu/drm/i915/gt/intel_context_types.h | 153 +-
drivers/gpu/drm/i915/gt/intel_engine.h | 19 +-
drivers/gpu/drm/i915/gt/intel_engine_cs.c | 150 +-
drivers/gpu/drm/i915/gt/intel_engine_heartbeat.c | 2 +-
drivers/gpu/drm/i915/gt/intel_engine_pm.c | 36 +
drivers/gpu/drm/i915/gt/intel_engine_pm.h | 39 +
drivers/gpu/drm/i915/gt/intel_engine_types.h | 31 +-
.../gpu/drm/i915/gt/intel_execlists_submission.c | 17 +-
drivers/gpu/drm/i915/gt/intel_ggtt.c | 52 +-
drivers/gpu/drm/i915/gt/intel_gpu_commands.h | 22 +-
drivers/gpu/drm/i915/gt/intel_gt.c | 22 +-
drivers/gpu/drm/i915/gt/intel_gt_buffer_pool.c | 2 -
drivers/gpu/drm/i915/gt/intel_gt_debugfs.c | 104 +
.../i915/gt/{debugfs_gt.h => intel_gt_debugfs.h} | 18 +-
...ebugfs_engines.c => intel_gt_engines_debugfs.c} | 10 +-
drivers/gpu/drm/i915/gt/intel_gt_engines_debugfs.h | 14 +
drivers/gpu/drm/i915/gt/intel_gt_irq.c | 7 +
drivers/gpu/drm/i915/gt/intel_gt_pm.c | 22 +-
drivers/gpu/drm/i915/gt/intel_gt_pm.h | 14 +
.../gt/{debugfs_gt_pm.c => intel_gt_pm_debugfs.c} | 197 +-
drivers/gpu/drm/i915/gt/intel_gt_pm_debugfs.h | 20 +
drivers/gpu/drm/i915/gt/intel_gt_types.h | 12 +
drivers/gpu/drm/i915/gt/intel_gtt.c | 9 +-
drivers/gpu/drm/i915/gt/intel_gtt.h | 11 +-
drivers/gpu/drm/i915/gt/intel_llc.c | 3 +-
drivers/gpu/drm/i915/gt/intel_lrc.c | 93 +-
drivers/gpu/drm/i915/gt/intel_migrate.c | 2 +-
drivers/gpu/drm/i915/gt/intel_mocs.c | 176 +-
drivers/gpu/drm/i915/gt/intel_mocs.h | 1 +
drivers/gpu/drm/i915/gt/intel_ppgtt.c | 13 +-
drivers/gpu/drm/i915/gt/intel_rc6.c | 2 +-
drivers/gpu/drm/i915/gt/intel_region_lmem.c | 4 +-
drivers/gpu/drm/i915/gt/intel_ring.c | 3 +-
drivers/gpu/drm/i915/gt/intel_ring_submission.c | 7 +-
drivers/gpu/drm/i915/gt/intel_rps.c | 22 +-
drivers/gpu/drm/i915/gt/intel_rps.h | 1 +
drivers/gpu/drm/i915/gt/intel_sseu.c | 65 +-
drivers/gpu/drm/i915/gt/intel_sseu.h | 11 +-
drivers/gpu/drm/i915/gt/intel_sseu_debugfs.c | 10 +-
drivers/gpu/drm/i915/gt/intel_timeline.c | 4 +-
drivers/gpu/drm/i915/gt/intel_workarounds.c | 262 +-
drivers/gpu/drm/i915/gt/intel_workarounds.h | 2 +-
drivers/gpu/drm/i915/gt/mock_engine.c | 2 +
.../gpu/drm/i915/gt/selftest_engine_heartbeat.c | 4 +-
drivers/gpu/drm/i915/gt/selftest_execlists.c | 28 +-
drivers/gpu/drm/i915/gt/selftest_hangcheck.c | 10 +-
drivers/gpu/drm/i915/gt/selftest_workarounds.c | 2 +-
drivers/gpu/drm/i915/gt/uc/abi/guc_actions_abi.h | 1 +
drivers/gpu/drm/i915/gt/uc/intel_guc.c | 39 +-
drivers/gpu/drm/i915/gt/uc/intel_guc.h | 119 +-
drivers/gpu/drm/i915/gt/uc/intel_guc_ads.c | 28 +-
drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c | 60 +-
drivers/gpu/drm/i915/gt/uc/intel_guc_debugfs.c | 18 +-
drivers/gpu/drm/i915/gt/uc/intel_guc_fw.c | 13 +-
drivers/gpu/drm/i915/gt/uc/intel_guc_fwif.h | 34 +-
drivers/gpu/drm/i915/gt/uc/intel_guc_log_debugfs.c | 8 +-
drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c | 2298 +-
drivers/gpu/drm/i915/gt/uc/intel_huc.c | 14 +-
drivers/gpu/drm/i915/gt/uc/intel_huc_debugfs.c | 6 +-
drivers/gpu/drm/i915/gt/uc/intel_uc.c | 2 +-
drivers/gpu/drm/i915/gt/uc/intel_uc_debugfs.c | 6 +-
drivers/gpu/drm/i915/gt/uc/intel_uc_fw.c | 93 +-
drivers/gpu/drm/i915/gt/uc/intel_uc_fw.h | 9 +
drivers/gpu/drm/i915/gt/uc/selftest_guc.c | 127 +
.../gpu/drm/i915/gt/uc/selftest_guc_multi_lrc.c | 179 +
drivers/gpu/drm/i915/gvt/gtt.c | 17 +-
drivers/gpu/drm/i915/gvt/kvmgt.c | 4 +-
drivers/gpu/drm/i915/gvt/scheduler.c | 2 +-
drivers/gpu/drm/i915/i915_buddy.c | 45 +
drivers/gpu/drm/i915/i915_buddy.h | 8 +
drivers/gpu/drm/i915/i915_config.c | 2 +-
drivers/gpu/drm/i915/i915_debugfs.c | 286 +-
drivers/gpu/drm/i915/i915_drv.c | 17 +-
drivers/gpu/drm/i915/i915_drv.h | 168 +-
drivers/gpu/drm/i915/i915_gem.c | 2 -
drivers/gpu/drm/i915/i915_gem_gtt.c | 4 +-
drivers/gpu/drm/i915/i915_gem_ww.h | 25 +-
drivers/gpu/drm/i915/i915_gpu_error.c | 42 +-
drivers/gpu/drm/i915/i915_irq.c | 94 +-
drivers/gpu/drm/i915/i915_irq.h | 51 +-
drivers/gpu/drm/i915/i915_module.c | 4 +-
drivers/gpu/drm/i915/i915_params.h | 2 +-
drivers/gpu/drm/i915/i915_pci.c | 14 +-
drivers/gpu/drm/i915/i915_pci.h | 12 +-
drivers/gpu/drm/i915/i915_query.c | 5 +-
drivers/gpu/drm/i915/i915_reg.h | 180 +-
drivers/gpu/drm/i915/i915_request.c | 157 +-
drivers/gpu/drm/i915/i915_request.h | 49 +-
drivers/gpu/drm/i915/i915_sysfs.c | 1 -
drivers/gpu/drm/i915/i915_trace.h | 14 +-
drivers/gpu/drm/i915/i915_ttm_buddy_manager.c | 20 +-
drivers/gpu/drm/i915/i915_utils.h | 13 -
drivers/gpu/drm/i915/i915_vma.c | 21 +-
drivers/gpu/drm/i915/i915_vma.h | 13 +-
drivers/gpu/drm/i915/i915_vma_types.h | 7 +-
drivers/gpu/drm/i915/intel_device_info.h | 1 +
drivers/gpu/drm/i915/intel_dram.c | 36 +-
drivers/gpu/drm/i915/intel_memory_region.c | 12 +
drivers/gpu/drm/i915/intel_memory_region.h | 4 +
drivers/gpu/drm/i915/intel_pcode.c | 235 +
drivers/gpu/drm/i915/intel_pcode.h | 26 +
drivers/gpu/drm/i915/intel_pm.c | 307 +-
drivers/gpu/drm/i915/intel_pm.h | 3 +-
drivers/gpu/drm/i915/intel_runtime_pm.h | 2 -
drivers/gpu/drm/i915/intel_sbi.c | 73 +
drivers/gpu/drm/i915/intel_sbi.h | 23 +
drivers/gpu/drm/i915/intel_sideband.c | 577 -
drivers/gpu/drm/i915/intel_uncore.c | 447 +-
drivers/gpu/drm/i915/intel_uncore.h | 20 +-
drivers/gpu/drm/i915/intel_wakeref.h | 12 +
drivers/gpu/drm/i915/pxp/intel_pxp.c | 299 +
drivers/gpu/drm/i915/pxp/intel_pxp.h | 64 +
drivers/gpu/drm/i915/pxp/intel_pxp_cmd.c | 141 +
drivers/gpu/drm/i915/pxp/intel_pxp_cmd.h | 15 +
drivers/gpu/drm/i915/pxp/intel_pxp_debugfs.c | 78 +
drivers/gpu/drm/i915/pxp/intel_pxp_debugfs.h | 21 +
drivers/gpu/drm/i915/pxp/intel_pxp_irq.c | 101 +
drivers/gpu/drm/i915/pxp/intel_pxp_irq.h | 32 +
drivers/gpu/drm/i915/pxp/intel_pxp_pm.c | 46 +
drivers/gpu/drm/i915/pxp/intel_pxp_pm.h | 24 +
drivers/gpu/drm/i915/pxp/intel_pxp_session.c | 175 +
drivers/gpu/drm/i915/pxp/intel_pxp_session.h | 15 +
drivers/gpu/drm/i915/pxp/intel_pxp_tee.c | 172 +
drivers/gpu/drm/i915/pxp/intel_pxp_tee.h | 17 +
drivers/gpu/drm/i915/pxp/intel_pxp_tee_interface.h | 36 +
drivers/gpu/drm/i915/pxp/intel_pxp_types.h | 83 +
drivers/gpu/drm/i915/selftests/i915_gem_gtt.c | 8 +-
.../gpu/drm/i915/selftests/i915_live_selftests.h | 2 +
drivers/gpu/drm/i915/selftests/i915_vma.c | 4 +-
.../drm/i915/selftests/intel_scheduler_helpers.c | 12 +
.../drm/i915/selftests/intel_scheduler_helpers.h | 2 +
drivers/gpu/drm/i915/selftests/intel_uncore.c | 34 +-
drivers/gpu/drm/i915/selftests/mock_region.c | 2 -
drivers/gpu/drm/i915/vlv_sideband.c | 266 +
.../drm/i915/{intel_sideband.h => vlv_sideband.h} | 34 +-
drivers/gpu/drm/lima/lima_gem.c | 9 +-
drivers/gpu/drm/lima/lima_sched.c | 28 +-
drivers/gpu/drm/lima/lima_sched.h | 6 +-
drivers/gpu/drm/mcde/mcde_drv.c | 4 +-
drivers/gpu/drm/mcde/mcde_dsi.c | 4 +-
drivers/gpu/drm/meson/meson_drv.c | 3 +-
drivers/gpu/drm/meson/meson_dw_hdmi.c | 4 +-
drivers/gpu/drm/mgag200/mgag200_drv.h | 2 -
drivers/gpu/drm/mgag200/mgag200_mm.c | 35 +-
drivers/gpu/drm/msm/Kconfig | 6 +-
drivers/gpu/drm/msm/Makefile | 1 -
drivers/gpu/drm/msm/adreno/a5xx_debugfs.c | 6 +-
drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 10 +-
drivers/gpu/drm/msm/adreno/a6xx_gpu_state.c | 2 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_core_irq.c | 256 -
drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c | 147 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.h | 19 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c | 39 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.h | 4 +-
.../gpu/drm/msm/disp/dpu1/dpu_encoder_phys_cmd.c | 2 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_catalog.c | 8 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_catalog.h | 8 -
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_interrupts.c | 267 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_interrupts.h | 92 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_lm.c | 56 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_lm.h | 13 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c | 8 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_util.h | 3 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 70 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.h | 13 -
drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c | 4 +-
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 18 +-
drivers/gpu/drm/msm/disp/mdp5/mdp5_cfg.c | 89 +
drivers/gpu/drm/msm/disp/mdp5/mdp5_kms.c | 18 +-
drivers/gpu/drm/msm/disp/mdp5/mdp5_mdss.c | 12 +-
drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c | 8 +-
drivers/gpu/drm/msm/dp/dp_catalog.c | 64 +-
drivers/gpu/drm/msm/dp/dp_debug.c | 294 +-
drivers/gpu/drm/msm/dp/dp_debug.h | 4 +-
drivers/gpu/drm/msm/dp/dp_display.c | 143 +-
drivers/gpu/drm/msm/dp/dp_display.h | 2 +
drivers/gpu/drm/msm/dp/dp_drm.c | 13 +-
drivers/gpu/drm/msm/dp/dp_panel.c | 2 +-
drivers/gpu/drm/msm/dp/dp_parser.c | 138 +-
drivers/gpu/drm/msm/dp/dp_parser.h | 14 +-
drivers/gpu/drm/msm/dsi/dsi.h | 2 +
drivers/gpu/drm/msm/dsi/dsi_host.c | 147 +-
drivers/gpu/drm/msm/dsi/dsi_manager.c | 66 +-
drivers/gpu/drm/msm/dsi/phy/dsi_phy.c | 2 +
drivers/gpu/drm/msm/dsi/phy/dsi_phy.h | 1 +
drivers/gpu/drm/msm/dsi/phy/dsi_phy_14nm.c | 25 +-
drivers/gpu/drm/msm/dsi/phy/dsi_phy_7nm.c | 4 +-
drivers/gpu/drm/msm/edp/edp_ctrl.c | 5 +-
drivers/gpu/drm/msm/hdmi/hdmi.c | 38 +-
drivers/gpu/drm/msm/hdmi/hdmi.h | 6 +-
drivers/gpu/drm/msm/hdmi/hdmi_bridge.c | 20 +-
drivers/gpu/drm/msm/hdmi/hdmi_connector.c | 24 +-
drivers/gpu/drm/msm/hdmi/hdmi_phy.c | 33 +-
drivers/gpu/drm/msm/hdmi/hdmi_phy_8996.c | 4 +-
drivers/gpu/drm/msm/msm_atomic.c | 21 +-
drivers/gpu/drm/msm/msm_drv.c | 33 +-
drivers/gpu/drm/msm/msm_drv.h | 31 +-
drivers/gpu/drm/msm/msm_gem.c | 8 +-
drivers/gpu/drm/msm/msm_gem.h | 5 -
drivers/gpu/drm/msm/msm_gem_shrinker.c | 2 +
drivers/gpu/drm/msm/msm_gem_submit.c | 35 +-
drivers/gpu/drm/msm/msm_gpu.c | 2 +-
drivers/gpu/drm/msm/msm_gpu.h | 7 +
drivers/gpu/drm/msm/msm_gpu_devfreq.c | 38 +-
drivers/gpu/drm/msm/msm_kms.h | 3 +-
drivers/gpu/drm/msm/msm_ringbuffer.c | 12 -
drivers/gpu/drm/msm/msm_submitqueue.c | 1 +
drivers/gpu/drm/nouveau/dispnv50/disp.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_bo.c | 8 +-
drivers/gpu/drm/nouveau/nouveau_sgdma.c | 2 -
drivers/gpu/drm/omapdrm/Kconfig | 3 +-
drivers/gpu/drm/omapdrm/dss/dsi.c | 4 +-
drivers/gpu/drm/omapdrm/omap_drv.c | 2 +-
drivers/gpu/drm/panel/Kconfig | 27 +-
drivers/gpu/drm/panel/Makefile | 2 +
drivers/gpu/drm/panel/panel-boe-tv101wum-nl6.c | 743 +-
drivers/gpu/drm/panel/panel-edp.c | 1896 ++
drivers/gpu/drm/panel/panel-orisetech-otm8009a.c | 85 +-
drivers/gpu/drm/panel/panel-samsung-s6d27a1.c | 320 +
drivers/gpu/drm/panel/panel-simple.c | 1098 +-
drivers/gpu/drm/panfrost/panfrost_device.c | 10 +-
drivers/gpu/drm/panfrost/panfrost_drv.c | 33 +-
drivers/gpu/drm/panfrost/panfrost_job.c | 48 +-
drivers/gpu/drm/panfrost/panfrost_job.h | 5 +-
drivers/gpu/drm/panfrost/panfrost_mmu.c | 42 +-
drivers/gpu/drm/panfrost/panfrost_perfcnt.c | 4 +-
drivers/gpu/drm/qxl/qxl_release.c | 4 +-
drivers/gpu/drm/qxl/qxl_ttm.c | 1 -
drivers/gpu/drm/r128/ati_pcigart.c | 11 +-
drivers/gpu/drm/radeon/atombios.h | 2 +-
drivers/gpu/drm/radeon/ci_dpm.c | 3 +-
drivers/gpu/drm/radeon/r600_dpm.c | 10 +-
drivers/gpu/drm/radeon/radeon_dp_mst.c | 4 +-
drivers/gpu/drm/radeon/radeon_fence.c | 24 +-
drivers/gpu/drm/radeon/radeon_ttm.c | 15 +-
drivers/gpu/drm/rcar-du/rcar_du_crtc.c | 9 +-
drivers/gpu/drm/rcar-du/rcar_du_crtc.h | 11 -
drivers/gpu/drm/rcar-du/rcar_du_drv.c | 108 +-
drivers/gpu/drm/rcar-du/rcar_du_drv.h | 26 +-
drivers/gpu/drm/rcar-du/rcar_du_encoder.c | 12 +-
drivers/gpu/drm/rcar-du/rcar_du_group.c | 6 +-
drivers/gpu/drm/rcar-du/rcar_du_kms.c | 50 +-
drivers/gpu/drm/rcar-du/rcar_du_kms.h | 7 +
drivers/gpu/drm/rcar-du/rcar_du_regs.h | 9 +-
drivers/gpu/drm/rcar-du/rcar_du_vsp.c | 36 +-
drivers/gpu/drm/rcar-du/rcar_lvds.c | 4 +-
drivers/gpu/drm/rockchip/Kconfig | 1 -
drivers/gpu/drm/rockchip/analogix_dp-rockchip.c | 2 +-
drivers/gpu/drm/rockchip/cdn-dp-core.c | 4 +-
drivers/gpu/drm/rockchip/dw-mipi-dsi-rockchip.c | 3 +-
drivers/gpu/drm/rockchip/inno_hdmi.c | 4 +-
drivers/gpu/drm/rockchip/rockchip_drm_drv.c | 14 +-
drivers/gpu/drm/rockchip/rockchip_drm_drv.h | 2 -
drivers/gpu/drm/rockchip/rockchip_lvds.c | 33 +-
drivers/gpu/drm/rockchip/rockchip_rgb.c | 26 +-
drivers/gpu/drm/rockchip/rockchip_vop_reg.c | 2 +-
drivers/gpu/drm/scheduler/sched_entity.c | 140 +-
drivers/gpu/drm/scheduler/sched_fence.c | 62 +-
drivers/gpu/drm/scheduler/sched_main.c | 199 +-
drivers/gpu/drm/shmobile/shmob_drm_drv.c | 4 +-
drivers/gpu/drm/sti/sti_hqvdp.c | 4 +-
drivers/gpu/drm/stm/ltdc.c | 7 +-
drivers/gpu/drm/sun4i/sun4i_backend.c | 4 +-
drivers/gpu/drm/sun4i/sun4i_frontend.c | 4 +-
drivers/gpu/drm/sun4i/sun4i_hdmi_enc.c | 4 +-
drivers/gpu/drm/sun4i/sun4i_tcon.c | 4 +-
drivers/gpu/drm/sun4i/sun4i_tv.c | 4 +-
drivers/gpu/drm/sun4i/sun6i_mipi_dsi.c | 18 +-
drivers/gpu/drm/sun4i/sun8i_csc.h | 4 +-
drivers/gpu/drm/sun4i/sun8i_dw_hdmi.c | 21 +-
drivers/gpu/drm/sun4i/sun8i_mixer.c | 4 +-
drivers/gpu/drm/sun4i/sun8i_tcon_top.c | 4 +-
drivers/gpu/drm/tegra/fb.c | 2 +-
drivers/gpu/drm/tegra/plane.c | 2 +-
drivers/gpu/drm/tilcdc/tilcdc_drv.c | 4 +-
drivers/gpu/drm/tiny/Kconfig | 4 +-
drivers/gpu/drm/tiny/bochs.c | 8 +
drivers/gpu/drm/ttm/ttm_bo.c | 71 +-
drivers/gpu/drm/ttm/ttm_bo_util.c | 21 +-
drivers/gpu/drm/ttm/ttm_bo_vm.c | 15 +-
drivers/gpu/drm/ttm/ttm_device.c | 48 +
drivers/gpu/drm/ttm/ttm_module.c | 12 +
drivers/gpu/drm/ttm/ttm_pool.c | 42 +-
drivers/gpu/drm/ttm/ttm_range_manager.c | 8 +-
drivers/gpu/drm/ttm/ttm_resource.c | 49 +
drivers/gpu/drm/ttm/ttm_tt.c | 69 +-
drivers/gpu/drm/udl/Kconfig | 1 +
drivers/gpu/drm/v3d/Kconfig | 2 +-
drivers/gpu/drm/v3d/v3d_drv.c | 15 +-
drivers/gpu/drm/v3d/v3d_drv.h | 30 +-
drivers/gpu/drm/v3d/v3d_gem.c | 473 +-
drivers/gpu/drm/v3d/v3d_sched.c | 44 +-
drivers/gpu/drm/vboxvideo/vbox_drv.c | 5 +-
drivers/gpu/drm/vboxvideo/vbox_drv.h | 1 -
drivers/gpu/drm/vboxvideo/vbox_ttm.c | 17 +-
drivers/gpu/drm/vc4/vc4_dpi.c | 15 +-
drivers/gpu/drm/vc4/vc4_drv.c | 6 +-
drivers/gpu/drm/vc4/vc4_dsi.c | 28 +-
drivers/gpu/drm/vc4/vc4_hdmi.c | 5 +-
drivers/gpu/drm/vgem/vgem_drv.c | 342 +-
drivers/gpu/drm/virtio/virtgpu_debugfs.c | 1 +
drivers/gpu/drm/virtio/virtgpu_drv.c | 44 +-
drivers/gpu/drm/virtio/virtgpu_drv.h | 36 +-
drivers/gpu/drm/virtio/virtgpu_fence.c | 30 +-
drivers/gpu/drm/virtio/virtgpu_ioctl.c | 195 +-
drivers/gpu/drm/virtio/virtgpu_kms.c | 26 +-
drivers/gpu/drm/virtio/virtgpu_plane.c | 3 +-
drivers/gpu/drm/virtio/virtgpu_prime.c | 32 +-
drivers/gpu/drm/virtio/virtgpu_vq.c | 27 +-
drivers/gpu/drm/virtio/virtgpu_vram.c | 61 +
drivers/gpu/drm/vmwgfx/ttm_memory.c | 1 -
drivers/gpu/drm/vmwgfx/vmwgfx_bo.c | 15 +-
drivers/gpu/drm/vmwgfx/vmwgfx_ttm_buffer.c | 10 +-
drivers/gpu/drm/zte/Kconfig | 10 -
drivers/gpu/drm/zte/Makefile | 10 -
drivers/gpu/drm/zte/zx_common_regs.h | 28 -
drivers/gpu/drm/zte/zx_drm_drv.c | 184 -
drivers/gpu/drm/zte/zx_drm_drv.h | 34 -
drivers/gpu/drm/zte/zx_hdmi.c | 760 -
drivers/gpu/drm/zte/zx_hdmi_regs.h | 66 -
drivers/gpu/drm/zte/zx_plane.c | 537 -
drivers/gpu/drm/zte/zx_plane.h | 26 -
drivers/gpu/drm/zte/zx_plane_regs.h | 120 -
drivers/gpu/drm/zte/zx_tvenc.c | 400 -
drivers/gpu/drm/zte/zx_tvenc_regs.h | 27 -
drivers/gpu/drm/zte/zx_vga.c | 527 -
drivers/gpu/drm/zte/zx_vga_regs.h | 33 -
drivers/gpu/drm/zte/zx_vou.c | 921 -
drivers/gpu/drm/zte/zx_vou.h | 64 -
drivers/gpu/drm/zte/zx_vou_regs.h | 212 -
drivers/misc/mei/Kconfig | 2 +
drivers/misc/mei/Makefile | 1 +
drivers/misc/mei/pxp/Kconfig | 13 +
drivers/misc/mei/pxp/Makefile | 7 +
drivers/misc/mei/pxp/mei_pxp.c | 229 +
drivers/misc/mei/pxp/mei_pxp.h | 18 +
drivers/regulator/core.c | 2 +-
drivers/usb/typec/altmodes/Kconfig | 1 +
drivers/usb/typec/altmodes/displayport.c | 58 +-
drivers/video/fbdev/efifb.c | 21 +-
include/drm/amd_asic_type.h | 1 +
include/drm/drm_bridge.h | 23 +-
include/drm/drm_connector.h | 37 +
include/drm/drm_displayid.h | 101 +-
include/drm/drm_dp_helper.h | 26 +
include/drm/drm_dp_mst_helper.h | 5 +-
include/drm/drm_edid.h | 47 +
include/drm/drm_format_helper.h | 4 +
include/drm/drm_ioctl.h | 1 -
include/drm/drm_mipi_dsi.h | 4 +
include/drm/drm_mode_config.h | 13 +-
include/drm/drm_plane.h | 2 +-
include/drm/drm_print.h | 30 +
include/drm/drm_probe_helper.h | 1 +
include/drm/gpu_scheduler.h | 188 +-
include/drm/gud.h | 6 +-
include/drm/i915_component.h | 1 +
include/drm/i915_pciids.h | 8 +-
include/drm/i915_pxp_tee_interface.h | 42 +
include/drm/ttm/ttm_bo_api.h | 12 -
include/drm/ttm/ttm_bo_driver.h | 2 +-
include/drm/ttm/ttm_caching.h | 17 +
include/drm/ttm/ttm_device.h | 79 +-
include/drm/ttm/ttm_placement.h | 1 +
include/drm/ttm/ttm_pool.h | 5 +-
include/drm/ttm/ttm_range_manager.h | 18 +-
include/drm/ttm/ttm_resource.h | 9 +-
include/drm/ttm/ttm_tt.h | 98 +-
include/linux/dma-buf.h | 9 +-
include/linux/dma-fence.h | 32 +-
include/linux/dma-resv.h | 201 +-
include/linux/io.h | 5 +
include/linux/seqno-fence.h | 109 -
include/linux/shrinker.h | 1 +
include/linux/ww_mutex.h | 15 +-
include/uapi/drm/amdgpu_drm.h | 13 +-
include/uapi/drm/drm_fourcc.h | 12 +
include/uapi/drm/drm_mode.h | 4 +
include/uapi/drm/i915_drm.h | 242 +-
include/uapi/drm/v3d_drm.h | 78 +
include/uapi/drm/virtgpu_drm.h | 27 +
include/uapi/linux/virtio_gpu.h | 18 +-
kernel/locking/mutex.c | 41 +
kernel/locking/test-ww_mutex.c | 86 +-
kernel/locking/ww_rt_mutex.c | 25 +
lib/devres.c | 82 +
lib/locking-selftest.c | 2 +-
mm/vmscan.c | 15 +
992 files changed, 82016 insertions(+), 26512 deletions(-)
create mode 100644
Documentation/devicetree/bindings/display/msm/dpu-sc7280.yaml
delete mode 100644 Documentation/devicetree/bindings/display/msm/gpu.txt
create mode 100644 Documentation/devicetree/bindings/display/msm/gpu.yaml
create mode 100644
Documentation/devicetree/bindings/display/panel/panel-edp.yaml
create mode 100644
Documentation/devicetree/bindings/display/panel/samsung,s6d27a1.yaml
delete mode 100644 Documentation/gpu/rfc/i915_parallel_execbuf.h
delete mode 100644 drivers/dma-buf/seqno-fence.c
create mode 100644 drivers/gpu/drm/amd/amdgpu/amdgpu_umr.h
delete mode 100644 drivers/gpu/drm/amd/amdgpu/beige_goby_reg_init.c
delete mode 100644 drivers/gpu/drm/amd/amdgpu/cyan_skillfish_reg_init.c
delete mode 100644 drivers/gpu/drm/amd/amdgpu/navi10_reg_init.c
delete mode 100644 drivers/gpu/drm/amd/amdgpu/navi12_reg_init.c
delete mode 100644 drivers/gpu/drm/amd/amdgpu/navi14_reg_init.c
delete mode 100644 drivers/gpu/drm/amd/amdgpu/sienna_cichlid_reg_init.c
delete mode 100644 drivers/gpu/drm/amd/amdgpu/vangogh_reg_init.c
delete mode 100644 drivers/gpu/drm/amd/amdgpu/yellow_carp_reg_init.c
create mode 100644
drivers/gpu/drm/amd/display/dc/clk_mgr/dcn201/dcn201_clk_mgr.c
create mode 100644
drivers/gpu/drm/amd/display/dc/clk_mgr/dcn201/dcn201_clk_mgr.h
create mode 100644 drivers/gpu/drm/amd/display/dc/core/dc_link_dpia.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/Makefile
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_dccg.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_dccg.h
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_dpp.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_dpp.h
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_hubbub.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_hubbub.h
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_hubp.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_hubp.h
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_hwseq.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_hwseq.h
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_init.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_init.h
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_link_encoder.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_link_encoder.h
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_mpc.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_mpc.h
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_opp.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_opp.h
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_optc.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_optc.h
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_resource.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn201/dcn201_resource.h
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn31/dcn31_afmt.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn31/dcn31_afmt.h
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn31/dcn31_apg.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn31/dcn31_apg.h
create mode 100644
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_hpo_dp_link_encoder.c
create mode 100644
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_hpo_dp_link_encoder.h
create mode 100644
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_hpo_dp_stream_encoder.c
create mode 100644
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_hpo_dp_stream_encoder.h
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn31/dcn31_vpg.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dcn31/dcn31_vpg.h
rename drivers/gpu/drm/amd/display/dc/dml/{dcn2x/dcn2x.c =>
dcn20/dcn20_fpu.c} (99%)
rename drivers/gpu/drm/amd/display/dc/dml/{dcn2x/dcn2x.h =>
dcn20/dcn20_fpu.h} (94%)
create mode 100644 drivers/gpu/drm/amd/display/dc/dml/dcn301/dcn301_fpu.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dml/dcn301/dcn301_fpu.h
rename drivers/gpu/drm/amd/display/dc/{ => dml}/dsc/qp_tables.h (100%)
create mode 100644 drivers/gpu/drm/amd/display/dc/dml/dsc/rc_calc_fpu.c
create mode 100644 drivers/gpu/drm/amd/display/dc/dml/dsc/rc_calc_fpu.h
create mode 100644 drivers/gpu/drm/amd/display/dc/inc/dc_link_dpia.h
create mode 100644
drivers/gpu/drm/amd/display/dc/irq/dcn201/irq_service_dcn201.c
create mode 100644
drivers/gpu/drm/amd/display/dc/irq/dcn201/irq_service_dcn201.h
create mode 100755 drivers/gpu/drm/amd/include/asic_reg/clk/clk_11_0_1_offset.h
create mode 100755
drivers/gpu/drm/amd/include/asic_reg/clk/clk_11_0_1_sh_mask.h
create mode 100755 drivers/gpu/drm/amd/include/asic_reg/dcn/dcn_2_0_3_offset.h
create mode 100755 drivers/gpu/drm/amd/include/asic_reg/dcn/dcn_2_0_3_sh_mask.h
create mode 100755
drivers/gpu/drm/amd/include/asic_reg/dpcs/dpcs_2_0_3_offset.h
create mode 100755
drivers/gpu/drm/amd/include/asic_reg/dpcs/dpcs_2_0_3_sh_mask.h
create mode 100644 drivers/gpu/drm/amd/include/asic_reg/mp/mp_11_0_8_sh_mask.h
create mode 100644 drivers/gpu/drm/i915/display/intel_backlight.c
create mode 100644 drivers/gpu/drm/i915/display/intel_backlight.h
create mode 100644 drivers/gpu/drm/i915/display/intel_dpt.c
create mode 100644 drivers/gpu/drm/i915/display/intel_dpt.h
create mode 100644 drivers/gpu/drm/i915/display/intel_drrs.c
create mode 100644 drivers/gpu/drm/i915/display/intel_drrs.h
create mode 100644 drivers/gpu/drm/i915/display/intel_fb_pin.c
create mode 100644 drivers/gpu/drm/i915/display/intel_fb_pin.h
create mode 100644 drivers/gpu/drm/i915/display/intel_plane_initial.c
create mode 100644 drivers/gpu/drm/i915/display/intel_plane_initial.h
create mode 100644 drivers/gpu/drm/i915/gem/i915_gem_ttm_pm.c
create mode 100644 drivers/gpu/drm/i915/gem/i915_gem_ttm_pm.h
delete mode 100644 drivers/gpu/drm/i915/gem/selftests/i915_gem_execbuffer.c
delete mode 100644 drivers/gpu/drm/i915/gt/debugfs_engines.h
delete mode 100644 drivers/gpu/drm/i915/gt/debugfs_gt.c
delete mode 100644 drivers/gpu/drm/i915/gt/debugfs_gt_pm.h
create mode 100644 drivers/gpu/drm/i915/gt/intel_gt_debugfs.c
rename drivers/gpu/drm/i915/gt/{debugfs_gt.h => intel_gt_debugfs.h} (58%)
rename drivers/gpu/drm/i915/gt/{debugfs_engines.c =>
intel_gt_engines_debugfs.c} (70%)
create mode 100644 drivers/gpu/drm/i915/gt/intel_gt_engines_debugfs.h
rename drivers/gpu/drm/i915/gt/{debugfs_gt_pm.c => intel_gt_pm_debugfs.c} (79%)
create mode 100644 drivers/gpu/drm/i915/gt/intel_gt_pm_debugfs.h
create mode 100644 drivers/gpu/drm/i915/gt/uc/selftest_guc.c
create mode 100644 drivers/gpu/drm/i915/gt/uc/selftest_guc_multi_lrc.c
create mode 100644 drivers/gpu/drm/i915/intel_pcode.c
create mode 100644 drivers/gpu/drm/i915/intel_pcode.h
create mode 100644 drivers/gpu/drm/i915/intel_sbi.c
create mode 100644 drivers/gpu/drm/i915/intel_sbi.h
delete mode 100644 drivers/gpu/drm/i915/intel_sideband.c
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp.c
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp.h
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_cmd.c
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_cmd.h
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_debugfs.c
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_debugfs.h
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_irq.c
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_irq.h
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_pm.c
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_pm.h
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_session.c
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_session.h
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_tee.c
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_tee.h
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_tee_interface.h
create mode 100644 drivers/gpu/drm/i915/pxp/intel_pxp_types.h
create mode 100644 drivers/gpu/drm/i915/vlv_sideband.c
rename drivers/gpu/drm/i915/{intel_sideband.h => vlv_sideband.h} (77%)
delete mode 100644 drivers/gpu/drm/msm/disp/dpu1/dpu_core_irq.c
create mode 100644 drivers/gpu/drm/panel/panel-edp.c
create mode 100644 drivers/gpu/drm/panel/panel-samsung-s6d27a1.c
delete mode 100644 drivers/gpu/drm/zte/Kconfig
delete mode 100644 drivers/gpu/drm/zte/Makefile
delete mode 100644 drivers/gpu/drm/zte/zx_common_regs.h
delete mode 100644 drivers/gpu/drm/zte/zx_drm_drv.c
delete mode 100644 drivers/gpu/drm/zte/zx_drm_drv.h
delete mode 100644 drivers/gpu/drm/zte/zx_hdmi.c
delete mode 100644 drivers/gpu/drm/zte/zx_hdmi_regs.h
delete mode 100644 drivers/gpu/drm/zte/zx_plane.c
delete mode 100644 drivers/gpu/drm/zte/zx_plane.h
delete mode 100644 drivers/gpu/drm/zte/zx_plane_regs.h
delete mode 100644 drivers/gpu/drm/zte/zx_tvenc.c
delete mode 100644 drivers/gpu/drm/zte/zx_tvenc_regs.h
delete mode 100644 drivers/gpu/drm/zte/zx_vga.c
delete mode 100644 drivers/gpu/drm/zte/zx_vga_regs.h
delete mode 100644 drivers/gpu/drm/zte/zx_vou.c
delete mode 100644 drivers/gpu/drm/zte/zx_vou.h
delete mode 100644 drivers/gpu/drm/zte/zx_vou_regs.h
create mode 100644 drivers/misc/mei/pxp/Kconfig
create mode 100644 drivers/misc/mei/pxp/Makefile
create mode 100644 drivers/misc/mei/pxp/mei_pxp.c
create mode 100644 drivers/misc/mei/pxp/mei_pxp.h
create mode 100644 include/drm/i915_pxp_tee_interface.h
delete mode 100644 include/linux/seqno-fence.h
^ permalink raw reply [relevance 1%]
* [GIT PULL] Networking for 5.16
@ 2021-11-02 5:42 1% Jakub Kicinski
0 siblings, 0 replies; 200+ results
From: Jakub Kicinski @ 2021-11-02 5:42 UTC (permalink / raw)
To: torvalds
Cc: kuba, davem, netdev, linux-kernel, keescook, kvalo,
miriam.rachel.korenblit
Hi Linus!
Networking changes for the 5.16 merge window.
We have a small conflict/adjacent change between our:
dc52fac37c87 ("iwlwifi: mvm: Support new TX_RSP and COMPRESSED_BA_RES versions")
And Kees's:
fa7845cfd53f ("treewide: Replace open-coded flex arrays in unions")
The resolution is rather trivial:
diff --cc drivers/net/wireless/intel/iwlwifi/fw/api/tx.h
index 5fddfd391941,9b3bce83efb6..000000000000
--- a/drivers/net/wireless/intel/iwlwifi/fw/api/tx.h
+++ b/drivers/net/wireless/intel/iwlwifi/fw/api/tx.h
@@@ -715,11 -720,10 +722,12 @@@ struct iwl_mvm_compressed_ba_notif
__le32 tx_rate;
__le16 tfd_cnt;
__le16 ra_tid_cnt;
- struct iwl_mvm_compressed_ba_ratid ra_tid[0];
- struct iwl_mvm_compressed_ba_tfd tfd[];
+ union {
+ DECLARE_FLEX_ARRAY(struct iwl_mvm_compressed_ba_ratid, ra_tid);
+ DECLARE_FLEX_ARRAY(struct iwl_mvm_compressed_ba_tfd, tfd);
+ };
- } __packed; /* COMPRESSED_BA_RES_API_S_VER_4 */
+ } __packed; /* COMPRESSED_BA_RES_API_S_VER_4,
+ COMPRESSED_BA_RES_API_S_VER_5 */
/**
* struct iwl_mac_beacon_cmd_v6 - beacon template command
----------------------------------------------------------------
The following changes since commit 411a44c24a561e449b592ff631b7ae321f1eb559:
Merge tag 'net-5.15-rc8' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net (2021-10-28 10:17:31 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git tags/net-next-for-5.16
for you to fetch changes up to 84882cf72cd774cf16fd338bdbf00f69ac9f9194:
Revert "net: avoid double accounting for pure zerocopy skbs" (2021-11-01 22:26:08 -0700)
----------------------------------------------------------------
Core:
- Remove socket skb caches
- Add a SO_RESERVE_MEM socket op to forward allocate buffer space
and avoid memory accounting overhead on each message sent
- Introduce managed neighbor entries - added by control plane and
resolved by the kernel for use in acceleration paths (BPF / XDP
right now, HW offload users will benefit as well)
- Make neighbor eviction on link down controllable by userspace
to work around WiFi networks with bad roaming implementations
- vrf: Rework interaction with netfilter/conntrack
- fq_codel: implement L4S style ce_threshold_ect1 marking
- sch: Eliminate unnecessary RCU waits in mini_qdisc_pair_swap()
BPF:
- Add support for new btf kind BTF_KIND_TAG, arbitrary type tagging
as implemented in LLVM14
- Introduce bpf_get_branch_snapshot() to capture Last Branch Records
- Implement variadic trace_printk helper
- Add a new Bloomfilter map type
- Track <8-byte scalar spill and refill
- Access hw timestamp through BPF's __sk_buff
- Disallow unprivileged BPF by default
- Document BPF licensing
Netfilter:
- Introduce egress hook for looking at raw outgoing packets
- Allow matching on and modifying inner headers / payload data
- Add NFT_META_IFTYPE to match on the interface type either from
ingress or egress
Protocols:
- Multi-Path TCP:
- increase default max additional subflows to 2
- rework forward memory allocation
- add getsockopts: MPTCP_INFO, MPTCP_TCPINFO, MPTCP_SUBFLOW_ADDRS
- MCTP flow support allowing lower layer drivers to configure msg
muxing as needed
- Automatic Multicast Tunneling (AMT) driver based on RFC7450
- HSR support the redbox supervision frames (IEC-62439-3:2018)
- Support for the ip6ip6 encapsulation of IOAM
- Netlink interface for CAN-FD's Transmitter Delay Compensation
- Support SMC-Rv2 eliminating the current same-subnet restriction,
by exploiting the UDP encapsulation feature of RoCE adapters
- TLS: add SM4 GCM/CCM crypto support
- Bluetooth: initial support for link quality and audio/codec
offload
Driver APIs:
- Add a batched interface for RX buffer allocation in AF_XDP
buffer pool
- ethtool: Add ability to control transceiver modules' power mode
- phy: Introduce supported interfaces bitmap to express MAC
capabilities and simplify PHY code
- Drop rtnl_lock from DSA .port_fdb_{add,del} callbacks
New drivers:
- WiFi driver for Realtek 8852AE 802.11ax devices (rtw89)
- Ethernet driver for ASIX AX88796C SPI device (x88796c)
Drivers:
- Broadcom PHYs
- support 72165, 7712 16nm PHYs
- support IDDQ-SR for additional power savings
- PHY support for QCA8081, QCA9561 PHYs
- NXP DPAA2: support for IRQ coalescing
- NXP Ethernet (enetc): support for software TCP segmentation
- Renesas Ethernet (ravb) - support DMAC and EMAC blocks of
Gigabit-capable IP found on RZ/G2L SoC
- Intel 100G Ethernet
- support for eswitch offload of TC/OvS flow API, including
offload of GRE, VxLAN, Geneve tunneling
- support application device queues - ability to assign Rx and Tx
queues to application threads
- PTP and PPS (pulse-per-second) extensions
- Broadcom Ethernet (bnxt)
- devlink health reporting and device reload extensions
- Mellanox Ethernet (mlx5)
- offload macvlan interfaces
- support HW offload of TC rules involving OVS internal ports
- support HW-GRO and header/data split
- support application device queues
- Marvell OcteonTx2:
- add XDP support for PF
- add PTP support for VF
- Qualcomm Ethernet switch (qca8k): support for QCA8328
- Realtek Ethernet DSA switch (rtl8366rb)
- support bridge offload
- support STP, fast aging, disabling address learning
- support for Realtek RTL8365MB-VC, a 4+1 port 10M/100M/1GE switch
- Mellanox Ethernet/IB switch (mlxsw)
- multi-level qdisc hierarchy offload (e.g. RED, prio and shaping)
- offload root TBF qdisc as port shaper
- support multiple routing interface MAC address prefixes
- support for IP-in-IP with IPv6 underlay
- MediaTek WiFi (mt76)
- mt7921 - ASPM, 6GHz, SDIO and testmode support
- mt7915 - LED and TWT support
- Qualcomm WiFi (ath11k)
- include channel rx and tx time in survey dump statistics
- support for 80P80 and 160 MHz bandwidths
- support channel 2 in 6 GHz band
- spectral scan support for QCN9074
- support for rx decapsulation offload (data frames in 802.3
format)
- Qualcomm phone SoC WiFi (wcn36xx)
- enable Idle Mode Power Save (IMPS) to reduce power consumption
during idle
- Bluetooth driver support for MediaTek MT7922 and MT7921
- Enable support for AOSP Bluetooth extension in Qualcomm WCN399x
and Realtek 8822C/8852A
- Microsoft vNIC driver (mana)
- support hibernation and kexec
- Google vNIC driver (gve)
- support for jumbo frames
- implement Rx page reuse
Refactor:
- Make all writes to netdev->dev_addr go thru helpers, so that we
can add this address to the address rbtree and handle the updates
- Various TCP cleanups and optimizations including improvements
to CPU cache use
- Simplify the gnet_stats, Qdisc stats' handling and remove
qdisc->running sequence counter
- Driver changes and API updates to address devlink locking
deficiencies
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
----------------------------------------------------------------
Aaron Ma (1):
ath11k: qmi: avoid error messages when dma allocation fails
Abhiram R N (1):
net/mlx5e: Add extack msgs related to TC for better debug
Abinaya Kalaiselvan (1):
ath10k: fix module load regression with iram-recovery feature
Aharon Landau (8):
net/mlx5: Add ifc bits to support optional counters
net/mlx5: Add priorities for counters in RDMA namespaces
RDMA/mlx5: Remove iova from struct mlx5_core_mkey
RDMA/mlx5: Remove size from struct mlx5_core_mkey
RDMA/mlx5: Remove pd from struct mlx5_core_mkey
RDMA/mlx5: Replace struct mlx5_core_mkey by u32 key
RDMA/mlx5: Move struct mlx5_core_mkey to mlx5_ib
RDMA/mlx5: Attach ndescs to mlx5_ib_mkey
Ahmed S. Darwish (5):
u64_stats: Introduce u64_stats_set()
net: sched: Protect Qdisc::bstats with u64_stats
net: sched: Use _bstats_update/set() instead of raw writes
net: sched: Merge Qdisc::bstats and Qdisc::cpu_bstats data types
net: sched: Remove Qdisc::running sequence counter
Ajay Singh (11):
wilc1000: move 'deinit_lock' lock init/destroy inside module probe
wilc1000: fix possible memory leak in cfg_scan_result()
wilc1000: add new WID to pass wake_enable information to firmware
wilc1000: configure registers to handle chip wakeup sequence
wilc1000: add reset/terminate/repeat command support for SPI bus
wilc1000: handle read failure issue for clockless registers
wilc1000: ignore clockless registers status response for SPI
wilc1000: invoke chip reset register before firmware download
wilc1000: add 'initialized' flag check before adding an element to TX queue
wilc1000: use correct write command sequence in wilc_spi_sync_ext()
wilc1000: increase config packets response wait timeout limit
Alagu Sankar (1):
ath10k: high latency fixes for beacon buffer
Aleksander Jan Bajkowski (11):
MIPS: lantiq: dma: add small delay after reset
MIPS: lantiq: dma: reset correct number of channel
MIPS: lantiq: dma: fix burst length for DEU
MIPS: lantiq: dma: make the burst length configurable by the drivers
net: lantiq: configure the burst length in ethernet drivers
dt-bindings: net: lantiq-xrx200-net: convert to the json-schema
dt-bindings: net: lantiq,etop-xway: Document Lantiq Xway ETOP bindings
dt-bindings: net: lantiq: Add the burst length properties
net: lantiq: add support for jumbo frames
net: lantiq_xrx200: Hardcode the burst length value
dt-bindings: net: lantiq-xrx200-net: Remove the burst length properties
Alexander Kuznetsov (1):
ipv6: enable net.ipv6.route.max_size sysctl in network namespace
Alexander Lobakin (1):
ax88796c: fix fetching error stats from percpu containers
Alexei Starovoitov (25):
Merge branch 'bpf: introduce bpf_get_branch_snapshot'
Merge branch 'libbpf: Streamline internal BPF program sections handling'
Merge branch 'bpf: add support for new btf kind BTF_KIND_TAG'
Merge branch 'Improve set_attach_target() and deprecate open_opts.attach_prog_fd'
Merge branch 'bpf: implement variadic printk helper'
Merge branch 'libbpf: add legacy uprobe support'
bpf: Document BPF licensing.
Merge branch 'bpf: Support <8-byte scalar spill and refill'
Merge branch 'libbpf: stricter BPF program section name handling'
Merge branch 'bpf: Build with -Wcast-function-type'
libbpf: Make gen_loader data aligned.
Merge branch 'Support kernel module function calls from eBPF'
Merge branch 'Add bpf_skc_to_unix_sock() helper'
Merge branch 'libbpf: support custom .rodata.*/.data.* sections'
Merge branch 'bpf: add support for BTF_KIND_DECL_TAG typedef'
Merge branch 'Parallelize verif_scale selftests'
Merge branch 'libbpf: add bpf_program__insns() accessor'
Merge branch 'bpf: use 32bit safe version of u64_stats'
Merge branch 'Implement bloom filter map'
Merge branch 'Typeless/weak ksym for gen_loader + misc fixups'
Merge branch 'introduce dummy BPF STRUCT_OPS'
Merge branch '"map_extra" and bloom filter fixups'
bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
selftests/bpf: Add a testcase for 64-bit bounds propagation issue.
Aloka Dixit (1):
mac80211: split beacon retrieval functions
Alvin Šipraga (7):
ether: add EtherType for proprietary Realtek protocols
net: dsa: allow reporting of standard ethtool stats for slave devices
net: dsa: move NET_DSA_TAG_RTL4_A to right place in Kconfig/Makefile
dt-bindings: net: dsa: realtek-smi: document new compatible rtl8365mb
net: dsa: tag_rtl8_4: add realtek 8 byte protocol 4 tag
net: dsa: realtek-smi: add rtl8365mb subdriver for RTL8365MB-VC
net: phy: realtek: add support for RTL8365MB-VC internal PHYs
Amir Tzin (3):
net/mlx5: Add layout to support default timeouts register
net/mlx5: Read timeout values from init segment
net/mlx5: Read timeout values from DTOR
Amit Cohen (22):
mlxsw: spectrum_router: Create common function for fib_entry_type_unset() code
mlxsw: spectrum_ipip: Pass IP tunnel parameters by reference and as 'const'
mlxsw: spectrum_router: Fix arguments alignment
mlxsw: spectrum_ipip: Create common function for mlxsw_sp_ipip_ol_netdev_change_gre()
mlxsw: Take tunnel's type into account when searching underlay device
mlxsw: reg: Add Router IP version Six Register
mlxsw: reg: Add support for rtdp_ipip6_pack()
mlxsw: reg: Add support for ratr_ipip6_entry_pack()
mlxsw: reg: Add support for ritr_loopback_ipip6_pack()
mlxsw: Create separate ipip_ops_arr for different ASICs
mlxsw: spectrum_ipip: Add mlxsw_sp_ipip_gre6_ops
mlxsw: Add IPV6_ADDRESS kvdl entry type
mlxsw: spectrum_router: Increase parsing depth for IPv6 decapsulation
mlxsw: Add support for IP-in-IP with IPv6 underlay for Spectrum-2 and above
testing: selftests: forwarding.config.sample: Add tc flag
testing: selftests: tc_common: Add tc_check_at_least_x_packets()
selftests: forwarding: Add IPv6 GRE flat tests
selftests: forwarding: Add IPv6 GRE hierarchical tests
selftests: mlxsw: devlink_trap_tunnel_ipip6: Add test case for IPv6 decap_error
selftests: mlxsw: devlink_trap_tunnel_ipip: Align topology drawing correctly
selftests: mlxsw: devlink_trap_tunnel_ipip: Remove code duplication
selftests: mlxsw: devlink_trap_tunnel_ipip: Send a full-length key
Anders Roxell (1):
marvell: octeontx2: build error: unknown type name 'u64'
Andrea Righi (1):
selftests/bpf: Fix fclose/pclose mismatch in test_progs
Andreas Oetken (1):
net: hsr: Add support for redbox supervision frames
Andrey Ignatov (1):
bpf: Avoid retpoline for bpf_for_each_map_elem
Andrii Nakryiko (70):
Merge branch 'Bpf skeleton helper method'
libbpf: Fix build with latest gcc/binutils with LTO
libbpf: Make libbpf_version.h non-auto-generated
selftests/bpf: Update selftests to always provide "struct_ops" SEC
libbpf: Ensure BPF prog types are set before relocations
libbpf: Simplify BPF program auto-attach code
libbpf: Minimize explicit iterator of section definition array
selftests/bpf: Fix .gitignore to not ignore test_progs.c
libbpf: Use pre-setup sec_def in libbpf_find_attach_btf_id()
selftests/bpf: Stop using relaxed_core_relocs which has no effect
libbpf: Deprecated bpf_object_open_opts.relaxed_core_relocs
libbpf: Allow skipping attach_func_name in bpf_program__set_attach_target()
selftests/bpf: Switch fexit_bpf2bpf selftest to set_attach_target() API
libbpf: Schedule open_opts.attach_prog_fd deprecation since v0.7
libbpf: Constify all high-level program attach APIs
libbpf: Fix memory leak in legacy kprobe attach logic
selftests/bpf: Adopt attach_probe selftest to work on old kernels
libbpf: Refactor and simplify legacy kprobe code
libbpf: Add legacy uprobe attaching support
libbpf: Add "tc" SEC_DEF which is a better name for "classifier"
selftests/bpf: Normalize XDP section names in selftests
selftests/bpf: Switch SEC("classifier*") usage to a strict SEC("tc")
selftests/bpf: Normalize all the rest SEC() uses
libbpf: Refactor internal sec_def handling to enable pluggability
libbpf: Reduce reliance of attach_fns on sec_def internals
libbpf: Refactor ELF section handler definitions
libbpf: Complete SEC() table unification for BPF_APROG_SEC/BPF_EAPROG_SEC
libbpf: Add opt-in strict BPF program section name handling logic
selftests/bpf: Switch sk_lookup selftests to strict SEC("sk_lookup") use
Merge branch 'libbpf: Support uniform BTF-defined key/value specification across all BPF maps'
libbpf: Add API that copies all BTF types from one BTF object to another
selftests/bpf: Refactor btf_write selftest to reuse BTF generation logic
selftests/bpf: Test new btf__add_btf() API
Merge branch 'libbpf: Deprecate bpf_{map,program}__{prev,next} APIs since v0.7'
Merge branch 'install libbpf headers when using the library'
Merge branch 'add support for writable bare tracepoint'
Merge branch 'selftests/bpf: Add parallelism to test_progs'
Merge branch 'fixes for bpftool's Makefile'
Merge branch 'btf_dump fixes for s390'
Merge branch 'bpf: keep track of verifier insn_processed'
Merge branch 'selftests/bpf: Fixes for perf_buffer test'
libbpf: Deprecate btf__finalize_data() and move it into libbpf.c
libbpf: Extract ELF processing state into separate struct
libbpf: Use Elf64-specific types explicitly for dealing with ELF
libbpf: Remove assumptions about uniqueness of .rodata/.data/.bss maps
bpftool: Support multiple .rodata/.data internal maps in skeleton
bpftool: Improve skeleton generation for data maps without DATASEC type
libbpf: Support multiple .rodata.* and .data.* BPF maps
selftests/bpf: Demonstrate use of custom .rodata/.data sections
libbpf: Simplify look up by name of internal maps
selftests/bpf: Switch to ".bss"/".rodata"/".data" lookups for internal maps
libbpf: Fix the use of aligned attribute
selftests/bpf: Make perf_buffer selftests work on 4.9 kernel again
Merge branch 'libbpf: Add btf__type_cnt() and btf__raw_data() APIs'
Merge branch 'libbpf: use func name when pinning programs with LIBBPF_STRICT_SEC_NAME'
libbpf: Fix overflow in BTF sanity checks
libbpf: Fix BTF header parsing checks
selftests/bpf: Normalize selftest entry points
selftests/bpf: Support multiple tests per file
selftests/bpf: Mark tc_redirect selftest as serial
selftests/bpf: Split out bpf_verif_scale selftests into multiple tests
Merge branch 'bpftool: Switch to libbpf's hashmap for referencing BPF objects'
libbpf: Fix off-by-one bug in bpf_core_apply_relo()
libbpf: Add ability to fetch bpf_program's underlying instructions
libbpf: Deprecate multi-instance bpf_program APIs
libbpf: Deprecate ambiguously-named bpf_program__size() API
Merge branch 'core_reloc fixes for s390'
Merge branch 'selftests/bpf: parallel mode improvement'
selftests/bpf: Fix strobemeta selftest regression
selftests/bpf: Fix also no-alu32 strobemeta selftest
Anilkumar Kolli (5):
ath11k: use hw_params to access board_size and cal_offset
ath11k: clean up BDF download functions
ath11k: add caldata file for multiple radios
ath11k: add caldata download support from EEPROM
ath11k: Fix pktlog lite rx events
Anirudh Venkataramanan (2):
ice: Add feature bitmap, helpers and a check for DSCP
ice: Fix link mode handling
Ansuel Smith (25):
net: phy: at803x: add support for qca 8327 internal phy
net: phy: at803x: add support for qca 8327 A variant internal phy
net: phy: at803x: add resume/suspend function to qca83xx phy
net: phy: at803x: fix spacing and improve name for 83xx phy
net: phy: at803x: fix resume for QCA8327 phy
net: phy: at803x: add DAC amplitude fix for 8327 phy
net: phy: at803x: enable prefer master for 83xx internal phy
net: phy: at803x: better describe debug regs
dsa: qca8k: add mac_power_sel support
dt-bindings: net: dsa: qca8k: Add SGMII clock phase properties
net: dsa: qca8k: add support for sgmii falling edge
dt-bindings: net: dsa: qca8k: Document support for CPU port 6
net: dsa: qca8k: add support for cpu port 6
net: dsa: qca8k: rework rgmii delay logic and scan for cpu port 6
dt-bindings: net: dsa: qca8k: Document qca,sgmii-enable-pll
net: dsa: qca8k: add explicit SGMII PLL enable
dt-bindings: net: dsa: qca8k: Document qca,led-open-drain binding
net: dsa: qca8k: add support for pws config reg
dt-bindings: net: dsa: qca8k: document support for qca8328
net: dsa: qca8k: add support for QCA8328
net: dsa: qca8k: set internal delay also for sgmii
net: dsa: qca8k: move port config to dedicated struct
dt-bindings: net: ipq8064-mdio: fix warning with new qca8k switch
net: dsa: qca8k: fix delay applied to wrong cpu in parse_port_config
net: dsa: qca8k: tidy for loop in setup and add cpu port check
Antoine Tenart (5):
net-sysfs: try not to restart the syscall if it will fail eventually
net: introduce a function to check if a netdev name is in use
bonding: use the correct function to check for netdev name collision
ppp: use the correct function to check if a netdev name is in use
net: make dev_get_port_parent_id slightly more readable
Ariel Levkovich (9):
net/mlx5e: Refactor rx handler of represetor device
net/mlx5e: Use generic name for the forwarding dev pointer
net/mlx5: E-Switch, Add ovs internal port mapping to metadata support
net/mlx5e: Accept action skbedit in the tc actions list
net/mlx5e: Offload tc rules that redirect to ovs internal port
net/mlx5e: Offload internal port as encap route device
net/mlx5e: Add indirect tc offload of ovs internal port
net/mlx5e: Term table handling of internal port rules
net/mlx5: Support internal port as decap route device
Arnd Bergmann (11):
net: stmmac: fix gcc-10 -Wrestrict warning
cxgb: avoid open-coded offsetof()
ath11k: Wstringop-overread warning
am65-cpsw: avoid null pointer arithmetic
net: stmmac: fix off-by-one error in sanity check
gve: DQO: avoid unused variable warnings
net: of: fix stub of_net helpers for CONFIG_NET=n
octeontx2-nic: fix mixed module build
ath10k: fix invalid dma_addr_t token assignment
net: sched: gred: dynamically allocate tc_gred_qopt_offload
ifb: fix building without CONFIG_NET_CLS_ACT
Avihai Horon (1):
net/mlx5: Reduce flow counters bulk query buffer size for SFs
Avraham Stern (1):
iwlwifi: mvm: add support for 160Mhz in ranging measurements
Aya Levin (5):
net/mlx5e: Add error flow for ethtool -X command
net/mlx5: Tolerate failures in debug features while driver load
net/mlx5: Extend health buffer dump
net/mlx5: Print health buffer by log level
net/mlx5: Add periodic update of host time to firmware
Ayala Barazani (1):
iwlwifi: ACPI: support revision 3 WGDS tables
Baochen Qiang (8):
ath11k: Drop MSDU with length error in DP rx path
ath11k: Fix inaccessible debug registers
ath11k: Fix memory leak in ath11k_qmi_driver_event_work
ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
ath11k: Handle MSI enablement during rmmod and SSR
ath11k: Change number of TCL rings to one for QCA6390
ath11k: Identify DFS channel when sending scan channel list command
ath11k: change return buffer manager for QCA6390
Ben Ben-Ishay (5):
net/mlx5e: Rename lro_timeout to packet_merge_timeout
net/mlx5: Add SHAMPO caps, HW bits and enumerations
net/mlx5e: Add support to klm_umr_wqe
net/mlx5e: Add control path for SHAMPO feature
net/mlx5e: Add data path for SHAMPO feature
Ben Ben-ishay (1):
net: Prevent HW-GRO and LRO features operate together
Ben Greear (9):
mt76: mt7915: fix he_mcs capabilities for 160mhz
mt76: mt7915: fix potential NPE in TXS processing
mt76: mt7915: fix hwmon temp sensor mem use-after-free
mt76: mt7915: add ethtool stats support
mt76: mt7915: add tx stats gathered from tx-status callbacks
mt76: mt7915: add some per-station tx stats to ethtool
mt76: mt7915: add tx mu/su counters to mib
mt76: mt7915: add more MIB registers
mt76: mt7915: add mib counters to ethtool stats
Benjamin Li (4):
wcn36xx: handle connection loss indication
wcn36xx: add proper DMA memory barriers in rx path
wcn36xx: switch on antenna diversity feature bit
wcn36xx: add missing 5GHz channels 136 and 144
Biju Das (24):
ravb: Rename "ravb_set_features_rx_csum" function to "ravb_set_features_rcar"
ravb: Rename "no_ptp_cfg_active" and "ptp_cfg_active" variables
ravb: Add nc_queue to struct ravb_hw_info
ravb: Add support for RZ/G2L SoC
ravb: Initialize GbEthernet DMAC
ravb: Exclude gPTP feature support for RZ/G2L
ravb: Add tsrq to struct ravb_hw_info
ravb: Add magic_pkt to struct ravb_hw_info
ravb: Add half_duplex to struct ravb_hw_info
ravb: Initialize GbEthernet E-MAC
ravb: Use ALIGN macro for max_rx_len
ravb: Add rx_max_buf_size to struct ravb_hw_info
ravb: Fillup ravb_alloc_rx_desc_gbeth() stub
ravb: Fillup ravb_rx_ring_free_gbeth() stub
ravb: Fillup ravb_rx_ring_format_gbeth() stub
ravb: Fillup ravb_rx_gbeth() stub
ravb: Add carrier_counters to struct ravb_hw_info
ravb: Add support to retrieve stats for GbEthernet
ravb: Rename "tsrq" variable
ravb: Optimize ravb_emac_init_gbeth function
ravb: Rename "nc_queue" feature bit
ravb: Document PFRI register bit
ravb: Update ravb_emac_init_gbeth()
ravb: Fix typo AVB->DMAC
Björn Töpel (4):
riscv, bpf: Increase the maximum number of iterations
tools, build: Add RISC-V to HOSTARCH parsing
riscv, libbpf: Add RISC-V (RV64) support to bpf_tracing.h
selftests, bpf: Fix broken riscv build
Bo Jiao (2):
mt76: mt7915: fix calling mt76_wcid_alloc with incorrect parameter
mt76: mt7915: adapt new firmware to update BA winsize for Rx session
Boris Sukholitko (1):
dissector: do not set invalid PPP protocol
Brendan Jackman (1):
selftests/bpf: Some more atomic tests
Brett Creeley (5):
ice: Add support for VF rate limiting
ice: Add support to print error on PHY FW load failure
ice: Remove boolean vlan_promisc flag from function
virtchnl: Remove unused VIRTCHNL_VF_OFFLOAD_RSVD define
virtchnl: Use the BIT() macro for capability/offload flags
Brian Gix (1):
Bluetooth: mgmt: Disallow legacy MGMT_OP_READ_LOCAL_OOB_EXT_DATA
Bryan O'Donoghue (6):
wcn36xx: Fix Antenna Diversity Switching
wcn36xx: Add ability for wcn36xx_smd_dump_cmd_req to pass two's complement
wcn36xx: Implement Idle Mode Power Save
wcn36xx: Treat repeated BMPS entry fail as connection loss
Revert "wcn36xx: Disable bmps when encryption is disabled"
Revert "wcn36xx: Enable firmware link monitoring"
Cai Huoqing (24):
net: arc_emac: Make use of the helper function dev_err_probe()
net: atl1c: Make use of the helper function dev_err_probe()
net: atl1e: Make use of the helper function dev_err_probe()
net: chelsio: cxgb4vf: Make use of the helper function dev_err_probe()
net: enetc: Make use of the helper function dev_err_probe()
net: ethoc: Make use of the helper function dev_err_probe()
net: hinic: Make use of the helper function dev_err_probe()
net: thunderx: Make use of the helper function dev_err_probe()
net: netsec: Make use of the helper function dev_err_probe()
net: stmmac: dwmac-visconti: Make use of the helper function dev_err_probe()
FDDI: defxx: Fix function names in coments
net: fddi: skfp: Fix a function name in comments
net: atl1c: Fix a function name in print messages
net: broadcom: Fix a function name in comments
net: sis: Fix a function name in comments
net: smsc: Fix function names in print messages and comments
net: cisco: Fix a function name in comments
ibmveth: Use dma_alloc_coherent() instead of kmalloc/dma_map_single()
ipw2200: Fix a function name in print messages
net: ethernet: ixp4xx: Make use of dma_pool_zalloc() instead of dma_pool_alloc/memset()
ice: Make use of the helper function devm_add_action_or_reset()
net: liquidio: Make use of the helper macro kthread_run()
mt76: Make use of the helper macro kthread_run()
can: mscan: mpc5xxx_can: Make use of the helper function dev_err_probe()
Carlos Llamas (1):
ptp: fix code indentation issues
Catherine Sullivan (3):
gve: Add rx buffer pagecnt bias
gve: Add netif_set_xps_queue call
gve: Track RX buffer allocation failures
Chen Wandun (1):
net: delete redundant function declaration
Chethan T N (2):
Bluetooth: btintel: support link statistics telemetry events
Bluetooth: Allow usb to auto-suspend when SCO use non-HCI transport
Chin-Yen Lee (1):
rtw88: move adaptivity mechanism to firmware
Chris Chiu (1):
rtl8xxxu: Use lower tx rates for the ack packet
Chris Mi (1):
net/mlx5e: Specify out ifindex when looking up encap route
Christian Lamparter (5):
ath9k: fetch calibration data via nvmem subsystem
ath9k: owl-loader: fetch pci init values through nvmem
net: ethernet: emac: utilize of_net's of_get_mac_address()
dt-bindings: net: wireless: qca,ath9k: convert to the json-schema
ath9k: support DT ieee80211-freq-limit property to limit channels
Christophe JAILLET (6):
s390/ism: switch from 'pci_' to 'dma_' API
ethernet: Remove redundant 'flush_workqueue()' calls
wireless: Remove redundant 'flush_workqueue()' calls
ieee802154: Remove redundant 'flush_workqueue()' calls
mt76: switch from 'pci_' to 'dma_' API
mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
Claudiu Beznea (4):
net: macb: add description for SRTSM
net: macb: align for OSSMODE offset
net: macb: add support for mii on rgmii
net: macb: enable mii on rgmii for sama7g5
Colin Ian King (13):
Bluetooth: btintel: Fix incorrect out of memory check
octeontx2-af: Fix uninitialized variable val
octeontx2-af: Remove redundant initialization of variable blkaddr
octeontx2-af: Remove redundant initialization of variable pin
qed: Fix spelling mistake "ctx_bsaed" -> "ctx_based"
ath11k: Fix spelling mistake "incompaitiblity" -> "incompatibility"
ath11k: Remove redundant assignment to variable fw_size
rtlwifi: rtl8192ee: Remove redundant initialization of variable version
mt7601u: Remove redundant initialization of variable ret
xen-netback: Remove redundant initialization of variable err
rtw89: Fix two spelling mistakes in debug messages
rtw89: Remove redundant check of ret after call to rtw89_mac_enable_bb_rf
net: ixgbevf: Remove redundant initialization of variable ret_val
DENG Qingfang (1):
net: dsa: rtl8366rb: Support bridge offloading
Dan Carpenter (8):
ath11k: fix some sleeping in atomic bugs
mlxsw: spectrum_buffers: silence uninitialized warning
b43legacy: fix a lower bounds test
b43: fix a lower bounds test
ath9k: fix an IS_ERR() vs NULL check
net: enetc: fix check for allocation failure
ice: fix an error code in ice_ena_vfs()
mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
Dan Nowlin (2):
ice: manage profiles and field vectors
ice: create advanced switch recipe
Daniel Borkmann (11):
Merge branch 'bpf-xsk-selftests'
bpf, selftests: Replicate tailcall limit test for indirect call case
Merge branch 'bpf-xsk-rx-batch'
Merge branch 'bpf-mips-jit'
bpf, arm: Remove dummy bpf_jit_compile stub
net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
net, neigh: Add NTF_MANAGED flag for managed neighbor entries
net, neigh: Add build-time assertion to avoid neigh->flags overflow
net, neigh: Use NLA_POLICY_MASK helper for NDA_FLAGS_EXT attribute
net, neigh: Reject creating NUD_PERMANENT with NTF_MANAGED entries
Daniel Golle (2):
mt76: support reading EEPROM data embedded in fdt
dt: bindings: net: mt76: add eeprom-data property
Danielle Ratson (9):
mlxsw: reg: Add MAC profile ID field to RITR register
mlxsw: resources: Add resource identifier for RIF MAC profiles
mlxsw: spectrum_router: Propagate extack further
mlxsw: spectrum_router: Add RIF MAC profiles support
mlxsw: spectrum_router: Expose RIF MAC profiles to devlink resource
selftests: mlxsw: Add a scale test for RIF MAC profiles
selftests: mlxsw: Add forwarding test for RIF MAC profiles
selftests: Add an occupancy test for RIF MAC profiles
selftests: mlxsw: Remove deprecated test cases
Dave Ertman (1):
ice: Add DSCP support
Dave Marchevsky (13):
bpf: Merge printk and seq_printf VARARG max macros
selftests/bpf: Stop using bpf_program__load
bpf: Add bpf_trace_vprintk helper
libbpf: Modify bpf_printk to choose helper based on arg count
libbpf: Use static const fmt string in __bpf_printk
bpftool: Only probe trace_vprintk feature in 'full' mode
selftests/bpf: Migrate prog_tests/trace_printk CHECKs to ASSERTs
selftests/bpf: Add trace_vprintk test prog
bpf: Clarify data_len param in bpf_snprintf and bpf_seq_printf comments
selftests/bpf: Remove SEC("version") from test progs
libbpf: Migrate internal use of bpf_program__get_prog_info_linear
bpf: Add verified_insns to bpf_prog_info and fdinfo
selftests/bpf: Add verif_stats test
David Awogbemila (2):
gve: Add RX context.
gve: Implement packet continuation for RX.
David Bauer (1):
net: phy: at803x: add QCA9561 support
David S. Miller (128):
Merge branch 'nfc-printk-cleanup'
Merge branch 'mlxsw-next'
Merge branch 's390-next'
Merge branch 'smc-EDID-support'
Merge branch 'hns3-mac'
Merge branch 'ptp-ocp-timecard-v13-fw'
Merge branch 'ibmvnic-next'
Merge branch 'qdisc-visibility'
Merge branch 'devlink-delete-publidh-api'
Merge branch 'mlxsw-Add-support-for-transceiver-modules-reset'
Merge branch 'macb-MII-on-RGMII'
Merge branch 'mptcp-next'
Merge branch 'wwan-iosm-fw-flashing'
Merge branch 'iddq-sr-mode'
Merge branch 'mlxsw-trap-adjacency'
Merge branch 'ja1105-deps'
Merge branch 'remove-sk-skb-caches'
Merge branch 'mlxsw-next'
Merge branch 'devlink-fixes'
Merge tag 'mlx5-updates-2021-09-24' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'mptcp-fixes'
Merge branch 'octeontx2-af-kpu'
Merge branch 'devlink_register-last'
Merge branch 'rtl8366-cleanups'
Merge branch 'bcmgenet-flow-control'
Merge branch 'octeontx2-af-external-ptp-clock'
Merge branch 'octeontx2-ptp-vf'
Merge branch '100GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/nex t-queue
Merge branch 'mctp-core-updates'
Merge branch 'SO_RESEVED_MEM'
Merge branch 'snmp-optimizations'
Merge tag 'mlx5-fixes-2021-09-30' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'mctp-kunit-tests'
sparc: add SO_RESERVE_MEM definition.
Revert "Merge branch 'mctp-kunit-tests'"
Merge branch 'ravb-gigabit'
Merge branch 'ionic-cleanups'
Merge branch 'ocelot-vlan'
Merge branch 'hw_addr_set'
Merge branch 'mctp-kunit-tests'
Merge branch 'ipv6-ioam-encap'
Merge branch 'qed-new-fw'
Merge branch 'phy-10g-mode-helper'
sparc: Fix typo.
Merge tag 'mlx5-updates-2021-10-04' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'mlx4-const-dev_addr'
Merge branch 'RTL8366RB-enhancements'
Merge branch 'nfc-pn533-const'
Merge branch 'dev_addr-fw-helpers'
Merge tag 'wireless-drivers-next-2021-10-07' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next
Merge branch '100GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
Merge branch 'dev_addr-helpers'
Merge branch 'ip6gre-tests'
Merge branch 'enetc-swtso'
Merge branch 'netdev-name-in-use'
Merge branch 'dev_addr-direct-writes'
Merge branch 'ionic-vlanid-mgmt'
Merge branch 'net-use-helpers'
Merge branch 'gve-improvements'
Merge branch '100GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/nex t-queue
Merge branch 'mlxsw-ECN-mirroring'
Merge branch 'Managed-Neighbor-Entries'
Merge branch 'qca8337-improvements'
Merge branch 'L4S-style-ce_threshold_ect1-marking'
Merge branch 'dpaa2-irq-coalescing'
Merge branch 'mptcp-fixes'
Merge branch '100GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
Merge tag 'mlx5-updates-2021-10-15' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'dev_addr-conversions-part-1'
Merge branch 'smc-rv23'
Merge branch 'remove-qdisc-running-counter'
Merge branch 'uniphier-nx1'
Merge branch 'rtl8365mb-vc-support'
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next
Merge branch '40GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
Merge tag 'mlx5-updates-2021-10-18' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'mlxsw-multi-level-qdisc-offload'
Merge branch 'dev_addr-conversions-part-two'
Merge branch 'eth_hw_addr_gen-for-switches'
Merge branch 'sja1105-next'
Merge branch 'dev_addr-conversions-part-three'
Merge branch '100GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
Merge branch 'mscc-ocelot-all-ports-vlan-untagged-egress'
Merge branch '100GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
Merge branch 'dsa_to_port-loops'
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
ice: Nuild fix.
Merge branch 'dsa-rtnl'
Merge branch 'dev_addr-dont-write'
Merge tag 'linux-can-next-for-5.16-20211024' of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next
Revert "Merge branch 'dsa-rtnl'"
Merge branch 'dsa-rtnl'
Merge branch 's390-qeth-next'
Merge branch 'hns3-next'
Merge branch 'qca8081-phy-driver'
Merge branch 'mlxsw-selftests-updates'
Merge branch 'gve-jumbo-frame'
Merge tag 'wireless-drivers-next-2021-10-25' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next
Merge tag 'mlx5-updates-2021-10-25' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'netfilter-vrf-rework'
Merge branch 'mlxsw-rif-mac-prefixes'
Merge branch 'tcp_stream_alloc_skb'
Merge branch 'dsa-isolation-prep'
Merge branch 'phy-supported-interfaces-bitmap'
Merge tag 'mlx5-updates-2021-10-26' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'mvneta-phylink'
Merge branch 'br-fdb-refactoring'
Merge branch 'tcp-tx-side-cleanups'
Merge branch 'mvpp2-phylink'
Merge tag 'mlx5-net-next-5.15-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'octeontx2-debugfs-updates'
Merge branch 'bnxt_en-devlink'
Merge branch 'sctp-plpmtud-fixes'
Merge branch '100GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
Merge branch 'eth_hw_addr_set'
Merge branch 'MCTP-flow-support'
Merge branch 'nfp-fixes'
Merge tag 'mlx5-updates-2021-10-29' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next
Merge branch '100GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
Merge branch 'SO_MARK-routing'
Merge branch 'mptcp-selftests'
Merge branch 'mana-misc'
Merge branch 'devlink-locking'
Merge branch 'netdevsim-device-and-bus'
Merge branch 'amt-driver'
Merge branch 'SMC-tracepoints'
David Yang (1):
samples/bpf: Fix application of sizeof to pointer
Davide Caratti (1):
net/sched: sch_ets: properly init all active DRR list handles
Deren Wu (4):
mt76: mt7921: Fix out of order process by invalid event pkt
mt76: mt7921: Add mt7922 support
mt76: mt7921: fix dma hang in rmmod
mt76: mt7921: add delay config for sched scan
Desmond Cheong Zhi Xi (2):
Bluetooth: call sock_hold earlier in sco_conn_del
Bluetooth: fix init and cleanup of sco_conn.timeout_work
Dexuan Cui (4):
net: mana: Fix the netdev_err()'s vPort argument in mana_init_port()
net: mana: Report OS info to the PF driver
net: mana: Improve the HWC error handling
net: mana: Support hibernation and kexec
Dima Chumak (2):
net/mlx5e: Enable TC offload for egress MACVLAN
net/mlx5e: Enable TC offload for ingress MACVLAN
Dinghao Liu (1):
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
Dongliang Mu (1):
can: xilinx_can: xcan_remove(): remove redundant netif_napi_del()
Doug Berger (4):
net: bcmgenet: remove netif_carrier_off from adjust_link
net: bcmgenet: remove old link state values
net: bcmgenet: pull mac_config from adjust_link
net: bcmgenet: add support for ethtool flow control
Dust Li (1):
ipvs: add sysctl_run_estimation to support disable estimation
Edwin Peer (14):
bnxt_en: refactor printing of device info
bnxt_en: refactor cancellation of resource reservations
bnxt_en: implement devlink dev reload driver_reinit
bnxt_en: implement devlink dev reload fw_activate
bnxt_en: add enable_remote_dev_reset devlink parameter
bnxt_en: improve error recovery information messages
bnxt_en: remove fw_reset devlink health reporter
bnxt_en: consolidate fw devlink health reporters
bnxt_en: improve fw diagnose devlink health messages
bnxt_en: Refactor coredump functions
bnxt_en: move coredump functions into dedicated file
bnxt_en: extract coredump command line from current task
bnxt_en: implement dump callback for fw health reporter
bnxt_en: implement firmware live patching
Emmanuel Grumbach (2):
nl80211: vendor-cmd: intel: add more details for IWL_MVM_VENDOR_CMD_HOST_GET_OWNERSHIP
iwlwifi: mvm: fix some kerneldoc issues
Eric Dumazet (36):
tcp: remove sk_{tr}x_skb_cache
net: snmp: inline snmp_get_cpu_field()
mptcp: use batch snmp operations in mptcp_seq_show()
net/mlx4_en: avoid one cache line miss to ring doorbell
tcp: switch orphan_count to bare per-cpu counters
net: add skb_get_dsfield() helper
fq_codel: implement L4S style ce_threshold_ect1 marking
net: sched: fix logic error in qdisc_run_begin()
net: sched: remove one pair of atomic operations
tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
net: avoid dirtying sk->sk_napi_id
net: avoid dirtying sk->sk_rx_queue_mapping
net: annotate accesses to sk->sk_rx_queue_mapping
ipv6: annotate data races around np->min_hopcount
ipv6: guard IPV6_MINHOPCOUNT with a static key
ipv4: annotate data races arount inet->min_ttl
ipv4: guard IP_MINTTL with a static key
ipv6/tcp: small drop monitor changes
net: annotate data-race in neigh_output()
tcp: rename sk_stream_alloc_skb
tcp: use MAX_TCP_HEADER in tcp_stream_alloc_skb
tcp: remove unneeded code from tcp_stream_alloc_skb()
bpf: Avoid races in __bpf_prog_run() for 32bit arches
bpf: Fixes possible race in update_prog_stats() for 32bit arches
bpf: Use u64_stats_t in struct bpf_prog_stats
inet: remove races in inet{6}_getname()
tcp: remove dead code from tcp_sendmsg_locked()
tcp: cleanup tcp_remove_empty_skb() use
tcp: remove dead code from tcp_collapse_retrans()
tcp: no longer set skb->reserved_tailroom
tcp: factorize ip_summed setting
tcp: do not clear skb->csum if already zero
tcp: do not clear TCP_SKB_CB(skb)->sacked if already zero
net: cleanup __sk_stream_memory_free()
bpf: Add missing map_delete_elem method to bloom filter map
Erik Ekman (1):
sfc: Fix reading non-legacy supported link modes
Fabio Estevam (1):
ath10k: sdio: Add missing BH locking around napi_schdule()
Felix Fietkau (5):
mt76: mt7615: fix skb use-after-free on mac reset
mt76: mt7915: fix WMM index on DBDC cards
mt76: disable BH around napi_schedule() calls
mt76: do not access 802.11 header in ccmp check for 802.3 rx skbs
mt76: connac: fix unresolved symbols when CONFIG_PM is unset
Florian Fainelli (12):
net: phy: broadcom: Enable 10BaseT DAC early wake
net: phy: bcm7xxx: Add EPHY entry for 72165
net: bcmgenet: Patch PHY interface for dedicated PHY driver
net: phy: broadcom: Add IDDQ-SR mode
net: phy: broadcom: Wire suspend/resume for BCM50610 and BCM50610M
net: phy: broadcom: Utilize appropriate suspend for BCM54810/11
net: bcmgenet: Request APD, DLL disable and IDDQ-SR
net: dsa: bcm_sf2: Request APD, DLL disable and IDDQ-SR
net: phy: broadcom: Fix PHY_BRCM_IDDQ_SUSPEND definition
net: phy: bcm7xxx: Add EPHY entry for 7712
dt-bindings: net: bcmgenet: Document 7712 binding
net: bcmgenet: Add support for 7712 16nm internal EPHY
Florian Westphal (19):
mptcp: add new mptcp_fill_diag helper
mptcp: add MPTCP_INFO getsockopt
mptcp: add MPTCP_TCPINFO getsockopt support
mptcp: add MPTCP_SUBFLOW_ADDRS getsockopt support
selftests: mptcp: add mptcp getsockopt test cases
mptcp: do not shrink snd_nxt when recovering
mptcp: remove tx_pending_data
mptcp: re-arm retransmit timer if data is pending
netlink: remove netlink_broadcast_filtered
netfilter: iptables: allow use of ipt_do_table as hookfn
netfilter: arp_tables: allow use of arpt_do_table as hookfn
netfilter: ip6tables: allow use of ip6t_do_table as hookfn
netfilter: ebtables: allow use of ebt_do_table as hookfn
netfilter: ipvs: prepare for hook function reduction
netfilter: ipvs: remove unneeded output wrappers
netfilter: ipvs: remove unneeded input wrappers
netfilter: ipvs: merge ipv4 + ipv6 icmp reply handlers
netfilter: conntrack: skip confirmation and nat hooks in postrouting for vrf
vrf: run conntrack only in context of lower/physdev for locally generated packets
Francesco Dolcini (1):
net: phy: micrel: ksz9131 led errata workaround
Geert Uytterhoeven (4):
dt-bindings: net: renesas,ether: Update example to match reality
dt-bindings: net: renesas,etheravb: Update example to match reality
can: rcar: drop unneeded ARM dependency
wlcore: spi: Use dev_err_probe()
Geetha sowjanya (2):
octeontx2-pf: Use hardware register for CQE count
octeontx2-pf: Add XDP support to netdev PF
Geliang Tang (3):
mptcp: use OPTIONS_MPTCP_MPC
mptcp: drop unused sk in mptcp_push_release
selftests: mptcp: fix proto type in link_failure tests
Gokul Sivakumar (2):
samples: bpf: Convert route table network order fields into readable format
samples: bpf: Convert ARP table network order fields into readable format
Grant Seltzer (3):
libbpf: Add sphinx code documentation comments
libbpf: Add doc comments in libbpf.h
libbpf: Add API documentation convention guidelines
Gregory Greenman (2):
iwlwifi: mvm: improve log when processing CSA
iwlwifi: mvm: update RFI TLV
Grishma Kotecha (2):
ice: implement low level recipes functions
ice: allow adding advanced rules
Grzegorz Nitka (5):
ice: set and release switchdev environment
ice: introduce new type of VSI for switchdev
ice: enable/disable switchdev when managing VFs
ice: rebuild switchdev when resetting all VFs
ice: switchdev slow path
Guangbin Huang (7):
net: hns3: PF support get unicast MAC address space assigned by firmware
net: hns3: PF support get multicast MAC address space assigned by firmware
net: hns3: modify mac statistics update process for compatibility
net: hns3: device specifications add number of mac statistics
net: hns3: add support pause/pfc durations for mac statistics
net: hns3: modify functions of converting speed ability to ethtool link mode
net: hns3: add update ethtool advertised link modes for FIBRE port when autoneg off
Guenter Roeck (1):
net: macb: Fix mdio child node detection
Guo-Feng Fan (2):
rtw88: 8821c: support RFE type4 wifi NIC
rtw88: 8821c: correct 2.4G tx power for type 2/4 NIC
Gustavo A. R. Silva (17):
ath11k: Replace one-element array with flexible-array member
ethtool: ioctl: Use array_size() helper in copy_{from,to}_user()
net: bridge: Use array_size() helper in copy_to_user()
net/mlx4: Use array_size() helper in copy_to_user()
gve: Use kvcalloc() instead of kvzalloc()
net_sched: Use struct_size() and flex_array_size() helpers
net/mlx5: Use kvcalloc() instead of kvzalloc()
net/mlx5: Use struct_size() helper in kvzalloc()
net/mlx5e: Use array_size() helper
net: sched: Use struct_size() helper in kvmalloc()
net: broadcom: bcm4908_enet: use kcalloc() instead of kzalloc()
net: mana: Use kcalloc() instead of kzalloc()
net: stmmac: selftests: Use kcalloc() instead of kzalloc()
ethernet: ti: cpts: Use devm_kcalloc() instead of devm_kzalloc()
ath11k: Use kcalloc() instead of kzalloc()
ice: use devm_kcalloc() instead of devm_kzalloc()
netfilter: ebtables: use array_size() helper in copy_{from,to}_user()
Gyeongun Kang (1):
gtp: use skb_dst_update_pmtu_no_confirm() instead of direct call
Gyumin Hwang (1):
net:dev: Change napi_gro_complete return type to void
Haiyang Zhang (1):
net: mana: Allow setting the number of queues while the NIC is down
Hans de Goede (3):
Bluetooth: hci_h5: Fix (runtime)suspend issues on RTL8723BS HCIs
Bluetooth: hci_h5: directly return hci_uart_register_device() ret-val
brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
Hao Chen (2):
net: e1000e: solve insmod 'Unknown symbol mutex_lock' error
net: hns3: debugfs add support dumping page pool info
Hariprasad Kelam (3):
octeontx2-pf: CN10K: Hide RPM stats over ethtool
octeontx2-af: verify CQ context updates
octeontx2-af: cn10k: RPM hardware timestamp configuration
Harman Kalra (2):
octeontx2-af: Reset PTP config in FLR handler
octeontx2-af: cn10k: debugfs for dumping LMTST map table
Hauke Mehrtens (1):
mt76: Print error message when reading EEPROM from mtd failed
Heiko Carstens (6):
s390/ctcm: remove incorrect kernel doc indicators
s390/lcs: remove incorrect kernel doc indicators
s390/netiucv: remove incorrect kernel doc indicators
s390/qeth: fix various format strings
s390/qeth: add __printf format attribute to qeth_dbf_longtext
s390/qeth: fix kernel doc comments
Heiner Kallweit (3):
r8169: remove support for chip version RTL_GIGA_MAC_VER_27
ethtool: prevent endless loop if eeprom size is smaller than announced
sky2: Stop printing VPD info to debugfs
Hengqi Chen (12):
libbpf: Support uniform BTF-defined key/value specification across all BPF maps
selftests/bpf: Use BTF-defined key/value for map definitions
libbpf: Deprecate bpf_{map,program}__{prev,next} APIs since v0.7
selftests/bpf: Switch to new bpf_object__next_{map,program} APIs
libbpf: Deprecate bpf_object__unload() API since v0.6
bpf: Add bpf_skc_to_unix_sock() helper
selftests/bpf: Test bpf_skc_to_unix_sock() helper
libbpf: Add btf__type_cnt() and btf__raw_data() APIs
perf bpf: Switch to new btf__raw_data API
tools/resolve_btfids: Switch to new btf__type_cnt API
bpftool: Switch to new btf__type_cnt API
selftests/bpf: Switch to new btf__type_cnt/btf__raw_data APIs
Hilda Wu (1):
Bluetooth: btrtl: Ask ic_info to drop firmware
Horatiu Vultur (1):
net: phy: micrel: Add support for LAN8804 PHY
Hou Tao (7):
bpf: Support writable context for bare tracepoint
libbpf: Support detecting and attaching of writable tracepoint program
bpf/selftests: Add test for writable bare tracepoint
bpf: Factor out a helper to prepare trampoline for struct_ops prog
bpf: Factor out helpers for ctx access checking
bpf: Add dummy BPF STRUCT_OPS for test purpose
selftests/bpf: Add test cases for struct_ops prog
Huazhong Tan (1):
net: hns3: add debugfs support for interrupt coalesce
Ido Schimmel (21):
mlxsw: core: Initialize switch driver last
mlxsw: core: Remove mlxsw_core_is_initialized()
mlxsw: core_env: Defer handling of module temperature warning events
mlxsw: core_env: Convert 'module_info_lock' to a mutex
mlxsw: spectrum: Do not return an error in ndo_stop()
mlxsw: spectrum: Do not return an error in mlxsw_sp_port_module_unmap()
mlxsw: Track per-module port status
mlxsw: reg: Add fields to PMAOS register
mlxsw: Make PMAOS pack function more generic
mlxsw: Add support for transceiver modules reset
mlxsw: spectrum_router: Add trap adjacency entry upon first nexthop group
mlxsw: spectrum_router: Start using new trap adjacency entry
ethtool: Add ability to control transceiver modules' power mode
mlxsw: reg: Add Port Module Memory Map Properties register
mlxsw: reg: Add Management Cable IO and Notifications register
mlxsw: Add ability to control transceiver modules' power mode
ethtool: Add transceiver module extended state
mlxsw: Add support for transceiver module extended state
mlxsw: item: Annotate item helpers with '__maybe_unused'
selftests: mlxsw: Use permanent neighbours instead of reachable ones
selftests: mlxsw: Reduce test run time
Ilan Peer (1):
iwlwifi: mvm: Use all Rx chains for roaming scan
Ilya Leoshkevich (11):
selftests/bpf: Skip verifier tests that fail to load with ENOTSUPP
selftests/bpf: Use cpu_number only on arches that have it
libbpf: Fix dumping big-endian bitfields
libbpf: Fix dumping non-aligned __int128
libbpf: Fix ptr_is_aligned() usages
libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
libbpf: Use __BYTE_ORDER__
selftests/bpf: Use __BYTE_ORDER__
samples: seccomp: Use __BYTE_ORDER__
selftests/seccomp: Use __BYTE_ORDER__
selftests/bpf: Fix test_core_reloc_mods on big-endian machines
Ioana Ciornei (8):
net: enetc: declare NETIF_F_HW_CSUM and do it in software
net: enetc: add support for software TSO
net: enetc: include ip6_checksum.h for csum_ipv6_magic
soc: fsl: dpio: extract the QBMAN clock frequency from the attributes
soc: fsl: dpio: add support for irq coalescing per software portal
net: dpaa2: add support for manual setup of IRQ coalesing
soc: fsl: dpio: add Net DIM integration
net: dpaa2: add adaptive interrupt coalescing
Ivan Vecera (1):
net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
Jacob Keller (2):
ice: refactor devlink getter/fallback functions to void
devlink: report maximum number of snapshots with regions
Jakub Kicinski (216):
net: sched: update default qdisc visibility after Tx queue cnt changes
netdevsim: add ability to change channel count
selftests: net: test ethtool -L vs mq
Revert "net: wwan: iosm: firmware flashing and coredump collection"
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
Merge branch 'net-dsa-b53-clean-up-cpu-imp-ports'
Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
net: sched: move and reuse mq_change_real_num_tx()
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
net: make napi_disable() symmetric with enable
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
Merge tag 'mlx5-updates-2021-09-30' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
arch: use eth_hw_addr_set()
net: use eth_hw_addr_set()
ethernet: use eth_hw_addr_set()
net: usb: use eth_hw_addr_set()
net: use eth_hw_addr_set() instead of ether_addr_copy()
ethernet: use eth_hw_addr_set() instead of ether_addr_copy()
net: usb: use eth_hw_addr_set() instead of ether_addr_copy()
ethernet: chelsio: use eth_hw_addr_set()
ethernet: s2io: use eth_hw_addr_set()
fddi: use eth_hw_addr_set()
ethernet: use eth_hw_addr_set() - casts
ethernet: ehea: add missing cast
mlx4: replace mlx4_mac_to_u64() with ether_addr_to_u64()
mlx4: replace mlx4_u64_to_mac() with u64_to_ether_addr()
mlx4: remove custom dev_addr clearing
mlx4: constify args for const dev_addr
ethernet: use eth_hw_addr_set() for dev->addr_len cases
net: usb: use eth_hw_addr_set() for dev->addr_len cases
Merge tag 'for-net-next-2021-10-01' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next
Merge branch 'ethtool-add-ability-to-control-transceiver-modules-power-mode'
Merge branch 'add-mdiobus_modify_changed-helper'
of: net: move of_net under net/
of: net: add a helper for loading netdev->dev_addr
ethernet: use of_get_ethdev_address()
device property: move mac addr helpers to eth.c
eth: fwnode: change the return type of mac address helpers
eth: fwnode: remove the addr len from mac helpers
eth: fwnode: add a helper for loading netdev->dev_addr
ethernet: use device_get_ethdev_address()
ethernet: make more use of device_get_ethdev_address()
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
ethernet: un-export nvmem_get_mac_address()
eth: platform: add a helper for loading netdev->dev_addr
ethernet: use platform_get_ethdev_address()
ethernet: forcedeth: remove direct netdev->dev_addr writes
ethernet: tg3: remove direct netdev->dev_addr writes
ethernet: tulip: remove direct netdev->dev_addr writes
ethernet: sun: remove direct netdev->dev_addr writes
ethernet: 8390: remove direct netdev->dev_addr writes
net: use dev_addr_set()
Merge branch 'nfc-minor-printk-cleanup'
tulip: fix setting device address from rom
ethernet: tulip: avoid duplicate variable name on sparc
Merge branch 'devlink-reload-simplification'
Merge branch 'add-functional-support-for-gigabit-ethernet-driver'
ax25: constify dev_addr passing
rose: constify dev_addr passing
llc/snap: constify dev_addr passing
ipv6: constify dev_addr passing
tipc: constify dev_addr passing
decnet: constify dev_addr passing
Merge branch 'net-constify-dev_addr-passing-for-protocols'
netdevice: demote the type of some dev_addr_set() helpers
hamradio: use dev_addr_set() for setting device address
ip: use dev_addr_set() in tunnels
Merge branch 'net-use-dev_addr_set-in-hamradio-and-ip-tunnels'
net: remove single-byte netdev->dev_addr writes
Merge branch 'mlxsw-show-per-band-ecn-marked-counter-on-qdisc'
Merge branch '100GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
ethernet: constify references to netdev->dev_addr in drivers
ethernet: make eth_hw_addr_random() use dev_addr_set()
ethernet: make use of eth_hw_addr_random() where appropriate
ethernet: manually convert memcpy(dev_addr,..., sizeof(addr))
ethernet: ibm/emac: use of_get_ethdev_address() to load dev_addr
ethernet: replace netdev->dev_addr assignment loops
ethernet: replace netdev->dev_addr 16bit writes
Merge branch 'ethernet-more-netdev-dev_addr-write-removals'
ethernet: remove random_ether_addr()
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
Merge branch 'minor-managed-neighbor-follow-ups'
Merge branch 'octeontx2-af-miscellaneous-changes-for-cpt'
ethernet: adaptec: use eth_hw_addr_set()
ethernet: aeroflex: use eth_hw_addr_set()
ethernet: alteon: use eth_hw_addr_set()
ethernet: amd: use eth_hw_addr_set()
ethernet: aquantia: use eth_hw_addr_set()
ethernet: bnx2x: use eth_hw_addr_set()
ethernet: bcmgenet: use eth_hw_addr_set()
ethernet: enic: use eth_hw_addr_set()
ethernet: ec_bhf: use eth_hw_addr_set()
ethernet: enetc: use eth_hw_addr_set()
ethernet: ibmveth: use ether_addr_to_u64()
ethernet: ixgb: use eth_hw_addr_set()
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
ethernet: use eth_hw_addr_set() in unmaintained drivers
mlx5: prevent 64bit divide
ethernet: mv643xx: use eth_hw_addr_set()
ethernet: sky2/skge: use eth_hw_addr_set()
ethernet: lpc: use eth_hw_addr_set()
ethernet: netxen: use eth_hw_addr_set()
ethernet: r8169: use eth_hw_addr_set()
ethernet: renesas: use eth_hw_addr_set()
ethernet: rocker: use eth_hw_addr_set()
ethernet: sxgbe: use eth_hw_addr_set()
ethernet: sis190: use eth_hw_addr_set()
ethernet: sis900: use eth_hw_addr_set()
ethernet: smc91x: use eth_hw_addr_set()
ethernet: smsc: use eth_hw_addr_set()
ethernet: add a helper for assigning port addresses
ethernet: ocelot: use eth_hw_addr_gen()
ethernet: prestera: use eth_hw_addr_gen()
ethernet: fec: use eth_hw_addr_gen()
ethernet: mlxsw: use eth_hw_addr_gen()
ethernet: sparx5: use eth_hw_addr_gen()
Merge branch 'net-sched-fixes-after-recent-qdisc-running-changes'
wireless: use eth_hw_addr_set()
wireless: use eth_hw_addr_set() instead of ether_addr_copy()
wireless: use eth_hw_addr_set() for dev->addr_len cases
ath6kl: use eth_hw_addr_set()
wil6210: use eth_hw_addr_set()
atmel: use eth_hw_addr_set()
brcmfmac: prepare for const netdev->dev_addr
airo: use eth_hw_addr_set()
ipw2200: prepare for const netdev->dev_addr
hostap: use eth_hw_addr_set()
wilc1000: use eth_hw_addr_set()
ray_cs: use eth_hw_addr_set()
wl3501_cs: use eth_hw_addr_set()
zd1201: use eth_hw_addr_set()
ethernet: netsec: use eth_hw_addr_set()
ethernet: stmmac: use eth_hw_addr_set()
ethernet: tehuti: use eth_hw_addr_set()
ethernet: tlan: use eth_hw_addr_set()
ethernet: via-rhine: use eth_hw_addr_set()
ethernet: via-velocity: use eth_hw_addr_set()
batman-adv: prepare for const netdev->dev_addr
mac802154: use dev_addr_set()
mac802154: use dev_addr_set() - manual
batman-adv: use eth_hw_addr_set() instead of ether_addr_copy()
wireless: mac80211_hwsim: use eth_hw_addr_set()
mac80211: use eth_hw_addr_set()
cfg80211: prepare for const netdev->dev_addr
Merge branch 'enetc-trivial-ptp-one-step-tx-timestamping-cleanups'
Merge branch 'ax88796c-spi-ethernet-adapter'
mlx5: fix build after merge
net: xen: use eth_hw_addr_set()
usb: smsc: use eth_hw_addr_set()
net: qmi_wwan: use dev_addr_mod()
net: usb: don't write directly to netdev->dev_addr
fddi: defxx,defza: use dev_addr_set()
fddi: skfp: constify and use dev_addr_set()
net: fjes: constify and use eth_hw_addr_set()
net: hippi: use dev_addr_set()
net: s390: constify and use eth_hw_addr_set()
net: plip: use eth_hw_addr_set()
net: sb1000,rionet: use eth_hw_addr_set()
net: hldc_fr: use dev_addr_set()
Merge branch 'net-don-t-write-directly-to-netdev-dev_addr'
Merge tag 'mac80211-next-for-net-next-2021-10-21' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next
Merge tag 'wireless-drivers-next-2021-10-22' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next
Merge branch 'delete-impossible-devlink-notifications'
net: core: constify mac addrs in selftests
net: rtnetlink: use __dev_addr_set()
net: phy: constify netdev->dev_addr references
net: bonding: constify and use dev_addr_set()
net: hsr: get ready for const netdev->dev_addr
net: caif: get ready for const netdev->dev_addr
net: drivers: get ready for const netdev->dev_addr
net: atm: use address setting helpers
fddi: defza: add missing pointer type cast
bluetooth: use eth_hw_addr_set()
bluetooth: use dev_addr_set()
Merge branch 'bluetooth-don-t-write-directly-to-netdev-dev_addr'
net/mlx5e: don't write directly to netdev->dev_addr
Merge branch 'tcp-receive-path-optimizations'
Merge branch 'small-fixes-for-true-expression-checks'
net/mlx5: remove the recent devlink params
Merge branch 'two-reverts-to-calm-down-devlink-discussion'
staging: use of_get_ethdev_address()
net: thunderbolt: use eth_hw_addr_set()
Merge branch 'mptcp-rework-fwd-memory-allocation-and-one-cleanup'
media: use eth_hw_addr_set()
firewire: don't write directly to netdev->dev_addr
mpt fusion: use dev_addr_set()
net: virtio: use eth_hw_addr_set()
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
Merge branch 'mlxsw-offload-root-tbf-as-port-shaper'
Merge branch 'code-movement-to-br_switchdev-c'
net: sgi-xp: use eth_hw_addr_set()
net: um: use eth_hw_addr_set()
net: xtensa: use eth_hw_addr_set()
devlink: make all symbols GPL-only
Merge tag 'wireless-drivers-next-2021-10-29' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next
netdevsim: remove max_vfs dentry
Merge branch '40GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
Merge branch '1GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
udp6: allow SO_MARK ctrl msg to affect routing
selftests: udp: test for passing SO_MARK as cmsg
ethtool: push the rtnl_lock into dev_ethtool()
ethtool: handle info/flash data copying outside rtnl_lock
devlink: expose get/put functions
ethtool: don't drop the rtnl_lock half way thru the ioctl
netdevsim: take rtnl_lock when assigning num_vfs
netdevsim: move vfconfig to nsim_dev
netdevsim: move details of vf config to dev
netdevsim: move max vf config to dev
netdevsim: rename 'driver' entry points
netdevsim: fix uninit value in nsim_drv_configure_vfs()
Merge branch 'accurate-memory-charging-for-msg_zerocopy'
Merge branch 'make-neighbor-eviction-controllable-by-userspace'
Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
Revert "net: avoid double accounting for pure zerocopy skbs"
James Prestwood (4):
brcmfmac: fix incorrect error prints
net: arp: introduce arp_evict_nocarrier sysctl parameter
net: ndisc: introduce ndisc_evict_nocarrier sysctl parameter
selftests: net: add arp_ndisc_evict_nocarrier
Jan Kundrát (1):
igb: unbreak I2C bit-banging on i350
Jason Xing (1):
ixgbe: let the xdpdrv work with more than 64 cpus
Jean Sacren (10):
net: tg3: fix obsolete check of !err
net: tg3: fix redundant check of true expression
net: qed_debug: fix check of false (grc_param < 0) expression
net: macvtap: fix template string argument of device_create() call
net: ipvtap: fix template string argument of device_create() call
net: qed_ptp: fix check of true !rc expression
net: qed_dev: fix check of true !rc expression
net: netxen: fix code indentation
net: bareudp: fix duplicate checks of data[] expressions
net: vmxnet3: remove multiple false checks in vmxnet3_ethtool.c
Jeff Guo (1):
ice: Fix macro name for IPv4 fragment flag
Jeremy Kerr (21):
mctp: Allow local delivery to the null EID
mctp: locking, lifetime and validity changes for sk_keys
mctp: Add refcounts to mctp_dev
mctp: Implement a timeout for tags
mctp: Add tracepoints for tag/key handling
mctp: Do inits as a subsys_initcall
doc/mctp: Add a little detail about kernel internals
mctp: Add initial test structure and fragmentation test
mctp: Add test utils
mctp: Add packet rx tests
mctp: Add route input to socket tests
mctp: Add input reassembly tests
mctp: Add initial test structure and fragmentation test
mctp: Add test utils
mctp: Add packet rx tests
mctp: Add route input to socket tests
mctp: Add input reassembly tests
mctp: Implement extended addressing
mctp: Return new key from mctp_alloc_local_tag
mctp: Add flow extension to skb
mctp: Pass flow data & flow release events to drivers
Jesse Brandeburg (4):
ice: update dim usage and moderation
ice: fix rate limit update after coalesce change
ice: fix software generating extra interrupts
net-core: use netdev_* calls for kernel messages
Jiapeng Chong (1):
net: phy: Fix unsigned comparison with less than zero
Jiaran Zhang (1):
net: hns3: add error recovery module and type for himac
Jiasheng Jiang (2):
rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
hv_netvsc: Add comment of netvsc_xdp_xmit()
Jie Meng (3):
bpf,x64 Emit IMUL instead of MUL for x86-64
bpf, x64: Save bytes for DIV by reducing reg copies
bpf, x64: Factor out emission of REX byte in more cases
Jiri Benc (1):
seltests: bpf: test_tunnel: Use ip neigh
Jiri Olsa (5):
selftest/bpf: Switch recursion test to use htab_map_delete_elem
selftests/bpf: Fix perf_buffer test on system with offline cpus
selftests/bpf: Fix possible/online index mismatch in perf_buffer test
selftests/bpf: Use nanosleep tracepoint in perf buffer test
kbuild: Unify options for BTF generation for vmlinux and modules
Jiri Pirko (8):
mlxsw: spectrum: Bump minimum FW version to xx.2008.3326
mlxsw: spectrum: Move port module mapping before core port init
mlxsw: spectrum: Move port SWID set before core port init
mlxsw: reg: Add Port Local port to Label Port mapping Register
mlxsw: spectrum: Use PLLP to get front panel number and split number
mlxsw: reg: Add Port Module To local DataBase Register
mlxsw: spectrum: Use PMTDB register to obtain split info
mlxsw: reg: Remove PMTM register
Joanne Koong (8):
bpf: Add bloom filter map implementation
libbpf: Add "map_extra" as a per-map-type extra flag
selftests/bpf: Add bloom filter map test cases
bpf/benchs: Add benchmark tests for bloom filter throughput + false positive
bpf/benchs: Add benchmarks for comparing hashmap lookups w/ vs. w/out bloom filter
bpf: Bloom filter map naming fixups
bpf: Add alignment padding for "map_extra" + consolidate holes
selftests/bpf: Add bloom map success test for userspace calls
Joe Burton (1):
libbpf: Deprecate bpf_objects_list
Johan Almbladh (33):
bpf/tests: Allow different number of runs per test case
bpf/tests: Reduce memory footprint of test suite
bpf/tests: Add exhaustive tests of ALU shift values
bpf/tests: Add exhaustive tests of ALU operand magnitudes
bpf/tests: Add exhaustive tests of JMP operand magnitudes
bpf/tests: Add staggered JMP and JMP32 tests
bpf/tests: Add exhaustive test of LD_IMM64 immediate magnitudes
bpf/tests: Add test case flag for verifier zero-extension
bpf/tests: Add JMP tests with small offsets
bpf/tests: Add JMP tests with degenerate conditional
bpf/tests: Expand branch conversion JIT test
bpf/tests: Add more BPF_END byte order conversion tests
bpf/tests: Fix error in tail call limit tests
bpf/tests: Add tail call limit test with external function call
bpf/tests: Add tests of BPF_LDX and BPF_STX with small sizes
bpf/tests: Add zero-extension checks in BPF_ATOMIC tests
bpf/tests: Add exhaustive tests of BPF_ATOMIC magnitudes
bpf/tests: Add tests to check source register zero-extension
bpf/tests: Add more tests for ALU and ATOMIC register clobbering
bpf/tests: Minor restructuring of ALU tests
bpf/tests: Add exhaustive tests of ALU register combinations
bpf/tests: Add exhaustive tests of BPF_ATOMIC register combinations
bpf/tests: Add test of ALU shifts with operand register aliasing
bpf/tests: Add test of LDX_MEM with operand aliasing
mips, uasm: Add workaround for Loongson-2F nop CPU errata
mips, bpf: Add eBPF JIT for 32-bit MIPS
mips, bpf: Add new eBPF JIT for 64-bit MIPS
mips, bpf: Add JIT workarounds for CPU errata
mips, bpf: Enable eBPF JITs
mips, bpf: Remove old BPF JIT implementations
mips, bpf: Fix Makefile that referenced a removed file
mips, bpf: Optimize loading of 64-bit constants
bpf, tests: Add more LD_IMM64 tests
Johan Hovold (7):
ath10k: fix control-message timeout
ath6kl: fix control-message timeout
ath10k: fix division by zero in send path
ath6kl: fix division by zero in send path
rtl8187: fix control-message timeouts
rsi: fix control-message timeout
mwifiex: fix division by zero in fw download path
Johannes Berg (50):
cfg80211: honour V=1 in certificate code generation
mac80211: reduce stack usage in debugfs
mac80211: mesh: clean up rx_bcn_presp API
mac80211: move CRC into struct ieee802_11_elems
mac80211: mlme: find auth challenge directly
mac80211: always allocate struct ieee802_11_elems
nl80211: don't put struct cfg80211_ap_settings on stack
mac80211: twt: don't use potentially unaligned pointer
cfg80211: always free wiphy specific regdomain
nl80211: don't kfree() ERR_PTR() value
iwlwifi: mvm: reset PM state on unsuccessful resume
iwlwifi: pnvm: don't kmemdup() more than we have
iwlwifi: pnvm: read EFI data only if long enough
iwlwifi: cfg: set low-latency-xtal for some integrated So devices
mac80211: fix memory leaks with element parsing
mac80211: fils: use cfg80211_find_ext_elem()
nl80211: use element finding functions
cfg80211: scan: use element finding functions in easy cases
mac80211: use ieee80211_bss_get_elem() in most places
cfg80211: fix kernel-doc for MBSSID EMA
iwlwifi: mvm: fix ieee80211_get_he_iftype_cap() iftype
iwlwifi: mvm: disable RX-diversity in powersave
iwlwifi: add vendor specific capabilities for some RFs
iwlwifi: add some missing kernel-doc in struct iwl_fw
iwlwifi: api: remove unused RX status bits
iwlwifi: remove MODULE_AUTHOR() statements
iwlwifi: remove contact information
iwlwifi: fix fw/img.c license statement
iwlwifi: api: fix struct iwl_wowlan_status_v7 kernel-doc
iwlwifi: mvm: correct sta-state logic for TDLS
iwlwifi: fw dump: add infrastructure for dump scrubbing
iwlwifi: parse debug exclude data from firmware file
iwlwifi: mvm: scrub key material in firmware dumps
iwlwifi: remove redundant iwl_finish_nic_init() argument
iwlwifi: mvm: remove session protection after auth/assoc
iwlwifi: allow rate-limited error messages
iwlwifi: mvm: reduce WARN_ON() in TX status path
iwlwifi: pcie: try to grab NIC access early
iwlwifi: mvm: set BT-coex high priority for 802.1X/4-way-HS
iwlwifi: pnvm: print out the version properly
iwlwifi: pcie: fix killer name matching for AX200
iwlwifi: pcie: remove duplicate entry
iwlwifi: pcie: refactor dev_info lookup
iwlwifi: pcie: remove two duplicate PNJ device entries
iwlwifi: pcie: simplify iwl_pci_find_dev_info()
iwlwifi: dump host monitor data when NIC doesn't init
iwlwifi: fw: uefi: add missing include guards
iwlwifi: mvm: d3: use internal data representation
iwlwifi: mvm: remove session protection on disassoc
iwlwifi: mvm: extend session protection on association
John Crispin (2):
nl80211: MBSSID and EMA support in AP mode
mac80211: MBSSID support in interface handling
John Fraker (1):
gve: Recover from queue stall due to missed IRQ
Jon Maxwell (1):
tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
Jonas Dreßler (16):
mwifiex: Small cleanup for handling virtual interface type changes
mwifiex: Use function to check whether interface type change is allowed
mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
mwifiex: Use helper function for counting interface types
mwifiex: Update virtual interface counters right after setting bss_type
mwifiex: Allow switching interface type from P2P_CLIENT to P2P_GO
mwifiex: Handle interface type changes from AP to STATION
mwifiex: Properly initialize private structure on interface type changes
mwifiex: Fix copy-paste mistake when creating virtual interface
mwifiex: Read a PCI register after writing the TX ring write pointer
mwifiex: Try waking the firmware until we get an interrupt
mwifiex: Don't log error on suspend if wake-on-wlan is disabled
mwifiex: Log an error on command failure during key-material upload
mwifiex: Fix an incorrect comment
mwifiex: Send DELBA requests according to spec
mwifiex: Deactive host sleep using HSCFG after it was activated manually
Jonathan Lemon (18):
ptp: ocp: parameterize the i2c driver used
ptp: ocp: Parameterize the TOD information display.
ptp: ocp: Skip I2C flash read when there is no controller.
ptp: ocp: Skip resources with out of range irqs
ptp: ocp: Report error if resource registration fails.
ptp: ocp: Add third timestamper
ptp: ocp: Add SMA selector and controls
ptp: ocp: Add IRIG-B and DCF blocks
ptp: ocp: Add IRIG-B output mode control
ptp: ocp: Add sysfs attribute utc_tai_offset
ptp: ocp: Separate the init and info logic
ptp: ocp: Add debugfs entry for timecard
ptp: ocp: Add NMEA output
ptp: ocp: Add second GNSS device
ptp: ocp: Enable 4th timestamper / PPS generator
ptp: ocp: Have FPGA fold in ns adjustment for adjtime.
ptp: ocp: Add timestamp window adjustment
docs: ABI: Add sysfs documentation for timecard
Jordan Kim (1):
gve: Allow pageflips on larger pages
Joseph Hwang (6):
Bluetooth: btusb: disable Intel link statistics telemetry events
Bluetooth: refactor set_exp_feature with a feature table
Bluetooth: Support the quality report events
Bluetooth: set quality report callback for Intel
Bluetooth: hci_qca: enable Qualcomm WCN399x for AOSP extension
Bluetooth: btrtl: enable Realtek 8822C/8852A to support AOSP extension
Joshua Roys (2):
net: mlx4: Add support for XDP_REDIRECT
net/mlx4_en: Add XDP_REDIRECT statistics
Juhee Kang (3):
bnxt: use netif_is_rxfh_configured instead of open code
hv_netvsc: use netif_is_bond_master() instead of open code
mlxsw: spectrum: use netif_is_macsec() instead of open code
Julian Wiedmann (6):
s390/qeth: improve trace entries for MAC address (un)registration
s390/qeth: remove .do_ioctl() callback from driver discipline
s390/qeth: move qdio's QAOB cache into qeth
s390/qeth: clarify remaining dev_kfree_skb_any() users
s390/qeth: don't keep track of Input Queue count
s390/qeth: update kerneldoc for qeth_add_hw_header()
Justin Iurman (4):
ipv6: ioam: Distinguish input and output for hop-limit
ipv6: ioam: Prerequisite patch for ioam6_iptunnel
ipv6: ioam: Add support for the ip6ip6 encapsulation
selftests: net: Test for the IOAM encapsulation with IPv6
Kalle Valo (8):
Merge ath-next from git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/ath.git
ath11k: fix m68k and xtensa build failure in ath11k_peer_assoc_h_smps()
Merge ath-next from git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/ath.git
Merge tag 'mt76-for-kvalo-2021-10-20' of https://github.com/nbd168/wireless
Merge tag 'iwlwifi-next-for-kalle-2021-10-22' of git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next
Merge tag 'mt76-for-kvalo-2021-10-23' of https://github.com/nbd168/wireless
Merge ath-next from git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/ath.git
Merge tag 'iwlwifi-next-for-kalle-2021-10-28' of git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next
Karen Sornek (1):
iavf: Add helper function to go from pci_dev to adapter
Karsten Graul (13):
net/smc: add support for user defined EIDs
net/smc: keep static copy of system EID
net/smc: add generic netlink support for system EID
net/smc: save stack space and allocate smc_init_info
net/smc: prepare for SMC-Rv2 connection
net/smc: add SMC-Rv2 connection establishment
net/smc: add listen processing for SMC-Rv2
net/smc: add v2 format of CLC decline message
net/smc: retrieve v2 gid from IB device
net/smc: add v2 support to the work request layer
net/smc: extend LLC layer for SMC-Rv2
net/smc: add netlink support for SMC-Rv2
net/smc: stop links when their GID is removed
Karthikeyan Periyasamy (6):
ath11k: fix 4addr multicast packet tx
ath11k: Refactor spectral FFT bin size
ath11k: Introduce spectral hw configurable param
ath11k: Fix the spectral minimum FFT bin count
ath11k: Add spectral scan support for QCN9074
ath11k: Avoid "No VIF found" warning message
Kees Cook (2):
bpf: Replace "want address" users of BPF_CAST_CALL with BPF_CALL_IMM
bpf: Replace callers of BPF_CAST_CALL with proper function typedef
Kev Jackson (1):
bpf, xdp, docs: Correct some English grammar and spelling
Kevin Lo (2):
rtw89: remove duplicate register definitions
rtw89: fix return value in hfc_pub_cfg_chk
Khalid Manaa (6):
net/mlx5e: Rename TIR lro functions to TIR packet merge functions
net/mlx5e: Add handle SHAMPO cqe support
net/mlx5e: HW_GRO cqe handler implementation
net/mlx5e: Add HW_GRO statistics
net/mlx5e: Add HW-GRO offload
net/mlx5e: Prevent HW-GRO and CQE-COMPRESS features operate together
Kiran K (14):
Bluetooth: btintel: Fix boot address
Bluetooth: btintel: Read boot address irrespective of controller mode
Bluetooth: Enumerate local supported codec and cache details
Bluetooth: Add support for Read Local Supported Codecs V2
Bluetooth: btintel: Read supported offload use cases
Bluetooth: Allow querying of supported offload codecs over SCO socket
Bluetooth: btintel: Define callback to fetch data_path_id
Bluetooth: Allow setting of codec for HFP offload use case
Bluetooth: Add support for HCI_Enhanced_Setup_Synchronous_Connection command
Bluetooth: Configure codec for HFP offload use case
Bluetooth: btintel: Define a callback to fetch codec config data
Bluetooth: Add support for msbc coding format
Bluetooth: Add offload feature under experimental flag
Bluetooth: hci_vhci: Add support for offload codecs over SCO
Kiran Kumar K (4):
octeontx2-af: Limit KPU parsing for GTPU packets
octeontx2-af: Optimize KPU1 processing for variable-length headers
octeontx2-af: Adjust LA pointer for cpt parse header
octeontx2-af: Increase number of reserved entries in KPU
Kiran Patil (4):
ice: ndo_setup_tc implementation for PF
ice: Add infrastructure for mqprio support via ndo_setup_tc
ice: enable ndo_setup_tc support for mqprio_qdisc
ice: Add tc-flower filter support for channel
Krzysztof Kozlowski (19):
nfc: do not break pr_debug() call into separate lines
nfc: fdp: drop unneeded debug prints
nfc: pn533: drop unneeded debug prints
nfc: pn533: use dev_err() instead of pr_err()
nfc: pn544: drop unneeded debug prints
nfc: pn544: drop unneeded memory allocation fail messages
nfc: microread: drop unneeded memory allocation fail messages
nfc: mrvl: drop unneeded memory allocation fail messages
net: microchip: encx24j600: drop unneeded MODULE_ALIAS
zd1211rw: remove duplicate USB device ID
ar5512: remove duplicate USB device ID
rt2x00: remove duplicate USB device ID
nfc: drop unneeded debug prints
nfc: nci: replace GPLv2 boilerplate with SPDX
nfc: s3fwrn5: simplify dereferencing pointer to struct device
nfc: st-nci: drop unneeded debug prints
nfc: st21nfca: drop unneeded debug prints
nfc: trf7970a: drop unneeded debug prints
nfc: microread: drop unneeded debug prints
Kumar Kartikeya Dwivedi (20):
bpf: selftests: Fix fd cleanup in get_branch_snapshot
libbpf: Fix skel_internal.h to set errno on loader retval < 0
bpf: Introduce BPF support for kernel module function calls
bpf: Be conservative while processing invalid kfunc calls
bpf: btf: Introduce helpers for dynamic BTF set registration
tools: Allow specifying base BTF file in resolve_btfids
bpf: Enable TCP congestion control kfunc from modules
libbpf: Support kernel module function calls
libbpf: Resolve invalid weak kfunc calls with imm = 0, off = 0
libbpf: Update gen_loader to emit BTF_KIND_FUNC relocations
bpf: selftests: Add selftests for module kfunc support
bpf: Silence Coverity warning for find_kfunc_desc_btf
bpf: Add bpf_kallsyms_lookup_name helper
libbpf: Add typeless ksym support to gen_loader
libbpf: Add weak ksym support to gen_loader
libbpf: Ensure that BPF syscall fds are never 0, 1, or 2
libbpf: Use O_CLOEXEC uniformly when opening fds
selftests/bpf: Add weak/typeless ksym test for light skeleton
selftests/bpf: Fix fd cleanup in sk_lookup test
selftests/bpf: Fix memory leak in test_ima
Kunihiko Hayashi (2):
dt-bindings: net: ave: Add bindings for NX1 SoC
net: ethernet: ave: Add compatible string and SoC-dependent data for NX1 SoC
Kyungrok Chung (1):
net: make use of helper netif_is_bridge_master()
Lama Kayal (1):
net/mlx5: Warn for devlink reload when there are VFs alive
Larry Finger (1):
Bbluetooth: btusb: Add another Bluetooth part for Realtek 8852AE
Lars-Peter Clausen (1):
net: macb: ptp: Switch to gettimex64() interface
Lay, Kuan Loon (1):
net: phy: dp83867: introduce critical chip default init for non-of platform
Len Baker (6):
nfp: Prefer struct_size over open coded arithmetic
nl80211: prefer struct_size over open coded arithmetic
brcmfmac: Replace zero-length array with flexible array member
ice: Prefer kcalloc over open coded arithmetic
net: hns: Prefer struct_size over open coded arithmetic
net/mlx5: DR, Prefer kcalloc over open coded arithmetic
Leon Romanovsky (48):
net/mlx5: Publish and unpublish all devlink parameters at once
devlink: Delete not-used single parameter notification APIs
devlink: Delete not-used devlink APIs
devlink: Make devlink_register to be void
bnxt_en: Check devlink allocation and registration status
bnxt_en: Properly remove port parameter support
devlink: Delete not used port parameters APIs
devlink: Remove single line function obfuscations
ice: Delete always true check of PF pointer
qed: Don't ignore devlink allocation failures
devlink: Notify users when objects are accessible
bnxt_en: Register devlink instance at the end devlink configuration
liquidio: Overcome missing device lock protection in init/remove flows
dpaa2-eth: Register devlink instance at the end of probe
net: hinic: Open device for the user access when it is ready
ice: Open devlink when device is ready
octeontx2: Move devlink registration to be last devlink command
net/prestera: Split devlink and traps registrations to separate routines
net/mlx4: Move devlink_register to be the last initialization command
net/mlx5: Accept devlink user input after driver initialization complete
mlxsw: core: Register devlink instance last
net: mscc: ocelot: delay devlink registration to the end
nfp: Move delink_register to be last command
ionic: Move devlink registration to be last devlink command
qed: Move devlink registration to be last devlink command
net: ethernet: ti: Move devlink registration to be last devlink command
netdevsim: Move devlink registration to be last devlink command
net: wwan: iosm: Move devlink_register to be last devlink command
ptp: ocp: Move devlink registration to be last devlink command
staging: qlge: Move devlink registration to be last devlink command
net: dsa: Move devlink registration to be last devlink command
devlink: Add missed notifications iterators
devlink: Reduce struct devlink exposure
devlink: Move netdev_to_devlink helpers to devlink.c
devlink: Annotate devlink API calls
devlink: Allow control devlink ops behavior through feature mask
net/mlx5: Set devlink reload feature bit for supported devices only
devlink: Delete reload enable/disable interface
devlink: Remove extra device_lock assert checks
Merge brank 'mlx5_mkey' into rdma.git for-next
devlink: Delete obsolete parameters publish API
devlink: Remove not-executed trap policer notifications
devlink: Remove not-executed trap group notifications
devlink: Clean not-executed param notifications
Revert "devlink: Remove not-executed trap group notifications"
Revert "devlink: Remove not-executed trap policer notifications"
devlink: Simplify internal devlink params implementation
bnxt_en: Remove not used other ULP define
Leon Yen (2):
mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
mt76: connac: fix GTK rekey offload failure on WPA mixed mode
Li RongQing (2):
skbuff: pass the result of data ksize to __build_skb_around
virtio_net: skip RCU read lock by checking xdp_enabled of vi
Linus Lüssing (2):
ath9k: add option to reset the wifi chip via debugfs
ath9k: Fix potential interrupt storm on queue reset
Linus Walleij (10):
net: dsa: tag_rtl4_a: Drop bit 9 from egress frames
net: dsa: rtl8366: Drop custom VLAN set-up
net: dsa: rtl8366rb: Rewrite weird VLAN filering enablement
net: dsa: rtl8366rb: Fix off-by-one bug
net: dsa: rtl8366: Fix a bug in deleting VLANs
net: dsa: rtl8366: Drop and depromote pointless prints
net: dsa: rtl8366rb: Use core filtering tracking
net: dsa: rtl8366rb: Support disabling learning
net: dsa: rtl8366rb: Support fast aging
net: dsa: rtl8366rb: Support setting STP state
Liu Jian (3):
skmsg: Lose offset info in sk_psock_skb_ingress
selftests, bpf: Fix test_txmsg_ingress_parser error
selftests, bpf: Add one test for sockmap with strparser
Loic Poulain (11):
ath10k: Fix missing frame timestamp for beacon/probe-resp
mac80211: Prevent AP probing during suspend
wcn36xx: Fix (QoS) null data frame bitrate/modulation
wcn36xx: Fix tx_status mechanism
wcn36xx: Correct band/freq reporting on RX
wcn36xx: Enable hardware scan offload for 5Ghz band
wcn36xx: Add chained transfer support for AMSDU
wcn36xx: Fix HT40 capability for 2Ghz band
wcn36xx: Fix discarded frames due to wrong sequence number
wcn36xx: Fix packet drop on resume
wcn36xx: Channel list update before hardware scan
Lorenz Bauer (1):
bpf: Do not invoke the XDP dispatcher for PROG_RUN with single repeat
Lorenzo Bianconi (68):
mac80211: check hostapd configuration parsing twt requests
mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event
mt76: mt7921: avoid unnecessary spin_lock/spin_unlock in mt7921_mcu_tx_done_event
mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb
mt76: mt7921: fix endianness warning in mt7921_update_txs
mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
mt76: mt7921: fix survey-dump reporting
mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
mt76: mt7921: introduce testmode support
mt76: mt7921: get rid of monitor_vif
mt76: mt7921: get rid of mt7921_mac_set_beacon_filter
mt76: mt7921: introduce mt7921_mcu_set_beacon_filter utility routine
mt76: overwrite default reg_ops if necessary
mt76: mt7615: move mt7615_mcu_set_p2p_oppps in mt76_connac module
mt76: mt7921: fix endianness warnings in mt7921_mac_decode_he_mu_radiotap
mt76: mt7915: introduce bss coloring support
mt76: mt7915: improve code readability in mt7915_mcu_sta_bfer_ht
mt76: mt7921: move mt7921_queue_rx_skb to mac.c
mt76: mt7921: always wake device if necessary in debugfs
mt76: mt7921: update mib counters dumping phy stats
mt76: mt7921: start reworking tx rate reporting
mt76: mt7921: add support for tx status reporting
mt76: mt7921: report tx rate directly from tx status
mt76: mt7921: remove mcu rate reporting code
mt76: mt7921: remove mt7921_sta_stats
mt76: mt7915: honor all possible error conditions in mt7915_mcu_init()
mt76: mt7915: fix possible infinite loop release semaphore
mt76: connac: set 6G phymode in mt76_connac_get_phy_mode{,v2}
mt76: connac: enable 6GHz band for hw scan
mt76: connac: add 6GHz support to mt76_connac_mcu_set_channel_domain
mt76: connac: set 6G phymode in single-sku support
mt76: connac: add 6GHz support to mt76_connac_mcu_sta_tlv
mt76: connac: add 6GHz support to mt76_connac_mcu_uni_add_bss
mt76: connac: enable hw amsdu @ 6GHz
mt76: add 6GHz support
mt76: mt7921: add 6GHz support
mt76: introduce packet_id idr
mt76: remove mt76_wcid pointer from mt76_tx_status_check signature
mt76: substitute sk_buff_head status_list with spinlock_t status_lock
mt76: schedule status timeout at dma completion
mt76: introduce __mt76_mcu_send_firmware routine
mt76: mt7915: introduce __mt7915_get_tsf routine
mt76: mt7915: introduce mt7915_mcu_twt_agrt_update mcu command
mt76: mt7915: introduce mt7915_mac_add_twt_setup routine
mt76: mt7915: enable twt responder capability
mt76: mt7915: add twt_stats knob in debugfs
mt76: debugfs: improve queue node readability
mt76: connac: fix possible NULL pointer dereference in mt76_connac_get_phy_mode_v2
mt76: rely on phy pointer in mt76_register_debugfs_fops routine signature
mt76: mt7915: introduce mt76 debugfs sub-dir for ext-phy
mt76: mt7915: improve code readability for xmit-queue handler
mt76: sdio: export mt76s_alloc_rx_queue and mt76s_alloc_tx routines
mt76: mt7915: remove dead code in debugfs code
mt76: sdio: move common code in mt76_sdio module
mt76: sdio: introduce parse_irq callback
mt76: move mt76_sta_stats in mt76.h
mt76: move mt76_ethtool_worker_info in mt76 module
mt76: mt7915: run mt7915_get_et_stats holding mt76 mutex
mt76: mt7915: move tx amsdu stats in mib_stats
mt76: do not reset MIB counters in get_stats callback
mt76: mt7921: add some more MIB counters
mt76: mt7921: introduce stats reporting through ethtool
mt76: mt7921: add sta stats accounting in mt7921_mac_add_txs_skb
mt76: mt7921: move tx amsdu stats in mib_stats
mt76: mt7921: add per-vif counters in ethtool
mt76: mt7921: fix mt7921s Kconfig
mt76: mt7915: fix endiannes warning mt7915_mcu_beacon_check_caps
mt76: mt7921: disable 4addr capability
Luca Coelho (7):
iwlwifi: mvm: Support new rate_n_flags for REPLY_RX_MPDU_CMD and RX_NO_DATA_NOTIF
iwlwifi: mvm: remove csi from iwl_mvm_pass_packet_to_mac80211()
iwlwifi: mvm: read 6E enablement flags from DSM and pass to FW
iwlwifi: mvm: don't get address of mvm->fwrt just to dereference as a pointer
iwlwifi: rename GEO_TX_POWER_LIMIT to PER_CHAIN_LIMIT_OFFSET_CMD
iwlwifi: mvm: fix WGDS table print in iwl_mvm_chub_update_mcc()
iwlwifi: bump FW API to 67 for AX devices
Luca Weiss (1):
net: qrtr: combine nameservice into main module
Luiz Augusto von Dentz (17):
Bluetooth: Fix enabling advertising for central role
Bluetooth: Fix using address type from events
Bluetooth: Fix using RPA when address has been resolved
Bluetooth: Add bt_skb_sendmsg helper
Bluetooth: Add bt_skb_sendmmsg helper
Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg
Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg
Bluetooth: eir: Move EIR/Adv Data functions to its own file
Bluetooth: hci_sock: Add support for BT_{SND,RCV}BUF
Bluetooth: Fix passing NULL to PTR_ERR
Bluetooth: SCO: Fix sco_send_frame returning skb->len
Bluetooth: hci_core: Move all debugfs handling to hci_debugfs.c
Bluetooth: Make use of hci_{suspend,resume}_dev on suspend notifier
Bluetooth: hci_vhci: Add force_suspend entry
Bluetooth: hci_vhci: Add force_prevent_wake entry
Bluetooth: hci_sock: Replace use of memcpy_from_msg with bt_skb_sendmsg
Bluetooth: Rename driver .prevent_wake to .wakeup
Lukas Bulwahn (1):
MAINTAINERS: adjust file entry for of_net.c after movement
Lukas Wunner (5):
netfilter: Rename ingress hook include file
netfilter: Generalize ingress hook include file
netfilter: Introduce egress hook
netfilter: core: Fix clang warnings about unused static inlines
ifb: Depend on netfilter alternatively to tc
Luo Jie (15):
net: phy: at803x: replace AT803X_DEVICE_ADDR with MDIO_MMD_PCS
net: phy: at803x: use phy_modify()
net: phy: at803x: improve the WOL feature
net: phy: at803x: use GENMASK() for speed status
net: phy: add qca8081 ethernet phy driver
net: phy: add qca8081 read_status
net: phy: add qca8081 get_features
net: phy: add qca8081 config_aneg
net: phy: add constants for fast retrain related register
net: phy: add genphy_c45_fast_retrain
net: phy: add qca8081 config_init
net: phy: add qca8081 soft_reset and enable master/slave seed
net: phy: adjust qca8081 master/slave seed value if link down
net: phy: add qca8081 cdt feature
net: phy: fixed warning: Function parameter not described
Lv Ruyi (1):
rtw89: fix error function parameter
M Chetan Kumar (10):
net: wwan: iosm: firmware flashing and coredump collection
net: wwan: iosm: fix linux-next build error
net: wwan: iosm: devlink registration
net: wwan: iosm: fw flashing support
net: wwan: iosm: coredump collection support
net: wwan: iosm: transport layer support for fw flashing/cd
net: wwan: iosm: devlink fw flashing & cd collection documentation
net: wwan: iosm: fw flashing & cd collection infrastructure changes
net: wwan: iosm: fw flashing and cd improvements
net: wwan: iosm: correct devlink extra params
Maciej Fijalkowski (9):
ice: remove ring_active from ice_ring
ice: move ice_container_type onto ice_ring_container
ice: split ice_ring onto Tx/Rx separate structs
ice: unify xdp_rings accesses
ice: do not create xdp_frame on XDP_TX
ice: propagate xdp_ring onto rx_ring
ice: optimize XDP_TX workloads
ice: introduce XDP_TX fallback path
ice: make use of ice_for_each_* macros
Maciej Machnikowski (4):
ice: Refactor ice_aqc_link_topo_addr
ice: Implement functions for reading and setting GPIO pins
ice: Add support for SMA control multiplexer
ice: Implement support for SMA and U.FL on E810-T
Magnus Karlsson (35):
selftests: xsk: Simplify xsk and umem arrays
selftests: xsk: Introduce type for thread function
selftests: xsk: Introduce test specifications
selftests: xsk: Move num_frames and frame_headroom to xsk_umem_info
selftests: xsk: Move rxqsize into xsk_socket_info
selftests: xsk: Make frame_size configurable
selftests: xsx: Introduce test name in test spec
selftests: xsk: Add use_poll to ifobject
selftests: xsk: Introduce rx_on and tx_on in ifobject
selftests: xsk: Replace second_step global variable
selftests: xsk: Specify number of sockets to create
selftests: xsk: Make xdp_flags and bind_flags local
selftests: xsx: Make pthreads local scope
selftests: xsk: Eliminate MAX_SOCKS define
selftests: xsk: Allow for invalid packets
selftests: xsk: Introduce replacing the default packet stream
selftests: xsk: Add test for unaligned mode
selftests: xsk: Eliminate test specific if-statement in test runner
selftests: xsk: Add tests for invalid xsk descriptors
selftests: xsk: Add tests for 2K frame size
xsk: Get rid of unused entry in struct xdp_buff_xsk
xsk: Batched buffer allocation for the pool
ice: Use xdp_buf instead of rx_buf for xsk zero-copy
ice: Use the xsk batched rx allocation interface
i40e: Use the xsk batched rx allocation interface
xsk: Optimize for aligned case
selftests: xsk: Fix missing initialization
selftests: xsk: Put the same buffer only once in the fill ring
selftests: xsk: Fix socket creation retry
selftests: xsk: Introduce pacing of traffic
selftests: xsk: Add single packet test
selftests: xsk: Change interleaving of packets in unaligned mode
selftests: xsk: Add frame_headroom test
xsk: Fix clang build error in __xp_alloc
libbpf: Deprecate AF_XDP support
Manish Chopra (1):
qed: fix ll2 establishment during load of RDMA driver
Manish Mandlik (1):
Bluetooth: Fix Advertisement Monitor Suspend/Resume
Maor Dickman (3):
net/mlx5: E-Switch, Use dynamic alloc for dest array
net/mlx5: E-Switch, Increase supported number of forward destinations to 32
net/mlx5: Lag, Make mlx5_lag_is_multipath() be static inline
Maor Gottlieb (11):
net/mlx5: Support partial TTC rules
net/mlx5: Introduce port selection namespace
net/mlx5: Add support to create match definer
net/mlx5: Introduce new uplink destination type
net/mlx5: Lag, move lag files into directory
net/mlx5: Lag, set LAG traffic type mapping
net/mlx5: Lag, set match mask according to the traffic type bitmap
net/mlx5: Lag, add support to create definers for LAG
net/mlx5: Lag, add support to create TTC tables for LAG port selection
net/mlx5: Lag, add support to create/destroy/modify port selection
net/mlx5: Lag, use steering to select the affinity port in LAG
Marc Kleine-Budde (2):
can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to unsigned int
can: gs_usb: use %u to print unsigned values
Marcel Holtmann (4):
Bluetooth: Fix handling of experimental feature for quality reports
Bluetooth: Fix handling of experimental feature for codec offload
Bluetooth: btrtl: Set VsMsftOpCode based on device table
Bluetooth: btrtl: Add support for MSFT extension to rtl8821c devices
Marcin Szycik (3):
ice: Add support for changing MTU on PR in switchdev mode
ice: Clear synchronized addrs when adding VFs in switchdev mode
ice: Hide bus-info in ethtool for PRs in switchdev mode
Marek Behún (1):
net: dsa: populate supported_interfaces member
Marek Vasut (1):
rsi: Fix module dev_oper_mode parameter description
Martin Fuzzey (3):
rsi: fix occasional initialisation failure with BT coex
rsi: fix key enabled check causing unwanted encryption for vap_id > 0
rsi: fix rate mask set leading to P2P failure
Martin KaFai Lau (4):
bpf: Check the other end of slot_type for STACK_SPILL
bpf: Support <8-byte scalar spill and refill
bpf: selftest: A bpf prog that has a 32bit scalar spill
bpf: selftest: Add verifier tests for <8-byte scalar spill and refill
Masahiro Yamada (2):
net: ipv6: squash $(ipv6-offload) in Makefile
net: ipv6: use ipv6-y directly instead of ipv6-objs
Mat Martineau (1):
mptcp: Make mptcp_pm_nl_mp_prio_send_ack() static
Mateusz Palczewski (3):
iavf: Refactor iavf state machine tracking
iavf: Add __IAVF_INIT_FAILED state
iavf: Combine init and watchdog state machines
Matt Johnston (4):
mctp: Allow MCTP on tun devices
mctp: Set route MTU via netlink
mctp: Warn if pointer is set for a wrong dev type
mctp: Avoid leak of mctp_sk_key
Matt Smith (3):
libbpf: Change bpf_object_skeleton data field to const pointer
bpftool: Provide a helper method for accessing skeleton's embedded ELF data
selftests/bpf: Add checks for X__elf_bytes() skeleton helper
Matteo Croce (1):
bpf: Update bpf_get_smp_processor_id() documentation
Matthew Hagan (1):
dt-bindings: net: dsa: qca8k: convert to YAML schema
Matthias Schiffer (1):
net: phy: micrel: make *-skew-ps check more lenient
Matti Gottlieb (3):
iwlwifi: Add support for getting rf id with blank otp
iwlwifi: Add support for more BZ HWs
iwlwifi: Start scratch debug register for Bz family
Mauricio Vásquez (1):
libbpf: Fix memory leak in btf__dedup()
Max Chou (1):
Bluetooth: btusb: Add the new support ID for Realtek RTL8852A
Maxim Mikityanskiy (1):
sch_htb: Add extack messages for EOPNOTSUPP errors
Maxime Chevallier (1):
net: ipconfig: Release the rtnl_lock while waiting for carrier
MeiChia Chiu (1):
mt76: mt7915: add LED support
Meir Lichtinger (2):
net/mlx5: Add uid field to UAR allocation structures
IB/mlx5: Enable UAR to have DevX UID
Mianhan Liu (13):
net/ipv4/route.c: remove superfluous header files from route.c
net/ipv4/tcp_fastopen.c: remove superfluous header files from tcp_fastopen.c
net/ipv4/tcp_minisocks.c: remove superfluous header files from tcp_minisocks.c
net/ipv4/udp_tunnel_core.c: remove superfluous header files from udp_tunnel_core.c
net/ipv4/syncookies.c: remove superfluous header files from syncookies.c
net/ipv4/sysctl_net_ipv4.c: remove superfluous header files from sysctl_net_ipv4.c
net/ipv4/xfrm4_tunnel.c: remove superfluous header files from xfrm4_tunnel.c
net/ipv4/tcp_nv.c: remove superfluous header files from tcp_nv.c
Bluetooth: btrsi: remove superfluous header files from btrsi.c
net: ipv4: remove superfluous header files from fib_notifier.c
net/dsa/tag_8021q.c: remove superfluous headers
net/dsa/tag_ksz.c: remove superfluous headers
net/ipv4/datagram.c: remove superfluous header files from datagram.c
Miao-chen Chou (1):
Bluetooth: Keep MSFT ext info throughout a hci_dev's life cycle
Michael Chan (2):
bnxt_en: Update firmware interface to 1.10.2.63
bnxt_en: Update bnxt.rst devlink documentation
Michal Simek (1):
can: xilinx_can: remove repeated word from the kernel-doc
Michal Swiatkowski (12):
ice: support basic E-Switch mode control
ice: introduce VF port representor
ice: allow process VF opcodes in different ways
ice: manage VSI antispoof and destination override
ice: allow changing lan_en and lb_en on dflt rules
ice: Allow changing lan_en and lb_en on all kinds of filters
ice: ndo_setup_tc implementation for PR
ice: support for indirect notification
ice: VXLAN and Geneve TC support
ice: low level support for tunnels
ice: support for GRE in eswitch
ice: send correct vc status in switchdev
MichelleJin (4):
net/mlx5e: check return value of rhashtable_init
net: ipv6: check return value of rhashtable_init
net: mac80211: check return value of rhashtable_init
net: ipv6: fix use after free of struct seg6_pernet_data
Mike Golant (1):
iwlwifi: pcie: update sw error interrupt for BZ family
Miles Hu (1):
ath11k: add support for setting fixed HE rate/gi/ltf
Min Li (4):
ptp: ptp_clockmatrix: Remove idtcm_enable_tod_sync()
ptp: ptp_clockmatrix: Add support for FW 5.2 (8A34005)
ptp: ptp_clockmatrix: Add support for pll_mode=0 and manual ref switch of WF and WP
ptp: clockmatrix: use rsmu driver to access i2c/spi bus
Miri Korenblit (11):
iwlwifi: mvm: Remove antenna c references
iwlwifi: mvm: update definitions due to new rate & flags
iwlwifi: mvm: add definitions for new rate & flags
iwlwifi: mvm: convert old rate & flags to the new format.
iwlwifi: mvm: Support version 3 of tlc_update_notif.
iwlwifi: mvm: Support new version of ranging response notification
iwlwifi: mvm: Add support for new rate_n_flags in tx_cmd.
iwlwifi: mvm: Support new version of BEACON_TEMPLATE_CMD.
iwlwifi: mvm: Support new TX_RSP and COMPRESSED_BA_RES versions
iwlwifi: mvm: Add RTS and CTS flags to iwl_tx_cmd_flags.
iwlwifi: mvm: Read acpi dsm to get channel activation bitmap
Moosa Baransi (1):
net/mlx5i: Enable Rx steering for IPoIB via ethtool
Mordechay Goodstein (2):
mac80211: debugfs: calculate free buffer size correctly
iwlwifi: mvm: add lmac/umac PC info in case of error
Muhammad Sammar (1):
net/mlx5: DR, Add check for unsupported fields in match param
Mukesh Sisodiya (2):
iwlwifi: yoyo: fw debug config from context info and preset
iwlwifi: yoyo: support for ROM usniffer
Nathan Chancellor (5):
ptp: ocp: Avoid operator precedence warning in ptp_ocp_summary_show()
net: ax88796c: Fix clang -Wimplicit-fallthrough in ax88796c_set_mac()
net: ax88796c: Remove pointless check in ax88796c_open()
ice: Fix clang -Wimplicit-fallthrough in ice_pull_qvec_from_rc()
net/mlx5: Add esw assignment back in mlx5e_tc_sample_unoffload()
Nathan Errera (1):
iwlwifi: rename CHANNEL_SWITCH_NOA_NOTIF to CHANNEL_SWITCH_START_NOTIF
Naveen Mamindlapalli (1):
octeontx2-nicvf: Add PTP hardware clock support to NIX VF
Neil Spring (1):
bpf: Permit ingress_ifindex in bpf_prog_test_run_xattr
Nicholas Flintham (1):
Bluetooth: btusb: Add support for TP-Link UB500 Adapter
Nick Hainke (1):
mt76: mt7615: mt7622: fix ibss and meshpoint
Nikolay Aleksandrov (1):
selftests: net: bridge: update IGMP/MLD membership interval value
Nikolay Assa (1):
qed: Update TCP silly-window-syndrome timeout for iwarp, scsi
Nithin Dabilpuram (1):
octeontx2-af: Perform cpt lf teardown in non FLR path
Oliver Neukum (1):
usbb: catc: use correct API for MAC addresses
Omkar Kulkarni (2):
qed: Split huge qed_hsi.h header file
qed: Update FW init functions to support FW 8.59.1.0
P Praneesh (2):
ath11k: add support for 80P80 and 160 MHz bandwidth
ath11k: Add wmi peer create conf event in wmi_tlv_event_id
Pablo Neira Ayuso (6):
netfilter: nft_dynset: relax superfluous check on set updates
af_packet: Introduce egress hook
netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
netfilter: nft_meta: add NFT_META_IFTYPE
netfilter: nf_tables: convert pktinfo->tprot_set to flags field
netfilter: nft_payload: support for inner header matching / mangling
Paolo Abeni (10):
mptcp: ensure tx skbs always have the MPTCP ext
tcp: expose the tcp_mark_push() and tcp_skb_entail() helpers
mptcp: stop relying on tcp_tx_skb_cache
tcp: make tcp_build_frag() static
mptcp: use lockdep_assert_held_once() instead of open-coding it
mptcp: increase default max additional subflows to 2
tcp: define macros for a couple reclaim thresholds
net: introduce sk_forward_alloc_get()
mptcp: allocate fwd memory separately on the rx and tx path
selftests: mptcp: more stable simult_flows tests
Parav Pandit (2):
net/mlx5: SF, Add SF trace points
net/mlx5: SF_DEV Add SF device trace points
Paul Blakey (4):
net/mlx5: CT: Fix missing cleanup of ct nat table on init failure
net/mlx5: Remove unnecessary checks for slow path flag
net/mlx5: CT: Remove warning of ignore_flow_level support for VFs
net/mlx5: Allow skipping counter refresh on creation
Pavel Skripkin (1):
Bluetooth: hci_uart: fix GPF in h5_recv
Pawan Gupta (1):
bpf: Disallow unprivileged bpf by default
Petr Machata (25):
selftests: net: fib_nexthops: Wait before checking reported idle time
mlxsw: spectrum_qdisc: Pass extack to mlxsw_sp_qevent_entry_configure()
mlxsw: spectrum_qdisc: Distinguish between ingress and egress triggers
mlxsw: spectrum_qdisc: Track permissible actions per binding
mlxsw: spectrum_qdisc: Offload RED qevent mark
selftests: mlxsw: sch_red_core: Drop two unused variables
selftests: mlxsw: RED: Add selftests for the mark qevent
mlxsw: reg: Fix a typo in a group heading
mlxsw: reg: Rename MLXSW_REG_PPCNT_TC_CONG_TC to _CNT
mlxsw: reg: Add ecn_marked_tc to Per-TC Congestion Counters
mlxsw: spectrum_qdisc: Introduce per-TC ECN counters
selftests: mlxsw: RED: Test per-TC ECN counters
net: sch_tbf: Add a graft command
mlxsw: spectrum_qdisc: Query tclass / priomap instead of caching it
mlxsw: spectrum_qdisc: Extract two helpers for handling future FIFOs
mlxsw: spectrum_qdisc: Destroy children in mlxsw_sp_qdisc_destroy()
mlxsw: spectrum_qdisc: Unify graft validation
mlxsw: spectrum_qdisc: Clean stats recursively when priomap changes
mlxsw: spectrum_qdisc: Validate qdisc topology
mlxsw: spectrum_qdisc: Make RED, TBF offloads classful
selftests: mlxsw: Add a test for un/offloadable qdisc trees
selftests: mlxsw: Add helpers for skipping selftests
mlxsw: spectrum_qdisc: Offload root TBF as port shaper
selftests: mlxsw: Test offloadability of root TBF
selftests: mlxsw: Test port shaper
Ping-Ke Shih (3):
rtw89: add Realtek 802.11ax driver
MAINTAINERS: add rtw89 wireless driver
rtw89: Fix variable dereferenced before check 'sta'
Po-Hsu Lin (1):
selftests/bpf: Use kselftest skip code for skipped tests
Prabhakar Kushwaha (9):
qed: Fix kernel-doc warnings
qed: Update common_hsi for FW ver 8.59.1.0
qed: Update qed_mfw_hsi.h for FW ver 8.59.1.0
qed: Update qed_hsi.h for fw 8.59.1.0
qed: Use enum as per FW 8.59.1.0 in qed_iro_hsi.h
qed: Add '_GTT' suffix to the IRO RAM macros
qed: Update debug related changes
qed: Update the TCP active termination 2 MSL timer ("TIME_WAIT")
qed: Fix compilation for CONFIG_QED_SRIOV undefined scenario
Pradeep Kumar Chitrapu (6):
ath11k: add channel 2 into 6 GHz channel list
ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
ath11k: fix survey dump collection in 6 GHz
ieee80211: Add new A-MPDU factor macro for HE 6 GHz peer caps
ath11k: add 6 GHz params in peer assoc command
ath11k: support SMPS configuration for 6 GHz
Przemyslaw Patynowski (1):
iavf: Fix kernel BUG in free_msi_irqs
Pu Lehui (1):
samples: bpf: Suppress readelf stderr when probing for BTF support
Qing Wang (3):
ath5k: replace snprintf in show functions with sysfs_emit
net: bpf: Switch over to memdup_user()
can: at91/janz-ican3: replace snprintf() in show functions with sysfs_emit()
Quentin Monnet (26):
libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations
bpf: Use $(pound) instead of \# in Makefiles
libbpf: Skip re-installing headers file if source is older than target
bpftool: Remove unused includes to <bpf/bpf_gen_internal.h>
bpftool: Install libbpf headers instead of including the dir
tools/resolve_btfids: Install libbpf headers when building
tools/runqslower: Install libbpf headers when building
bpf: preload: Install libbpf headers when building
bpf: iterators: Install libbpf headers when building
samples/bpf: Update .gitignore
samples/bpf: Install libbpf headers when building
samples/bpf: Do not FORCE-recompile libbpf
selftests/bpf: Better clean up for runqslower in test_bpftool_build.sh
bpftool: Add install-bin target to install binary only
libbpf: Remove Makefile warnings on out-of-sync netlink.h/if_link.h
bpftool: Fix install for libbpf's internal header(s)
bpftool: Do not FORCE-build libbpf
bpftool: Turn check on zlib from a phony target into a conditional error
bpf/preload: Clean up .gitignore and "clean-files" target
bpftool: Remove useless #include to <perf-sys.h> from map_perf_ring.c
bpftool: Avoid leaking the JSON writer prepared for program metadata
bpftool: Remove Makefile dep. on $(LIBBPF) for $(LIBBPF_INTERNAL_HDRS)
bpftool: Do not expose and init hash maps for pinned path in main.c
bpftool: Switch to libbpf's hashmap for pinned paths of BPF objects
bpftool: Switch to libbpf's hashmap for programs/maps in BTF listing
bpftool: Switch to libbpf's hashmap for PIDs/names references
Raed Salem (1):
net/mlx5e: IPsec: Refactor checksum code in tx data path
Rafael David Tinoco (1):
libbpf: Introduce legacy kprobe events support
Rafał Miłecki (6):
net: dsa: b53: Include all ports in "enabled_ports"
net: dsa: b53: Drop BCM5301x workaround for a wrong CPU/IMP port
net: dsa: b53: Improve flow control setup on BCM5301x
net: dsa: b53: Drop unused "cpu_port" field
net: bgmac: improve handling PHY
net: bgmac: support MDIO described in DT
Rakesh Babu (2):
octeontx2-pf: Enable promisc/allmulti match MCAM entries.
octeontx2-af: debugfs: Add channel and channel mask.
Rakesh Babu Saladi (1):
octeontx2-af: debugfs: Minor changes.
Ramon Fontes (1):
mac80211_hwsim: enable 6GHz channels
Randy Dunlap (4):
net: fealnx: fix build for UML
net: intel: igc_ptp: fix build for UML
net: tulip: winbond-840: fix build for UML
mt76: mt7921: fix Wformat build warning
Richard Huynh (1):
mt76: mt76x0: correct VHT MCS 8/9 tx power eeprom offset
Richard Palethorpe (2):
vsock: Refactor vsock_*_getsockopt to resemble sock_getsockopt
vsock: Enable y2038 safe timeval for timeout
Rikard Falkeborn (2):
nfc: pn533: Constify serdev_device_ops
nfc: pn533: Constify pn533_phy_ops
Robert Hancock (1):
net: phylink: Support disabling autonegotiation for PCS
Roee Goldfiner (2):
iwlwifi: BZ Family BUS_MASTER_DISABLE_REQ code duplication
iwlwifi: BZ Family SW reset support
Roi Dayan (12):
net/mlx5e: Use correct return type
net/mlx5e: Remove incorrect addition of action fwd flag
net/mlx5e: Set action fwd flag when parsing tc action goto
net/mlx5e: Check action fwd/drop flag exists also for nic flows
net/mlx5e: Remove redundant priv arg from parse_pedit_to_reformat()
net/mlx5e: Use tc sample stubs instead of ifdefs in source file
net/mlx5e: Use NL_SET_ERR_MSG_MOD() for errors parsing tunnel attributes
net/mlx5e: loopback test is not supported in switchdev mode
net/mlx5e: TC, Refactor sample offload error flow
net/mlx5e: Move mod hdr allocation to a single place
net/mlx5e: Split actions_match_supported() into a sub function
net/mlx5e: Move parse fdb check into actions_match_supported_fdb()
Rongwei Liu (4):
net/mlx5: Check return status first when querying system_image_guid
net/mlx5: Introduce new device index wrapper
net/mlx5: Use native_port_num as 1st option of device index
net/mlx5: Use system_image_guid to determine bonding
Roopa Prabhu (1):
net, neigh: Extend neigh->flags to 32 bit to allow for extensions
Rotem Saado (2):
iwlwifi: dbg: treat dbgc allocation failure when tlv is missing
iwlwifi: dbg: treat non active regions as unsupported regions
Russell King (5):
net: dpaa2-mac: add support for more ethtool 10G link modes
net: phy: marvell10g: add downshift tunable support
net: phylink: add MAC phy_interface_t bitmap
net: mvneta: populate supported_interfaces member
net: mvpp2: populate supported_interfaces member
Russell King (Oracle) (16):
net: phylink: don't call netif_carrier_off() with NULL netdev
net: phylink: add phylink_set_10g_modes() helper
net: ethernet: use phylink_set_10g_modes()
net: mdio: add mdiobus_modify_changed()
net: phylink: use mdiobus_modify_changed() helper
net: mdio: ensure the type of mdio devices match mdio drivers
net: phylib: ensure phy device drivers do not match by DT
net: phylink: rejig SFP interface selection in ksettings_set()
net: phy: add phy_interface_t bitmap support
net: phylink: use supported_interfaces for phylink validation
net: mvneta: remove interface checks in mvneta_validate()
net: mvneta: drop use of phylink_helper_basex_speed()
net: mvpp2: remove interface checks in mvpp2_phylink_validate()
net: mvpp2: drop use of phylink_helper_basex_speed()
net: mvpp2: clean up mvpp2_phylink_validate()
net: phylink: avoid mvneta warning when setting pause parameters
Ryder Lee (27):
MAINTAINERS: mt76: update MTK folks
mt76: mt7915: report HE MU radiotap
mt76: mt7915: fix an off-by-one bound check
mt76: mt7915: take RCU read lock when calling ieee80211_bss_get_elem()
mt76: mt7915: cleanup -Wunused-but-set-variable
mt76: mt7915: report tx rate directly from tx status
mt76: mt7915: remove mt7915_sta_stats
mt76: mt7915: add control knobs for thermal throttling
mt76: mt7915: send EAPOL frames at lowest rate
mt76: mt7921: send EAPOL frames at lowest rate
mt76: add support for setting mcast rate
mt76: mt7915: add HE-LTF into fixed rate command
mt76: mt7915: update mac timing settings
mt76: use IEEE80211_OFFLOAD_ENCAP_ENABLED instead of MT_DRV_AMSDU_OFFLOAD
mt76: mt7915: rework debugfs queue info
mt76: mt7915: rename debugfs tx-queues
mt76: fill boottime_ns in Rx path
mt76: mt7915: enable configured beacon tx rate
mt76: mt7615: fix hwmon temp sensor mem use-after-free
mt76: mt7615: fix monitor mode tear down crash
mt76: mt7915: introduce mt7915_mcu_beacon_check_caps()
mt76: mt7915: fix txbf starec TLV issues
mt76: mt7915: improve starec readability of txbf
mt76: mt7615: apply cached RF data for DBDC
mt76: mt7915: remove mt7915_mcu_add_he()
mt76: mt7915: rework .set_bitrate_mask() to support more options
mt76: mt7915: rework debugfs fixed-rate knob
Saeed Mahameed (1):
Merge branch 'mlx5-next' of git://git.kernel.org/pub/scm/linux/kernel/git/mellanox/linux into net-next
Sara Sharon (1):
iwlwifi: mvm: set inactivity timeouts also for PS-poll
Sasha Neftin (3):
igc: Remove media type checking on the PHY initialization
igc: Add new device ID
igc: Change Device Reset to Port Reset
Sathishkumar Muruganandam (1):
ath11k: fix 4-addr tx failure for AP and STA modes
Sean Anderson (6):
net: mdio: Add helper functions for accessing MDIO devices
net: phylink: Convert some users of mdiobus_* to mdiodev_*
net: Convert more users of mdiobus_* to mdiodev_*
dt-bindings: net: macb: Add mdio bus child node
net: macb: Use mdio child node for MDIO bus if it exists
net: convert users of bitmap_foo() to linkmode_foo()
Sean Wang (27):
mt76: mt7921: enable aspm by default
mt76: fix build error implicit enumeration conversion
mt76: add mt76_default_basic_rate more devices can rely on
mt76: mt7921: fix mgmt frame using unexpected bitrate
mt76: mt7915: fix mgmt frame using unexpected bitrate
mt76: mt7921: report HE MU radiotap
mt76: mt7921: fix firmware usage of RA info using legacy rates
mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
mt76: mt7921: robustify hardware initialization flow
mt76: mt7921: fix retrying release semaphore without end
mt76: drop MCU header size from buffer size in __mt76_mcu_send_firmware
mt76: mt7921: add MU EDCA cmd support
mt76: mt7921: refactor mac.c to be bus independent
mt76: mt7921: refactor dma.c to be pcie specific
mt76: mt7921: refactor mcu.c to be bus independent
mt76: mt7921: refactor init.c to be bus independent
mt76: mt7921: add MT7921_COMMON module
mt76: connac: move mcu reg access utility routines in mt76_connac_lib module
mt76: mt7663s: rely on mcu reg access utility
mt76: mt7921: make all event parser reusable between mt7921s and mt7921e
mt76: mt7921: use physical addr to unify register access
mt76: sdio: extend sdio module to support CONNAC2
mt76: connac: extend mcu_get_nic_capability
mt76: mt7921: rely on mcu_get_nic_capability
mt76: mt7921: refactor mt7921_mcu_send_message
mt76: mt7921: introduce mt7921s support
mt76: mt7921s: add reset support
Sebastian Andrzej Siewior (7):
net/core: disable NET_RX_BUSY_POLL on PREEMPT_RT
gen_stats: Add instead Set the value in __gnet_stats_copy_basic().
gen_stats: Add gnet_stats_add_queue().
mq, mqprio: Use gnet_stats_add_queue().
gen_stats: Move remaining users to gnet_stats_add_queue().
net: sched: Allow statistics reads from softirq.
net: stats: Read the statistics in ___gnet_stats_copy_basic() instead of adding.
Seevalamuthu Mariappan (12):
ath11k: Rename atf_config to flag1 in target_resource_config
ath11k: add support in survey dump with bss_chan_info
ath11k: Align bss_chan_info structure with firmware
ath11k: move static function ath11k_mac_vdev_setup_sync to top
ath11k: add separate APIs for monitor mode
ath11k: monitor mode clean up to use separate APIs
ath11k: Add vdev start flag to disable hardware encryption
ath11k: Assign free_vdev_map value before ieee80211_register_hw
ath11k: Rename macro ARRAY_TO_STRING to PRINT_ARRAY_TO_BUF
ath11k: Replace HTT_DBG_OUT with scnprintf
ath11k: Remove htt stats fixed size array usage
ath11k: Change masking and shifting in htt stats
Seth Forshee (2):
net: sch: eliminate unnecessary RCU waits in mini_qdisc_pair_swap()
net: sch: simplify condtion for selecting mini_Qdisc_pair buffer
Shai Malin (4):
qed: Improve the stack space of filter_config()
qed: Remove e4_ and _e4 from FW HSI
qed: Optimize the ll2 ooo flow
qed: Change the TCP common variable - "iscsi_ooo"
Shailend Chand (1):
gve: Add a jumbo-frame device option.
Shannon Nelson (17):
ionic: remove debug stats
ionic: check for binary values in FW ver string
ionic: move lif mutex setup and delete
ionic: widen queue_lock use around lif init and deinit
ionic: add polling to adminq wait
ionic: have ionic_qcq_disable decide on sending to hardware
ionic: add lif param to ionic_qcq_disable
ionic: add filterlist to debugfs
ionic: move lif mac address functions
ionic: remove mac overflow flags
ionic: add generic filter search
ionic: generic filter add
ionic: generic filter delete
ionic: handle vlan id overflow
ionic: allow adminq requests to override default error message
ionic: tame the filter no space message
ionic: no devlink_unregister if not registered
Shay Drory (7):
net/mlx5: Shift control IRQ to the last index
net/mlx5: Enable single IRQ for PCI Function
net/mlx5: Disable roce at HCA level
net/mlx5: Fix unused function warning of mlx5i_flow_type_mask
net/mlx5: Let user configure io_eq_size param
net/mlx5: Let user configure event_eq_size param
net/mlx5: Let user configure max_macs param
Shayne Chen (14):
mt76: mt7915: fix potential overflow of eeprom page index
mt76: mt7915: switch proper tx arbiter mode in testmode
mt76: mt7915: fix bit fields for HT rate idx
mt76: mt7915: fix sta_rec_wtbl tag len
mt76: mt7915: rework starec TLV tags
mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
mt76: mt7915: set VTA bit in tx descriptor
mt76: mt7915: set muru platform type
mt76: mt7915: enable HE UL MU-MIMO
mt76: mt7915: rework mt7915_mcu_sta_muru_tlv()
mt76: mt7915: fix missing HE phy cap
mt76: mt7915: change max rx len limit of hw modules
mt76: mt7915: add WA firmware log support
mt76: mt7915: add debugfs knobs for MCU utilization
Shivanshu Shukla (1):
ice: allow deleting advanced rules
Shuah Khan (1):
selftests/net: update .gitignore with newly added tests
Shyam Sundar S K (1):
net: amd-xgbe: Toggle PLL settings during rate change
Sohaib Mohamed (1):
bcma: drop unneeded initialization value
Song Liu (6):
perf: Enable branch record for software events
bpf: Introduce helper bpf_get_branch_snapshot
selftests/bpf: Add test for bpf_get_branch_snapshot
selftests/bpf: Skip the second half of get_branch_snapshot in vm
selftests/bpf: Skip all serial_test_get_branch_snapshot in vm
selftests/bpf: Guess function end for test_get_branch_snapshot
Srinivasan Raju (1):
nl80211: Add LC placeholder band definition to nl80211_band
Sriram R (5):
ath11k: Add support for RX decapsulation offload
ath11k: Update pdev tx and rx firmware stats
ath11k: Avoid reg rules update during firmware recovery
ath11k: Avoid race during regd updates
ath11k: Fix crash during firmware recovery on reo cmd ring access
Srujana Challa (3):
octeontx2-af: Hardware configuration for inline IPsec
octeontx2-af: Enable CPT HW interrupts
octeontx2-af: Add support to flush full CPT CTX cache
Stanislav Fomichev (2):
libbpf: Use func name when pinning programs with LIBBPF_STRICT_SEC_NAME
selftests/bpf: Fix flow dissector tests
Stefan Agner (1):
phy: micrel: ksz8041nl: do not use power down mode
Stephane Grosjean (1):
can: peak_usb: CANFD: store 64-bits hw timestamps
Stephen Boyd (1):
ath10k: Don't always treat modem stop events as crashes
Stephen Rothwell (3):
fix up for "net: add new socket option SO_RESERVE_MEM"
ethernet: fix up ps3_gelic_net.c for "ethernet: use eth_hw_addr_set()"
ethernet: sun: add missing semicolon, fix build
Stephen Suryaputra (1):
gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
Subbaraya Sundeep (3):
octeontx2-af: Use ptp input clock info from firmware data
octeontx2-pf: Simplify the receive buffer size calculation
devlink: add documentation for octeontx2 driver
Subrat Mishra (1):
cfg80211: AP mode driver offload for FILS association crypto
Sukadev Bhattiprolu (12):
ibmvnic: Consolidate code in replenish_rx_pool()
ibmvnic: Fix up some comments and messages
ibmvnic: Use/rename local vars in init_rx_pools
ibmvnic: Use/rename local vars in init_tx_pools
ibmvnic: init_tx_pools move loop-invariant code
ibmvnic: Use bitmap for LTB map_ids
ibmvnic: Reuse LTB when possible
ibmvnic: Reuse rx pools when possible
ibmvnic: Reuse tx pools when possible
ibmvnic: don't stop queue in xmit
ibmvnic: Process crqs after enabling interrupts
ibmvnic: delay complete()
Sven Eckelmann (1):
ath10k: fix max antenna gain unit
Taehee Yoo (5):
amt: add control plane of amt interface
amt: add data plane of amt interface
amt: add multicast(IGMP) report message handler
amt: add mld report message handler
selftests: add amt interface selftest script
Takashi Iwai (1):
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
Talal Ahmad (2):
tcp: rename sk_wmem_free_skb
net: avoid double accounting for pure zerocopy skbs
Tao Liu (1):
gve: Do lazy cleanup in TX path
Tariq Toukan (3):
net/mlx5e: Specify SQ stats struct for mlx5e_open_txqsq()
net/mlx5e: Add TX max rate support for MQPRIO channel mode
lib: bitmap: Introduce node-aware alloc API
Tetsuo Handa (1):
Bluetooth: reorganize functions from hci_sock_sendmsg()
Thadeu Lima de Souza Cascardo (1):
Bluetooth: hci_ldisc: require CAP_NET_ADMIN to attach N_HCI ldisc
Thomas Gleixner (2):
net: iosm: Use hrtimer_forward_now()
can: bcm: Use hrtimer_forward_now()
Tianjia Zhang (5):
net/tls: support SM4 GCM/CCM algorithm
net/tls: support SM4 CCM algorithm
selftests/tls: add SM4 GCM/CCM to tls selftests
net/tls: tls_crypto_context add supported algorithms context
net/tls: getsockopt supports complete algorithm list
Tiezhu Yang (3):
bpf, mips: Clean up config options about JIT
bpf, mips: Fix comment on tail call count limiting
bpf, tests: Add module parameter test_suite to test_bpf module
Tim Gardner (5):
ath11k: Remove unused variable in ath11k_dp_rx_mon_merg_msdus()
qed: Initialize debug string array
mptcp: Avoid NULL dereference in mptcp_getsockopt_subflow_addrs()
soc: fsl: dpio: Unsigned compared against 0 in qbman_swp_set_irq_coalescing()
net: enetc: unmap DMA in enetc_send_cmd()
Toke Høiland-Jørgensen (4):
libbpf: Don't crash on object files with no symbol tables
libbpf: Ignore STT_SECTION symbols in 'maps' section
libbpf: Properly ignore STT_SECTION symbols in legacy map definitions
fq_codel: generalise ce_threshold marking for subset of traffic
Tong Tiangen (1):
riscv, bpf: Add BPF exception tables
Tony Ambardar (1):
mips, uasm: Enable muhu opcode for MIPS R6
Tony Lu (4):
virtio_net: introduce TX timeout watchdog
net/smc: Introduce tracepoint for fallback
net/smc: Introduce tracepoints for tx and rx msg
net/smc: Introduce tracepoint for smcr link down
Tuo Li (1):
ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
Uwe Kleine-König (2):
net: ks8851: Make ks8851_remove_common() return void
net: w5100: Make w5100_remove() return void
Vadim Fedorenko (2):
bpf: Add hardware timestamp field to __sk_buff
selftests/bpf: Test new __sk_buff field hwtstamp
Vasundhara Volam (2):
bnxt_en: Add compression flags information in coredump segment header
bnxt_en: Retrieve coredump and crashdump size via FW command
Venkateswara Naralasetty (1):
ath11k: add HTT stats support for new stats
Victor Raj (1):
ice: cleanup rules info
Vikas Gupta (1):
bnxt_en: Provide stored devlink "fw" version on older firmware
Vincent Mailhol (6):
can: bittiming: allow TDC{V,O} to be zero and add can_tdc_const::tdc{v,o,f}_min
can: bittiming: change unit of TDC parameters to clock periods
can: bittiming: change can_calc_tdco()'s prototype to not directly modify priv
can: netlink: add interface for CAN-FD Transmitter Delay Compensation (TDC)
can: netlink: add can_priv::do_get_auto_tdcv() to retrieve tdcv from device
can: dev: add can_tdc_get_relative_tdco() helper function
Vlad Buslov (9):
net/mlx5e: Reserve a value from TC tunnel options mapping
net/mlx5e: Support accept action
net/mlx5: Bridge, refactor eswitch instance usage
net/mlx5: Bridge, extract VLAN pop code to dedicated functions
net/mlx5: Bridge, mark reg_c1 when pushing VLAN
net/mlx5: Bridge, pop VLAN on egress table miss
net/mlx5: Bridge, provide flow source hints
net/mlx5: Bridge, extract code to lookup and del/notify entry
net/mlx5: Bridge, support replacing existing FDB entry
Vladimir Oltean (68):
net: dsa: sja1105: remove sp->dp
net: dsa: move sja1110_process_meta_tstamp inside the tagging protocol driver
net: dsa: sja1105: break dependency between dsa_port_is_sja1105 and switch driver
net: dsa: sja1105: don't keep a persistent reference to the reset GPIO
net: dsa: sja1105: stop using priv->vlan_aware
net: dsa: felix: accept "ethernet-ports" OF node name
net: mscc: ocelot: support egress VLAN rewriting via VCAP ES0
net: mscc: ocelot: write full VLAN TCI in the injection header
net: dsa: tag_ocelot: set the classified VLAN during xmit
selftests: net: mscc: ocelot: bring up the ports automatically
selftests: net: mscc: ocelot: rename the VLAN modification test to ingress
selftests: net: mscc: ocelot: add a test for egress VLAN modification
dt-bindings: net: dsa: fix typo in dsa-tag-protocol description
dt-bindings: net: dsa: document felix family in dsa-tag-protocol
net: dsa: unregister cross-chip notifier after ds->ops->teardown
dt-bindings: net: dsa: sja1105: fix example so all ports have a phy-handle of fixed-link
dt-bindings: net: dsa: inherit the ethernet-controller DT schema
dt-bindings: net: dsa: sja1105: add {rx,tx}-internal-delay-ps
net: dsa: sja1105: parse {rx, tx}-internal-delay-ps properties for RGMII delays
net: mscc: ocelot: add a type definition for REW_TAG_CFG_TAG_CFG
net: mscc: ocelot: convert the VLAN masks to a list
net: mscc: ocelot: allow a config where all bridge VLANs are egress-untagged
net: mscc: ocelot: add the local station MAC addresses in VID 0
net: mscc: ocelot: track the port pvid using a pointer
net: dsa: introduce helpers for iterating through ports using dp
net: dsa: remove the "dsa_to_port in a loop" antipattern from the core
net: dsa: do not open-code dsa_switch_for_each_port
net: dsa: remove gratuitous use of dsa_is_{user,dsa,cpu}_port
net: dsa: convert cross-chip notifiers to iterate using dp
net: dsa: tag_sja1105: do not open-code dsa_switch_for_each_port
net: dsa: tag_8021q: make dsa_8021q_{rx,tx}_vid take dp as argument
net: enetc: remove local "priv" variable in enetc_clean_tx_ring()
net: enetc: use the skb variable directly in enetc_clean_tx_ring()
net: dsa: sja1105: wait for dynamic config command completion on writes too
net: dsa: sja1105: serialize access to the dynamic config interface
net: mscc: ocelot: serialize access to the MAC table
net: dsa: b53: serialize access to the ARL table
net: dsa: lantiq_gswip: serialize access to the PCE table
net: dsa: introduce locking for the address lists on CPU and DSA ports
net: dsa: drop rtnl_lock from dsa_slave_switchdev_event_work
selftests: lib: forwarding: allow tests to not require mz and jq
selftests: net: dsa: add a stress test for unlocked FDB operations
net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error
net: dsa: sja1105: wait for dynamic config command completion on writes too
net: dsa: sja1105: serialize access to the dynamic config interface
net: mscc: ocelot: serialize access to the MAC table
net: dsa: b53: serialize access to the ARL table
net: dsa: lantiq_gswip: serialize access to the PCE registers
net: dsa: introduce locking for the address lists on CPU and DSA ports
net: dsa: drop rtnl_lock from dsa_slave_switchdev_event_work
selftests: lib: forwarding: allow tests to not require mz and jq
selftests: net: dsa: add a stress test for unlocked FDB operations
net: dsa: flush switchdev workqueue when leaving the bridge
net: dsa: stop calling dev_hold in dsa_slave_fdb_event
net: bridge: remove fdb_notify forward declaration
net: bridge: remove fdb_insert forward declaration
net: bridge: rename fdb_insert to fdb_add_local
net: bridge: rename br_fdb_insert to br_fdb_add_local
net: bridge: reduce indentation level in fdb_create
net: bridge: move br_fdb_replay inside br_switchdev.c
net: bridge: create a common function for populating switchdev FDB entries
net: switchdev: merge switchdev_handle_fdb_{add,del}_to_device
net: bridge: provide shim definition for br_vlan_flags
net: bridge: move br_vlan_replay to br_switchdev.c
net: bridge: split out the switchdev portion of br_mdb_notify
net: bridge: mdb: move all switchdev logic to br_switchdev.c
net: bridge: switchdev: consistent function naming
net: bridge: switchdev: fix shim definition for br_switchdev_mdb_notify
Volodymyr Mytnyk (1):
net: marvell: prestera: add firmware v4.0 support
Wan Jiabing (2):
selftests/bpf: Remove duplicated include in cgroup_helpers
net: dsa: sja1105: Add of_node_put() before return
Wang Hai (3):
libertas_tf: Fix possible memory leak in probe and disconnect
libertas: Fix possible memory leak in probe and disconnect
ice: fix error return code in ice_get_recp_frm_fw()
Wang ShaoBo (1):
Bluetooth: fix use-after-free error in lock_sock_nested()
Wei Wang (3):
net: add new socket option SO_RESERVE_MEM
tcp: adjust sndbuf according to sk_reserved_mem
tcp: adjust rcv_ssthresh according to sk_reserved_mem
Weihang Li (1):
net: hns3: add new ras error type for roce
Wen Gong (11):
mac80211: use ieee802_11_parse_elems() in ieee80211_prep_channel()
ieee80211: add power type definition for 6 GHz
mac80211: add parse regulatory info in 6 GHz operation information
mac80211: save transmit power envelope element and power constraint
ath11k: re-enable ht_cap/vht_cap for 5G band for WCN6855
ath11k: enable 6G channels for WCN6855
ath11k: copy cap info of 6G band under WMI_HOST_WLAN_5G_CAP for WCN6855
ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
ath11k: indicate scan complete for scan canceled when scan running
ath11k: indicate to mac80211 scan complete with aborted flag for ATH11K_SCAN_STARTING state
cfg80211: separate get channel number from ies
Wojciech Drewek (5):
ice: Move devlink port to PF/VF struct
ice: add port representor ethtool ops and stats
ice: Forbid trusted VFs in switchdev mode
ice: Manage act flags for switchdev offloads
ice: Refactor PR ethtool ops
Xin Long (4):
sctp: allow IP fragmentation when PLPMTUD enters Error state
sctp: reset probe_timer in sctp_transport_pl_update
sctp: subtract sctphdr len in sctp_transport_pl_hlen
sctp: return true only for pathmtu update in sctp_transport_pl_toobig
Xing Song (1):
mt76: use a separate CCMP PN receive counter for management frames
Xingbang Liu (1):
mt76: move spin_lock_bh to spin_lock in tasklet
Xuan Zhuo (1):
virtio_net: use netdev_warn_once to output warn when without enough queues
YN Chen (2):
mt76: mt7921: add .set_sar_specs support
mt76: connac: add support for limiting to maximum regulatory Tx power
Yaara Baruch (4):
iwlwifi: change all JnP to NO-160 configuration
iwlwifi: add new killer devices to the driver
iwlwifi: add new device id 7F70
iwlwifi: add new pci SoF with JF
Yajun Deng (4):
skbuff: inline page_frag_alloc_align()
net: net_namespace: Fix undefined member in key_remove_domain()
net: rtnetlink: convert rcu_assign_pointer to RCU_INIT_POINTER
xdp: Remove redundant warning
Yang Li (4):
net: sparx5: fix resource_size.cocci warnings
net: dsa: rtl8366rb: remove unneeded semicolon
rtw89: remove unneeded semicolon
intel: Simplify bool conversion
Yang Yingliang (1):
rtw89: fix return value check in rtw89_cam_send_sec_key_cmd()
Yangchun Fu (1):
gve: Switch to use napi_complete_done
Ye Guojin (1):
libertas: replace snprintf in show functions with sysfs_emit
Yevgeny Kliteynik (11):
net/mlx5: DR, Fix code indentation in dr_ste_v1
net/mlx5: DR, Fix vport number data type to u16
net/mlx5: DR, Replace local WIRE_PORT macro with the existing MLX5_VPORT_UPLINK
net/mlx5: DR, Add missing query for vport 0
net/mlx5: DR, Align error messages for failure to obtain vport caps
net/mlx5: DR, Support csum recalculation flow table on SFs
net/mlx5: DR, Add support for SF vports
net/mlx5: DR, Increase supported num of actions to 32
net/mlx5: DR, Fix typo 'offeset' to 'offset'
net/mlx5: DR, init_next_match only if needed
net/mlx5: DR, Add missing string for action type SAMPLER
Yi Guo (1):
octeontx2-af: Add external ptp input clock
Yinjun Zhang (2):
nfp: fix NULL pointer access when scheduling dim work
nfp: fix potential deadlock when canceling dim work
Yonghong Song (21):
btf: Change BTF_KIND_* macros to enums
bpf: Support for new btf kind BTF_KIND_TAG
libbpf: Rename btf_{hash,equal}_int to btf_{hash,equal}_int_tag
libbpf: Add support for BTF_KIND_TAG
bpftool: Add support for BTF_KIND_TAG
selftests/bpf: Test libbpf API function btf__add_tag()
selftests/bpf: Change NAME_NTH/IS_NAME_NTH for BTF_KIND_TAG format
selftests/bpf: Add BTF_KIND_TAG unit tests
selftests/bpf: Test BTF_KIND_TAG for deduplication
selftests/bpf: Add a test with a bpf program with btf_tag attributes
docs/bpf: Add documentation for BTF_KIND_TAG
selftests/bpf: Skip btf_tag test if btf_tag attribute not supported
selftests/bpf: Fix a few compiler warnings
selftests/bpf: Fix btf_dump __int128 test failure with clang build kernel
selftests/bpf: Fix probe_user test failure with clang build kernel
bpf: Rename BTF_KIND_TAG to BTF_KIND_DECL_TAG
bpf: Add BTF_KIND_DECL_TAG typedef support
selftests/bpf: Add BTF_KIND_DECL_TAG typedef unit tests
selftests/bpf: Test deduplication for BTF_KIND_DECL_TAG typedef
selftests/bpf: Add BTF_KIND_DECL_TAG typedef example in tag.c
docs/bpf: Update documentation for BTF_KIND_DECL_TAG typedef support
Yoshiki Komachi (1):
cls_flower: Fix inability to match GRE/IPIP packets
Yu Xiao (1):
nfp: flower: Allow ipv6gretap interface for offloading
Yuchung Cheng (1):
tcp: tracking packets with CE marks in BW rate sample
Yucong Sun (13):
bpftool: Avoid using "?: " in generated code
selftests/bpf: Fix btf_dump test under new clang
selftests/bpf: Add parallelism to test_progs
selftests/bpf: Allow some tests to be executed in sequence
selftests/bpf: Add per worker cgroup suffix
selftests/bpf: Fix race condition in enable_stats
selftests/bpf: Make cgroup_v1v2 use its own port
selftests/bpf: Adding pid filtering for atomics test
selftests/bpf: Fix pid check in fexit_sleep test
selfetest/bpf: Make some tests serial
selfetests/bpf: Update vmtest.sh defaults
selftests/bpf: Fix attach_probe in parallel mode
selftests/bpf: Adding a namespace reset for tc_redirect
Yuiko Oshino (3):
net: microchip: lan743x: add support for PTP pulse width (duty cycle)
net: phy: microchip_t1: add cable test support for lan87xx phy
net: ethernet: microchip: lan743x: Increase rx ring size to improve rx performance
Yun-Hao Chung (1):
Bluetooth: Fix wrong opcode when LL privacy enabled
Yunsheng Lin (1):
page_pool: disable dma mapping support for 32-bit arch with 64-bit DMA
Yuval Shaia (1):
net: mvneta: Delete unused variable
Zheyu Ma (1):
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Ziyang Xuan (1):
rsi: stop thread firstly in rsi_91x_init() error handling
Zong-Zhe Yang (5):
rtw88: upgrade rtw_regulatory mechanism and mapping
rtw88: add regulatory strategy by chip type
rtw88: support adaptivity for ETSI/JP DFS region
rtw88: fix RX clock gate setting while fifo dump
rtw88: refine fw_crash debugfs to show non-zero while triggering
jing yangyang (1):
mt76: fix boolreturn.cocci warnings
luo penghao (5):
e1000e: Remove redundant statement
ethernet: Remove redundant statement
net/core: Remove unused assignment operations and variable
xfrm: Remove redundant fields and related parentheses
sky2: Remove redundant assignment and parentheses
mark-yw.chen (3):
Bluetooth: btusb: Support public address configuration for MediaTek Chip.
Bluetooth: btusb: Add protocol for MediaTek bluetooth devices(MT7922)
Bluetooth: btusb: Add support for IMC Networks Mediatek Chip(MT7921)
tjiang@codeaurora.org (1):
Bluetooth: btusb: Add gpio reset way for qca btsoc in cmd_timeout
wangzhitong (1):
NET: IPV4: fix error "do not initialise globals to 0"
Łukasz Stelmach (3):
dt-bindings: vendor-prefixes: Add asix prefix
dt-bindings: net: Add bindings for AX88796C SPI Ethernet Adapter
net: ax88796c: ASIX AX88796C SPI Ethernet Adapter Driver
Documentation/ABI/testing/sysfs-timecard | 174 +
Documentation/bpf/bpf_licensing.rst | 92 +
Documentation/bpf/btf.rst | 29 +-
Documentation/bpf/index.rst | 9 +
.../bpf/libbpf/libbpf_naming_convention.rst | 40 +
.../devicetree/bindings/net/asix,ax88796c.yaml | 73 +
.../devicetree/bindings/net/brcm,bcmgenet.txt | 3 +-
Documentation/devicetree/bindings/net/dsa/dsa.yaml | 12 +-
.../devicetree/bindings/net/dsa/nxp,sja1105.yaml | 43 +
.../devicetree/bindings/net/dsa/qca8k.txt | 215 -
.../devicetree/bindings/net/dsa/qca8k.yaml | 362 +
.../devicetree/bindings/net/dsa/realtek-smi.txt | 87 +
.../devicetree/bindings/net/lantiq,etop-xway.yaml | 69 +
.../devicetree/bindings/net/lantiq,xrx200-net.txt | 21 -
.../devicetree/bindings/net/lantiq,xrx200-net.yaml | 59 +
Documentation/devicetree/bindings/net/macb.txt | 4 +
.../devicetree/bindings/net/qcom,ipq8064-mdio.yaml | 5 +-
.../devicetree/bindings/net/renesas,ether.yaml | 17 +-
.../devicetree/bindings/net/renesas,etheravb.yaml | 3 +
.../bindings/net/socionext,uniphier-ave4.yaml | 1 +
.../bindings/net/wireless/mediatek,mt76.yaml | 5 +
.../devicetree/bindings/net/wireless/qca,ath9k.txt | 48 -
.../bindings/net/wireless/qca,ath9k.yaml | 90 +
.../devicetree/bindings/vendor-prefixes.yaml | 2 +
.../device_drivers/ethernet/mellanox/mlx5.rst | 60 +
Documentation/networking/devlink/bnxt.rst | 2 +
.../networking/devlink/devlink-region.rst | 4 +-
Documentation/networking/devlink/ice.rst | 4 +
Documentation/networking/devlink/index.rst | 2 +
Documentation/networking/devlink/iosm.rst | 162 +
Documentation/networking/devlink/octeontx2.rst | 42 +
Documentation/networking/ethtool-netlink.rst | 81 +-
Documentation/networking/ip-sysctl.rst | 26 +-
Documentation/networking/ipvs-sysctl.rst | 11 +
Documentation/networking/mctp.rst | 59 +
MAINTAINERS | 29 +-
Makefile | 3 +
arch/alpha/include/uapi/asm/socket.h | 2 +
arch/arm/net/bpf_jit_32.c | 5 -
arch/m68k/emu/nfeth.c | 2 +-
arch/mips/Kconfig | 15 +-
arch/mips/include/asm/mach-lantiq/xway/xway_dma.h | 2 +-
arch/mips/include/asm/uasm.h | 5 +
arch/mips/include/uapi/asm/socket.h | 2 +
arch/mips/lantiq/xway/dma.c | 57 +-
arch/mips/mm/uasm-mips.c | 4 +-
arch/mips/mm/uasm.c | 3 +-
arch/mips/net/Makefile | 9 +-
arch/mips/net/bpf_jit.c | 1299 -
arch/mips/net/bpf_jit.h | 81 -
arch/mips/net/bpf_jit_asm.S | 285 -
arch/mips/net/bpf_jit_comp.c | 1034 +
arch/mips/net/bpf_jit_comp.h | 235 +
arch/mips/net/bpf_jit_comp32.c | 1899 +
arch/mips/net/bpf_jit_comp64.c | 1060 +
arch/mips/net/ebpf_jit.c | 1938 -
arch/parisc/include/uapi/asm/socket.h | 2 +
arch/riscv/mm/extable.c | 19 +-
arch/riscv/net/bpf_jit.h | 1 +
arch/riscv/net/bpf_jit_comp64.c | 185 +-
arch/riscv/net/bpf_jit_core.c | 21 +-
arch/s390/include/asm/qdio.h | 2 -
arch/sparc/include/uapi/asm/socket.h | 3 +
arch/um/drivers/net_kern.c | 3 +-
arch/x86/events/intel/core.c | 67 +-
arch/x86/events/intel/ds.c | 2 +-
arch/x86/events/intel/lbr.c | 20 +-
arch/x86/events/perf_event.h | 19 +
arch/x86/net/bpf_jit_comp.c | 159 +-
arch/xtensa/platforms/iss/network.c | 5 +-
drivers/base/property.c | 63 -
drivers/base/regmap/regmap-mdio.c | 6 +-
drivers/bcma/main.c | 2 +-
drivers/bluetooth/btintel.c | 239 +-
drivers/bluetooth/btintel.h | 11 +
drivers/bluetooth/btmrvl_main.c | 6 +-
drivers/bluetooth/btmtkuart.c | 13 +-
drivers/bluetooth/btrsi.c | 1 -
drivers/bluetooth/btrtl.c | 26 +-
drivers/bluetooth/btusb.c | 64 +-
drivers/bluetooth/hci_h5.c | 35 +-
drivers/bluetooth/hci_ldisc.c | 3 +
drivers/bluetooth/hci_qca.c | 5 +-
drivers/bluetooth/hci_vhci.c | 122 +
drivers/firewire/net.c | 14 +-
drivers/hsi/clients/ssi_protocol.c | 4 +-
drivers/infiniband/hw/mlx4/main.c | 2 +-
drivers/infiniband/hw/mlx4/qp.c | 2 +-
drivers/infiniband/hw/mlx5/cmd.c | 26 +
drivers/infiniband/hw/mlx5/cmd.h | 2 +
drivers/infiniband/hw/mlx5/devx.c | 13 +-
drivers/infiniband/hw/mlx5/devx.h | 2 +-
drivers/infiniband/hw/mlx5/main.c | 55 +-
drivers/infiniband/hw/mlx5/mlx5_ib.h | 31 +-
drivers/infiniband/hw/mlx5/mr.c | 83 +-
drivers/infiniband/hw/mlx5/odp.c | 39 +-
drivers/infiniband/hw/mlx5/wr.c | 10 +-
drivers/infiniband/hw/qedr/main.c | 2 +-
drivers/media/dvb-core/dvb_net.c | 8 +-
drivers/message/fusion/mptlan.c | 2 +-
drivers/misc/sgi-xp/xpnet.c | 9 +-
drivers/net/Kconfig | 18 +-
drivers/net/Makefile | 1 +
drivers/net/amt.c | 3296 ++
drivers/net/appletalk/cops.c | 2 +-
drivers/net/appletalk/ltpc.c | 3 +-
drivers/net/arcnet/arc-rimi.c | 5 +-
drivers/net/arcnet/arcdevice.h | 5 +
drivers/net/arcnet/com20020-isa.c | 2 +-
drivers/net/arcnet/com20020-pci.c | 2 +-
drivers/net/arcnet/com20020.c | 4 +-
drivers/net/arcnet/com20020_cs.c | 2 +-
drivers/net/arcnet/com90io.c | 2 +-
drivers/net/arcnet/com90xx.c | 3 +-
drivers/net/bareudp.c | 7 +-
drivers/net/bonding/bond_alb.c | 28 +-
drivers/net/bonding/bond_main.c | 4 +-
drivers/net/bonding/bond_sysfs.c | 4 +-
drivers/net/can/at91_can.c | 4 +-
drivers/net/can/dev/bittiming.c | 30 +-
drivers/net/can/dev/netlink.c | 221 +-
drivers/net/can/janz-ican3.c | 2 +-
drivers/net/can/mscan/mpc5xxx_can.c | 6 +-
drivers/net/can/rcar/Kconfig | 4 +-
drivers/net/can/usb/etas_es58x/es58x_fd.c | 7 +-
drivers/net/can/usb/gs_usb.c | 12 +-
drivers/net/can/usb/peak_usb/pcan_usb_core.c | 13 +
drivers/net/can/usb/peak_usb/pcan_usb_core.h | 1 +
drivers/net/can/usb/peak_usb/pcan_usb_fd.c | 9 +-
drivers/net/can/xilinx_can.c | 7 +-
drivers/net/dsa/Kconfig | 1 +
drivers/net/dsa/Makefile | 2 +-
drivers/net/dsa/b53/b53_common.c | 101 +-
drivers/net/dsa/b53/b53_priv.h | 2 +-
drivers/net/dsa/bcm_sf2.c | 12 +-
drivers/net/dsa/hirschmann/hellcreek.c | 6 +-
drivers/net/dsa/lantiq_gswip.c | 42 +-
drivers/net/dsa/microchip/ksz8795.c | 8 +-
drivers/net/dsa/mv88e6xxx/chip.c | 5 +-
drivers/net/dsa/ocelot/felix.c | 4 +-
drivers/net/dsa/ocelot/felix_vsc9959.c | 8 +-
drivers/net/dsa/ocelot/seville_vsc9953.c | 8 +-
drivers/net/dsa/qca/ar9331.c | 10 +-
drivers/net/dsa/qca8k.c | 435 +-
drivers/net/dsa/qca8k.h | 35 +-
drivers/net/dsa/realtek-smi-core.c | 4 +
drivers/net/dsa/realtek-smi-core.h | 4 +-
drivers/net/dsa/rtl8365mb.c | 1982 +
drivers/net/dsa/rtl8366.c | 96 +-
drivers/net/dsa/rtl8366rb.c | 301 +-
drivers/net/dsa/sja1105/sja1105.h | 29 +-
drivers/net/dsa/sja1105/sja1105_clocking.c | 35 +-
drivers/net/dsa/sja1105/sja1105_dynamic_config.c | 91 +-
drivers/net/dsa/sja1105/sja1105_main.c | 144 +-
drivers/net/dsa/sja1105/sja1105_vl.c | 15 +-
drivers/net/dsa/xrs700x/xrs700x.c | 8 +-
drivers/net/dsa/xrs700x/xrs700x_mdio.c | 12 +-
drivers/net/ethernet/3com/3c509.c | 2 +-
drivers/net/ethernet/3com/3c515.c | 5 +-
drivers/net/ethernet/3com/3c574_cs.c | 11 +-
drivers/net/ethernet/3com/3c589_cs.c | 10 +-
drivers/net/ethernet/3com/3c59x.c | 4 +-
drivers/net/ethernet/8390/apne.c | 3 +-
drivers/net/ethernet/8390/ax88796.c | 12 +-
drivers/net/ethernet/8390/axnet_cs.c | 7 +-
drivers/net/ethernet/8390/mcf8390.c | 3 +-
drivers/net/ethernet/8390/ne.c | 4 +-
drivers/net/ethernet/8390/ne2k-pci.c | 2 +-
drivers/net/ethernet/8390/pcnet_cs.c | 22 +-
drivers/net/ethernet/8390/stnic.c | 5 +-
drivers/net/ethernet/8390/zorro8390.c | 3 +-
drivers/net/ethernet/Kconfig | 1 +
drivers/net/ethernet/Makefile | 1 +
drivers/net/ethernet/actions/owl-emac.c | 6 +-
drivers/net/ethernet/adaptec/starfire.c | 14 +-
drivers/net/ethernet/aeroflex/greth.c | 8 +-
drivers/net/ethernet/agere/et131x.c | 4 +-
drivers/net/ethernet/alacritech/slicoss.c | 4 +-
drivers/net/ethernet/allwinner/sun4i-emac.c | 4 +-
drivers/net/ethernet/alteon/acenic.c | 20 +-
drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
drivers/net/ethernet/amazon/ena/ena_netdev.c | 2 +-
drivers/net/ethernet/amd/Kconfig | 2 +-
drivers/net/ethernet/amd/amd8111e.c | 6 +-
drivers/net/ethernet/amd/atarilance.c | 4 +-
drivers/net/ethernet/amd/au1000_eth.c | 2 +-
drivers/net/ethernet/amd/nmclan_cs.c | 5 +-
drivers/net/ethernet/amd/pcnet32.c | 15 +-
drivers/net/ethernet/amd/sun3lance.c | 4 +-
drivers/net/ethernet/amd/sunlance.c | 4 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 8 +
drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 4 +-
drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 8 +-
drivers/net/ethernet/amd/xgbe/xgbe-main.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 20 +-
drivers/net/ethernet/amd/xgbe/xgbe.h | 2 +-
drivers/net/ethernet/apm/xgene-v2/mac.c | 2 +-
drivers/net/ethernet/apm/xgene-v2/main.c | 2 +-
drivers/net/ethernet/apm/xgene/xgene_enet_hw.c | 2 +-
drivers/net/ethernet/apm/xgene/xgene_enet_main.c | 2 +-
drivers/net/ethernet/apm/xgene/xgene_enet_sgmac.c | 2 +-
drivers/net/ethernet/apm/xgene/xgene_enet_xgmac.c | 2 +-
drivers/net/ethernet/apple/bmac.c | 15 +-
drivers/net/ethernet/aquantia/atlantic/aq_hw.h | 6 +-
drivers/net/ethernet/aquantia/atlantic/aq_macsec.c | 2 +-
drivers/net/ethernet/aquantia/atlantic/aq_nic.c | 8 +-
.../ethernet/aquantia/atlantic/hw_atl/hw_atl_a0.c | 4 +-
.../ethernet/aquantia/atlantic/hw_atl/hw_atl_b0.c | 4 +-
.../ethernet/aquantia/atlantic/hw_atl/hw_atl_b0.h | 2 +-
.../aquantia/atlantic/hw_atl/hw_atl_utils.c | 4 +-
.../aquantia/atlantic/hw_atl/hw_atl_utils_fw2x.c | 4 +-
.../ethernet/aquantia/atlantic/hw_atl2/hw_atl2.c | 2 +-
drivers/net/ethernet/arc/Kconfig | 4 +-
drivers/net/ethernet/arc/emac_main.c | 4 +-
drivers/net/ethernet/arc/emac_mdio.c | 9 +-
drivers/net/ethernet/asix/Kconfig | 35 +
drivers/net/ethernet/asix/Makefile | 6 +
drivers/net/ethernet/asix/ax88796c_ioctl.c | 239 +
drivers/net/ethernet/asix/ax88796c_ioctl.h | 26 +
drivers/net/ethernet/asix/ax88796c_main.c | 1164 +
drivers/net/ethernet/asix/ax88796c_main.h | 568 +
drivers/net/ethernet/asix/ax88796c_spi.c | 115 +
drivers/net/ethernet/asix/ax88796c_spi.h | 69 +
drivers/net/ethernet/atheros/ag71xx.c | 12 +-
drivers/net/ethernet/atheros/alx/main.c | 4 +-
drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 12 +-
drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 10 +-
drivers/net/ethernet/atheros/atlx/atl1.c | 2 +-
drivers/net/ethernet/atheros/atlx/atl2.c | 4 +-
drivers/net/ethernet/atheros/atlx/atlx.c | 2 +-
drivers/net/ethernet/broadcom/b44.c | 12 +-
drivers/net/ethernet/broadcom/bcm4908_enet.c | 4 +-
drivers/net/ethernet/broadcom/bcm63xx_enet.c | 6 +-
drivers/net/ethernet/broadcom/bcmsysport.c | 6 +-
drivers/net/ethernet/broadcom/bgmac-bcma-mdio.c | 6 +-
drivers/net/ethernet/broadcom/bgmac-bcma.c | 37 +-
drivers/net/ethernet/broadcom/bgmac-platform.c | 2 +-
drivers/net/ethernet/broadcom/bgmac.c | 4 +-
drivers/net/ethernet/broadcom/bnx2.c | 6 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x.h | 2 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 2 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 22 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.h | 3 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_vfpf.c | 9 +-
drivers/net/ethernet/broadcom/bnxt/Makefile | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 283 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.h | 113 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_coredump.c | 444 +
drivers/net/ethernet/broadcom/bnxt/bnxt_coredump.h | 51 +
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c | 785 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.h | 27 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 400 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.h | 46 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_hsi.h | 155 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c | 2 -
drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.h | 3 +
drivers/net/ethernet/broadcom/bnxt/bnxt_sriov.c | 6 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_sriov.h | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.h | 3 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_vfr.c | 2 +-
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 87 +-
drivers/net/ethernet/broadcom/genet/bcmgenet.h | 10 +-
drivers/net/ethernet/broadcom/genet/bcmmii.c | 202 +-
drivers/net/ethernet/broadcom/tg3.c | 60 +-
drivers/net/ethernet/brocade/bna/bnad.c | 5 +-
drivers/net/ethernet/cadence/macb.h | 7 +-
drivers/net/ethernet/cadence/macb_main.c | 42 +-
drivers/net/ethernet/cadence/macb_ptp.c | 13 +-
drivers/net/ethernet/calxeda/xgmac.c | 8 +-
drivers/net/ethernet/cavium/liquidio/lio_core.c | 3 +-
drivers/net/ethernet/cavium/liquidio/lio_main.c | 40 +-
drivers/net/ethernet/cavium/liquidio/lio_vf_main.c | 4 +-
drivers/net/ethernet/cavium/octeon/octeon_mgmt.c | 2 +-
drivers/net/ethernet/cavium/thunder/nic_main.c | 3 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 11 +-
drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 9 +-
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 2 +-
drivers/net/ethernet/chelsio/cxgb/gmac.h | 2 +-
drivers/net/ethernet/chelsio/cxgb/pm3393.c | 2 +-
drivers/net/ethernet/chelsio/cxgb/subr.c | 2 +-
drivers/net/ethernet/chelsio/cxgb/vsc7326.c | 4 +-
drivers/net/ethernet/chelsio/cxgb3/common.h | 2 +-
drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 2 +-
drivers/net/ethernet/chelsio/cxgb3/t3_hw.c | 4 +-
drivers/net/ethernet/chelsio/cxgb3/xgmac.c | 2 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4.h | 2 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 2 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 2 +-
drivers/net/ethernet/chelsio/cxgb4vf/adapter.h | 3 +-
.../net/ethernet/chelsio/cxgb4vf/cxgb4vf_main.c | 8 +-
.../chelsio/inline_crypto/chtls/chtls_cm.c | 2 +-
.../chelsio/inline_crypto/chtls/chtls_cm.h | 2 +-
drivers/net/ethernet/cirrus/cs89x0.c | 13 +-
drivers/net/ethernet/cirrus/ep93xx_eth.c | 2 +-
drivers/net/ethernet/cirrus/mac89x0.c | 2 +-
drivers/net/ethernet/cisco/enic/enic_ethtool.c | 4 +-
drivers/net/ethernet/cisco/enic/enic_main.c | 9 +-
drivers/net/ethernet/cisco/enic/enic_pp.c | 2 +-
drivers/net/ethernet/cortina/gemini.c | 6 +-
drivers/net/ethernet/davicom/dm9000.c | 9 +-
drivers/net/ethernet/dec/tulip/de2104x.c | 15 +-
drivers/net/ethernet/dec/tulip/de4x5.c | 35 +-
drivers/net/ethernet/dec/tulip/dmfe.c | 9 +-
drivers/net/ethernet/dec/tulip/tulip_core.c | 45 +-
drivers/net/ethernet/dec/tulip/uli526x.c | 11 +-
drivers/net/ethernet/dec/tulip/winbond-840.c | 6 +-
drivers/net/ethernet/dec/tulip/xircom_cb.c | 4 +-
drivers/net/ethernet/dlink/dl2k.c | 5 +-
drivers/net/ethernet/dlink/sundance.c | 6 +-
drivers/net/ethernet/dnet.c | 8 +-
drivers/net/ethernet/ec_bhf.c | 4 +-
drivers/net/ethernet/emulex/benet/be_cmds.c | 2 +-
drivers/net/ethernet/emulex/benet/be_cmds.h | 2 +-
drivers/net/ethernet/emulex/benet/be_main.c | 7 +-
drivers/net/ethernet/ethoc.c | 28 +-
drivers/net/ethernet/ezchip/Kconfig | 2 +-
drivers/net/ethernet/ezchip/nps_enet.c | 4 +-
drivers/net/ethernet/faraday/ftgmac100.c | 9 +-
drivers/net/ethernet/fealnx.c | 8 +-
drivers/net/ethernet/freescale/dpaa/dpaa_eth.c | 6 +-
.../ethernet/freescale/dpaa2/dpaa2-eth-devlink.c | 21 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 24 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.h | 7 +-
.../net/ethernet/freescale/dpaa2/dpaa2-ethtool.c | 58 +
drivers/net/ethernet/freescale/dpaa2/dpaa2-mac.c | 2 +-
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 +-
drivers/net/ethernet/freescale/enetc/enetc.c | 332 +-
drivers/net/ethernet/freescale/enetc/enetc.h | 4 +
drivers/net/ethernet/freescale/enetc/enetc_hw.h | 6 +-
drivers/net/ethernet/freescale/enetc/enetc_pf.c | 32 +-
drivers/net/ethernet/freescale/enetc/enetc_ptp.c | 6 +-
drivers/net/ethernet/freescale/enetc/enetc_qos.c | 18 +-
drivers/net/ethernet/freescale/enetc/enetc_vf.c | 16 +-
drivers/net/ethernet/freescale/fec_main.c | 7 +-
drivers/net/ethernet/freescale/fec_mpc52xx.c | 4 +-
drivers/net/ethernet/freescale/fman/fman_dtsec.c | 8 +-
drivers/net/ethernet/freescale/fman/fman_dtsec.h | 2 +-
drivers/net/ethernet/freescale/fman/fman_memac.c | 8 +-
drivers/net/ethernet/freescale/fman/fman_memac.h | 2 +-
drivers/net/ethernet/freescale/fman/fman_tgec.c | 8 +-
drivers/net/ethernet/freescale/fman/fman_tgec.h | 2 +-
drivers/net/ethernet/freescale/fman/mac.h | 2 +-
.../net/ethernet/freescale/fs_enet/fs_enet-main.c | 2 +-
drivers/net/ethernet/freescale/gianfar.c | 2 +-
drivers/net/ethernet/freescale/ucc_geth.c | 4 +-
drivers/net/ethernet/fujitsu/fmvj18x_cs.c | 14 +-
drivers/net/ethernet/google/gve/gve.h | 52 +-
drivers/net/ethernet/google/gve/gve_adminq.c | 61 +-
drivers/net/ethernet/google/gve/gve_adminq.h | 15 +
drivers/net/ethernet/google/gve/gve_desc.h | 13 +-
drivers/net/ethernet/google/gve/gve_ethtool.c | 7 +-
drivers/net/ethernet/google/gve/gve_main.c | 109 +-
drivers/net/ethernet/google/gve/gve_rx.c | 413 +-
drivers/net/ethernet/google/gve/gve_rx_dqo.c | 68 +-
drivers/net/ethernet/google/gve/gve_tx.c | 117 +-
drivers/net/ethernet/google/gve/gve_tx_dqo.c | 84 +-
drivers/net/ethernet/google/gve/gve_utils.c | 37 +-
drivers/net/ethernet/google/gve/gve_utils.h | 2 +-
drivers/net/ethernet/hisilicon/hip04_eth.c | 2 +-
drivers/net/ethernet/hisilicon/hisi_femac.c | 6 +-
drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 4 +-
drivers/net/ethernet/hisilicon/hns/hnae.h | 4 +-
drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 7 +-
drivers/net/ethernet/hisilicon/hns/hns_dsaf_gmac.c | 2 +-
drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c | 2 +-
drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.h | 5 +-
drivers/net/ethernet/hisilicon/hns/hns_dsaf_main.h | 2 +-
.../net/ethernet/hisilicon/hns/hns_dsaf_xgmac.c | 2 +-
drivers/net/ethernet/hisilicon/hns/hns_enet.c | 4 +-
drivers/net/ethernet/hisilicon/hns3/hnae3.h | 11 +-
drivers/net/ethernet/hisilicon/hns3/hns3_debugfs.c | 199 +
drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 4 +-
drivers/net/ethernet/hisilicon/hns3/hns3_enet.h | 3 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.c | 1 +
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.h | 6 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_debugfs.c | 3 +
.../ethernet/hisilicon/hns3/hns3pf/hclge_devlink.c | 18 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_err.c | 14 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_err.h | 4 +
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 555 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 34 +-
.../hisilicon/hns3/hns3vf/hclgevf_devlink.c | 18 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 2 +-
drivers/net/ethernet/huawei/hinic/hinic_devlink.c | 4 +-
drivers/net/ethernet/huawei/hinic/hinic_devlink.h | 2 +-
drivers/net/ethernet/huawei/hinic/hinic_ethtool.c | 10 +-
drivers/net/ethernet/huawei/hinic/hinic_hw_dev.c | 13 +-
drivers/net/ethernet/huawei/hinic/hinic_main.c | 12 +-
drivers/net/ethernet/i825xx/sun3_82586.c | 7 +-
drivers/net/ethernet/ibm/ehea/ehea_main.c | 4 +-
drivers/net/ethernet/ibm/emac/core.c | 14 +-
drivers/net/ethernet/ibm/ibmveth.c | 46 +-
drivers/net/ethernet/ibm/ibmvnic.c | 666 +-
drivers/net/ethernet/ibm/ibmvnic.h | 10 +-
drivers/net/ethernet/intel/Kconfig | 14 +
drivers/net/ethernet/intel/e100.c | 4 +-
drivers/net/ethernet/intel/e1000/e1000_main.c | 4 +-
drivers/net/ethernet/intel/e1000e/e1000.h | 1 +
drivers/net/ethernet/intel/e1000e/netdev.c | 5 +-
drivers/net/ethernet/intel/fm10k/fm10k_netdev.c | 2 +-
drivers/net/ethernet/intel/fm10k/fm10k_pci.c | 4 +-
drivers/net/ethernet/intel/i40e/i40e.h | 2 +-
drivers/net/ethernet/intel/i40e/i40e_main.c | 4 +-
drivers/net/ethernet/intel/i40e/i40e_xsk.c | 52 +-
drivers/net/ethernet/intel/iavf/iavf.h | 48 +-
drivers/net/ethernet/intel/iavf/iavf_main.c | 238 +-
drivers/net/ethernet/intel/iavf/iavf_virtchnl.c | 6 +-
drivers/net/ethernet/intel/ice/Makefile | 5 +-
drivers/net/ethernet/intel/ice/ice.h | 215 +-
drivers/net/ethernet/intel/ice/ice_adminq_cmd.h | 94 +-
drivers/net/ethernet/intel/ice/ice_arfs.c | 4 +-
drivers/net/ethernet/intel/ice/ice_base.c | 121 +-
drivers/net/ethernet/intel/ice/ice_base.h | 8 +-
drivers/net/ethernet/intel/ice/ice_common.c | 129 +-
drivers/net/ethernet/intel/ice/ice_common.h | 7 +
drivers/net/ethernet/intel/ice/ice_dcb.c | 225 +-
drivers/net/ethernet/intel/ice/ice_dcb.h | 18 +
drivers/net/ethernet/intel/ice/ice_dcb_lib.c | 216 +-
drivers/net/ethernet/intel/ice/ice_dcb_lib.h | 32 +-
drivers/net/ethernet/intel/ice/ice_dcb_nl.c | 192 +-
drivers/net/ethernet/intel/ice/ice_devids.h | 2 +
drivers/net/ethernet/intel/ice/ice_devlink.c | 256 +-
drivers/net/ethernet/intel/ice/ice_devlink.h | 8 +-
drivers/net/ethernet/intel/ice/ice_eswitch.c | 655 +
drivers/net/ethernet/intel/ice/ice_eswitch.h | 83 +
drivers/net/ethernet/intel/ice/ice_ethtool.c | 236 +-
drivers/net/ethernet/intel/ice/ice_ethtool_fdir.c | 4 +-
drivers/net/ethernet/intel/ice/ice_fdir.c | 2 +-
drivers/net/ethernet/intel/ice/ice_fdir.h | 2 +-
drivers/net/ethernet/intel/ice/ice_flex_pipe.c | 303 +-
drivers/net/ethernet/intel/ice/ice_flex_pipe.h | 14 +
drivers/net/ethernet/intel/ice/ice_flex_type.h | 17 +
drivers/net/ethernet/intel/ice/ice_fltr.c | 80 +
drivers/net/ethernet/intel/ice/ice_fltr.h | 3 +
drivers/net/ethernet/intel/ice/ice_hw_autogen.h | 1 +
drivers/net/ethernet/intel/ice/ice_lan_tx_rx.h | 43 +
drivers/net/ethernet/intel/ice/ice_lib.c | 855 +-
drivers/net/ethernet/intel/ice/ice_lib.h | 38 +-
drivers/net/ethernet/intel/ice/ice_main.c | 1637 +-
drivers/net/ethernet/intel/ice/ice_protocol_type.h | 204 +
drivers/net/ethernet/intel/ice/ice_ptp.c | 372 +-
drivers/net/ethernet/intel/ice/ice_ptp.h | 24 +-
drivers/net/ethernet/intel/ice/ice_ptp_hw.c | 151 +
drivers/net/ethernet/intel/ice/ice_ptp_hw.h | 22 +
drivers/net/ethernet/intel/ice/ice_repr.c | 389 +
drivers/net/ethernet/intel/ice/ice_repr.h | 28 +
drivers/net/ethernet/intel/ice/ice_sched.c | 184 +
drivers/net/ethernet/intel/ice/ice_sched.h | 8 +
drivers/net/ethernet/intel/ice/ice_switch.c | 2888 +-
drivers/net/ethernet/intel/ice/ice_switch.h | 152 +-
drivers/net/ethernet/intel/ice/ice_tc_lib.c | 1369 +
drivers/net/ethernet/intel/ice/ice_tc_lib.h | 162 +
drivers/net/ethernet/intel/ice/ice_trace.h | 28 +-
drivers/net/ethernet/intel/ice/ice_txrx.c | 326 +-
drivers/net/ethernet/intel/ice/ice_txrx.h | 147 +-
drivers/net/ethernet/intel/ice/ice_txrx_lib.c | 102 +-
drivers/net/ethernet/intel/ice/ice_txrx_lib.h | 14 +-
drivers/net/ethernet/intel/ice/ice_type.h | 19 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 447 +-
drivers/net/ethernet/intel/ice/ice_virtchnl_pf.h | 74 +-
drivers/net/ethernet/intel/ice/ice_xsk.c | 158 +-
drivers/net/ethernet/intel/ice/ice_xsk.h | 20 +-
drivers/net/ethernet/intel/igb/igb_main.c | 27 +-
drivers/net/ethernet/intel/igbvf/netdev.c | 8 +-
drivers/net/ethernet/intel/igc/igc_base.c | 8 +-
drivers/net/ethernet/intel/igc/igc_defines.h | 2 +-
drivers/net/ethernet/intel/igc/igc_hw.h | 1 +
drivers/net/ethernet/intel/igc/igc_main.c | 5 +-
drivers/net/ethernet/intel/igc/igc_ptp.c | 2 +-
drivers/net/ethernet/intel/ixgb/ixgb_hw.c | 2 +-
drivers/net/ethernet/intel/ixgb/ixgb_hw.h | 2 +-
drivers/net/ethernet/intel/ixgb/ixgb_main.c | 10 +-
drivers/net/ethernet/intel/ixgbe/ixgbe.h | 23 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_ethtool.c | 5 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_lib.c | 9 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 54 +-
.../net/ethernet/intel/ixgbe/ixgbe_txrx_common.h | 3 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 16 +-
drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 6 +-
drivers/net/ethernet/intel/ixgbevf/vf.c | 2 +-
drivers/net/ethernet/jme.c | 4 +-
drivers/net/ethernet/korina.c | 4 +-
drivers/net/ethernet/lantiq_etop.c | 21 +-
drivers/net/ethernet/lantiq_xrx200.c | 74 +-
drivers/net/ethernet/litex/Kconfig | 2 +-
drivers/net/ethernet/litex/litex_liteeth.c | 2 +-
drivers/net/ethernet/marvell/mv643xx_eth.c | 16 +-
drivers/net/ethernet/marvell/mvneta.c | 75 +-
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 117 +-
drivers/net/ethernet/marvell/mvpp2/mvpp2_prs.c | 2 +-
drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 11 +-
drivers/net/ethernet/marvell/octeontx2/af/common.h | 1 +
.../ethernet/marvell/octeontx2/af/lmac_common.h | 5 +
drivers/net/ethernet/marvell/octeontx2/af/mbox.h | 138 +-
drivers/net/ethernet/marvell/octeontx2/af/npc.h | 20 +-
.../ethernet/marvell/octeontx2/af/npc_profile.h | 994 +-
drivers/net/ethernet/marvell/octeontx2/af/ptp.c | 133 +-
drivers/net/ethernet/marvell/octeontx2/af/ptp.h | 1 +
drivers/net/ethernet/marvell/octeontx2/af/rpm.c | 17 +
drivers/net/ethernet/marvell/octeontx2/af/rpm.h | 3 +
drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 76 +-
drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 19 +-
.../net/ethernet/marvell/octeontx2/af/rvu_cgx.c | 13 +-
.../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 4 +-
.../net/ethernet/marvell/octeontx2/af/rvu_cpt.c | 601 +-
.../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 118 +-
.../ethernet/marvell/octeontx2/af/rvu_devlink.c | 16 +-
.../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 222 +-
.../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 96 +
.../net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 3 +
.../net/ethernet/marvell/octeontx2/af/rvu_reg.h | 4 +
.../net/ethernet/marvell/octeontx2/af/rvu_struct.h | 18 +
.../net/ethernet/marvell/octeontx2/nic/Makefile | 6 +-
drivers/net/ethernet/marvell/octeontx2/nic/cn10k.c | 2 +-
.../ethernet/marvell/octeontx2/nic/otx2_common.c | 52 +-
.../ethernet/marvell/octeontx2/nic/otx2_common.h | 18 +-
.../ethernet/marvell/octeontx2/nic/otx2_devlink.c | 21 +-
.../ethernet/marvell/octeontx2/nic/otx2_ethtool.c | 43 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 234 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_ptp.c | 133 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 273 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_txrx.h | 16 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_vf.c | 8 +-
drivers/net/ethernet/marvell/prestera/prestera.h | 69 +-
.../ethernet/marvell/prestera/prestera_devlink.c | 35 +-
.../ethernet/marvell/prestera/prestera_devlink.h | 4 +-
.../ethernet/marvell/prestera/prestera_ethtool.c | 219 +-
.../ethernet/marvell/prestera/prestera_ethtool.h | 6 +
.../net/ethernet/marvell/prestera/prestera_hw.c | 1064 +-
.../net/ethernet/marvell/prestera/prestera_hw.h | 47 +-
.../net/ethernet/marvell/prestera/prestera_main.c | 161 +-
.../net/ethernet/marvell/prestera/prestera_pci.c | 114 +-
.../net/ethernet/marvell/prestera/prestera_rxtx.c | 7 -
drivers/net/ethernet/marvell/pxa168_eth.c | 21 +-
drivers/net/ethernet/marvell/skge.c | 6 +-
drivers/net/ethernet/marvell/sky2.c | 99 +-
drivers/net/ethernet/mediatek/mtk_eth_soc.c | 2 +-
drivers/net/ethernet/mediatek/mtk_star_emac.c | 4 +-
drivers/net/ethernet/mellanox/mlx4/cmd.c | 6 +-
drivers/net/ethernet/mellanox/mlx4/cq.c | 3 +-
drivers/net/ethernet/mellanox/mlx4/en_ethtool.c | 29 +-
drivers/net/ethernet/mellanox/mlx4/en_main.c | 1 -
drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 40 +-
drivers/net/ethernet/mellanox/mlx4/en_port.c | 4 +
drivers/net/ethernet/mellanox/mlx4/en_rx.c | 15 +
drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
drivers/net/ethernet/mellanox/mlx4/fw.c | 2 +-
drivers/net/ethernet/mellanox/mlx4/main.c | 12 +-
drivers/net/ethernet/mellanox/mlx4/mcg.c | 2 +-
drivers/net/ethernet/mellanox/mlx4/mlx4_en.h | 3 +
drivers/net/ethernet/mellanox/mlx4/mlx4_stats.h | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/Makefile | 8 +-
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 20 +-
drivers/net/ethernet/mellanox/mlx5/core/dev.c | 14 +-
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 30 +-
.../mellanox/mlx5/core/diag/fs_tracepoint.c | 3 +
.../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 7 +-
.../ethernet/mellanox/mlx5/core/diag/fw_tracer.h | 2 +-
.../ethernet/mellanox/mlx5/core/diag/rsc_dump.c | 10 +-
drivers/net/ethernet/mellanox/mlx5/core/en.h | 87 +-
.../net/ethernet/mellanox/mlx5/core/en/devlink.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 8 +-
.../net/ethernet/mellanox/mlx5/core/en/health.h | 1 -
.../net/ethernet/mellanox/mlx5/core/en/params.c | 163 +-
.../net/ethernet/mellanox/mlx5/core/en/params.h | 18 +-
drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/en/qos.c | 102 +-
drivers/net/ethernet/mellanox/mlx5/core/en/qos.h | 9 +
.../net/ethernet/mellanox/mlx5/core/en/rep/tc.c | 134 +-
.../net/ethernet/mellanox/mlx5/core/en/rep/tc.h | 14 +-
.../ethernet/mellanox/mlx5/core/en/reporter_rx.c | 7 +-
.../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 7 +-
drivers/net/ethernet/mellanox/mlx5/core/en/rss.c | 50 +-
drivers/net/ethernet/mellanox/mlx5/core/en/rss.h | 7 +-
.../net/ethernet/mellanox/mlx5/core/en/rx_res.c | 25 +-
.../net/ethernet/mellanox/mlx5/core/en/rx_res.h | 5 +-
.../ethernet/mellanox/mlx5/core/en/tc/int_port.c | 457 +
.../ethernet/mellanox/mlx5/core/en/tc/int_port.h | 65 +
.../ethernet/mellanox/mlx5/core/en/tc/post_act.c | 13 +-
.../net/ethernet/mellanox/mlx5/core/en/tc/sample.c | 39 +-
.../net/ethernet/mellanox/mlx5/core/en/tc/sample.h | 27 +
drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c | 51 +-
.../net/ethernet/mellanox/mlx5/core/en/tc_priv.h | 2 +
.../net/ethernet/mellanox/mlx5/core/en/tc_tun.c | 44 +-
.../net/ethernet/mellanox/mlx5/core/en/tc_tun.h | 1 +
.../ethernet/mellanox/mlx5/core/en/tc_tun_encap.c | 35 +
.../ethernet/mellanox/mlx5/core/en/tc_tun_vxlan.c | 9 +
drivers/net/ethernet/mellanox/mlx5/core/en/tir.c | 32 +-
drivers/net/ethernet/mellanox/mlx5/core/en/tir.h | 6 +-
drivers/net/ethernet/mellanox/mlx5/core/en/trap.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/en/txrx.h | 6 +
.../mellanox/mlx5/core/en_accel/ipsec_rxtx.h | 26 +
.../net/ethernet/mellanox/mlx5/core/en_common.c | 6 +-
.../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 19 +-
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 4 +-
.../ethernet/mellanox/mlx5/core/en_fs_ethtool.c | 12 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 420 +-
drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 18 +-
drivers/net/ethernet/mellanox/mlx5/core/en_rep.h | 4 +
drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 668 +-
.../net/ethernet/mellanox/mlx5/core/en_selftest.c | 92 +-
drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 15 +
drivers/net/ethernet/mellanox/mlx5/core/en_stats.h | 10 +
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 591 +-
drivers/net/ethernet/mellanox/mlx5/core/en_tc.h | 11 +-
drivers/net/ethernet/mellanox/mlx5/core/en_tx.c | 20 +-
drivers/net/ethernet/mellanox/mlx5/core/eq.c | 9 +-
.../net/ethernet/mellanox/mlx5/core/esw/bridge.c | 293 +-
.../ethernet/mellanox/mlx5/core/esw/bridge_priv.h | 1 +
.../ethernet/mellanox/mlx5/core/esw/devlink_port.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 18 +-
.../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 88 +-
.../mellanox/mlx5/core/eswitch_offloads_termtbl.c | 7 +-
.../net/ethernet/mellanox/mlx5/core/fpga/conn.c | 10 +-
.../net/ethernet/mellanox/mlx5/core/fpga/core.h | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/fs_cmd.c | 66 +-
drivers/net/ethernet/mellanox/mlx5/core/fs_cmd.h | 4 +
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 126 +-
drivers/net/ethernet/mellanox/mlx5/core/fs_core.h | 12 +-
.../net/ethernet/mellanox/mlx5/core/fs_counters.c | 26 +-
drivers/net/ethernet/mellanox/mlx5/core/fw.c | 21 +-
drivers/net/ethernet/mellanox/mlx5/core/fw_reset.c | 17 +-
drivers/net/ethernet/mellanox/mlx5/core/health.c | 147 +-
.../ethernet/mellanox/mlx5/core/ipoib/ethtool.c | 30 +
.../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 12 +-
.../ethernet/mellanox/mlx5/core/{ => lag}/lag.c | 102 +-
.../ethernet/mellanox/mlx5/core/{ => lag}/lag.h | 9 +-
.../mellanox/mlx5/core/{lag_mp.c => lag/mp.c} | 4 +-
.../mellanox/mlx5/core/{lag_mp.h => lag/mp.h} | 2 +-
.../net/ethernet/mellanox/mlx5/core/lag/port_sel.c | 611 +
.../net/ethernet/mellanox/mlx5/core/lag/port_sel.h | 52 +
.../net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c | 4 +
.../net/ethernet/mellanox/mlx5/core/lib/fs_ttc.h | 2 +
drivers/net/ethernet/mellanox/mlx5/core/lib/tout.c | 162 +
drivers/net/ethernet/mellanox/mlx5/core/lib/tout.h | 41 +
drivers/net/ethernet/mellanox/mlx5/core/main.c | 88 +-
.../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 24 +
drivers/net/ethernet/mellanox/mlx5/core/mlx5_irq.h | 2 -
drivers/net/ethernet/mellanox/mlx5/core/mr.c | 27 +-
.../net/ethernet/mellanox/mlx5/core/pagealloc.c | 16 +-
drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c | 36 +-
.../net/ethernet/mellanox/mlx5/core/sf/dev/dev.c | 23 +-
.../net/ethernet/mellanox/mlx5/core/sf/dev/dev.h | 1 +
.../mlx5/core/sf/dev/diag/dev_tracepoint.h | 58 +
.../ethernet/mellanox/mlx5/core/sf/dev/driver.c | 7 +-
.../net/ethernet/mellanox/mlx5/core/sf/devlink.c | 10 +-
.../mellanox/mlx5/core/sf/diag/sf_tracepoint.h | 173 +
.../mellanox/mlx5/core/sf/diag/vhca_tracepoint.h | 40 +
.../net/ethernet/mellanox/mlx5/core/sf/hw_table.c | 4 +
.../ethernet/mellanox/mlx5/core/sf/vhca_event.c | 3 +
.../mellanox/mlx5/core/steering/dr_action.c | 27 +-
.../ethernet/mellanox/mlx5/core/steering/dr_cmd.c | 6 +-
.../mellanox/mlx5/core/steering/dr_domain.c | 212 +-
.../ethernet/mellanox/mlx5/core/steering/dr_fw.c | 2 +-
.../mellanox/mlx5/core/steering/dr_icm_pool.c | 10 +-
.../mellanox/mlx5/core/steering/dr_matcher.c | 28 +-
.../ethernet/mellanox/mlx5/core/steering/dr_rule.c | 6 +-
.../ethernet/mellanox/mlx5/core/steering/dr_send.c | 11 +-
.../ethernet/mellanox/mlx5/core/steering/dr_ste.c | 272 +-
.../mellanox/mlx5/core/steering/dr_ste_v0.c | 13 +-
.../mellanox/mlx5/core/steering/dr_ste_v1.c | 20 +-
.../mellanox/mlx5/core/steering/dr_types.h | 52 +-
.../ethernet/mellanox/mlx5/core/steering/fs_dr.c | 17 +-
.../ethernet/mellanox/mlx5/core/steering/mlx5dr.h | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/uar.c | 14 +-
drivers/net/ethernet/mellanox/mlx5/core/vport.c | 21 +-
.../ethernet/mellanox/mlxbf_gige/mlxbf_gige_main.c | 2 +-
drivers/net/ethernet/mellanox/mlxfw/mlxfw.h | 2 +-
drivers/net/ethernet/mellanox/mlxsw/core.c | 90 +-
drivers/net/ethernet/mellanox/mlxsw/core.h | 2 -
drivers/net/ethernet/mellanox/mlxsw/core_env.c | 372 +-
drivers/net/ethernet/mellanox/mlxsw/core_env.h | 23 +
drivers/net/ethernet/mellanox/mlxsw/item.h | 56 +-
drivers/net/ethernet/mellanox/mlxsw/minimal.c | 66 +-
drivers/net/ethernet/mellanox/mlxsw/reg.h | 357 +-
drivers/net/ethernet/mellanox/mlxsw/resources.h | 8 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 390 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum.h | 10 +-
.../net/ethernet/mellanox/mlxsw/spectrum2_kvdl.c | 1 +
.../ethernet/mellanox/mlxsw/spectrum_acl_atcam.c | 8 +-
.../ethernet/mellanox/mlxsw/spectrum_acl_tcam.c | 15 +-
.../net/ethernet/mellanox/mlxsw/spectrum_buffers.c | 2 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum_cnt.c | 9 +-
.../net/ethernet/mellanox/mlxsw/spectrum_ethtool.c | 45 +
.../net/ethernet/mellanox/mlxsw/spectrum_ipip.c | 432 +-
.../net/ethernet/mellanox/mlxsw/spectrum_ipip.h | 27 +-
.../net/ethernet/mellanox/mlxsw/spectrum_qdisc.c | 583 +-
.../net/ethernet/mellanox/mlxsw/spectrum_router.c | 662 +-
.../net/ethernet/mellanox/mlxsw/spectrum_router.h | 9 +-
.../net/ethernet/mellanox/mlxsw/spectrum_span.c | 16 +
.../net/ethernet/mellanox/mlxsw/spectrum_span.h | 1 +
.../ethernet/mellanox/mlxsw/spectrum_switchdev.c | 11 +-
drivers/net/ethernet/micrel/ks8842.c | 15 +-
drivers/net/ethernet/micrel/ks8851.h | 2 +-
drivers/net/ethernet/micrel/ks8851_common.c | 14 +-
drivers/net/ethernet/micrel/ks8851_par.c | 4 +-
drivers/net/ethernet/micrel/ks8851_spi.c | 4 +-
drivers/net/ethernet/micrel/ksz884x.c | 16 +-
drivers/net/ethernet/microchip/enc28j60.c | 7 +-
drivers/net/ethernet/microchip/encx24j600.c | 7 +-
drivers/net/ethernet/microchip/lan743x_main.c | 4 +-
drivers/net/ethernet/microchip/lan743x_main.h | 3 +-
drivers/net/ethernet/microchip/lan743x_ptp.c | 91 +-
.../net/ethernet/microchip/sparx5/sparx5_main.c | 3 +-
.../net/ethernet/microchip/sparx5/sparx5_netdev.c | 6 +-
.../net/ethernet/microchip/sparx5/sparx5_phylink.c | 7 +-
drivers/net/ethernet/microsoft/mana/gdma_main.c | 155 +-
drivers/net/ethernet/microsoft/mana/hw_channel.c | 75 +-
drivers/net/ethernet/microsoft/mana/mana.h | 4 +-
drivers/net/ethernet/microsoft/mana/mana_en.c | 96 +-
drivers/net/ethernet/microsoft/mana/mana_ethtool.c | 3 -
drivers/net/ethernet/moxa/moxart_ether.c | 2 +-
drivers/net/ethernet/mscc/Kconfig | 2 +-
drivers/net/ethernet/mscc/ocelot.c | 327 +-
drivers/net/ethernet/mscc/ocelot.h | 1 +
drivers/net/ethernet/mscc/ocelot_flower.c | 125 +-
drivers/net/ethernet/mscc/ocelot_mrp.c | 8 +-
drivers/net/ethernet/mscc/ocelot_net.c | 24 +-
drivers/net/ethernet/mscc/ocelot_vsc7514.c | 9 +-
drivers/net/ethernet/myricom/myri10ge/myri10ge.c | 9 +-
drivers/net/ethernet/natsemi/natsemi.c | 6 +-
drivers/net/ethernet/natsemi/ns83820.c | 11 +-
drivers/net/ethernet/neterion/s2io.c | 6 +-
drivers/net/ethernet/neterion/s2io.h | 2 +-
drivers/net/ethernet/neterion/vxge/vxge-main.c | 6 +-
drivers/net/ethernet/netronome/nfp/abm/main.c | 2 +-
drivers/net/ethernet/netronome/nfp/abm/qdisc.c | 2 +-
drivers/net/ethernet/netronome/nfp/devlink_param.c | 9 +-
drivers/net/ethernet/netronome/nfp/flower/action.c | 3 +-
drivers/net/ethernet/netronome/nfp/flower/cmsg.h | 2 +-
.../net/ethernet/netronome/nfp/flower/offload.c | 2 +-
.../ethernet/netronome/nfp/flower/tunnel_conf.c | 6 +-
.../net/ethernet/netronome/nfp/nfp_net_common.c | 8 +-
drivers/net/ethernet/netronome/nfp/nfp_net_main.c | 11 +-
drivers/net/ethernet/netronome/nfp/nfp_net_repr.c | 3 +-
.../net/ethernet/netronome/nfp/nfp_netvf_main.c | 2 +-
drivers/net/ethernet/ni/nixge.c | 2 +-
drivers/net/ethernet/nvidia/forcedeth.c | 51 +-
drivers/net/ethernet/nxp/lpc_eth.c | 10 +-
.../net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c | 4 +-
drivers/net/ethernet/packetengines/hamachi.c | 5 +-
drivers/net/ethernet/packetengines/yellowfin.c | 6 +-
drivers/net/ethernet/pasemi/pasemi_mac.c | 4 +-
drivers/net/ethernet/pensando/ionic/ionic.h | 8 +-
.../net/ethernet/pensando/ionic/ionic_debugfs.c | 48 +-
drivers/net/ethernet/pensando/ionic/ionic_dev.c | 1 -
drivers/net/ethernet/pensando/ionic/ionic_dev.h | 4 -
.../net/ethernet/pensando/ionic/ionic_devlink.c | 10 +-
.../net/ethernet/pensando/ionic/ionic_ethtool.c | 41 +-
drivers/net/ethernet/pensando/ionic/ionic_lif.c | 264 +-
drivers/net/ethernet/pensando/ionic/ionic_lif.h | 49 +-
drivers/net/ethernet/pensando/ionic/ionic_main.c | 92 +-
drivers/net/ethernet/pensando/ionic/ionic_phc.c | 8 +-
.../net/ethernet/pensando/ionic/ionic_rx_filter.c | 241 +-
.../net/ethernet/pensando/ionic/ionic_rx_filter.h | 2 +
drivers/net/ethernet/pensando/ionic/ionic_stats.c | 121 -
drivers/net/ethernet/pensando/ionic/ionic_txrx.c | 14 -
.../net/ethernet/qlogic/netxen/netxen_nic_main.c | 8 +-
drivers/net/ethernet/qlogic/qed/qed.h | 44 +-
drivers/net/ethernet/qlogic/qed/qed_cxt.c | 16 +-
drivers/net/ethernet/qlogic/qed/qed_cxt.h | 143 +-
drivers/net/ethernet/qlogic/qed/qed_dbg_hsi.h | 1491 +
drivers/net/ethernet/qlogic/qed/qed_dcbx.h | 11 +-
drivers/net/ethernet/qlogic/qed/qed_debug.c | 1389 +-
drivers/net/ethernet/qlogic/qed/qed_debug.h | 7 +-
drivers/net/ethernet/qlogic/qed/qed_dev.c | 126 +-
drivers/net/ethernet/qlogic/qed/qed_dev_api.h | 347 +-
drivers/net/ethernet/qlogic/qed/qed_devlink.c | 12 +-
drivers/net/ethernet/qlogic/qed/qed_fcoe.c | 25 +-
drivers/net/ethernet/qlogic/qed/qed_hsi.h | 12643 ++---
drivers/net/ethernet/qlogic/qed/qed_hw.h | 222 +-
.../net/ethernet/qlogic/qed/qed_init_fw_funcs.c | 405 +-
drivers/net/ethernet/qlogic/qed/qed_init_ops.c | 98 +-
drivers/net/ethernet/qlogic/qed/qed_init_ops.h | 60 +-
drivers/net/ethernet/qlogic/qed/qed_int.c | 4 +-
drivers/net/ethernet/qlogic/qed/qed_int.h | 286 +-
drivers/net/ethernet/qlogic/qed/qed_iro_hsi.h | 500 +
drivers/net/ethernet/qlogic/qed/qed_iscsi.c | 15 +-
drivers/net/ethernet/qlogic/qed/qed_iscsi.h | 9 +-
drivers/net/ethernet/qlogic/qed/qed_iwarp.c | 2 +
drivers/net/ethernet/qlogic/qed/qed_l2.c | 43 +-
drivers/net/ethernet/qlogic/qed/qed_l2.h | 135 +-
drivers/net/ethernet/qlogic/qed/qed_ll2.c | 167 +-
drivers/net/ethernet/qlogic/qed/qed_ll2.h | 131 +-
drivers/net/ethernet/qlogic/qed/qed_main.c | 23 +-
drivers/net/ethernet/qlogic/qed/qed_mcp.c | 66 +-
drivers/net/ethernet/qlogic/qed/qed_mcp.h | 765 +-
drivers/net/ethernet/qlogic/qed/qed_mfw_hsi.h | 2474 +
drivers/net/ethernet/qlogic/qed/qed_ooo.c | 20 +-
drivers/net/ethernet/qlogic/qed/qed_ptp.c | 4 +-
drivers/net/ethernet/qlogic/qed/qed_rdma.c | 9 +-
drivers/net/ethernet/qlogic/qed/qed_rdma.h | 7 +-
drivers/net/ethernet/qlogic/qed/qed_reg_addr.h | 95 +-
drivers/net/ethernet/qlogic/qed/qed_roce.c | 1 -
drivers/net/ethernet/qlogic/qed/qed_selftest.h | 30 +-
drivers/net/ethernet/qlogic/qed/qed_sp.h | 223 +-
drivers/net/ethernet/qlogic/qed/qed_sp_commands.c | 10 +-
drivers/net/ethernet/qlogic/qed/qed_spq.c | 63 +-
drivers/net/ethernet/qlogic/qed/qed_sriov.c | 201 +-
drivers/net/ethernet/qlogic/qed/qed_sriov.h | 138 +-
drivers/net/ethernet/qlogic/qed/qed_vf.c | 13 +-
drivers/net/ethernet/qlogic/qed/qed_vf.h | 311 +-
drivers/net/ethernet/qlogic/qede/qede_filter.c | 53 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 21 +-
drivers/net/ethernet/qlogic/qla3xxx.c | 12 +-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_main.c | 4 +-
drivers/net/ethernet/qualcomm/emac/emac-mac.c | 2 +-
drivers/net/ethernet/qualcomm/emac/emac.c | 5 +-
drivers/net/ethernet/qualcomm/qca_spi.c | 2 +-
drivers/net/ethernet/qualcomm/qca_uart.c | 2 +-
drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.c | 2 +-
drivers/net/ethernet/rdc/r6040.c | 24 +-
drivers/net/ethernet/realtek/8139cp.c | 7 +-
drivers/net/ethernet/realtek/8139too.c | 7 +-
drivers/net/ethernet/realtek/atp.c | 4 +-
drivers/net/ethernet/realtek/r8169.h | 2 +-
drivers/net/ethernet/realtek/r8169_main.c | 44 +-
drivers/net/ethernet/realtek/r8169_phy_config.c | 59 -
drivers/net/ethernet/renesas/ravb.h | 52 +-
drivers/net/ethernet/renesas/ravb_main.c | 728 +-
drivers/net/ethernet/renesas/sh_eth.c | 18 +-
drivers/net/ethernet/rocker/rocker_main.c | 10 +-
drivers/net/ethernet/samsung/sxgbe/sxgbe_common.h | 2 +-
drivers/net/ethernet/samsung/sxgbe/sxgbe_core.c | 3 +-
drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 9 +-
.../net/ethernet/samsung/sxgbe/sxgbe_platform.c | 2 +-
drivers/net/ethernet/seeq/sgiseeq.c | 4 +-
drivers/net/ethernet/sfc/ef10.c | 4 +-
drivers/net/ethernet/sfc/ef100_nic.c | 2 +-
drivers/net/ethernet/sfc/ef10_sriov.c | 4 +-
drivers/net/ethernet/sfc/ef10_sriov.h | 6 +-
drivers/net/ethernet/sfc/efx.c | 2 +-
drivers/net/ethernet/sfc/efx_common.c | 4 +-
drivers/net/ethernet/sfc/ethtool_common.c | 10 +-
drivers/net/ethernet/sfc/falcon/efx.c | 6 +-
drivers/net/ethernet/sfc/net_driver.h | 2 +-
drivers/net/ethernet/sfc/siena_sriov.c | 2 +-
drivers/net/ethernet/sfc/siena_sriov.h | 2 +-
drivers/net/ethernet/sgi/ioc3-eth.c | 4 +-
drivers/net/ethernet/sgi/meth.c | 2 +-
drivers/net/ethernet/silan/sc92031.c | 14 +-
drivers/net/ethernet/sis/sis190.c | 10 +-
drivers/net/ethernet/sis/sis900.c | 19 +-
drivers/net/ethernet/smsc/epic100.c | 4 +-
drivers/net/ethernet/smsc/smc911x.c | 4 +-
drivers/net/ethernet/smsc/smc91c92_cs.c | 15 +-
drivers/net/ethernet/smsc/smc91x.c | 4 +-
drivers/net/ethernet/smsc/smsc911x.c | 22 +-
drivers/net/ethernet/smsc/smsc9420.c | 26 +-
drivers/net/ethernet/socionext/netsec.c | 46 +-
drivers/net/ethernet/socionext/sni_ave.c | 17 +-
drivers/net/ethernet/stmicro/stmmac/common.h | 4 +-
drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 +-
.../net/ethernet/stmicro/stmmac/dwmac-visconti.c | 7 +-
.../net/ethernet/stmicro/stmmac/dwmac1000_core.c | 2 +-
.../net/ethernet/stmicro/stmmac/dwmac100_core.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/dwmac4_lib.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/dwmac_lib.c | 2 +-
.../net/ethernet/stmicro/stmmac/dwxgmac2_core.c | 3 +-
drivers/net/ethernet/stmicro/stmmac/hwif.h | 3 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 14 +-
.../net/ethernet/stmicro/stmmac/stmmac_selftests.c | 8 +-
drivers/net/ethernet/sun/cassini.c | 7 +-
drivers/net/ethernet/sun/ldmvsw.c | 7 +-
drivers/net/ethernet/sun/niu.c | 46 +-
drivers/net/ethernet/sun/sunbmac.c | 6 +-
drivers/net/ethernet/sun/sungem.c | 15 +-
drivers/net/ethernet/sun/sunhme.c | 23 +-
drivers/net/ethernet/sun/sunqe.c | 4 +-
drivers/net/ethernet/sun/sunvnet.c | 4 +-
drivers/net/ethernet/synopsys/dwc-xlgmac-common.c | 2 +-
drivers/net/ethernet/synopsys/dwc-xlgmac-hw.c | 2 +-
drivers/net/ethernet/synopsys/dwc-xlgmac-net.c | 2 +-
drivers/net/ethernet/synopsys/dwc-xlgmac.h | 2 +-
drivers/net/ethernet/tehuti/tehuti.c | 8 +-
drivers/net/ethernet/ti/am65-cpsw-ethtool.c | 2 +-
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 26 +-
drivers/net/ethernet/ti/cpmac.c | 2 +-
drivers/net/ethernet/ti/cpsw.c | 6 +-
drivers/net/ethernet/ti/cpsw_new.c | 17 +-
drivers/net/ethernet/ti/cpts.c | 6 +-
drivers/net/ethernet/ti/davinci_emac.c | 8 +-
drivers/net/ethernet/ti/netcp_core.c | 8 +-
drivers/net/ethernet/ti/tlan.c | 14 +-
drivers/net/ethernet/toshiba/ps3_gelic_net.c | 2 +-
drivers/net/ethernet/toshiba/spider_net.c | 2 +-
drivers/net/ethernet/toshiba/tc35815.c | 11 +-
drivers/net/ethernet/via/via-rhine.c | 4 +-
drivers/net/ethernet/via/via-velocity.c | 4 +-
drivers/net/ethernet/wiznet/w5100-spi.c | 4 +-
drivers/net/ethernet/wiznet/w5100.c | 11 +-
drivers/net/ethernet/wiznet/w5100.h | 2 +-
drivers/net/ethernet/wiznet/w5300.c | 4 +-
drivers/net/ethernet/xilinx/ll_temac_main.c | 4 +-
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 10 +-
drivers/net/ethernet/xilinx/xilinx_emaclite.c | 11 +-
drivers/net/ethernet/xircom/xirc2ps_cs.c | 14 +-
drivers/net/ethernet/xscale/ixp4xx_eth.c | 7 +-
drivers/net/fddi/defxx.c | 12 +-
drivers/net/fddi/defza.c | 2 +-
drivers/net/fddi/skfp/h/smc.h | 2 +-
drivers/net/fddi/skfp/skfddi.c | 9 +-
drivers/net/fddi/skfp/smtinit.c | 4 +-
drivers/net/fjes/fjes_hw.c | 3 +-
drivers/net/fjes/fjes_hw.h | 2 +-
drivers/net/fjes/fjes_main.c | 14 +-
drivers/net/gtp.c | 2 +-
drivers/net/hamradio/6pack.c | 6 +-
drivers/net/hamradio/baycom_epp.c | 4 +-
drivers/net/hamradio/bpqether.c | 7 +-
drivers/net/hamradio/dmascc.c | 5 +-
drivers/net/hamradio/hdlcdrv.c | 4 +-
drivers/net/hamradio/mkiss.c | 6 +-
drivers/net/hamradio/scc.c | 7 +-
drivers/net/hamradio/yam.c | 4 +-
drivers/net/hippi/rrunner.c | 6 +-
drivers/net/hyperv/netvsc_drv.c | 6 +-
drivers/net/ieee802154/ca8210.c | 2 -
drivers/net/ifb.c | 5 +
drivers/net/ipvlan/ipvlan_main.c | 4 +-
drivers/net/ipvlan/ipvtap.c | 2 +-
drivers/net/macsec.c | 4 +-
drivers/net/macvlan.c | 7 +-
drivers/net/macvtap.c | 2 +-
drivers/net/net_failover.c | 3 +-
drivers/net/netdevsim/bus.c | 155 +-
drivers/net/netdevsim/dev.c | 204 +-
drivers/net/netdevsim/ethtool.c | 28 +
drivers/net/netdevsim/health.c | 32 -
drivers/net/netdevsim/netdev.c | 72 +-
drivers/net/netdevsim/netdevsim.h | 57 +-
drivers/net/ntb_netdev.c | 2 +-
drivers/net/pcs/pcs-xpcs.c | 2 +-
drivers/net/phy/at803x.c | 778 +-
drivers/net/phy/bcm7xxx.c | 203 +
drivers/net/phy/broadcom.c | 106 +-
drivers/net/phy/dp83867.c | 23 +-
drivers/net/phy/dp83869.c | 4 +-
drivers/net/phy/marvell10g.c | 107 +-
drivers/net/phy/mdio_bus.c | 28 +
drivers/net/phy/micrel.c | 107 +-
drivers/net/phy/microchip_t1.c | 239 +
drivers/net/phy/mscc/mscc_main.c | 2 +-
drivers/net/phy/phy-c45.c | 35 +
drivers/net/phy/phy_device.c | 10 +
drivers/net/phy/phylink.c | 142 +-
drivers/net/phy/realtek.c | 8 +
drivers/net/phy/sfp-bus.c | 2 +-
drivers/net/plip/plip.c | 8 +-
drivers/net/ppp/ppp_generic.c | 2 +-
drivers/net/rionet.c | 14 +-
drivers/net/sb1000.c | 12 +-
drivers/net/team/team.c | 2 +-
drivers/net/thunderbolt.c | 8 +-
drivers/net/usb/aqc111.c | 4 +-
drivers/net/usb/asix_common.c | 2 +-
drivers/net/usb/asix_devices.c | 2 +-
drivers/net/usb/ax88172a.c | 2 +-
drivers/net/usb/ax88179_178a.c | 12 +-
drivers/net/usb/catc.c | 24 +-
drivers/net/usb/cdc-phonet.c | 4 +-
drivers/net/usb/ch9200.c | 4 +-
drivers/net/usb/cx82310_eth.c | 5 +-
drivers/net/usb/dm9601.c | 7 +-
drivers/net/usb/ipheth.c | 2 +-
drivers/net/usb/kalmia.c | 2 +-
drivers/net/usb/kaweth.c | 3 +-
drivers/net/usb/lan78xx.c | 4 +-
drivers/net/usb/mcs7830.c | 9 +-
drivers/net/usb/pegasus.c | 2 +-
drivers/net/usb/qmi_wwan.c | 7 +-
drivers/net/usb/r8152.c | 4 +-
drivers/net/usb/rndis_host.c | 2 +-
drivers/net/usb/rtl8150.c | 4 +-
drivers/net/usb/sierra_net.c | 6 +-
drivers/net/usb/smsc75xx.c | 9 +-
drivers/net/usb/smsc95xx.c | 9 +-
drivers/net/usb/sr9700.c | 9 +-
drivers/net/usb/sr9800.c | 7 +-
drivers/net/usb/usbnet.c | 6 +-
drivers/net/virtio_net.c | 50 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 8 +-
drivers/net/vmxnet3/vmxnet3_ethtool.c | 10 +-
drivers/net/vrf.c | 28 +-
drivers/net/wan/hdlc_fr.c | 4 +-
drivers/net/wan/lapbether.c | 2 +-
drivers/net/wireless/ath/ar5523/ar5523.c | 3 +-
drivers/net/wireless/ath/ath10k/core.c | 16 +-
drivers/net/wireless/ath/ath10k/coredump.c | 11 +-
drivers/net/wireless/ath/ath10k/coredump.h | 7 +
drivers/net/wireless/ath/ath10k/mac.c | 45 +-
drivers/net/wireless/ath/ath10k/qmi.c | 3 +-
drivers/net/wireless/ath/ath10k/sdio.c | 6 +-
drivers/net/wireless/ath/ath10k/snoc.c | 77 +
drivers/net/wireless/ath/ath10k/snoc.h | 5 +
drivers/net/wireless/ath/ath10k/usb.c | 7 +-
drivers/net/wireless/ath/ath10k/wmi.c | 4 +
drivers/net/wireless/ath/ath10k/wmi.h | 3 +
drivers/net/wireless/ath/ath11k/core.c | 73 +-
drivers/net/wireless/ath/ath11k/core.h | 49 +-
drivers/net/wireless/ath/ath11k/dbring.c | 16 +-
drivers/net/wireless/ath/ath11k/debugfs.c | 27 +-
drivers/net/wireless/ath/ath11k/debugfs.h | 4 +
.../net/wireless/ath/ath11k/debugfs_htt_stats.c | 4344 +-
.../net/wireless/ath/ath11k/debugfs_htt_stats.h | 226 +
drivers/net/wireless/ath/ath11k/debugfs_sta.c | 8 +-
drivers/net/wireless/ath/ath11k/dp.c | 14 +-
drivers/net/wireless/ath/ath11k/dp.h | 9 +
drivers/net/wireless/ath/ath11k/dp_rx.c | 282 +-
drivers/net/wireless/ath/ath11k/dp_tx.c | 36 +-
drivers/net/wireless/ath/ath11k/dp_tx.h | 2 +-
drivers/net/wireless/ath/ath11k/hal_desc.h | 2 +
drivers/net/wireless/ath/ath11k/hal_rx.c | 6 +-
drivers/net/wireless/ath/ath11k/hw.c | 56 +-
drivers/net/wireless/ath/ath11k/hw.h | 24 +-
drivers/net/wireless/ath/ath11k/mac.c | 1445 +-
drivers/net/wireless/ath/ath11k/mac.h | 3 +
drivers/net/wireless/ath/ath11k/pci.c | 45 +-
drivers/net/wireless/ath/ath11k/peer.c | 11 +
drivers/net/wireless/ath/ath11k/qmi.c | 349 +-
drivers/net/wireless/ath/ath11k/qmi.h | 18 +-
drivers/net/wireless/ath/ath11k/reg.c | 18 +-
drivers/net/wireless/ath/ath11k/reg.h | 2 +-
drivers/net/wireless/ath/ath11k/spectral.c | 42 +-
drivers/net/wireless/ath/ath11k/trace.h | 11 +-
drivers/net/wireless/ath/ath11k/wmi.c | 162 +-
drivers/net/wireless/ath/ath11k/wmi.h | 107 +-
drivers/net/wireless/ath/ath5k/sysfs.c | 8 +-
drivers/net/wireless/ath/ath6kl/cfg80211.c | 9 +-
drivers/net/wireless/ath/ath6kl/usb.c | 7 +-
.../net/wireless/ath/ath9k/ath9k_pci_owl_loader.c | 105 +-
drivers/net/wireless/ath/ath9k/debug.c | 57 +-
drivers/net/wireless/ath/ath9k/debug.h | 1 +
drivers/net/wireless/ath/ath9k/eeprom.c | 12 +-
drivers/net/wireless/ath/ath9k/hw.h | 2 +
drivers/net/wireless/ath/ath9k/init.c | 58 +
drivers/net/wireless/ath/ath9k/main.c | 4 +-
drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +-
drivers/net/wireless/ath/spectral_common.h | 1 -
drivers/net/wireless/ath/wcn36xx/debug.c | 2 +-
drivers/net/wireless/ath/wcn36xx/dxe.c | 49 +-
drivers/net/wireless/ath/wcn36xx/hal.h | 38 +-
drivers/net/wireless/ath/wcn36xx/main.c | 55 +-
drivers/net/wireless/ath/wcn36xx/pmc.c | 13 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 189 +-
drivers/net/wireless/ath/wcn36xx/smd.h | 4 +
drivers/net/wireless/ath/wcn36xx/txrx.c | 147 +-
drivers/net/wireless/ath/wcn36xx/txrx.h | 3 +-
drivers/net/wireless/ath/wcn36xx/wcn36xx.h | 7 +-
drivers/net/wireless/ath/wil6210/cfg80211.c | 10 +-
drivers/net/wireless/ath/wil6210/main.c | 6 +-
drivers/net/wireless/ath/wil6210/wil6210.h | 2 +-
drivers/net/wireless/ath/wil6210/wmi.c | 2 +-
drivers/net/wireless/atmel/atmel.c | 19 +-
drivers/net/wireless/broadcom/b43/phy_g.c | 2 +-
drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +-
.../broadcom/brcm80211/brcmfmac/cfg80211.c | 12 +-
.../wireless/broadcom/brcm80211/brcmfmac/core.c | 6 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 10 +
.../net/wireless/broadcom/brcm80211/brcmfmac/of.c | 2 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/p2p.c | 4 +-
drivers/net/wireless/cisco/airo.c | 27 +-
drivers/net/wireless/intel/ipw2x00/ipw2100.c | 4 +-
drivers/net/wireless/intel/ipw2x00/ipw2200.c | 12 +-
drivers/net/wireless/intel/ipw2x00/ipw2200.h | 2 +-
drivers/net/wireless/intel/iwlegacy/3945-mac.c | 1 -
drivers/net/wireless/intel/iwlegacy/4965-mac.c | 1 -
drivers/net/wireless/intel/iwlwifi/Makefile | 2 +-
drivers/net/wireless/intel/iwlwifi/cfg/1000.c | 5 -
drivers/net/wireless/intel/iwlwifi/cfg/2000.c | 5 -
drivers/net/wireless/intel/iwlwifi/cfg/22000.c | 35 +-
drivers/net/wireless/intel/iwlwifi/cfg/5000.c | 5 -
drivers/net/wireless/intel/iwlwifi/cfg/6000.c | 5 -
drivers/net/wireless/intel/iwlwifi/dvm/agn.h | 11 +-
drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c | 4 -
drivers/net/wireless/intel/iwlwifi/dvm/dev.h | 5 -
drivers/net/wireless/intel/iwlwifi/dvm/devices.c | 5 -
drivers/net/wireless/intel/iwlwifi/dvm/led.c | 5 -
drivers/net/wireless/intel/iwlwifi/dvm/led.h | 5 -
drivers/net/wireless/intel/iwlwifi/dvm/lib.c | 5 -
drivers/net/wireless/intel/iwlwifi/dvm/mac80211.c | 5 -
drivers/net/wireless/intel/iwlwifi/dvm/main.c | 7 -
drivers/net/wireless/intel/iwlwifi/dvm/power.c | 4 -
drivers/net/wireless/intel/iwlwifi/dvm/power.h | 4 -
drivers/net/wireless/intel/iwlwifi/dvm/rs.c | 5 -
drivers/net/wireless/intel/iwlwifi/dvm/rs.h | 5 -
drivers/net/wireless/intel/iwlwifi/dvm/rx.c | 5 -
drivers/net/wireless/intel/iwlwifi/dvm/rxon.c | 5 -
drivers/net/wireless/intel/iwlwifi/dvm/scan.c | 4 -
drivers/net/wireless/intel/iwlwifi/dvm/sta.c | 5 -
drivers/net/wireless/intel/iwlwifi/dvm/tt.c | 4 -
drivers/net/wireless/intel/iwlwifi/dvm/tt.h | 4 -
drivers/net/wireless/intel/iwlwifi/dvm/tx.c | 5 -
drivers/net/wireless/intel/iwlwifi/dvm/ucode.c | 5 -
drivers/net/wireless/intel/iwlwifi/fw/acpi.c | 150 +-
drivers/net/wireless/intel/iwlwifi/fw/acpi.h | 43 +-
drivers/net/wireless/intel/iwlwifi/fw/api/d3.h | 45 +-
.../net/wireless/intel/iwlwifi/fw/api/dbg-tlv.h | 57 +
drivers/net/wireless/intel/iwlwifi/fw/api/debug.h | 35 +
.../net/wireless/intel/iwlwifi/fw/api/location.h | 10 +-
.../net/wireless/intel/iwlwifi/fw/api/mac-cfg.h | 10 +-
drivers/net/wireless/intel/iwlwifi/fw/api/mac.h | 3 +
.../net/wireless/intel/iwlwifi/fw/api/nvm-reg.h | 23 +
drivers/net/wireless/intel/iwlwifi/fw/api/phy.h | 6 +-
drivers/net/wireless/intel/iwlwifi/fw/api/power.h | 55 +-
drivers/net/wireless/intel/iwlwifi/fw/api/rs.h | 234 +-
drivers/net/wireless/intel/iwlwifi/fw/api/rx.h | 31 +-
drivers/net/wireless/intel/iwlwifi/fw/api/sta.h | 2 +
drivers/net/wireless/intel/iwlwifi/fw/api/tx.h | 40 +-
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 46 +-
drivers/net/wireless/intel/iwlwifi/fw/dump.c | 9 +-
drivers/net/wireless/intel/iwlwifi/fw/error-dump.h | 4 -
drivers/net/wireless/intel/iwlwifi/fw/file.h | 12 +-
drivers/net/wireless/intel/iwlwifi/fw/img.c | 58 +-
drivers/net/wireless/intel/iwlwifi/fw/img.h | 12 +
drivers/net/wireless/intel/iwlwifi/fw/init.c | 6 +-
drivers/net/wireless/intel/iwlwifi/fw/paging.c | 4 +-
drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 15 +-
drivers/net/wireless/intel/iwlwifi/fw/rs.c | 252 +
drivers/net/wireless/intel/iwlwifi/fw/runtime.h | 7 +-
drivers/net/wireless/intel/iwlwifi/fw/uefi.h | 5 +-
drivers/net/wireless/intel/iwlwifi/iwl-config.h | 8 +-
.../wireless/intel/iwlwifi/iwl-context-info-gen3.h | 4 +-
drivers/net/wireless/intel/iwlwifi/iwl-csr.h | 8 +
drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 228 +-
drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.h | 2 +
drivers/net/wireless/intel/iwlwifi/iwl-debug.c | 24 +-
drivers/net/wireless/intel/iwlwifi/iwl-debug.h | 26 +-
.../net/wireless/intel/iwlwifi/iwl-devtrace-data.h | 5 -
.../net/wireless/intel/iwlwifi/iwl-devtrace-io.h | 5 -
.../wireless/intel/iwlwifi/iwl-devtrace-iwlwifi.h | 5 -
.../net/wireless/intel/iwlwifi/iwl-devtrace-msg.h | 5 -
.../wireless/intel/iwlwifi/iwl-devtrace-ucode.h | 5 -
drivers/net/wireless/intel/iwlwifi/iwl-devtrace.c | 5 -
drivers/net/wireless/intel/iwlwifi/iwl-devtrace.h | 5 -
drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 44 +-
drivers/net/wireless/intel/iwlwifi/iwl-drv.h | 3 +-
.../net/wireless/intel/iwlwifi/iwl-eeprom-read.c | 4 +-
drivers/net/wireless/intel/iwlwifi/iwl-io.c | 50 +-
drivers/net/wireless/intel/iwlwifi/iwl-io.h | 5 +-
drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c | 17 +
drivers/net/wireless/intel/iwlwifi/iwl-prph.h | 36 +
drivers/net/wireless/intel/iwlwifi/iwl-trans.h | 30 +-
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 362 +-
drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c | 19 +-
.../net/wireless/intel/iwlwifi/mvm/ftm-initiator.c | 15 +-
.../net/wireless/intel/iwlwifi/mvm/ftm-responder.c | 15 +-
drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 106 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 44 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 269 +-
drivers/net/wireless/intel/iwlwifi/mvm/mvm.h | 17 +-
drivers/net/wireless/intel/iwlwifi/mvm/nvm.c | 5 +-
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 194 +-
drivers/net/wireless/intel/iwlwifi/mvm/power.c | 28 +-
drivers/net/wireless/intel/iwlwifi/mvm/rs-fw.c | 16 +-
drivers/net/wireless/intel/iwlwifi/mvm/rs.c | 182 +-
drivers/net/wireless/intel/iwlwifi/mvm/rs.h | 17 -
drivers/net/wireless/intel/iwlwifi/mvm/rx.c | 39 +-
drivers/net/wireless/intel/iwlwifi/mvm/rxmq.c | 119 +-
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 10 +-
drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 117 +-
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 54 +-
.../wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c | 4 +
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 306 +-
drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 9 +-
.../net/wireless/intel/iwlwifi/pcie/trans-gen2.c | 38 +-
drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 90 +-
drivers/net/wireless/intersil/hostap/hostap_hw.c | 5 +-
drivers/net/wireless/intersil/hostap/hostap_main.c | 4 +-
drivers/net/wireless/intersil/orinoco/main.c | 2 +-
drivers/net/wireless/mac80211_hwsim.c | 163 +-
drivers/net/wireless/marvell/libertas/cmd.c | 5 +-
drivers/net/wireless/marvell/libertas/if_usb.c | 2 +
drivers/net/wireless/marvell/libertas/main.c | 4 +-
drivers/net/wireless/marvell/libertas/mesh.c | 18 +-
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 +
drivers/net/wireless/marvell/mwifiex/11n.c | 7 +-
drivers/net/wireless/marvell/mwifiex/cfg80211.c | 384 +-
drivers/net/wireless/marvell/mwifiex/cmdevt.c | 21 +
drivers/net/wireless/marvell/mwifiex/main.c | 22 +-
drivers/net/wireless/marvell/mwifiex/main.h | 1 +
drivers/net/wireless/marvell/mwifiex/pcie.c | 36 +-
drivers/net/wireless/marvell/mwifiex/sta_cmd.c | 4 +
drivers/net/wireless/marvell/mwifiex/uap_event.c | 3 +-
drivers/net/wireless/marvell/mwifiex/usb.c | 16 +
drivers/net/wireless/marvell/mwl8k.c | 2 +-
drivers/net/wireless/mediatek/mt76/Makefile | 2 +-
drivers/net/wireless/mediatek/mt76/debugfs.c | 22 +-
drivers/net/wireless/mediatek/mt76/eeprom.c | 19 +-
drivers/net/wireless/mediatek/mt76/mac80211.c | 242 +-
drivers/net/wireless/mediatek/mt76/mcu.c | 8 +-
drivers/net/wireless/mediatek/mt76/mt76.h | 126 +-
drivers/net/wireless/mediatek/mt76/mt7603/mac.c | 11 +-
drivers/net/wireless/mediatek/mt76/mt7603/main.c | 3 +
drivers/net/wireless/mediatek/mt76/mt7603/pci.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt7615/Makefile | 2 +-
.../net/wireless/mediatek/mt76/mt7615/debugfs.c | 29 +-
drivers/net/wireless/mediatek/mt76/mt7615/init.c | 6 +-
drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 62 +-
drivers/net/wireless/mediatek/mt76/mt7615/main.c | 14 +-
drivers/net/wireless/mediatek/mt76/mt7615/mcu.c | 90 +-
drivers/net/wireless/mediatek/mt76/mt7615/mt7615.h | 20 +-
drivers/net/wireless/mediatek/mt76/mt7615/pci.c | 4 +-
.../net/wireless/mediatek/mt76/mt7615/pci_mac.c | 5 +-
drivers/net/wireless/mediatek/mt76/mt7615/sdio.c | 296 +-
.../net/wireless/mediatek/mt76/mt7615/sdio_mcu.c | 11 +-
.../net/wireless/mediatek/mt76/mt7615/usb_sdio.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt76_connac.h | 7 +-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 357 +-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 38 +-
drivers/net/wireless/mediatek/mt76/mt76x0/eeprom.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt76x0/pci.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 15 +-
drivers/net/wireless/mediatek/mt76/mt76x02_mmio.c | 12 +-
drivers/net/wireless/mediatek/mt76/mt76x02_util.c | 3 +
drivers/net/wireless/mediatek/mt76/mt76x2/pci.c | 5 +-
.../net/wireless/mediatek/mt76/mt7915/debugfs.c | 542 +-
drivers/net/wireless/mediatek/mt76/mt7915/init.c | 170 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 652 +-
drivers/net/wireless/mediatek/mt76/mt7915/mac.h | 11 +-
drivers/net/wireless/mediatek/mt76/mt7915/main.c | 366 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 1192 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.h | 128 +-
drivers/net/wireless/mediatek/mt76/mt7915/mmio.c | 6 +-
drivers/net/wireless/mediatek/mt76/mt7915/mt7915.h | 161 +-
drivers/net/wireless/mediatek/mt76/mt7915/pci.c | 5 +-
drivers/net/wireless/mediatek/mt76/mt7915/regs.h | 166 +-
.../net/wireless/mediatek/mt76/mt7915/testmode.c | 23 +
.../net/wireless/mediatek/mt76/mt7915/testmode.h | 6 +
drivers/net/wireless/mediatek/mt76/mt7921/Kconfig | 19 +-
drivers/net/wireless/mediatek/mt76/mt7921/Makefile | 7 +-
.../net/wireless/mediatek/mt76/mt7921/debugfs.c | 99 +-
drivers/net/wireless/mediatek/mt76/mt7921/dma.c | 74 +-
drivers/net/wireless/mediatek/mt76/mt7921/eeprom.c | 100 -
drivers/net/wireless/mediatek/mt76/mt7921/init.c | 96 +-
drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 776 +-
drivers/net/wireless/mediatek/mt76/mt7921/mac.h | 32 +
drivers/net/wireless/mediatek/mt76/mt7921/main.c | 328 +-
drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 448 +-
drivers/net/wireless/mediatek/mt76/mt7921/mcu.h | 63 +-
drivers/net/wireless/mediatek/mt76/mt7921/mt7921.h | 179 +-
drivers/net/wireless/mediatek/mt76/mt7921/pci.c | 66 +-
.../net/wireless/mediatek/mt76/mt7921/pci_mac.c | 348 +
.../net/wireless/mediatek/mt76/mt7921/pci_mcu.c | 115 +
drivers/net/wireless/mediatek/mt76/mt7921/regs.h | 58 +-
drivers/net/wireless/mediatek/mt76/mt7921/sdio.c | 317 +
.../net/wireless/mediatek/mt76/mt7921/sdio_mac.c | 220 +
.../net/wireless/mediatek/mt76/mt7921/sdio_mcu.c | 135 +
.../net/wireless/mediatek/mt76/mt7921/testmode.c | 197 +
drivers/net/wireless/mediatek/mt76/sdio.c | 303 +-
.../net/wireless/mediatek/mt76/{mt7615 => }/sdio.h | 33 +-
.../mediatek/mt76/{mt7615 => }/sdio_txrx.c | 134 +-
drivers/net/wireless/mediatek/mt76/testmode.c | 4 +-
drivers/net/wireless/mediatek/mt76/testmode.h | 7 +
drivers/net/wireless/mediatek/mt76/tx.c | 84 +-
drivers/net/wireless/mediatek/mt76/usb.c | 2 +-
drivers/net/wireless/mediatek/mt76/util.h | 10 +-
drivers/net/wireless/mediatek/mt7601u/dma.c | 2 +-
drivers/net/wireless/microchip/wilc1000/cfg80211.c | 11 +-
drivers/net/wireless/microchip/wilc1000/hif.c | 31 +-
drivers/net/wireless/microchip/wilc1000/hif.h | 1 +
drivers/net/wireless/microchip/wilc1000/netdev.c | 14 +-
drivers/net/wireless/microchip/wilc1000/netdev.h | 5 +-
drivers/net/wireless/microchip/wilc1000/sdio.c | 1 +
drivers/net/wireless/microchip/wilc1000/spi.c | 91 +-
drivers/net/wireless/microchip/wilc1000/wlan.c | 134 +-
drivers/net/wireless/microchip/wilc1000/wlan.h | 5 +-
drivers/net/wireless/microchip/wilc1000/wlan_cfg.c | 1 +
drivers/net/wireless/microchip/wilc1000/wlan_if.h | 7 +-
drivers/net/wireless/quantenna/qtnfmac/core.c | 6 +-
drivers/net/wireless/quantenna/qtnfmac/pcie/pcie.c | 2 -
drivers/net/wireless/ralink/rt2x00/rt2800usb.c | 1 -
drivers/net/wireless/ray_cs.c | 2 +-
drivers/net/wireless/realtek/Kconfig | 1 +
drivers/net/wireless/realtek/Makefile | 1 +
.../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +-
.../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 6 +-
.../net/wireless/realtek/rtl8xxxu/rtl8xxxu_regs.h | 2 +
drivers/net/wireless/realtek/rtlwifi/pci.c | 1 -
.../net/wireless/realtek/rtlwifi/rtl8192ee/hw.c | 2 +-
drivers/net/wireless/realtek/rtw88/debug.c | 46 +-
drivers/net/wireless/realtek/rtw88/debug.h | 1 +
drivers/net/wireless/realtek/rtw88/fw.c | 54 +-
drivers/net/wireless/realtek/rtw88/fw.h | 24 +
drivers/net/wireless/realtek/rtw88/main.c | 22 +-
drivers/net/wireless/realtek/rtw88/main.h | 49 +-
drivers/net/wireless/realtek/rtw88/phy.c | 119 +-
drivers/net/wireless/realtek/rtw88/phy.h | 2 +
drivers/net/wireless/realtek/rtw88/reg.h | 6 +
drivers/net/wireless/realtek/rtw88/regd.c | 753 +-
drivers/net/wireless/realtek/rtw88/regd.h | 8 +-
drivers/net/wireless/realtek/rtw88/rtw8821c.c | 19 +-
drivers/net/wireless/realtek/rtw88/rtw8822b.c | 46 +-
drivers/net/wireless/realtek/rtw88/rtw8822b.h | 8 +
drivers/net/wireless/realtek/rtw88/rtw8822c.c | 47 +
drivers/net/wireless/realtek/rtw88/rtw8822c.h | 3 +
drivers/net/wireless/realtek/rtw89/Kconfig | 50 +
drivers/net/wireless/realtek/rtw89/Makefile | 25 +
drivers/net/wireless/realtek/rtw89/cam.c | 695 +
drivers/net/wireless/realtek/rtw89/cam.h | 165 +
drivers/net/wireless/realtek/rtw89/coex.c | 5716 +++
drivers/net/wireless/realtek/rtw89/coex.h | 181 +
drivers/net/wireless/realtek/rtw89/core.c | 2502 +
drivers/net/wireless/realtek/rtw89/core.h | 3384 ++
drivers/net/wireless/realtek/rtw89/debug.c | 2489 +
drivers/net/wireless/realtek/rtw89/debug.h | 77 +
drivers/net/wireless/realtek/rtw89/efuse.c | 188 +
drivers/net/wireless/realtek/rtw89/efuse.h | 13 +
drivers/net/wireless/realtek/rtw89/fw.c | 1641 +
drivers/net/wireless/realtek/rtw89/fw.h | 1378 +
drivers/net/wireless/realtek/rtw89/mac.c | 3836 ++
drivers/net/wireless/realtek/rtw89/mac.h | 860 +
drivers/net/wireless/realtek/rtw89/mac80211.c | 676 +
drivers/net/wireless/realtek/rtw89/pci.c | 3060 ++
drivers/net/wireless/realtek/rtw89/pci.h | 630 +
drivers/net/wireless/realtek/rtw89/phy.c | 2868 ++
drivers/net/wireless/realtek/rtw89/phy.h | 311 +
drivers/net/wireless/realtek/rtw89/ps.c | 150 +
drivers/net/wireless/realtek/rtw89/ps.h | 16 +
drivers/net/wireless/realtek/rtw89/reg.h | 2159 +
drivers/net/wireless/realtek/rtw89/regd.c | 353 +
drivers/net/wireless/realtek/rtw89/rtw8852a.c | 2036 +
drivers/net/wireless/realtek/rtw89/rtw8852a.h | 109 +
drivers/net/wireless/realtek/rtw89/rtw8852a_rfk.c | 3911 ++
drivers/net/wireless/realtek/rtw89/rtw8852a_rfk.h | 24 +
.../wireless/realtek/rtw89/rtw8852a_rfk_table.c | 1607 +
.../wireless/realtek/rtw89/rtw8852a_rfk_table.h | 133 +
.../net/wireless/realtek/rtw89/rtw8852a_table.c | 48725 +++++++++++++++++++
.../net/wireless/realtek/rtw89/rtw8852a_table.h | 28 +
drivers/net/wireless/realtek/rtw89/sar.c | 190 +
drivers/net/wireless/realtek/rtw89/sar.h | 26 +
drivers/net/wireless/realtek/rtw89/ser.c | 491 +
drivers/net/wireless/realtek/rtw89/ser.h | 15 +
drivers/net/wireless/realtek/rtw89/txrx.h | 358 +
drivers/net/wireless/realtek/rtw89/util.h | 17 +
drivers/net/wireless/rndis_wlan.c | 2 -
drivers/net/wireless/rsi/rsi_91x_core.c | 2 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 10 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 74 +-
drivers/net/wireless/rsi/rsi_91x_main.c | 17 +-
drivers/net/wireless/rsi/rsi_91x_mgmt.c | 24 +-
drivers/net/wireless/rsi/rsi_91x_sdio.c | 5 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 7 +-
drivers/net/wireless/rsi/rsi_hal.h | 11 +
drivers/net/wireless/rsi/rsi_main.h | 15 +-
drivers/net/wireless/st/cw1200/bh.c | 2 -
drivers/net/wireless/ti/wlcore/spi.c | 9 +-
drivers/net/wireless/wl3501_cs.c | 3 +-
drivers/net/wireless/zydas/zd1201.c | 9 +-
drivers/net/wireless/zydas/zd1211rw/zd_usb.c | 1 -
drivers/net/wwan/Kconfig | 1 +
drivers/net/wwan/iosm/Makefile | 5 +-
drivers/net/wwan/iosm/iosm_ipc_chnl_cfg.c | 6 +-
drivers/net/wwan/iosm/iosm_ipc_chnl_cfg.h | 1 +
drivers/net/wwan/iosm/iosm_ipc_coredump.c | 125 +
drivers/net/wwan/iosm/iosm_ipc_coredump.h | 59 +
drivers/net/wwan/iosm/iosm_ipc_devlink.c | 321 +
drivers/net/wwan/iosm/iosm_ipc_devlink.h | 205 +
drivers/net/wwan/iosm/iosm_ipc_flash.c | 594 +
drivers/net/wwan/iosm/iosm_ipc_flash.h | 229 +
drivers/net/wwan/iosm/iosm_ipc_imem.c | 107 +-
drivers/net/wwan/iosm/iosm_ipc_imem.h | 18 +-
drivers/net/wwan/iosm/iosm_ipc_imem_ops.c | 317 +
drivers/net/wwan/iosm/iosm_ipc_imem_ops.h | 49 +-
drivers/net/xen-netback/interface.c | 6 +-
drivers/net/xen-netback/netback.c | 2 +-
drivers/net/xen-netfront.c | 4 +-
drivers/nfc/fdp/i2c.c | 1 -
drivers/nfc/microread/i2c.c | 4 -
drivers/nfc/microread/mei.c | 6 +-
drivers/nfc/nfcmrvl/fw_dnld.c | 4 +-
drivers/nfc/pn533/i2c.c | 6 +-
drivers/nfc/pn533/pn533.c | 6 +-
drivers/nfc/pn533/pn533.h | 4 +-
drivers/nfc/pn533/uart.c | 4 +-
drivers/nfc/pn533/usb.c | 2 +-
drivers/nfc/pn544/mei.c | 8 +-
drivers/nfc/s3fwrn5/firmware.c | 29 +-
drivers/nfc/s3fwrn5/nci.c | 18 +-
drivers/nfc/st-nci/i2c.c | 4 -
drivers/nfc/st-nci/ndlc.c | 4 -
drivers/nfc/st-nci/se.c | 6 -
drivers/nfc/st-nci/spi.c | 4 -
drivers/nfc/st21nfca/i2c.c | 4 -
drivers/nfc/st21nfca/se.c | 4 -
drivers/nfc/trf7970a.c | 8 -
drivers/of/Kconfig | 4 -
drivers/of/Makefile | 1 -
drivers/pcmcia/pcmcia_cis.c | 5 +-
drivers/phy/broadcom/phy-bcm-ns-usb3.c | 2 +-
drivers/phy/broadcom/phy-bcm-ns2-pcie.c | 6 +-
drivers/ptp/idt8a340_reg.h | 720 -
drivers/ptp/ptp_clock.c | 6 +-
drivers/ptp/ptp_clockmatrix.c | 1588 +-
drivers/ptp/ptp_clockmatrix.h | 109 +-
drivers/ptp/ptp_ocp.c | 1354 +-
drivers/s390/cio/qdio_setup.c | 34 +-
drivers/s390/net/ctcm_fsms.c | 60 +-
drivers/s390/net/ctcm_main.c | 38 +-
drivers/s390/net/ctcm_mpc.c | 8 +-
drivers/s390/net/fsm.c | 2 +-
drivers/s390/net/ism_drv.c | 2 +-
drivers/s390/net/lcs.c | 123 +-
drivers/s390/net/netiucv.c | 104 +-
drivers/s390/net/qeth_core.h | 4 +-
drivers/s390/net/qeth_core_main.c | 63 +-
drivers/s390/net/qeth_l2_main.c | 33 +-
drivers/s390/net/qeth_l3_main.c | 15 +-
drivers/scsi/qedf/drv_fcoe_fw_funcs.c | 8 +-
drivers/scsi/qedf/drv_fcoe_fw_funcs.h | 2 +-
drivers/scsi/qedf/qedf.h | 4 +-
drivers/scsi/qedf/qedf_els.c | 2 +-
drivers/scsi/qedf/qedf_io.c | 12 +-
drivers/scsi/qedf/qedf_main.c | 10 +-
drivers/scsi/qedi/qedi_debugfs.c | 4 +-
drivers/scsi/qedi/qedi_fw.c | 40 +-
drivers/scsi/qedi/qedi_fw_api.c | 22 +-
drivers/scsi/qedi/qedi_fw_iscsi.h | 2 +-
drivers/scsi/qedi/qedi_iscsi.h | 2 +-
drivers/scsi/qedi/qedi_main.c | 11 +-
drivers/soc/fsl/Kconfig | 1 +
drivers/soc/fsl/dpio/dpio-cmd.h | 3 +
drivers/soc/fsl/dpio/dpio-driver.c | 1 +
drivers/soc/fsl/dpio/dpio-service.c | 117 +
drivers/soc/fsl/dpio/dpio.c | 1 +
drivers/soc/fsl/dpio/dpio.h | 2 +
drivers/soc/fsl/dpio/qbman-portal.c | 58 +
drivers/soc/fsl/dpio/qbman-portal.h | 13 +
drivers/staging/octeon/ethernet.c | 2 +-
drivers/staging/qlge/qlge_main.c | 12 +-
drivers/usb/gadget/function/f_phonet.c | 5 +-
drivers/vdpa/mlx5/core/mlx5_vdpa.h | 8 +-
drivers/vdpa/mlx5/core/mr.c | 8 +-
drivers/vdpa/mlx5/core/resources.c | 13 +-
drivers/vdpa/mlx5/net/mlx5_vnet.c | 2 +-
include/linux/avf/virtchnl.h | 41 +-
include/linux/bitmap.h | 2 +
include/linux/bpf-cgroup.h | 1 +
include/linux/bpf.h | 66 +-
include/linux/bpf_types.h | 1 +
include/linux/bpf_verifier.h | 2 +
include/linux/bpfptr.h | 1 +
include/linux/brcmphy.h | 11 +
include/linux/btf.h | 39 +
include/linux/can/bittiming.h | 89 +-
include/linux/can/dev.h | 34 +
include/linux/dsa/8021q.h | 5 +-
include/linux/dsa/ocelot.h | 4 +-
include/linux/dsa/sja1105.h | 1 -
include/linux/etherdevice.h | 37 +-
include/linux/ethtool.h | 23 +
include/linux/filter.h | 22 +-
include/linux/ieee80211.h | 39 +
include/linux/inetdevice.h | 2 +
include/linux/ipv6.h | 2 +-
include/linux/mdio.h | 26 +
include/linux/mfd/idt8a340_reg.h | 31 +-
include/linux/micrel_phy.h | 1 +
include/linux/mlx4/device.h | 2 +-
include/linux/mlx4/driver.h | 22 -
include/linux/mlx5/device.h | 63 +-
include/linux/mlx5/driver.h | 61 +-
include/linux/mlx5/eq.h | 1 -
include/linux/mlx5/eswitch.h | 9 +
include/linux/mlx5/fs.h | 15 +
include/linux/mlx5/mlx5_ifc.h | 450 +-
include/linux/mm_types.h | 13 +-
include/linux/netdevice.h | 17 +-
include/linux/netfilter_arp/arp_tables.h | 5 +-
include/linux/netfilter_bridge/ebtables.h | 5 +-
include/linux/netfilter_ingress.h | 58 -
include/linux/netfilter_ipv4/ip_tables.h | 6 +-
include/linux/netfilter_ipv6/ip6_tables.h | 5 +-
include/linux/netfilter_netdev.h | 146 +
include/linux/netlink.h | 4 -
include/linux/of_net.h | 8 +-
include/linux/perf_event.h | 23 +
include/linux/phy.h | 35 +
include/linux/phylink.h | 14 +-
include/linux/platform_data/brcmfmac.h | 2 +-
include/linux/property.h | 5 +-
include/linux/qed/common_hsi.h | 141 +-
include/linux/qed/eth_common.h | 1 +
include/linux/qed/fcoe_common.h | 362 +-
include/linux/qed/iscsi_common.h | 360 +-
include/linux/qed/nvmetcp_common.h | 18 +-
include/linux/qed/qed_chain.h | 97 +-
include/linux/qed/qed_eth_if.h | 23 +-
include/linux/qed/qed_if.h | 265 +-
include/linux/qed/qed_iscsi_if.h | 2 +-
include/linux/qed/qed_ll2_if.h | 42 +-
include/linux/qed/qed_nvmetcp_if.h | 17 +
include/linux/qed/qed_rdma_if.h | 3 +-
include/linux/qed/rdma_common.h | 1 +
include/linux/skbuff.h | 7 +
include/linux/skmsg.h | 18 +-
include/linux/soc/marvell/octeontx2/asm.h | 15 +
include/linux/socket.h | 2 +
include/linux/u64_stats_sync.h | 10 +
include/net/act_api.h | 10 +-
include/net/amt.h | 385 +
include/net/ax25.h | 13 +-
include/net/bluetooth/bluetooth.h | 90 +
include/net/bluetooth/hci.h | 117 +
include/net/bluetooth/hci_core.h | 75 +-
include/net/busy_poll.h | 3 +-
include/net/cfg80211.h | 79 +-
include/net/codel.h | 5 +
include/net/codel_impl.h | 18 +-
include/net/datalink.h | 2 +-
include/net/devlink.h | 128 +-
include/net/dn.h | 2 +-
include/net/dsa.h | 46 +-
include/net/flow_dissector.h | 1 +
include/net/gen_stats.h | 59 +-
include/net/inet_connection_sock.h | 2 +-
include/net/inet_ecn.h | 17 +
include/net/inet_sock.h | 3 +-
include/net/ioam6.h | 3 +-
include/net/ip.h | 8 +-
include/net/ip_vs.h | 11 +
include/net/ipv6.h | 1 +
include/net/llc.h | 2 +-
include/net/llc_if.h | 3 +-
include/net/mac80211.h | 11 +
include/net/mctp.h | 82 +-
include/net/mctpdevice.h | 21 +
include/net/mptcp.h | 4 +
include/net/ndisc.h | 2 +-
include/net/neighbour.h | 45 +-
include/net/netfilter/nf_tables.h | 10 +-
include/net/netfilter/nf_tables_ipv4.h | 7 +-
include/net/netfilter/nf_tables_ipv6.h | 6 +-
include/net/netfilter/xt_rateest.h | 2 +-
include/net/page_pool.h | 12 +-
include/net/pkt_cls.h | 6 +-
include/net/rose.h | 8 +-
include/net/sch_generic.h | 86 +-
include/net/sctp/sctp.h | 7 +-
include/net/sock.h | 129 +-
include/net/switchdev.h | 48 +-
include/net/tcp.h | 52 +-
include/net/tls.h | 5 +-
include/net/xdp.h | 8 +-
include/net/xdp_sock_drv.h | 22 +
include/net/xsk_buff_pool.h | 48 +-
include/soc/fsl/dpaa2-io.h | 9 +
include/soc/mscc/ocelot.h | 27 +-
include/soc/mscc/ocelot_vcap.h | 10 +
include/trace/bpf_probe.h | 19 +-
include/trace/events/devlink.h | 72 +-
include/trace/events/mctp.h | 75 +
include/uapi/asm-generic/socket.h | 2 +
include/uapi/linux/amt.h | 62 +
include/uapi/linux/bpf.h | 76 +-
include/uapi/linux/btf.h | 55 +-
include/uapi/linux/can/netlink.h | 31 +-
include/uapi/linux/devlink.h | 2 +
include/uapi/linux/ethtool.h | 29 +
include/uapi/linux/ethtool_netlink.h | 17 +
include/uapi/linux/if_ether.h | 1 +
include/uapi/linux/ioam6_iptunnel.h | 29 +
include/uapi/linux/ip.h | 1 +
include/uapi/linux/ipv6.h | 1 +
include/uapi/linux/mctp.h | 11 +
include/uapi/linux/mdio.h | 9 +
include/uapi/linux/mptcp.h | 35 +
include/uapi/linux/neighbour.h | 35 +-
include/uapi/linux/netfilter.h | 1 +
include/uapi/linux/netfilter/nf_tables.h | 6 +-
include/uapi/linux/nl80211-vnd-intel.h | 29 +
include/uapi/linux/nl80211.h | 115 +-
include/uapi/linux/pkt_sched.h | 2 +
include/uapi/linux/smc.h | 44 +-
include/uapi/linux/sysctl.h | 1 +
include/uapi/linux/tls.h | 30 +
include/uapi/linux/vm_sockets.h | 13 +-
kernel/bpf/Kconfig | 7 +
kernel/bpf/Makefile | 2 +-
kernel/bpf/arraymap.c | 7 +-
kernel/bpf/bloom_filter.c | 204 +
kernel/bpf/bpf_struct_ops.c | 32 +-
kernel/bpf/bpf_struct_ops_types.h | 3 +
kernel/bpf/btf.c | 183 +
kernel/bpf/core.c | 9 +
kernel/bpf/hashtab.c | 13 +-
kernel/bpf/helpers.c | 11 +-
kernel/bpf/preload/.gitignore | 4 +-
kernel/bpf/preload/Makefile | 26 +-
kernel/bpf/preload/iterators/Makefile | 38 +-
kernel/bpf/syscall.c | 77 +-
kernel/bpf/trampoline.c | 15 +-
kernel/bpf/verifier.c | 373 +-
kernel/events/core.c | 2 +
kernel/trace/bpf_trace.c | 102 +-
lib/bitmap.c | 13 +
lib/test_bpf.c | 17416 ++++---
net/802/hippi.c | 2 +-
net/802/p8022.c | 2 +-
net/802/psnap.c | 2 +-
net/8021q/vlan_dev.c | 6 +-
net/Kconfig | 2 +-
net/atm/br2684.c | 6 +-
net/atm/lec.c | 8 +-
net/ax25/af_ax25.c | 2 +-
net/ax25/ax25_dev.c | 2 +-
net/ax25/ax25_iface.c | 6 +-
net/ax25/ax25_in.c | 4 +-
net/ax25/ax25_out.c | 2 +-
net/batman-adv/bridge_loop_avoidance.c | 14 +-
net/batman-adv/multicast.c | 2 +-
net/batman-adv/routing.c | 3 +-
net/batman-adv/soft-interface.c | 2 +-
net/batman-adv/tp_meter.c | 2 +-
net/batman-adv/tvlv.c | 4 +-
net/batman-adv/tvlv.h | 4 +-
net/bluetooth/6lowpan.c | 4 +-
net/bluetooth/Makefile | 3 +-
net/bluetooth/bnep/core.c | 2 +-
net/bluetooth/eir.c | 335 +
net/bluetooth/eir.h | 72 +
net/bluetooth/hci_codec.c | 238 +
net/bluetooth/hci_codec.h | 7 +
net/bluetooth/hci_conn.c | 168 +-
net/bluetooth/hci_core.c | 320 +-
net/bluetooth/hci_debugfs.c | 123 +
net/bluetooth/hci_debugfs.h | 5 +
net/bluetooth/hci_event.c | 135 +-
net/bluetooth/hci_request.c | 478 +-
net/bluetooth/hci_request.h | 25 +-
net/bluetooth/hci_sock.c | 214 +-
net/bluetooth/l2cap_core.c | 2 +-
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/mgmt.c | 445 +-
net/bluetooth/msft.c | 172 +-
net/bluetooth/msft.h | 9 +
net/bluetooth/rfcomm/core.c | 50 +-
net/bluetooth/rfcomm/sock.c | 46 +-
net/bluetooth/sco.c | 209 +-
net/bpf/Makefile | 3 +
net/bpf/bpf_dummy_struct_ops.c | 200 +
net/bpf/test_run.c | 50 +-
net/bridge/br.c | 4 +-
net/bridge/br_fdb.c | 439 +-
net/bridge/br_if.c | 4 +-
net/bridge/br_ioctl.c | 10 +-
net/bridge/br_mdb.c | 242 +-
net/bridge/br_netfilter_hooks.c | 2 +-
net/bridge/br_netlink.c | 4 +-
net/bridge/br_private.h | 41 +-
net/bridge/br_stp_if.c | 2 +-
net/bridge/br_switchdev.c | 438 +-
net/bridge/br_vlan.c | 89 +-
net/bridge/netfilter/ebtable_broute.c | 2 +-
net/bridge/netfilter/ebtable_filter.c | 13 +-
net/bridge/netfilter/ebtable_nat.c | 12 +-
net/bridge/netfilter/ebtables.c | 13 +-
net/caif/caif_usb.c | 2 +-
net/can/bcm.c | 2 +-
net/core/Makefile | 1 +
net/core/dev.c | 92 +-
net/core/dev_ioctl.c | 2 -
net/core/devlink.c | 825 +-
net/core/filter.c | 44 +
net/core/flow_dissector.c | 18 +-
net/core/gen_estimator.c | 52 +-
net/core/gen_stats.c | 186 +-
net/core/neighbour.c | 204 +-
net/core/net-sysfs.c | 57 +-
net/core/net_namespace.c | 4 +
{drivers/of => net/core}/of_net.c | 25 +
net/core/page_pool.c | 10 +-
net/core/rtnetlink.c | 13 +-
net/core/selftests.c | 8 +-
net/core/skbuff.c | 46 +-
net/core/skmsg.c | 43 +-
net/core/sock.c | 104 +-
net/core/stream.c | 5 +-
net/core/xdp.c | 2 -
net/dccp/dccp.h | 2 +-
net/dccp/proto.c | 14 +-
net/dsa/Kconfig | 20 +-
net/dsa/Makefile | 3 +-
net/dsa/dsa.c | 22 +-
net/dsa/dsa2.c | 77 +-
net/dsa/port.c | 27 +-
net/dsa/slave.c | 90 +-
net/dsa/switch.c | 249 +-
net/dsa/tag_8021q.c | 114 +-
net/dsa/tag_ksz.c | 1 -
net/dsa/tag_ocelot.c | 39 +
net/dsa/tag_ocelot_8021q.c | 2 +-
net/dsa/tag_rtl4_a.c | 2 +-
net/dsa/tag_rtl8_4.c | 178 +
net/dsa/tag_sja1105.c | 9 +-
net/ethernet/eth.c | 102 +-
net/ethtool/Makefile | 2 +-
net/ethtool/ioctl.c | 171 +-
net/ethtool/module.c | 180 +
net/ethtool/netlink.c | 19 +
net/ethtool/netlink.h | 4 +
net/hsr/hsr_device.c | 10 +-
net/hsr/hsr_forward.c | 54 +-
net/hsr/hsr_framereg.c | 65 +-
net/hsr/hsr_framereg.h | 4 +-
net/hsr/hsr_main.c | 2 +-
net/hsr/hsr_main.h | 16 +-
net/ieee802154/6lowpan/core.c | 2 +-
net/ipv4/af_inet.c | 30 +-
net/ipv4/arp.c | 11 +-
net/ipv4/bpf_tcp_ca.c | 45 +-
net/ipv4/cipso_ipv4.c | 2 +-
net/ipv4/datagram.c | 1 -
net/ipv4/devinet.c | 4 +
net/ipv4/fib_notifier.c | 1 -
net/ipv4/inet_connection_sock.c | 4 +-
net/ipv4/inet_diag.c | 2 +-
net/ipv4/inet_hashtables.c | 2 +-
net/ipv4/ip_gre.c | 2 +-
net/ipv4/ip_sockglue.c | 11 +-
net/ipv4/ip_tunnel.c | 2 +-
net/ipv4/ip_vti.c | 2 +-
net/ipv4/ipconfig.c | 12 +-
net/ipv4/ipip.c | 2 +-
net/ipv4/netfilter/arp_tables.c | 7 +-
net/ipv4/netfilter/arptable_filter.c | 10 +-
net/ipv4/netfilter/ip_tables.c | 7 +-
net/ipv4/netfilter/iptable_filter.c | 9 +-
net/ipv4/netfilter/iptable_mangle.c | 8 +-
net/ipv4/netfilter/iptable_nat.c | 15 +-
net/ipv4/netfilter/iptable_raw.c | 10 +-
net/ipv4/netfilter/iptable_security.c | 9 +-
net/ipv4/proc.c | 2 +-
net/ipv4/route.c | 8 -
net/ipv4/syncookies.c | 2 -
net/ipv4/sysctl_net_ipv4.c | 21 -
net/ipv4/tcp.c | 132 +-
net/ipv4/tcp_bbr.c | 28 +-
net/ipv4/tcp_cubic.c | 26 +-
net/ipv4/tcp_dctcp.c | 26 +-
net/ipv4/tcp_fastopen.c | 6 -
net/ipv4/tcp_input.c | 37 +-
net/ipv4/tcp_ipv4.c | 31 +-
net/ipv4/tcp_minisocks.c | 7 -
net/ipv4/tcp_nv.c | 1 -
net/ipv4/tcp_output.c | 39 +-
net/ipv4/tcp_rate.c | 6 +
net/ipv4/udp_tunnel_core.c | 3 -
net/ipv4/xfrm4_tunnel.c | 2 -
net/ipv6/Kconfig | 6 +-
net/ipv6/Makefile | 11 +-
net/ipv6/addrconf.c | 19 +-
net/ipv6/af_inet6.c | 21 +-
net/ipv6/exthdrs.c | 2 +-
net/ipv6/ila/ila_xlat.c | 6 +-
net/ipv6/ioam6.c | 11 +-
net/ipv6/ioam6_iptunnel.c | 300 +-
net/ipv6/ip6_gre.c | 4 +-
net/ipv6/ip6_tunnel.c | 2 +-
net/ipv6/ip6_vti.c | 2 +-
net/ipv6/ipv6_sockglue.c | 11 +-
net/ipv6/ndisc.c | 16 +-
net/ipv6/netfilter/ip6_tables.c | 6 +-
net/ipv6/netfilter/ip6table_filter.c | 10 +-
net/ipv6/netfilter/ip6table_mangle.c | 8 +-
net/ipv6/netfilter/ip6table_nat.c | 15 +-
net/ipv6/netfilter/ip6table_raw.c | 10 +-
net/ipv6/netfilter/ip6table_security.c | 9 +-
net/ipv6/route.c | 24 +-
net/ipv6/seg6.c | 8 +-
net/ipv6/seg6_hmac.c | 4 +-
net/ipv6/sit.c | 4 +-
net/ipv6/tcp_ipv6.c | 42 +-
net/ipv6/udp.c | 6 +-
net/llc/llc_c_ac.c | 2 +-
net/llc/llc_if.c | 2 +-
net/llc/llc_output.c | 2 +-
net/llc/llc_proc.c | 2 +-
net/mac80211/agg-rx.c | 14 +-
net/mac80211/cfg.c | 38 +
net/mac80211/debugfs_sta.c | 123 +-
net/mac80211/fils_aead.c | 22 +-
net/mac80211/ibss.c | 33 +-
net/mac80211/ieee80211_i.h | 35 +-
net/mac80211/iface.c | 39 +-
net/mac80211/mesh.c | 87 +-
net/mac80211/mesh_hwmp.c | 44 +-
net/mac80211/mesh_plink.c | 11 +-
net/mac80211/mesh_sync.c | 26 +-
net/mac80211/mlme.c | 355 +-
net/mac80211/pm.c | 4 +
net/mac80211/rx.c | 12 +-
net/mac80211/s1g.c | 8 +-
net/mac80211/scan.c | 16 +-
net/mac80211/sta_info.c | 3 +
net/mac80211/tdls.c | 63 +-
net/mac80211/tx.c | 206 +-
net/mac80211/util.c | 40 +-
net/mac802154/iface.c | 17 +-
net/mctp/Kconfig | 12 +-
net/mctp/Makefile | 3 +
net/mctp/af_mctp.c | 152 +-
net/mctp/device.c | 104 +-
net/mctp/neigh.c | 4 +-
net/mctp/route.c | 362 +-
net/mctp/test/route-test.c | 544 +
net/mctp/test/utils.c | 67 +
net/mctp/test/utils.h | 20 +
net/mptcp/mib.c | 17 +-
net/mptcp/mptcp_diag.c | 26 +-
net/mptcp/options.c | 15 +-
net/mptcp/pm_netlink.c | 9 +-
net/mptcp/protocol.c | 447 +-
net/mptcp/protocol.h | 19 +-
net/mptcp/sockopt.c | 279 +
net/netfilter/Kconfig | 11 +
net/netfilter/core.c | 38 +-
net/netfilter/ipvs/ip_vs_core.c | 166 +-
net/netfilter/ipvs/ip_vs_ctl.c | 8 +
net/netfilter/ipvs/ip_vs_est.c | 5 +
net/netfilter/nf_conntrack_proto.c | 16 +
net/netfilter/nf_conntrack_proto_udp.c | 7 +-
net/netfilter/nf_nat_core.c | 12 +-
net/netfilter/nf_tables_core.c | 2 +-
net/netfilter/nf_tables_trace.c | 4 +-
net/netfilter/nfnetlink_hook.c | 16 +-
net/netfilter/nft_chain_filter.c | 4 +-
net/netfilter/nft_dynset.c | 11 +-
net/netfilter/nft_meta.c | 8 +-
net/netfilter/nft_payload.c | 60 +-
net/netfilter/xt_RATEEST.c | 7 +-
net/netlink/af_netlink.c | 23 +-
net/netrom/af_netrom.c | 4 +-
net/netrom/nr_dev.c | 8 +-
net/netrom/nr_route.c | 4 +-
net/nfc/hci/command.c | 16 -
net/nfc/hci/llc_shdlc.c | 35 +-
net/nfc/llcp_commands.c | 8 -
net/nfc/llcp_core.c | 5 +-
net/nfc/nci/core.c | 4 -
net/nfc/nci/hci.c | 4 -
net/nfc/nci/ntf.c | 9 -
net/nfc/nci/uart.c | 16 +-
net/packet/af_packet.c | 35 +
net/qrtr/Makefile | 3 +-
net/qrtr/{qrtr.c => af_qrtr.c} | 0
net/rose/af_rose.c | 5 +-
net/rose/rose_dev.c | 8 +-
net/rose/rose_link.c | 8 +-
net/rose/rose_route.c | 10 +-
net/rxrpc/rtt.c | 2 +-
net/sched/act_api.c | 21 +-
net/sched/act_bpf.c | 2 +-
net/sched/act_ife.c | 4 +-
net/sched/act_mpls.c | 2 +-
net/sched/act_police.c | 4 +-
net/sched/act_sample.c | 2 +-
net/sched/act_simple.c | 3 +-
net/sched/act_skbedit.c | 2 +-
net/sched/act_skbmod.c | 2 +-
net/sched/cls_flower.c | 3 +-
net/sched/em_meta.c | 2 +-
net/sched/sch_api.c | 25 +-
net/sched/sch_atm.c | 6 +-
net/sched/sch_cbq.c | 15 +-
net/sched/sch_drr.c | 13 +-
net/sched/sch_ets.c | 17 +-
net/sched/sch_fq_codel.c | 20 +-
net/sched/sch_generic.c | 84 +-
net/sched/sch_gred.c | 65 +-
net/sched/sch_hfsc.c | 11 +-
net/sched/sch_htb.c | 51 +-
net/sched/sch_mq.c | 31 +-
net/sched/sch_mqprio.c | 64 +-
net/sched/sch_multiq.c | 3 +-
net/sched/sch_netem.c | 2 +-
net/sched/sch_prio.c | 4 +-
net/sched/sch_qfq.c | 13 +-
net/sched/sch_taprio.c | 2 +-
net/sched/sch_tbf.c | 16 +
net/sctp/output.c | 13 +-
net/sctp/transport.c | 11 +-
net/smc/Makefile | 2 +
net/smc/af_smc.c | 449 +-
net/smc/smc.h | 23 +-
net/smc/smc_clc.c | 463 +-
net/smc/smc_clc.h | 72 +-
net/smc/smc_core.c | 192 +-
net/smc/smc_core.h | 51 +-
net/smc/smc_ib.c | 160 +-
net/smc/smc_ib.h | 16 +-
net/smc/smc_ism.c | 16 +-
net/smc/smc_ism.h | 2 +-
net/smc/smc_llc.c | 623 +-
net/smc/smc_llc.h | 12 +-
net/smc/smc_netlink.c | 47 +-
net/smc/smc_netlink.h | 2 +
net/smc/smc_pnet.c | 41 +-
net/smc/smc_rx.c | 3 +
net/smc/smc_tracepoint.c | 9 +
net/smc/smc_tracepoint.h | 116 +
net/smc/smc_tx.c | 3 +
net/smc/smc_wr.c | 237 +-
net/smc/smc_wr.h | 8 +
net/switchdev/switchdev.c | 156 +-
net/tipc/bearer.c | 4 +-
net/tipc/bearer.h | 2 +-
net/tipc/eth_media.c | 2 +-
net/tipc/ib_media.c | 2 +-
net/tls/tls_main.c | 88 +
net/tls/tls_sw.c | 54 +-
net/vmw_vsock/af_vsock.c | 80 +-
net/wireless/Makefile | 4 +-
net/wireless/core.c | 10 +
net/wireless/nl80211.c | 452 +-
net/wireless/rdev-ops.h | 14 +
net/wireless/scan.c | 59 +-
net/wireless/trace.h | 31 +
net/wireless/util.c | 2 +
net/xdp/xsk.c | 15 -
net/xdp/xsk_buff_pool.c | 132 +-
net/xdp/xsk_queue.h | 12 +-
net/xfrm/xfrm_input.c | 4 +-
samples/bpf/.gitignore | 4 +
samples/bpf/Makefile | 47 +-
samples/bpf/xdp1_user.c | 2 +-
samples/bpf/xdp_redirect_cpu_user.c | 6 +-
samples/bpf/xdp_router_ipv4_user.c | 39 +-
samples/bpf/xdp_sample_pkts_user.c | 2 +-
samples/seccomp/bpf-helper.h | 8 +-
scripts/Makefile.modfinal | 3 +-
scripts/bpf_doc.py | 2 +
scripts/link-vmlinux.sh | 11 +-
scripts/pahole-flags.sh | 20 +
tools/bpf/bpftool/Makefile | 61 +-
tools/bpf/bpftool/btf.c | 156 +-
tools/bpf/bpftool/common.c | 50 +-
tools/bpf/bpftool/feature.c | 1 +
tools/bpf/bpftool/gen.c | 195 +-
tools/bpf/bpftool/iter.c | 2 +-
tools/bpf/bpftool/link.c | 45 +-
tools/bpf/bpftool/main.c | 17 +-
tools/bpf/bpftool/main.h | 54 +-
tools/bpf/bpftool/map.c | 45 +-
tools/bpf/bpftool/map_perf_ring.c | 1 -
tools/bpf/bpftool/pids.c | 90 +-
tools/bpf/bpftool/prog.c | 64 +-
tools/bpf/resolve_btfids/Makefile | 19 +-
tools/bpf/resolve_btfids/main.c | 36 +-
tools/bpf/runqslower/Makefile | 22 +-
tools/include/uapi/linux/bpf.h | 76 +-
tools/include/uapi/linux/btf.h | 55 +-
tools/lib/bpf/.gitignore | 1 -
tools/lib/bpf/Makefile | 62 +-
tools/lib/bpf/bpf.c | 63 +-
tools/lib/bpf/bpf_core_read.h | 2 +-
tools/lib/bpf/bpf_gen_internal.h | 24 +-
tools/lib/bpf/bpf_helpers.h | 51 +-
tools/lib/bpf/bpf_tracing.h | 32 +
tools/lib/bpf/btf.c | 369 +-
tools/lib/bpf/btf.h | 114 +
tools/lib/bpf/btf_dump.c | 61 +-
tools/lib/bpf/gen_loader.c | 422 +-
tools/lib/bpf/libbpf.c | 2296 +-
tools/lib/bpf/libbpf.h | 193 +-
tools/lib/bpf/libbpf.map | 16 +
tools/lib/bpf/libbpf_common.h | 24 +
tools/lib/bpf/libbpf_internal.h | 94 +-
tools/lib/bpf/libbpf_legacy.h | 18 +
tools/lib/bpf/libbpf_probes.c | 2 +-
tools/lib/bpf/libbpf_version.h | 9 +
tools/lib/bpf/linker.c | 45 +-
tools/lib/bpf/relo_core.c | 2 +-
tools/lib/bpf/skel_internal.h | 6 +-
tools/lib/bpf/xsk.c | 10 +-
tools/lib/bpf/xsk.h | 90 +-
tools/perf/util/bpf-event.c | 2 +-
tools/scripts/Makefile.arch | 3 +-
tools/testing/selftests/bpf/.gitignore | 5 +-
tools/testing/selftests/bpf/Makefile | 55 +-
tools/testing/selftests/bpf/README.rst | 27 +
tools/testing/selftests/bpf/bench.c | 60 +-
tools/testing/selftests/bpf/bench.h | 3 +
.../selftests/bpf/benchs/bench_bloom_filter_map.c | 477 +
.../bpf/benchs/run_bench_bloom_filter_map.sh | 45 +
.../selftests/bpf/benchs/run_bench_ringbufs.sh | 30 +-
tools/testing/selftests/bpf/benchs/run_common.sh | 60 +
.../selftests/bpf/bpf_testmod/bpf_testmod-events.h | 15 +
.../selftests/bpf/bpf_testmod/bpf_testmod.c | 52 +-
.../selftests/bpf/bpf_testmod/bpf_testmod.h | 5 +
tools/testing/selftests/bpf/btf_helpers.c | 11 +-
tools/testing/selftests/bpf/cgroup_helpers.c | 5 +-
tools/testing/selftests/bpf/cgroup_helpers.h | 2 +-
tools/testing/selftests/bpf/flow_dissector_load.c | 18 +-
tools/testing/selftests/bpf/flow_dissector_load.h | 10 +-
tools/testing/selftests/bpf/prog_tests/atomics.c | 35 +-
.../selftests/bpf/prog_tests/attach_probe.c | 33 +-
.../selftests/bpf/prog_tests/bloom_filter_map.c | 211 +
tools/testing/selftests/bpf/prog_tests/bpf_iter.c | 6 +-
.../selftests/bpf/prog_tests/bpf_iter_setsockopt.c | 2 +-
.../testing/selftests/bpf/prog_tests/bpf_obj_id.c | 2 +-
.../selftests/bpf/prog_tests/bpf_verif_scale.c | 225 +-
tools/testing/selftests/bpf/prog_tests/btf.c | 524 +-
tools/testing/selftests/bpf/prog_tests/btf_dump.c | 39 +-
.../testing/selftests/bpf/prog_tests/btf_endian.c | 18 +-
tools/testing/selftests/bpf/prog_tests/btf_split.c | 2 +-
tools/testing/selftests/bpf/prog_tests/btf_tag.c | 20 +
tools/testing/selftests/bpf/prog_tests/btf_write.c | 162 +-
.../selftests/bpf/prog_tests/cg_storage_multi.c | 2 +-
.../bpf/prog_tests/cgroup_attach_autodetach.c | 2 +-
.../selftests/bpf/prog_tests/cgroup_attach_multi.c | 2 +-
.../bpf/prog_tests/cgroup_attach_override.c | 2 +-
.../testing/selftests/bpf/prog_tests/cgroup_link.c | 2 +-
.../testing/selftests/bpf/prog_tests/cgroup_v1v2.c | 2 +-
tools/testing/selftests/bpf/prog_tests/check_mtu.c | 2 +-
.../selftests/bpf/prog_tests/core_autosize.c | 4 +-
.../testing/selftests/bpf/prog_tests/core_reloc.c | 21 +-
.../selftests/bpf/prog_tests/dummy_st_ops.c | 115 +
.../selftests/bpf/prog_tests/fentry_fexit.c | 16 +-
.../testing/selftests/bpf/prog_tests/fentry_test.c | 14 +-
.../selftests/bpf/prog_tests/fexit_bpf2bpf.c | 46 +-
.../testing/selftests/bpf/prog_tests/fexit_sleep.c | 12 +-
.../testing/selftests/bpf/prog_tests/fexit_test.c | 14 +-
.../selftests/bpf/prog_tests/flow_dissector.c | 4 +-
.../bpf/prog_tests/flow_dissector_load_bytes.c | 2 +-
.../bpf/prog_tests/flow_dissector_reattach.c | 2 +-
.../selftests/bpf/prog_tests/get_branch_snapshot.c | 130 +
.../testing/selftests/bpf/prog_tests/global_data.c | 11 +-
.../selftests/bpf/prog_tests/global_data_init.c | 2 +-
tools/testing/selftests/bpf/prog_tests/kfree_skb.c | 5 +-
.../testing/selftests/bpf/prog_tests/kfunc_call.c | 6 +-
tools/testing/selftests/bpf/prog_tests/ksyms_btf.c | 35 +-
.../selftests/bpf/prog_tests/ksyms_module.c | 57 +-
.../selftests/bpf/prog_tests/migrate_reuseport.c | 2 +-
.../selftests/bpf/prog_tests/modify_return.c | 3 +-
.../selftests/bpf/prog_tests/module_attach.c | 46 +-
.../selftests/bpf/prog_tests/ns_current_pid_tgid.c | 3 +-
.../testing/selftests/bpf/prog_tests/perf_buffer.c | 24 +-
tools/testing/selftests/bpf/prog_tests/perf_link.c | 3 +-
.../testing/selftests/bpf/prog_tests/probe_user.c | 7 +-
.../bpf/prog_tests/raw_tp_writable_test_run.c | 3 +-
.../testing/selftests/bpf/prog_tests/rdonly_maps.c | 2 +-
tools/testing/selftests/bpf/prog_tests/recursion.c | 10 +-
.../selftests/bpf/prog_tests/reference_tracking.c | 52 +-
.../selftests/bpf/prog_tests/resolve_btfids.c | 14 +-
tools/testing/selftests/bpf/prog_tests/ringbuf.c | 12 +-
.../selftests/bpf/prog_tests/select_reuseport.c | 4 +-
.../bpf/prog_tests/send_signal_sched_switch.c | 3 +-
.../selftests/bpf/prog_tests/signal_pending.c | 2 +-
tools/testing/selftests/bpf/prog_tests/sk_assign.c | 2 +-
tools/testing/selftests/bpf/prog_tests/sk_lookup.c | 4 +-
.../selftests/bpf/prog_tests/sk_storage_tracing.c | 2 +-
tools/testing/selftests/bpf/prog_tests/skb_ctx.c | 6 +
.../selftests/bpf/prog_tests/skc_to_unix_sock.c | 54 +
tools/testing/selftests/bpf/prog_tests/skeleton.c | 35 +
tools/testing/selftests/bpf/prog_tests/snprintf.c | 4 +-
.../selftests/bpf/prog_tests/snprintf_btf.c | 2 +-
.../testing/selftests/bpf/prog_tests/sock_fields.c | 2 +-
.../selftests/bpf/prog_tests/sockmap_listen.c | 2 +-
.../selftests/bpf/prog_tests/sockopt_multi.c | 30 +-
tools/testing/selftests/bpf/prog_tests/tailcalls.c | 83 +-
.../testing/selftests/bpf/prog_tests/tc_redirect.c | 18 +-
tools/testing/selftests/bpf/prog_tests/tcp_rtt.c | 2 +-
tools/testing/selftests/bpf/prog_tests/test_ima.c | 3 +-
tools/testing/selftests/bpf/prog_tests/timer.c | 3 +-
tools/testing/selftests/bpf/prog_tests/timer_mim.c | 2 +-
.../selftests/bpf/prog_tests/tp_attach_query.c | 2 +-
.../selftests/bpf/prog_tests/trace_printk.c | 40 +-
.../selftests/bpf/prog_tests/trace_vprintk.c | 68 +
.../selftests/bpf/prog_tests/trampoline_count.c | 3 +-
.../testing/selftests/bpf/prog_tests/verif_stats.c | 28 +
.../selftests/bpf/prog_tests/xdp_adjust_tail.c | 6 +-
.../testing/selftests/bpf/prog_tests/xdp_attach.c | 2 +-
.../testing/selftests/bpf/prog_tests/xdp_bonding.c | 2 +-
.../selftests/bpf/prog_tests/xdp_cpumap_attach.c | 2 +-
.../selftests/bpf/prog_tests/xdp_devmap_attach.c | 6 +-
tools/testing/selftests/bpf/prog_tests/xdp_info.c | 2 +-
tools/testing/selftests/bpf/prog_tests/xdp_link.c | 2 +-
tools/testing/selftests/bpf/prog_tests/xdpwall.c | 15 +
tools/testing/selftests/bpf/progs/atomics.c | 16 +
.../selftests/bpf/progs/bloom_filter_bench.c | 153 +
.../testing/selftests/bpf/progs/bloom_filter_map.c | 82 +
tools/testing/selftests/bpf/progs/bpf_cubic.c | 12 +-
tools/testing/selftests/bpf/progs/bpf_flow.c | 3 +-
.../bpf/progs/btf_dump_test_case_bitfields.c | 10 +-
.../bpf/progs/btf_dump_test_case_packing.c | 4 +-
.../bpf/progs/btf_dump_test_case_padding.c | 2 +-
.../bpf/progs/btf_dump_test_case_syntax.c | 2 +-
.../bpf/progs/cg_storage_multi_isolated.c | 4 +-
.../selftests/bpf/progs/cg_storage_multi_shared.c | 4 +-
.../bpf/progs/cgroup_skb_sk_lookup_kern.c | 1 -
.../testing/selftests/bpf/progs/connect4_dropper.c | 2 +-
tools/testing/selftests/bpf/progs/connect4_prog.c | 2 -
tools/testing/selftests/bpf/progs/connect6_prog.c | 2 -
.../selftests/bpf/progs/connect_force_port4.c | 1 -
.../selftests/bpf/progs/connect_force_port6.c | 1 -
tools/testing/selftests/bpf/progs/dev_cgroup.c | 1 -
tools/testing/selftests/bpf/progs/dummy_st_ops.c | 50 +
tools/testing/selftests/bpf/progs/fexit_sleep.c | 4 +-
.../selftests/bpf/progs/for_each_array_map_elem.c | 2 +-
.../selftests/bpf/progs/for_each_hash_map_elem.c | 2 +-
.../selftests/bpf/progs/get_branch_snapshot.c | 40 +
.../selftests/bpf/progs/get_cgroup_id_kern.c | 1 -
tools/testing/selftests/bpf/progs/kfree_skb.c | 4 +-
.../testing/selftests/bpf/progs/kfunc_call_test.c | 4 +-
.../selftests/bpf/progs/kfunc_call_test_subprog.c | 2 +-
tools/testing/selftests/bpf/progs/map_ptr_kern.c | 1 -
tools/testing/selftests/bpf/progs/netcnt_prog.c | 1 -
.../selftests/bpf/progs/perf_event_stackmap.c | 4 +-
tools/testing/selftests/bpf/progs/recursion.c | 9 +-
tools/testing/selftests/bpf/progs/sendmsg4_prog.c | 2 -
tools/testing/selftests/bpf/progs/sendmsg6_prog.c | 2 -
tools/testing/selftests/bpf/progs/skb_pkt_end.c | 2 +-
.../selftests/bpf/progs/sockmap_parse_prog.c | 2 -
.../selftests/bpf/progs/sockmap_tcp_msg_prog.c | 2 -
.../selftests/bpf/progs/sockmap_verdict_prog.c | 14 +-
.../testing/selftests/bpf/progs/sockopt_inherit.c | 1 -
tools/testing/selftests/bpf/progs/sockopt_multi.c | 5 +-
tools/testing/selftests/bpf/progs/strobemeta.h | 4 +-
tools/testing/selftests/bpf/progs/tag.c | 54 +
tools/testing/selftests/bpf/progs/tailcall1.c | 7 +-
tools/testing/selftests/bpf/progs/tailcall2.c | 23 +-
tools/testing/selftests/bpf/progs/tailcall3.c | 7 +-
tools/testing/selftests/bpf/progs/tailcall4.c | 7 +-
tools/testing/selftests/bpf/progs/tailcall5.c | 7 +-
tools/testing/selftests/bpf/progs/tailcall6.c | 34 +
.../selftests/bpf/progs/tailcall_bpf2bpf1.c | 7 +-
.../selftests/bpf/progs/tailcall_bpf2bpf2.c | 7 +-
.../selftests/bpf/progs/tailcall_bpf2bpf3.c | 11 +-
.../selftests/bpf/progs/tailcall_bpf2bpf4.c | 15 +-
tools/testing/selftests/bpf/progs/tcp_rtt.c | 1 -
tools/testing/selftests/bpf/progs/test_btf_haskv.c | 2 -
.../selftests/bpf/progs/test_btf_map_in_map.c | 14 +-
tools/testing/selftests/bpf/progs/test_btf_newkv.c | 2 -
tools/testing/selftests/bpf/progs/test_btf_nokv.c | 2 -
.../selftests/bpf/progs/test_btf_skc_cls_ingress.c | 2 +-
.../testing/selftests/bpf/progs/test_cgroup_link.c | 4 +-
tools/testing/selftests/bpf/progs/test_check_mtu.c | 12 +-
.../selftests/bpf/progs/test_cls_redirect.c | 2 +-
.../selftests/bpf/progs/test_core_reloc_mods.c | 9 +
.../selftests/bpf/progs/test_enable_stats.c | 2 +-
.../testing/selftests/bpf/progs/test_global_data.c | 2 +-
.../selftests/bpf/progs/test_global_func1.c | 2 +-
.../selftests/bpf/progs/test_global_func3.c | 2 +-
.../selftests/bpf/progs/test_global_func5.c | 2 +-
.../selftests/bpf/progs/test_global_func6.c | 2 +-
.../selftests/bpf/progs/test_global_func7.c | 2 +-
.../selftests/bpf/progs/test_ksyms_module.c | 46 +-
.../testing/selftests/bpf/progs/test_ksyms_weak.c | 2 +-
tools/testing/selftests/bpf/progs/test_l4lb.c | 2 -
.../testing/selftests/bpf/progs/test_map_in_map.c | 13 +-
.../selftests/bpf/progs/test_map_in_map_invalid.c | 2 +-
.../bpf/progs/test_misc_tcp_hdr_options.c | 2 +-
.../selftests/bpf/progs/test_module_attach.c | 14 +
.../selftests/bpf/progs/test_pe_preserve_elems.c | 8 +-
.../testing/selftests/bpf/progs/test_perf_buffer.c | 22 +-
tools/testing/selftests/bpf/progs/test_pinning.c | 2 -
.../selftests/bpf/progs/test_pinning_invalid.c | 2 -
.../testing/selftests/bpf/progs/test_pkt_access.c | 3 +-
.../selftests/bpf/progs/test_pkt_md_access.c | 4 +-
.../testing/selftests/bpf/progs/test_probe_user.c | 28 +-
.../selftests/bpf/progs/test_queue_stack_map.h | 2 -
.../bpf/progs/test_select_reuseport_kern.c | 6 +-
tools/testing/selftests/bpf/progs/test_sk_assign.c | 3 +-
tools/testing/selftests/bpf/progs/test_sk_lookup.c | 45 +-
.../selftests/bpf/progs/test_sk_lookup_kern.c | 37 +-
.../selftests/bpf/progs/test_skb_cgroup_id_kern.c | 2 -
tools/testing/selftests/bpf/progs/test_skb_ctx.c | 7 +-
.../testing/selftests/bpf/progs/test_skb_helpers.c | 2 +-
.../selftests/bpf/progs/test_skc_to_unix_sock.c | 40 +
tools/testing/selftests/bpf/progs/test_skeleton.c | 18 +
.../selftests/bpf/progs/test_sockmap_kern.h | 1 -
.../selftests/bpf/progs/test_sockmap_listen.c | 3 +-
.../bpf/progs/test_sockmap_skb_verdict_attach.c | 2 +-
.../selftests/bpf/progs/test_sockmap_update.c | 2 +-
.../selftests/bpf/progs/test_stacktrace_build_id.c | 5 +-
.../selftests/bpf/progs/test_stacktrace_map.c | 4 +-
tools/testing/selftests/bpf/progs/test_tc_bpf.c | 2 +-
tools/testing/selftests/bpf/progs/test_tc_neigh.c | 6 +-
.../selftests/bpf/progs/test_tc_neigh_fib.c | 6 +-
tools/testing/selftests/bpf/progs/test_tc_peer.c | 10 +-
.../bpf/progs/test_tcp_check_syncookie_kern.c | 4 +-
.../testing/selftests/bpf/progs/test_tcp_estats.c | 1 -
.../selftests/bpf/progs/test_tcp_hdr_options.c | 2 +-
.../testing/selftests/bpf/progs/test_tcpbpf_kern.c | 1 -
.../selftests/bpf/progs/test_tcpnotify_kern.c | 6 +-
.../testing/selftests/bpf/progs/test_tracepoint.c | 1 -
.../testing/selftests/bpf/progs/test_tunnel_kern.c | 2 -
tools/testing/selftests/bpf/progs/test_xdp.c | 4 +-
.../bpf/progs/test_xdp_adjust_tail_grow.c | 2 +-
.../bpf/progs/test_xdp_adjust_tail_shrink.c | 4 +-
.../testing/selftests/bpf/progs/test_xdp_bpf2bpf.c | 4 +-
.../selftests/bpf/progs/test_xdp_devmap_helpers.c | 2 +-
tools/testing/selftests/bpf/progs/test_xdp_link.c | 2 +-
tools/testing/selftests/bpf/progs/test_xdp_loop.c | 4 +-
.../selftests/bpf/progs/test_xdp_noinline.c | 4 +-
.../selftests/bpf/progs/test_xdp_redirect.c | 2 -
.../bpf/progs/test_xdp_with_cpumap_helpers.c | 4 +-
.../bpf/progs/test_xdp_with_devmap_helpers.c | 4 +-
tools/testing/selftests/bpf/progs/trace_vprintk.c | 33 +
tools/testing/selftests/bpf/progs/twfw.c | 58 +
tools/testing/selftests/bpf/progs/xdp_dummy.c | 2 +-
.../selftests/bpf/progs/xdp_redirect_multi_kern.c | 4 +-
tools/testing/selftests/bpf/progs/xdping_kern.c | 4 +-
tools/testing/selftests/bpf/progs/xdpwall.c | 365 +
tools/testing/selftests/bpf/test_bpftool.py | 22 +-
tools/testing/selftests/bpf/test_bpftool_build.sh | 4 +
tools/testing/selftests/bpf/test_btf.h | 3 +
tools/testing/selftests/bpf/test_flow_dissector.sh | 10 +-
tools/testing/selftests/bpf/test_progs.c | 710 +-
tools/testing/selftests/bpf/test_progs.h | 40 +-
tools/testing/selftests/bpf/test_sockmap.c | 35 +-
tools/testing/selftests/bpf/test_sysctl.c | 4 +-
.../selftests/bpf/test_tcp_check_syncookie.sh | 4 +-
tools/testing/selftests/bpf/test_tunnel.sh | 5 +-
tools/testing/selftests/bpf/test_verifier.c | 12 +-
tools/testing/selftests/bpf/test_xdp_meta.sh | 5 +-
tools/testing/selftests/bpf/test_xdp_redirect.sh | 4 +-
.../selftests/bpf/test_xdp_redirect_multi.sh | 2 +-
tools/testing/selftests/bpf/test_xdp_veth.sh | 4 +-
tools/testing/selftests/bpf/test_xdp_vlan.sh | 7 +-
tools/testing/selftests/bpf/trace_helpers.c | 1 +
.../testing/selftests/bpf/verifier/array_access.c | 2 +-
.../selftests/bpf/verifier/atomic_cmpxchg.c | 38 +
.../testing/selftests/bpf/verifier/atomic_fetch.c | 57 +
.../selftests/bpf/verifier/atomic_invalid.c | 25 +
tools/testing/selftests/bpf/verifier/calls.c | 23 +
tools/testing/selftests/bpf/verifier/ctx_skb.c | 74 +-
tools/testing/selftests/bpf/verifier/jit.c | 69 +-
tools/testing/selftests/bpf/verifier/lwt.c | 2 +-
.../bpf/verifier/perf_event_sample_period.c | 6 +-
tools/testing/selftests/bpf/verifier/spill_fill.c | 161 +
tools/testing/selftests/bpf/vmtest.sh | 6 +-
tools/testing/selftests/bpf/xdping.c | 7 +-
tools/testing/selftests/bpf/xdpxceiver.c | 961 +-
tools/testing/selftests/bpf/xdpxceiver.h | 75 +-
.../drivers/net/dsa/test_bridge_fdb_stress.sh | 47 +
.../drivers/net/mlxsw/devlink_trap_control.sh | 7 +-
.../drivers/net/mlxsw/devlink_trap_policer.sh | 32 +-
.../drivers/net/mlxsw/devlink_trap_tunnel_ipip.sh | 50 +-
.../selftests/drivers/net/mlxsw/mlxsw_lib.sh | 50 +
.../drivers/net/mlxsw/rif_mac_profile_scale.sh | 72 +
.../drivers/net/mlxsw/rif_mac_profiles.sh | 213 +
.../drivers/net/mlxsw/rif_mac_profiles_occ.sh | 117 +
.../selftests/drivers/net/mlxsw/rtnetlink.sh | 112 +-
.../selftests/drivers/net/mlxsw/sch_offload.sh | 290 +
.../selftests/drivers/net/mlxsw/sch_red_core.sh | 129 +-
.../selftests/drivers/net/mlxsw/sch_red_ets.sh | 64 +-
.../selftests/drivers/net/mlxsw/sch_red_root.sh | 8 +
.../mlxsw/spectrum-2/devlink_trap_tunnel_ipip6.sh | 250 +
.../drivers/net/mlxsw/spectrum-2/resource_scale.sh | 9 +-
.../net/mlxsw/spectrum-2/rif_mac_profile_scale.sh | 16 +
.../net/mlxsw/spectrum/devlink_lib_spectrum.sh | 6 +-
.../drivers/net/mlxsw/spectrum/resource_scale.sh | 2 +-
.../net/mlxsw/spectrum/rif_mac_profile_scale.sh | 16 +
.../selftests/drivers/net/mlxsw/tc_restrictions.sh | 3 +-
.../selftests/drivers/net/mlxsw/tc_sample.sh | 13 +-
.../drivers/net/netdevsim/ethtool-common.sh | 2 +-
.../drivers/net/netdevsim/tc-mq-visibility.sh | 77 +
.../drivers/net/ocelot/tc_flower_chains.sh | 50 +-
tools/testing/selftests/net/.gitignore | 5 +
tools/testing/selftests/net/Makefile | 3 +
tools/testing/selftests/net/amt.sh | 284 +
.../selftests/net/arp_ndisc_evict_nocarrier.sh | 220 +
tools/testing/selftests/net/cmsg_so_mark.c | 67 +
tools/testing/selftests/net/cmsg_so_mark.sh | 61 +
tools/testing/selftests/net/config | 1 +
tools/testing/selftests/net/fib_nexthops.sh | 1 +
.../selftests/net/forwarding/bridge_igmp.sh | 12 +-
.../testing/selftests/net/forwarding/bridge_mld.sh | 12 +-
.../selftests/net/forwarding/devlink_lib.sh | 6 -
.../net/forwarding/forwarding.config.sample | 4 +
.../selftests/net/forwarding/ip6gre_flat.sh | 65 +
.../selftests/net/forwarding/ip6gre_flat_key.sh | 65 +
.../selftests/net/forwarding/ip6gre_flat_keys.sh | 65 +
.../selftests/net/forwarding/ip6gre_hier.sh | 65 +
.../selftests/net/forwarding/ip6gre_hier_key.sh | 65 +
.../selftests/net/forwarding/ip6gre_hier_keys.sh | 65 +
.../testing/selftests/net/forwarding/ip6gre_lib.sh | 438 +
tools/testing/selftests/net/forwarding/lib.sh | 19 +-
.../selftests/net/forwarding/sch_tbf_etsprio.sh | 28 +
.../testing/selftests/net/forwarding/tc_common.sh | 10 +
tools/testing/selftests/net/ioam6.sh | 208 +-
tools/testing/selftests/net/mptcp/.gitignore | 1 +
tools/testing/selftests/net/mptcp/Makefile | 2 +-
tools/testing/selftests/net/mptcp/mptcp_connect.c | 72 +-
tools/testing/selftests/net/mptcp/mptcp_join.sh | 7 +-
tools/testing/selftests/net/mptcp/mptcp_sockopt.c | 683 +
tools/testing/selftests/net/mptcp/mptcp_sockopt.sh | 31 +-
tools/testing/selftests/net/mptcp/pm_netlink.sh | 6 +-
tools/testing/selftests/net/mptcp/simult_flows.sh | 36 +-
tools/testing/selftests/net/tls.c | 28 +-
tools/testing/selftests/seccomp/seccomp_bpf.c | 6 +-
2296 files changed, 215137 insertions(+), 50034 deletions(-)
create mode 100644 Documentation/ABI/testing/sysfs-timecard
create mode 100644 Documentation/bpf/bpf_licensing.rst
create mode 100644 Documentation/devicetree/bindings/net/asix,ax88796c.yaml
delete mode 100644 Documentation/devicetree/bindings/net/dsa/qca8k.txt
create mode 100644 Documentation/devicetree/bindings/net/dsa/qca8k.yaml
create mode 100644 Documentation/devicetree/bindings/net/lantiq,etop-xway.yaml
delete mode 100644 Documentation/devicetree/bindings/net/lantiq,xrx200-net.txt
create mode 100644 Documentation/devicetree/bindings/net/lantiq,xrx200-net.yaml
delete mode 100644 Documentation/devicetree/bindings/net/wireless/qca,ath9k.txt
create mode 100644 Documentation/devicetree/bindings/net/wireless/qca,ath9k.yaml
create mode 100644 Documentation/networking/devlink/iosm.rst
create mode 100644 Documentation/networking/devlink/octeontx2.rst
delete mode 100644 arch/mips/net/bpf_jit.c
delete mode 100644 arch/mips/net/bpf_jit.h
delete mode 100644 arch/mips/net/bpf_jit_asm.S
create mode 100644 arch/mips/net/bpf_jit_comp.c
create mode 100644 arch/mips/net/bpf_jit_comp.h
create mode 100644 arch/mips/net/bpf_jit_comp32.c
create mode 100644 arch/mips/net/bpf_jit_comp64.c
delete mode 100644 arch/mips/net/ebpf_jit.c
create mode 100644 drivers/net/amt.c
create mode 100644 drivers/net/dsa/rtl8365mb.c
create mode 100644 drivers/net/ethernet/asix/Kconfig
create mode 100644 drivers/net/ethernet/asix/Makefile
create mode 100644 drivers/net/ethernet/asix/ax88796c_ioctl.c
create mode 100644 drivers/net/ethernet/asix/ax88796c_ioctl.h
create mode 100644 drivers/net/ethernet/asix/ax88796c_main.c
create mode 100644 drivers/net/ethernet/asix/ax88796c_main.h
create mode 100644 drivers/net/ethernet/asix/ax88796c_spi.c
create mode 100644 drivers/net/ethernet/asix/ax88796c_spi.h
create mode 100644 drivers/net/ethernet/broadcom/bnxt/bnxt_coredump.c
create mode 100644 drivers/net/ethernet/intel/ice/ice_eswitch.c
create mode 100644 drivers/net/ethernet/intel/ice/ice_eswitch.h
create mode 100644 drivers/net/ethernet/intel/ice/ice_repr.c
create mode 100644 drivers/net/ethernet/intel/ice/ice_repr.h
create mode 100644 drivers/net/ethernet/intel/ice/ice_tc_lib.c
create mode 100644 drivers/net/ethernet/intel/ice/ice_tc_lib.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/tc/int_port.c
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/tc/int_port.h
rename drivers/net/ethernet/mellanox/mlx5/core/{ => lag}/lag.c (92%)
rename drivers/net/ethernet/mellanox/mlx5/core/{ => lag}/lag.h (89%)
rename drivers/net/ethernet/mellanox/mlx5/core/{lag_mp.c => lag/mp.c} (99%)
rename drivers/net/ethernet/mellanox/mlx5/core/{lag_mp.h => lag/mp.h} (91%)
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/lag/port_sel.c
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/lag/port_sel.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/lib/tout.c
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/lib/tout.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/sf/dev/diag/dev_tracepoint.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/sf/diag/sf_tracepoint.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/sf/diag/vhca_tracepoint.h
create mode 100644 drivers/net/ethernet/qlogic/qed/qed_dbg_hsi.h
create mode 100644 drivers/net/ethernet/qlogic/qed/qed_iro_hsi.h
create mode 100644 drivers/net/ethernet/qlogic/qed/qed_mfw_hsi.h
create mode 100644 drivers/net/wireless/intel/iwlwifi/fw/rs.c
delete mode 100644 drivers/net/wireless/mediatek/mt76/mt7921/eeprom.c
create mode 100644 drivers/net/wireless/mediatek/mt76/mt7921/pci_mac.c
create mode 100644 drivers/net/wireless/mediatek/mt76/mt7921/pci_mcu.c
create mode 100644 drivers/net/wireless/mediatek/mt76/mt7921/sdio.c
create mode 100644 drivers/net/wireless/mediatek/mt76/mt7921/sdio_mac.c
create mode 100644 drivers/net/wireless/mediatek/mt76/mt7921/sdio_mcu.c
create mode 100644 drivers/net/wireless/mediatek/mt76/mt7921/testmode.c
rename drivers/net/wireless/mediatek/mt76/{mt7615 => }/sdio.h (72%)
rename drivers/net/wireless/mediatek/mt76/{mt7615 => }/sdio_txrx.c (67%)
create mode 100644 drivers/net/wireless/realtek/rtw89/Kconfig
create mode 100644 drivers/net/wireless/realtek/rtw89/Makefile
create mode 100644 drivers/net/wireless/realtek/rtw89/cam.c
create mode 100644 drivers/net/wireless/realtek/rtw89/cam.h
create mode 100644 drivers/net/wireless/realtek/rtw89/coex.c
create mode 100644 drivers/net/wireless/realtek/rtw89/coex.h
create mode 100644 drivers/net/wireless/realtek/rtw89/core.c
create mode 100644 drivers/net/wireless/realtek/rtw89/core.h
create mode 100644 drivers/net/wireless/realtek/rtw89/debug.c
create mode 100644 drivers/net/wireless/realtek/rtw89/debug.h
create mode 100644 drivers/net/wireless/realtek/rtw89/efuse.c
create mode 100644 drivers/net/wireless/realtek/rtw89/efuse.h
create mode 100644 drivers/net/wireless/realtek/rtw89/fw.c
create mode 100644 drivers/net/wireless/realtek/rtw89/fw.h
create mode 100644 drivers/net/wireless/realtek/rtw89/mac.c
create mode 100644 drivers/net/wireless/realtek/rtw89/mac.h
create mode 100644 drivers/net/wireless/realtek/rtw89/mac80211.c
create mode 100644 drivers/net/wireless/realtek/rtw89/pci.c
create mode 100644 drivers/net/wireless/realtek/rtw89/pci.h
create mode 100644 drivers/net/wireless/realtek/rtw89/phy.c
create mode 100644 drivers/net/wireless/realtek/rtw89/phy.h
create mode 100644 drivers/net/wireless/realtek/rtw89/ps.c
create mode 100644 drivers/net/wireless/realtek/rtw89/ps.h
create mode 100644 drivers/net/wireless/realtek/rtw89/reg.h
create mode 100644 drivers/net/wireless/realtek/rtw89/regd.c
create mode 100644 drivers/net/wireless/realtek/rtw89/rtw8852a.c
create mode 100644 drivers/net/wireless/realtek/rtw89/rtw8852a.h
create mode 100644 drivers/net/wireless/realtek/rtw89/rtw8852a_rfk.c
create mode 100644 drivers/net/wireless/realtek/rtw89/rtw8852a_rfk.h
create mode 100644 drivers/net/wireless/realtek/rtw89/rtw8852a_rfk_table.c
create mode 100644 drivers/net/wireless/realtek/rtw89/rtw8852a_rfk_table.h
create mode 100644 drivers/net/wireless/realtek/rtw89/rtw8852a_table.c
create mode 100644 drivers/net/wireless/realtek/rtw89/rtw8852a_table.h
create mode 100644 drivers/net/wireless/realtek/rtw89/sar.c
create mode 100644 drivers/net/wireless/realtek/rtw89/sar.h
create mode 100644 drivers/net/wireless/realtek/rtw89/ser.c
create mode 100644 drivers/net/wireless/realtek/rtw89/ser.h
create mode 100644 drivers/net/wireless/realtek/rtw89/txrx.h
create mode 100644 drivers/net/wireless/realtek/rtw89/util.h
create mode 100644 drivers/net/wwan/iosm/iosm_ipc_coredump.c
create mode 100644 drivers/net/wwan/iosm/iosm_ipc_coredump.h
create mode 100644 drivers/net/wwan/iosm/iosm_ipc_devlink.c
create mode 100644 drivers/net/wwan/iosm/iosm_ipc_devlink.h
create mode 100644 drivers/net/wwan/iosm/iosm_ipc_flash.c
create mode 100644 drivers/net/wwan/iosm/iosm_ipc_flash.h
delete mode 100644 drivers/ptp/idt8a340_reg.h
delete mode 100644 include/linux/netfilter_ingress.h
create mode 100644 include/linux/netfilter_netdev.h
create mode 100644 include/net/amt.h
create mode 100644 include/trace/events/mctp.h
create mode 100644 include/uapi/linux/amt.h
create mode 100644 kernel/bpf/bloom_filter.c
create mode 100644 net/bluetooth/eir.c
create mode 100644 net/bluetooth/eir.h
create mode 100644 net/bluetooth/hci_codec.c
create mode 100644 net/bluetooth/hci_codec.h
create mode 100644 net/bpf/bpf_dummy_struct_ops.c
rename {drivers/of => net/core}/of_net.c (85%)
create mode 100644 net/dsa/tag_rtl8_4.c
create mode 100644 net/ethtool/module.c
create mode 100644 net/mctp/test/route-test.c
create mode 100644 net/mctp/test/utils.c
create mode 100644 net/mctp/test/utils.h
rename net/qrtr/{qrtr.c => af_qrtr.c} (100%)
create mode 100644 net/smc/smc_tracepoint.c
create mode 100644 net/smc/smc_tracepoint.h
create mode 100755 scripts/pahole-flags.sh
create mode 100644 tools/lib/bpf/libbpf_version.h
create mode 100644 tools/testing/selftests/bpf/benchs/bench_bloom_filter_map.c
create mode 100755 tools/testing/selftests/bpf/benchs/run_bench_bloom_filter_map.sh
create mode 100644 tools/testing/selftests/bpf/benchs/run_common.sh
create mode 100644 tools/testing/selftests/bpf/prog_tests/bloom_filter_map.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/btf_tag.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/dummy_st_ops.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/get_branch_snapshot.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/skc_to_unix_sock.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/trace_vprintk.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/verif_stats.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/xdpwall.c
create mode 100644 tools/testing/selftests/bpf/progs/bloom_filter_bench.c
create mode 100644 tools/testing/selftests/bpf/progs/bloom_filter_map.c
create mode 100644 tools/testing/selftests/bpf/progs/dummy_st_ops.c
create mode 100644 tools/testing/selftests/bpf/progs/get_branch_snapshot.c
create mode 100644 tools/testing/selftests/bpf/progs/tag.c
create mode 100644 tools/testing/selftests/bpf/progs/tailcall6.c
create mode 100644 tools/testing/selftests/bpf/progs/test_skc_to_unix_sock.c
create mode 100644 tools/testing/selftests/bpf/progs/trace_vprintk.c
create mode 100644 tools/testing/selftests/bpf/progs/twfw.c
create mode 100644 tools/testing/selftests/bpf/progs/xdpwall.c
create mode 100644 tools/testing/selftests/bpf/verifier/atomic_fetch.c
create mode 100644 tools/testing/selftests/bpf/verifier/atomic_invalid.c
create mode 100755 tools/testing/selftests/drivers/net/dsa/test_bridge_fdb_stress.sh
create mode 100644 tools/testing/selftests/drivers/net/mlxsw/rif_mac_profile_scale.sh
create mode 100755 tools/testing/selftests/drivers/net/mlxsw/rif_mac_profiles.sh
create mode 100755 tools/testing/selftests/drivers/net/mlxsw/rif_mac_profiles_occ.sh
create mode 100755 tools/testing/selftests/drivers/net/mlxsw/sch_offload.sh
create mode 100755 tools/testing/selftests/drivers/net/mlxsw/spectrum-2/devlink_trap_tunnel_ipip6.sh
create mode 100644 tools/testing/selftests/drivers/net/mlxsw/spectrum-2/rif_mac_profile_scale.sh
create mode 100644 tools/testing/selftests/drivers/net/mlxsw/spectrum/rif_mac_profile_scale.sh
create mode 100755 tools/testing/selftests/drivers/net/netdevsim/tc-mq-visibility.sh
create mode 100644 tools/testing/selftests/net/amt.sh
create mode 100755 tools/testing/selftests/net/arp_ndisc_evict_nocarrier.sh
create mode 100644 tools/testing/selftests/net/cmsg_so_mark.c
create mode 100755 tools/testing/selftests/net/cmsg_so_mark.sh
create mode 100755 tools/testing/selftests/net/forwarding/ip6gre_flat.sh
create mode 100755 tools/testing/selftests/net/forwarding/ip6gre_flat_key.sh
create mode 100755 tools/testing/selftests/net/forwarding/ip6gre_flat_keys.sh
create mode 100755 tools/testing/selftests/net/forwarding/ip6gre_hier.sh
create mode 100755 tools/testing/selftests/net/forwarding/ip6gre_hier_key.sh
create mode 100755 tools/testing/selftests/net/forwarding/ip6gre_hier_keys.sh
create mode 100644 tools/testing/selftests/net/forwarding/ip6gre_lib.sh
create mode 100644 tools/testing/selftests/net/mptcp/mptcp_sockopt.c
^ permalink raw reply [relevance 1%]
* Re: [RESEND PATCH] Bluetooth: fix race in sco_sock_connect
2021-10-04 18:01 12% [RESEND PATCH] Bluetooth: fix race in sco_sock_connect Desmond Cheong Zhi Xi
@ 2021-10-08 0:26 11% ` Luiz Augusto von Dentz
0 siblings, 0 replies; 200+ results
From: Luiz Augusto von Dentz @ 2021-10-08 0:26 UTC (permalink / raw)
To: Desmond Cheong Zhi Xi
Cc: Marcel Holtmann, Johan Hedberg, David Miller, Jakub Kicinski,
linux-bluetooth, open list:NETWORKING [GENERAL],
Linux Kernel Mailing List, syzbot+2bef95d3ab4daa10155b,
Hillf Danton
Hi Desmond.
On Mon, Oct 4, 2021 at 11:02 AM Desmond Cheong Zhi Xi
<desmondcheongzx@gmail.com> wrote:
>
> Syzbot reported a use-after-free Write in sco_sock_timeout [1]:
>
> ==================================================================
> BUG: KASAN: use-after-free in instrument_atomic_read_write
> include/linux/instrumented.h:101 [inline]
> BUG: KASAN: use-after-free in atomic_fetch_add_relaxed
> include/asm-generic/atomic-instrumented.h:111 [inline]
> BUG: KASAN: use-after-free in __refcount_add
> include/linux/refcount.h:193 [inline]
> BUG: KASAN: use-after-free in __refcount_inc
> include/linux/refcount.h:250 [inline]
> BUG: KASAN: use-after-free in refcount_inc include/linux/refcount.h:267 [inline]
> BUG: KASAN: use-after-free in sock_hold include/net/sock.h:702 [inline]
> BUG: KASAN: use-after-free in sco_sock_timeout+0x64/0x290 net/bluetooth/sco.c:88
> Write of size 4 at addr ffff888034b46080 by task kworker/1:0/20
>
> CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.14.0-rc6-syzkaller #0
> Workqueue: events sco_sock_timeout
> Call Trace:
> __dump_stack lib/dump_stack.c:88 [inline]
> dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:105
> print_address_description.constprop.0.cold+0x6c/0x309 mm/kasan/report.c:233
> __kasan_report mm/kasan/report.c:419 [inline]
> kasan_report.cold+0x83/0xdf mm/kasan/report.c:436
> check_region_inline mm/kasan/generic.c:183 [inline]
> kasan_check_range+0x13d/0x180 mm/kasan/generic.c:189
> instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
> atomic_fetch_add_relaxed include/asm-generic/atomic-instrumented.h:111 [inline]
> __refcount_add include/linux/refcount.h:193 [inline]
> __refcount_inc include/linux/refcount.h:250 [inline]
> refcount_inc include/linux/refcount.h:267 [inline]
> sock_hold include/net/sock.h:702 [inline]
> sco_sock_timeout+0x64/0x290 net/bluetooth/sco.c:88
> process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
> worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
> kthread+0x3e5/0x4d0 kernel/kthread.c:319
> ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
>
> Allocated by task 4872:
> kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
> kasan_set_track mm/kasan/common.c:46 [inline]
> set_alloc_info mm/kasan/common.c:434 [inline]
> ____kasan_kmalloc mm/kasan/common.c:513 [inline]
> ____kasan_kmalloc mm/kasan/common.c:472 [inline]
> __kasan_kmalloc+0x9b/0xd0 mm/kasan/common.c:522
> kmalloc include/linux/slab.h:596 [inline]
> sk_prot_alloc+0x110/0x290 net/core/sock.c:1822
> sk_alloc+0x32/0xbc0 net/core/sock.c:1875
> __netlink_create+0x63/0x2f0 net/netlink/af_netlink.c:640
> netlink_create+0x3ad/0x5e0 net/netlink/af_netlink.c:703
> __sock_create+0x353/0x790 net/socket.c:1461
> sock_create net/socket.c:1512 [inline]
> __sys_socket+0xef/0x200 net/socket.c:1554
> __do_sys_socket net/socket.c:1563 [inline]
> __se_sys_socket net/socket.c:1561 [inline]
> __x64_sys_socket+0x6f/0xb0 net/socket.c:1561
> do_syscall_x64 arch/x86/entry/common.c:50 [inline]
> do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
> entry_SYSCALL_64_after_hwframe+0x44/0xae
>
> Freed by task 0:
> kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
> kasan_set_track+0x1c/0x30 mm/kasan/common.c:46
> kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:360
> ____kasan_slab_free mm/kasan/common.c:366 [inline]
> ____kasan_slab_free mm/kasan/common.c:328 [inline]
> __kasan_slab_free+0xfb/0x130 mm/kasan/common.c:374
> kasan_slab_free include/linux/kasan.h:230 [inline]
> slab_free_hook mm/slub.c:1628 [inline]
> slab_free_freelist_hook+0xdf/0x240 mm/slub.c:1653
> slab_free mm/slub.c:3213 [inline]
> kfree+0xe4/0x540 mm/slub.c:4267
> sk_prot_free net/core/sock.c:1858 [inline]
> __sk_destruct+0x6a8/0x900 net/core/sock.c:1943
> sk_destruct+0xbd/0xe0 net/core/sock.c:1958
> __sk_free+0xef/0x3d0 net/core/sock.c:1969
> sk_free+0x78/0xa0 net/core/sock.c:1980
> deferred_put_nlk_sk+0x151/0x2f0 net/netlink/af_netlink.c:740
> rcu_do_batch kernel/rcu/tree.c:2550 [inline]
> rcu_core+0x7ab/0x1380 kernel/rcu/tree.c:2785
> __do_softirq+0x29b/0x9c2 kernel/softirq.c:558
>
> Last potentially related work creation:
> kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
> kasan_record_aux_stack+0xe5/0x110 mm/kasan/generic.c:348
> __call_rcu kernel/rcu/tree.c:3029 [inline]
> call_rcu+0xb1/0x750 kernel/rcu/tree.c:3109
> netlink_release+0xdd4/0x1dd0 net/netlink/af_netlink.c:812
> __sock_release+0xcd/0x280 net/socket.c:649
> sock_close+0x18/0x20 net/socket.c:1311
> __fput+0x288/0x920 fs/file_table.c:280
> task_work_run+0xdd/0x1a0 kernel/task_work.c:164
> exit_task_work include/linux/task_work.h:32 [inline]
> do_exit+0xbd4/0x2a60 kernel/exit.c:825
> do_group_exit+0x125/0x310 kernel/exit.c:922
> __do_sys_exit_group kernel/exit.c:933 [inline]
> __se_sys_exit_group kernel/exit.c:931 [inline]
> __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:931
> do_syscall_x64 arch/x86/entry/common.c:50 [inline]
> do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
> entry_SYSCALL_64_after_hwframe+0x44/0xae
>
> Second to last potentially related work creation:
> kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
> kasan_record_aux_stack+0xe5/0x110 mm/kasan/generic.c:348
> __call_rcu kernel/rcu/tree.c:3029 [inline]
> call_rcu+0xb1/0x750 kernel/rcu/tree.c:3109
> netlink_release+0xdd4/0x1dd0 net/netlink/af_netlink.c:812
> __sock_release+0xcd/0x280 net/socket.c:649
> sock_close+0x18/0x20 net/socket.c:1311
> __fput+0x288/0x920 fs/file_table.c:280
> task_work_run+0xdd/0x1a0 kernel/task_work.c:164
> exit_task_work include/linux/task_work.h:32 [inline]
> do_exit+0xbd4/0x2a60 kernel/exit.c:825
> do_group_exit+0x125/0x310 kernel/exit.c:922
> __do_sys_exit_group kernel/exit.c:933 [inline]
> __se_sys_exit_group kernel/exit.c:931 [inline]
> __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:931
> do_syscall_x64 arch/x86/entry/common.c:50 [inline]
> do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
> entry_SYSCALL_64_after_hwframe+0x44/0xae
>
> The buggy address belongs to the object at ffff888034b46000
> which belongs to the cache kmalloc-2k of size 2048
> The buggy address is located 128 bytes inside of
> 2048-byte region [ffff888034b46000, ffff888034b46800)
> The buggy address belongs to the page:
> page:ffffea0000d2d000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34b40
> head:ffffea0000d2d000 order:3 compound_mapcount:0 compound_pincount:0
> flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
> raw: 00fff00000010200 ffffea0000c37a00 0000000200000002 ffff888010c42000
> raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
> page dumped because: kasan: bad access detected
> page_owner tracks the page as allocated
> page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8634, ts 417197903424, free_ts 417180376519
> prep_new_page mm/page_alloc.c:2436 [inline]
> get_page_from_freelist+0xa72/0x2f80 mm/page_alloc.c:4169
> __alloc_pages+0x1b2/0x500 mm/page_alloc.c:5391
> alloc_pages+0x18c/0x2a0 mm/mempolicy.c:2244
> alloc_slab_page mm/slub.c:1691 [inline]
> allocate_slab+0x32e/0x4b0 mm/slub.c:1831
> new_slab mm/slub.c:1894 [inline]
> new_slab_objects mm/slub.c:2640 [inline]
> ___slab_alloc+0x473/0x7b0 mm/slub.c:2803
> __slab_alloc.constprop.0+0xa7/0xf0 mm/slub.c:2843
> slab_alloc_node mm/slub.c:2925 [inline]
> __kmalloc_node_track_caller+0x2e3/0x360 mm/slub.c:4653
> kmalloc_reserve net/core/skbuff.c:355 [inline]
> __alloc_skb+0xde/0x340 net/core/skbuff.c:426
> alloc_skb include/linux/skbuff.h:1116 [inline]
> alloc_skb_with_frags+0x93/0x620 net/core/skbuff.c:6073
> sock_alloc_send_pskb+0x783/0x910 net/core/sock.c:2475
> mld_newpack+0x1df/0x770 net/ipv6/mcast.c:1756
> add_grhead+0x265/0x330 net/ipv6/mcast.c:1859
> add_grec+0x1053/0x14e0 net/ipv6/mcast.c:1997
> mld_send_initial_cr.part.0+0xf6/0x230 net/ipv6/mcast.c:2244
> mld_send_initial_cr net/ipv6/mcast.c:1232 [inline]
> ipv6_mc_dad_complete+0x1d0/0x690 net/ipv6/mcast.c:2255
> addrconf_dad_completed+0xa20/0xd60 net/ipv6/addrconf.c:4181
> page last free stack trace:
> reset_page_owner include/linux/page_owner.h:24 [inline]
> free_pages_prepare mm/page_alloc.c:1346 [inline]
> free_pcp_prepare+0x2c5/0x780 mm/page_alloc.c:1397
> free_unref_page_prepare mm/page_alloc.c:3332 [inline]
> free_unref_page+0x19/0x690 mm/page_alloc.c:3411
> unfreeze_partials+0x16c/0x1b0 mm/slub.c:2421
> put_cpu_partial+0x13d/0x230 mm/slub.c:2457
> qlink_free mm/kasan/quarantine.c:146 [inline]
> qlist_free_all+0x5a/0xc0 mm/kasan/quarantine.c:165
> kasan_quarantine_reduce+0x180/0x200 mm/kasan/quarantine.c:272
> __kasan_slab_alloc+0x8e/0xa0 mm/kasan/common.c:444
> kasan_slab_alloc include/linux/kasan.h:254 [inline]
> slab_post_alloc_hook mm/slab.h:519 [inline]
> slab_alloc_node mm/slub.c:2959 [inline]
> slab_alloc mm/slub.c:2967 [inline]
> kmem_cache_alloc+0x285/0x4a0 mm/slub.c:2972
> getname_flags.part.0+0x50/0x4f0 fs/namei.c:138
> getname_flags fs/namei.c:2747 [inline]
> user_path_at_empty+0xa1/0x100 fs/namei.c:2747
> user_path_at include/linux/namei.h:57 [inline]
> vfs_statx+0x142/0x390 fs/stat.c:203
> vfs_fstatat fs/stat.c:225 [inline]
> vfs_lstat include/linux/fs.h:3386 [inline]
> __do_sys_newlstat+0x91/0x110 fs/stat.c:380
> do_syscall_x64 arch/x86/entry/common.c:50 [inline]
> do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
> entry_SYSCALL_64_after_hwframe+0x44/0xae
>
> Memory state around the buggy address:
> ffff888034b45f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
> ffff888034b46000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
> > ffff888034b46080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
> ^
> ffff888034b46100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
> ffff888034b46180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
> ==================================================================
>
> sco_sock_connect checks the socket's state before allocating a new SCO
> connection and creating a channel for it with the given socket.
>
> However, because this check occurs outside the socket lock, multiple
> concurrent calls to sco_sock_connect are able to pass the check before
> serially entering the critical section and making multiple recursive
> calls to sco_connect.
>
> The result is that multiple SCO connections are allocated, but each
> connection overrides the socket's channel with the previous
> connection. This may cause a UAF because the overwritten connections
> can't have their channels deleted when the socket is released, so
> sco_sock_timeout is able to access the freed socket.
>
> Fix this by checking the socket's state after the socket is locked in
> sco_sock_connect.
>
> Link: https://syzkaller.appspot.com/bug?extid=2bef95d3ab4daa10155b [1]
> Reported-by: syzbot+2bef95d3ab4daa10155b@syzkaller.appspotmail.com
> Tested-by: syzbot+2bef95d3ab4daa10155b@syzkaller.appspotmail.com
> Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
> Cc: Hillf Danton <hdanton@sina.com>
> ---
>
> Hi Maintainers,
>
> Resending this patch because the bug is still being hit regularly by
> Syzbot. Thoughts would be very appreciated.
>
> Best wishes,
> Desmond
>
> net/bluetooth/sco.c | 10 +++++++---
> 1 file changed, 7 insertions(+), 3 deletions(-)
>
> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
> index 8eabf41b2993..e6a9e9e6e795 100644
> --- a/net/bluetooth/sco.c
> +++ b/net/bluetooth/sco.c
> @@ -574,9 +574,6 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
> addr->sa_family != AF_BLUETOOTH)
> return -EINVAL;
>
> - if (sk->sk_state != BT_OPEN && sk->sk_state != BT_BOUND)
> - return -EBADFD;
> -
> if (sk->sk_type != SOCK_SEQPACKET)
> return -EINVAL;
>
> @@ -587,6 +584,13 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
>
> lock_sock(sk);
>
> + if (sk->sk_state != BT_OPEN && sk->sk_state != BT_BOUND) {
> + hci_dev_unlock(hdev);
> + hci_dev_put(hdev);
> + err = -EBADFD;
> + goto done;
> + }
So this is getting really messy, first we have the locking dependency
so we had to do hci_dev_lock before sock_lock and now we have to move
back the checks since it really needs lock_sock anyway, it really
sounds like we are back and forth with this. Also from the description
I assume sco_add_chan is the problem since sco_conn is create during
the syscall we can't actually use its lock to serialize the requests,
so I wonder if it wouldn't be better to do something like l2cap_sock.c
does, have the data created on sock_create so we can use conn->sock in
sco_conn_add.
> /* Set destination address and psm */
> bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
>
> --
> 2.25.1
>
--
Luiz Augusto von Dentz
^ permalink raw reply [relevance 11%]
* Re: [PATCH 1/2] Bluetooth: call sock_hold earlier in sco_conn_del
2021-09-10 7:36 4% ` Marcel Holtmann
@ 2021-10-04 18:12 15% ` Desmond Cheong Zhi Xi
0 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-10-04 18:12 UTC (permalink / raw)
To: Marcel Holtmann
Cc: Johan Hedberg, Luiz Augusto von Dentz, David S. Miller,
Jakub Kicinski, linux-bluetooth, open list:NETWORKING [GENERAL],
open list, eric.dumazet
Hi Marcel,
On 10/9/21 3:36 am, Marcel Holtmann wrote:
> Hi Desmond,
>
>> In sco_conn_del, conn->sk is read while holding on to the
>> sco_conn.lock to avoid races with a socket that could be released
>> concurrently.
>>
>> However, in between unlocking sco_conn.lock and calling sock_hold,
>> it's possible for the socket to be freed, which would cause a
>> use-after-free write when sock_hold is finally called.
>>
>> To fix this, the reference count of the socket should be increased
>> while the sco_conn.lock is still held.
>>
>> Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
>> ---
>> net/bluetooth/sco.c | 3 ++-
>> 1 file changed, 2 insertions(+), 1 deletion(-)
>>
>> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
>> index b62c91c627e2..4a057f99b60a 100644
>> --- a/net/bluetooth/sco.c
>> +++ b/net/bluetooth/sco.c
>> @@ -187,10 +187,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
>> /* Kill socket */
>> sco_conn_lock(conn);
>> sk = conn->sk;
>
> please add a comment here on why we are doing it.
>
So sorry for the very delayed response. I was looking through old email
threads to check if my recently resent patch was still necessary, and
just realized I missed this email.
This patch was merged into the bluetooth-next tree before your feedback
came in. Would you still like me to write a separate patch to add the
requested comment?
Best wishes,
Desmond
>> + if (sk)
>> + sock_hold(sk);
>> sco_conn_unlock(conn);
>>
>> if (sk) {
>> - sock_hold(sk);
>> lock_sock(sk);
>> sco_sock_clear_timer(sk);
>> sco_chan_del(sk, err);
>
> Regards
>
> Marcel
>
^ permalink raw reply [relevance 15%]
* [PATCH] Bluetooth: fix deadlock for RFCOMM sk state change
@ 2021-10-04 18:07 13% Desmond Cheong Zhi Xi
0 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-10-04 18:07 UTC (permalink / raw)
To: marcel, johan.hedberg, luiz.dentz, davem, kuba
Cc: Desmond Cheong Zhi Xi, linux-bluetooth, netdev, linux-kernel,
syzbot+7d51f807c81b190a127d, Hillf Danton
Syzbot reports the following task hang [1]:
INFO: task syz-executor255:8499 blocked for more than 143 seconds.
Not tainted 5.14.0-rc7-syzkaller #0
Call Trace:
context_switch kernel/sched/core.c:4681 [inline]
__schedule+0x93a/0x26f0 kernel/sched/core.c:5938
schedule+0xd3/0x270 kernel/sched/core.c:6017
__lock_sock+0x13d/0x260 net/core/sock.c:2644
lock_sock_nested+0xf6/0x120 net/core/sock.c:3185
lock_sock include/net/sock.h:1612 [inline]
rfcomm_sk_state_change+0xb4/0x390 net/bluetooth/rfcomm/sock.c:73
__rfcomm_dlc_close+0x1b6/0x8a0 net/bluetooth/rfcomm/core.c:489
rfcomm_dlc_close+0x1ea/0x240 net/bluetooth/rfcomm/core.c:520
__rfcomm_sock_close+0xac/0x260 net/bluetooth/rfcomm/sock.c:220
rfcomm_sock_shutdown+0xe9/0x210 net/bluetooth/rfcomm/sock.c:931
rfcomm_sock_release+0x5f/0x140 net/bluetooth/rfcomm/sock.c:951
__sock_release+0xcd/0x280 net/socket.c:649
sock_close+0x18/0x20 net/socket.c:1314
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
Showing all locks held in the system:
1 lock held by khungtaskd/1653:
#0: ffffffff8b97c280 (rcu_read_lock){....}-{1:2}, at:
debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6446
1 lock held by krfcommd/4781:
#0: ffffffff8d306528 (rfcomm_mutex){+.+.}-{3:3}, at:
rfcomm_process_sessions net/bluetooth/rfcomm/core.c:1979 [inline]
#0: ffffffff8d306528 (rfcomm_mutex){+.+.}-{3:3}, at:
rfcomm_run+0x2ed/0x4a20 net/bluetooth/rfcomm/core.c:2086
2 locks held by in:imklog/8206:
#0: ffff8880182ce5f0 (&f->f_pos_lock){+.+.}-{3:3}, at:
__fdget_pos+0xe9/0x100 fs/file.c:974
#1: ffff8880b9c51a58 (&rq->__lock){-.-.}-{2:2}, at:
raw_spin_rq_lock_nested kernel/sched/core.c:460 [inline]
#1: ffff8880b9c51a58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock
kernel/sched/sched.h:1307 [inline]
#1: ffff8880b9c51a58 (&rq->__lock){-.-.}-{2:2}, at: rq_lock
kernel/sched/sched.h:1610 [inline]
#1: ffff8880b9c51a58 (&rq->__lock){-.-.}-{2:2}, at:
__schedule+0x233/0x26f0 kernel/sched/core.c:5852
4 locks held by syz-executor255/8499:
#0: ffff888039a83690 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at:
inode_lock include/linux/fs.h:774 [inline]
#0: ffff888039a83690 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at:
__sock_release+0x86/0x280 net/socket.c:648
#1:
ffff88802fa31120 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0},
at: lock_sock include/net/sock.h:1612 [inline]
#1:
ffff88802fa31120 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0},
at: rfcomm_sock_shutdown+0x54/0x210 net/bluetooth/rfcomm/sock.c:928
#2: ffffffff8d306528 (rfcomm_mutex){+.+.}-{3:3}, at:
rfcomm_dlc_close+0x34/0x240 net/bluetooth/rfcomm/core.c:507
#3: ffff888141bd6d28 (&d->lock){+.+.}-{3:3}, at:
__rfcomm_dlc_close+0x162/0x8a0 net/bluetooth/rfcomm/core.c:487
==================================================================
The task hangs because of a deadlock that occurs when lock_sock() is
called in rfcomm_sk_state_change(). One such call stack is:
rfcomm_sock_shutdown():
lock_sock();
__rfcomm_sock_close():
rfcomm_dlc_close():
__rfcomm_dlc_close():
rfcomm_dlc_lock();
rfcomm_sk_state_change():
lock_sock();
lock_sock() has to be called when the sk state is changed because the
lock is not always held when rfcomm_sk_state_change() is
called. However, besides the recursive deadlock, there is also an
issue of a lock hierarchy inversion between rfcomm_dlc_lock() and
lock_sock() if the socket is locked in rfcomm_sk_state_change().
To avoid these issues, we can instead schedule the sk state change in
the global workqueue. This is already the implicit assumption about
how sk state changes happen. For example, in rfcomm_sock_shutdown(),
the call to __rfcomm_sock_close() is followed by
bt_sock_wait_state().
Additionally, the call to rfcomm_sock_kill() inside
rfcomm_sk_state_change() should be removed. The socket shouldn't be
killed here because only rfcomm_sock_release() calls sock_orphan(),
which it already follows up with a call to rfcomm_sock_kill().
Fixes: b7ce436a5d79 ("Bluetooth: switch to lock_sock in RFCOMM")
Link: https://syzkaller.appspot.com/bug?extid=7d51f807c81b190a127d [1]
Reported-by: syzbot+7d51f807c81b190a127d@syzkaller.appspotmail.com
Tested-by: syzbot+7d51f807c81b190a127d@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Cc: Hillf Danton <hdanton@sina.com>
---
include/net/bluetooth/rfcomm.h | 3 +++
net/bluetooth/rfcomm/core.c | 2 ++
net/bluetooth/rfcomm/sock.c | 34 ++++++++++++++++++++++------------
3 files changed, 27 insertions(+), 12 deletions(-)
diff --git a/include/net/bluetooth/rfcomm.h b/include/net/bluetooth/rfcomm.h
index 99d26879b02a..a92799fc5e74 100644
--- a/include/net/bluetooth/rfcomm.h
+++ b/include/net/bluetooth/rfcomm.h
@@ -171,6 +171,7 @@ struct rfcomm_dlc {
struct rfcomm_session *session;
struct sk_buff_head tx_queue;
struct timer_list timer;
+ struct work_struct state_change_work;
struct mutex lock;
unsigned long state;
@@ -186,6 +187,7 @@ struct rfcomm_dlc {
u8 sec_level;
u8 role_switch;
u32 defer_setup;
+ int err;
uint mtu;
uint cfc;
@@ -310,6 +312,7 @@ struct rfcomm_pinfo {
u8 role_switch;
};
+void __rfcomm_sk_state_change(struct work_struct *work);
int rfcomm_init_sockets(void);
void rfcomm_cleanup_sockets(void);
diff --git a/net/bluetooth/rfcomm/core.c b/net/bluetooth/rfcomm/core.c
index 7324764384b6..c6494e85cd68 100644
--- a/net/bluetooth/rfcomm/core.c
+++ b/net/bluetooth/rfcomm/core.c
@@ -289,6 +289,7 @@ static void rfcomm_dlc_clear_state(struct rfcomm_dlc *d)
d->flags = 0;
d->mscex = 0;
d->sec_level = BT_SECURITY_LOW;
+ d->err = 0;
d->mtu = RFCOMM_DEFAULT_MTU;
d->v24_sig = RFCOMM_V24_RTC | RFCOMM_V24_RTR | RFCOMM_V24_DV;
@@ -306,6 +307,7 @@ struct rfcomm_dlc *rfcomm_dlc_alloc(gfp_t prio)
timer_setup(&d->timer, rfcomm_dlc_timeout, 0);
skb_queue_head_init(&d->tx_queue);
+ INIT_WORK(&d->state_change_work, __rfcomm_sk_state_change);
mutex_init(&d->lock);
refcount_set(&d->refcnt, 1);
diff --git a/net/bluetooth/rfcomm/sock.c b/net/bluetooth/rfcomm/sock.c
index 4bf4ea6cbb5e..4850dafbaa05 100644
--- a/net/bluetooth/rfcomm/sock.c
+++ b/net/bluetooth/rfcomm/sock.c
@@ -61,19 +61,22 @@ static void rfcomm_sk_data_ready(struct rfcomm_dlc *d, struct sk_buff *skb)
rfcomm_dlc_throttle(d);
}
-static void rfcomm_sk_state_change(struct rfcomm_dlc *d, int err)
+void __rfcomm_sk_state_change(struct work_struct *work)
{
+ struct rfcomm_dlc *d = container_of(work, struct rfcomm_dlc,
+ state_change_work);
struct sock *sk = d->owner, *parent;
if (!sk)
return;
- BT_DBG("dlc %p state %ld err %d", d, d->state, err);
-
lock_sock(sk);
+ rfcomm_dlc_lock(d);
- if (err)
- sk->sk_err = err;
+ BT_DBG("dlc %p state %ld err %d", d, d->state, d->err);
+
+ if (d->err)
+ sk->sk_err = d->err;
sk->sk_state = d->state;
@@ -91,15 +94,22 @@ static void rfcomm_sk_state_change(struct rfcomm_dlc *d, int err)
sk->sk_state_change(sk);
}
+ rfcomm_dlc_unlock(d);
release_sock(sk);
+ sock_put(sk);
+}
- if (parent && sock_flag(sk, SOCK_ZAPPED)) {
- /* We have to drop DLC lock here, otherwise
- * rfcomm_sock_destruct() will dead lock. */
- rfcomm_dlc_unlock(d);
- rfcomm_sock_kill(sk);
- rfcomm_dlc_lock(d);
- }
+static void rfcomm_sk_state_change(struct rfcomm_dlc *d, int err)
+{
+ struct sock *sk = d->owner;
+
+ if (!sk)
+ return;
+
+ d->err = err;
+ sock_hold(sk);
+ if (!schedule_work(&d->state_change_work))
+ sock_put(sk);
}
/* ---- Socket functions ---- */
--
2.25.1
^ permalink raw reply related [relevance 13%]
* [RESEND PATCH] Bluetooth: fix race in sco_sock_connect
@ 2021-10-04 18:01 12% Desmond Cheong Zhi Xi
2021-10-08 0:26 11% ` Luiz Augusto von Dentz
0 siblings, 1 reply; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-10-04 18:01 UTC (permalink / raw)
To: marcel, johan.hedberg, luiz.dentz, davem, kuba
Cc: Desmond Cheong Zhi Xi, linux-bluetooth, netdev, linux-kernel,
syzbot+2bef95d3ab4daa10155b, Hillf Danton
Syzbot reported a use-after-free Write in sco_sock_timeout [1]:
==================================================================
BUG: KASAN: use-after-free in instrument_atomic_read_write
include/linux/instrumented.h:101 [inline]
BUG: KASAN: use-after-free in atomic_fetch_add_relaxed
include/asm-generic/atomic-instrumented.h:111 [inline]
BUG: KASAN: use-after-free in __refcount_add
include/linux/refcount.h:193 [inline]
BUG: KASAN: use-after-free in __refcount_inc
include/linux/refcount.h:250 [inline]
BUG: KASAN: use-after-free in refcount_inc include/linux/refcount.h:267 [inline]
BUG: KASAN: use-after-free in sock_hold include/net/sock.h:702 [inline]
BUG: KASAN: use-after-free in sco_sock_timeout+0x64/0x290 net/bluetooth/sco.c:88
Write of size 4 at addr ffff888034b46080 by task kworker/1:0/20
CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.14.0-rc6-syzkaller #0
Workqueue: events sco_sock_timeout
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:105
print_address_description.constprop.0.cold+0x6c/0x309 mm/kasan/report.c:233
__kasan_report mm/kasan/report.c:419 [inline]
kasan_report.cold+0x83/0xdf mm/kasan/report.c:436
check_region_inline mm/kasan/generic.c:183 [inline]
kasan_check_range+0x13d/0x180 mm/kasan/generic.c:189
instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
atomic_fetch_add_relaxed include/asm-generic/atomic-instrumented.h:111 [inline]
__refcount_add include/linux/refcount.h:193 [inline]
__refcount_inc include/linux/refcount.h:250 [inline]
refcount_inc include/linux/refcount.h:267 [inline]
sock_hold include/net/sock.h:702 [inline]
sco_sock_timeout+0x64/0x290 net/bluetooth/sco.c:88
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Allocated by task 4872:
kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
kasan_set_track mm/kasan/common.c:46 [inline]
set_alloc_info mm/kasan/common.c:434 [inline]
____kasan_kmalloc mm/kasan/common.c:513 [inline]
____kasan_kmalloc mm/kasan/common.c:472 [inline]
__kasan_kmalloc+0x9b/0xd0 mm/kasan/common.c:522
kmalloc include/linux/slab.h:596 [inline]
sk_prot_alloc+0x110/0x290 net/core/sock.c:1822
sk_alloc+0x32/0xbc0 net/core/sock.c:1875
__netlink_create+0x63/0x2f0 net/netlink/af_netlink.c:640
netlink_create+0x3ad/0x5e0 net/netlink/af_netlink.c:703
__sock_create+0x353/0x790 net/socket.c:1461
sock_create net/socket.c:1512 [inline]
__sys_socket+0xef/0x200 net/socket.c:1554
__do_sys_socket net/socket.c:1563 [inline]
__se_sys_socket net/socket.c:1561 [inline]
__x64_sys_socket+0x6f/0xb0 net/socket.c:1561
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
Freed by task 0:
kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
kasan_set_track+0x1c/0x30 mm/kasan/common.c:46
kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:360
____kasan_slab_free mm/kasan/common.c:366 [inline]
____kasan_slab_free mm/kasan/common.c:328 [inline]
__kasan_slab_free+0xfb/0x130 mm/kasan/common.c:374
kasan_slab_free include/linux/kasan.h:230 [inline]
slab_free_hook mm/slub.c:1628 [inline]
slab_free_freelist_hook+0xdf/0x240 mm/slub.c:1653
slab_free mm/slub.c:3213 [inline]
kfree+0xe4/0x540 mm/slub.c:4267
sk_prot_free net/core/sock.c:1858 [inline]
__sk_destruct+0x6a8/0x900 net/core/sock.c:1943
sk_destruct+0xbd/0xe0 net/core/sock.c:1958
__sk_free+0xef/0x3d0 net/core/sock.c:1969
sk_free+0x78/0xa0 net/core/sock.c:1980
deferred_put_nlk_sk+0x151/0x2f0 net/netlink/af_netlink.c:740
rcu_do_batch kernel/rcu/tree.c:2550 [inline]
rcu_core+0x7ab/0x1380 kernel/rcu/tree.c:2785
__do_softirq+0x29b/0x9c2 kernel/softirq.c:558
Last potentially related work creation:
kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
kasan_record_aux_stack+0xe5/0x110 mm/kasan/generic.c:348
__call_rcu kernel/rcu/tree.c:3029 [inline]
call_rcu+0xb1/0x750 kernel/rcu/tree.c:3109
netlink_release+0xdd4/0x1dd0 net/netlink/af_netlink.c:812
__sock_release+0xcd/0x280 net/socket.c:649
sock_close+0x18/0x20 net/socket.c:1311
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
__do_sys_exit_group kernel/exit.c:933 [inline]
__se_sys_exit_group kernel/exit.c:931 [inline]
__x64_sys_exit_group+0x3a/0x50 kernel/exit.c:931
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
Second to last potentially related work creation:
kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
kasan_record_aux_stack+0xe5/0x110 mm/kasan/generic.c:348
__call_rcu kernel/rcu/tree.c:3029 [inline]
call_rcu+0xb1/0x750 kernel/rcu/tree.c:3109
netlink_release+0xdd4/0x1dd0 net/netlink/af_netlink.c:812
__sock_release+0xcd/0x280 net/socket.c:649
sock_close+0x18/0x20 net/socket.c:1311
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
__do_sys_exit_group kernel/exit.c:933 [inline]
__se_sys_exit_group kernel/exit.c:931 [inline]
__x64_sys_exit_group+0x3a/0x50 kernel/exit.c:931
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
The buggy address belongs to the object at ffff888034b46000
which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 128 bytes inside of
2048-byte region [ffff888034b46000, ffff888034b46800)
The buggy address belongs to the page:
page:ffffea0000d2d000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34b40
head:ffffea0000d2d000 order:3 compound_mapcount:0 compound_pincount:0
flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000010200 ffffea0000c37a00 0000000200000002 ffff888010c42000
raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8634, ts 417197903424, free_ts 417180376519
prep_new_page mm/page_alloc.c:2436 [inline]
get_page_from_freelist+0xa72/0x2f80 mm/page_alloc.c:4169
__alloc_pages+0x1b2/0x500 mm/page_alloc.c:5391
alloc_pages+0x18c/0x2a0 mm/mempolicy.c:2244
alloc_slab_page mm/slub.c:1691 [inline]
allocate_slab+0x32e/0x4b0 mm/slub.c:1831
new_slab mm/slub.c:1894 [inline]
new_slab_objects mm/slub.c:2640 [inline]
___slab_alloc+0x473/0x7b0 mm/slub.c:2803
__slab_alloc.constprop.0+0xa7/0xf0 mm/slub.c:2843
slab_alloc_node mm/slub.c:2925 [inline]
__kmalloc_node_track_caller+0x2e3/0x360 mm/slub.c:4653
kmalloc_reserve net/core/skbuff.c:355 [inline]
__alloc_skb+0xde/0x340 net/core/skbuff.c:426
alloc_skb include/linux/skbuff.h:1116 [inline]
alloc_skb_with_frags+0x93/0x620 net/core/skbuff.c:6073
sock_alloc_send_pskb+0x783/0x910 net/core/sock.c:2475
mld_newpack+0x1df/0x770 net/ipv6/mcast.c:1756
add_grhead+0x265/0x330 net/ipv6/mcast.c:1859
add_grec+0x1053/0x14e0 net/ipv6/mcast.c:1997
mld_send_initial_cr.part.0+0xf6/0x230 net/ipv6/mcast.c:2244
mld_send_initial_cr net/ipv6/mcast.c:1232 [inline]
ipv6_mc_dad_complete+0x1d0/0x690 net/ipv6/mcast.c:2255
addrconf_dad_completed+0xa20/0xd60 net/ipv6/addrconf.c:4181
page last free stack trace:
reset_page_owner include/linux/page_owner.h:24 [inline]
free_pages_prepare mm/page_alloc.c:1346 [inline]
free_pcp_prepare+0x2c5/0x780 mm/page_alloc.c:1397
free_unref_page_prepare mm/page_alloc.c:3332 [inline]
free_unref_page+0x19/0x690 mm/page_alloc.c:3411
unfreeze_partials+0x16c/0x1b0 mm/slub.c:2421
put_cpu_partial+0x13d/0x230 mm/slub.c:2457
qlink_free mm/kasan/quarantine.c:146 [inline]
qlist_free_all+0x5a/0xc0 mm/kasan/quarantine.c:165
kasan_quarantine_reduce+0x180/0x200 mm/kasan/quarantine.c:272
__kasan_slab_alloc+0x8e/0xa0 mm/kasan/common.c:444
kasan_slab_alloc include/linux/kasan.h:254 [inline]
slab_post_alloc_hook mm/slab.h:519 [inline]
slab_alloc_node mm/slub.c:2959 [inline]
slab_alloc mm/slub.c:2967 [inline]
kmem_cache_alloc+0x285/0x4a0 mm/slub.c:2972
getname_flags.part.0+0x50/0x4f0 fs/namei.c:138
getname_flags fs/namei.c:2747 [inline]
user_path_at_empty+0xa1/0x100 fs/namei.c:2747
user_path_at include/linux/namei.h:57 [inline]
vfs_statx+0x142/0x390 fs/stat.c:203
vfs_fstatat fs/stat.c:225 [inline]
vfs_lstat include/linux/fs.h:3386 [inline]
__do_sys_newlstat+0x91/0x110 fs/stat.c:380
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
Memory state around the buggy address:
ffff888034b45f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
ffff888034b46000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
> ffff888034b46080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff888034b46100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff888034b46180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
sco_sock_connect checks the socket's state before allocating a new SCO
connection and creating a channel for it with the given socket.
However, because this check occurs outside the socket lock, multiple
concurrent calls to sco_sock_connect are able to pass the check before
serially entering the critical section and making multiple recursive
calls to sco_connect.
The result is that multiple SCO connections are allocated, but each
connection overrides the socket's channel with the previous
connection. This may cause a UAF because the overwritten connections
can't have their channels deleted when the socket is released, so
sco_sock_timeout is able to access the freed socket.
Fix this by checking the socket's state after the socket is locked in
sco_sock_connect.
Link: https://syzkaller.appspot.com/bug?extid=2bef95d3ab4daa10155b [1]
Reported-by: syzbot+2bef95d3ab4daa10155b@syzkaller.appspotmail.com
Tested-by: syzbot+2bef95d3ab4daa10155b@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Cc: Hillf Danton <hdanton@sina.com>
---
Hi Maintainers,
Resending this patch because the bug is still being hit regularly by
Syzbot. Thoughts would be very appreciated.
Best wishes,
Desmond
net/bluetooth/sco.c | 10 +++++++---
1 file changed, 7 insertions(+), 3 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 8eabf41b2993..e6a9e9e6e795 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -574,9 +574,6 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
addr->sa_family != AF_BLUETOOTH)
return -EINVAL;
- if (sk->sk_state != BT_OPEN && sk->sk_state != BT_BOUND)
- return -EBADFD;
-
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
@@ -587,6 +584,13 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
lock_sock(sk);
+ if (sk->sk_state != BT_OPEN && sk->sk_state != BT_BOUND) {
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
+ err = -EBADFD;
+ goto done;
+ }
+
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
--
2.25.1
^ permalink raw reply related [relevance 12%]
* [ANNOUNCE] 4.4.285-rt226
@ 2021-10-01 8:34 3% Daniel Wagner
0 siblings, 0 replies; 200+ results
From: Daniel Wagner @ 2021-10-01 8:34 UTC (permalink / raw)
To: LKML, linux-rt-users, Steven Rostedt, Thomas Gleixner,
Carsten Emde, John Kacur, Sebastian Andrzej Siewior, Tom Zanussi,
Clark Williams, Pavel Machek
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 20674 bytes --]
Hello RT-list!
I'm pleased to announce the 4.4.285-rt226 stable release.
There are some futex changes in the RT code which were necessary
because of the fuxex backports in v4.4.280. It took me a while to
figure the merge conflicts and what needs to be changed in the
futex/rtmutex patches. The v4.4 version of "Add the rtmutex rework"
path is updated. The the locking rules changed, see the fixup patch
for hb->lock and mutex->wait_lock.
Unfortunatly, I am not able to upload the patches to the usual places
because I had to create a new gpg subkey as my old one expired. And
now kup tells me my signature is invalid. I created a ed25519 signing
key instead of a rsa one. Maybe this is what kup upsets. No idea and
the security tools are helpful as always... NOT.
As I didn't want to delay the release even more I only pushed the
changes to the git tree.
You can get this release via the git tree at:
git://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git
branch: v4.4-rt
Head SHA1: b045f6da3d00b1423045781f9ec069827ea6a42a
Enjoy!
Daniel
Changes from v4.4.277-rt224:
---
Adrian Bunk (1):
bnx2x: Fix enabling network interfaces without VFs
Alex Xu (Hello71) (1):
pipe: increase minimum default pipe size to 2 pages
Andreas Obergschwandtner (1):
ARM: tegra: tamonten: Fix UART pad setting
Andrew Morton (1):
mm/kmemleak.c: make cond_resched() rate-limiting more efficient
Andy Shevchenko (3):
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
dmaengine: acpi-dma: check for 64-bit MMIO address
dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
Anna-Maria Gleixner (1):
rcu: Update documentation of rcu_read_unlock()
Axel Lin (1):
regulator: rt5033: Fix n_voltages settings for BUCK and LDO
Ben Dooks (1):
ARM: 8918/2: only build return_address() if needed
Bob Peterson (1):
gfs2: Don't call dlm after protocol is unmounted
Christoph Hellwig (1):
cryptoloop: add a deprecation warning
Christophe JAILLET (2):
drm/msm/dsi: Fix some reference counted resource leaks
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Colin Ian King (2):
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
parport: remove non-zero check on count
Cyrill Gorcunov (1):
prctl: allow to setup brk for et_dyn executables
Damien Le Moal (1):
libata: fix ata_host_start()
Dan Carpenter (4):
bnx2x: fix an error code in bnx2x_nic_load()
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
Daniel Wagner (5):
Merge tag 'v4.4.280' into v4.4-rt
futex: fixup wait_lock/pi_lock locking rule changes
Linux 4.4.280-rt225
Merge tag 'v4.4.285' into v4.4-rt
Linux 4.4.285-rt226
Daniele Palmas (1):
USB: serial: option: add Telit FD980 composition 0x1056
Dave Gerlach (1):
ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218
David Bauer (1):
USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2
David Heidelberg (1):
ARM: 9105/1: atags_to_fdt: don't warn about stack size
Denis Efremov (1):
Revert "floppy: reintroduce O_NDELAY fix"
Desmond Cheong Zhi Xi (5):
hfs: add missing clean-up in hfs_fill_super
hfs: fix high memory mapping in hfs_bnode_read
hfs: add lock nesting notation to hfs_find_init
Bluetooth: fix repeated calls to sco_sock_kill
Bluetooth: skip invalid hci_sync_conn_complete_evt
Ding Hui (1):
cifs: fix wrong release in sess_alloc_buffer() failed path
Dinghao Liu (2):
net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Dmitry Osipenko (1):
rtc: tps65910: Correct driver module alias
Dongliang Mu (3):
ipack: tpci200: fix many double free issues in tpci200_pci_probe
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
Doug Anderson (1):
mmc: dw_mmc: Wait for data transfer after response errors.
Douglas Anderson (1):
mmc: dw_mmc: Fix occasional hang after tuning on eMMC
Eric Dumazet (3):
ipv4: make exception cache less predictible
net-caif: avoid user-triggerable WARN_ON(1)
net/af_unix: fix a data-race in unix_dgram_poll
Esben Haabendal (1):
net: ll_temac: Remove left-over debug message
Evgeny Novikov (1):
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Fangrui Song (1):
powerpc/boot: Delete unneeded .globl _zimage_start
Florian Fainelli (1):
r6040: Restore MDIO clock frequency after MAC reset
George Kennedy (1):
fbmem: add margin check to fb_check_caps()
Giovanni Cabiddu (1):
crypto: qat - do not ignore errors from enable_vf2pf_comms()
Goldwyn Rodrigues (1):
btrfs: mark compressed range uptodate only if all bio succeed
Greg Kroah-Hartman (10):
Linux 4.4.278
Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled"
Linux 4.4.279
Linux 4.4.280
Linux 4.4.281
i2c: dev: zero out array used for i2c reads from userspace
Linux 4.4.283
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Linux 4.4.284
Linux 4.4.285
Grygorii Strashko (1):
PM / wakeirq: Enable dedicated wakeirq for suspend
Guenter Roeck (2):
parisc: Move pci_dev_is_behind_card_dino to where it is used
drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV
Gustavo A. R. Silva (1):
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
H. Nikolaus Schaller (1):
mips: Fix non-POSIX regexp
Hans Verkuil (1):
media: videobuf2-core: dequeue if start_streaming fails
Hans de Goede (1):
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
Harshvardhan Jha (1):
scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry()
Heiko Carstens (1):
s390/jump_label: print real address in a case of a jump label bug
Hoang Le (2):
tipc: fix sleeping in tipc accept routine
tipc: increase timeout in tipc_sk_enqueue()
Hui Su (1):
scripts/tracing: fix the bug that can't parse raw_trace_func
Ilya Leoshkevich (2):
s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
s390/bpf: Fix optimizing out zero-extensions
J. Bruce Fields (1):
rpc: fix gss_svc_init cleanup on failure
Jaehoon Chung (1):
mmc: dw_mmc: call the dw_mci_prep_stop_abort() by default
Jan Kiszka (1):
x86/asm: Ensure asm/proto.h can be included stand-alone
Jaroslav Kysela (1):
ALSA: hda - fix the 'Capture Switch' value change notifications
Javier Martinez Canillas (1):
usb: phy: isp1301: Fix build warning when CONFIG_OF is disabled
Jeff Layton (1):
ceph: lockdep annotations for try_nonblocking_invalidate
Jens Axboe (1):
net: split out functions related to registering inflight socket files
Jiapeng Chong (1):
mlx4: Fix missing error code in mlx4_load_one()
Jiri Slaby (2):
xtensa: ISS: don't panic in rs_init
hvsi: don't panic on tty_register_driver failure
Johan Almbladh (2):
bpf/tests: Fix copy-and-paste error in double word test
bpf/tests: Do not PASS tests without actually testing the result
Johan Hovold (2):
media: rtl28xxu: fix zero-length control request
Revert "USB: serial: ch341: fix character loss at high transfer rates"
Johannes Berg (1):
dmaengine: ioat: depends on !UML
Jonathan Cameron (1):
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Jouni Malinen (5):
ath: Use safer key clearing with key cache entries
ath9k: Clear key cache explicitly on disabling hardware
ath: Export ath_hw_keysetmac()
ath: Modify ath_key_delete() to not need full key entry
ath9k: Postpone key cache entry deletion for TXQ frames reference it
Juergen Gross (1):
xen: fix setting of max_pfn in shared_info
Junxiao Bi (2):
ocfs2: fix zero out valid data
ocfs2: issue zeroout to EOF blocks
Kai-Heng Feng (1):
Bluetooth: Move shutdown callback before flushing tx and rx queue
Kelly Devilliv (1):
usb: host: fotg210: fix the actual_length of an iso packet
Krzysztof Kozlowski (2):
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
power: supply: max17042: handle fails of reading status register
Krzysztof Wilczyński (1):
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Len Baker (1):
CIFS: Fix a potencially linear read overflow
Letu Ren (1):
net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset
Li Jinlin (1):
blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
Li Manyi (1):
scsi: sr: Return correct event when media event code is 3
Lin, Zhenpeng (1):
dccp: don't duplicate ccid when cloning dccp sock
Linus Torvalds (1):
vt_kdsetmode: extend console locking
Linus Walleij (1):
clk: kirkwood: Fix a clocking boot regression
Liu Jian (1):
igmp: Add ip_mc_list lock in ip_check_mc_rcu
Longfang Liu (1):
USB:ehci:fix Kunpeng920 ehci hardware problem
Maciej W. Rozycki (3):
serial: 8250: Mask out floating 16/32-bit bus bits
MIPS: Malta: Do not byte-swap accesses to the CBUS UART
serial: 8250: Define RX trigger levels for OxSemi 950 devices
Maciej Żenczykowski (1):
usb: gadget: u_ether: fix a potential null pointer dereference
Marcelo Ricardo Leitner (3):
sctp: validate chunk size in __rcv_asconf_lookup
sctp: add param size validation for SCTP_PARAM_SET_PRIMARY
sctp: validate from_addr_param return
Marco Chiappero (1):
crypto: qat - fix reuse of completion variable
Marek Behún (2):
PCI: Call Max Payload Size-related fixup quirks early
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
Marek Marczykowski-Górecki (1):
PCI/MSI: Skip masking MSI-X on Xen PV
Martin KaFai Lau (1):
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Mathias Nyman (1):
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Mathieu Desnoyers (1):
ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
Matthew Wilcox (1):
lib/string.c: add multibyte memset functions
Mauro Carvalho Chehab (1):
media: uvc: don't do DMA on stack
Maxim Kiselev (1):
net: marvell: fix MVNETA_TX_IN_PRGRS bit number
Maxim Levitsky (1):
KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653)
Maximilian Heyne (1):
xen/events: Fix race in set_evtchn_to_irq
Michael Ellerman (1):
powerpc/module64: Fix comment in R_PPC64_ENTRY handling
Mike Galbraith (1):
futex: Handle transient "ownerless" rtmutex state correctly
Mike Rapoport (1):
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
Miklos Szeredi (2):
af_unix: fix garbage collect vs MSG_PEEK
ovl: prevent private clone if bind mount is not allowed
Mikulas Patocka (1):
parisc: fix crash with signals and alloca
Miquel Raynal (1):
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
Muchun Song (1):
mm/page_alloc: speed up the iteration of max_order
Nadezda Lutovinova (1):
usb: gadget: mv_u3d: request_irq() after initializing UDC
Nanyong Sun (6):
nilfs2: fix memory leak in nilfs_sysfs_create_device_group
nilfs2: fix NULL pointer in nilfs_##name##_attr_release
nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
Nathan Chancellor (1):
vmlinux.lds.h: Handle clang's module.{c,d}tor sections
Neeraj Upadhyay (1):
vringh: Use wiov->used to check for read/write desc order
Nguyen Dinh Phi (2):
cfg80211: Fix possible memory leak in function cfg80211_bss_update
tty: Fix data race between tiocsti() and flush_to_ldisc()
Ole Bjørn Midtbø (1):
Bluetooth: hidp: use correct wait queue when removing ctrl_wait
Pablo Neira Ayuso (1):
netfilter: nft_nat: allow to specify layer 4 protocol NAT only
Parav Pandit (1):
virtio: Improve vq->broken access to avoid any compiler optimization
Patryk Duda (1):
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Paul Gortmaker (1):
x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
Paul Jakma (1):
NIU: fix incorrect error return, missed in previous revert
Pavel Skripkin (13):
can: usb_8dev: fix memory leak
can: ems_usb: fix memory leak
can: esd_usb2: fix memory leak
net: llc: fix skb_over_panic
net: pegasus: fix uninit-value in get_interrupt_interval
net: vxge: fix use-after-free in vxge_device_unregister
net: 6pack: fix slab-out-of-bounds in decode_data
media: stkwebcam: fix memory leak in stk_camera_probe
m68k: emu: Fix invalid free in nfeth_cleanup()
media: go7007: remove redundant initialization
net: cipso: fix warnings in netlbl_cipsov4_add_std
Bluetooth: add timeout sanity check to hci_inquiry
profiling: fix shift-out-of-bounds bugs
Peter Ujfalusi (1):
dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available
Peter Zijlstra (6):
futex: Cleanup refcounting
futex,rt_mutex: Introduce rt_mutex_init_waiter()
futex: Pull rt_mutex_futex_unlock() out from under hb->lock
futex: Rework futex_lock_pi() to use rt_mutex_*_proxy_lock()
futex: Futex_unlock_pi() determinism
futex,rt_mutex: Fix rt_mutex_cleanup_proxy_lock()
Philipp Zabel (1):
tc358743: fix register i2c_rd/wr function fix
Prarit Bhargava (1):
alpha: Send stop IPI to send to online CPUs
Pravin B Shelar (1):
net: Fix zero-copy head len calculation.
Qu Wenruo (1):
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
Rafael J. Wysocki (2):
PCI: PM: Enable PME if it can be signaled from D3cold
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Randy Dunlap (6):
x86/tools: Fix objdump version check again
dccp: add do-while-0 stubs for dccp_pr_debug macros
xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
openrisc: don't printk() unconditionally
ptp: dp83640: don't define PAGE0
ARC: export clear_user_page() for modules
Russell King (1):
ARM: ensure the signal page contains defined contents
Sasha Levin (1):
Linux 4.4.282
Sasha Neftin (1):
e1000e: Fix the max snoop/no-snoop latency for 10M
Sean Anderson (2):
crypto: mxs-dcp - Check for DMA mapping errors
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Sean Young (1):
media: rc-loopback: return number of emitters rather than error
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Sergey Shtylyov (9):
i2c: highlander: add IRQ check
usb: gadget: udc: at91: add IRQ check
usb: phy: fsl-usb: add IRQ check
usb: phy: twl6030: add IRQ checks
usb: host: ohci-tmio: add IRQ check
usb: phy: tahvo: add IRQ check
i2c: iop3xx: fix deferred probing
i2c: s3c2410: fix IRQ check
i2c: mt65xx: fix IRQ check
Shai Malin (1):
qede: Fix memset corruption
Shreyansh Chouhan (1):
reiserfs: check directory items on read from disk
Sreekanth Reddy (1):
scsi: core: Avoid printing an error if target_alloc() returns -ENXIO
Stefan Berger (1):
certs: Trigger creation of RSA module signing key if it's not an RSA key
Stefan Mätje (1):
can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters
Stian Skjelstad (1):
udf_get_extendedattr() had no boundary checks.
Sudeep Holla (1):
ARM: dts: versatile: Fix up interrupt controller node names
Takashi Iwai (4):
r8152: Fix potential PM refcount imbalance
ALSA: seq: Fix racy deletion of subscriber
ASoC: intel: atom: Fix reference to PCM buffer address
ASoC: intel: atom: Fix breakage for PCM buffer address setup
Takeshi Misawa (1):
net: Fix memory leak in ieee802154_raw_deliver
Tetsuo Handa (2):
Bluetooth: defer cleanup of resources in hci_unregister_dev()
fbmem: don't allow too huge resolutions
Theodore Ts'o (1):
ext4: fix race writing to an inline_data file while its xattrs are changing
Thomas Gleixner (11):
futex: Rename free_pi_state() to put_pi_state()
rtmutex: Make wait_lock irq safe
futex: Avoid freeing an active timer
PCI/MSI: Enable and mask MSI-X early
PCI/MSI: Do not set invalid bits in MSI mask
PCI/MSI: Correct misleading comments
PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown()
PCI/MSI: Protect msi_desc::masked for multi-MSI
PCI/MSI: Mask all unused MSI-X entries
PCI/MSI: Enforce that MSI-X table entry is masked for update
PCI/MSI: Enforce MSI[X] entry updates to be visible
Thomas Hebb (1):
mmc: rtsx_pci: Fix long reads when clock is prescaled
Tianjia Zhang (1):
Smack: Fix wrong semantics in smk_access_entry()
Tom Rix (1):
USB: serial: mos7720: improve OOM-handling in read_mos_reg()
Tony Lindgren (4):
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
mmc: moxart: Fix issue with uninitialized dma_slave_config
PM / wakeirq: Fix unbalanced IRQ enable for wakeirq
Tuo Li (1):
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Vasily Gorbik (1):
s390/disassembler: correct disassembly lines alignment
Vincent Whitchurch (1):
mmc: dw_mmc: Fix hang on data CRC error
Vineet Gupta (1):
ARC: fix allnoconfig build warning
Wang Hai (4):
tulip: windbond-840: Fix missing pci_disable_device() in probe and remove
sis900: Fix missing pci_disable_device() in probe and remove
net: natsemi: Fix missing pci_disable_device() in probe and remove
VMCI: fix NULL pointer dereference when unmapping queue pair
Willy Tarreau (1):
USB: serial: ch341: fix character loss at high transfer rates
Xie Yongji (1):
9p/trans_virtio: Remove sysfs file on probe failure
Xin Long (1):
sctp: move 198 addresses from unusable to private scope
Xiyu Yang (1):
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Yajun Deng (1):
netlink: Deal with ESRCH error in nlmsg_notify()
Yang Li (1):
ethtool: Fix an error code in cxgb2.c
Yang Yingliang (3):
workqueue: fix UAF in pwq_unbound_release_workfn()
net/802/mrp: fix memleak in mrp_request_join()
net/802/garp: fix memleak in garp_request_join()
Yoshihiro Shimoda (1):
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Yu Kuai (2):
reiserfs: add check for root_inode in reiserfs_fill_super
dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe()
YueHaibing (1):
net: xilinx_emaclite: Do not print real IOMEM pointer
Zekun Shen (1):
ath9k: fix OOB read ar9300_eeprom_restore_internal
Zelin Deng (1):
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Zenghui Yu (1):
bcma: Fix memory leak for internally-handled cores
Zhen Lei (1):
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Zhengjun Zhang (1):
USB: serial: option: add new VID/PID to support Fibocom FG150
Zheyu Ma (6):
pcmcia: i82092: fix a null pointer dereference bug
video: fbdev: kyro: fix a DoS bug by restricting user input
tty: serial: jsm: hold port lock when reporting modem line changes
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
video: fbdev: kyro: Error out if 'pixclock' equals zero
video: fbdev: riva: Error out if 'pixclock' equals zero
Ziyang Xuan (1):
can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF
Zubin Mithra (1):
ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
王贇 (1):
net: fix NULL pointer reference in cipso_v4_doi_free
^ permalink raw reply [relevance 3%]
* Re: [syzbot] possible deadlock in f_getown
2021-09-23 17:20 10% ` Desmond Cheong Zhi Xi
@ 2021-09-23 17:54 9% ` Jeff Layton
0 siblings, 0 replies; 200+ results
From: Jeff Layton @ 2021-09-23 17:54 UTC (permalink / raw)
To: Desmond Cheong Zhi Xi, syzbot, asm, bfields, boqun.feng,
linux-fsdevel, linux-kernel, mingo, peterz, syzkaller-bugs, viro,
will
On Thu, 2021-09-23 at 13:20 -0400, Desmond Cheong Zhi Xi wrote:
> On 23/9/21 2:03 am, syzbot wrote:
> > syzbot suspects this issue was fixed by commit:
> >
> > commit f671a691e299f58835d4660d642582bf0e8f6fda
> > Author: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
> > Date: Fri Jul 2 09:18:30 2021 +0000
> >
> > fcntl: fix potential deadlocks for &fown_struct.lock
> >
> > bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=15fa8017300000
> > start commit: 293837b9ac8d Revert "i915: fix remap_io_sg to verify the p..
> > git tree: upstream
> > kernel config: https://syzkaller.appspot.com/x/.config?x=18fade5827eb74f7
> > dashboard link: https://syzkaller.appspot.com/bug?extid=8073030e235a5a84dd31
> > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=171390add00000
> > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10050553d00000
> >
> > If the result looks correct, please mark the issue as fixed by replying with:
> >
> > #syz fix: fcntl: fix potential deadlocks for &fown_struct.lock
> >
> > For information about bisection process see: https://goo.gl/tpsmEJ#bisection
> >
>
> #syz fix: fcntl: fix potential deadlocks for &fown_struct.lock
>
> Think I got jumbled a bit when marking the dups. This bug shares the
> same root cause as [1], and is fixed by the same patch. Nice that Syzbot
> noticed.
>
> Link: https://syzkaller.appspot.com/bug?extid=e6d5398a02c516ce5e70 [1]
Yeah, I had forgotten about that syzkaller report entirely.
I'm not sure we can do much about it now that the patch is already
merged though. Is there a process for amending changelogs for patches
already in Linus' tree?
If I had gotten this email while it was still sitting in linux-next, I
would have added that line. The syzkaller folks might want to consider
occasionally doing these sorts of checks vs. linux-next to catch this
sort of thing, if they care about the attribution.
--
Jeff Layton <jlayton@kernel.org>
^ permalink raw reply [relevance 9%]
* Re: [syzbot] possible deadlock in f_getown
2021-09-23 6:03 9% ` [syzbot] " syzbot
@ 2021-09-23 17:20 10% ` Desmond Cheong Zhi Xi
2021-09-23 17:54 9% ` Jeff Layton
0 siblings, 1 reply; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-09-23 17:20 UTC (permalink / raw)
To: syzbot, asm, bfields, boqun.feng, jlayton, linux-fsdevel,
linux-kernel, mingo, peterz, syzkaller-bugs, viro, will
On 23/9/21 2:03 am, syzbot wrote:
> syzbot suspects this issue was fixed by commit:
>
> commit f671a691e299f58835d4660d642582bf0e8f6fda
> Author: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
> Date: Fri Jul 2 09:18:30 2021 +0000
>
> fcntl: fix potential deadlocks for &fown_struct.lock
>
> bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=15fa8017300000
> start commit: 293837b9ac8d Revert "i915: fix remap_io_sg to verify the p..
> git tree: upstream
> kernel config: https://syzkaller.appspot.com/x/.config?x=18fade5827eb74f7
> dashboard link: https://syzkaller.appspot.com/bug?extid=8073030e235a5a84dd31
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=171390add00000
> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10050553d00000
>
> If the result looks correct, please mark the issue as fixed by replying with:
>
> #syz fix: fcntl: fix potential deadlocks for &fown_struct.lock
>
> For information about bisection process see: https://goo.gl/tpsmEJ#bisection
>
#syz fix: fcntl: fix potential deadlocks for &fown_struct.lock
Think I got jumbled a bit when marking the dups. This bug shares the
same root cause as [1], and is fixed by the same patch. Nice that Syzbot
noticed.
Link: https://syzkaller.appspot.com/bug?extid=e6d5398a02c516ce5e70 [1]
^ permalink raw reply [relevance 10%]
* Re: [syzbot] possible deadlock in f_getown
@ 2021-09-23 6:03 9% ` syzbot
2021-09-23 17:20 10% ` Desmond Cheong Zhi Xi
0 siblings, 1 reply; 200+ results
From: syzbot @ 2021-09-23 6:03 UTC (permalink / raw)
To: asm, bfields, boqun.feng, desmondcheongzx, jlayton,
linux-fsdevel, linux-kernel, mingo, peterz, syzkaller-bugs, viro,
will
syzbot suspects this issue was fixed by commit:
commit f671a691e299f58835d4660d642582bf0e8f6fda
Author: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Date: Fri Jul 2 09:18:30 2021 +0000
fcntl: fix potential deadlocks for &fown_struct.lock
bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=15fa8017300000
start commit: 293837b9ac8d Revert "i915: fix remap_io_sg to verify the p..
git tree: upstream
kernel config: https://syzkaller.appspot.com/x/.config?x=18fade5827eb74f7
dashboard link: https://syzkaller.appspot.com/bug?extid=8073030e235a5a84dd31
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=171390add00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10050553d00000
If the result looks correct, please mark the issue as fixed by replying with:
#syz fix: fcntl: fix potential deadlocks for &fown_struct.lock
For information about bisection process see: https://goo.gl/tpsmEJ#bisection
^ permalink raw reply [relevance 9%]
* [ANNOUNCE] 4.19.207-rt88
@ 2021-09-22 14:54 2% Clark Williams
0 siblings, 0 replies; 200+ results
From: Clark Williams @ 2021-09-22 14:54 UTC (permalink / raw)
To: LKML, linux-rt-users, Steven Rostedt, Thomas Gleixner,
Carsten Emde, John Kacur, Sebastian Andrzej Siewior,
Daniel Wagner, Tom Zanussi, Clark Williams, Pavel Machek
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 41259 bytes --]
Hello RT-list!
I'm pleased to announce the 4.19.207-rt88 stable release.
In addition to amerge of the v4.19.207 stable release, this release contains
the following change to the v4.19 version of the PREEMPT_RT patchset:
locking/rwsem-rt: Remove might_sleep() in __up_read()
You can get this release via the git tree at:
git://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git
branch: v4.19-rt
Head SHA1: 63cbb1ce8d916b584cb40f385cad1355bc598465
Or to build 4.19.207-rt88 directly, the following patches should be applied:
https://www.kernel.org/pub/linux/kernel/v4.x/linux-4.19.tar.xz
https://www.kernel.org/pub/linux/kernel/v4.x/patch-4.19.207.xz
https://www.kernel.org/pub/linux/kernel/projects/rt/4.19/patch-4.19.207-rt88.patch.xz
You can also build from 4.19.206-rt87 by applying the incremental patch:
https://www.kernel.org/pub/linux/kernel/projects/rt/4.19/incr/patch-4.19.206-rt87-rt88.patch.xz
Enjoy!
Clark
Changes from v4.19.206-rt87:
---
Adrian Bunk (1):
bnx2x: Fix enabling network interfaces without VFs
Alexander Tsoy (1):
ALSA: usb-audio: Add registration quirk for JBL Quantum 800
Alexei Starovoitov (2):
bpf: track spill/fill of constants
selftests/bpf: fix tests due to const spill/fill
Andreas Obergschwandtner (1):
ARM: tegra: tamonten: Fix UART pad setting
Andrew Halaney (1):
locking/rwsem-rt: Remove might_sleep() in __up_read()
Andrey Grodzovsky (1):
drm/amdgpu: Fix BUG_ON assert
Andrey Ignatov (5):
bpf: Support variable offset stack access from helpers
bpf: Reject indirect var_off stack access in raw mode
bpf: Reject indirect var_off stack access in unpriv mode
bpf: Sanity check max value for var_off stack access
selftests/bpf: Test variable offset stack access
Andy Duan (1):
tty: serial: fsl_lpuart: fix the wrong mapbase value
Andy Shevchenko (3):
include/linux/list.h: add a macro to test if entry is pointing to the head
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
Anirudh Rayabharam (1):
usbip: give back URBs for unsent unlink requests during cleanup
Anson Jacob (1):
drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
Arne Welzel (1):
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Austin Kim (1):
IMA: remove -Wmissing-prototypes warning
Babu Moger (1):
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
Baptiste Lepers (1):
events: Reuse value read using READ_ONCE instead of re-reading it
Ben Dooks (1):
ARM: 8918/2: only build return_address() if needed
Benjamin Hesmans (1):
netfilter: socket: icmp6: fix use-after-scope
Bob Peterson (1):
gfs2: Don't call dlm after protocol is unmounted
Chao Yu (2):
f2fs: fix to account missing .skipped_gc_rwsem
f2fs: fix to unmap pages from userspace process in punch_hole()
Chih-Kang Chang (1):
mac80211: Fix insufficient headroom issue for AMSDU
Christoph Hellwig (2):
cryptoloop: add a deprecation warning
bcache: add proper error unwinding in bcache_device_init
Christophe JAILLET (4):
drm/msm/dsi: Fix some reference counted resource leaks
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
staging: ks7010: Fix the initialization of the 'sleep_status' structure
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Christophe Leroy (1):
crypto: talitos - reduce max key size for SEC1
Chunfeng Yun (2):
usb: mtu3: use @mult for HS isoc or intr
usb: mtu3: fix the wrong HS mult value
Chunyan Zhang (1):
spi: sprd: Fix the wrong WDG_LOAD_VAL
Clark Williams (2):
Merge tag 'v4.19.207' into v4.19-rt
Linux 4.19.207-rt88
Colin Ian King (4):
ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init
media: venus: venc: Fix potential null pointer dereference on pointer fmt
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
parport: remove non-zero check on count
Damien Le Moal (2):
libata: fix ata_host_start()
block: bfq: fix bfq_set_next_ioprio_data()
Dan Carpenter (4):
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
PCI: Fix pci_dev_str_match_path() alloc while atomic bug
Daniel Borkmann (3):
bpf: Introduce BPF nospec instruction for mitigating Spectre v4
bpf: Fix leakage due to insufficient speculative store bypass mitigation
bpf: Fix pointer arithmetic mask tightening under state pruning
Daniel Thompson (1):
backlight: pwm_bl: Improve bootloader/kernel device handover
Daniele Palmas (1):
net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
David Heidelberg (2):
ARM: 9105/1: atags_to_fdt: don't warn about stack size
ARM: dts: qcom: apq8064: correct clock names
David Hildenbrand (1):
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
David Howells (1):
fscache: Fix cookie key hashing
Desmond Cheong Zhi Xi (6):
fcntl: fix potential deadlock for &fasync_struct.fa_lock
Bluetooth: fix repeated calls to sco_sock_kill
btrfs: reset replace target device to allocation state on close
Bluetooth: skip invalid hci_sync_conn_complete_evt
Bluetooth: schedule SCO timeouts with delayed_work
Bluetooth: avoid circular locks in sco_sock_connect
Dietmar Eggemann (1):
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
Ding Hui (1):
cifs: fix wrong release in sess_alloc_buffer() failed path
Dinghao Liu (1):
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Dmitry Baryshkov (1):
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
Dmitry Osipenko (1):
rtc: tps65910: Correct driver module alias
Dmitry Torokhov (1):
HID: input: do not report stylus battery state as "full"
Dongliang Mu (3):
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Edward Cree (1):
bpf/verifier: per-register parent pointers
Eric Biggers (4):
fscrypt: add fscrypt_symlink_getattr() for computing st_size
ext4: report correct st_size for encrypted symlinks
f2fs: report correct st_size for encrypted symlinks
ubifs: report correct st_size for encrypted symlinks
Eric Dumazet (5):
ipv4: make exception cache less predictible
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
net-caif: avoid user-triggerable WARN_ON(1)
net/af_unix: fix a data-race in unix_dgram_poll
fq_codel: reject silly quantum parameters
Esben Haabendal (1):
net: ll_temac: Remove left-over debug message
Evan Quan (1):
PCI: Add AMD GPU multi-function power dependencies
Evgeny Novikov (2):
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
media: tegra-cec: Handle errors of clk_prepare_enable()
Fangrui Song (1):
powerpc/boot: Delete unneeded .globl _zimage_start
Florian Fainelli (1):
r6040: Restore MDIO clock frequency after MAC reset
Geert Uytterhoeven (2):
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
staging: board: Fix uninitialized spinlock when attaching genpd
George Cherian (1):
PCI: Add ACS quirks for Cavium multi-function devices
Giovanni Cabiddu (4):
crypto: qat - do not ignore errors from enable_vf2pf_comms()
crypto: qat - handle both source of interrupt in VF ISR
crypto: qat - do not export adf_iov_putmsg()
crypto: qat - use proper type for vf_mask
Greg Kroah-Hartman (3):
clk: fix build warning for orphan_list
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Linux 4.19.207
Guillaume Nault (1):
netns: protect netns ID lookups with RCU
Gustavo A. R. Silva (2):
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
flow_dissector: Fix out-of-bounds warnings
Halil Pasic (1):
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
Hans Verkuil (1):
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Hans de Goede (5):
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
mfd: axp20x: Update AXP288 volatile ranges
Harini Katakam (1):
net: macb: Add a NULL check on desc_ptp
Harshvardhan Jha (1):
9p/xen: Fix end of loop tests for list_for_each_entry
Heiko Carstens (1):
s390/jump_label: print real address in a case of a jump label bug
Hoang Le (1):
tipc: increase timeout in tipc_sk_enqueue()
Hongbo Li (1):
lib/mpi: use kcalloc in mpi_resize
Hyun Kwon (1):
PCI: xilinx-nwl: Enable the clock through CCF
Ilya Leoshkevich (1):
s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
Iwona Winiarska (1):
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
J. Bruce Fields (1):
rpc: fix gss_svc_init cleanup on failure
Jack Pham (1):
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Jaehyoung Choi (1):
pinctrl: samsung: Fix pinctrl bank pin count
Jan Kara (1):
udf: Check LVID earlier
Jason Gunthorpe (1):
vfio: Use config not menuconfig for VFIO_NOIOMMU
Jeongtae Park (1):
regmap: fix the offset of register error log
Jiong Wang (1):
bpf: correct slot_type marking logic to allow more stack slot sharing
Jiri Slaby (2):
xtensa: ISS: don't panic in rs_init
hvsi: don't panic on tty_register_driver failure
Johan Almbladh (2):
bpf/tests: Fix copy-and-paste error in double word test
bpf/tests: Do not PASS tests without actually testing the result
Jonathan Cameron (1):
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Juergen Gross (3):
xen: fix setting of max_pfn in shared_info
xen: reset legacy rtc flag for PV domU
PM: base: power: don't try to use non-existing RTC for storing data
Juhee Kang (1):
samples: bpf: Fix tracex7 error raised on the missing argument
Kai-Heng Feng (1):
Bluetooth: Move shutdown callback before flushing tx and rx queue
Kajol Jain (1):
powerpc/perf/hv-gpci: Fix counter value parsing
Kees Cook (1):
staging: rts5208: Fix get_ms_information() heap buffer size
Kelly Devilliv (2):
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
usb: host: fotg210: fix the actual_length of an iso packet
Kim Phillips (1):
perf/x86/amd/ibs: Work around erratum #1197
Krzysztof Hałasa (3):
gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V formats
media: TDA1997x: enable EDID support
media: TDA1997x: fix tda1997x_query_dv_timings() return value
Krzysztof Kozlowski (2):
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
power: supply: max17042: handle fails of reading status register
Krzysztof Wilczyński (1):
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Laurent Pinchart (1):
media: imx258: Rectify mismatch of VTS value
Len Baker (1):
CIFS: Fix a potencially linear read overflow
Leon Romanovsky (2):
RDMA/iwcm: Release resources if iw_cm module initialization fails
docs: Fix infiniband uverbs minor number
Li Zhijian (1):
selftests/bpf: Enlarge select() timeout for test_maps
Lin, Zhenpeng (1):
dccp: don't duplicate ccid when cloning dccp sock
Linus Walleij (1):
clk: kirkwood: Fix a clocking boot regression
Liu Jian (1):
igmp: Add ip_mc_list lock in ip_check_mc_rcu
Liu Zixian (1):
mm/hugetlb: initialize hugetlb_usage in mm_init
Lorenz Bauer (1):
bpf: verifier: Allocate idmap scratch in verifier env
Luiz Augusto von Dentz (1):
Bluetooth: Fix handling of LE Enhanced Connection Complete
Luke Hsiao (1):
tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
Maciej W. Rozycki (2):
serial: 8250: Define RX trigger levels for OxSemi 950 devices
scsi: BusLogic: Fix missing pr_cont() use
Maciej Żenczykowski (1):
usb: gadget: u_ether: fix a potential null pointer dereference
Manish Narani (1):
mmc: sdhci-of-arasan: Check return value of non-void funtions
Maor Gottlieb (1):
net/mlx5: Fix potential sleeping in atomic context
Marc Zyngier (2):
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
mfd: Don't use irq_create_mapping() to resolve a mapping
Marco Chiappero (2):
crypto: qat - fix reuse of completion variable
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marek Behún (2):
PCI: Call Max Payload Size-related fixup quirks early
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
Marek Marczykowski-Górecki (1):
PCI/MSI: Skip masking MSI-X on Xen PV
Mark Brown (1):
arm64/sve: Use correct size when reinitialising SVE state
Mark Rutland (1):
arm64: head: avoid over-mapping in map_memory
Martin KaFai Lau (1):
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Mathias Nyman (1):
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Mathieu Desnoyers (1):
ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
Mauro Carvalho Chehab (2):
media: uvc: don't do DMA on stack
media: dib8000: rewrite the init prbs logic
Miaoqing Pan (1):
ath9k: fix sleeping in atomic context
Michael Ellerman (1):
powerpc/module64: Fix comment in R_PPC64_ENTRY handling
Michael Petlan (1):
perf machine: Initialize srcline string member in add_location struct
Michal Suchanek (1):
powerpc/stacktrace: Include linux/delay.h
Mike Rapoport (1):
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
Mikulas Patocka (1):
parisc: fix crash with signals and alloca
Miquel Raynal (1):
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
Muchun Song (1):
mm/page_alloc: speed up the iteration of max_order
Nadav Amit (1):
userfaultfd: prevent concurrent API initialization
Nadezda Lutovinova (2):
usb: gadget: mv_u3d: request_irq() after initializing UDC
usb: musb: musb_dsps: request_irq() after initializing musb
Nathan Chancellor (1):
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
Nguyen Dinh Phi (1):
tty: Fix data race between tiocsti() and flush_to_ldisc()
Niklas Cassel (2):
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Nishad Kamdar (1):
mmc: core: Return correct emmc response in case of ioctl error
Oleksij Rempel (1):
MIPS: Malta: fix alignment of the devicetree buffer
Oliver Upton (1):
KVM: arm64: Handle PSCI resets before userspace touches vCPU state
Pali Rohár (3):
isofs: joliet: Fix iocharset=utf8 mount option
PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Paolo Valente (1):
block, bfq: honor already-setup queue merges
Patryk Duda (1):
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Paul Gortmaker (1):
x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
Pavel Skripkin (5):
media: stkwebcam: fix memory leak in stk_camera_probe
m68k: emu: Fix invalid free in nfeth_cleanup()
media: go7007: remove redundant initialization
net: cipso: fix warnings in netlbl_cipsov4_add_std
Bluetooth: add timeout sanity check to hci_inquiry
Peter Zijlstra (1):
locking/mutex: Fix HANDOFF condition
Phong Hoang (1):
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Pratik R. Sampat (1):
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Qu Wenruo (1):
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
Quentin Perret (1):
sched/deadline: Fix reset_on_fork reporting of DL tasks
Rafael J. Wysocki (3):
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
PCI: PM: Enable PME if it can be signaled from D3cold
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Rafał Miłecki (1):
net: dsa: b53: Fix calculating number of switch ports
Randy Dunlap (4):
xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
openrisc: don't printk() unconditionally
ptp: dp83640: don't define PAGE0
ARC: export clear_user_page() for modules
Rolf Eike Beer (1):
tools/thermal/tmon: Add cross compiling support
Ruozhu Li (1):
nvme-rdma: don't update queue count when failing to set io queues
Saurav Kashyap (1):
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Sean Anderson (2):
crypto: mxs-dcp - Check for DMA mapping errors
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Sean Young (1):
media: rc-loopback: return number of emitters rather than error
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Sebastian Reichel (1):
ARM: dts: imx53-ppd: Fix ACHC entry
Sergey Shtylyov (9):
i2c: highlander: add IRQ check
usb: gadget: udc: at91: add IRQ check
usb: phy: fsl-usb: add IRQ check
usb: phy: twl6030: add IRQ checks
usb: host: ohci-tmio: add IRQ check
usb: phy: tahvo: add IRQ check
i2c: iop3xx: fix deferred probing
i2c: s3c2410: fix IRQ check
i2c: mt65xx: fix IRQ check
Shai Malin (3):
qed: Fix the VF msix vectors flow
qede: Fix memset corruption
qed: Handle management FW error
Shuah Khan (1):
usbip:vhci_hcd USB port can get stuck in the disabled state
Stefan Berger (1):
certs: Trigger creation of RSA module signing key if it's not an RSA key
Stefan Wahren (1):
net: qualcomm: fix QCA7000 checksum handling
Stephan Gerhold (1):
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Stian Skjelstad (1):
udf_get_extendedattr() had no boundary checks.
Sugar Zhang (1):
ASoC: rockchip: i2s: Fix regmap_ops hang
Sukadev Bhattiprolu (1):
ibmvnic: check failover_pending in login response
THOBY Simon (1):
IMA: remove the dependency on CRYPTO_MD5
Tetsuo Handa (1):
fbmem: don't allow too huge resolutions
Theodore Ts'o (1):
ext4: fix race writing to an inline_data file while its xattrs are changing
Thomas Gleixner (1):
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
Thomas Hebb (1):
mmc: rtsx_pci: Fix long reads when clock is prescaled
Tianjia Zhang (1):
Smack: Fix wrong semantics in smk_access_entry()
Tom Rix (1):
USB: serial: mos7720: improve OOM-handling in read_mos_reg()
Tony Lindgren (5):
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
mmc: moxart: Fix issue with uninitialized dma_slave_config
Trond Myklebust (1):
SUNRPC/nfs: Fix return value for nfs4_callback_compound()
Tuo Li (1):
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Ulrich Hecht (1):
serial: sh-sci: fix break handling for sysrq
Umang Jain (1):
media: imx258: Limit the max analogue gain to 480
Vasily Averin (1):
memcg: enable accounting for pids in nested pid namespaces
Vineeth Vijayan (1):
s390/cio: add dev_busid sysfs entry for each subchannel
Vinod Koul (1):
arm64: dts: qcom: sdm660: use reg value for memory node
Vladimir Oltean (1):
net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
Wang Hai (1):
VMCI: fix NULL pointer dereference when unmapping queue pair
Willem de Bruijn (1):
ip_gre: validate csum_start only on pull
Xiaotan Luo (1):
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Xiaoyao Li (1):
perf/x86/intel/pt: Fix mask of num_address_ranges
Xin Long (2):
tipc: keep the skb in rcv queue until the whole data is read
tipc: fix an use-after-free issue in tipc_recvmsg
Xiyu Yang (2):
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Yajun Deng (1):
netlink: Deal with ESRCH error in nlmsg_notify()
Yang Li (2):
ethtool: Fix an error code in cxgb2.c
NTB: perf: Fix an error code in perf_setup_inbuf()
Yang Yingliang (2):
ARM: imx: add missing clk_disable_unprepare()
net: w5100: check return value after calling platform_get_resource()
Ye Bin (1):
dm thin metadata: Fix use-after-free in dm_bm_set_read_only
Yoshihiro Shimoda (2):
usb: host: xhci-rcar: Don't reload firmware after the completion
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Yufeng Mo (2):
bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
net: hns3: pad the short tunnel frame before sending to hardware
Zekun Shen (1):
ath9k: fix OOB read ar9300_eeprom_restore_internal
Zelin Deng (1):
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Zenghui Yu (1):
bcma: Fix memory leak for internally-handled cores
Zhen Lei (1):
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Zheyu Ma (5):
video: fbdev: kyro: fix a DoS bug by restricting user input
tty: serial: jsm: hold port lock when reporting modem line changes
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
video: fbdev: kyro: Error out if 'pixclock' equals zero
video: fbdev: riva: Error out if 'pixclock' equals zero
Zubin Mithra (1):
ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
chenying (1):
ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
zhenggy (1):
tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
zhenwei pi (1):
crypto: public_key: fix overflow during implicit conversion
王贇 (1):
net: fix NULL pointer reference in cipso_v4_doi_free
---
Documentation/admin-guide/devices.txt | 6 +-
.../devicetree/bindings/mtd/gpmc-nand.txt | 2 +-
Makefile | 2 +-
arch/arc/mm/cache.c | 2 +-
arch/arm/boot/compressed/Makefile | 2 +
arch/arm/boot/dts/imx53-ppd.dts | 23 +-
arch/arm/boot/dts/qcom-apq8064.dtsi | 6 +-
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 +-
arch/arm/kernel/Makefile | 6 +-
arch/arm/kernel/return_address.c | 4 -
arch/arm/mach-imx/mmdc.c | 14 +-
arch/arm/net/bpf_jit_32.c | 3 +
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2 +-
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2 +-
arch/arm64/include/asm/kernel-pgtable.h | 4 +-
arch/arm64/kernel/fpsimd.c | 2 +-
arch/arm64/kernel/head.S | 11 +-
arch/arm64/net/bpf_jit_comp.c | 13 +
arch/m68k/emu/nfeth.c | 4 +-
arch/mips/mti-malta/malta-dtshim.c | 2 +-
arch/mips/net/ebpf_jit.c | 3 +
arch/openrisc/kernel/entry.S | 2 +
arch/parisc/kernel/signal.c | 6 +
arch/powerpc/boot/crt0.S | 3 -
arch/powerpc/kernel/module_64.c | 2 +-
arch/powerpc/kernel/stacktrace.c | 1 +
arch/powerpc/net/bpf_jit_comp64.c | 6 +
arch/powerpc/perf/hv-gpci.c | 2 +-
arch/s390/kernel/jump_label.c | 2 +-
arch/s390/kvm/interrupt.c | 4 +-
arch/s390/kvm/kvm-s390.h | 2 +-
arch/s390/net/bpf_jit_comp.c | 14 +-
arch/sparc/net/bpf_jit_comp_64.c | 3 +
arch/x86/events/amd/ibs.c | 8 +
arch/x86/events/intel/pt.c | 2 +-
arch/x86/kernel/cpu/intel_rdt_monitor.c | 6 +
arch/x86/kernel/reboot.c | 3 +-
arch/x86/kvm/x86.c | 4 +
arch/x86/mm/init_64.c | 6 +-
arch/x86/net/bpf_jit_comp.c | 7 +
arch/x86/net/bpf_jit_comp32.c | 6 +
arch/x86/xen/enlighten_pv.c | 7 +
arch/x86/xen/p2m.c | 4 +-
arch/xtensa/Kconfig | 2 +-
arch/xtensa/platforms/iss/console.c | 17 +-
block/bfq-iosched.c | 18 +-
block/blk-zoned.c | 6 -
certs/Makefile | 8 +
drivers/ata/libata-core.c | 6 +-
drivers/ata/sata_dwc_460ex.c | 12 +-
drivers/base/power/trace.c | 10 +
drivers/base/regmap/regmap.c | 2 +-
drivers/bcma/main.c | 6 +-
drivers/block/Kconfig | 4 +-
drivers/block/cryptoloop.c | 2 +
drivers/clk/clk.c | 10 +-
drivers/clk/mvebu/kirkwood.c | 1 +
drivers/clocksource/sh_cmt.c | 30 +-
drivers/cpufreq/powernv-cpufreq.c | 16 +-
drivers/crypto/mxs-dcp.c | 81 ++--
drivers/crypto/omap-sham.c | 2 +-
.../crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_common/adf_common_drv.h | 8 +-
drivers/crypto/qat/qat_common/adf_init.c | 5 +-
drivers/crypto/qat/qat_common/adf_isr.c | 7 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3 +-
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12 +-
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7 +-
.../qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4 +-
drivers/crypto/talitos.c | 4 +
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 2 +-
.../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 16 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 10 +-
drivers/gpu/drm/msm/dsi/dsi.c | 6 +-
drivers/gpu/ipu-v3/ipu-cpmem.c | 30 +-
drivers/hid/hid-input.c | 2 -
drivers/i2c/busses/i2c-highlander.c | 2 +-
drivers/i2c/busses/i2c-iop3xx.c | 6 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-s3c2410.c | 2 +-
drivers/iio/dac/ad5624r_spi.c | 18 +-
drivers/infiniband/core/iwcm.c | 19 +-
drivers/md/bcache/super.c | 16 +-
drivers/md/dm-crypt.c | 7 +-
drivers/md/dm-thin-metadata.c | 2 +-
drivers/md/persistent-data/dm-block-manager.c | 14 +-
drivers/media/dvb-frontends/dib8000.c | 58 ++-
drivers/media/i2c/imx258.c | 4 +-
drivers/media/i2c/tda1997x.c | 6 +-
drivers/media/platform/qcom/venus/venc.c | 2 +
drivers/media/platform/tegra-cec/tegra_cec.c | 10 +-
drivers/media/rc/rc-loopback.c | 2 +-
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6 +-
drivers/media/usb/dvb-usb/vp702x.c | 12 +-
drivers/media/usb/em28xx/em28xx-input.c | 1 -
drivers/media/usb/go7007/go7007-driver.c | 26 --
drivers/media/usb/stkwebcam/stk-webcam.c | 6 +-
drivers/media/usb/uvc/uvc_v4l2.c | 34 +-
drivers/media/v4l2-core/v4l2-dv-timings.c | 4 +-
drivers/mfd/ab8500-core.c | 2 +-
drivers/mfd/axp20x.c | 3 +-
drivers/mfd/stmpe.c | 4 +-
drivers/mfd/tc3589x.c | 2 +-
drivers/mfd/wm8994-irq.c | 2 +-
drivers/misc/aspeed-lpc-ctrl.c | 2 +-
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6 +-
drivers/mmc/core/block.c | 3 +-
drivers/mmc/host/dw_mmc.c | 1 +
drivers/mmc/host/moxart-mmc.c | 1 +
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 +-
drivers/mmc/host/sdhci-of-arasan.c | 18 +-
drivers/mtd/nand/raw/cafe_nand.c | 4 +-
drivers/net/bonding/bond_main.c | 3 +-
drivers/net/dsa/b53/b53_common.c | 3 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2 +-
drivers/net/ethernet/cadence/macb_ptp.c | 11 +-
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 1 +
drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 9 +-
drivers/net/ethernet/ibm/ibmvnic.c | 8 +
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 5 +-
drivers/net/ethernet/qlogic/qed/qed_main.c | 7 +-
drivers/net/ethernet/qlogic/qed/qed_mcp.c | 6 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 2 +-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 1 -
drivers/net/ethernet/qualcomm/qca_spi.c | 2 +-
drivers/net/ethernet/qualcomm/qca_uart.c | 2 +-
drivers/net/ethernet/rdc/r6040.c | 9 +-
drivers/net/ethernet/renesas/sh_eth.c | 1 +
.../net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 +-
drivers/net/ethernet/wiznet/w5100.c | 2 +
drivers/net/ethernet/xilinx/ll_temac_main.c | 4 +-
drivers/net/phy/dp83640_reg.h | 2 +-
drivers/net/usb/cdc_mbim.c | 5 +
drivers/net/wireless/ath/ath6kl/wmi.c | 4 +-
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3 +-
drivers/net/wireless/ath/ath9k/hw.c | 12 +-
drivers/ntb/test/ntb_perf.c | 1 +
drivers/nvme/host/rdma.c | 4 +-
drivers/of/kobj.c | 2 +-
drivers/parport/ieee1284_ops.c | 2 +-
drivers/pci/controller/pci-aardvark.c | 11 +-
drivers/pci/controller/pcie-xilinx-nwl.c | 12 +
drivers/pci/msi.c | 3 +
drivers/pci/pci.c | 33 +-
drivers/pci/quirks.c | 26 +-
drivers/pci/syscall.c | 4 +-
drivers/pinctrl/pinctrl-single.c | 1 +
drivers/pinctrl/samsung/pinctrl-samsung.c | 2 +-
drivers/platform/chrome/cros_ec_proto.c | 9 +
drivers/platform/x86/dell-smbios-wmi.c | 1 +
drivers/power/supply/axp288_fuel_gauge.c | 4 +-
drivers/power/supply/max17042_battery.c | 8 +-
drivers/rtc/rtc-tps65910.c | 2 +-
drivers/s390/cio/css.c | 17 +
drivers/scsi/BusLogic.c | 4 +-
drivers/scsi/qedi/qedi_main.c | 14 +-
drivers/scsi/qla2xxx/qla_nvme.c | 5 +-
drivers/soc/qcom/smsm.c | 11 +-
drivers/soc/rockchip/Kconfig | 4 +-
drivers/spi/spi-fsl-dspi.c | 1 +
drivers/spi/spi-pic32.c | 1 +
drivers/spi/spi-sprd-adi.c | 2 +-
drivers/staging/board/board.c | 7 +-
drivers/staging/ks7010/ks7010_sdio.c | 2 +-
drivers/staging/rts5208/rtsx_scsi.c | 10 +-
drivers/tty/hvc/hvsi.c | 19 +-
drivers/tty/serial/8250/8250_pci.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/fsl_lpuart.c | 2 +-
drivers/tty/serial/jsm/jsm_neo.c | 2 +
drivers/tty/serial/jsm/jsm_tty.c | 3 +
drivers/tty/serial/sh-sci.c | 7 +-
drivers/tty/tty_io.c | 4 +-
drivers/usb/gadget/composite.c | 8 +-
drivers/usb/gadget/function/u_ether.c | 5 +-
drivers/usb/gadget/udc/at91_udc.c | 4 +-
drivers/usb/gadget/udc/bdc/bdc_core.c | 3 +-
drivers/usb/gadget/udc/mv_u3d_core.c | 19 +-
drivers/usb/host/ehci-orion.c | 8 +-
drivers/usb/host/fotg210-hcd.c | 41 +-
drivers/usb/host/fotg210.h | 5 -
drivers/usb/host/ohci-tmio.c | 3 +
drivers/usb/host/xhci-rcar.c | 7 +
drivers/usb/host/xhci.c | 24 +-
drivers/usb/mtu3/mtu3_gadget.c | 6 +-
drivers/usb/musb/musb_dsps.c | 13 +-
drivers/usb/phy/phy-fsl-usb.c | 2 +
drivers/usb/phy/phy-tahvo.c | 4 +-
drivers/usb/phy/phy-twl6030-usb.c | 5 +
drivers/usb/serial/mos7720.c | 4 +-
drivers/usb/usbip/vhci_hcd.c | 32 +-
drivers/vfio/Kconfig | 2 +-
drivers/video/backlight/pwm_bl.c | 54 +--
drivers/video/fbdev/asiliantfb.c | 3 +
drivers/video/fbdev/core/fbmem.c | 6 +
drivers/video/fbdev/kyro/fbdev.c | 8 +
drivers/video/fbdev/riva/fbdev.c | 3 +
fs/btrfs/inode.c | 2 +-
fs/btrfs/volumes.c | 3 +
fs/cifs/cifs_unicode.c | 9 +-
fs/cifs/sess.c | 2 +-
fs/crypto/hooks.c | 44 ++
fs/ext4/inline.c | 6 +
fs/ext4/symlink.c | 11 +-
fs/f2fs/file.c | 4 +-
fs/f2fs/gc.c | 4 +-
fs/f2fs/namei.c | 11 +-
fs/fcntl.c | 5 +-
fs/fscache/cookie.c | 14 +-
fs/fscache/internal.h | 2 +
fs/fscache/main.c | 39 ++
fs/gfs2/lock_dlm.c | 5 +
fs/isofs/inode.c | 27 +-
fs/isofs/isofs.h | 1 -
fs/isofs/joliet.c | 4 +-
fs/nfs/callback_xdr.c | 2 +-
fs/overlayfs/dir.c | 6 +-
fs/ubifs/file.c | 12 +-
fs/udf/misc.c | 13 +-
fs/udf/super.c | 25 +-
fs/userfaultfd.c | 93 ++--
include/crypto/public_key.h | 4 +-
include/linux/bpf_verifier.h | 19 +-
include/linux/filter.h | 15 +
include/linux/fscrypt_notsupp.h | 6 +
include/linux/fscrypt_supp.h | 1 +
include/linux/hugetlb.h | 9 +
include/linux/list.h | 29 +-
include/linux/memory_hotplug.h | 4 +-
include/linux/pci.h | 5 +-
include/linux/power/max17042_battery.h | 2 +-
include/linux/skbuff.h | 2 +-
include/linux/sunrpc/svc.h | 2 +
include/uapi/linux/pkt_sched.h | 2 +
include/uapi/linux/serial_reg.h | 1 +
kernel/bpf/core.c | 18 +-
kernel/bpf/disasm.c | 16 +-
kernel/bpf/verifier.c | 498 ++++++++++-----------
kernel/events/core.c | 2 +-
kernel/fork.c | 1 +
kernel/locking/mutex.c | 15 +-
kernel/locking/rwsem-rt.c | 1 -
kernel/pid_namespace.c | 3 +-
kernel/sched/deadline.c | 8 +-
kernel/sched/sched.h | 2 +
kernel/time/hrtimer.c | 60 ++-
lib/mpi/mpiutil.c | 2 +-
lib/test_bpf.c | 13 +-
localversion-rt | 2 +-
mm/memory_hotplug.c | 4 +-
mm/page_alloc.c | 8 +-
net/9p/trans_xen.c | 4 +-
net/bluetooth/cmtp/cmtp.h | 2 +-
net/bluetooth/hci_core.c | 14 +
net/bluetooth/hci_event.c | 108 +++--
net/bluetooth/sco.c | 85 ++--
net/caif/chnl_net.c | 19 +-
net/core/flow_dissector.c | 12 +-
net/core/net_namespace.c | 18 +-
net/dccp/minisocks.c | 2 +
net/dsa/slave.c | 12 +-
net/ipv4/icmp.c | 23 +-
net/ipv4/igmp.c | 2 +
net/ipv4/ip_gre.c | 9 +-
net/ipv4/ip_output.c | 5 +-
net/ipv4/route.c | 48 +-
net/ipv4/tcp_fastopen.c | 3 +-
net/ipv4/tcp_input.c | 2 +-
net/ipv4/tcp_ipv4.c | 5 +-
net/ipv6/netfilter/nf_socket_ipv6.c | 4 +-
net/l2tp/l2tp_core.c | 4 +-
net/mac80211/tx.c | 4 +-
net/netlabel/netlabel_cipso_v4.c | 12 +-
net/netlink/af_netlink.c | 4 +-
net/sched/sch_cbq.c | 2 +-
net/sched/sch_fq_codel.c | 12 +-
net/sunrpc/auth_gss/svcauth_gss.c | 2 +-
net/sunrpc/svc.c | 27 +-
net/tipc/socket.c | 36 +-
net/unix/af_unix.c | 2 +-
samples/bpf/test_override_return.sh | 1 +
samples/bpf/tracex7_user.c | 5 +
security/integrity/ima/Kconfig | 1 -
security/integrity/ima/ima_mok.c | 2 +-
security/smack/smack_access.c | 17 +-
sound/core/pcm_lib.c | 2 +-
sound/soc/intel/boards/bytcr_rt5640.c | 9 +-
sound/soc/rockchip/rockchip_i2s.c | 35 +-
sound/usb/quirks.c | 1 +
tools/perf/util/machine.c | 1 +
tools/testing/selftests/bpf/test_maps.c | 2 +-
tools/testing/selftests/bpf/test_verifier.c | 144 +++++-
tools/thermal/tmon/Makefile | 2 +-
virt/kvm/arm/arm.c | 8 +
296 files changed, 2189 insertions(+), 1186 deletions(-)
---
^ permalink raw reply [relevance 2%]
* Linux 5.4.148
@ 2021-09-22 11:13 2% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-22 11:13 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 5.4.148 kernel.
All users of the 5.4 kernel series must upgrade.
The updated 5.4.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/devices.txt | 6
Documentation/devicetree/bindings/arm/tegra.yaml | 2
Documentation/devicetree/bindings/mtd/gpmc-nand.txt | 2
Makefile | 2
arch/arc/mm/cache.c | 2
arch/arm/boot/compressed/Makefile | 2
arch/arm/boot/dts/imx53-ppd.dts | 23 +-
arch/arm/boot/dts/qcom-apq8064.dtsi | 6
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 -
arch/arm64/boot/dts/freescale/fsl-ls1046a-frwy.dts | 8
arch/arm64/boot/dts/freescale/fsl-ls1046a-rdb.dts | 7
arch/arm64/boot/dts/nvidia/tegra132.dtsi | 4
arch/arm64/boot/dts/nvidia/tegra194.dtsi | 6
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2
arch/arm64/include/asm/kernel-pgtable.h | 4
arch/arm64/kernel/fpsimd.c | 2
arch/arm64/kernel/head.S | 11 -
arch/m68k/Kconfig.bus | 2
arch/mips/mti-malta/malta-dtshim.c | 2
arch/openrisc/kernel/entry.S | 2
arch/parisc/kernel/signal.c | 6
arch/powerpc/configs/mpc885_ads_defconfig | 1
arch/powerpc/include/asm/pmc.h | 7
arch/powerpc/kernel/stacktrace.c | 1
arch/powerpc/kvm/book3s_64_vio_hv.c | 9 -
arch/powerpc/kvm/book3s_hv.c | 20 ++
arch/powerpc/kvm/book3s_hv_rmhandlers.S | 36 ++++
arch/powerpc/perf/hv-gpci.c | 2
arch/s390/include/asm/setup.h | 2
arch/s390/kernel/early.c | 4
arch/s390/kernel/jump_label.c | 2
arch/s390/mm/init.c | 2
arch/s390/net/bpf_jit_comp.c | 67 ++++----
arch/s390/pci/pci.c | 5
arch/x86/mm/init_64.c | 6
arch/x86/xen/enlighten_pv.c | 7
arch/x86/xen/p2m.c | 4
arch/xtensa/platforms/iss/console.c | 17 +-
block/bfq-iosched.c | 18 +-
block/blk-zoned.c | 6
block/bsg.c | 5
drivers/ata/libata-core.c | 4
drivers/ata/sata_dwc_460ex.c | 12 -
drivers/base/power/trace.c | 10 +
drivers/clk/at91/clk-generated.c | 32 ++-
drivers/clk/at91/dt-compat.c | 8
drivers/clk/at91/pmc.h | 4
drivers/clk/at91/sam9x60.c | 10 -
drivers/clk/at91/sama5d2.c | 31 +--
drivers/cpufreq/powernv-cpufreq.c | 16 +
drivers/crypto/mxs-dcp.c | 36 +---
drivers/dma/imx-sdma.c | 13 -
drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 2
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.c | 84 +++++++---
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.h | 1
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 16 -
drivers/gpu/drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 11 -
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 2
drivers/gpu/drm/drm_debugfs.c | 3
drivers/gpu/drm/etnaviv/etnaviv_buffer.c | 3
drivers/gpu/drm/etnaviv/etnaviv_gem.c | 3
drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c | 3
drivers/gpu/drm/etnaviv/etnaviv_gpu.c | 43 +++--
drivers/gpu/drm/etnaviv/etnaviv_gpu.h | 1
drivers/gpu/drm/etnaviv/etnaviv_iommu.c | 4
drivers/gpu/drm/etnaviv/etnaviv_iommu_v2.c | 8
drivers/gpu/drm/etnaviv/etnaviv_mmu.c | 1
drivers/gpu/drm/etnaviv/etnaviv_mmu.h | 4
drivers/gpu/drm/exynos/exynos_drm_dma.c | 2
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 17 --
drivers/gpu/drm/panfrost/panfrost_mmu.c | 31 +--
drivers/gpu/drm/panfrost/panfrost_regs.h | 2
drivers/hid/hid-input.c | 2
drivers/hid/i2c-hid/i2c-hid-core.c | 5
drivers/iio/dac/ad5624r_spi.c | 18 ++
drivers/infiniband/core/iwcm.c | 19 +-
drivers/infiniband/hw/efa/efa_verbs.c | 1
drivers/infiniband/hw/hfi1/init.c | 7
drivers/md/dm-crypt.c | 7
drivers/media/dvb-frontends/dib8000.c | 58 ++++--
drivers/media/i2c/imx258.c | 4
drivers/media/i2c/tda1997x.c | 5
drivers/media/platform/tegra-cec/tegra_cec.c | 10 -
drivers/media/rc/rc-loopback.c | 2
drivers/media/usb/uvc/uvc_v4l2.c | 34 ++--
drivers/media/v4l2-core/v4l2-dv-timings.c | 4
drivers/mfd/ab8500-core.c | 2
drivers/mfd/axp20x.c | 3
drivers/mfd/db8500-prcmu.c | 14 -
drivers/mfd/stmpe.c | 4
drivers/mfd/tc3589x.c | 2
drivers/mfd/tqmx86.c | 2
drivers/mfd/wm8994-irq.c | 2
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6
drivers/mmc/core/block.c | 3
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 ++--
drivers/mmc/host/sdhci-of-arasan.c | 18 +-
drivers/mtd/nand/raw/cafe_nand.c | 4
drivers/net/bonding/bond_main.c | 3
drivers/net/dsa/b53/b53_common.c | 3
drivers/net/dsa/lantiq_gswip.c | 3
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 1
drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 8
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 19 +-
drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 6
drivers/net/ethernet/ibm/ibmvnic.c | 8
drivers/net/ethernet/intel/iavf/iavf_main.c | 58 ++++++
drivers/net/ethernet/intel/igc/igc_main.c | 9 -
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 8
drivers/net/ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 3
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 5
drivers/net/ethernet/mellanox/mlx5/core/steering/dr_send.c | 1
drivers/net/ethernet/qlogic/qed/qed_mcp.c | 6
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 1
drivers/net/ethernet/rdc/r6040.c | 9 -
drivers/net/ethernet/renesas/sh_eth.c | 1
drivers/net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 --
drivers/net/ethernet/wiznet/w5100.c | 2
drivers/net/phy/dp83640_reg.h | 2
drivers/net/usb/cdc_mbim.c | 5
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3
drivers/net/wireless/ath/ath9k/hw.c | 12 -
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 4
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 8
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 24 ++
drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 30 ++-
drivers/ntb/test/ntb_msi_test.c | 4
drivers/ntb/test/ntb_perf.c | 1
drivers/nvme/host/tcp.c | 14 -
drivers/of/kobj.c | 2
drivers/opp/of.c | 12 -
drivers/parport/ieee1284_ops.c | 2
drivers/pci/controller/pci-aardvark.c | 73 +++++++-
drivers/pci/controller/pcie-xilinx-nwl.c | 12 +
drivers/pci/hotplug/TODO | 3
drivers/pci/hotplug/ibmphp_ebda.c | 5
drivers/pci/msi.c | 3
drivers/pci/pci.c | 8
drivers/pci/pcie/portdrv_core.c | 9 -
drivers/pci/quirks.c | 59 ++++++-
drivers/pci/syscall.c | 4
drivers/pinctrl/pinctrl-ingenic.c | 6
drivers/pinctrl/pinctrl-single.c | 1
drivers/pinctrl/pinctrl-stmfx.c | 6
drivers/pinctrl/samsung/pinctrl-samsung.c | 2
drivers/platform/chrome/cros_ec_proto.c | 9 +
drivers/platform/x86/dell-smbios-wmi.c | 1
drivers/power/supply/max17042_battery.c | 6
drivers/rtc/rtc-tps65910.c | 2
drivers/s390/char/sclp_early.c | 3
drivers/scsi/BusLogic.c | 4
drivers/scsi/pcmcia/fdomain_cs.c | 4
drivers/scsi/qedf/qedf_main.c | 10 -
drivers/scsi/qedi/qedi_main.c | 14 -
drivers/scsi/qla2xxx/qla_nvme.c | 5
drivers/scsi/qla2xxx/qla_os.c | 6
drivers/scsi/smartpqi/smartpqi_init.c | 1
drivers/soc/aspeed/aspeed-lpc-ctrl.c | 2
drivers/soc/aspeed/aspeed-p2a-ctrl.c | 2
drivers/soc/qcom/qcom_aoss.c | 8
drivers/staging/board/board.c | 7
drivers/staging/ks7010/ks7010_sdio.c | 2
drivers/staging/rts5208/rtsx_scsi.c | 10 -
drivers/target/target_core_xcopy.c | 96 +++--------
drivers/target/target_core_xcopy.h | 1
drivers/tty/hvc/hvsi.c | 19 +-
drivers/tty/serial/8250/8250_pci.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/serial/jsm/jsm_neo.c | 2
drivers/tty/serial/jsm/jsm_tty.c | 3
drivers/tty/serial/sh-sci.c | 7
drivers/usb/chipidea/host.c | 14 +
drivers/usb/gadget/composite.c | 8
drivers/usb/gadget/function/u_ether.c | 5
drivers/usb/host/ehci-mv.c | 23 +-
drivers/usb/host/fotg210-hcd.c | 41 ++--
drivers/usb/host/fotg210.h | 5
drivers/usb/host/xhci.c | 24 +-
drivers/usb/musb/musb_dsps.c | 13 -
drivers/usb/usbip/vhci_hcd.c | 32 +++
drivers/vfio/Kconfig | 2
drivers/vhost/net.c | 11 +
drivers/video/fbdev/asiliantfb.c | 3
drivers/video/fbdev/kyro/fbdev.c | 8
drivers/video/fbdev/riva/fbdev.c | 3
fs/btrfs/disk-io.c | 45 ++---
fs/btrfs/inode.c | 10 -
fs/btrfs/tree-log.c | 4
fs/btrfs/volumes.c | 3
fs/cifs/sess.c | 2
fs/f2fs/checkpoint.c | 2
fs/f2fs/data.c | 23 ++
fs/f2fs/dir.c | 15 +
fs/f2fs/f2fs.h | 24 +-
fs/f2fs/file.c | 6
fs/f2fs/gc.c | 6
fs/f2fs/inode.c | 2
fs/f2fs/node.c | 2
fs/f2fs/segment.c | 9 -
fs/f2fs/super.c | 84 +++++-----
fs/fscache/cookie.c | 14 -
fs/fscache/internal.h | 2
fs/fscache/main.c | 39 ++++
fs/fuse/dev.c | 4
fs/gfs2/lock_dlm.c | 5
fs/lockd/svclock.c | 30 +--
fs/overlayfs/dir.c | 6
fs/userfaultfd.c | 93 +++++------
include/crypto/public_key.h | 4
include/linux/hugetlb.h | 9 +
include/linux/list.h | 29 ++-
include/linux/memory_hotplug.h | 4
include/linux/pci.h | 5
include/linux/pci_ids.h | 3
include/linux/skbuff.h | 2
include/linux/sunrpc/xprt.h | 1
include/uapi/linux/pkt_sched.h | 2
include/uapi/linux/serial_reg.h | 1
kernel/dma/debug.c | 7
kernel/events/core.c | 2
kernel/fork.c | 1
kernel/pid_namespace.c | 3
kernel/trace/trace_kprobe.c | 6
kernel/trace/trace_probe.c | 25 +++
kernel/trace/trace_probe.h | 1
kernel/trace/trace_uprobe.c | 6
kernel/workqueue.c | 12 -
lib/test_bpf.c | 13 +
lib/test_stackinit.c | 20 --
mm/memory_hotplug.c | 4
mm/vmscan.c | 2
net/9p/trans_xen.c | 4
net/bluetooth/hci_event.c | 108 +++++++++----
net/bluetooth/sco.c | 74 +++++---
net/caif/chnl_net.c | 19 --
net/core/flow_dissector.c | 12 -
net/dccp/minisocks.c | 2
net/dsa/slave.c | 12 -
net/ipv4/ip_gre.c | 9 -
net/ipv4/ip_output.c | 5
net/ipv4/nexthop.c | 2
net/ipv4/tcp_fastopen.c | 3
net/ipv4/tcp_input.c | 2
net/ipv6/netfilter/nf_socket_ipv6.c | 4
net/l2tp/l2tp_core.c | 4
net/mac80211/iface.c | 11 +
net/netlabel/netlabel_cipso_v4.c | 4
net/netlink/af_netlink.c | 4
net/sched/sch_fq_codel.c | 12 +
net/sched/sch_taprio.c | 4
net/sunrpc/auth_gss/svcauth_gss.c | 2
net/sunrpc/xprt.c | 6
net/tipc/socket.c | 36 +++-
net/unix/af_unix.c | 2
samples/bpf/test_override_return.sh | 1
samples/bpf/tracex7_user.c | 5
scripts/gen_ksymdeps.sh | 8
security/smack/smack_access.c | 17 --
sound/soc/atmel/Kconfig | 1
sound/soc/intel/boards/bytcr_rt5640.c | 9 -
sound/soc/intel/skylake/skl-messages.c | 11 +
sound/soc/intel/skylake/skl-pcm.c | 25 +--
sound/soc/rockchip/rockchip_i2s.c | 35 ++--
tools/perf/Makefile.config | 8
tools/perf/util/machine.c | 1
tools/testing/selftests/bpf/progs/xdp_tx.c | 2
tools/testing/selftests/bpf/test_maps.c | 2
tools/testing/selftests/bpf/test_xdp_veth.sh | 2
tools/thermal/tmon/Makefile | 2
virt/kvm/arm/arm.c | 8
274 files changed, 1902 insertions(+), 1108 deletions(-)
Adrian Bunk (1):
bnx2x: Fix enabling network interfaces without VFs
Alexander Egorenkov (1):
s390/sclp: fix Secure-IPL facility detection
Alexey Kardashevskiy (1):
KVM: PPC: Fix clearing never mapped TCEs in realmode
Alyssa Rosenzweig (3):
drm/panfrost: Simplify lock_region calculation
drm/panfrost: Use u64 for size in lock_region
drm/panfrost: Clamp lock region to Bifrost minimum
Anand Jain (1):
btrfs: fix upper limit for max_inline for page size 64K
Andreas Obergschwandtner (1):
ARM: tegra: tamonten: Fix UART pad setting
Andrey Grodzovsky (1):
drm/amdgpu: Fix BUG_ON assert
Andy Shevchenko (3):
include/linux/list.h: add a macro to test if entry is pointing to the head
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
Anirudh Rayabharam (1):
usbip: give back URBs for unsent unlink requests during cleanup
Anson Jacob (1):
drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
Anthony Iliopoulos (1):
dma-debug: fix debugfs initialization order
Arnd Bergmann (1):
m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
Arne Welzel (1):
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Baptiste Lepers (1):
events: Reuse value read using READ_ONCE instead of re-reading it
Benjamin Hesmans (1):
netfilter: socket: icmp6: fix use-after-scope
Bob Peterson (1):
gfs2: Don't call dlm after protocol is unmounted
Cezary Rojewski (1):
ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
Chao Yu (5):
f2fs: quota: fix potential deadlock
f2fs: show f2fs instance in printk_ratelimited
f2fs: fix to account missing .skipped_gc_rwsem
f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
f2fs: fix to unmap pages from userspace process in punch_hole()
Christoph Hellwig (1):
scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
Christophe JAILLET (2):
staging: ks7010: Fix the initialization of the 'sleep_status' structure
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Claudiu Beznea (1):
clk: at91: clk-generated: pass the id of changeable parent at registration
Codrin Ciubotariu (2):
clk: at91: sam9x60: Don't use audio PLL
clk: at91: clk-generated: Limit the requested rate to our range
Colin Ian King (1):
parport: remove non-zero check on count
Damien Le Moal (1):
block: bfq: fix bfq_set_next_ioprio_data()
Dan Carpenter (4):
scsi: smartpqi: Fix an error code in pqi_get_raid_map()
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
scsi: qedf: Fix error codes in qedf_alloc_global_queues()
PCI: Fix pci_dev_str_match_path() alloc while atomic bug
Daniele Palmas (1):
net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
David Disseldorp (1):
scsi: target: avoid per-loop XCOPY buffer allocations
David Heidelberg (5):
ARM: 9105/1: atags_to_fdt: don't warn about stack size
ARM: dts: qcom: apq8064: correct clock names
drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
drm/msi/mdp4: populate priv->kms in mdp4_kms_init
dt-bindings: arm: Fix Toradex compatible typo
David Hildenbrand (1):
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
David Howells (1):
fscache: Fix cookie key hashing
Desmond Cheong Zhi Xi (5):
btrfs: reset replace target device to allocation state on close
drm: avoid blocking in drm_clients_info's rcu section
Bluetooth: skip invalid hci_sync_conn_complete_evt
Bluetooth: schedule SCO timeouts with delayed_work
Bluetooth: avoid circular locks in sco_sock_connect
Ding Hui (1):
cifs: fix wrong release in sess_alloc_buffer() failed path
Dinghao Liu (1):
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Dmitry Osipenko (1):
rtc: tps65910: Correct driver module alias
Dmitry Torokhov (1):
HID: input: do not report stylus battery state as "full"
Eran Ben Elisha (1):
net/mlx5: Fix variable type to match 64bit
Eric Dumazet (3):
net-caif: avoid user-triggerable WARN_ON(1)
net/af_unix: fix a data-race in unix_dgram_poll
fq_codel: reject silly quantum parameters
Ernst Sjöstrand (1):
drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
Evan Quan (1):
PCI: Add AMD GPU multi-function power dependencies
Evan Wang (1):
PCI: aardvark: Fix checking for PIO status
Evgeny Novikov (2):
USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
media: tegra-cec: Handle errors of clk_prepare_enable()
Florian Fainelli (1):
r6040: Restore MDIO clock frequency after MAC reset
Geert Uytterhoeven (1):
staging: board: Fix uninitialized spinlock when attaching genpd
George Cherian (1):
PCI: Add ACS quirks for Cavium multi-function devices
Greg Kroah-Hartman (2):
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Linux 5.4.148
Gustavo A. R. Silva (2):
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
flow_dissector: Fix out-of-bounds warnings
Gustaw Lewandowski (1):
ASoC: Intel: Skylake: Fix passing loadable flag for module
Haimin Zhang (1):
fix array-index-out-of-bounds in taprio_change
Halil Pasic (1):
s390/pv: fix the forcing of the swiotlb
Hans Verkuil (1):
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Hans de Goede (4):
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
mfd: axp20x: Update AXP288 volatile ranges
Harshvardhan Jha (1):
9p/xen: Fix end of loop tests for list_for_each_entry
Heiko Carstens (1):
s390/jump_label: print real address in a case of a jump label bug
Hoang Le (1):
tipc: increase timeout in tipc_sk_enqueue()
Hyun Kwon (1):
PCI: xilinx-nwl: Enable the clock through CCF
Ilya Leoshkevich (2):
s390/bpf: Fix optimizing out zero-extensions
s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
Iwona Winiarska (2):
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
soc: aspeed: p2a-ctrl: Fix boundary check for mmap
J. Bruce Fields (2):
rpc: fix gss_svc_init cleanup on failure
lockd: lockd server-side shouldn't set fl_ops
Jack Pham (1):
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Jaehyoung Choi (1):
pinctrl: samsung: Fix pinctrl bank pin count
Jan Hoffmann (1):
net: dsa: lantiq_gswip: fix maximum frame length
Jason Gunthorpe (1):
vfio: Use config not menuconfig for VFIO_NOIOMMU
Jiaran Zhang (1):
net: hns3: fix the timing issue of VF clearing interrupt sources
Jim Broadus (1):
HID: i2c-hid: Fix Elan touchpad regression
Jiri Slaby (2):
xtensa: ISS: don't panic in rs_init
hvsi: don't panic on tty_register_driver failure
Joel Stanley (1):
powerpc/config: Renable MTD_PHYSMAP_OF
Johan Almbladh (3):
bpf/tests: Fix copy-and-paste error in double word test
bpf/tests: Do not PASS tests without actually testing the result
mac80211: Fix monitor MTU limit so that A-MSDUs get through
Johannes Berg (2):
iwlwifi: mvm: avoid static queue number aliasing
iwlwifi: mvm: fix access to BSS elements
Jonathan Cameron (1):
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Josef Bacik (1):
btrfs: wake up async_delalloc_pages waiters after submit
Juergen Gross (3):
xen: fix setting of max_pfn in shared_info
xen: reset legacy rtc flag for PV domU
PM: base: power: don't try to use non-existing RTC for storing data
Juhee Kang (1):
samples: bpf: Fix tracex7 error raised on the missing argument
Jussi Maki (1):
selftests/bpf: Fix xdp_tx.c prog section name
Kajol Jain (1):
powerpc/perf/hv-gpci: Fix counter value parsing
Kees Cook (2):
staging: rts5208: Fix get_ms_information() heap buffer size
lib/test_stackinit: Fix static initializer test
Kelly Devilliv (2):
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
usb: host: fotg210: fix the actual_length of an iso packet
Krzysztof Hałasa (1):
media: TDA1997x: fix tda1997x_query_dv_timings() return value
Krzysztof Kozlowski (1):
power: supply: max17042: handle fails of reading status register
Krzysztof Wilczyński (1):
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Laurent Pinchart (1):
media: imx258: Rectify mismatch of VTS value
Leon Romanovsky (3):
RDMA/iwcm: Release resources if iw_cm module initialization fails
docs: Fix infiniband uverbs minor number
RDMA/efa: Remove double QP type assignment
Li Huafei (1):
perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64}
Li Jun (1):
usb: chipidea: host: fix port index underflow and UBSAN complains
Li Zhijian (1):
selftests/bpf: Enlarge select() timeout for test_maps
Lin, Zhenpeng (1):
dccp: don't duplicate ccid when cloning dccp sock
Linus Walleij (1):
mfd: db8500-prcmu: Adjust map to reality
Liu Zixian (1):
mm/hugetlb: initialize hugetlb_usage in mm_init
Luben Tuikov (1):
drm/amdgpu: Fix amdgpu_ras_eeprom_init()
Lucas Stach (8):
drm/etnaviv: return context from etnaviv_iommu_context_get
drm/etnaviv: put submit prev MMU context when it exists
drm/etnaviv: stop abusing mmu_context as FE running marker
drm/etnaviv: keep MMU context across runtime suspend/resume
drm/etnaviv: exec and MMU state is lost when resetting the GPU
drm/etnaviv: fix MMU context leak on GPU reset
drm/etnaviv: reference MMU context when setting up hardware state
drm/etnaviv: add missing MMU context put when reaping MMU mapping
Luiz Augusto von Dentz (1):
Bluetooth: Fix handling of LE Enhanced Connection Complete
Luke Hsiao (1):
tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
Maciej W. Rozycki (2):
serial: 8250: Define RX trigger levels for OxSemi 950 devices
scsi: BusLogic: Fix missing pr_cont() use
Maciej Żenczykowski (1):
usb: gadget: u_ether: fix a potential null pointer dereference
Manish Narani (1):
mmc: sdhci-of-arasan: Check return value of non-void funtions
Manivannan Sadhasivam (1):
soc: qcom: aoss: Fix the out of bound usage of cooling_devs
Maor Gottlieb (1):
net/mlx5: Fix potential sleeping in atomic context
Marc Zyngier (3):
pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
mfd: Don't use irq_create_mapping() to resolve a mapping
Marcos Paulo de Souza (1):
btrfs: tree-log: check btrfs_lookup_data_extent return value
Marek Behún (1):
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
Marek Marczykowski-Górecki (1):
PCI/MSI: Skip masking MSI-X on Xen PV
Mark Brown (1):
arm64/sve: Use correct size when reinitialising SVE state
Mark Rutland (1):
arm64: head: avoid over-mapping in map_memory
Masahiro Yamada (1):
kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
Masami Hiramatsu (1):
tracing/probes: Reject events which have the same name of existing one
Mathias Nyman (1):
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Matthias Schiffer (1):
mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
Mauro Carvalho Chehab (2):
media: uvc: don't do DMA on stack
media: dib8000: rewrite the init prbs logic
Miaoqing Pan (1):
ath9k: fix sleeping in atomic context
Michael Petlan (1):
perf machine: Initialize srcline string member in add_location struct
Michal Suchanek (1):
powerpc/stacktrace: Include linux/delay.h
Mike Marciniszyn (1):
IB/hfi1: Adjust pkey entry in index 0
Mike Rapoport (1):
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
Miklos Szeredi (1):
fuse: fix use after free in fuse_read_interrupt()
Mikulas Patocka (1):
parisc: fix crash with signals and alloca
Miquel Raynal (1):
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
Nadav Amit (1):
userfaultfd: prevent concurrent API initialization
Nadezda Lutovinova (1):
usb: musb: musb_dsps: request_irq() after initializing musb
Nathan Chancellor (2):
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
drm/exynos: Always initialize mapping in exynos_drm_register_dma()
Nicholas Piggin (2):
KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live
KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers
Niklas Cassel (2):
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Niklas Schnelle (1):
s390: make PCI mio support a machine flag
Nishad Kamdar (1):
mmc: core: Return correct emmc response in case of ioctl error
Oleksij Rempel (1):
MIPS: Malta: fix alignment of the devicetree buffer
Oliver Logush (1):
drm/amd/display: Fix timer_per_pixel unit error
Oliver Upton (1):
KVM: arm64: Handle PSCI resets before userspace touches vCPU state
Pali Rohár (2):
PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Paolo Abeni (1):
vhost_net: fix OoB on sendmsg() failure.
Paolo Valente (1):
block, bfq: honor already-setup queue merges
Patryk Duda (1):
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Paul Cercueil (1):
pinctrl: ingenic: Fix incorrect pull up/down info
Pratik R. Sampat (1):
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Raag Jadav (1):
arm64: dts: ls1046a: fix eeprom entries
Rafael J. Wysocki (1):
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Rafał Miłecki (1):
net: dsa: b53: Fix calculating number of switch ports
Rajendra Nayak (1):
opp: Don't print an error if required-opps is missing
Randy Dunlap (4):
openrisc: don't printk() unconditionally
ASoC: atmel: ATMEL drivers don't need HAS_DMA
ptp: dp83640: don't define PAGE0
ARC: export clear_user_page() for modules
Rik van Riel (1):
mm,vmscan: fix divide by zero in get_scan_count
Robin Gong (2):
Revert "dmaengine: imx-sdma: refine to load context only once"
dmaengine: imx-sdma: remove duplicated sdma_load_context
Rolf Eike Beer (1):
tools/thermal/tmon: Add cross compiling support
Ryoga Saito (1):
Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6
Saeed Mahameed (1):
net/mlx5: FWTrace, cancel work on alloc pd error flow
Sagi Grimberg (1):
nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
Sasha Neftin (1):
igc: Check if num of q_vectors is smaller than max before array access
Saurav Kashyap (2):
scsi: qla2xxx: Changes to support kdump kernel
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Sean Anderson (1):
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Sean Keely (1):
drm/amdkfd: Account for SH/SE count when setting up cu masks.
Sean Young (1):
media: rc-loopback: return number of emitters rather than error
Sebastian Reichel (1):
ARM: dts: imx53-ppd: Fix ACHC entry
Shai Malin (1):
qed: Handle management FW error
Shuah Khan (1):
usbip:vhci_hcd USB port can get stuck in the disabled state
Stefan Assmann (2):
iavf: do not override the adapter state in the watchdog task
iavf: fix locking of critical sections
Stuart Hayes (1):
PCI/portdrv: Enable Bandwidth Notification only if port supports it
Sugar Zhang (1):
ASoC: rockchip: i2s: Fix regmap_ops hang
Sukadev Bhattiprolu (1):
ibmvnic: check failover_pending in login response
Thierry Reding (1):
arm64: tegra: Fix compatible string for Tegra132 CPUs
Thomas Hebb (1):
mmc: rtsx_pci: Fix long reads when clock is prescaled
Tianjia Zhang (1):
Smack: Fix wrong semantics in smk_access_entry()
Trond Myklebust (1):
SUNRPC: Fix potential memory corruption
Tuo Li (2):
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
drm/display: fix possible null-pointer dereference in dcn10_set_clock()
Ulrich Hecht (1):
serial: sh-sci: fix break handling for sysrq
Umang Jain (1):
media: imx258: Limit the max analogue gain to 480
Vasily Averin (1):
memcg: enable accounting for pids in nested pid namespaces
Vidya Sagar (1):
arm64: tegra: Fix Tegra194 PCIe EP compatible string
Vinod Koul (1):
arm64: dts: qcom: sdm660: use reg value for memory node
Vishal Aslot (1):
PCI: ibmphp: Fix double unmap of io_mem
Vladimir Oltean (1):
net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
Wang Hai (1):
VMCI: fix NULL pointer dereference when unmapping queue pair
Wasim Khan (1):
PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
Wei Li (1):
scsi: fdomain: Fix error return code in fdomain_probe()
Willem de Bruijn (1):
ip_gre: validate csum_start only on pull
Xiaotan Luo (1):
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Xin Long (2):
tipc: keep the skb in rcv queue until the whole data is read
tipc: fix an use-after-free issue in tipc_recvmsg
Xiyu Yang (1):
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Yajun Deng (1):
netlink: Deal with ESRCH error in nlmsg_notify()
Yang Li (3):
ethtool: Fix an error code in cxgb2.c
NTB: Fix an error code in ntb_msit_probe()
NTB: perf: Fix an error code in perf_setup_inbuf()
Yang Yingliang (1):
net: w5100: check return value after calling platform_get_resource()
Yangtao Li (1):
f2fs: reduce the scope of setting fsck tag when de->name_len is zero
Yevgeny Kliteynik (1):
net/mlx5: DR, Enable QP retransmission
Yoshihiro Shimoda (1):
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Yufeng Mo (4):
bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
net: hns3: pad the short tunnel frame before sending to hardware
net: hns3: change affinity_mask to numa node range
net: hns3: disable mac in flr process
Zekun Shen (1):
ath9k: fix OOB read ar9300_eeprom_restore_internal
Zhang Qilong (1):
iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
Zhen Lei (2):
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
workqueue: Fix possible memory leaks in wq_numa_init()
Zheyu Ma (5):
video: fbdev: kyro: fix a DoS bug by restricting user input
tty: serial: jsm: hold port lock when reporting modem line changes
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
video: fbdev: kyro: Error out if 'pixclock' equals zero
video: fbdev: riva: Error out if 'pixclock' equals zero
chenying (1):
ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
zhenggy (1):
tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
zhenwei pi (1):
crypto: public_key: fix overflow during implicit conversion
王贇 (1):
net: fix NULL pointer reference in cipso_v4_doi_free
^ permalink raw reply [relevance 2%]
* Linux 4.19.207
@ 2021-09-22 11:12 2% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-22 11:12 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 4.19.207 kernel.
All users of the 4.19 kernel series must upgrade.
The updated 4.19.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.19.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/devices.txt | 6
Documentation/devicetree/bindings/mtd/gpmc-nand.txt | 2
Makefile | 2
arch/arc/mm/cache.c | 2
arch/arm/boot/compressed/Makefile | 2
arch/arm/boot/dts/imx53-ppd.dts | 23
arch/arm/boot/dts/qcom-apq8064.dtsi | 6
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14
arch/arm/kernel/Makefile | 6
arch/arm/kernel/return_address.c | 4
arch/arm/mach-imx/mmdc.c | 14
arch/arm/net/bpf_jit_32.c | 3
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2
arch/arm64/include/asm/kernel-pgtable.h | 4
arch/arm64/kernel/fpsimd.c | 2
arch/arm64/kernel/head.S | 11
arch/arm64/net/bpf_jit_comp.c | 13
arch/m68k/emu/nfeth.c | 4
arch/mips/mti-malta/malta-dtshim.c | 2
arch/mips/net/ebpf_jit.c | 3
arch/openrisc/kernel/entry.S | 2
arch/parisc/kernel/signal.c | 6
arch/powerpc/boot/crt0.S | 3
arch/powerpc/kernel/module_64.c | 2
arch/powerpc/kernel/stacktrace.c | 1
arch/powerpc/net/bpf_jit_comp64.c | 6
arch/powerpc/perf/hv-gpci.c | 2
arch/s390/kernel/jump_label.c | 2
arch/s390/kvm/interrupt.c | 4
arch/s390/kvm/kvm-s390.h | 2
arch/s390/net/bpf_jit_comp.c | 14
arch/sparc/net/bpf_jit_comp_64.c | 3
arch/x86/events/amd/ibs.c | 8
arch/x86/events/intel/pt.c | 2
arch/x86/kernel/cpu/intel_rdt_monitor.c | 6
arch/x86/kernel/reboot.c | 3
arch/x86/kvm/x86.c | 4
arch/x86/mm/init_64.c | 6
arch/x86/net/bpf_jit_comp.c | 7
arch/x86/net/bpf_jit_comp32.c | 6
arch/x86/xen/enlighten_pv.c | 7
arch/x86/xen/p2m.c | 4
arch/xtensa/Kconfig | 2
arch/xtensa/platforms/iss/console.c | 17
block/bfq-iosched.c | 18
block/blk-zoned.c | 6
certs/Makefile | 8
drivers/ata/libata-core.c | 6
drivers/ata/sata_dwc_460ex.c | 12
drivers/base/power/trace.c | 10
drivers/base/regmap/regmap.c | 2
drivers/bcma/main.c | 6
drivers/block/Kconfig | 4
drivers/block/cryptoloop.c | 2
drivers/clk/clk.c | 10
drivers/clk/mvebu/kirkwood.c | 1
drivers/clocksource/sh_cmt.c | 30
drivers/cpufreq/powernv-cpufreq.c | 16
drivers/crypto/mxs-dcp.c | 81 +-
drivers/crypto/omap-sham.c | 2
drivers/crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4
drivers/crypto/qat/qat_common/adf_common_drv.h | 8
drivers/crypto/qat/qat_common/adf_init.c | 5
drivers/crypto/qat/qat_common/adf_isr.c | 7
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7
drivers/crypto/qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4
drivers/crypto/talitos.c | 4
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 2
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 16
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 10
drivers/gpu/drm/msm/dsi/dsi.c | 6
drivers/gpu/ipu-v3/ipu-cpmem.c | 30
drivers/hid/hid-input.c | 2
drivers/i2c/busses/i2c-highlander.c | 2
drivers/i2c/busses/i2c-iop3xx.c | 6
drivers/i2c/busses/i2c-mt65xx.c | 2
drivers/i2c/busses/i2c-s3c2410.c | 2
drivers/iio/dac/ad5624r_spi.c | 18
drivers/infiniband/core/iwcm.c | 19
drivers/md/bcache/super.c | 16
drivers/md/dm-crypt.c | 7
drivers/md/dm-thin-metadata.c | 2
drivers/md/persistent-data/dm-block-manager.c | 14
drivers/media/dvb-frontends/dib8000.c | 58 +
drivers/media/i2c/imx258.c | 4
drivers/media/i2c/tda1997x.c | 6
drivers/media/platform/qcom/venus/venc.c | 2
drivers/media/platform/tegra-cec/tegra_cec.c | 10
drivers/media/rc/rc-loopback.c | 2
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6
drivers/media/usb/dvb-usb/vp702x.c | 12
drivers/media/usb/em28xx/em28xx-input.c | 1
drivers/media/usb/go7007/go7007-driver.c | 26
drivers/media/usb/stkwebcam/stk-webcam.c | 6
drivers/media/usb/uvc/uvc_v4l2.c | 34
drivers/media/v4l2-core/v4l2-dv-timings.c | 4
drivers/mfd/ab8500-core.c | 2
drivers/mfd/axp20x.c | 3
drivers/mfd/stmpe.c | 4
drivers/mfd/tc3589x.c | 2
drivers/mfd/wm8994-irq.c | 2
drivers/misc/aspeed-lpc-ctrl.c | 2
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6
drivers/mmc/core/block.c | 3
drivers/mmc/host/dw_mmc.c | 1
drivers/mmc/host/moxart-mmc.c | 1
drivers/mmc/host/rtsx_pci_sdmmc.c | 36
drivers/mmc/host/sdhci-of-arasan.c | 18
drivers/mtd/nand/raw/cafe_nand.c | 4
drivers/net/bonding/bond_main.c | 3
drivers/net/dsa/b53/b53_common.c | 3
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2
drivers/net/ethernet/cadence/macb_ptp.c | 11
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 1
drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 9
drivers/net/ethernet/ibm/ibmvnic.c | 8
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 5
drivers/net/ethernet/qlogic/qed/qed_main.c | 7
drivers/net/ethernet/qlogic/qed/qed_mcp.c | 6
drivers/net/ethernet/qlogic/qede/qede_main.c | 2
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 1
drivers/net/ethernet/qualcomm/qca_spi.c | 2
drivers/net/ethernet/qualcomm/qca_uart.c | 2
drivers/net/ethernet/rdc/r6040.c | 9
drivers/net/ethernet/renesas/sh_eth.c | 1
drivers/net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18
drivers/net/ethernet/wiznet/w5100.c | 2
drivers/net/ethernet/xilinx/ll_temac_main.c | 4
drivers/net/phy/dp83640_reg.h | 2
drivers/net/usb/cdc_mbim.c | 5
drivers/net/wireless/ath/ath6kl/wmi.c | 4
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3
drivers/net/wireless/ath/ath9k/hw.c | 12
drivers/ntb/test/ntb_perf.c | 1
drivers/nvme/host/rdma.c | 4
drivers/of/kobj.c | 2
drivers/parport/ieee1284_ops.c | 2
drivers/pci/controller/pci-aardvark.c | 11
drivers/pci/controller/pcie-xilinx-nwl.c | 12
drivers/pci/msi.c | 3
drivers/pci/pci.c | 33
drivers/pci/quirks.c | 26
drivers/pci/syscall.c | 4
drivers/pinctrl/pinctrl-single.c | 1
drivers/pinctrl/samsung/pinctrl-samsung.c | 2
drivers/platform/chrome/cros_ec_proto.c | 9
drivers/platform/x86/dell-smbios-wmi.c | 1
drivers/power/supply/axp288_fuel_gauge.c | 4
drivers/power/supply/max17042_battery.c | 8
drivers/rtc/rtc-tps65910.c | 2
drivers/s390/cio/css.c | 17
drivers/scsi/BusLogic.c | 4
drivers/scsi/qedi/qedi_main.c | 14
drivers/scsi/qla2xxx/qla_nvme.c | 5
drivers/soc/qcom/smsm.c | 11
drivers/soc/rockchip/Kconfig | 4
drivers/spi/spi-fsl-dspi.c | 1
drivers/spi/spi-pic32.c | 1
drivers/spi/spi-sprd-adi.c | 2
drivers/staging/board/board.c | 7
drivers/staging/ks7010/ks7010_sdio.c | 2
drivers/staging/rts5208/rtsx_scsi.c | 10
drivers/tty/hvc/hvsi.c | 19
drivers/tty/serial/8250/8250_pci.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/serial/fsl_lpuart.c | 2
drivers/tty/serial/jsm/jsm_neo.c | 2
drivers/tty/serial/jsm/jsm_tty.c | 3
drivers/tty/serial/sh-sci.c | 7
drivers/tty/tty_io.c | 4
drivers/usb/gadget/composite.c | 8
drivers/usb/gadget/function/u_ether.c | 5
drivers/usb/gadget/udc/at91_udc.c | 4
drivers/usb/gadget/udc/bdc/bdc_core.c | 3
drivers/usb/gadget/udc/mv_u3d_core.c | 19
drivers/usb/host/ehci-orion.c | 8
drivers/usb/host/fotg210-hcd.c | 41 -
drivers/usb/host/fotg210.h | 5
drivers/usb/host/ohci-tmio.c | 3
drivers/usb/host/xhci-rcar.c | 7
drivers/usb/host/xhci.c | 24
drivers/usb/mtu3/mtu3_gadget.c | 6
drivers/usb/musb/musb_dsps.c | 13
drivers/usb/phy/phy-fsl-usb.c | 2
drivers/usb/phy/phy-tahvo.c | 4
drivers/usb/phy/phy-twl6030-usb.c | 5
drivers/usb/serial/mos7720.c | 4
drivers/usb/usbip/vhci_hcd.c | 32
drivers/vfio/Kconfig | 2
drivers/video/backlight/pwm_bl.c | 54 -
drivers/video/fbdev/asiliantfb.c | 3
drivers/video/fbdev/core/fbmem.c | 6
drivers/video/fbdev/kyro/fbdev.c | 8
drivers/video/fbdev/riva/fbdev.c | 3
fs/btrfs/inode.c | 2
fs/btrfs/volumes.c | 3
fs/cifs/cifs_unicode.c | 9
fs/cifs/sess.c | 2
fs/crypto/hooks.c | 44 +
fs/ext4/inline.c | 6
fs/ext4/symlink.c | 11
fs/f2fs/file.c | 4
fs/f2fs/gc.c | 4
fs/f2fs/namei.c | 11
fs/fcntl.c | 5
fs/fscache/cookie.c | 14
fs/fscache/internal.h | 2
fs/fscache/main.c | 39 +
fs/gfs2/lock_dlm.c | 5
fs/isofs/inode.c | 27
fs/isofs/isofs.h | 1
fs/isofs/joliet.c | 4
fs/nfs/callback_xdr.c | 2
fs/overlayfs/dir.c | 6
fs/ubifs/file.c | 12
fs/udf/misc.c | 13
fs/udf/super.c | 25
fs/userfaultfd.c | 93 +-
include/crypto/public_key.h | 4
include/linux/bpf_verifier.h | 19
include/linux/filter.h | 15
include/linux/fscrypt_notsupp.h | 6
include/linux/fscrypt_supp.h | 1
include/linux/hugetlb.h | 9
include/linux/list.h | 29
include/linux/memory_hotplug.h | 4
include/linux/pci.h | 5
include/linux/power/max17042_battery.h | 2
include/linux/skbuff.h | 2
include/linux/sunrpc/svc.h | 2
include/uapi/linux/pkt_sched.h | 2
include/uapi/linux/serial_reg.h | 1
kernel/bpf/core.c | 18
kernel/bpf/disasm.c | 16
kernel/bpf/verifier.c | 498 ++++++-------
kernel/events/core.c | 2
kernel/fork.c | 1
kernel/locking/mutex.c | 15
kernel/pid_namespace.c | 3
kernel/sched/deadline.c | 8
kernel/sched/sched.h | 2
kernel/time/hrtimer.c | 60 +
lib/mpi/mpiutil.c | 2
lib/test_bpf.c | 13
mm/memory_hotplug.c | 4
mm/page_alloc.c | 8
net/9p/trans_xen.c | 4
net/bluetooth/cmtp/cmtp.h | 2
net/bluetooth/hci_core.c | 14
net/bluetooth/hci_event.c | 108 ++
net/bluetooth/sco.c | 85 +-
net/caif/chnl_net.c | 19
net/core/flow_dissector.c | 12
net/core/net_namespace.c | 18
net/dccp/minisocks.c | 2
net/dsa/slave.c | 12
net/ipv4/icmp.c | 23
net/ipv4/igmp.c | 2
net/ipv4/ip_gre.c | 9
net/ipv4/ip_output.c | 5
net/ipv4/route.c | 48 -
net/ipv4/tcp_fastopen.c | 3
net/ipv4/tcp_input.c | 2
net/ipv4/tcp_ipv4.c | 5
net/ipv6/netfilter/nf_socket_ipv6.c | 4
net/l2tp/l2tp_core.c | 4
net/mac80211/tx.c | 4
net/netlabel/netlabel_cipso_v4.c | 12
net/netlink/af_netlink.c | 4
net/sched/sch_cbq.c | 2
net/sched/sch_fq_codel.c | 12
net/sunrpc/auth_gss/svcauth_gss.c | 2
net/sunrpc/svc.c | 27
net/tipc/socket.c | 36
net/unix/af_unix.c | 2
samples/bpf/test_override_return.sh | 1
samples/bpf/tracex7_user.c | 5
security/integrity/ima/Kconfig | 1
security/integrity/ima/ima_mok.c | 2
security/smack/smack_access.c | 17
sound/core/pcm_lib.c | 2
sound/soc/intel/boards/bytcr_rt5640.c | 9
sound/soc/rockchip/rockchip_i2s.c | 35
sound/usb/quirks.c | 1
tools/perf/util/machine.c | 1
tools/testing/selftests/bpf/test_maps.c | 2
tools/testing/selftests/bpf/test_verifier.c | 144 +++
tools/thermal/tmon/Makefile | 2
virt/kvm/arm/arm.c | 8
294 files changed, 2188 insertions(+), 1184 deletions(-)
Adrian Bunk (1):
bnx2x: Fix enabling network interfaces without VFs
Alexander Tsoy (1):
ALSA: usb-audio: Add registration quirk for JBL Quantum 800
Alexei Starovoitov (2):
bpf: track spill/fill of constants
selftests/bpf: fix tests due to const spill/fill
Andreas Obergschwandtner (1):
ARM: tegra: tamonten: Fix UART pad setting
Andrey Grodzovsky (1):
drm/amdgpu: Fix BUG_ON assert
Andrey Ignatov (5):
bpf: Support variable offset stack access from helpers
bpf: Reject indirect var_off stack access in raw mode
bpf: Reject indirect var_off stack access in unpriv mode
bpf: Sanity check max value for var_off stack access
selftests/bpf: Test variable offset stack access
Andy Duan (1):
tty: serial: fsl_lpuart: fix the wrong mapbase value
Andy Shevchenko (3):
include/linux/list.h: add a macro to test if entry is pointing to the head
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
Anirudh Rayabharam (1):
usbip: give back URBs for unsent unlink requests during cleanup
Anson Jacob (1):
drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
Arne Welzel (1):
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Austin Kim (1):
IMA: remove -Wmissing-prototypes warning
Babu Moger (1):
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
Baptiste Lepers (1):
events: Reuse value read using READ_ONCE instead of re-reading it
Ben Dooks (1):
ARM: 8918/2: only build return_address() if needed
Benjamin Hesmans (1):
netfilter: socket: icmp6: fix use-after-scope
Bob Peterson (1):
gfs2: Don't call dlm after protocol is unmounted
Chao Yu (2):
f2fs: fix to account missing .skipped_gc_rwsem
f2fs: fix to unmap pages from userspace process in punch_hole()
Chih-Kang Chang (1):
mac80211: Fix insufficient headroom issue for AMSDU
Christoph Hellwig (2):
cryptoloop: add a deprecation warning
bcache: add proper error unwinding in bcache_device_init
Christophe JAILLET (4):
drm/msm/dsi: Fix some reference counted resource leaks
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
staging: ks7010: Fix the initialization of the 'sleep_status' structure
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Christophe Leroy (1):
crypto: talitos - reduce max key size for SEC1
Chunfeng Yun (2):
usb: mtu3: use @mult for HS isoc or intr
usb: mtu3: fix the wrong HS mult value
Chunyan Zhang (1):
spi: sprd: Fix the wrong WDG_LOAD_VAL
Colin Ian King (4):
ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init
media: venus: venc: Fix potential null pointer dereference on pointer fmt
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
parport: remove non-zero check on count
Damien Le Moal (2):
libata: fix ata_host_start()
block: bfq: fix bfq_set_next_ioprio_data()
Dan Carpenter (4):
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
PCI: Fix pci_dev_str_match_path() alloc while atomic bug
Daniel Borkmann (3):
bpf: Introduce BPF nospec instruction for mitigating Spectre v4
bpf: Fix leakage due to insufficient speculative store bypass mitigation
bpf: Fix pointer arithmetic mask tightening under state pruning
Daniel Thompson (1):
backlight: pwm_bl: Improve bootloader/kernel device handover
Daniele Palmas (1):
net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
David Heidelberg (2):
ARM: 9105/1: atags_to_fdt: don't warn about stack size
ARM: dts: qcom: apq8064: correct clock names
David Hildenbrand (1):
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
David Howells (1):
fscache: Fix cookie key hashing
Desmond Cheong Zhi Xi (6):
fcntl: fix potential deadlock for &fasync_struct.fa_lock
Bluetooth: fix repeated calls to sco_sock_kill
btrfs: reset replace target device to allocation state on close
Bluetooth: skip invalid hci_sync_conn_complete_evt
Bluetooth: schedule SCO timeouts with delayed_work
Bluetooth: avoid circular locks in sco_sock_connect
Dietmar Eggemann (1):
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
Ding Hui (1):
cifs: fix wrong release in sess_alloc_buffer() failed path
Dinghao Liu (1):
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Dmitry Baryshkov (1):
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
Dmitry Osipenko (1):
rtc: tps65910: Correct driver module alias
Dmitry Torokhov (1):
HID: input: do not report stylus battery state as "full"
Dongliang Mu (3):
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Edward Cree (1):
bpf/verifier: per-register parent pointers
Eric Biggers (4):
fscrypt: add fscrypt_symlink_getattr() for computing st_size
ext4: report correct st_size for encrypted symlinks
f2fs: report correct st_size for encrypted symlinks
ubifs: report correct st_size for encrypted symlinks
Eric Dumazet (5):
ipv4: make exception cache less predictible
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
net-caif: avoid user-triggerable WARN_ON(1)
net/af_unix: fix a data-race in unix_dgram_poll
fq_codel: reject silly quantum parameters
Esben Haabendal (1):
net: ll_temac: Remove left-over debug message
Evan Quan (1):
PCI: Add AMD GPU multi-function power dependencies
Evgeny Novikov (2):
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
media: tegra-cec: Handle errors of clk_prepare_enable()
Fangrui Song (1):
powerpc/boot: Delete unneeded .globl _zimage_start
Florian Fainelli (1):
r6040: Restore MDIO clock frequency after MAC reset
Geert Uytterhoeven (2):
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
staging: board: Fix uninitialized spinlock when attaching genpd
George Cherian (1):
PCI: Add ACS quirks for Cavium multi-function devices
Giovanni Cabiddu (4):
crypto: qat - do not ignore errors from enable_vf2pf_comms()
crypto: qat - handle both source of interrupt in VF ISR
crypto: qat - do not export adf_iov_putmsg()
crypto: qat - use proper type for vf_mask
Greg Kroah-Hartman (3):
clk: fix build warning for orphan_list
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Linux 4.19.207
Guillaume Nault (1):
netns: protect netns ID lookups with RCU
Gustavo A. R. Silva (2):
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
flow_dissector: Fix out-of-bounds warnings
Halil Pasic (1):
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
Hans Verkuil (1):
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Hans de Goede (5):
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
mfd: axp20x: Update AXP288 volatile ranges
Harini Katakam (1):
net: macb: Add a NULL check on desc_ptp
Harshvardhan Jha (1):
9p/xen: Fix end of loop tests for list_for_each_entry
Heiko Carstens (1):
s390/jump_label: print real address in a case of a jump label bug
Hoang Le (1):
tipc: increase timeout in tipc_sk_enqueue()
Hongbo Li (1):
lib/mpi: use kcalloc in mpi_resize
Hyun Kwon (1):
PCI: xilinx-nwl: Enable the clock through CCF
Ilya Leoshkevich (1):
s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
Iwona Winiarska (1):
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
J. Bruce Fields (1):
rpc: fix gss_svc_init cleanup on failure
Jack Pham (1):
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Jaehyoung Choi (1):
pinctrl: samsung: Fix pinctrl bank pin count
Jan Kara (1):
udf: Check LVID earlier
Jason Gunthorpe (1):
vfio: Use config not menuconfig for VFIO_NOIOMMU
Jeongtae Park (1):
regmap: fix the offset of register error log
Jiong Wang (1):
bpf: correct slot_type marking logic to allow more stack slot sharing
Jiri Slaby (2):
xtensa: ISS: don't panic in rs_init
hvsi: don't panic on tty_register_driver failure
Johan Almbladh (2):
bpf/tests: Fix copy-and-paste error in double word test
bpf/tests: Do not PASS tests without actually testing the result
Jonathan Cameron (1):
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Juergen Gross (3):
xen: fix setting of max_pfn in shared_info
xen: reset legacy rtc flag for PV domU
PM: base: power: don't try to use non-existing RTC for storing data
Juhee Kang (1):
samples: bpf: Fix tracex7 error raised on the missing argument
Kai-Heng Feng (1):
Bluetooth: Move shutdown callback before flushing tx and rx queue
Kajol Jain (1):
powerpc/perf/hv-gpci: Fix counter value parsing
Kees Cook (1):
staging: rts5208: Fix get_ms_information() heap buffer size
Kelly Devilliv (2):
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
usb: host: fotg210: fix the actual_length of an iso packet
Kim Phillips (1):
perf/x86/amd/ibs: Work around erratum #1197
Krzysztof Hałasa (3):
gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V formats
media: TDA1997x: enable EDID support
media: TDA1997x: fix tda1997x_query_dv_timings() return value
Krzysztof Kozlowski (2):
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
power: supply: max17042: handle fails of reading status register
Krzysztof Wilczyński (1):
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Laurent Pinchart (1):
media: imx258: Rectify mismatch of VTS value
Len Baker (1):
CIFS: Fix a potencially linear read overflow
Leon Romanovsky (2):
RDMA/iwcm: Release resources if iw_cm module initialization fails
docs: Fix infiniband uverbs minor number
Li Zhijian (1):
selftests/bpf: Enlarge select() timeout for test_maps
Lin, Zhenpeng (1):
dccp: don't duplicate ccid when cloning dccp sock
Linus Walleij (1):
clk: kirkwood: Fix a clocking boot regression
Liu Jian (1):
igmp: Add ip_mc_list lock in ip_check_mc_rcu
Liu Zixian (1):
mm/hugetlb: initialize hugetlb_usage in mm_init
Lorenz Bauer (1):
bpf: verifier: Allocate idmap scratch in verifier env
Luiz Augusto von Dentz (1):
Bluetooth: Fix handling of LE Enhanced Connection Complete
Luke Hsiao (1):
tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
Maciej W. Rozycki (2):
serial: 8250: Define RX trigger levels for OxSemi 950 devices
scsi: BusLogic: Fix missing pr_cont() use
Maciej Żenczykowski (1):
usb: gadget: u_ether: fix a potential null pointer dereference
Manish Narani (1):
mmc: sdhci-of-arasan: Check return value of non-void funtions
Maor Gottlieb (1):
net/mlx5: Fix potential sleeping in atomic context
Marc Zyngier (2):
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
mfd: Don't use irq_create_mapping() to resolve a mapping
Marco Chiappero (2):
crypto: qat - fix reuse of completion variable
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marek Behún (2):
PCI: Call Max Payload Size-related fixup quirks early
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
Marek Marczykowski-Górecki (1):
PCI/MSI: Skip masking MSI-X on Xen PV
Mark Brown (1):
arm64/sve: Use correct size when reinitialising SVE state
Mark Rutland (1):
arm64: head: avoid over-mapping in map_memory
Martin KaFai Lau (1):
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Mathias Nyman (1):
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Mathieu Desnoyers (1):
ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
Mauro Carvalho Chehab (2):
media: uvc: don't do DMA on stack
media: dib8000: rewrite the init prbs logic
Miaoqing Pan (1):
ath9k: fix sleeping in atomic context
Michael Ellerman (1):
powerpc/module64: Fix comment in R_PPC64_ENTRY handling
Michael Petlan (1):
perf machine: Initialize srcline string member in add_location struct
Michal Suchanek (1):
powerpc/stacktrace: Include linux/delay.h
Mike Rapoport (1):
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
Mikulas Patocka (1):
parisc: fix crash with signals and alloca
Miquel Raynal (1):
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
Muchun Song (1):
mm/page_alloc: speed up the iteration of max_order
Nadav Amit (1):
userfaultfd: prevent concurrent API initialization
Nadezda Lutovinova (2):
usb: gadget: mv_u3d: request_irq() after initializing UDC
usb: musb: musb_dsps: request_irq() after initializing musb
Nathan Chancellor (1):
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
Nguyen Dinh Phi (1):
tty: Fix data race between tiocsti() and flush_to_ldisc()
Niklas Cassel (2):
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Nishad Kamdar (1):
mmc: core: Return correct emmc response in case of ioctl error
Oleksij Rempel (1):
MIPS: Malta: fix alignment of the devicetree buffer
Oliver Upton (1):
KVM: arm64: Handle PSCI resets before userspace touches vCPU state
Pali Rohár (3):
isofs: joliet: Fix iocharset=utf8 mount option
PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Paolo Valente (1):
block, bfq: honor already-setup queue merges
Patryk Duda (1):
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Paul Gortmaker (1):
x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
Pavel Skripkin (5):
media: stkwebcam: fix memory leak in stk_camera_probe
m68k: emu: Fix invalid free in nfeth_cleanup()
media: go7007: remove redundant initialization
net: cipso: fix warnings in netlbl_cipsov4_add_std
Bluetooth: add timeout sanity check to hci_inquiry
Peter Zijlstra (1):
locking/mutex: Fix HANDOFF condition
Phong Hoang (1):
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Pratik R. Sampat (1):
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Qu Wenruo (1):
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
Quentin Perret (1):
sched/deadline: Fix reset_on_fork reporting of DL tasks
Rafael J. Wysocki (3):
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
PCI: PM: Enable PME if it can be signaled from D3cold
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Rafał Miłecki (1):
net: dsa: b53: Fix calculating number of switch ports
Randy Dunlap (4):
xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
openrisc: don't printk() unconditionally
ptp: dp83640: don't define PAGE0
ARC: export clear_user_page() for modules
Rolf Eike Beer (1):
tools/thermal/tmon: Add cross compiling support
Ruozhu Li (1):
nvme-rdma: don't update queue count when failing to set io queues
Saurav Kashyap (1):
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Sean Anderson (2):
crypto: mxs-dcp - Check for DMA mapping errors
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Sean Young (1):
media: rc-loopback: return number of emitters rather than error
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Sebastian Reichel (1):
ARM: dts: imx53-ppd: Fix ACHC entry
Sergey Shtylyov (9):
i2c: highlander: add IRQ check
usb: gadget: udc: at91: add IRQ check
usb: phy: fsl-usb: add IRQ check
usb: phy: twl6030: add IRQ checks
usb: host: ohci-tmio: add IRQ check
usb: phy: tahvo: add IRQ check
i2c: iop3xx: fix deferred probing
i2c: s3c2410: fix IRQ check
i2c: mt65xx: fix IRQ check
Shai Malin (3):
qed: Fix the VF msix vectors flow
qede: Fix memset corruption
qed: Handle management FW error
Shuah Khan (1):
usbip:vhci_hcd USB port can get stuck in the disabled state
Stefan Berger (1):
certs: Trigger creation of RSA module signing key if it's not an RSA key
Stefan Wahren (1):
net: qualcomm: fix QCA7000 checksum handling
Stephan Gerhold (1):
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Stian Skjelstad (1):
udf_get_extendedattr() had no boundary checks.
Sugar Zhang (1):
ASoC: rockchip: i2s: Fix regmap_ops hang
Sukadev Bhattiprolu (1):
ibmvnic: check failover_pending in login response
THOBY Simon (1):
IMA: remove the dependency on CRYPTO_MD5
Tetsuo Handa (1):
fbmem: don't allow too huge resolutions
Theodore Ts'o (1):
ext4: fix race writing to an inline_data file while its xattrs are changing
Thomas Gleixner (1):
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
Thomas Hebb (1):
mmc: rtsx_pci: Fix long reads when clock is prescaled
Tianjia Zhang (1):
Smack: Fix wrong semantics in smk_access_entry()
Tom Rix (1):
USB: serial: mos7720: improve OOM-handling in read_mos_reg()
Tony Lindgren (5):
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
mmc: moxart: Fix issue with uninitialized dma_slave_config
Trond Myklebust (1):
SUNRPC/nfs: Fix return value for nfs4_callback_compound()
Tuo Li (1):
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Ulrich Hecht (1):
serial: sh-sci: fix break handling for sysrq
Umang Jain (1):
media: imx258: Limit the max analogue gain to 480
Vasily Averin (1):
memcg: enable accounting for pids in nested pid namespaces
Vineeth Vijayan (1):
s390/cio: add dev_busid sysfs entry for each subchannel
Vinod Koul (1):
arm64: dts: qcom: sdm660: use reg value for memory node
Vladimir Oltean (1):
net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
Wang Hai (1):
VMCI: fix NULL pointer dereference when unmapping queue pair
Willem de Bruijn (1):
ip_gre: validate csum_start only on pull
Xiaotan Luo (1):
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Xiaoyao Li (1):
perf/x86/intel/pt: Fix mask of num_address_ranges
Xin Long (2):
tipc: keep the skb in rcv queue until the whole data is read
tipc: fix an use-after-free issue in tipc_recvmsg
Xiyu Yang (2):
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Yajun Deng (1):
netlink: Deal with ESRCH error in nlmsg_notify()
Yang Li (2):
ethtool: Fix an error code in cxgb2.c
NTB: perf: Fix an error code in perf_setup_inbuf()
Yang Yingliang (2):
ARM: imx: add missing clk_disable_unprepare()
net: w5100: check return value after calling platform_get_resource()
Ye Bin (1):
dm thin metadata: Fix use-after-free in dm_bm_set_read_only
Yoshihiro Shimoda (2):
usb: host: xhci-rcar: Don't reload firmware after the completion
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Yufeng Mo (2):
bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
net: hns3: pad the short tunnel frame before sending to hardware
Zekun Shen (1):
ath9k: fix OOB read ar9300_eeprom_restore_internal
Zelin Deng (1):
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Zenghui Yu (1):
bcma: Fix memory leak for internally-handled cores
Zhen Lei (1):
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Zheyu Ma (5):
video: fbdev: kyro: fix a DoS bug by restricting user input
tty: serial: jsm: hold port lock when reporting modem line changes
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
video: fbdev: kyro: Error out if 'pixclock' equals zero
video: fbdev: riva: Error out if 'pixclock' equals zero
Zubin Mithra (1):
ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
chenying (1):
ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
zhenggy (1):
tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
zhenwei pi (1):
crypto: public_key: fix overflow during implicit conversion
王贇 (1):
net: fix NULL pointer reference in cipso_v4_doi_free
^ permalink raw reply [relevance 2%]
* Linux 4.14.247
@ 2021-09-22 11:12 3% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-22 11:12 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 4.14.247 kernel.
All users of the 4.14 kernel series must upgrade.
The updated 4.14.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.14.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/devices.txt | 6
Documentation/devicetree/bindings/mtd/gpmc-nand.txt | 2
Makefile | 2
arch/arc/mm/cache.c | 2
arch/arm/boot/compressed/Makefile | 2
arch/arm/boot/dts/qcom-apq8064.dtsi | 6
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 +-
arch/arm/kernel/Makefile | 6
arch/arm/kernel/return_address.c | 4
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2
arch/m68k/emu/nfeth.c | 4
arch/mips/mti-malta/malta-dtshim.c | 2
arch/openrisc/kernel/entry.S | 2
arch/parisc/kernel/signal.c | 6
arch/powerpc/boot/crt0.S | 3
arch/powerpc/kernel/module_64.c | 2
arch/powerpc/perf/hv-gpci.c | 2
arch/s390/kernel/dis.c | 2
arch/s390/kernel/jump_label.c | 2
arch/s390/net/bpf_jit_comp.c | 9 +
arch/x86/events/amd/ibs.c | 8 +
arch/x86/events/intel/pt.c | 2
arch/x86/kernel/cpu/intel_rdt_monitor.c | 6
arch/x86/kernel/reboot.c | 3
arch/x86/kvm/x86.c | 4
arch/x86/mm/init_64.c | 6
arch/x86/xen/enlighten_pv.c | 7 +
arch/x86/xen/p2m.c | 4
arch/xtensa/Kconfig | 2
arch/xtensa/platforms/iss/console.c | 17 ++
block/bfq-iosched.c | 2
block/blk-zoned.c | 6
certs/Makefile | 8 +
drivers/ata/libata-core.c | 6
drivers/ata/sata_dwc_460ex.c | 12 -
drivers/base/power/trace.c | 10 +
drivers/base/regmap/regmap.c | 2
drivers/bcma/main.c | 6
drivers/block/Kconfig | 4
drivers/block/cryptoloop.c | 2
drivers/clk/clk.c | 10 -
drivers/clk/mvebu/kirkwood.c | 1
drivers/clocksource/sh_cmt.c | 30 ++--
drivers/cpufreq/powernv-cpufreq.c | 16 ++
drivers/crypto/mxs-dcp.c | 81 +++++++------
drivers/crypto/omap-sham.c | 2
drivers/crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4
drivers/crypto/qat/qat_common/adf_common_drv.h | 8 -
drivers/crypto/qat/qat_common/adf_init.c | 5
drivers/crypto/qat/qat_common/adf_isr.c | 7 -
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12 -
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7 -
drivers/crypto/qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4
drivers/crypto/talitos.c | 4
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2
drivers/gpu/drm/msm/dsi/dsi.c | 6
drivers/hid/hid-input.c | 2
drivers/i2c/busses/i2c-highlander.c | 2
drivers/i2c/busses/i2c-iop3xx.c | 6
drivers/i2c/busses/i2c-mt65xx.c | 2
drivers/i2c/busses/i2c-s3c2410.c | 2
drivers/iio/dac/ad5624r_spi.c | 18 ++
drivers/infiniband/core/iwcm.c | 19 +--
drivers/md/dm-crypt.c | 7 -
drivers/media/dvb-frontends/dib8000.c | 58 ++++++---
drivers/media/rc/rc-loopback.c | 2
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6
drivers/media/usb/dvb-usb/vp702x.c | 12 +
drivers/media/usb/em28xx/em28xx-input.c | 1
drivers/media/usb/go7007/go7007-driver.c | 26 ----
drivers/media/usb/stkwebcam/stk-webcam.c | 6
drivers/media/usb/uvc/uvc_v4l2.c | 34 +++--
drivers/media/v4l2-core/v4l2-dv-timings.c | 4
drivers/mfd/ab8500-core.c | 2
drivers/mfd/stmpe.c | 4
drivers/mfd/tc3589x.c | 2
drivers/mfd/wm8994-irq.c | 2
drivers/misc/aspeed-lpc-ctrl.c | 2
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6
drivers/mmc/host/dw_mmc.c | 1
drivers/mmc/host/moxart-mmc.c | 1
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 +++--
drivers/mmc/host/sdhci-of-arasan.c | 18 ++
drivers/mtd/nand/cafe_nand.c | 4
drivers/net/dsa/b53/b53_common.c | 3
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2
drivers/net/ethernet/cadence/macb_ptp.c | 11 +
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 1
drivers/net/ethernet/qlogic/qed/qed_main.c | 7 -
drivers/net/ethernet/qlogic/qede/qede_main.c | 2
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 1
drivers/net/ethernet/qualcomm/qca_spi.c | 2
drivers/net/ethernet/qualcomm/qca_uart.c | 2
drivers/net/ethernet/rdc/r6040.c | 9 +
drivers/net/ethernet/renesas/sh_eth.c | 1
drivers/net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 +-
drivers/net/ethernet/wiznet/w5100.c | 2
drivers/net/ethernet/xilinx/ll_temac_main.c | 4
drivers/net/phy/dp83640_reg.h | 2
drivers/net/usb/cdc_mbim.c | 5
drivers/net/wireless/ath/ath10k/htt_rx.c | 42 +++---
drivers/net/wireless/ath/ath6kl/wmi.c | 4
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3
drivers/net/wireless/ath/ath9k/hw.c | 12 +
drivers/nvme/host/rdma.c | 4
drivers/parport/ieee1284_ops.c | 2
drivers/pci/host/pci-aardvark.c | 11 +
drivers/pci/host/pcie-xilinx-nwl.c | 12 +
drivers/pci/msi.c | 3
drivers/pci/pci.c | 31 +++-
drivers/pci/quirks.c | 17 +-
drivers/pci/syscall.c | 4
drivers/pinctrl/pinctrl-single.c | 1
drivers/pinctrl/samsung/pinctrl-samsung.c | 2
drivers/platform/chrome/cros_ec_proto.c | 9 +
drivers/power/supply/axp288_fuel_gauge.c | 4
drivers/power/supply/max17042_battery.c | 8 -
drivers/rtc/rtc-tps65910.c | 2
drivers/s390/cio/css.c | 17 ++
drivers/scsi/BusLogic.c | 4
drivers/scsi/qedi/qedi_main.c | 14 +-
drivers/scsi/qla2xxx/qla_nvme.c | 5
drivers/soc/qcom/smsm.c | 11 +
drivers/soc/rockchip/Kconfig | 4
drivers/spi/spi-fsl-dspi.c | 1
drivers/spi/spi-pic32.c | 1
drivers/staging/board/board.c | 7 -
drivers/staging/ks7010/ks7010_sdio.c | 2
drivers/staging/rts5208/rtsx_scsi.c | 10 -
drivers/tty/hvc/hvsi.c | 19 ++-
drivers/tty/serial/8250/8250_pci.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/serial/fsl_lpuart.c | 2
drivers/tty/serial/jsm/jsm_neo.c | 2
drivers/tty/serial/jsm/jsm_tty.c | 3
drivers/tty/tty_io.c | 4
drivers/usb/gadget/composite.c | 8 -
drivers/usb/gadget/function/u_ether.c | 5
drivers/usb/gadget/udc/at91_udc.c | 4
drivers/usb/gadget/udc/bdc/bdc_core.c | 3
drivers/usb/gadget/udc/mv_u3d_core.c | 19 +--
drivers/usb/host/ehci-orion.c | 8 -
drivers/usb/host/fotg210-hcd.c | 41 +++---
drivers/usb/host/fotg210.h | 5
drivers/usb/host/ohci-tmio.c | 3
drivers/usb/host/xhci-rcar.c | 7 +
drivers/usb/host/xhci.c | 24 +--
drivers/usb/musb/musb_dsps.c | 13 --
drivers/usb/phy/phy-fsl-usb.c | 2
drivers/usb/phy/phy-tahvo.c | 4
drivers/usb/phy/phy-twl6030-usb.c | 5
drivers/usb/serial/mos7720.c | 4
drivers/usb/usbip/vhci_hcd.c | 32 ++++-
drivers/vfio/Kconfig | 2
drivers/video/backlight/pwm_bl.c | 54 ++++----
drivers/video/fbdev/asiliantfb.c | 3
drivers/video/fbdev/core/fbmem.c | 7 +
drivers/video/fbdev/kyro/fbdev.c | 8 +
drivers/video/fbdev/riva/fbdev.c | 3
fs/btrfs/inode.c | 2
fs/cifs/cifs_unicode.c | 9 -
fs/cifs/sess.c | 2
fs/ext4/inline.c | 6
fs/f2fs/segment.c | 11 +
fs/gfs2/lock_dlm.c | 5
fs/isofs/inode.c | 27 ++--
fs/isofs/isofs.h | 1
fs/isofs/joliet.c | 4
fs/udf/misc.c | 13 +-
fs/udf/super.c | 25 ++--
include/crypto/public_key.h | 4
include/linux/hugetlb.h | 9 +
include/linux/list.h | 29 +++-
include/linux/memory_hotplug.h | 4
include/linux/pci.h | 5
include/linux/power/max17042_battery.h | 2
include/linux/skbuff.h | 2
include/uapi/linux/serial_reg.h | 1
kernel/events/core.c | 2
kernel/fork.c | 1
kernel/pid_namespace.c | 2
lib/test_bpf.c | 13 +-
mm/kmemleak.c | 2
mm/memory_hotplug.c | 4
mm/page_alloc.c | 8 -
net/9p/trans_xen.c | 4
net/bluetooth/cmtp/cmtp.h | 2
net/bluetooth/hci_core.c | 14 ++
net/bluetooth/hci_event.c | 15 ++
net/bluetooth/sco.c | 50 +++-----
net/caif/chnl_net.c | 19 ---
net/core/flow_dissector.c | 12 +
net/core/net_namespace.c | 18 +-
net/dccp/minisocks.c | 2
net/ipv4/icmp.c | 23 +++
net/ipv4/igmp.c | 2
net/ipv4/ip_output.c | 5
net/ipv4/route.c | 46 ++++---
net/ipv4/tcp_input.c | 2
net/ipv4/tcp_ipv4.c | 5
net/ipv6/netfilter/nf_socket_ipv6.c | 4
net/l2tp/l2tp_core.c | 4
net/mac80211/tx.c | 4
net/netlabel/netlabel_cipso_v4.c | 12 -
net/netlink/af_netlink.c | 4
net/sched/sch_cbq.c | 2
net/sunrpc/auth_gss/svcauth_gss.c | 2
net/tipc/socket.c | 2
net/unix/af_unix.c | 2
security/integrity/ima/ima_mok.c | 2
security/smack/smack_access.c | 17 +-
sound/core/pcm_lib.c | 2
sound/soc/intel/boards/bytcr_rt5640.c | 9 -
sound/soc/rockchip/rockchip_i2s.c | 35 +++--
tools/testing/selftests/bpf/test_maps.c | 2
218 files changed, 1159 insertions(+), 664 deletions(-)
Adrian Bunk (1):
bnx2x: Fix enabling network interfaces without VFs
Andreas Obergschwandtner (1):
ARM: tegra: tamonten: Fix UART pad setting
Andrew Morton (1):
mm/kmemleak.c: make cond_resched() rate-limiting more efficient
Andy Duan (1):
tty: serial: fsl_lpuart: fix the wrong mapbase value
Andy Shevchenko (3):
include/linux/list.h: add a macro to test if entry is pointing to the head
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
Anirudh Rayabharam (1):
usbip: give back URBs for unsent unlink requests during cleanup
Arne Welzel (1):
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Austin Kim (1):
IMA: remove -Wmissing-prototypes warning
Babu Moger (1):
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
Baptiste Lepers (1):
events: Reuse value read using READ_ONCE instead of re-reading it
Ben Dooks (1):
ARM: 8918/2: only build return_address() if needed
Benjamin Hesmans (1):
netfilter: socket: icmp6: fix use-after-scope
Bob Peterson (1):
gfs2: Don't call dlm after protocol is unmounted
Chao Yu (1):
f2fs: fix potential overflow
Chih-Kang Chang (1):
mac80211: Fix insufficient headroom issue for AMSDU
Christian Lamparter (1):
ath10k: fix recent bandwidth conversion bug
Christoph Hellwig (1):
cryptoloop: add a deprecation warning
Christophe JAILLET (4):
drm/msm/dsi: Fix some reference counted resource leaks
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
staging: ks7010: Fix the initialization of the 'sleep_status' structure
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Christophe Leroy (1):
crypto: talitos - reduce max key size for SEC1
Colin Ian King (2):
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
parport: remove non-zero check on count
Damien Le Moal (2):
libata: fix ata_host_start()
block: bfq: fix bfq_set_next_ioprio_data()
Dan Carpenter (3):
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
Daniel Thompson (1):
backlight: pwm_bl: Improve bootloader/kernel device handover
Daniele Palmas (1):
net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
David Heidelberg (2):
ARM: 9105/1: atags_to_fdt: don't warn about stack size
ARM: dts: qcom: apq8064: correct clock names
David Hildenbrand (1):
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
Desmond Cheong Zhi Xi (3):
Bluetooth: fix repeated calls to sco_sock_kill
Bluetooth: skip invalid hci_sync_conn_complete_evt
Bluetooth: avoid circular locks in sco_sock_connect
Ding Hui (1):
cifs: fix wrong release in sess_alloc_buffer() failed path
Dinghao Liu (1):
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Dmitry Osipenko (1):
rtc: tps65910: Correct driver module alias
Dmitry Torokhov (1):
HID: input: do not report stylus battery state as "full"
Dongliang Mu (3):
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Eric Dumazet (3):
ipv4: make exception cache less predictible
net-caif: avoid user-triggerable WARN_ON(1)
net/af_unix: fix a data-race in unix_dgram_poll
Esben Haabendal (1):
net: ll_temac: Remove left-over debug message
Evgeny Novikov (1):
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Fangrui Song (1):
powerpc/boot: Delete unneeded .globl _zimage_start
Florian Fainelli (1):
r6040: Restore MDIO clock frequency after MAC reset
Geert Uytterhoeven (2):
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
staging: board: Fix uninitialized spinlock when attaching genpd
George Cherian (1):
PCI: Add ACS quirks for Cavium multi-function devices
Giovanni Cabiddu (4):
crypto: qat - do not ignore errors from enable_vf2pf_comms()
crypto: qat - handle both source of interrupt in VF ISR
crypto: qat - do not export adf_iov_putmsg()
crypto: qat - use proper type for vf_mask
Greg Kroah-Hartman (3):
clk: fix build warning for orphan_list
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Linux 4.14.247
Guillaume Nault (1):
netns: protect netns ID lookups with RCU
Gustavo A. R. Silva (2):
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
flow_dissector: Fix out-of-bounds warnings
Hans Verkuil (1):
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Hans de Goede (3):
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Harini Katakam (1):
net: macb: Add a NULL check on desc_ptp
Harshvardhan Jha (1):
9p/xen: Fix end of loop tests for list_for_each_entry
Heiko Carstens (1):
s390/jump_label: print real address in a case of a jump label bug
Hoang Le (1):
tipc: increase timeout in tipc_sk_enqueue()
Hyun Kwon (1):
PCI: xilinx-nwl: Enable the clock through CCF
Ilya Leoshkevich (1):
s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
Iwona Winiarska (1):
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
J. Bruce Fields (1):
rpc: fix gss_svc_init cleanup on failure
Jack Pham (1):
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Jaehyoung Choi (1):
pinctrl: samsung: Fix pinctrl bank pin count
Jan Kara (1):
udf: Check LVID earlier
Jason Gunthorpe (1):
vfio: Use config not menuconfig for VFIO_NOIOMMU
Jeongtae Park (1):
regmap: fix the offset of register error log
Jiri Slaby (2):
xtensa: ISS: don't panic in rs_init
hvsi: don't panic on tty_register_driver failure
Johan Almbladh (2):
bpf/tests: Fix copy-and-paste error in double word test
bpf/tests: Do not PASS tests without actually testing the result
Jonathan Cameron (1):
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Juergen Gross (3):
xen: fix setting of max_pfn in shared_info
xen: reset legacy rtc flag for PV domU
PM: base: power: don't try to use non-existing RTC for storing data
Kai-Heng Feng (1):
Bluetooth: Move shutdown callback before flushing tx and rx queue
Kajol Jain (1):
powerpc/perf/hv-gpci: Fix counter value parsing
Kees Cook (1):
staging: rts5208: Fix get_ms_information() heap buffer size
Kelly Devilliv (2):
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
usb: host: fotg210: fix the actual_length of an iso packet
Kim Phillips (1):
perf/x86/amd/ibs: Work around erratum #1197
Krzysztof Kozlowski (2):
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
power: supply: max17042: handle fails of reading status register
Krzysztof Wilczyński (1):
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Len Baker (1):
CIFS: Fix a potencially linear read overflow
Leon Romanovsky (2):
RDMA/iwcm: Release resources if iw_cm module initialization fails
docs: Fix infiniband uverbs minor number
Li Zhijian (1):
selftests/bpf: Enlarge select() timeout for test_maps
Lin, Zhenpeng (1):
dccp: don't duplicate ccid when cloning dccp sock
Linus Walleij (1):
clk: kirkwood: Fix a clocking boot regression
Liu Jian (1):
igmp: Add ip_mc_list lock in ip_check_mc_rcu
Liu Zixian (1):
mm/hugetlb: initialize hugetlb_usage in mm_init
Maciej W. Rozycki (2):
serial: 8250: Define RX trigger levels for OxSemi 950 devices
scsi: BusLogic: Fix missing pr_cont() use
Maciej Żenczykowski (1):
usb: gadget: u_ether: fix a potential null pointer dereference
Manish Narani (1):
mmc: sdhci-of-arasan: Check return value of non-void funtions
Marc Zyngier (1):
mfd: Don't use irq_create_mapping() to resolve a mapping
Marco Chiappero (2):
crypto: qat - fix reuse of completion variable
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marek Behún (2):
PCI: Call Max Payload Size-related fixup quirks early
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
Marek Marczykowski-Górecki (1):
PCI/MSI: Skip masking MSI-X on Xen PV
Martin KaFai Lau (1):
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Mathias Nyman (1):
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Mathieu Desnoyers (1):
ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
Mauro Carvalho Chehab (2):
media: uvc: don't do DMA on stack
media: dib8000: rewrite the init prbs logic
Miaoqing Pan (1):
ath9k: fix sleeping in atomic context
Michael Ellerman (1):
powerpc/module64: Fix comment in R_PPC64_ENTRY handling
Mike Rapoport (1):
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
Mikulas Patocka (1):
parisc: fix crash with signals and alloca
Miquel Raynal (1):
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
Muchun Song (1):
mm/page_alloc: speed up the iteration of max_order
Nadezda Lutovinova (2):
usb: gadget: mv_u3d: request_irq() after initializing UDC
usb: musb: musb_dsps: request_irq() after initializing musb
Nathan Chancellor (1):
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
Nguyen Dinh Phi (1):
tty: Fix data race between tiocsti() and flush_to_ldisc()
Niklas Cassel (2):
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Oleksij Rempel (1):
MIPS: Malta: fix alignment of the devicetree buffer
Pali Rohár (3):
isofs: joliet: Fix iocharset=utf8 mount option
PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Patryk Duda (1):
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Paul Gortmaker (1):
x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
Pavel Skripkin (5):
media: stkwebcam: fix memory leak in stk_camera_probe
m68k: emu: Fix invalid free in nfeth_cleanup()
media: go7007: remove redundant initialization
net: cipso: fix warnings in netlbl_cipsov4_add_std
Bluetooth: add timeout sanity check to hci_inquiry
Phong Hoang (1):
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Pratik R. Sampat (1):
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Qu Wenruo (1):
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
Rafael J. Wysocki (3):
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
PCI: PM: Enable PME if it can be signaled from D3cold
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Rafał Miłecki (1):
net: dsa: b53: Fix calculating number of switch ports
Randy Dunlap (4):
xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
openrisc: don't printk() unconditionally
ptp: dp83640: don't define PAGE0
ARC: export clear_user_page() for modules
Ruozhu Li (1):
nvme-rdma: don't update queue count when failing to set io queues
Saurav Kashyap (1):
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Sean Anderson (2):
crypto: mxs-dcp - Check for DMA mapping errors
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Sean Young (1):
media: rc-loopback: return number of emitters rather than error
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Sergey Shtylyov (9):
i2c: highlander: add IRQ check
usb: gadget: udc: at91: add IRQ check
usb: phy: fsl-usb: add IRQ check
usb: phy: twl6030: add IRQ checks
usb: host: ohci-tmio: add IRQ check
usb: phy: tahvo: add IRQ check
i2c: iop3xx: fix deferred probing
i2c: s3c2410: fix IRQ check
i2c: mt65xx: fix IRQ check
Shai Malin (2):
qed: Fix the VF msix vectors flow
qede: Fix memset corruption
Shuah Khan (1):
usbip:vhci_hcd USB port can get stuck in the disabled state
Stefan Berger (1):
certs: Trigger creation of RSA module signing key if it's not an RSA key
Stefan Wahren (1):
net: qualcomm: fix QCA7000 checksum handling
Stephan Gerhold (1):
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Stian Skjelstad (1):
udf_get_extendedattr() had no boundary checks.
Sugar Zhang (1):
ASoC: rockchip: i2s: Fix regmap_ops hang
Tetsuo Handa (1):
fbmem: don't allow too huge resolutions
Theodore Ts'o (1):
ext4: fix race writing to an inline_data file while its xattrs are changing
Thomas Hebb (1):
mmc: rtsx_pci: Fix long reads when clock is prescaled
Tianjia Zhang (1):
Smack: Fix wrong semantics in smk_access_entry()
Tom Rix (1):
USB: serial: mos7720: improve OOM-handling in read_mos_reg()
Tony Lindgren (5):
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
mmc: moxart: Fix issue with uninitialized dma_slave_config
Tuo Li (1):
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Vasily Averin (1):
memcg: enable accounting for pids in nested pid namespaces
Vasily Gorbik (1):
s390/disassembler: correct disassembly lines alignment
Vineeth Vijayan (1):
s390/cio: add dev_busid sysfs entry for each subchannel
Vinod Koul (1):
arm64: dts: qcom: sdm660: use reg value for memory node
Wang Hai (1):
VMCI: fix NULL pointer dereference when unmapping queue pair
Xiaotan Luo (1):
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Xiaoyao Li (1):
perf/x86/intel/pt: Fix mask of num_address_ranges
Xiyu Yang (2):
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Yajun Deng (1):
netlink: Deal with ESRCH error in nlmsg_notify()
Yang Li (1):
ethtool: Fix an error code in cxgb2.c
Yang Yingliang (1):
net: w5100: check return value after calling platform_get_resource()
Yoshihiro Shimoda (2):
usb: host: xhci-rcar: Don't reload firmware after the completion
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Zekun Shen (1):
ath9k: fix OOB read ar9300_eeprom_restore_internal
Zelin Deng (1):
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Zenghui Yu (1):
bcma: Fix memory leak for internally-handled cores
Zhen Lei (1):
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Zheyu Ma (5):
video: fbdev: kyro: fix a DoS bug by restricting user input
tty: serial: jsm: hold port lock when reporting modem line changes
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
video: fbdev: kyro: Error out if 'pixclock' equals zero
video: fbdev: riva: Error out if 'pixclock' equals zero
Zubin Mithra (1):
ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
zhenggy (1):
tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
zhenwei pi (1):
crypto: public_key: fix overflow during implicit conversion
王贇 (1):
net: fix NULL pointer reference in cipso_v4_doi_free
^ permalink raw reply [relevance 3%]
* Linux 4.9.283
@ 2021-09-22 11:12 3% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-22 11:12 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 4.9.283 kernel.
All users of the 4.9 kernel series must upgrade.
The updated 4.9.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.9.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/devicetree/bindings/mtd/gpmc-nand.txt | 2
Makefile | 2
arch/arc/mm/cache.c | 2
arch/arm/boot/compressed/Makefile | 2
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 -
arch/arm/kernel/Makefile | 6
arch/arm/kernel/return_address.c | 4
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2
arch/m68k/emu/nfeth.c | 4
arch/mips/mti-malta/malta-dtshim.c | 2
arch/openrisc/kernel/entry.S | 2
arch/parisc/kernel/signal.c | 6
arch/powerpc/boot/crt0.S | 3
arch/powerpc/kernel/module_64.c | 2
arch/powerpc/perf/hv-gpci.c | 2
arch/s390/kernel/dis.c | 2
arch/s390/kernel/jump_label.c | 2
arch/s390/net/bpf_jit_comp.c | 9 -
arch/x86/events/amd/ibs.c | 8 +
arch/x86/kernel/reboot.c | 3
arch/x86/kvm/x86.c | 4
arch/x86/mm/init_64.c | 6
arch/x86/xen/enlighten.c | 7
arch/x86/xen/p2m.c | 4
arch/xtensa/Kconfig | 2
arch/xtensa/platforms/iss/console.c | 17 +-
certs/Makefile | 8 +
drivers/ata/libata-core.c | 6
drivers/ata/sata_dwc_460ex.c | 12 -
drivers/base/power/wakeirq.c | 12 +
drivers/base/regmap/regmap.c | 2
drivers/bcma/main.c | 6
drivers/block/Kconfig | 4
drivers/block/cryptoloop.c | 2
drivers/clk/mvebu/kirkwood.c | 1
drivers/crypto/mxs-dcp.c | 81 ++++++-----
drivers/crypto/omap-sham.c | 2
drivers/crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4
drivers/crypto/qat/qat_common/adf_common_drv.h | 8 -
drivers/crypto/qat/qat_common/adf_init.c | 5
drivers/crypto/qat/qat_common/adf_isr.c | 7
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12 -
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7
drivers/crypto/qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4
drivers/crypto/talitos.c | 4
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2
drivers/gpu/drm/msm/dsi/dsi.c | 6
drivers/i2c/busses/i2c-highlander.c | 2
drivers/i2c/busses/i2c-iop3xx.c | 6
drivers/i2c/busses/i2c-mt65xx.c | 2
drivers/i2c/busses/i2c-s3c2410.c | 2
drivers/iio/dac/ad5624r_spi.c | 18 ++
drivers/media/i2c/tc358743.c | 2
drivers/media/rc/rc-loopback.c | 2
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6
drivers/media/usb/dvb-usb/vp702x.c | 12 +
drivers/media/usb/go7007/go7007-driver.c | 26 ---
drivers/media/usb/stkwebcam/stk-webcam.c | 6
drivers/media/usb/uvc/uvc_v4l2.c | 34 +++-
drivers/mfd/ab8500-core.c | 2
drivers/mfd/stmpe.c | 4
drivers/mfd/tc3589x.c | 2
drivers/mfd/wm8994-irq.c | 2
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6
drivers/mmc/host/dw_mmc.c | 1
drivers/mmc/host/moxart-mmc.c | 1
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 +++-
drivers/mtd/nand/atmel_nand.c | 1
drivers/mtd/nand/cafe_nand.c | 4
drivers/net/dsa/b53/b53_common.c | 3
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 1
drivers/net/ethernet/qlogic/qed/qed_main.c | 7
drivers/net/ethernet/qlogic/qede/qede_main.c | 2
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 1
drivers/net/ethernet/rdc/r6040.c | 9 +
drivers/net/ethernet/renesas/sh_eth.c | 1
drivers/net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 +-
drivers/net/ethernet/wiznet/w5100.c | 2
drivers/net/ethernet/xilinx/ll_temac_main.c | 4
drivers/net/phy/dp83640_reg.h | 2
drivers/net/usb/cdc_mbim.c | 5
drivers/net/wireless/ath/ath.h | 3
drivers/net/wireless/ath/ath5k/mac80211-ops.c | 2
drivers/net/wireless/ath/ath6kl/wmi.c | 4
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3
drivers/net/wireless/ath/ath9k/htc_drv_main.c | 2
drivers/net/wireless/ath/ath9k/hw.c | 12 -
drivers/net/wireless/ath/ath9k/hw.h | 1
drivers/net/wireless/ath/ath9k/main.c | 95 ++++++++++++-
drivers/net/wireless/ath/key.c | 41 +++--
drivers/nvme/host/pci.c | 7
drivers/parport/ieee1284_ops.c | 2
drivers/pci/msi.c | 3
drivers/pci/pci.c | 15 +-
drivers/pci/quirks.c | 13 -
drivers/pci/syscall.c | 4
drivers/pinctrl/pinctrl-single.c | 1
drivers/platform/chrome/cros_ec_proto.c | 9 +
drivers/power/supply/axp288_fuel_gauge.c | 4
drivers/power/supply/max17042_battery.c | 8 -
drivers/rtc/rtc-tps65910.c | 2
drivers/scsi/BusLogic.c | 4
drivers/soc/qcom/smsm.c | 11 +
drivers/spi/spi-pic32.c | 1
drivers/staging/board/board.c | 7
drivers/staging/ks7010/ks7010_sdio.c | 2
drivers/tty/hvc/hvsi.c | 19 ++
drivers/tty/serial/8250/8250_pci.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/serial/jsm/jsm_neo.c | 2
drivers/tty/serial/jsm/jsm_tty.c | 3
drivers/tty/tty_io.c | 4
drivers/usb/gadget/composite.c | 8 -
drivers/usb/gadget/function/u_ether.c | 5
drivers/usb/gadget/udc/at91_udc.c | 4
drivers/usb/gadget/udc/mv_u3d_core.c | 19 +-
drivers/usb/host/ehci-orion.c | 8 -
drivers/usb/host/fotg210-hcd.c | 41 ++---
drivers/usb/host/fotg210.h | 5
drivers/usb/host/ohci-tmio.c | 3
drivers/usb/host/xhci.c | 24 +--
drivers/usb/phy/phy-fsl-usb.c | 2
drivers/usb/phy/phy-isp1301.c | 2
drivers/usb/phy/phy-tahvo.c | 4
drivers/usb/phy/phy-twl6030-usb.c | 5
drivers/usb/serial/mos7720.c | 4
drivers/usb/usbip/vhci_hcd.c | 24 +++
drivers/vfio/Kconfig | 2
drivers/video/fbdev/asiliantfb.c | 3
drivers/video/fbdev/core/fbmem.c | 7
drivers/video/fbdev/kyro/fbdev.c | 8 +
drivers/video/fbdev/riva/fbdev.c | 3
fs/btrfs/inode.c | 2
fs/cifs/cifs_unicode.c | 9 -
fs/cifs/sess.c | 2
fs/ext4/inline.c | 6
fs/gfs2/acl.c | 27 +--
fs/gfs2/lock_dlm.c | 5
fs/udf/misc.c | 13 +
fs/udf/super.c | 25 ++-
include/crypto/public_key.h | 4
include/linux/hugetlb.h | 9 +
include/linux/pci.h | 5
include/linux/power/max17042_battery.h | 2
include/linux/skbuff.h | 2
include/uapi/linux/serial_reg.h | 1
kernel/events/core.c | 2
kernel/fork.c | 1
kernel/pid_namespace.c | 2
lib/test_bpf.c | 13 +
mm/kmemleak.c | 2
mm/page_alloc.c | 8 -
net/bluetooth/cmtp/cmtp.h | 2
net/bluetooth/hci_core.c | 14 +
net/bluetooth/hci_event.c | 15 ++
net/bluetooth/sco.c | 50 +++---
net/caif/chnl_net.c | 19 --
net/core/flow_dissector.c | 12 +
net/dccp/minisocks.c | 2
net/ipv4/icmp.c | 23 ++-
net/ipv4/igmp.c | 2
net/ipv4/ip_output.c | 5
net/ipv4/route.c | 46 ++++--
net/ipv4/tcp_input.c | 2
net/ipv4/tcp_ipv4.c | 5
net/l2tp/l2tp_core.c | 4
net/netlabel/netlabel_cipso_v4.c | 12 -
net/netlink/af_netlink.c | 4
net/sched/cls_flower.c | 4
net/sunrpc/auth_gss/svcauth_gss.c | 2
net/tipc/socket.c | 2
net/unix/af_unix.c | 2
security/integrity/ima/ima_mok.c | 2
security/smack/smack_access.c | 17 +-
sound/core/pcm_lib.c | 2
sound/soc/intel/boards/bytcr_rt5640.c | 9 -
179 files changed, 933 insertions(+), 489 deletions(-)
Adrian Bunk (1):
bnx2x: Fix enabling network interfaces without VFs
Andreas Obergschwandtner (1):
ARM: tegra: tamonten: Fix UART pad setting
Andrew Morton (1):
mm/kmemleak.c: make cond_resched() rate-limiting more efficient
Andy Shevchenko (2):
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
Anirudh Rayabharam (1):
usbip: give back URBs for unsent unlink requests during cleanup
Austin Kim (1):
IMA: remove -Wmissing-prototypes warning
Baptiste Lepers (1):
events: Reuse value read using READ_ONCE instead of re-reading it
Ben Dooks (1):
ARM: 8918/2: only build return_address() if needed
Bob Peterson (1):
gfs2: Don't call dlm after protocol is unmounted
Christoph Hellwig (1):
cryptoloop: add a deprecation warning
Christophe JAILLET (4):
nvme-pci: Fix an error handling path in 'nvme_probe()'
drm/msm/dsi: Fix some reference counted resource leaks
staging: ks7010: Fix the initialization of the 'sleep_status' structure
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Christophe Leroy (1):
crypto: talitos - reduce max key size for SEC1
Colin Ian King (2):
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
parport: remove non-zero check on count
Damien Le Moal (1):
libata: fix ata_host_start()
Dan Carpenter (2):
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
Daniele Palmas (1):
net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
David Heidelberg (1):
ARM: 9105/1: atags_to_fdt: don't warn about stack size
Desmond Cheong Zhi Xi (3):
Bluetooth: fix repeated calls to sco_sock_kill
Bluetooth: skip invalid hci_sync_conn_complete_evt
Bluetooth: avoid circular locks in sco_sock_connect
Ding Hui (1):
cifs: fix wrong release in sess_alloc_buffer() failed path
Dinghao Liu (1):
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Dmitry Osipenko (1):
rtc: tps65910: Correct driver module alias
Dongliang Mu (2):
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
Eric Dumazet (3):
ipv4: make exception cache less predictible
net-caif: avoid user-triggerable WARN_ON(1)
net/af_unix: fix a data-race in unix_dgram_poll
Esben Haabendal (1):
net: ll_temac: Remove left-over debug message
Evgeny Novikov (1):
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Fangrui Song (1):
powerpc/boot: Delete unneeded .globl _zimage_start
Florian Fainelli (1):
r6040: Restore MDIO clock frequency after MAC reset
Geert Uytterhoeven (1):
staging: board: Fix uninitialized spinlock when attaching genpd
Giovanni Cabiddu (4):
crypto: qat - do not ignore errors from enable_vf2pf_comms()
crypto: qat - handle both source of interrupt in VF ISR
crypto: qat - do not export adf_iov_putmsg()
crypto: qat - use proper type for vf_mask
Greg Kroah-Hartman (3):
mtd: nand: atmel_nand: remove build warning in atmel_nand_remove()
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Linux 4.9.283
Grygorii Strashko (1):
PM / wakeirq: Enable dedicated wakeirq for suspend
Gustavo A. R. Silva (2):
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
flow_dissector: Fix out-of-bounds warnings
Hans de Goede (3):
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Heiko Carstens (1):
s390/jump_label: print real address in a case of a jump label bug
Hoang Le (1):
tipc: increase timeout in tipc_sk_enqueue()
Ilya Leoshkevich (1):
s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
J. Bruce Fields (1):
rpc: fix gss_svc_init cleanup on failure
Jack Pham (1):
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Jan Kara (2):
gfs2: Don't clear SGID when inheriting ACLs
udf: Check LVID earlier
Jason Gunthorpe (1):
vfio: Use config not menuconfig for VFIO_NOIOMMU
Javier Martinez Canillas (1):
usb: phy: isp1301: Fix build warning when CONFIG_OF is disabled
Jeongtae Park (1):
regmap: fix the offset of register error log
Jiri Slaby (2):
xtensa: ISS: don't panic in rs_init
hvsi: don't panic on tty_register_driver failure
Johan Almbladh (2):
bpf/tests: Fix copy-and-paste error in double word test
bpf/tests: Do not PASS tests without actually testing the result
Jonathan Cameron (1):
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Jouni Malinen (5):
ath: Use safer key clearing with key cache entries
ath9k: Clear key cache explicitly on disabling hardware
ath: Export ath_hw_keysetmac()
ath: Modify ath_key_delete() to not need full key entry
ath9k: Postpone key cache entry deletion for TXQ frames reference it
Juergen Gross (2):
xen: fix setting of max_pfn in shared_info
xen: reset legacy rtc flag for PV domU
Kai-Heng Feng (1):
Bluetooth: Move shutdown callback before flushing tx and rx queue
Kajol Jain (1):
powerpc/perf/hv-gpci: Fix counter value parsing
Kelly Devilliv (2):
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
usb: host: fotg210: fix the actual_length of an iso packet
Kim Phillips (1):
perf/x86/amd/ibs: Work around erratum #1197
Krzysztof Kozlowski (2):
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
power: supply: max17042: handle fails of reading status register
Krzysztof Wilczyński (1):
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Len Baker (1):
CIFS: Fix a potencially linear read overflow
Lin, Zhenpeng (1):
dccp: don't duplicate ccid when cloning dccp sock
Linus Walleij (1):
clk: kirkwood: Fix a clocking boot regression
Liu Jian (1):
igmp: Add ip_mc_list lock in ip_check_mc_rcu
Liu Zixian (1):
mm/hugetlb: initialize hugetlb_usage in mm_init
Maciej W. Rozycki (2):
serial: 8250: Define RX trigger levels for OxSemi 950 devices
scsi: BusLogic: Fix missing pr_cont() use
Maciej Żenczykowski (1):
usb: gadget: u_ether: fix a potential null pointer dereference
Marc Zyngier (1):
mfd: Don't use irq_create_mapping() to resolve a mapping
Marco Chiappero (2):
crypto: qat - fix reuse of completion variable
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marek Behún (2):
PCI: Call Max Payload Size-related fixup quirks early
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
Marek Marczykowski-Górecki (1):
PCI/MSI: Skip masking MSI-X on Xen PV
Martin KaFai Lau (1):
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Mathias Nyman (1):
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Mathieu Desnoyers (1):
ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
Mauro Carvalho Chehab (1):
media: uvc: don't do DMA on stack
Miaoqing Pan (1):
ath9k: fix sleeping in atomic context
Michael Ellerman (1):
powerpc/module64: Fix comment in R_PPC64_ENTRY handling
Mike Rapoport (1):
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
Mikulas Patocka (1):
parisc: fix crash with signals and alloca
Miquel Raynal (1):
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
Muchun Song (1):
mm/page_alloc: speed up the iteration of max_order
Nadezda Lutovinova (1):
usb: gadget: mv_u3d: request_irq() after initializing UDC
Nathan Chancellor (1):
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
Nguyen Dinh Phi (1):
tty: Fix data race between tiocsti() and flush_to_ldisc()
Oleksij Rempel (1):
MIPS: Malta: fix alignment of the devicetree buffer
Patryk Duda (1):
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Paul Blakey (1):
net/sched: cls_flower: Use mask for addr_type
Paul Gortmaker (1):
x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
Pavel Skripkin (5):
media: stkwebcam: fix memory leak in stk_camera_probe
m68k: emu: Fix invalid free in nfeth_cleanup()
media: go7007: remove redundant initialization
net: cipso: fix warnings in netlbl_cipsov4_add_std
Bluetooth: add timeout sanity check to hci_inquiry
Philipp Zabel (1):
tc358743: fix register i2c_rd/wr function fix
Qu Wenruo (1):
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
Rafael J. Wysocki (2):
PCI: PM: Enable PME if it can be signaled from D3cold
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Rafał Miłecki (1):
net: dsa: b53: Fix calculating number of switch ports
Randy Dunlap (4):
xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
openrisc: don't printk() unconditionally
ptp: dp83640: don't define PAGE0
ARC: export clear_user_page() for modules
Sean Anderson (2):
crypto: mxs-dcp - Check for DMA mapping errors
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Sean Young (1):
media: rc-loopback: return number of emitters rather than error
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Sergey Shtylyov (9):
i2c: highlander: add IRQ check
usb: gadget: udc: at91: add IRQ check
usb: phy: fsl-usb: add IRQ check
usb: phy: twl6030: add IRQ checks
usb: host: ohci-tmio: add IRQ check
usb: phy: tahvo: add IRQ check
i2c: iop3xx: fix deferred probing
i2c: s3c2410: fix IRQ check
i2c: mt65xx: fix IRQ check
Shai Malin (2):
qed: Fix the VF msix vectors flow
qede: Fix memset corruption
Stefan Berger (1):
certs: Trigger creation of RSA module signing key if it's not an RSA key
Stephan Gerhold (1):
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Stian Skjelstad (1):
udf_get_extendedattr() had no boundary checks.
Tetsuo Handa (1):
fbmem: don't allow too huge resolutions
Theodore Ts'o (1):
ext4: fix race writing to an inline_data file while its xattrs are changing
Thomas Hebb (1):
mmc: rtsx_pci: Fix long reads when clock is prescaled
Tianjia Zhang (1):
Smack: Fix wrong semantics in smk_access_entry()
Tom Rix (1):
USB: serial: mos7720: improve OOM-handling in read_mos_reg()
Tony Lindgren (4):
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
mmc: moxart: Fix issue with uninitialized dma_slave_config
Tuo Li (1):
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Vasily Averin (1):
memcg: enable accounting for pids in nested pid namespaces
Vasily Gorbik (1):
s390/disassembler: correct disassembly lines alignment
Wang Hai (1):
VMCI: fix NULL pointer dereference when unmapping queue pair
Xiyu Yang (1):
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Yajun Deng (1):
netlink: Deal with ESRCH error in nlmsg_notify()
Yang Li (1):
ethtool: Fix an error code in cxgb2.c
Yang Yingliang (1):
net: w5100: check return value after calling platform_get_resource()
Yoshihiro Shimoda (1):
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Zekun Shen (1):
ath9k: fix OOB read ar9300_eeprom_restore_internal
Zelin Deng (1):
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Zenghui Yu (1):
bcma: Fix memory leak for internally-handled cores
Zhen Lei (1):
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Zheyu Ma (5):
video: fbdev: kyro: fix a DoS bug by restricting user input
tty: serial: jsm: hold port lock when reporting modem line changes
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
video: fbdev: kyro: Error out if 'pixclock' equals zero
video: fbdev: riva: Error out if 'pixclock' equals zero
Zubin Mithra (1):
ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
zhenggy (1):
tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
zhenwei pi (1):
crypto: public_key: fix overflow during implicit conversion
王贇 (1):
net: fix NULL pointer reference in cipso_v4_doi_free
^ permalink raw reply [relevance 3%]
* Linux 4.4.284
@ 2021-09-22 11:12 4% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-22 11:12 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 4.4.284 kernel.
All users of the 4.4 kernel series must upgrade.
The updated 4.4.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.4.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/devicetree/bindings/mtd/gpmc-nand.txt | 2
Makefile | 2
arch/arc/Kconfig | 2
arch/arc/mm/cache.c | 2
arch/arm/boot/compressed/Makefile | 2
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 +-
arch/arm/kernel/Makefile | 6 +
arch/arm/kernel/return_address.c | 4
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2
arch/m68k/emu/nfeth.c | 4
arch/openrisc/kernel/entry.S | 2
arch/parisc/kernel/signal.c | 6 +
arch/powerpc/boot/crt0.S | 3
arch/powerpc/kernel/module_64.c | 2
arch/s390/kernel/dis.c | 2
arch/s390/kernel/jump_label.c | 2
arch/s390/net/bpf_jit_comp.c | 9 +
arch/x86/kernel/reboot.c | 3
arch/x86/kvm/x86.c | 4
arch/x86/mm/init_64.c | 6 -
arch/x86/xen/p2m.c | 4
arch/xtensa/Kconfig | 2
arch/xtensa/platforms/iss/console.c | 17 ++-
certs/Makefile | 8 +
drivers/ata/libata-core.c | 6 +
drivers/base/power/wakeirq.c | 12 ++
drivers/bcma/main.c | 6 -
drivers/block/Kconfig | 4
drivers/block/cryptoloop.c | 2
drivers/clk/mvebu/kirkwood.c | 1
drivers/crypto/mxs-dcp.c | 81 +++++++++--------
drivers/crypto/omap-sham.c | 2
drivers/crypto/qat/qat_common/adf_init.c | 5 -
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2
drivers/gpu/drm/msm/dsi/dsi.c | 6 -
drivers/i2c/busses/i2c-highlander.c | 2
drivers/i2c/busses/i2c-iop3xx.c | 6 -
drivers/i2c/busses/i2c-mt65xx.c | 2
drivers/i2c/busses/i2c-s3c2410.c | 2
drivers/iio/dac/ad5624r_spi.c | 18 +++
drivers/media/i2c/tc358743.c | 2
drivers/media/rc/rc-loopback.c | 2
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6 -
drivers/media/usb/dvb-usb/vp702x.c | 12 +-
drivers/media/usb/go7007/go7007-driver.c | 26 -----
drivers/media/usb/stkwebcam/stk-webcam.c | 6 -
drivers/media/usb/uvc/uvc_v4l2.c | 34 ++++---
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6 -
drivers/mmc/host/dw_mmc.c | 1
drivers/mmc/host/moxart-mmc.c | 1
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 ++++---
drivers/mtd/nand/cafe_nand.c | 4
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 1
drivers/net/ethernet/qlogic/qede/qede_main.c | 2
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 1
drivers/net/ethernet/rdc/r6040.c | 9 +
drivers/net/ethernet/renesas/sh_eth.c | 1
drivers/net/ethernet/xilinx/ll_temac_main.c | 4
drivers/net/phy/dp83640_reg.h | 2
drivers/net/wireless/ath/ath.h | 3
drivers/net/wireless/ath/ath5k/mac80211-ops.c | 2
drivers/net/wireless/ath/ath6kl/wmi.c | 4
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3
drivers/net/wireless/ath/ath9k/htc_drv_main.c | 2
drivers/net/wireless/ath/ath9k/hw.h | 1
drivers/net/wireless/ath/ath9k/main.c | 95 +++++++++++++++++++-
drivers/net/wireless/ath/key.c | 41 +++++---
drivers/parport/ieee1284_ops.c | 2
drivers/pci/msi.c | 3
drivers/pci/pci.c | 15 +--
drivers/pci/quirks.c | 13 +-
drivers/pci/syscall.c | 4
drivers/pinctrl/pinctrl-single.c | 1
drivers/platform/chrome/cros_ec_proto.c | 9 +
drivers/power/max17042_battery.c | 8 +
drivers/rtc/rtc-tps65910.c | 2
drivers/tty/hvc/hvsi.c | 19 +++-
drivers/tty/serial/8250/8250_pci.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/serial/jsm/jsm_neo.c | 2
drivers/tty/serial/jsm/jsm_tty.c | 3
drivers/tty/tty_io.c | 4
drivers/usb/gadget/function/u_ether.c | 5 -
drivers/usb/gadget/udc/at91_udc.c | 4
drivers/usb/gadget/udc/mv_u3d_core.c | 19 ++--
drivers/usb/host/ehci-orion.c | 8 +
drivers/usb/host/fotg210-hcd.c | 5 -
drivers/usb/host/fotg210.h | 5 -
drivers/usb/host/ohci-tmio.c | 3
drivers/usb/host/xhci.c | 24 ++---
drivers/usb/phy/phy-fsl-usb.c | 2
drivers/usb/phy/phy-isp1301.c | 2
drivers/usb/phy/phy-tahvo.c | 4
drivers/usb/phy/phy-twl6030-usb.c | 5 +
drivers/usb/serial/mos7720.c | 4
drivers/video/fbdev/asiliantfb.c | 3
drivers/video/fbdev/core/fbmem.c | 7 +
drivers/video/fbdev/kyro/fbdev.c | 8 +
drivers/video/fbdev/riva/fbdev.c | 3
fs/btrfs/inode.c | 2
fs/cifs/cifs_unicode.c | 9 -
fs/cifs/sess.c | 2
fs/ext4/inline.c | 6 +
fs/gfs2/lock_dlm.c | 5 +
fs/udf/misc.c | 13 ++
include/linux/pci.h | 5 -
include/linux/power/max17042_battery.h | 2
include/linux/skbuff.h | 2
include/uapi/linux/serial_reg.h | 1
lib/test_bpf.c | 13 ++
mm/kmemleak.c | 2
mm/page_alloc.c | 8 -
net/bluetooth/cmtp/cmtp.h | 2
net/bluetooth/hci_core.c | 14 ++
net/bluetooth/hci_event.c | 15 +++
net/bluetooth/sco.c | 11 +-
net/caif/chnl_net.c | 19 ----
net/dccp/minisocks.c | 2
net/ipv4/icmp.c | 23 ++++
net/ipv4/igmp.c | 2
net/ipv4/ip_output.c | 5 -
net/ipv4/route.c | 46 ++++++---
net/ipv4/tcp_ipv4.c | 5 -
net/l2tp/l2tp_core.c | 4
net/netlabel/netlabel_cipso_v4.c | 12 +-
net/netlink/af_netlink.c | 4
net/sunrpc/auth_gss/svcauth_gss.c | 2
net/tipc/socket.c | 2
net/unix/af_unix.c | 2
security/smack/smack_access.c | 17 +--
sound/core/pcm_lib.c | 2
133 files changed, 698 insertions(+), 340 deletions(-)
Adrian Bunk (1):
bnx2x: Fix enabling network interfaces without VFs
Andreas Obergschwandtner (1):
ARM: tegra: tamonten: Fix UART pad setting
Andrew Morton (1):
mm/kmemleak.c: make cond_resched() rate-limiting more efficient
Andy Shevchenko (1):
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
Ben Dooks (1):
ARM: 8918/2: only build return_address() if needed
Bob Peterson (1):
gfs2: Don't call dlm after protocol is unmounted
Christoph Hellwig (1):
cryptoloop: add a deprecation warning
Christophe JAILLET (2):
drm/msm/dsi: Fix some reference counted resource leaks
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Colin Ian King (2):
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
parport: remove non-zero check on count
Damien Le Moal (1):
libata: fix ata_host_start()
Dan Carpenter (2):
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
David Heidelberg (1):
ARM: 9105/1: atags_to_fdt: don't warn about stack size
Desmond Cheong Zhi Xi (2):
Bluetooth: fix repeated calls to sco_sock_kill
Bluetooth: skip invalid hci_sync_conn_complete_evt
Ding Hui (1):
cifs: fix wrong release in sess_alloc_buffer() failed path
Dinghao Liu (1):
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Dmitry Osipenko (1):
rtc: tps65910: Correct driver module alias
Dongliang Mu (2):
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
Eric Dumazet (3):
ipv4: make exception cache less predictible
net-caif: avoid user-triggerable WARN_ON(1)
net/af_unix: fix a data-race in unix_dgram_poll
Esben Haabendal (1):
net: ll_temac: Remove left-over debug message
Evgeny Novikov (1):
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Fangrui Song (1):
powerpc/boot: Delete unneeded .globl _zimage_start
Florian Fainelli (1):
r6040: Restore MDIO clock frequency after MAC reset
Giovanni Cabiddu (1):
crypto: qat - do not ignore errors from enable_vf2pf_comms()
Greg Kroah-Hartman (2):
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Linux 4.4.284
Grygorii Strashko (1):
PM / wakeirq: Enable dedicated wakeirq for suspend
Gustavo A. R. Silva (1):
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
Hans de Goede (1):
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
Heiko Carstens (1):
s390/jump_label: print real address in a case of a jump label bug
Hoang Le (1):
tipc: increase timeout in tipc_sk_enqueue()
Ilya Leoshkevich (1):
s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
J. Bruce Fields (1):
rpc: fix gss_svc_init cleanup on failure
Javier Martinez Canillas (1):
usb: phy: isp1301: Fix build warning when CONFIG_OF is disabled
Jiri Slaby (2):
xtensa: ISS: don't panic in rs_init
hvsi: don't panic on tty_register_driver failure
Johan Almbladh (2):
bpf/tests: Fix copy-and-paste error in double word test
bpf/tests: Do not PASS tests without actually testing the result
Jonathan Cameron (1):
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Jouni Malinen (5):
ath: Use safer key clearing with key cache entries
ath9k: Clear key cache explicitly on disabling hardware
ath: Export ath_hw_keysetmac()
ath: Modify ath_key_delete() to not need full key entry
ath9k: Postpone key cache entry deletion for TXQ frames reference it
Juergen Gross (1):
xen: fix setting of max_pfn in shared_info
Kai-Heng Feng (1):
Bluetooth: Move shutdown callback before flushing tx and rx queue
Kelly Devilliv (1):
usb: host: fotg210: fix the actual_length of an iso packet
Krzysztof Kozlowski (2):
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
power: supply: max17042: handle fails of reading status register
Krzysztof Wilczyński (1):
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Len Baker (1):
CIFS: Fix a potencially linear read overflow
Lin, Zhenpeng (1):
dccp: don't duplicate ccid when cloning dccp sock
Linus Walleij (1):
clk: kirkwood: Fix a clocking boot regression
Liu Jian (1):
igmp: Add ip_mc_list lock in ip_check_mc_rcu
Maciej W. Rozycki (1):
serial: 8250: Define RX trigger levels for OxSemi 950 devices
Maciej Żenczykowski (1):
usb: gadget: u_ether: fix a potential null pointer dereference
Marco Chiappero (1):
crypto: qat - fix reuse of completion variable
Marek Behún (2):
PCI: Call Max Payload Size-related fixup quirks early
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
Marek Marczykowski-Górecki (1):
PCI/MSI: Skip masking MSI-X on Xen PV
Martin KaFai Lau (1):
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Mathias Nyman (1):
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Mathieu Desnoyers (1):
ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
Mauro Carvalho Chehab (1):
media: uvc: don't do DMA on stack
Michael Ellerman (1):
powerpc/module64: Fix comment in R_PPC64_ENTRY handling
Mike Rapoport (1):
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
Mikulas Patocka (1):
parisc: fix crash with signals and alloca
Miquel Raynal (1):
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
Muchun Song (1):
mm/page_alloc: speed up the iteration of max_order
Nadezda Lutovinova (1):
usb: gadget: mv_u3d: request_irq() after initializing UDC
Nguyen Dinh Phi (1):
tty: Fix data race between tiocsti() and flush_to_ldisc()
Patryk Duda (1):
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Paul Gortmaker (1):
x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
Pavel Skripkin (5):
media: stkwebcam: fix memory leak in stk_camera_probe
m68k: emu: Fix invalid free in nfeth_cleanup()
media: go7007: remove redundant initialization
net: cipso: fix warnings in netlbl_cipsov4_add_std
Bluetooth: add timeout sanity check to hci_inquiry
Philipp Zabel (1):
tc358743: fix register i2c_rd/wr function fix
Qu Wenruo (1):
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
Rafael J. Wysocki (2):
PCI: PM: Enable PME if it can be signaled from D3cold
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Randy Dunlap (4):
xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
openrisc: don't printk() unconditionally
ptp: dp83640: don't define PAGE0
ARC: export clear_user_page() for modules
Sean Anderson (2):
crypto: mxs-dcp - Check for DMA mapping errors
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Sean Young (1):
media: rc-loopback: return number of emitters rather than error
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Sergey Shtylyov (9):
i2c: highlander: add IRQ check
usb: gadget: udc: at91: add IRQ check
usb: phy: fsl-usb: add IRQ check
usb: phy: twl6030: add IRQ checks
usb: host: ohci-tmio: add IRQ check
usb: phy: tahvo: add IRQ check
i2c: iop3xx: fix deferred probing
i2c: s3c2410: fix IRQ check
i2c: mt65xx: fix IRQ check
Shai Malin (1):
qede: Fix memset corruption
Stefan Berger (1):
certs: Trigger creation of RSA module signing key if it's not an RSA key
Stian Skjelstad (1):
udf_get_extendedattr() had no boundary checks.
Tetsuo Handa (1):
fbmem: don't allow too huge resolutions
Theodore Ts'o (1):
ext4: fix race writing to an inline_data file while its xattrs are changing
Thomas Hebb (1):
mmc: rtsx_pci: Fix long reads when clock is prescaled
Tianjia Zhang (1):
Smack: Fix wrong semantics in smk_access_entry()
Tom Rix (1):
USB: serial: mos7720: improve OOM-handling in read_mos_reg()
Tony Lindgren (3):
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
mmc: moxart: Fix issue with uninitialized dma_slave_config
Tuo Li (1):
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Vasily Gorbik (1):
s390/disassembler: correct disassembly lines alignment
Vineet Gupta (1):
ARC: fix allnoconfig build warning
Wang Hai (1):
VMCI: fix NULL pointer dereference when unmapping queue pair
Xiyu Yang (1):
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Yajun Deng (1):
netlink: Deal with ESRCH error in nlmsg_notify()
Yang Li (1):
ethtool: Fix an error code in cxgb2.c
Yoshihiro Shimoda (1):
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Zekun Shen (1):
ath9k: fix OOB read ar9300_eeprom_restore_internal
Zelin Deng (1):
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Zenghui Yu (1):
bcma: Fix memory leak for internally-handled cores
Zhen Lei (1):
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Zheyu Ma (5):
video: fbdev: kyro: fix a DoS bug by restricting user input
tty: serial: jsm: hold port lock when reporting modem line changes
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
video: fbdev: kyro: Error out if 'pixclock' equals zero
video: fbdev: riva: Error out if 'pixclock' equals zero
Zubin Mithra (1):
ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
王贇 (1):
net: fix NULL pointer reference in cipso_v4_doi_free
^ permalink raw reply [relevance 4%]
* [PATCH 4.14 000/216] 4.14.247-rc2 review
@ 2021-09-21 12:49 6% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-21 12:49 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 4.14.247 release.
There are 216 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 23 Sep 2021 12:48:34 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.247-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 4.14.247-rc2
Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Dinghao Liu <dinghao.liu@zju.edu.cn>
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Benjamin Hesmans <benjamin.hesmans@tessares.net>
netfilter: socket: icmp6: fix use-after-scope
Rafał Miłecki <rafal@milecki.pl>
net: dsa: b53: Fix calculating number of switch ports
Randy Dunlap <rdunlap@infradead.org>
ARC: export clear_user_page() for modules
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
Yang Li <yang.lee@linux.alibaba.com>
ethtool: Fix an error code in cxgb2.c
Daniele Palmas <dnlplm@gmail.com>
net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
George Cherian <george.cherian@marvell.com>
PCI: Add ACS quirks for Cavium multi-function devices
Marc Zyngier <maz@kernel.org>
mfd: Don't use irq_create_mapping() to resolve a mapping
Miquel Raynal <miquel.raynal@bootlin.com>
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
David Hildenbrand <david@redhat.com>
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
zhenggy <zhenggy@chinatelecom.cn>
tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
Eric Dumazet <edumazet@google.com>
net/af_unix: fix a data-race in unix_dgram_poll
Baptiste Lepers <baptiste.lepers@gmail.com>
events: Reuse value read using READ_ONCE instead of re-reading it
Hoang Le <hoang.h.le@dektech.com.au>
tipc: increase timeout in tipc_sk_enqueue()
Florian Fainelli <f.fainelli@gmail.com>
r6040: Restore MDIO clock frequency after MAC reset
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Lin, Zhenpeng <zplin@psu.edu>
dccp: don't duplicate ccid when cloning dccp sock
Randy Dunlap <rdunlap@infradead.org>
ptp: dp83640: don't define PAGE0
Eric Dumazet <edumazet@google.com>
net-caif: avoid user-triggerable WARN_ON(1)
Mike Rapoport <rppt@linux.ibm.com>
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
Juergen Gross <jgross@suse.com>
PM: base: power: don't try to use non-existing RTC for storing data
Adrian Bunk <bunk@kernel.org>
bnx2x: Fix enabling network interfaces without VFs
Juergen Gross <jgross@suse.com>
xen: reset legacy rtc flag for PV domU
Patryk Duda <pdk@semihalf.com>
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Vasily Averin <vvs@virtuozzo.com>
memcg: enable accounting for pids in nested pid namespaces
Liu Zixian <liuzixian4@huawei.com>
mm/hugetlb: initialize hugetlb_usage in mm_init
Pratik R. Sampat <psampat@linux.ibm.com>
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Maciej W. Rozycki <macro@orcam.me.uk>
scsi: BusLogic: Fix missing pr_cont() use
Mikulas Patocka <mpatocka@redhat.com>
parisc: fix crash with signals and alloca
Yang Yingliang <yangyingliang@huawei.com>
net: w5100: check return value after calling platform_get_resource()
王贇 <yun.wang@linux.alibaba.com>
net: fix NULL pointer reference in cipso_v4_doi_free
Miaoqing Pan <miaoqing@codeaurora.org>
ath9k: fix sleeping in atomic context
Zekun Shen <bruceshenzk@gmail.com>
ath9k: fix OOB read ar9300_eeprom_restore_internal
Colin Ian King <colin.king@canonical.com>
parport: remove non-zero check on count
Xiaotan Luo <lxt@rock-chips.com>
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Sugar Zhang <sugar.zhang@rock-chips.com>
ASoC: rockchip: i2s: Fix regmap_ops hang
Shuah Khan <skhan@linuxfoundation.org>
usbip:vhci_hcd USB port can get stuck in the disabled state
Anirudh Rayabharam <mail@anirudhrb.com>
usbip: give back URBs for unsent unlink requests during cleanup
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: musb: musb_dsps: request_irq() after initializing musb
Mathias Nyman <mathias.nyman@linux.intel.com>
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Ding Hui <dinghui@sangfor.com.cn>
cifs: fix wrong release in sess_alloc_buffer() failed path
Li Zhijian <lizhijian@cn.fujitsu.com>
selftests/bpf: Enlarge select() timeout for test_maps
Thomas Hebb <tommyhebb@gmail.com>
mmc: rtsx_pci: Fix long reads when clock is prescaled
Manish Narani <manish.narani@xilinx.com>
mmc: sdhci-of-arasan: Check return value of non-void funtions
Bob Peterson <rpeterso@redhat.com>
gfs2: Don't call dlm after protocol is unmounted
Kees Cook <keescook@chromium.org>
staging: rts5208: Fix get_ms_information() heap buffer size
J. Bruce Fields <bfields@redhat.com>
rpc: fix gss_svc_init cleanup on failure
Andreas Obergschwandtner <andreas.obergschwandtner@gmail.com>
ARM: tegra: tamonten: Fix UART pad setting
Tuo Li <islituo@gmail.com>
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: avoid circular locks in sco_sock_connect
Nathan Chancellor <nathan@kernel.org>
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: sdm660: use reg value for memory node
Hans Verkuil <hverkuil-cisco@xs4all.nl>
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Hans de Goede <hdegoede@redhat.com>
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: skip invalid hci_sync_conn_complete_evt
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
staging: ks7010: Fix the initialization of the 'sleep_status' structure
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Jiri Slaby <jslaby@suse.cz>
hvsi: don't panic on tty_register_driver failure
Jiri Slaby <jslaby@suse.cz>
xtensa: ISS: don't panic in rs_init
Maciej W. Rozycki <macro@orcam.me.uk>
serial: 8250: Define RX trigger levels for OxSemi 950 devices
Heiko Carstens <hca@linux.ibm.com>
s390/jump_label: print real address in a case of a jump label bug
Gustavo A. R. Silva <gustavoars@kernel.org>
flow_dissector: Fix out-of-bounds warnings
Gustavo A. R. Silva <gustavoars@kernel.org>
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: riva: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Do not PASS tests without actually testing the result
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix copy-and-paste error in double word test
Zheyu Ma <zheyuma97@gmail.com>
tty: serial: jsm: hold port lock when reporting modem line changes
Geert Uytterhoeven <geert+renesas@glider.be>
staging: board: Fix uninitialized spinlock when attaching genpd
Jack Pham <jackp@codeaurora.org>
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Maciej Żenczykowski <maze@google.com>
usb: gadget: u_ether: fix a potential null pointer dereference
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the actual_length of an iso packet
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Smack: Fix wrong semantics in smk_access_entry()
Yajun Deng <yajun.deng@linux.dev>
netlink: Deal with ESRCH error in nlmsg_notify()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: fix a DoS bug by restricting user input
David Heidelberg <david@ixit.cz>
ARM: dts: qcom: apq8064: correct clock names
Jonathan Cameron <Jonathan.Cameron@huawei.com>
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: dib8000: rewrite the init prbs logic
Oleksij Rempel <o.rempel@pengutronix.de>
MIPS: Malta: fix alignment of the devicetree buffer
Dan Carpenter <dan.carpenter@oracle.com>
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
Zhen Lei <thunder.leizhen@huawei.com>
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Randy Dunlap <rdunlap@infradead.org>
openrisc: don't printk() unconditionally
Jason Gunthorpe <jgg@nvidia.com>
vfio: Use config not menuconfig for VFIO_NOIOMMU
Jaehyoung Choi <jkkkkk.choi@samsung.com>
pinctrl: samsung: Fix pinctrl bank pin count
Leon Romanovsky <leonro@nvidia.com>
docs: Fix infiniband uverbs minor number
Leon Romanovsky <leonro@nvidia.com>
RDMA/iwcm: Release resources if iw_cm module initialization fails
Dmitry Torokhov <dmitry.torokhov@gmail.com>
HID: input: do not report stylus battery state as "full"
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
Hyun Kwon <hyun.kwon@xilinx.com>
PCI: xilinx-nwl: Enable the clock through CCF
Krzysztof Wilczyński <kw@linux.com>
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Marek Behún <kabel@kernel.org>
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
David Heidelberg <david@ixit.cz>
ARM: 9105/1: atags_to_fdt: don't warn about stack size
Hans de Goede <hdegoede@redhat.com>
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
Sean Young <sean@mess.org>
media: rc-loopback: return number of emitters rather than error
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: uvc: don't do DMA on stack
Wang Hai <wanghai38@huawei.com>
VMCI: fix NULL pointer dereference when unmapping queue pair
Arne Welzel <arne.welzel@corelight.com>
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
power: supply: max17042: handle fails of reading status register
Damien Le Moal <damien.lemoal@wdc.com>
block: bfq: fix bfq_set_next_ioprio_data()
zhenwei pi <pizhenwei@bytedance.com>
crypto: public_key: fix overflow during implicit conversion
Iwona Winiarska <iwona.winiarska@intel.com>
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
Harshvardhan Jha <harshvardhan.jha@oracle.com>
9p/xen: Fix end of loop tests for list_for_each_entry
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
include/linux/list.h: add a macro to test if entry is pointing to the head
Juergen Gross <jgross@suse.com>
xen: fix setting of max_pfn in shared_info
Kajol Jain <kjain@linux.ibm.com>
powerpc/perf/hv-gpci: Fix counter value parsing
Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
PCI/MSI: Skip masking MSI-X on Xen PV
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
Dmitry Osipenko <digetx@gmail.com>
rtc: tps65910: Correct driver module alias
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
fbmem: don't allow too huge resolutions
Linus Walleij <linus.walleij@linaro.org>
clk: kirkwood: Fix a clocking boot regression
Daniel Thompson <daniel.thompson@linaro.org>
backlight: pwm_bl: Improve bootloader/kernel device handover
Austin Kim <austin.kim@lge.com>
IMA: remove -Wmissing-prototypes warning
Zelin Deng <zelin.deng@linux.alibaba.com>
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Babu Moger <babu.moger@amd.com>
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
Nguyen Dinh Phi <phind.uet@gmail.com>
tty: Fix data race between tiocsti() and flush_to_ldisc()
Guillaume Nault <gnault@redhat.com>
netns: protect netns ID lookups with RCU
Stefan Wahren <stefan.wahren@i2se.com>
net: qualcomm: fix QCA7000 checksum handling
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
Eric Dumazet <edumazet@google.com>
ipv4: make exception cache less predictible
Zenghui Yu <yuzenghui@huawei.com>
bcma: Fix memory leak for internally-handled cores
Dan Carpenter <dan.carpenter@oracle.com>
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
Andy Duan <fugang.duan@nxp.com>
tty: serial: fsl_lpuart: fix the wrong mapbase value
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
Evgeny Novikov <novikov@ispras.ru>
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: mt65xx: fix IRQ check
Len Baker <len.baker@gmx.com>
CIFS: Fix a potencially linear read overflow
Tony Lindgren <tony@atomide.com>
mmc: moxart: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: s3c2410: fix IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: iop3xx: fix deferred probing
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: add timeout sanity check to hci_inquiry
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: gadget: mv_u3d: request_irq() after initializing UDC
Chih-Kang Chang <gary.chang@realtek.com>
mac80211: Fix insufficient headroom issue for AMSDU
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: tahvo: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: host: ohci-tmio: add IRQ check
Kai-Heng Feng <kai.heng.feng@canonical.com>
Bluetooth: Move shutdown callback before flushing tx and rx queue
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: twl6030: add IRQ checks
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: fsl-usb: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: gadget: udc: at91: add IRQ check
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
drm/msm/dsi: Fix some reference counted resource leaks
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix repeated calls to sco_sock_kill
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Colin Ian King <colin.king@canonical.com>
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Stephan Gerhold <stephan@gerhold.net>
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Enable PME if it can be signaled from D3cold
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
Dongliang Mu <mudongliangabcd@gmail.com>
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: highlander: add IRQ check
Pavel Skripkin <paskripkin@gmail.com>
net: cipso: fix warnings in netlbl_cipsov4_add_std
Martin KaFai Lau <kafai@fb.com>
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Dan Carpenter <dan.carpenter@oracle.com>
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
Pavel Skripkin <paskripkin@gmail.com>
media: go7007: remove redundant initialization
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
Geert Uytterhoeven <geert+renesas@glider.be>
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
Stefan Berger <stefanb@linux.ibm.com>
certs: Trigger creation of RSA module signing key if it's not an RSA key
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - use proper type for vf_mask
Phong Hoang <phong.hoang.wz@renesas.com>
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Tony Lindgren <tony@atomide.com>
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
Pavel Skripkin <paskripkin@gmail.com>
m68k: emu: Fix invalid free in nfeth_cleanup()
Stian Skjelstad <stian.skjelstad@gmail.com>
udf_get_extendedattr() had no boundary checks.
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not export adf_iov_putmsg()
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix reuse of completion variable
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - handle both source of interrupt in VF ISR
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not ignore errors from enable_vf2pf_comms()
Damien Le Moal <damien.lemoal@wdc.com>
libata: fix ata_host_start()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: add dev_busid sysfs entry for each subchannel
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Ruozhu Li <liruozhu@huawei.com>
nvme-rdma: don't update queue count when failing to set io queues
Pali Rohár <pali@kernel.org>
isofs: joliet: Fix iocharset=utf8 mount option
Jan Kara <jack@suse.cz>
udf: Check LVID earlier
Tony Lindgren <tony@atomide.com>
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
Hans de Goede <hdegoede@redhat.com>
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Check for DMA mapping errors
Jeongtae Park <jeongtae.park@gmail.com>
regmap: fix the offset of register error log
Marek Behún <kabel@kernel.org>
PCI: Call Max Payload Size-related fixup quirks early
Paul Gortmaker <paul.gortmaker@windriver.com>
x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
usb: host: xhci-rcar: Don't reload firmware after the completion
Qu Wenruo <wqu@suse.com>
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
Muchun Song <songmuchun@bytedance.com>
mm/page_alloc: speed up the iteration of max_order
Esben Haabendal <esben@geanix.com>
net: ll_temac: Remove left-over debug message
Fangrui Song <maskray@google.com>
powerpc/boot: Delete unneeded .globl _zimage_start
Michael Ellerman <mpe@ellerman.id.au>
powerpc/module64: Fix comment in R_PPC64_ENTRY handling
Christophe Leroy <christophe.leroy@c-s.fr>
crypto: talitos - reduce max key size for SEC1
Andrew Morton <akpm@linux-foundation.org>
mm/kmemleak.c: make cond_resched() rate-limiting more efficient
Vasily Gorbik <gor@linux.vnet.ibm.com>
s390/disassembler: correct disassembly lines alignment
Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
Christian Lamparter <chunkeey@gmail.com>
ath10k: fix recent bandwidth conversion bug
Chao Yu <yuchao0@huawei.com>
f2fs: fix potential overflow
Tom Rix <trix@redhat.com>
USB: serial: mos7720: improve OOM-handling in read_mos_reg()
Liu Jian <liujian56@huawei.com>
igmp: Add ip_mc_list lock in ip_check_mc_rcu
Pavel Skripkin <paskripkin@gmail.com>
media: stkwebcam: fix memory leak in stk_camera_probe
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
clk: fix build warning for orphan_list
Zubin Mithra <zsm@chromium.org>
ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
Ben Dooks <ben-linux@fluff.org>
ARM: 8918/2: only build return_address() if needed
Christoph Hellwig <hch@lst.de>
cryptoloop: add a deprecation warning
Kim Phillips <kim.phillips@amd.com>
perf/x86/amd/ibs: Work around erratum #1197
Xiaoyao Li <xiaoyao.li@intel.com>
perf/x86/intel/pt: Fix mask of num_address_ranges
Shai Malin <smalin@marvell.com>
qede: Fix memset corruption
Harini Katakam <harini.katakam@xilinx.com>
net: macb: Add a NULL check on desc_ptp
Shai Malin <smalin@marvell.com>
qed: Fix the VF msix vectors flow
Randy Dunlap <rdunlap@infradead.org>
xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
Theodore Ts'o <tytso@mit.edu>
ext4: fix race writing to an inline_data file while its xattrs are changing
-------------
Diffstat:
Documentation/admin-guide/devices.txt | 6 +-
.../devicetree/bindings/mtd/gpmc-nand.txt | 2 +-
Makefile | 4 +-
arch/arc/mm/cache.c | 2 +-
arch/arm/boot/compressed/Makefile | 2 +
arch/arm/boot/dts/qcom-apq8064.dtsi | 6 +-
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 ++--
arch/arm/kernel/Makefile | 6 +-
arch/arm/kernel/return_address.c | 4 --
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2 +-
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2 +-
arch/m68k/emu/nfeth.c | 4 +-
arch/mips/mti-malta/malta-dtshim.c | 2 +-
arch/openrisc/kernel/entry.S | 2 +
arch/parisc/kernel/signal.c | 6 ++
arch/powerpc/boot/crt0.S | 3 -
arch/powerpc/kernel/module_64.c | 2 +-
arch/powerpc/perf/hv-gpci.c | 2 +-
arch/s390/kernel/dis.c | 2 +-
arch/s390/kernel/jump_label.c | 2 +-
arch/x86/events/amd/ibs.c | 8 +++
arch/x86/events/intel/pt.c | 2 +-
arch/x86/kernel/cpu/intel_rdt_monitor.c | 6 ++
arch/x86/kernel/reboot.c | 3 +-
arch/x86/kvm/x86.c | 4 ++
arch/x86/mm/init_64.c | 6 +-
arch/x86/xen/enlighten_pv.c | 7 ++
arch/x86/xen/p2m.c | 4 +-
arch/xtensa/Kconfig | 2 +-
arch/xtensa/platforms/iss/console.c | 17 ++++-
block/bfq-iosched.c | 2 +-
block/blk-zoned.c | 6 --
certs/Makefile | 8 +++
drivers/ata/libata-core.c | 6 +-
drivers/ata/sata_dwc_460ex.c | 12 ++--
drivers/base/power/trace.c | 10 +++
drivers/base/regmap/regmap.c | 2 +-
drivers/bcma/main.c | 6 +-
drivers/block/Kconfig | 4 +-
drivers/block/cryptoloop.c | 2 +
drivers/clk/clk.c | 10 +--
drivers/clk/mvebu/kirkwood.c | 1 +
drivers/clocksource/sh_cmt.c | 30 ++++----
drivers/cpufreq/powernv-cpufreq.c | 16 ++++-
drivers/crypto/mxs-dcp.c | 81 ++++++++++++----------
drivers/crypto/omap-sham.c | 2 +-
.../crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_common/adf_common_drv.h | 8 +--
drivers/crypto/qat/qat_common/adf_init.c | 5 +-
drivers/crypto/qat/qat_common/adf_isr.c | 7 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3 +-
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12 ++--
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7 +-
.../qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4 +-
drivers/crypto/talitos.c | 4 ++
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2 +-
drivers/gpu/drm/msm/dsi/dsi.c | 6 +-
drivers/hid/hid-input.c | 2 -
drivers/i2c/busses/i2c-highlander.c | 2 +-
drivers/i2c/busses/i2c-iop3xx.c | 6 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-s3c2410.c | 2 +-
drivers/iio/dac/ad5624r_spi.c | 18 ++++-
drivers/infiniband/core/iwcm.c | 19 +++--
drivers/md/dm-crypt.c | 7 +-
drivers/media/dvb-frontends/dib8000.c | 58 +++++++++++-----
drivers/media/rc/rc-loopback.c | 2 +-
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6 +-
drivers/media/usb/dvb-usb/vp702x.c | 12 +++-
drivers/media/usb/em28xx/em28xx-input.c | 1 -
drivers/media/usb/go7007/go7007-driver.c | 26 -------
drivers/media/usb/stkwebcam/stk-webcam.c | 6 +-
drivers/media/usb/uvc/uvc_v4l2.c | 34 ++++++---
drivers/media/v4l2-core/v4l2-dv-timings.c | 4 +-
drivers/mfd/ab8500-core.c | 2 +-
drivers/mfd/stmpe.c | 4 +-
drivers/mfd/tc3589x.c | 2 +-
drivers/mfd/wm8994-irq.c | 2 +-
drivers/misc/aspeed-lpc-ctrl.c | 2 +-
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6 +-
drivers/mmc/host/dw_mmc.c | 1 +
drivers/mmc/host/moxart-mmc.c | 1 +
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 ++++++----
drivers/mmc/host/sdhci-of-arasan.c | 18 ++++-
drivers/mtd/nand/cafe_nand.c | 4 +-
drivers/net/dsa/b53/b53_common.c | 3 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2 +-
drivers/net/ethernet/cadence/macb_ptp.c | 11 ++-
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 1 +
drivers/net/ethernet/qlogic/qed/qed_main.c | 7 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 2 +-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 1 -
drivers/net/ethernet/qualcomm/qca_spi.c | 2 +-
drivers/net/ethernet/qualcomm/qca_uart.c | 2 +-
drivers/net/ethernet/rdc/r6040.c | 9 ++-
drivers/net/ethernet/renesas/sh_eth.c | 1 +
.../net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 +++--
drivers/net/ethernet/wiznet/w5100.c | 2 +
drivers/net/ethernet/xilinx/ll_temac_main.c | 4 +-
drivers/net/phy/dp83640_reg.h | 2 +-
drivers/net/usb/cdc_mbim.c | 5 ++
drivers/net/wireless/ath/ath10k/htt_rx.c | 42 ++++++-----
drivers/net/wireless/ath/ath6kl/wmi.c | 4 +-
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3 +-
drivers/net/wireless/ath/ath9k/hw.c | 12 ++--
drivers/nvme/host/rdma.c | 4 +-
drivers/parport/ieee1284_ops.c | 2 +-
drivers/pci/host/pci-aardvark.c | 11 ++-
drivers/pci/host/pcie-xilinx-nwl.c | 12 ++++
drivers/pci/msi.c | 3 +
drivers/pci/pci.c | 31 +++++----
drivers/pci/quirks.c | 17 +++--
drivers/pci/syscall.c | 4 +-
drivers/pinctrl/pinctrl-single.c | 1 +
drivers/pinctrl/samsung/pinctrl-samsung.c | 2 +-
drivers/platform/chrome/cros_ec_proto.c | 9 +++
drivers/power/supply/axp288_fuel_gauge.c | 4 +-
drivers/power/supply/max17042_battery.c | 8 ++-
drivers/rtc/rtc-tps65910.c | 2 +-
drivers/s390/cio/css.c | 17 +++++
drivers/scsi/BusLogic.c | 4 +-
drivers/scsi/qedi/qedi_main.c | 14 ++--
drivers/scsi/qla2xxx/qla_nvme.c | 5 +-
drivers/soc/qcom/smsm.c | 11 ++-
drivers/soc/rockchip/Kconfig | 4 +-
drivers/spi/spi-fsl-dspi.c | 1 +
drivers/spi/spi-pic32.c | 1 +
drivers/staging/board/board.c | 7 +-
drivers/staging/ks7010/ks7010_sdio.c | 2 +-
drivers/staging/rts5208/rtsx_scsi.c | 10 +--
drivers/tty/hvc/hvsi.c | 19 ++++-
drivers/tty/serial/8250/8250_pci.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/fsl_lpuart.c | 2 +-
drivers/tty/serial/jsm/jsm_neo.c | 2 +
drivers/tty/serial/jsm/jsm_tty.c | 3 +
drivers/tty/tty_io.c | 4 +-
drivers/usb/gadget/composite.c | 8 ++-
drivers/usb/gadget/function/u_ether.c | 5 +-
drivers/usb/gadget/udc/at91_udc.c | 4 +-
drivers/usb/gadget/udc/bdc/bdc_core.c | 3 +-
drivers/usb/gadget/udc/mv_u3d_core.c | 19 ++---
drivers/usb/host/ehci-orion.c | 8 ++-
drivers/usb/host/fotg210-hcd.c | 41 +++++------
drivers/usb/host/fotg210.h | 5 --
drivers/usb/host/ohci-tmio.c | 3 +
drivers/usb/host/xhci-rcar.c | 7 ++
drivers/usb/host/xhci.c | 24 +++----
drivers/usb/musb/musb_dsps.c | 13 ++--
drivers/usb/phy/phy-fsl-usb.c | 2 +
drivers/usb/phy/phy-tahvo.c | 4 +-
drivers/usb/phy/phy-twl6030-usb.c | 5 ++
drivers/usb/serial/mos7720.c | 4 +-
drivers/usb/usbip/vhci_hcd.c | 32 ++++++++-
drivers/vfio/Kconfig | 2 +-
drivers/video/backlight/pwm_bl.c | 54 ++++++++-------
drivers/video/fbdev/asiliantfb.c | 3 +
drivers/video/fbdev/core/fbmem.c | 7 ++
drivers/video/fbdev/kyro/fbdev.c | 8 +++
drivers/video/fbdev/riva/fbdev.c | 3 +
fs/btrfs/inode.c | 2 +-
fs/cifs/cifs_unicode.c | 9 +--
fs/cifs/sess.c | 2 +-
fs/ext4/inline.c | 6 ++
fs/f2fs/segment.c | 11 +--
fs/gfs2/lock_dlm.c | 5 ++
fs/isofs/inode.c | 27 ++++----
fs/isofs/isofs.h | 1 -
fs/isofs/joliet.c | 4 +-
fs/udf/misc.c | 13 +++-
fs/udf/super.c | 25 ++++---
include/crypto/public_key.h | 4 +-
include/linux/hugetlb.h | 9 +++
include/linux/list.h | 29 +++++---
include/linux/memory_hotplug.h | 4 +-
include/linux/pci.h | 5 +-
include/linux/power/max17042_battery.h | 2 +-
include/linux/skbuff.h | 2 +-
include/uapi/linux/serial_reg.h | 1 +
kernel/events/core.c | 2 +-
kernel/fork.c | 1 +
kernel/pid_namespace.c | 2 +-
lib/test_bpf.c | 13 +++-
mm/kmemleak.c | 2 +-
mm/memory_hotplug.c | 4 +-
mm/page_alloc.c | 8 +--
net/9p/trans_xen.c | 4 +-
net/bluetooth/cmtp/cmtp.h | 2 +-
net/bluetooth/hci_core.c | 14 ++++
net/bluetooth/hci_event.c | 15 ++++
net/bluetooth/sco.c | 50 ++++++-------
net/caif/chnl_net.c | 19 +----
net/core/flow_dissector.c | 12 ++--
net/core/net_namespace.c | 18 ++---
net/dccp/minisocks.c | 2 +
net/ipv4/icmp.c | 23 +++++-
net/ipv4/igmp.c | 2 +
net/ipv4/ip_output.c | 5 +-
net/ipv4/route.c | 46 +++++++-----
net/ipv4/tcp_input.c | 2 +-
net/ipv4/tcp_ipv4.c | 5 +-
net/ipv6/netfilter/nf_socket_ipv6.c | 4 +-
net/l2tp/l2tp_core.c | 4 +-
net/mac80211/tx.c | 4 +-
net/netlabel/netlabel_cipso_v4.c | 12 ++--
net/netlink/af_netlink.c | 4 +-
net/sched/sch_cbq.c | 2 +-
net/sunrpc/auth_gss/svcauth_gss.c | 2 +-
net/tipc/socket.c | 2 +-
net/unix/af_unix.c | 2 +-
security/integrity/ima/ima_mok.c | 2 +-
security/smack/smack_access.c | 17 +++--
sound/core/pcm_lib.c | 2 +-
sound/soc/intel/boards/bytcr_rt5640.c | 9 ++-
sound/soc/rockchip/rockchip_i2s.c | 35 ++++++----
tools/testing/selftests/bpf/test_maps.c | 2 +-
217 files changed, 1153 insertions(+), 663 deletions(-)
^ permalink raw reply [relevance 6%]
* [PATCH 4.9 000/174] 4.9.283-rc2 review
@ 2021-09-21 12:48 6% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-21 12:48 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 4.9.283 release.
There are 174 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 23 Sep 2021 12:42:28 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.283-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 4.9.283-rc2
Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Dinghao Liu <dinghao.liu@zju.edu.cn>
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Rafał Miłecki <rafal@milecki.pl>
net: dsa: b53: Fix calculating number of switch ports
Randy Dunlap <rdunlap@infradead.org>
ARC: export clear_user_page() for modules
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
Yang Li <yang.lee@linux.alibaba.com>
ethtool: Fix an error code in cxgb2.c
Daniele Palmas <dnlplm@gmail.com>
net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
Marc Zyngier <maz@kernel.org>
mfd: Don't use irq_create_mapping() to resolve a mapping
Miquel Raynal <miquel.raynal@bootlin.com>
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
Mike Rapoport <rppt@linux.ibm.com>
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
zhenggy <zhenggy@chinatelecom.cn>
tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
Eric Dumazet <edumazet@google.com>
net/af_unix: fix a data-race in unix_dgram_poll
Baptiste Lepers <baptiste.lepers@gmail.com>
events: Reuse value read using READ_ONCE instead of re-reading it
Hoang Le <hoang.h.le@dektech.com.au>
tipc: increase timeout in tipc_sk_enqueue()
Florian Fainelli <f.fainelli@gmail.com>
r6040: Restore MDIO clock frequency after MAC reset
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Lin, Zhenpeng <zplin@psu.edu>
dccp: don't duplicate ccid when cloning dccp sock
Randy Dunlap <rdunlap@infradead.org>
ptp: dp83640: don't define PAGE0
Eric Dumazet <edumazet@google.com>
net-caif: avoid user-triggerable WARN_ON(1)
Adrian Bunk <bunk@kernel.org>
bnx2x: Fix enabling network interfaces without VFs
Juergen Gross <jgross@suse.com>
xen: reset legacy rtc flag for PV domU
Patryk Duda <pdk@semihalf.com>
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Vasily Averin <vvs@virtuozzo.com>
memcg: enable accounting for pids in nested pid namespaces
Liu Zixian <liuzixian4@huawei.com>
mm/hugetlb: initialize hugetlb_usage in mm_init
Maciej W. Rozycki <macro@orcam.me.uk>
scsi: BusLogic: Fix missing pr_cont() use
Mikulas Patocka <mpatocka@redhat.com>
parisc: fix crash with signals and alloca
Yang Yingliang <yangyingliang@huawei.com>
net: w5100: check return value after calling platform_get_resource()
王贇 <yun.wang@linux.alibaba.com>
net: fix NULL pointer reference in cipso_v4_doi_free
Miaoqing Pan <miaoqing@codeaurora.org>
ath9k: fix sleeping in atomic context
Zekun Shen <bruceshenzk@gmail.com>
ath9k: fix OOB read ar9300_eeprom_restore_internal
Colin Ian King <colin.king@canonical.com>
parport: remove non-zero check on count
Anirudh Rayabharam <mail@anirudhrb.com>
usbip: give back URBs for unsent unlink requests during cleanup
Mathias Nyman <mathias.nyman@linux.intel.com>
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Ding Hui <dinghui@sangfor.com.cn>
cifs: fix wrong release in sess_alloc_buffer() failed path
Thomas Hebb <tommyhebb@gmail.com>
mmc: rtsx_pci: Fix long reads when clock is prescaled
Bob Peterson <rpeterso@redhat.com>
gfs2: Don't call dlm after protocol is unmounted
J. Bruce Fields <bfields@redhat.com>
rpc: fix gss_svc_init cleanup on failure
Andreas Obergschwandtner <andreas.obergschwandtner@gmail.com>
ARM: tegra: tamonten: Fix UART pad setting
Tuo Li <islituo@gmail.com>
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: avoid circular locks in sco_sock_connect
Nathan Chancellor <nathan@kernel.org>
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
Hans de Goede <hdegoede@redhat.com>
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: skip invalid hci_sync_conn_complete_evt
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
staging: ks7010: Fix the initialization of the 'sleep_status' structure
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Jiri Slaby <jslaby@suse.cz>
hvsi: don't panic on tty_register_driver failure
Jiri Slaby <jslaby@suse.cz>
xtensa: ISS: don't panic in rs_init
Maciej W. Rozycki <macro@orcam.me.uk>
serial: 8250: Define RX trigger levels for OxSemi 950 devices
Heiko Carstens <hca@linux.ibm.com>
s390/jump_label: print real address in a case of a jump label bug
Gustavo A. R. Silva <gustavoars@kernel.org>
flow_dissector: Fix out-of-bounds warnings
Gustavo A. R. Silva <gustavoars@kernel.org>
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: riva: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Do not PASS tests without actually testing the result
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix copy-and-paste error in double word test
Zheyu Ma <zheyuma97@gmail.com>
tty: serial: jsm: hold port lock when reporting modem line changes
Geert Uytterhoeven <geert+renesas@glider.be>
staging: board: Fix uninitialized spinlock when attaching genpd
Jack Pham <jackp@codeaurora.org>
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Maciej Żenczykowski <maze@google.com>
usb: gadget: u_ether: fix a potential null pointer dereference
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the actual_length of an iso packet
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Smack: Fix wrong semantics in smk_access_entry()
Yajun Deng <yajun.deng@linux.dev>
netlink: Deal with ESRCH error in nlmsg_notify()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: fix a DoS bug by restricting user input
Jonathan Cameron <Jonathan.Cameron@huawei.com>
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Oleksij Rempel <o.rempel@pengutronix.de>
MIPS: Malta: fix alignment of the devicetree buffer
Zhen Lei <thunder.leizhen@huawei.com>
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Randy Dunlap <rdunlap@infradead.org>
openrisc: don't printk() unconditionally
Jason Gunthorpe <jgg@nvidia.com>
vfio: Use config not menuconfig for VFIO_NOIOMMU
Krzysztof Wilczyński <kw@linux.com>
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Marek Behún <kabel@kernel.org>
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
David Heidelberg <david@ixit.cz>
ARM: 9105/1: atags_to_fdt: don't warn about stack size
Hans de Goede <hdegoede@redhat.com>
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
Sean Young <sean@mess.org>
media: rc-loopback: return number of emitters rather than error
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: uvc: don't do DMA on stack
Wang Hai <wanghai38@huawei.com>
VMCI: fix NULL pointer dereference when unmapping queue pair
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
power: supply: max17042: handle fails of reading status register
zhenwei pi <pizhenwei@bytedance.com>
crypto: public_key: fix overflow during implicit conversion
Juergen Gross <jgross@suse.com>
xen: fix setting of max_pfn in shared_info
Kajol Jain <kjain@linux.ibm.com>
powerpc/perf/hv-gpci: Fix counter value parsing
Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
PCI/MSI: Skip masking MSI-X on Xen PV
Dmitry Osipenko <digetx@gmail.com>
rtc: tps65910: Correct driver module alias
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
fbmem: don't allow too huge resolutions
Linus Walleij <linus.walleij@linaro.org>
clk: kirkwood: Fix a clocking boot regression
Austin Kim <austin.kim@lge.com>
IMA: remove -Wmissing-prototypes warning
Zelin Deng <zelin.deng@linux.alibaba.com>
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Nguyen Dinh Phi <phind.uet@gmail.com>
tty: Fix data race between tiocsti() and flush_to_ldisc()
Eric Dumazet <edumazet@google.com>
ipv4: make exception cache less predictible
Zenghui Yu <yuzenghui@huawei.com>
bcma: Fix memory leak for internally-handled cores
Dan Carpenter <dan.carpenter@oracle.com>
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
Evgeny Novikov <novikov@ispras.ru>
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: mt65xx: fix IRQ check
Len Baker <len.baker@gmx.com>
CIFS: Fix a potencially linear read overflow
Tony Lindgren <tony@atomide.com>
mmc: moxart: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: s3c2410: fix IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: iop3xx: fix deferred probing
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: add timeout sanity check to hci_inquiry
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: gadget: mv_u3d: request_irq() after initializing UDC
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: tahvo: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: host: ohci-tmio: add IRQ check
Kai-Heng Feng <kai.heng.feng@canonical.com>
Bluetooth: Move shutdown callback before flushing tx and rx queue
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: twl6030: add IRQ checks
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: fsl-usb: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: gadget: udc: at91: add IRQ check
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
drm/msm/dsi: Fix some reference counted resource leaks
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix repeated calls to sco_sock_kill
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Colin Ian King <colin.king@canonical.com>
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Stephan Gerhold <stephan@gerhold.net>
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Enable PME if it can be signaled from D3cold
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: highlander: add IRQ check
Pavel Skripkin <paskripkin@gmail.com>
net: cipso: fix warnings in netlbl_cipsov4_add_std
Martin KaFai Lau <kafai@fb.com>
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Dan Carpenter <dan.carpenter@oracle.com>
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
Pavel Skripkin <paskripkin@gmail.com>
media: go7007: remove redundant initialization
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
Stefan Berger <stefanb@linux.ibm.com>
certs: Trigger creation of RSA module signing key if it's not an RSA key
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - use proper type for vf_mask
Tony Lindgren <tony@atomide.com>
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
Pavel Skripkin <paskripkin@gmail.com>
m68k: emu: Fix invalid free in nfeth_cleanup()
Stian Skjelstad <stian.skjelstad@gmail.com>
udf_get_extendedattr() had no boundary checks.
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not export adf_iov_putmsg()
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix reuse of completion variable
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - handle both source of interrupt in VF ISR
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not ignore errors from enable_vf2pf_comms()
Damien Le Moal <damien.lemoal@wdc.com>
libata: fix ata_host_start()
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Jan Kara <jack@suse.cz>
udf: Check LVID earlier
Tony Lindgren <tony@atomide.com>
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
Hans de Goede <hdegoede@redhat.com>
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Check for DMA mapping errors
Jeongtae Park <jeongtae.park@gmail.com>
regmap: fix the offset of register error log
Marek Behún <kabel@kernel.org>
PCI: Call Max Payload Size-related fixup quirks early
Paul Gortmaker <paul.gortmaker@windriver.com>
x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
Qu Wenruo <wqu@suse.com>
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
Muchun Song <songmuchun@bytedance.com>
mm/page_alloc: speed up the iteration of max_order
Esben Haabendal <esben@geanix.com>
net: ll_temac: Remove left-over debug message
Fangrui Song <maskray@google.com>
powerpc/boot: Delete unneeded .globl _zimage_start
Michael Ellerman <mpe@ellerman.id.au>
powerpc/module64: Fix comment in R_PPC64_ENTRY handling
Christophe Leroy <christophe.leroy@c-s.fr>
crypto: talitos - reduce max key size for SEC1
Andrew Morton <akpm@linux-foundation.org>
mm/kmemleak.c: make cond_resched() rate-limiting more efficient
Vasily Gorbik <gor@linux.vnet.ibm.com>
s390/disassembler: correct disassembly lines alignment
Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
Jan Kara <jack@suse.cz>
gfs2: Don't clear SGID when inheriting ACLs
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
nvme-pci: Fix an error handling path in 'nvme_probe()'
Philipp Zabel <p.zabel@pengutronix.de>
tc358743: fix register i2c_rd/wr function fix
Grygorii Strashko <grygorii.strashko@ti.com>
PM / wakeirq: Enable dedicated wakeirq for suspend
Paul Blakey <paulb@mellanox.com>
net/sched: cls_flower: Use mask for addr_type
Tom Rix <trix@redhat.com>
USB: serial: mos7720: improve OOM-handling in read_mos_reg()
Javier Martinez Canillas <javier@osg.samsung.com>
usb: phy: isp1301: Fix build warning when CONFIG_OF is disabled
Liu Jian <liujian56@huawei.com>
igmp: Add ip_mc_list lock in ip_check_mc_rcu
Pavel Skripkin <paskripkin@gmail.com>
media: stkwebcam: fix memory leak in stk_camera_probe
Jouni Malinen <jouni@codeaurora.org>
ath9k: Postpone key cache entry deletion for TXQ frames reference it
Jouni Malinen <jouni@codeaurora.org>
ath: Modify ath_key_delete() to not need full key entry
Jouni Malinen <jouni@codeaurora.org>
ath: Export ath_hw_keysetmac()
Jouni Malinen <jouni@codeaurora.org>
ath9k: Clear key cache explicitly on disabling hardware
Jouni Malinen <jouni@codeaurora.org>
ath: Use safer key clearing with key cache entries
Zubin Mithra <zsm@chromium.org>
ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
Ben Dooks <ben-linux@fluff.org>
ARM: 8918/2: only build return_address() if needed
Christoph Hellwig <hch@lst.de>
cryptoloop: add a deprecation warning
Kim Phillips <kim.phillips@amd.com>
perf/x86/amd/ibs: Work around erratum #1197
Shai Malin <smalin@marvell.com>
qede: Fix memset corruption
Shai Malin <smalin@marvell.com>
qed: Fix the VF msix vectors flow
Randy Dunlap <rdunlap@infradead.org>
xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
mtd: nand: atmel_nand: remove build warning in atmel_nand_remove()
Theodore Ts'o <tytso@mit.edu>
ext4: fix race writing to an inline_data file while its xattrs are changing
-------------
Diffstat:
.../devicetree/bindings/mtd/gpmc-nand.txt | 2 +-
Makefile | 4 +-
arch/arc/mm/cache.c | 2 +-
arch/arm/boot/compressed/Makefile | 2 +
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 ++--
arch/arm/kernel/Makefile | 6 +-
arch/arm/kernel/return_address.c | 4 -
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2 +-
arch/m68k/emu/nfeth.c | 4 +-
arch/mips/mti-malta/malta-dtshim.c | 2 +-
arch/openrisc/kernel/entry.S | 2 +
arch/parisc/kernel/signal.c | 6 ++
arch/powerpc/boot/crt0.S | 3 -
arch/powerpc/kernel/module_64.c | 2 +-
arch/powerpc/perf/hv-gpci.c | 2 +-
arch/s390/kernel/dis.c | 2 +-
arch/s390/kernel/jump_label.c | 2 +-
arch/x86/events/amd/ibs.c | 8 ++
arch/x86/kernel/reboot.c | 3 +-
arch/x86/kvm/x86.c | 4 +
arch/x86/mm/init_64.c | 6 +-
arch/x86/xen/enlighten.c | 7 ++
arch/x86/xen/p2m.c | 4 +-
arch/xtensa/Kconfig | 2 +-
arch/xtensa/platforms/iss/console.c | 17 +++-
certs/Makefile | 8 ++
drivers/ata/libata-core.c | 6 +-
drivers/ata/sata_dwc_460ex.c | 12 +--
drivers/base/power/wakeirq.c | 12 ++-
drivers/base/regmap/regmap.c | 2 +-
drivers/bcma/main.c | 6 +-
drivers/block/Kconfig | 4 +-
drivers/block/cryptoloop.c | 2 +
drivers/clk/mvebu/kirkwood.c | 1 +
drivers/crypto/mxs-dcp.c | 81 +++++++++---------
drivers/crypto/omap-sham.c | 2 +-
.../crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_common/adf_common_drv.h | 8 +-
drivers/crypto/qat/qat_common/adf_init.c | 5 +-
drivers/crypto/qat/qat_common/adf_isr.c | 7 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3 +-
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12 +--
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7 +-
.../qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4 +-
drivers/crypto/talitos.c | 4 +
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2 +-
drivers/gpu/drm/msm/dsi/dsi.c | 6 +-
drivers/i2c/busses/i2c-highlander.c | 2 +-
drivers/i2c/busses/i2c-iop3xx.c | 6 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-s3c2410.c | 2 +-
drivers/iio/dac/ad5624r_spi.c | 18 +++-
drivers/media/i2c/tc358743.c | 2 +-
drivers/media/rc/rc-loopback.c | 2 +-
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6 +-
drivers/media/usb/dvb-usb/vp702x.c | 12 ++-
drivers/media/usb/go7007/go7007-driver.c | 26 ------
drivers/media/usb/stkwebcam/stk-webcam.c | 6 +-
drivers/media/usb/uvc/uvc_v4l2.c | 34 +++++---
drivers/mfd/ab8500-core.c | 2 +-
drivers/mfd/stmpe.c | 4 +-
drivers/mfd/tc3589x.c | 2 +-
drivers/mfd/wm8994-irq.c | 2 +-
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6 +-
drivers/mmc/host/dw_mmc.c | 1 +
drivers/mmc/host/moxart-mmc.c | 1 +
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 +++++---
drivers/mtd/nand/atmel_nand.c | 1 -
drivers/mtd/nand/cafe_nand.c | 4 +-
drivers/net/dsa/b53/b53_common.c | 3 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2 +-
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 1 +
drivers/net/ethernet/qlogic/qed/qed_main.c | 7 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 2 +-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 1 -
drivers/net/ethernet/rdc/r6040.c | 9 +-
drivers/net/ethernet/renesas/sh_eth.c | 1 +
.../net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 ++--
drivers/net/ethernet/wiznet/w5100.c | 2 +
drivers/net/ethernet/xilinx/ll_temac_main.c | 4 +-
drivers/net/phy/dp83640_reg.h | 2 +-
drivers/net/usb/cdc_mbim.c | 5 ++
drivers/net/wireless/ath/ath.h | 3 +-
drivers/net/wireless/ath/ath5k/mac80211-ops.c | 2 +-
drivers/net/wireless/ath/ath6kl/wmi.c | 4 +-
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3 +-
drivers/net/wireless/ath/ath9k/htc_drv_main.c | 2 +-
drivers/net/wireless/ath/ath9k/hw.c | 12 +--
drivers/net/wireless/ath/ath9k/hw.h | 1 +
drivers/net/wireless/ath/ath9k/main.c | 95 +++++++++++++++++++++-
drivers/net/wireless/ath/key.c | 41 ++++++----
drivers/nvme/host/pci.c | 7 +-
drivers/parport/ieee1284_ops.c | 2 +-
drivers/pci/msi.c | 3 +
drivers/pci/pci.c | 15 ++--
drivers/pci/quirks.c | 13 +--
drivers/pci/syscall.c | 4 +-
drivers/pinctrl/pinctrl-single.c | 1 +
drivers/platform/chrome/cros_ec_proto.c | 9 ++
drivers/power/supply/axp288_fuel_gauge.c | 4 +-
drivers/power/supply/max17042_battery.c | 8 +-
drivers/rtc/rtc-tps65910.c | 2 +-
drivers/scsi/BusLogic.c | 4 +-
drivers/soc/qcom/smsm.c | 11 ++-
drivers/spi/spi-pic32.c | 1 +
drivers/staging/board/board.c | 7 +-
drivers/staging/ks7010/ks7010_sdio.c | 2 +-
drivers/tty/hvc/hvsi.c | 19 ++++-
drivers/tty/serial/8250/8250_pci.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/jsm/jsm_neo.c | 2 +
drivers/tty/serial/jsm/jsm_tty.c | 3 +
drivers/tty/tty_io.c | 4 +-
drivers/usb/gadget/composite.c | 8 +-
drivers/usb/gadget/function/u_ether.c | 5 +-
drivers/usb/gadget/udc/at91_udc.c | 4 +-
drivers/usb/gadget/udc/mv_u3d_core.c | 19 +++--
drivers/usb/host/ehci-orion.c | 8 +-
drivers/usb/host/fotg210-hcd.c | 41 +++++-----
drivers/usb/host/fotg210.h | 5 --
drivers/usb/host/ohci-tmio.c | 3 +
drivers/usb/host/xhci.c | 24 +++---
drivers/usb/phy/phy-fsl-usb.c | 2 +
drivers/usb/phy/phy-isp1301.c | 2 +-
drivers/usb/phy/phy-tahvo.c | 4 +-
drivers/usb/phy/phy-twl6030-usb.c | 5 ++
drivers/usb/serial/mos7720.c | 4 +-
drivers/usb/usbip/vhci_hcd.c | 24 ++++++
drivers/vfio/Kconfig | 2 +-
drivers/video/fbdev/asiliantfb.c | 3 +
drivers/video/fbdev/core/fbmem.c | 7 ++
drivers/video/fbdev/kyro/fbdev.c | 8 ++
drivers/video/fbdev/riva/fbdev.c | 3 +
fs/btrfs/inode.c | 2 +-
fs/cifs/cifs_unicode.c | 9 +-
fs/cifs/sess.c | 2 +-
fs/ext4/inline.c | 6 ++
fs/gfs2/acl.c | 27 +++---
fs/gfs2/lock_dlm.c | 5 ++
fs/udf/misc.c | 13 ++-
fs/udf/super.c | 25 ++++--
include/crypto/public_key.h | 4 +-
include/linux/hugetlb.h | 9 ++
include/linux/pci.h | 5 +-
include/linux/power/max17042_battery.h | 2 +-
include/linux/skbuff.h | 2 +-
include/uapi/linux/serial_reg.h | 1 +
kernel/events/core.c | 2 +-
kernel/fork.c | 1 +
kernel/pid_namespace.c | 2 +-
lib/test_bpf.c | 13 ++-
mm/kmemleak.c | 2 +-
mm/page_alloc.c | 8 +-
net/bluetooth/cmtp/cmtp.h | 2 +-
net/bluetooth/hci_core.c | 14 ++++
net/bluetooth/hci_event.c | 15 ++++
net/bluetooth/sco.c | 50 +++++-------
net/caif/chnl_net.c | 19 +----
net/core/flow_dissector.c | 12 ++-
net/dccp/minisocks.c | 2 +
net/ipv4/icmp.c | 23 +++++-
net/ipv4/igmp.c | 2 +
net/ipv4/ip_output.c | 5 +-
net/ipv4/route.c | 46 +++++++----
net/ipv4/tcp_input.c | 2 +-
net/ipv4/tcp_ipv4.c | 5 +-
net/l2tp/l2tp_core.c | 4 +-
net/netlabel/netlabel_cipso_v4.c | 12 +--
net/netlink/af_netlink.c | 4 +-
net/sched/cls_flower.c | 4 +
net/sunrpc/auth_gss/svcauth_gss.c | 2 +-
net/tipc/socket.c | 2 +-
net/unix/af_unix.c | 2 +-
security/integrity/ima/ima_mok.c | 2 +-
security/smack/smack_access.c | 17 ++--
sound/core/pcm_lib.c | 2 +-
sound/soc/intel/boards/bytcr_rt5640.c | 9 +-
178 files changed, 927 insertions(+), 488 deletions(-)
^ permalink raw reply [relevance 6%]
* [PATCH 5.4 128/260] Bluetooth: avoid circular locks in sco_sock_connect
2021-09-20 16:40 7% [PATCH 5.4 000/260] 5.4.148-rc1 review Greg Kroah-Hartman
` (3 preceding siblings ...)
2021-09-20 16:42 10% ` [PATCH 5.4 127/260] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
@ 2021-09-20 16:42 9% ` Greg Kroah-Hartman
4 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:42 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 818f244aee46..1915943bb646 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -234,44 +234,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -279,7 +267,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -289,9 +277,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -573,6 +558,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -587,12 +573,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH 5.4 127/260] Bluetooth: schedule SCO timeouts with delayed_work
2021-09-20 16:40 7% [PATCH 5.4 000/260] 5.4.148-rc1 review Greg Kroah-Hartman
` (2 preceding siblings ...)
2021-09-20 16:42 11% ` [PATCH 5.4 112/260] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
@ 2021-09-20 16:42 10% ` Greg Kroah-Hartman
2021-09-20 16:42 9% ` [PATCH 5.4 128/260] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
4 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:42 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+2f6d7c28bb4bf7e82060,
Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit ba316be1b6a00db7126ed9a39f9bee434a508043 ]
struct sock.sk_timer should be used as a sock cleanup timer. However,
SCO uses it to implement sock timeouts.
This causes issues because struct sock.sk_timer's callback is run in
an IRQ context, and the timer callback function sco_sock_timeout takes
a spin lock on the socket. However, other functions such as
sco_conn_del and sco_conn_ready take the spin lock with interrupts
enabled.
This inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} lock usage could
lead to deadlocks as reported by Syzbot [1]:
CPU0
----
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
<Interrupt>
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
To fix this, we use delayed work to implement SCO sock timouts
instead. This allows us to avoid taking the spin lock on the socket in
an IRQ context, and corrects the misuse of struct sock.sk_timer.
As a note, cancel_delayed_work is used instead of
cancel_delayed_work_sync in sco_sock_set_timer and
sco_sock_clear_timer to avoid a deadlock. In the future, the call to
bh_lock_sock inside sco_sock_timeout should be changed to lock_sock to
synchronize with other functions using lock_sock. However, since
sco_sock_set_timer and sco_sock_clear_timer are sometimes called under
the locked socket (in sco_connect and __sco_sock_close),
cancel_delayed_work_sync might cause them to sleep until an
sco_sock_timeout that has started finishes running. But
sco_sock_timeout would also sleep until it can grab the lock_sock.
Using cancel_delayed_work is fine because sco_sock_timeout does not
change from run to run, hence there is no functional difference
between:
1. waiting for a timeout to finish running before scheduling another
timeout
2. scheduling another timeout while a timeout is running.
Link: https://syzkaller.appspot.com/bug?id=9089d89de0502e120f234ca0fc8a703f7368b31e [1]
Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Tested-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 35 +++++++++++++++++++++++++++++------
1 file changed, 29 insertions(+), 6 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 1b7540cb8e5c..818f244aee46 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -48,6 +48,8 @@ struct sco_conn {
spinlock_t lock;
struct sock *sk;
+ struct delayed_work timeout_work;
+
unsigned int mtu;
};
@@ -73,9 +75,20 @@ struct sco_pinfo {
#define SCO_CONN_TIMEOUT (HZ * 40)
#define SCO_DISCONN_TIMEOUT (HZ * 2)
-static void sco_sock_timeout(struct timer_list *t)
+static void sco_sock_timeout(struct work_struct *work)
{
- struct sock *sk = from_timer(sk, t, sk_timer);
+ struct sco_conn *conn = container_of(work, struct sco_conn,
+ timeout_work.work);
+ struct sock *sk;
+
+ sco_conn_lock(conn);
+ sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
+ sco_conn_unlock(conn);
+
+ if (!sk)
+ return;
BT_DBG("sock %p state %d", sk, sk->sk_state);
@@ -89,14 +102,21 @@ static void sco_sock_timeout(struct timer_list *t)
static void sco_sock_set_timer(struct sock *sk, long timeout)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d timeout %ld", sk, sk->sk_state, timeout);
- sk_reset_timer(sk, &sk->sk_timer, jiffies + timeout);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
+ schedule_delayed_work(&sco_pi(sk)->conn->timeout_work, timeout);
}
static void sco_sock_clear_timer(struct sock *sk)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d", sk, sk->sk_state);
- sk_stop_timer(sk, &sk->sk_timer);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
}
/* ---- SCO connections ---- */
@@ -176,6 +196,9 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_chan_del(sk, err);
bh_unlock_sock(sk);
sock_put(sk);
+
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
}
hcon->sco_data = NULL;
@@ -190,6 +213,8 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
+
if (parent)
bt_accept_enqueue(parent, sk, true);
}
@@ -484,8 +509,6 @@ static struct sock *sco_sock_alloc(struct net *net, struct socket *sock,
sco_pi(sk)->setting = BT_VOICE_CVSD_16BIT;
- timer_setup(&sk->sk_timer, sco_sock_timeout, 0);
-
bt_sock_link(&sco_sk_list, sk);
return sk;
}
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH 5.4 112/260] Bluetooth: skip invalid hci_sync_conn_complete_evt
2021-09-20 16:40 7% [PATCH 5.4 000/260] 5.4.148-rc1 review Greg Kroah-Hartman
2021-09-20 16:40 10% ` [PATCH 5.4 003/260] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
2021-09-20 16:41 11% ` [PATCH 5.4 085/260] drm: avoid blocking in drm_clients_infos rcu section Greg Kroah-Hartman
@ 2021-09-20 16:42 11% ` Greg Kroah-Hartman
2021-09-20 16:42 10% ` [PATCH 5.4 127/260] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
2021-09-20 16:42 9% ` [PATCH 5.4 128/260] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
4 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:42 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+66264bf2fd0476be7e6c,
Desmond Cheong Zhi Xi, Marcel Holtmann, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index e8e7f108b016..82e42d8e2ea0 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -4202,6 +4202,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.4 085/260] drm: avoid blocking in drm_clients_infos rcu section
2021-09-20 16:40 7% [PATCH 5.4 000/260] 5.4.148-rc1 review Greg Kroah-Hartman
2021-09-20 16:40 10% ` [PATCH 5.4 003/260] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
@ 2021-09-20 16:41 11% ` Greg Kroah-Hartman
2021-09-20 16:42 11% ` [PATCH 5.4 112/260] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
` (2 subsequent siblings)
4 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:41 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Daniel Vetter,
Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 5eff9585de220cdd131237f5665db5e6c6bdf590 ]
Inside drm_clients_info, the rcu_read_lock is held to lock
pid_task()->comm. However, within this protected section, a call to
drm_is_current_master is made, which involves a mutex lock in a future
patch. However, this is illegal because the mutex lock might block
while in the RCU read-side critical section.
Since drm_is_current_master isn't protected by rcu_read_lock, we avoid
this by moving it out of the RCU critical section.
The following report came from intel-gfx ci's
igt@debugfs_test@read_all_entries testcase:
=============================
[ BUG: Invalid wait context ]
5.13.0-CI-Patchwork_20515+ #1 Tainted: G W
-----------------------------
debugfs_test/1101 is trying to lock:
ffff888132d901a8 (&dev->master_mutex){+.+.}-{3:3}, at:
drm_is_current_master+0x1e/0x50
other info that might help us debug this:
context-{4:4}
3 locks held by debugfs_test/1101:
#0: ffff88810fdffc90 (&p->lock){+.+.}-{3:3}, at:
seq_read_iter+0x53/0x3b0
#1: ffff888132d90240 (&dev->filelist_mutex){+.+.}-{3:3}, at:
drm_clients_info+0x63/0x2a0
#2: ffffffff82734220 (rcu_read_lock){....}-{1:2}, at:
drm_clients_info+0x1b1/0x2a0
stack backtrace:
CPU: 8 PID: 1101 Comm: debugfs_test Tainted: G W
5.13.0-CI-Patchwork_20515+ #1
Hardware name: Intel Corporation CometLake Client Platform/CometLake S
UDIMM (ERB/CRB), BIOS CMLSFWR1.R00.1263.D00.1906260926 06/26/2019
Call Trace:
dump_stack+0x7f/0xad
__lock_acquire.cold.78+0x2af/0x2ca
lock_acquire+0xd3/0x300
? drm_is_current_master+0x1e/0x50
? __mutex_lock+0x76/0x970
? lockdep_hardirqs_on+0xbf/0x130
__mutex_lock+0xab/0x970
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
drm_is_current_master+0x1e/0x50
drm_clients_info+0x107/0x2a0
seq_read_iter+0x178/0x3b0
seq_read+0x104/0x150
full_proxy_read+0x4e/0x80
vfs_read+0xa5/0x1b0
ksys_read+0x5a/0xd0
do_syscall_64+0x39/0xb0
entry_SYSCALL_64_after_hwframe+0x44/0xae
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-3-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_debugfs.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/gpu/drm/drm_debugfs.c b/drivers/gpu/drm/drm_debugfs.c
index 00debd02c322..0ba92428ef56 100644
--- a/drivers/gpu/drm/drm_debugfs.c
+++ b/drivers/gpu/drm/drm_debugfs.c
@@ -91,6 +91,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
mutex_lock(&dev->filelist_mutex);
list_for_each_entry_reverse(priv, &dev->filelist, lhead) {
struct task_struct *task;
+ bool is_current_master = drm_is_current_master(priv);
rcu_read_lock(); /* locks pid_task()->comm */
task = pid_task(priv->pid, PIDTYPE_PID);
@@ -99,7 +100,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
task ? task->comm : "<unknown>",
pid_vnr(priv->pid),
priv->minor->index,
- drm_is_current_master(priv) ? 'y' : 'n',
+ is_current_master ? 'y' : 'n',
priv->authenticated ? 'y' : 'n',
from_kuid_munged(seq_user_ns(m), uid),
priv->magic);
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.4 003/260] btrfs: reset replace target device to allocation state on close
2021-09-20 16:40 7% [PATCH 5.4 000/260] 5.4.148-rc1 review Greg Kroah-Hartman
@ 2021-09-20 16:40 10% ` Greg Kroah-Hartman
2021-09-20 16:41 11% ` [PATCH 5.4 085/260] drm: avoid blocking in drm_clients_infos rcu section Greg Kroah-Hartman
` (3 subsequent siblings)
4 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:40 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, David Sterba, Anand Jain,
Desmond Cheong Zhi Xi
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
commit 0d977e0eba234e01a60bdde27314dc21374201b3 upstream.
This crash was observed with a failed assertion on device close:
BTRFS: Transaction aborted (error -28)
WARNING: CPU: 1 PID: 3902 at fs/btrfs/extent-tree.c:2150 btrfs_run_delayed_refs+0x1d2/0x1e0 [btrfs]
Modules linked in: btrfs blake2b_generic libcrc32c crc32c_intel xor zstd_decompress zstd_compress xxhash lzo_compress lzo_decompress raid6_pq loop
CPU: 1 PID: 3902 Comm: kworker/u8:4 Not tainted 5.14.0-rc5-default+ #1532
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-59-gc9ba527-rebuilt.opensuse.org 04/01/2014
Workqueue: events_unbound btrfs_async_reclaim_metadata_space [btrfs]
RIP: 0010:btrfs_run_delayed_refs+0x1d2/0x1e0 [btrfs]
RSP: 0018:ffffb7a5452d7d80 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffabee13c4 RDI: 00000000ffffffff
RBP: ffff97834176a378 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff97835195d388
R13: 0000000005b08000 R14: ffff978385484000 R15: 000000000000016c
FS: 0000000000000000(0000) GS:ffff9783bd800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056190d003fe8 CR3: 000000002a81e005 CR4: 0000000000170ea0
Call Trace:
flush_space+0x197/0x2f0 [btrfs]
btrfs_async_reclaim_metadata_space+0x139/0x300 [btrfs]
process_one_work+0x262/0x5e0
worker_thread+0x4c/0x320
? process_one_work+0x5e0/0x5e0
kthread+0x144/0x170
? set_kthread_struct+0x40/0x40
ret_from_fork+0x1f/0x30
irq event stamp: 19334989
hardirqs last enabled at (19334997): [<ffffffffab0e0c87>] console_unlock+0x2b7/0x400
hardirqs last disabled at (19335006): [<ffffffffab0e0d0d>] console_unlock+0x33d/0x400
softirqs last enabled at (19334900): [<ffffffffaba0030d>] __do_softirq+0x30d/0x574
softirqs last disabled at (19334893): [<ffffffffab0721ec>] irq_exit_rcu+0x12c/0x140
---[ end trace 45939e308e0dd3c7 ]---
BTRFS: error (device vdd) in btrfs_run_delayed_refs:2150: errno=-28 No space left
BTRFS info (device vdd): forced readonly
BTRFS warning (device vdd): failed setting block group ro: -30
BTRFS info (device vdd): suspending dev_replace for unmount
assertion failed: !test_bit(BTRFS_DEV_STATE_REPLACE_TGT, &device->dev_state), in fs/btrfs/volumes.c:1150
------------[ cut here ]------------
kernel BUG at fs/btrfs/ctree.h:3431!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 1 PID: 3982 Comm: umount Tainted: G W 5.14.0-rc5-default+ #1532
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-59-gc9ba527-rebuilt.opensuse.org 04/01/2014
RIP: 0010:assertfail.constprop.0+0x18/0x1a [btrfs]
RSP: 0018:ffffb7a5454c7db8 EFLAGS: 00010246
RAX: 0000000000000068 RBX: ffff978364b91c00 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffffabee13c4 RDI: 00000000ffffffff
RBP: ffff9783523a4c00 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff9783523a4d18
R13: 0000000000000000 R14: 0000000000000004 R15: 0000000000000003
FS: 00007f61c8f42800(0000) GS:ffff9783bd800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056190cffa810 CR3: 0000000030b96002 CR4: 0000000000170ea0
Call Trace:
btrfs_close_one_device.cold+0x11/0x55 [btrfs]
close_fs_devices+0x44/0xb0 [btrfs]
btrfs_close_devices+0x48/0x160 [btrfs]
generic_shutdown_super+0x69/0x100
kill_anon_super+0x14/0x30
btrfs_kill_super+0x12/0x20 [btrfs]
deactivate_locked_super+0x2c/0xa0
cleanup_mnt+0x144/0x1b0
task_work_run+0x59/0xa0
exit_to_user_mode_loop+0xe7/0xf0
exit_to_user_mode_prepare+0xaf/0xf0
syscall_exit_to_user_mode+0x19/0x50
do_syscall_64+0x4a/0x90
entry_SYSCALL_64_after_hwframe+0x44/0xae
This happens when close_ctree is called while a dev_replace hasn't
completed. In close_ctree, we suspend the dev_replace, but keep the
replace target around so that we can resume the dev_replace procedure
when we mount the root again. This is the call trace:
close_ctree():
btrfs_dev_replace_suspend_for_unmount();
btrfs_close_devices():
btrfs_close_fs_devices():
btrfs_close_one_device():
ASSERT(!test_bit(BTRFS_DEV_STATE_REPLACE_TGT,
&device->dev_state));
However, since the replace target sticks around, there is a device
with BTRFS_DEV_STATE_REPLACE_TGT set on close, and we fail the
assertion in btrfs_close_one_device.
To fix this, if we come across the replace target device when
closing, we should properly reset it back to allocation state. This
fix also ensures that if a non-target device has a corrupted state and
has the BTRFS_DEV_STATE_REPLACE_TGT bit set, the assertion will still
catch the error.
Reported-by: David Sterba <dsterba@suse.com>
Fixes: b2a616676839 ("btrfs: fix rw device counting in __btrfs_free_extra_devids")
CC: stable@vger.kernel.org # 4.19+
Reviewed-by: Anand Jain <anand.jain@oracle.com>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
fs/btrfs/volumes.c | 3 +++
1 file changed, 3 insertions(+)
--- a/fs/btrfs/volumes.c
+++ b/fs/btrfs/volumes.c
@@ -1311,6 +1311,9 @@ static void btrfs_close_one_device(struc
fs_devices->rw_devices--;
}
+ if (device->devid == BTRFS_DEV_REPLACE_DEVID)
+ clear_bit(BTRFS_DEV_STATE_REPLACE_TGT, &device->dev_state);
+
if (test_bit(BTRFS_DEV_STATE_MISSING, &device->dev_state))
fs_devices->missing_devices--;
^ permalink raw reply [relevance 10%]
* [PATCH 5.4 000/260] 5.4.148-rc1 review
@ 2021-09-20 16:40 7% Greg Kroah-Hartman
2021-09-20 16:40 10% ` [PATCH 5.4 003/260] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
` (4 more replies)
0 siblings, 5 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:40 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.4.148 release.
There are 260 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 22 Sep 2021 16:38:49 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.148-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.4.148-rc1
Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Willem de Bruijn <willemb@google.com>
ip_gre: validate csum_start only on pull
Dinghao Liu <dinghao.liu@zju.edu.cn>
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Eric Dumazet <edumazet@google.com>
fq_codel: reject silly quantum parameters
Benjamin Hesmans <benjamin.hesmans@tessares.net>
netfilter: socket: icmp6: fix use-after-scope
Rafał Miłecki <rafal@milecki.pl>
net: dsa: b53: Fix calculating number of switch ports
Li Huafei <lihuafei1@huawei.com>
perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64}
Randy Dunlap <rdunlap@infradead.org>
ARC: export clear_user_page() for modules
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
Oliver Upton <oupton@google.com>
KVM: arm64: Handle PSCI resets before userspace touches vCPU state
Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
Dan Carpenter <dan.carpenter@oracle.com>
PCI: Fix pci_dev_str_match_path() alloc while atomic bug
Hans de Goede <hdegoede@redhat.com>
mfd: axp20x: Update AXP288 volatile ranges
Yang Li <yang.lee@linux.alibaba.com>
NTB: perf: Fix an error code in perf_setup_inbuf()
Yang Li <yang.lee@linux.alibaba.com>
NTB: Fix an error code in ntb_msit_probe()
Yang Li <yang.lee@linux.alibaba.com>
ethtool: Fix an error code in cxgb2.c
Vishal Aslot <os.vaslot@gmail.com>
PCI: ibmphp: Fix double unmap of io_mem
Paolo Valente <paolo.valente@linaro.org>
block, bfq: honor already-setup queue merges
Daniele Palmas <dnlplm@gmail.com>
net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
Ryoga Saito <contact@proelbtn.com>
Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6
George Cherian <george.cherian@marvell.com>
PCI: Add ACS quirks for Cavium multi-function devices
Masami Hiramatsu <mhiramat@kernel.org>
tracing/probes: Reject events which have the same name of existing one
Marc Zyngier <maz@kernel.org>
mfd: Don't use irq_create_mapping() to resolve a mapping
Miklos Szeredi <mszeredi@redhat.com>
fuse: fix use after free in fuse_read_interrupt()
Wasim Khan <wasim.khan@nxp.com>
PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
Linus Walleij <linus.walleij@linaro.org>
mfd: db8500-prcmu: Adjust map to reality
Miquel Raynal <miquel.raynal@bootlin.com>
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
David Hildenbrand <david@redhat.com>
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
Jiaran Zhang <zhangjiaran@huawei.com>
net: hns3: fix the timing issue of VF clearing interrupt sources
Yufeng Mo <moyufeng@huawei.com>
net: hns3: disable mac in flr process
Yufeng Mo <moyufeng@huawei.com>
net: hns3: change affinity_mask to numa node range
Yufeng Mo <moyufeng@huawei.com>
net: hns3: pad the short tunnel frame before sending to hardware
Nicholas Piggin <npiggin@gmail.com>
KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: check failover_pending in login response
David Heidelberg <david@ixit.cz>
dt-bindings: arm: Fix Toradex compatible typo
Shai Malin <smalin@marvell.com>
qed: Handle management FW error
zhenggy <zhenggy@chinatelecom.cn>
tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
Eric Dumazet <edumazet@google.com>
net/af_unix: fix a data-race in unix_dgram_poll
Paolo Abeni <pabeni@redhat.com>
vhost_net: fix OoB on sendmsg() failure.
Baptiste Lepers <baptiste.lepers@gmail.com>
events: Reuse value read using READ_ONCE instead of re-reading it
Maor Gottlieb <maorg@nvidia.com>
net/mlx5: Fix potential sleeping in atomic context
Saeed Mahameed <saeedm@nvidia.com>
net/mlx5: FWTrace, cancel work on alloc pd error flow
Michael Petlan <mpetlan@redhat.com>
perf machine: Initialize srcline string member in add_location struct
Hoang Le <hoang.h.le@dektech.com.au>
tipc: increase timeout in tipc_sk_enqueue()
Florian Fainelli <f.fainelli@gmail.com>
r6040: Restore MDIO clock frequency after MAC reset
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Lin, Zhenpeng <zplin@psu.edu>
dccp: don't duplicate ccid when cloning dccp sock
Randy Dunlap <rdunlap@infradead.org>
ptp: dp83640: don't define PAGE0
Eric Dumazet <edumazet@google.com>
net-caif: avoid user-triggerable WARN_ON(1)
Xin Long <lucien.xin@gmail.com>
tipc: fix an use-after-free issue in tipc_recvmsg
Mike Rapoport <rppt@linux.ibm.com>
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
Alexander Egorenkov <egorenar@linux.ibm.com>
s390/sclp: fix Secure-IPL facility detection
Lucas Stach <l.stach@pengutronix.de>
drm/etnaviv: add missing MMU context put when reaping MMU mapping
Lucas Stach <l.stach@pengutronix.de>
drm/etnaviv: reference MMU context when setting up hardware state
Lucas Stach <l.stach@pengutronix.de>
drm/etnaviv: fix MMU context leak on GPU reset
Lucas Stach <l.stach@pengutronix.de>
drm/etnaviv: exec and MMU state is lost when resetting the GPU
Lucas Stach <l.stach@pengutronix.de>
drm/etnaviv: keep MMU context across runtime suspend/resume
Lucas Stach <l.stach@pengutronix.de>
drm/etnaviv: stop abusing mmu_context as FE running marker
Lucas Stach <l.stach@pengutronix.de>
drm/etnaviv: put submit prev MMU context when it exists
Lucas Stach <l.stach@pengutronix.de>
drm/etnaviv: return context from etnaviv_iommu_context_get
Ernst Sjöstrand <ernstp@gmail.com>
drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
Evan Quan <evan.quan@amd.com>
PCI: Add AMD GPU multi-function power dependencies
Juergen Gross <jgross@suse.com>
PM: base: power: don't try to use non-existing RTC for storing data
Mark Brown <broonie@kernel.org>
arm64/sve: Use correct size when reinitialising SVE state
Adrian Bunk <bunk@kernel.org>
bnx2x: Fix enabling network interfaces without VFs
Juergen Gross <jgross@suse.com>
xen: reset legacy rtc flag for PV domU
Anand Jain <anand.jain@oracle.com>
btrfs: fix upper limit for max_inline for page size 64K
Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
drm/panfrost: Clamp lock region to Bifrost minimum
Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
drm/panfrost: Use u64 for size in lock_region
Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
drm/panfrost: Simplify lock_region calculation
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix BUG_ON assert
David Heidelberg <david@ixit.cz>
drm/msi/mdp4: populate priv->kms in mdp4_kms_init
Jan Hoffmann <jan@3e8.eu>
net: dsa: lantiq_gswip: fix maximum frame length
Kees Cook <keescook@chromium.org>
lib/test_stackinit: Fix static initializer test
Patryk Duda <pdk@semihalf.com>
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Vasily Averin <vvs@virtuozzo.com>
memcg: enable accounting for pids in nested pid namespaces
Rik van Riel <riel@surriel.com>
mm,vmscan: fix divide by zero in get_scan_count
Liu Zixian <liuzixian4@huawei.com>
mm/hugetlb: initialize hugetlb_usage in mm_init
Halil Pasic <pasic@linux.ibm.com>
s390/pv: fix the forcing of the swiotlb
Pratik R. Sampat <psampat@linux.ibm.com>
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Changes to support kdump kernel
Maciej W. Rozycki <macro@orcam.me.uk>
scsi: BusLogic: Fix missing pr_cont() use
chenying <chenying.kernel@bytedance.com>
ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
Mikulas Patocka <mpatocka@redhat.com>
parisc: fix crash with signals and alloca
Yang Yingliang <yangyingliang@huawei.com>
net: w5100: check return value after calling platform_get_resource()
Haimin Zhang <tcs_kernel@tencent.com>
fix array-index-out-of-bounds in taprio_change
王贇 <yun.wang@linux.alibaba.com>
net: fix NULL pointer reference in cipso_v4_doi_free
Miaoqing Pan <miaoqing@codeaurora.org>
ath9k: fix sleeping in atomic context
Zekun Shen <bruceshenzk@gmail.com>
ath9k: fix OOB read ar9300_eeprom_restore_internal
Colin Ian King <colin.king@canonical.com>
parport: remove non-zero check on count
Yevgeny Kliteynik <kliteyn@nvidia.com>
net/mlx5: DR, Enable QP retransmission
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: fix access to BSS elements
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: avoid static queue number aliasing
Zhang Qilong <zhangqilong3@huawei.com>
iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
Sean Keely <Sean.Keely@amd.com>
drm/amdkfd: Account for SH/SE count when setting up cu masks.
Xiaotan Luo <lxt@rock-chips.com>
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Sugar Zhang <sugar.zhang@rock-chips.com>
ASoC: rockchip: i2s: Fix regmap_ops hang
Shuah Khan <skhan@linuxfoundation.org>
usbip:vhci_hcd USB port can get stuck in the disabled state
Anirudh Rayabharam <mail@anirudhrb.com>
usbip: give back URBs for unsent unlink requests during cleanup
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: musb: musb_dsps: request_irq() after initializing musb
Mathias Nyman <mathias.nyman@linux.intel.com>
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Ding Hui <dinghui@sangfor.com.cn>
cifs: fix wrong release in sess_alloc_buffer() failed path
Nishad Kamdar <nishadkamdar@gmail.com>
mmc: core: Return correct emmc response in case of ioctl error
Li Zhijian <lizhijian@cn.fujitsu.com>
selftests/bpf: Enlarge select() timeout for test_maps
Thomas Hebb <tommyhebb@gmail.com>
mmc: rtsx_pci: Fix long reads when clock is prescaled
Manish Narani <manish.narani@xilinx.com>
mmc: sdhci-of-arasan: Check return value of non-void funtions
Marc Zyngier <maz@kernel.org>
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
Gustaw Lewandowski <gustaw.lewandowski@linux.intel.com>
ASoC: Intel: Skylake: Fix passing loadable flag for module
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
Marcos Paulo de Souza <mpdesouza@suse.com>
btrfs: tree-log: check btrfs_lookup_data_extent return value
Arnd Bergmann <arnd@arndb.de>
m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
Nathan Chancellor <nathan@kernel.org>
drm/exynos: Always initialize mapping in exynos_drm_register_dma()
J. Bruce Fields <bfields@redhat.com>
lockd: lockd server-side shouldn't set fl_ops
Li Jun <jun.li@nxp.com>
usb: chipidea: host: fix port index underflow and UBSAN complains
Bob Peterson <rpeterso@redhat.com>
gfs2: Don't call dlm after protocol is unmounted
Kees Cook <keescook@chromium.org>
staging: rts5208: Fix get_ms_information() heap buffer size
J. Bruce Fields <bfields@redhat.com>
rpc: fix gss_svc_init cleanup on failure
Luke Hsiao <lukehsiao@google.com>
tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
Ulrich Hecht <uli+renesas@fpond.eu>
serial: sh-sci: fix break handling for sysrq
Rajendra Nayak <rnayak@codeaurora.org>
opp: Don't print an error if required-opps is missing
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: Fix handling of LE Enhanced Connection Complete
Sagi Grimberg <sagi@grimberg.me>
nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
Raag Jadav <raagjadav@gmail.com>
arm64: dts: ls1046a: fix eeprom entries
Thierry Reding <treding@nvidia.com>
arm64: tegra: Fix compatible string for Tegra132 CPUs
Andreas Obergschwandtner <andreas.obergschwandtner@gmail.com>
ARM: tegra: tamonten: Fix UART pad setting
Johan Almbladh <johan.almbladh@anyfinetworks.com>
mac80211: Fix monitor MTU limit so that A-MSDUs get through
Tuo Li <islituo@gmail.com>
drm/display: fix possible null-pointer dereference in dcn10_set_clock()
Tuo Li <islituo@gmail.com>
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Eran Ben Elisha <eranbe@nvidia.com>
net/mlx5: Fix variable type to match 64bit
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: avoid circular locks in sco_sock_connect
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: schedule SCO timeouts with delayed_work
Jussi Maki <joamaki@gmail.com>
selftests/bpf: Fix xdp_tx.c prog section name
David Heidelberg <david@ixit.cz>
drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
Nathan Chancellor <nathan@kernel.org>
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: sdm660: use reg value for memory node
Sebastian Reichel <sebastian.reichel@collabora.com>
ARM: dts: imx53-ppd: Fix ACHC entry
Evgeny Novikov <novikov@ispras.ru>
media: tegra-cec: Handle errors of clk_prepare_enable()
Krzysztof Hałasa <khalasa@piap.pl>
media: TDA1997x: fix tda1997x_query_dv_timings() return value
Hans Verkuil <hverkuil-cisco@xs4all.nl>
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Umang Jain <umang.jain@ideasonboard.com>
media: imx258: Limit the max analogue gain to 480
Laurent Pinchart <laurent.pinchart@ideasonboard.com>
media: imx258: Rectify mismatch of VTS value
Hans de Goede <hdegoede@redhat.com>
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Vidya Sagar <vidyas@nvidia.com>
arm64: tegra: Fix Tegra194 PCIe EP compatible string
Yufeng Mo <moyufeng@huawei.com>
bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
Zhen Lei <thunder.leizhen@huawei.com>
workqueue: Fix possible memory leaks in wq_numa_init()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: skip invalid hci_sync_conn_complete_evt
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
Juhee Kang <claudiajkang@gmail.com>
samples: bpf: Fix tracex7 error raised on the missing argument
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
staging: ks7010: Fix the initialization of the 'sleep_status' structure
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Jiri Slaby <jslaby@suse.cz>
hvsi: don't panic on tty_register_driver failure
Jiri Slaby <jslaby@suse.cz>
xtensa: ISS: don't panic in rs_init
Maciej W. Rozycki <macro@orcam.me.uk>
serial: 8250: Define RX trigger levels for OxSemi 950 devices
Niklas Schnelle <schnelle@linux.ibm.com>
s390: make PCI mio support a machine flag
Heiko Carstens <hca@linux.ibm.com>
s390/jump_label: print real address in a case of a jump label bug
Gustavo A. R. Silva <gustavoars@kernel.org>
flow_dissector: Fix out-of-bounds warnings
Gustavo A. R. Silva <gustavoars@kernel.org>
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: riva: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Do not PASS tests without actually testing the result
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix copy-and-paste error in double word test
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
Oliver Logush <oliver.logush@amd.com>
drm/amd/display: Fix timer_per_pixel unit error
Zheyu Ma <zheyuma97@gmail.com>
tty: serial: jsm: hold port lock when reporting modem line changes
Geert Uytterhoeven <geert+renesas@glider.be>
staging: board: Fix uninitialized spinlock when attaching genpd
Jack Pham <jackp@codeaurora.org>
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Evgeny Novikov <novikov@ispras.ru>
USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
Maciej Żenczykowski <maze@google.com>
usb: gadget: u_ether: fix a potential null pointer dereference
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the actual_length of an iso packet
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
Sasha Neftin <sasha.neftin@intel.com>
igc: Check if num of q_vectors is smaller than max before array access
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
drm: avoid blocking in drm_clients_info's rcu section
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Smack: Fix wrong semantics in smk_access_entry()
Yajun Deng <yajun.deng@linux.dev>
netlink: Deal with ESRCH error in nlmsg_notify()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: fix a DoS bug by restricting user input
David Heidelberg <david@ixit.cz>
ARM: dts: qcom: apq8064: correct clock names
Stefan Assmann <sassmann@kpanic.de>
iavf: fix locking of critical sections
Stefan Assmann <sassmann@kpanic.de>
iavf: do not override the adapter state in the watchdog task
Jonathan Cameron <Jonathan.Cameron@huawei.com>
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Xin Long <lucien.xin@gmail.com>
tipc: keep the skb in rcv queue until the whole data is read
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: dib8000: rewrite the init prbs logic
Randy Dunlap <rdunlap@infradead.org>
ASoC: atmel: ATMEL drivers don't need HAS_DMA
Luben Tuikov <luben.tuikov@amd.com>
drm/amdgpu: Fix amdgpu_ras_eeprom_init()
Nadav Amit <namit@vmware.com>
userfaultfd: prevent concurrent API initialization
Masahiro Yamada <masahiroy@kernel.org>
kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
Oleksij Rempel <linux@rempel-privat.de>
MIPS: Malta: fix alignment of the devicetree buffer
Chao Yu <chao@kernel.org>
f2fs: fix to unmap pages from userspace process in punch_hole()
Chao Yu <chao@kernel.org>
f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
Chao Yu <chao@kernel.org>
f2fs: fix to account missing .skipped_gc_rwsem
Alexey Kardashevskiy <aik@ozlabs.ru>
KVM: PPC: Fix clearing never mapped TCEs in realmode
Codrin Ciubotariu <codrin.ciubotariu@microchip.com>
clk: at91: clk-generated: Limit the requested rate to our range
Claudiu Beznea <claudiu.beznea@microchip.com>
clk: at91: clk-generated: pass the id of changeable parent at registration
Codrin Ciubotariu <codrin.ciubotariu@microchip.com>
clk: at91: sam9x60: Don't use audio PLL
David Howells <dhowells@redhat.com>
fscache: Fix cookie key hashing
Hans de Goede <hdegoede@redhat.com>
platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
Nicholas Piggin <npiggin@gmail.com>
KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live
Jim Broadus <jbroadus@gmail.com>
HID: i2c-hid: Fix Elan touchpad regression
David Disseldorp <ddiss@suse.de>
scsi: target: avoid per-loop XCOPY buffer allocations
Joel Stanley <joel@jms.id.au>
powerpc/config: Renable MTD_PHYSMAP_OF
Dan Carpenter <dan.carpenter@oracle.com>
scsi: qedf: Fix error codes in qedf_alloc_global_queues()
Dan Carpenter <dan.carpenter@oracle.com>
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
Dan Carpenter <dan.carpenter@oracle.com>
scsi: smartpqi: Fix an error code in pqi_get_raid_map()
Zhen Lei <thunder.leizhen@huawei.com>
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Wei Li <liwei391@huawei.com>
scsi: fdomain: Fix error return code in fdomain_probe()
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Fix potential memory corruption
Anthony Iliopoulos <ailiop@suse.com>
dma-debug: fix debugfs initialization order
Randy Dunlap <rdunlap@infradead.org>
openrisc: don't printk() unconditionally
Yangtao Li <frank.li@vivo.com>
f2fs: reduce the scope of setting fsck tag when de->name_len is zero
Chao Yu <chao@kernel.org>
f2fs: show f2fs instance in printk_ratelimited
Leon Romanovsky <leonro@nvidia.com>
RDMA/efa: Remove double QP type assignment
Michal Suchanek <msuchanek@suse.de>
powerpc/stacktrace: Include linux/delay.h
Jason Gunthorpe <jgg@nvidia.com>
vfio: Use config not menuconfig for VFIO_NOIOMMU
Jaehyoung Choi <jkkkkk.choi@samsung.com>
pinctrl: samsung: Fix pinctrl bank pin count
Leon Romanovsky <leonro@nvidia.com>
docs: Fix infiniband uverbs minor number
Leon Romanovsky <leonro@nvidia.com>
RDMA/iwcm: Release resources if iw_cm module initialization fails
Mike Marciniszyn <mike.marciniszyn@cornelisnetworks.com>
IB/hfi1: Adjust pkey entry in index 0
Christoph Hellwig <hch@lst.de>
scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
Chao Yu <chao@kernel.org>
f2fs: quota: fix potential deadlock
Dmitry Torokhov <dmitry.torokhov@gmail.com>
HID: input: do not report stylus battery state as "full"
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
Evan Wang <xswang@marvell.com>
PCI: aardvark: Fix checking for PIO status
Hyun Kwon <hyun.kwon@xilinx.com>
PCI: xilinx-nwl: Enable the clock through CCF
Krzysztof Wilczyński <kw@linux.com>
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Marek Behún <kabel@kernel.org>
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
Stuart Hayes <stuart.w.hayes@gmail.com>
PCI/portdrv: Enable Bandwidth Notification only if port supports it
David Heidelberg <david@ixit.cz>
ARM: 9105/1: atags_to_fdt: don't warn about stack size
Hans de Goede <hdegoede@redhat.com>
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
Robin Gong <yibin.gong@nxp.com>
dmaengine: imx-sdma: remove duplicated sdma_load_context
Robin Gong <yibin.gong@nxp.com>
Revert "dmaengine: imx-sdma: refine to load context only once"
Sean Young <sean@mess.org>
media: rc-loopback: return number of emitters rather than error
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: uvc: don't do DMA on stack
Wang Hai <wanghai38@huawei.com>
VMCI: fix NULL pointer dereference when unmapping queue pair
Arne Welzel <arne.welzel@corelight.com>
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
power: supply: max17042: handle fails of reading status register
Damien Le Moal <damien.lemoal@wdc.com>
block: bfq: fix bfq_set_next_ioprio_data()
zhenwei pi <pizhenwei@bytedance.com>
crypto: public_key: fix overflow during implicit conversion
Mark Rutland <mark.rutland@arm.com>
arm64: head: avoid over-mapping in map_memory
Iwona Winiarska <iwona.winiarska@intel.com>
soc: aspeed: p2a-ctrl: Fix boundary check for mmap
Iwona Winiarska <iwona.winiarska@intel.com>
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org>
soc: qcom: aoss: Fix the out of bound usage of cooling_devs
Paul Cercueil <paul@crapouillou.net>
pinctrl: ingenic: Fix incorrect pull up/down info
Marc Zyngier <maz@kernel.org>
pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
Rolf Eike Beer <eb@emlix.com>
tools/thermal/tmon: Add cross compiling support
Harshvardhan Jha <harshvardhan.jha@oracle.com>
9p/xen: Fix end of loop tests for list_for_each_entry
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
include/linux/list.h: add a macro to test if entry is pointing to the head
Juergen Gross <jgross@suse.com>
xen: fix setting of max_pfn in shared_info
Kajol Jain <kjain@linux.ibm.com>
powerpc/perf/hv-gpci: Fix counter value parsing
Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
PCI/MSI: Skip masking MSI-X on Xen PV
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
btrfs: reset replace target device to allocation state on close
Josef Bacik <josef@toxicpanda.com>
btrfs: wake up async_delalloc_pages waiters after submit
Dmitry Osipenko <digetx@gmail.com>
rtc: tps65910: Correct driver module alias
-------------
Diffstat:
Documentation/admin-guide/devices.txt | 6 +-
Documentation/devicetree/bindings/arm/tegra.yaml | 2 +-
.../devicetree/bindings/mtd/gpmc-nand.txt | 2 +-
Makefile | 4 +-
arch/arc/mm/cache.c | 2 +-
arch/arm/boot/compressed/Makefile | 2 +
arch/arm/boot/dts/imx53-ppd.dts | 23 +++--
arch/arm/boot/dts/qcom-apq8064.dtsi | 6 +-
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 +--
arch/arm64/boot/dts/freescale/fsl-ls1046a-frwy.dts | 8 +-
arch/arm64/boot/dts/freescale/fsl-ls1046a-rdb.dts | 7 +-
arch/arm64/boot/dts/nvidia/tegra132.dtsi | 4 +-
arch/arm64/boot/dts/nvidia/tegra194.dtsi | 6 +-
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2 +-
arch/arm64/include/asm/kernel-pgtable.h | 4 +-
arch/arm64/kernel/fpsimd.c | 2 +-
arch/arm64/kernel/head.S | 11 ++-
arch/m68k/Kconfig.bus | 2 +-
arch/mips/mti-malta/malta-dtshim.c | 2 +-
arch/openrisc/kernel/entry.S | 2 +
arch/parisc/kernel/signal.c | 6 ++
arch/powerpc/configs/mpc885_ads_defconfig | 1 +
arch/powerpc/include/asm/pmc.h | 7 ++
arch/powerpc/kernel/stacktrace.c | 1 +
arch/powerpc/kvm/book3s_64_vio_hv.c | 9 +-
arch/powerpc/kvm/book3s_hv.c | 20 ++++
arch/powerpc/kvm/book3s_hv_rmhandlers.S | 36 ++++++-
arch/powerpc/perf/hv-gpci.c | 2 +-
arch/s390/include/asm/setup.h | 2 +
arch/s390/kernel/early.c | 4 +
arch/s390/kernel/jump_label.c | 2 +-
arch/s390/mm/init.c | 2 +-
arch/s390/pci/pci.c | 5 +-
arch/x86/mm/init_64.c | 6 +-
arch/x86/xen/enlighten_pv.c | 7 ++
arch/x86/xen/p2m.c | 4 +-
arch/xtensa/platforms/iss/console.c | 17 +++-
block/bfq-iosched.c | 18 +++-
block/blk-zoned.c | 6 --
block/bsg.c | 5 +-
drivers/ata/libata-core.c | 4 +
drivers/ata/sata_dwc_460ex.c | 12 +--
drivers/base/power/trace.c | 10 ++
drivers/clk/at91/clk-generated.c | 32 +++---
drivers/clk/at91/dt-compat.c | 8 +-
drivers/clk/at91/pmc.h | 4 +-
drivers/clk/at91/sam9x60.c | 10 +-
drivers/clk/at91/sama5d2.c | 31 +++---
drivers/cpufreq/powernv-cpufreq.c | 16 ++-
drivers/crypto/mxs-dcp.c | 36 ++-----
drivers/dma/imx-sdma.c | 13 +--
drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.c | 84 ++++++++++++----
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.h | 1 +
.../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 16 +--
.../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 11 +--
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 2 +-
drivers/gpu/drm/drm_debugfs.c | 3 +-
drivers/gpu/drm/etnaviv/etnaviv_buffer.c | 3 +-
drivers/gpu/drm/etnaviv/etnaviv_gem.c | 3 +-
drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c | 3 +-
drivers/gpu/drm/etnaviv/etnaviv_gpu.c | 43 ++++----
drivers/gpu/drm/etnaviv/etnaviv_gpu.h | 1 +
drivers/gpu/drm/etnaviv/etnaviv_iommu.c | 4 +
drivers/gpu/drm/etnaviv/etnaviv_iommu_v2.c | 8 ++
drivers/gpu/drm/etnaviv/etnaviv_mmu.c | 1 +
drivers/gpu/drm/etnaviv/etnaviv_mmu.h | 4 +-
drivers/gpu/drm/exynos/exynos_drm_dma.c | 2 +
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 17 +---
drivers/gpu/drm/panfrost/panfrost_mmu.c | 31 +++---
drivers/gpu/drm/panfrost/panfrost_regs.h | 2 +
drivers/hid/hid-input.c | 2 -
drivers/hid/i2c-hid/i2c-hid-core.c | 5 +-
drivers/iio/dac/ad5624r_spi.c | 18 +++-
drivers/infiniband/core/iwcm.c | 19 ++--
drivers/infiniband/hw/efa/efa_verbs.c | 1 -
drivers/infiniband/hw/hfi1/init.c | 7 +-
drivers/md/dm-crypt.c | 7 +-
drivers/media/dvb-frontends/dib8000.c | 58 +++++++----
drivers/media/i2c/imx258.c | 4 +-
drivers/media/i2c/tda1997x.c | 5 +-
drivers/media/platform/tegra-cec/tegra_cec.c | 10 +-
drivers/media/rc/rc-loopback.c | 2 +-
drivers/media/usb/uvc/uvc_v4l2.c | 34 ++++---
drivers/media/v4l2-core/v4l2-dv-timings.c | 4 +-
drivers/mfd/ab8500-core.c | 2 +-
drivers/mfd/axp20x.c | 3 +-
drivers/mfd/db8500-prcmu.c | 14 ++-
drivers/mfd/stmpe.c | 4 +-
drivers/mfd/tc3589x.c | 2 +-
drivers/mfd/tqmx86.c | 2 +
drivers/mfd/wm8994-irq.c | 2 +-
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6 +-
drivers/mmc/core/block.c | 3 +-
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 ++++---
drivers/mmc/host/sdhci-of-arasan.c | 18 +++-
drivers/mtd/nand/raw/cafe_nand.c | 4 +-
drivers/net/bonding/bond_main.c | 3 +-
drivers/net/dsa/b53/b53_common.c | 3 +-
drivers/net/dsa/lantiq_gswip.c | 3 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2 +-
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 1 +
drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 8 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 19 ++--
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 6 +-
drivers/net/ethernet/ibm/ibmvnic.c | 8 ++
drivers/net/ethernet/intel/iavf/iavf_main.c | 58 +++++++++--
drivers/net/ethernet/intel/igc/igc_main.c | 9 +-
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 8 +-
.../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 3 +-
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 5 +-
.../ethernet/mellanox/mlx5/core/steering/dr_send.c | 1 +
drivers/net/ethernet/qlogic/qed/qed_mcp.c | 6 +-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 1 -
drivers/net/ethernet/rdc/r6040.c | 9 +-
drivers/net/ethernet/renesas/sh_eth.c | 1 +
.../net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 ++--
drivers/net/ethernet/wiznet/w5100.c | 2 +
drivers/net/phy/dp83640_reg.h | 2 +-
drivers/net/usb/cdc_mbim.c | 5 +
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3 +-
drivers/net/wireless/ath/ath9k/hw.c | 12 ++-
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 4 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 8 +-
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 24 ++++-
drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 30 +++---
drivers/ntb/test/ntb_msi_test.c | 4 +-
drivers/ntb/test/ntb_perf.c | 1 +
drivers/nvme/host/tcp.c | 14 +--
drivers/of/kobj.c | 2 +-
drivers/opp/of.c | 12 +--
drivers/parport/ieee1284_ops.c | 2 +-
drivers/pci/controller/pci-aardvark.c | 73 ++++++++++++--
drivers/pci/controller/pcie-xilinx-nwl.c | 12 +++
drivers/pci/hotplug/TODO | 3 -
drivers/pci/hotplug/ibmphp_ebda.c | 5 +-
drivers/pci/msi.c | 3 +
drivers/pci/pci.c | 8 +-
drivers/pci/pcie/portdrv_core.c | 9 +-
drivers/pci/quirks.c | 59 ++++++++++-
drivers/pci/syscall.c | 4 +-
drivers/pinctrl/pinctrl-ingenic.c | 6 +-
drivers/pinctrl/pinctrl-single.c | 1 +
drivers/pinctrl/pinctrl-stmfx.c | 6 +-
drivers/pinctrl/samsung/pinctrl-samsung.c | 2 +-
drivers/platform/chrome/cros_ec_proto.c | 9 ++
drivers/platform/x86/dell-smbios-wmi.c | 1 +
drivers/power/supply/max17042_battery.c | 6 +-
drivers/rtc/rtc-tps65910.c | 2 +-
drivers/s390/char/sclp_early.c | 3 +-
drivers/scsi/BusLogic.c | 4 +-
drivers/scsi/pcmcia/fdomain_cs.c | 4 +-
drivers/scsi/qedf/qedf_main.c | 10 +-
drivers/scsi/qedi/qedi_main.c | 14 +--
drivers/scsi/qla2xxx/qla_nvme.c | 5 +-
drivers/scsi/qla2xxx/qla_os.c | 6 ++
drivers/scsi/smartpqi/smartpqi_init.c | 1 +
drivers/soc/aspeed/aspeed-lpc-ctrl.c | 2 +-
drivers/soc/aspeed/aspeed-p2a-ctrl.c | 2 +-
drivers/soc/qcom/qcom_aoss.c | 8 +-
drivers/staging/board/board.c | 7 +-
drivers/staging/ks7010/ks7010_sdio.c | 2 +-
drivers/staging/rts5208/rtsx_scsi.c | 10 +-
drivers/target/target_core_xcopy.c | 96 ++++++------------
drivers/target/target_core_xcopy.h | 1 +
drivers/tty/hvc/hvsi.c | 19 +++-
drivers/tty/serial/8250/8250_pci.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/jsm/jsm_neo.c | 2 +
drivers/tty/serial/jsm/jsm_tty.c | 3 +
drivers/tty/serial/sh-sci.c | 7 +-
drivers/usb/chipidea/host.c | 14 ++-
drivers/usb/gadget/composite.c | 8 +-
drivers/usb/gadget/function/u_ether.c | 5 +-
drivers/usb/host/ehci-mv.c | 23 +++--
drivers/usb/host/fotg210-hcd.c | 41 ++++----
drivers/usb/host/fotg210.h | 5 -
drivers/usb/host/xhci.c | 24 ++---
drivers/usb/musb/musb_dsps.c | 13 ++-
drivers/usb/usbip/vhci_hcd.c | 32 +++++-
drivers/vfio/Kconfig | 2 +-
drivers/vhost/net.c | 11 ++-
drivers/video/fbdev/asiliantfb.c | 3 +
drivers/video/fbdev/kyro/fbdev.c | 8 ++
drivers/video/fbdev/riva/fbdev.c | 3 +
fs/btrfs/disk-io.c | 45 ++++-----
fs/btrfs/inode.c | 10 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 3 +
fs/cifs/sess.c | 2 +-
fs/f2fs/checkpoint.c | 2 +-
fs/f2fs/data.c | 23 ++++-
fs/f2fs/dir.c | 15 ++-
fs/f2fs/f2fs.h | 24 ++---
fs/f2fs/file.c | 6 +-
fs/f2fs/gc.c | 6 +-
fs/f2fs/inode.c | 2 +-
fs/f2fs/node.c | 2 +-
fs/f2fs/segment.c | 9 +-
fs/f2fs/super.c | 84 +++++++++-------
fs/fscache/cookie.c | 14 +--
fs/fscache/internal.h | 2 +
fs/fscache/main.c | 39 ++++++++
fs/fuse/dev.c | 4 +-
fs/gfs2/lock_dlm.c | 5 +
fs/lockd/svclock.c | 30 +++---
fs/overlayfs/dir.c | 6 +-
fs/userfaultfd.c | 93 +++++++++---------
include/crypto/public_key.h | 4 +-
include/linux/hugetlb.h | 9 ++
include/linux/list.h | 29 ++++--
include/linux/memory_hotplug.h | 4 +-
include/linux/pci.h | 5 +-
include/linux/pci_ids.h | 3 +-
include/linux/skbuff.h | 2 +-
include/linux/sunrpc/xprt.h | 1 +
include/uapi/linux/pkt_sched.h | 2 +
include/uapi/linux/serial_reg.h | 1 +
kernel/dma/debug.c | 7 +-
kernel/events/core.c | 2 +-
kernel/fork.c | 1 +
kernel/pid_namespace.c | 3 +-
kernel/trace/trace_kprobe.c | 6 +-
kernel/trace/trace_probe.c | 25 +++++
kernel/trace/trace_probe.h | 1 +
kernel/trace/trace_uprobe.c | 6 +-
kernel/workqueue.c | 12 ++-
lib/test_bpf.c | 13 ++-
lib/test_stackinit.c | 20 ++--
mm/memory_hotplug.c | 4 +-
mm/vmscan.c | 2 +-
net/9p/trans_xen.c | 4 +-
net/bluetooth/hci_event.c | 108 +++++++++++++++------
net/bluetooth/sco.c | 74 ++++++++------
net/caif/chnl_net.c | 19 +---
net/core/flow_dissector.c | 12 ++-
net/dccp/minisocks.c | 2 +
net/dsa/slave.c | 12 +--
net/ipv4/ip_gre.c | 9 +-
net/ipv4/ip_output.c | 5 +-
net/ipv4/nexthop.c | 2 +
net/ipv4/tcp_fastopen.c | 3 +-
net/ipv4/tcp_input.c | 2 +-
net/ipv6/netfilter/nf_socket_ipv6.c | 4 +-
net/l2tp/l2tp_core.c | 4 +-
net/mac80211/iface.c | 11 ++-
net/netlabel/netlabel_cipso_v4.c | 4 +-
net/netlink/af_netlink.c | 4 +-
net/sched/sch_fq_codel.c | 12 ++-
net/sched/sch_taprio.c | 4 +-
net/sunrpc/auth_gss/svcauth_gss.c | 2 +-
net/sunrpc/xprt.c | 6 +-
net/tipc/socket.c | 36 +++++--
net/unix/af_unix.c | 2 +-
samples/bpf/test_override_return.sh | 1 +
samples/bpf/tracex7_user.c | 5 +
scripts/gen_ksymdeps.sh | 8 +-
security/smack/smack_access.c | 17 ++--
sound/soc/atmel/Kconfig | 1 -
sound/soc/intel/boards/bytcr_rt5640.c | 9 +-
sound/soc/intel/skylake/skl-messages.c | 11 ++-
sound/soc/intel/skylake/skl-pcm.c | 25 ++---
sound/soc/rockchip/rockchip_i2s.c | 35 ++++---
tools/perf/Makefile.config | 8 +-
tools/perf/util/machine.c | 1 +
tools/testing/selftests/bpf/progs/xdp_tx.c | 2 +-
tools/testing/selftests/bpf/test_maps.c | 2 +-
tools/testing/selftests/bpf/test_xdp_veth.sh | 2 +-
tools/thermal/tmon/Makefile | 2 +-
virt/kvm/arm/arm.c | 8 ++
273 files changed, 1866 insertions(+), 1079 deletions(-)
^ permalink raw reply [relevance 7%]
* [PATCH 4.19 215/293] Bluetooth: avoid circular locks in sco_sock_connect
2021-09-20 16:39 7% [PATCH 4.19 000/293] 4.19.207-rc1 review Greg Kroah-Hartman
` (4 preceding siblings ...)
2021-09-20 16:42 10% ` [PATCH 4.19 214/293] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
@ 2021-09-20 16:42 9% ` Greg Kroah-Hartman
5 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:42 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 3b3d3ef52ac2..007a01b08dbe 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -234,44 +234,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -279,7 +267,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -289,9 +277,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -573,6 +558,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -587,12 +573,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH 4.19 214/293] Bluetooth: schedule SCO timeouts with delayed_work
2021-09-20 16:39 7% [PATCH 4.19 000/293] 4.19.207-rc1 review Greg Kroah-Hartman
` (3 preceding siblings ...)
2021-09-20 16:42 11% ` [PATCH 4.19 203/293] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
@ 2021-09-20 16:42 10% ` Greg Kroah-Hartman
2021-09-20 16:42 9% ` [PATCH 4.19 215/293] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
5 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:42 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+2f6d7c28bb4bf7e82060,
Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit ba316be1b6a00db7126ed9a39f9bee434a508043 ]
struct sock.sk_timer should be used as a sock cleanup timer. However,
SCO uses it to implement sock timeouts.
This causes issues because struct sock.sk_timer's callback is run in
an IRQ context, and the timer callback function sco_sock_timeout takes
a spin lock on the socket. However, other functions such as
sco_conn_del and sco_conn_ready take the spin lock with interrupts
enabled.
This inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} lock usage could
lead to deadlocks as reported by Syzbot [1]:
CPU0
----
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
<Interrupt>
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
To fix this, we use delayed work to implement SCO sock timouts
instead. This allows us to avoid taking the spin lock on the socket in
an IRQ context, and corrects the misuse of struct sock.sk_timer.
As a note, cancel_delayed_work is used instead of
cancel_delayed_work_sync in sco_sock_set_timer and
sco_sock_clear_timer to avoid a deadlock. In the future, the call to
bh_lock_sock inside sco_sock_timeout should be changed to lock_sock to
synchronize with other functions using lock_sock. However, since
sco_sock_set_timer and sco_sock_clear_timer are sometimes called under
the locked socket (in sco_connect and __sco_sock_close),
cancel_delayed_work_sync might cause them to sleep until an
sco_sock_timeout that has started finishes running. But
sco_sock_timeout would also sleep until it can grab the lock_sock.
Using cancel_delayed_work is fine because sco_sock_timeout does not
change from run to run, hence there is no functional difference
between:
1. waiting for a timeout to finish running before scheduling another
timeout
2. scheduling another timeout while a timeout is running.
Link: https://syzkaller.appspot.com/bug?id=9089d89de0502e120f234ca0fc8a703f7368b31e [1]
Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Tested-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 35 +++++++++++++++++++++++++++++------
1 file changed, 29 insertions(+), 6 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 2fbea653540b..3b3d3ef52ac2 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -48,6 +48,8 @@ struct sco_conn {
spinlock_t lock;
struct sock *sk;
+ struct delayed_work timeout_work;
+
unsigned int mtu;
};
@@ -73,9 +75,20 @@ struct sco_pinfo {
#define SCO_CONN_TIMEOUT (HZ * 40)
#define SCO_DISCONN_TIMEOUT (HZ * 2)
-static void sco_sock_timeout(struct timer_list *t)
+static void sco_sock_timeout(struct work_struct *work)
{
- struct sock *sk = from_timer(sk, t, sk_timer);
+ struct sco_conn *conn = container_of(work, struct sco_conn,
+ timeout_work.work);
+ struct sock *sk;
+
+ sco_conn_lock(conn);
+ sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
+ sco_conn_unlock(conn);
+
+ if (!sk)
+ return;
BT_DBG("sock %p state %d", sk, sk->sk_state);
@@ -89,14 +102,21 @@ static void sco_sock_timeout(struct timer_list *t)
static void sco_sock_set_timer(struct sock *sk, long timeout)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d timeout %ld", sk, sk->sk_state, timeout);
- sk_reset_timer(sk, &sk->sk_timer, jiffies + timeout);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
+ schedule_delayed_work(&sco_pi(sk)->conn->timeout_work, timeout);
}
static void sco_sock_clear_timer(struct sock *sk)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d", sk, sk->sk_state);
- sk_stop_timer(sk, &sk->sk_timer);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
}
/* ---- SCO connections ---- */
@@ -176,6 +196,9 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_chan_del(sk, err);
bh_unlock_sock(sk);
sock_put(sk);
+
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
}
hcon->sco_data = NULL;
@@ -190,6 +213,8 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
+
if (parent)
bt_accept_enqueue(parent, sk, true);
}
@@ -484,8 +509,6 @@ static struct sock *sco_sock_alloc(struct net *net, struct socket *sock,
sco_pi(sk)->setting = BT_VOICE_CVSD_16BIT;
- timer_setup(&sk->sk_timer, sco_sock_timeout, 0);
-
bt_sock_link(&sco_sk_list, sk);
return sk;
}
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH 4.19 203/293] Bluetooth: skip invalid hci_sync_conn_complete_evt
2021-09-20 16:39 7% [PATCH 4.19 000/293] 4.19.207-rc1 review Greg Kroah-Hartman
` (2 preceding siblings ...)
2021-09-20 16:41 10% ` [PATCH 4.19 119/293] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
@ 2021-09-20 16:42 11% ` Greg Kroah-Hartman
2021-09-20 16:42 10% ` [PATCH 4.19 214/293] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
2021-09-20 16:42 9% ` [PATCH 4.19 215/293] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
5 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:42 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+66264bf2fd0476be7e6c,
Desmond Cheong Zhi Xi, Marcel Holtmann, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index 45cc864cf2b3..714a45355610 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -4083,6 +4083,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 4.19 119/293] btrfs: reset replace target device to allocation state on close
2021-09-20 16:39 7% [PATCH 4.19 000/293] 4.19.207-rc1 review Greg Kroah-Hartman
2021-09-20 16:40 11% ` [PATCH 4.19 052/293] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
2021-09-20 16:40 11% ` [PATCH 4.19 079/293] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
@ 2021-09-20 16:41 10% ` Greg Kroah-Hartman
2021-09-20 16:42 11% ` [PATCH 4.19 203/293] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
` (2 subsequent siblings)
5 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:41 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, David Sterba, Anand Jain,
Desmond Cheong Zhi Xi
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
commit 0d977e0eba234e01a60bdde27314dc21374201b3 upstream.
This crash was observed with a failed assertion on device close:
BTRFS: Transaction aborted (error -28)
WARNING: CPU: 1 PID: 3902 at fs/btrfs/extent-tree.c:2150 btrfs_run_delayed_refs+0x1d2/0x1e0 [btrfs]
Modules linked in: btrfs blake2b_generic libcrc32c crc32c_intel xor zstd_decompress zstd_compress xxhash lzo_compress lzo_decompress raid6_pq loop
CPU: 1 PID: 3902 Comm: kworker/u8:4 Not tainted 5.14.0-rc5-default+ #1532
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-59-gc9ba527-rebuilt.opensuse.org 04/01/2014
Workqueue: events_unbound btrfs_async_reclaim_metadata_space [btrfs]
RIP: 0010:btrfs_run_delayed_refs+0x1d2/0x1e0 [btrfs]
RSP: 0018:ffffb7a5452d7d80 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffabee13c4 RDI: 00000000ffffffff
RBP: ffff97834176a378 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff97835195d388
R13: 0000000005b08000 R14: ffff978385484000 R15: 000000000000016c
FS: 0000000000000000(0000) GS:ffff9783bd800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056190d003fe8 CR3: 000000002a81e005 CR4: 0000000000170ea0
Call Trace:
flush_space+0x197/0x2f0 [btrfs]
btrfs_async_reclaim_metadata_space+0x139/0x300 [btrfs]
process_one_work+0x262/0x5e0
worker_thread+0x4c/0x320
? process_one_work+0x5e0/0x5e0
kthread+0x144/0x170
? set_kthread_struct+0x40/0x40
ret_from_fork+0x1f/0x30
irq event stamp: 19334989
hardirqs last enabled at (19334997): [<ffffffffab0e0c87>] console_unlock+0x2b7/0x400
hardirqs last disabled at (19335006): [<ffffffffab0e0d0d>] console_unlock+0x33d/0x400
softirqs last enabled at (19334900): [<ffffffffaba0030d>] __do_softirq+0x30d/0x574
softirqs last disabled at (19334893): [<ffffffffab0721ec>] irq_exit_rcu+0x12c/0x140
---[ end trace 45939e308e0dd3c7 ]---
BTRFS: error (device vdd) in btrfs_run_delayed_refs:2150: errno=-28 No space left
BTRFS info (device vdd): forced readonly
BTRFS warning (device vdd): failed setting block group ro: -30
BTRFS info (device vdd): suspending dev_replace for unmount
assertion failed: !test_bit(BTRFS_DEV_STATE_REPLACE_TGT, &device->dev_state), in fs/btrfs/volumes.c:1150
------------[ cut here ]------------
kernel BUG at fs/btrfs/ctree.h:3431!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 1 PID: 3982 Comm: umount Tainted: G W 5.14.0-rc5-default+ #1532
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-59-gc9ba527-rebuilt.opensuse.org 04/01/2014
RIP: 0010:assertfail.constprop.0+0x18/0x1a [btrfs]
RSP: 0018:ffffb7a5454c7db8 EFLAGS: 00010246
RAX: 0000000000000068 RBX: ffff978364b91c00 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffffabee13c4 RDI: 00000000ffffffff
RBP: ffff9783523a4c00 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff9783523a4d18
R13: 0000000000000000 R14: 0000000000000004 R15: 0000000000000003
FS: 00007f61c8f42800(0000) GS:ffff9783bd800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056190cffa810 CR3: 0000000030b96002 CR4: 0000000000170ea0
Call Trace:
btrfs_close_one_device.cold+0x11/0x55 [btrfs]
close_fs_devices+0x44/0xb0 [btrfs]
btrfs_close_devices+0x48/0x160 [btrfs]
generic_shutdown_super+0x69/0x100
kill_anon_super+0x14/0x30
btrfs_kill_super+0x12/0x20 [btrfs]
deactivate_locked_super+0x2c/0xa0
cleanup_mnt+0x144/0x1b0
task_work_run+0x59/0xa0
exit_to_user_mode_loop+0xe7/0xf0
exit_to_user_mode_prepare+0xaf/0xf0
syscall_exit_to_user_mode+0x19/0x50
do_syscall_64+0x4a/0x90
entry_SYSCALL_64_after_hwframe+0x44/0xae
This happens when close_ctree is called while a dev_replace hasn't
completed. In close_ctree, we suspend the dev_replace, but keep the
replace target around so that we can resume the dev_replace procedure
when we mount the root again. This is the call trace:
close_ctree():
btrfs_dev_replace_suspend_for_unmount();
btrfs_close_devices():
btrfs_close_fs_devices():
btrfs_close_one_device():
ASSERT(!test_bit(BTRFS_DEV_STATE_REPLACE_TGT,
&device->dev_state));
However, since the replace target sticks around, there is a device
with BTRFS_DEV_STATE_REPLACE_TGT set on close, and we fail the
assertion in btrfs_close_one_device.
To fix this, if we come across the replace target device when
closing, we should properly reset it back to allocation state. This
fix also ensures that if a non-target device has a corrupted state and
has the BTRFS_DEV_STATE_REPLACE_TGT bit set, the assertion will still
catch the error.
Reported-by: David Sterba <dsterba@suse.com>
Fixes: b2a616676839 ("btrfs: fix rw device counting in __btrfs_free_extra_devids")
CC: stable@vger.kernel.org # 4.19+
Reviewed-by: Anand Jain <anand.jain@oracle.com>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
fs/btrfs/volumes.c | 3 +++
1 file changed, 3 insertions(+)
--- a/fs/btrfs/volumes.c
+++ b/fs/btrfs/volumes.c
@@ -1048,6 +1048,9 @@ static void btrfs_close_one_device(struc
fs_devices->rw_devices--;
}
+ if (device->devid == BTRFS_DEV_REPLACE_DEVID)
+ clear_bit(BTRFS_DEV_STATE_REPLACE_TGT, &device->dev_state);
+
if (test_bit(BTRFS_DEV_STATE_MISSING, &device->dev_state))
fs_devices->missing_devices--;
^ permalink raw reply [relevance 10%]
* [PATCH 4.19 079/293] Bluetooth: fix repeated calls to sco_sock_kill
2021-09-20 16:39 7% [PATCH 4.19 000/293] 4.19.207-rc1 review Greg Kroah-Hartman
2021-09-20 16:40 11% ` [PATCH 4.19 052/293] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
@ 2021-09-20 16:40 11% ` Greg Kroah-Hartman
2021-09-20 16:41 10% ` [PATCH 4.19 119/293] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
` (3 subsequent siblings)
5 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:40 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit e1dee2c1de2b4dd00eb44004a4bda6326ed07b59 ]
In commit 4e1a720d0312 ("Bluetooth: avoid killing an already killed
socket"), a check was added to sco_sock_kill to skip killing a socket
if the SOCK_DEAD flag was set.
This was done after a trace for a use-after-free bug showed that the
same sock pointer was being killed twice.
Unfortunately, this check prevents sco_sock_kill from running on any
socket. sco_sock_kill kills a socket only if it's zapped and orphaned,
however sock_orphan announces that the socket is dead before detaching
it. i.e., orphaned sockets have the SOCK_DEAD flag set.
To fix this, we remove the check for SOCK_DEAD, and avoid repeated
calls to sco_sock_kill by removing incorrect calls in:
1. sco_sock_timeout. The socket should not be killed on timeout as
further processing is expected to be done. For example,
sco_sock_connect sets the timer then waits for the socket to be
connected or for an error to be returned.
2. sco_conn_del. This function should clean up resources for the
connection, but the socket itself should be cleaned up in
sco_sock_release.
3. sco_sock_close. Calls to sco_sock_close in sco_sock_cleanup_listen
and sco_sock_release are followed by sco_sock_kill. Hence the
duplicated call should be removed.
Fixes: 4e1a720d0312 ("Bluetooth: avoid killing an already killed socket")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 6 +-----
1 file changed, 1 insertion(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 2561e462400e..2fbea653540b 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -84,7 +84,6 @@ static void sco_sock_timeout(struct timer_list *t)
sk->sk_state_change(sk);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -176,7 +175,6 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_sock_clear_timer(sk);
sco_chan_del(sk, err);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -393,8 +391,7 @@ static void sco_sock_cleanup_listen(struct sock *parent)
*/
static void sco_sock_kill(struct sock *sk)
{
- if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket ||
- sock_flag(sk, SOCK_DEAD))
+ if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
return;
BT_DBG("sk %p state %d", sk, sk->sk_state);
@@ -446,7 +443,6 @@ static void sco_sock_close(struct sock *sk)
lock_sock(sk);
__sco_sock_close(sk);
release_sock(sk);
- sco_sock_kill(sk);
}
static void sco_sock_init(struct sock *sk, struct sock *parent)
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 4.19 052/293] fcntl: fix potential deadlock for &fasync_struct.fa_lock
2021-09-20 16:39 7% [PATCH 4.19 000/293] 4.19.207-rc1 review Greg Kroah-Hartman
@ 2021-09-20 16:40 11% ` Greg Kroah-Hartman
2021-09-20 16:40 11% ` [PATCH 4.19 079/293] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
` (4 subsequent siblings)
5 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:40 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Jeff Layton,
Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2f488f698fda820f8e6fa0407630154eceb145d6 ]
There is an existing lock hierarchy of
&dev->event_lock --> &fasync_struct.fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
&dev->event_lock is HARDIRQ-safe, so interrupts have to be disabled
while grabbing &fasync_struct.fa_lock, otherwise we invert the lock
hierarchy. However, since kill_fasync which calls kill_fasync_rcu is
an exported symbol, it may not necessarily be called with interrupts
disabled.
As kill_fasync_rcu may be called with interrupts disabled (for
example, in the call chain above), we replace calls to
read_lock/read_unlock on &fasync_struct.fa_lock in kill_fasync_rcu
with read_lock_irqsave/read_unlock_irqrestore.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index e039af1872ab..dffb5245ae72 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -993,13 +993,14 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
{
while (fa) {
struct fown_struct *fown;
+ unsigned long flags;
if (fa->magic != FASYNC_MAGIC) {
printk(KERN_ERR "kill_fasync: bad magic number in "
"fasync_struct!\n");
return;
}
- read_lock(&fa->fa_lock);
+ read_lock_irqsave(&fa->fa_lock, flags);
if (fa->fa_file) {
fown = &fa->fa_file->f_owner;
/* Don't send SIGURG to processes which have not set a
@@ -1008,7 +1009,7 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
if (!(sig == SIGURG && fown->signum == 0))
send_sigio(fown, fa->fa_fd, band);
}
- read_unlock(&fa->fa_lock);
+ read_unlock_irqrestore(&fa->fa_lock, flags);
fa = rcu_dereference(fa->fa_next);
}
}
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 4.19 000/293] 4.19.207-rc1 review
@ 2021-09-20 16:39 7% Greg Kroah-Hartman
2021-09-20 16:40 11% ` [PATCH 4.19 052/293] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
` (5 more replies)
0 siblings, 6 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:39 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 4.19.207 release.
There are 293 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 22 Sep 2021 16:38:49 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.207-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 4.19.207-rc1
Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Willem de Bruijn <willemb@google.com>
ip_gre: validate csum_start only on pull
Dinghao Liu <dinghao.liu@zju.edu.cn>
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Eric Dumazet <edumazet@google.com>
fq_codel: reject silly quantum parameters
Benjamin Hesmans <benjamin.hesmans@tessares.net>
netfilter: socket: icmp6: fix use-after-scope
Rafał Miłecki <rafal@milecki.pl>
net: dsa: b53: Fix calculating number of switch ports
Randy Dunlap <rdunlap@infradead.org>
ARC: export clear_user_page() for modules
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
Oliver Upton <oupton@google.com>
KVM: arm64: Handle PSCI resets before userspace touches vCPU state
Dan Carpenter <dan.carpenter@oracle.com>
PCI: Fix pci_dev_str_match_path() alloc while atomic bug
Hans de Goede <hdegoede@redhat.com>
mfd: axp20x: Update AXP288 volatile ranges
Yang Li <yang.lee@linux.alibaba.com>
NTB: perf: Fix an error code in perf_setup_inbuf()
Yang Li <yang.lee@linux.alibaba.com>
ethtool: Fix an error code in cxgb2.c
Paolo Valente <paolo.valente@linaro.org>
block, bfq: honor already-setup queue merges
Daniele Palmas <dnlplm@gmail.com>
net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
George Cherian <george.cherian@marvell.com>
PCI: Add ACS quirks for Cavium multi-function devices
Marc Zyngier <maz@kernel.org>
mfd: Don't use irq_create_mapping() to resolve a mapping
Miquel Raynal <miquel.raynal@bootlin.com>
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
Halil Pasic <pasic@linux.ibm.com>
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
David Hildenbrand <david@redhat.com>
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
Yufeng Mo <moyufeng@huawei.com>
net: hns3: pad the short tunnel frame before sending to hardware
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: check failover_pending in login response
Shai Malin <smalin@marvell.com>
qed: Handle management FW error
zhenggy <zhenggy@chinatelecom.cn>
tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
Eric Dumazet <edumazet@google.com>
net/af_unix: fix a data-race in unix_dgram_poll
Baptiste Lepers <baptiste.lepers@gmail.com>
events: Reuse value read using READ_ONCE instead of re-reading it
Maor Gottlieb <maorg@nvidia.com>
net/mlx5: Fix potential sleeping in atomic context
Michael Petlan <mpetlan@redhat.com>
perf machine: Initialize srcline string member in add_location struct
Hoang Le <hoang.h.le@dektech.com.au>
tipc: increase timeout in tipc_sk_enqueue()
Florian Fainelli <f.fainelli@gmail.com>
r6040: Restore MDIO clock frequency after MAC reset
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Lin, Zhenpeng <zplin@psu.edu>
dccp: don't duplicate ccid when cloning dccp sock
Randy Dunlap <rdunlap@infradead.org>
ptp: dp83640: don't define PAGE0
Eric Dumazet <edumazet@google.com>
net-caif: avoid user-triggerable WARN_ON(1)
Xin Long <lucien.xin@gmail.com>
tipc: fix an use-after-free issue in tipc_recvmsg
Mike Rapoport <rppt@linux.ibm.com>
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
Evan Quan <evan.quan@amd.com>
PCI: Add AMD GPU multi-function power dependencies
Juergen Gross <jgross@suse.com>
PM: base: power: don't try to use non-existing RTC for storing data
Mark Brown <broonie@kernel.org>
arm64/sve: Use correct size when reinitialising SVE state
Adrian Bunk <bunk@kernel.org>
bnx2x: Fix enabling network interfaces without VFs
Juergen Gross <jgross@suse.com>
xen: reset legacy rtc flag for PV domU
Ye Bin <yebin10@huawei.com>
dm thin metadata: Fix use-after-free in dm_bm_set_read_only
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix BUG_ON assert
Patryk Duda <pdk@semihalf.com>
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Vasily Averin <vvs@virtuozzo.com>
memcg: enable accounting for pids in nested pid namespaces
Liu Zixian <liuzixian4@huawei.com>
mm/hugetlb: initialize hugetlb_usage in mm_init
Pratik R. Sampat <psampat@linux.ibm.com>
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Maciej W. Rozycki <macro@orcam.me.uk>
scsi: BusLogic: Fix missing pr_cont() use
chenying <chenying.kernel@bytedance.com>
ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
Mikulas Patocka <mpatocka@redhat.com>
parisc: fix crash with signals and alloca
Yang Yingliang <yangyingliang@huawei.com>
net: w5100: check return value after calling platform_get_resource()
王贇 <yun.wang@linux.alibaba.com>
net: fix NULL pointer reference in cipso_v4_doi_free
Miaoqing Pan <miaoqing@codeaurora.org>
ath9k: fix sleeping in atomic context
Zekun Shen <bruceshenzk@gmail.com>
ath9k: fix OOB read ar9300_eeprom_restore_internal
Colin Ian King <colin.king@canonical.com>
parport: remove non-zero check on count
Xiaotan Luo <lxt@rock-chips.com>
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Sugar Zhang <sugar.zhang@rock-chips.com>
ASoC: rockchip: i2s: Fix regmap_ops hang
Shuah Khan <skhan@linuxfoundation.org>
usbip:vhci_hcd USB port can get stuck in the disabled state
Anirudh Rayabharam <mail@anirudhrb.com>
usbip: give back URBs for unsent unlink requests during cleanup
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: musb: musb_dsps: request_irq() after initializing musb
Mathias Nyman <mathias.nyman@linux.intel.com>
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Ding Hui <dinghui@sangfor.com.cn>
cifs: fix wrong release in sess_alloc_buffer() failed path
Nishad Kamdar <nishadkamdar@gmail.com>
mmc: core: Return correct emmc response in case of ioctl error
Li Zhijian <lizhijian@cn.fujitsu.com>
selftests/bpf: Enlarge select() timeout for test_maps
Thomas Hebb <tommyhebb@gmail.com>
mmc: rtsx_pci: Fix long reads when clock is prescaled
Manish Narani <manish.narani@xilinx.com>
mmc: sdhci-of-arasan: Check return value of non-void funtions
Marc Zyngier <maz@kernel.org>
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
Bob Peterson <rpeterso@redhat.com>
gfs2: Don't call dlm after protocol is unmounted
Kees Cook <keescook@chromium.org>
staging: rts5208: Fix get_ms_information() heap buffer size
J. Bruce Fields <bfields@redhat.com>
rpc: fix gss_svc_init cleanup on failure
Luke Hsiao <lukehsiao@google.com>
tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
Ulrich Hecht <uli+renesas@fpond.eu>
serial: sh-sci: fix break handling for sysrq
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: Fix handling of LE Enhanced Connection Complete
Andreas Obergschwandtner <andreas.obergschwandtner@gmail.com>
ARM: tegra: tamonten: Fix UART pad setting
Tuo Li <islituo@gmail.com>
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: avoid circular locks in sco_sock_connect
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: schedule SCO timeouts with delayed_work
Nathan Chancellor <nathan@kernel.org>
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: sdm660: use reg value for memory node
Sebastian Reichel <sebastian.reichel@collabora.com>
ARM: dts: imx53-ppd: Fix ACHC entry
Evgeny Novikov <novikov@ispras.ru>
media: tegra-cec: Handle errors of clk_prepare_enable()
Krzysztof Hałasa <khalasa@piap.pl>
media: TDA1997x: fix tda1997x_query_dv_timings() return value
Hans Verkuil <hverkuil-cisco@xs4all.nl>
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Umang Jain <umang.jain@ideasonboard.com>
media: imx258: Limit the max analogue gain to 480
Laurent Pinchart <laurent.pinchart@ideasonboard.com>
media: imx258: Rectify mismatch of VTS value
Hans de Goede <hdegoede@redhat.com>
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Yufeng Mo <moyufeng@huawei.com>
bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: skip invalid hci_sync_conn_complete_evt
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
Juhee Kang <claudiajkang@gmail.com>
samples: bpf: Fix tracex7 error raised on the missing argument
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
staging: ks7010: Fix the initialization of the 'sleep_status' structure
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Jiri Slaby <jslaby@suse.cz>
hvsi: don't panic on tty_register_driver failure
Jiri Slaby <jslaby@suse.cz>
xtensa: ISS: don't panic in rs_init
Maciej W. Rozycki <macro@orcam.me.uk>
serial: 8250: Define RX trigger levels for OxSemi 950 devices
Heiko Carstens <hca@linux.ibm.com>
s390/jump_label: print real address in a case of a jump label bug
Gustavo A. R. Silva <gustavoars@kernel.org>
flow_dissector: Fix out-of-bounds warnings
Gustavo A. R. Silva <gustavoars@kernel.org>
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: riva: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Do not PASS tests without actually testing the result
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix copy-and-paste error in double word test
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
Zheyu Ma <zheyuma97@gmail.com>
tty: serial: jsm: hold port lock when reporting modem line changes
Geert Uytterhoeven <geert+renesas@glider.be>
staging: board: Fix uninitialized spinlock when attaching genpd
Jack Pham <jackp@codeaurora.org>
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Maciej Żenczykowski <maze@google.com>
usb: gadget: u_ether: fix a potential null pointer dereference
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the actual_length of an iso packet
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Smack: Fix wrong semantics in smk_access_entry()
Yajun Deng <yajun.deng@linux.dev>
netlink: Deal with ESRCH error in nlmsg_notify()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: fix a DoS bug by restricting user input
David Heidelberg <david@ixit.cz>
ARM: dts: qcom: apq8064: correct clock names
Jonathan Cameron <Jonathan.Cameron@huawei.com>
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Xin Long <lucien.xin@gmail.com>
tipc: keep the skb in rcv queue until the whole data is read
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: dib8000: rewrite the init prbs logic
Nadav Amit <namit@vmware.com>
userfaultfd: prevent concurrent API initialization
Oleksij Rempel <o.rempel@pengutronix.de>
MIPS: Malta: fix alignment of the devicetree buffer
Chao Yu <chao@kernel.org>
f2fs: fix to unmap pages from userspace process in punch_hole()
Chao Yu <chao@kernel.org>
f2fs: fix to account missing .skipped_gc_rwsem
David Howells <dhowells@redhat.com>
fscache: Fix cookie key hashing
Hans de Goede <hdegoede@redhat.com>
platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
Dan Carpenter <dan.carpenter@oracle.com>
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
Zhen Lei <thunder.leizhen@huawei.com>
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Randy Dunlap <rdunlap@infradead.org>
openrisc: don't printk() unconditionally
Michal Suchanek <msuchanek@suse.de>
powerpc/stacktrace: Include linux/delay.h
Jason Gunthorpe <jgg@nvidia.com>
vfio: Use config not menuconfig for VFIO_NOIOMMU
Jaehyoung Choi <jkkkkk.choi@samsung.com>
pinctrl: samsung: Fix pinctrl bank pin count
Leon Romanovsky <leonro@nvidia.com>
docs: Fix infiniband uverbs minor number
Leon Romanovsky <leonro@nvidia.com>
RDMA/iwcm: Release resources if iw_cm module initialization fails
Dmitry Torokhov <dmitry.torokhov@gmail.com>
HID: input: do not report stylus battery state as "full"
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
Hyun Kwon <hyun.kwon@xilinx.com>
PCI: xilinx-nwl: Enable the clock through CCF
Krzysztof Wilczyński <kw@linux.com>
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Marek Behún <kabel@kernel.org>
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
David Heidelberg <david@ixit.cz>
ARM: 9105/1: atags_to_fdt: don't warn about stack size
Hans de Goede <hdegoede@redhat.com>
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
Sean Young <sean@mess.org>
media: rc-loopback: return number of emitters rather than error
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: uvc: don't do DMA on stack
Wang Hai <wanghai38@huawei.com>
VMCI: fix NULL pointer dereference when unmapping queue pair
Arne Welzel <arne.welzel@corelight.com>
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
power: supply: max17042: handle fails of reading status register
Damien Le Moal <damien.lemoal@wdc.com>
block: bfq: fix bfq_set_next_ioprio_data()
zhenwei pi <pizhenwei@bytedance.com>
crypto: public_key: fix overflow during implicit conversion
Mark Rutland <mark.rutland@arm.com>
arm64: head: avoid over-mapping in map_memory
Iwona Winiarska <iwona.winiarska@intel.com>
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
Rolf Eike Beer <eb@emlix.com>
tools/thermal/tmon: Add cross compiling support
Daniel Borkmann <daniel@iogearbox.net>
bpf: Fix pointer arithmetic mask tightening under state pruning
Lorenz Bauer <lmb@cloudflare.com>
bpf: verifier: Allocate idmap scratch in verifier env
Daniel Borkmann <daniel@iogearbox.net>
bpf: Fix leakage due to insufficient speculative store bypass mitigation
Daniel Borkmann <daniel@iogearbox.net>
bpf: Introduce BPF nospec instruction for mitigating Spectre v4
Alexei Starovoitov <ast@kernel.org>
selftests/bpf: fix tests due to const spill/fill
Alexei Starovoitov <ast@kernel.org>
bpf: track spill/fill of constants
Andrey Ignatov <rdna@fb.com>
selftests/bpf: Test variable offset stack access
Andrey Ignatov <rdna@fb.com>
bpf: Sanity check max value for var_off stack access
Andrey Ignatov <rdna@fb.com>
bpf: Reject indirect var_off stack access in unpriv mode
Andrey Ignatov <rdna@fb.com>
bpf: Reject indirect var_off stack access in raw mode
Andrey Ignatov <rdna@fb.com>
bpf: Support variable offset stack access from helpers
Jiong Wang <jiong.wang@netronome.com>
bpf: correct slot_type marking logic to allow more stack slot sharing
Edward Cree <ecree@solarflare.com>
bpf/verifier: per-register parent pointers
Harshvardhan Jha <harshvardhan.jha@oracle.com>
9p/xen: Fix end of loop tests for list_for_each_entry
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
include/linux/list.h: add a macro to test if entry is pointing to the head
Juergen Gross <jgross@suse.com>
xen: fix setting of max_pfn in shared_info
Kajol Jain <kjain@linux.ibm.com>
powerpc/perf/hv-gpci: Fix counter value parsing
Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
PCI/MSI: Skip masking MSI-X on Xen PV
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
btrfs: reset replace target device to allocation state on close
Dmitry Osipenko <digetx@gmail.com>
rtc: tps65910: Correct driver module alias
Linus Walleij <linus.walleij@linaro.org>
clk: kirkwood: Fix a clocking boot regression
Daniel Thompson <daniel.thompson@linaro.org>
backlight: pwm_bl: Improve bootloader/kernel device handover
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
fbmem: don't allow too huge resolutions
THOBY Simon <Simon.THOBY@viveris.fr>
IMA: remove the dependency on CRYPTO_MD5
Austin Kim <austin.kim@lge.com>
IMA: remove -Wmissing-prototypes warning
Zelin Deng <zelin.deng@linux.alibaba.com>
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Babu Moger <babu.moger@amd.com>
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
Nguyen Dinh Phi <phind.uet@gmail.com>
tty: Fix data race between tiocsti() and flush_to_ldisc()
Eric Biggers <ebiggers@google.com>
ubifs: report correct st_size for encrypted symlinks
Eric Biggers <ebiggers@google.com>
f2fs: report correct st_size for encrypted symlinks
Eric Biggers <ebiggers@google.com>
ext4: report correct st_size for encrypted symlinks
Eric Biggers <ebiggers@google.com>
fscrypt: add fscrypt_symlink_getattr() for computing st_size
Guillaume Nault <gnault@redhat.com>
netns: protect netns ID lookups with RCU
Eric Dumazet <edumazet@google.com>
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
Stefan Wahren <stefan.wahren@i2se.com>
net: qualcomm: fix QCA7000 checksum handling
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
Eric Dumazet <edumazet@google.com>
ipv4: make exception cache less predictible
Zenghui Yu <yuzenghui@huawei.com>
bcma: Fix memory leak for internally-handled cores
Dan Carpenter <dan.carpenter@oracle.com>
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
Andy Duan <fugang.duan@nxp.com>
tty: serial: fsl_lpuart: fix the wrong mapbase value
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
Evgeny Novikov <novikov@ispras.ru>
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: mt65xx: fix IRQ check
Len Baker <len.baker@gmx.com>
CIFS: Fix a potencially linear read overflow
Tony Lindgren <tony@atomide.com>
mmc: moxart: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: s3c2410: fix IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: iop3xx: fix deferred probing
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: add timeout sanity check to hci_inquiry
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: gadget: mv_u3d: request_irq() after initializing UDC
Chih-Kang Chang <gary.chang@realtek.com>
mac80211: Fix insufficient headroom issue for AMSDU
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: tahvo: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: host: ohci-tmio: add IRQ check
Kai-Heng Feng <kai.heng.feng@canonical.com>
Bluetooth: Move shutdown callback before flushing tx and rx queue
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: twl6030: add IRQ checks
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: fsl-usb: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: gadget: udc: at91: add IRQ check
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
drm/msm/dsi: Fix some reference counted resource leaks
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix repeated calls to sco_sock_kill
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
Colin Ian King <colin.king@canonical.com>
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Stephan Gerhold <stephan@gerhold.net>
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Enable PME if it can be signaled from D3cold
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
Colin Ian King <colin.king@canonical.com>
media: venus: venc: Fix potential null pointer dereference on pointer fmt
Dongliang Mu <mudongliangabcd@gmail.com>
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: highlander: add IRQ check
Pavel Skripkin <paskripkin@gmail.com>
net: cipso: fix warnings in netlbl_cipsov4_add_std
Martin KaFai Lau <kafai@fb.com>
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Dan Carpenter <dan.carpenter@oracle.com>
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
Pavel Skripkin <paskripkin@gmail.com>
media: go7007: remove redundant initialization
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
Geert Uytterhoeven <geert+renesas@glider.be>
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
Krzysztof Hałasa <khalasa@piap.pl>
media: TDA1997x: enable EDID support
Chunyan Zhang <chunyan.zhang@unisoc.com>
spi: sprd: Fix the wrong WDG_LOAD_VAL
Stefan Berger <stefanb@linux.ibm.com>
certs: Trigger creation of RSA module signing key if it's not an RSA key
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - use proper type for vf_mask
Phong Hoang <phong.hoang.wz@renesas.com>
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Hongbo Li <herberthbli@tencent.com>
lib/mpi: use kcalloc in mpi_resize
Tony Lindgren <tony@atomide.com>
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
Pavel Skripkin <paskripkin@gmail.com>
m68k: emu: Fix invalid free in nfeth_cleanup()
Stian Skjelstad <stian.skjelstad@gmail.com>
udf_get_extendedattr() had no boundary checks.
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
fcntl: fix potential deadlock for &fasync_struct.fa_lock
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not export adf_iov_putmsg()
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix reuse of completion variable
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - handle both source of interrupt in VF ISR
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not ignore errors from enable_vf2pf_comms()
Damien Le Moal <damien.lemoal@wdc.com>
libata: fix ata_host_start()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: add dev_busid sysfs entry for each subchannel
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Ruozhu Li <liruozhu@huawei.com>
nvme-rdma: don't update queue count when failing to set io queues
Christoph Hellwig <hch@lst.de>
bcache: add proper error unwinding in bcache_device_init
Pali Rohár <pali@kernel.org>
isofs: joliet: Fix iocharset=utf8 mount option
Jan Kara <jack@suse.cz>
udf: Check LVID earlier
Thomas Gleixner <tglx@linutronix.de>
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
Dietmar Eggemann <dietmar.eggemann@arm.com>
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
Tony Lindgren <tony@atomide.com>
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
Hans de Goede <hdegoede@redhat.com>
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
Quentin Perret <qperret@google.com>
sched/deadline: Fix reset_on_fork reporting of DL tasks
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Check for DMA mapping errors
Jeongtae Park <jeongtae.park@gmail.com>
regmap: fix the offset of register error log
Peter Zijlstra <peterz@infradead.org>
locking/mutex: Fix HANDOFF condition
Marek Behún <kabel@kernel.org>
PCI: Call Max Payload Size-related fixup quirks early
Paul Gortmaker <paul.gortmaker@windriver.com>
x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
Chunfeng Yun <chunfeng.yun@mediatek.com>
usb: mtu3: fix the wrong HS mult value
Chunfeng Yun <chunfeng.yun@mediatek.com>
usb: mtu3: use @mult for HS isoc or intr
Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
usb: host: xhci-rcar: Don't reload firmware after the completion
Alexander Tsoy <alexander@tsoy.me>
ALSA: usb-audio: Add registration quirk for JBL Quantum 800
Qu Wenruo <wqu@suse.com>
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
Muchun Song <songmuchun@bytedance.com>
mm/page_alloc: speed up the iteration of max_order
Esben Haabendal <esben@geanix.com>
net: ll_temac: Remove left-over debug message
Fangrui Song <maskray@google.com>
powerpc/boot: Delete unneeded .globl _zimage_start
Michael Ellerman <mpe@ellerman.id.au>
powerpc/module64: Fix comment in R_PPC64_ENTRY handling
Christophe Leroy <christophe.leroy@c-s.fr>
crypto: talitos - reduce max key size for SEC1
Trond Myklebust <trondmy@gmail.com>
SUNRPC/nfs: Fix return value for nfs4_callback_compound()
Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
Tom Rix <trix@redhat.com>
USB: serial: mos7720: improve OOM-handling in read_mos_reg()
Liu Jian <liujian56@huawei.com>
igmp: Add ip_mc_list lock in ip_check_mc_rcu
Colin Ian King <colin.king@canonical.com>
ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init
Yang Yingliang <yangyingliang@huawei.com>
ARM: imx: add missing clk_disable_unprepare()
Pavel Skripkin <paskripkin@gmail.com>
media: stkwebcam: fix memory leak in stk_camera_probe
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
clk: fix build warning for orphan_list
Zubin Mithra <zsm@chromium.org>
ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
Ben Dooks <ben-linux@fluff.org>
ARM: 8918/2: only build return_address() if needed
Christoph Hellwig <hch@lst.de>
cryptoloop: add a deprecation warning
Kim Phillips <kim.phillips@amd.com>
perf/x86/amd/ibs: Work around erratum #1197
Xiaoyao Li <xiaoyao.li@intel.com>
perf/x86/intel/pt: Fix mask of num_address_ranges
Shai Malin <smalin@marvell.com>
qede: Fix memset corruption
Harini Katakam <harini.katakam@xilinx.com>
net: macb: Add a NULL check on desc_ptp
Shai Malin <smalin@marvell.com>
qed: Fix the VF msix vectors flow
Krzysztof Hałasa <khalasa@piap.pl>
gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V formats
Randy Dunlap <rdunlap@infradead.org>
xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
Theodore Ts'o <tytso@mit.edu>
ext4: fix race writing to an inline_data file while its xattrs are changing
-------------
Diffstat:
Documentation/admin-guide/devices.txt | 6 +-
.../devicetree/bindings/mtd/gpmc-nand.txt | 2 +-
Makefile | 4 +-
arch/arc/mm/cache.c | 2 +-
arch/arm/boot/compressed/Makefile | 2 +
arch/arm/boot/dts/imx53-ppd.dts | 23 +-
arch/arm/boot/dts/qcom-apq8064.dtsi | 6 +-
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 +-
arch/arm/kernel/Makefile | 6 +-
arch/arm/kernel/return_address.c | 4 -
arch/arm/mach-imx/mmdc.c | 14 +-
arch/arm/net/bpf_jit_32.c | 3 +
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2 +-
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2 +-
arch/arm64/include/asm/kernel-pgtable.h | 4 +-
arch/arm64/kernel/fpsimd.c | 2 +-
arch/arm64/kernel/head.S | 11 +-
arch/arm64/net/bpf_jit_comp.c | 13 +
arch/m68k/emu/nfeth.c | 4 +-
arch/mips/mti-malta/malta-dtshim.c | 2 +-
arch/mips/net/ebpf_jit.c | 3 +
arch/openrisc/kernel/entry.S | 2 +
arch/parisc/kernel/signal.c | 6 +
arch/powerpc/boot/crt0.S | 3 -
arch/powerpc/kernel/module_64.c | 2 +-
arch/powerpc/kernel/stacktrace.c | 1 +
arch/powerpc/net/bpf_jit_comp64.c | 6 +
arch/powerpc/perf/hv-gpci.c | 2 +-
arch/s390/kernel/jump_label.c | 2 +-
arch/s390/kvm/interrupt.c | 4 +-
arch/s390/kvm/kvm-s390.h | 2 +-
arch/s390/net/bpf_jit_comp.c | 5 +
arch/sparc/net/bpf_jit_comp_64.c | 3 +
arch/x86/events/amd/ibs.c | 8 +
arch/x86/events/intel/pt.c | 2 +-
arch/x86/kernel/cpu/intel_rdt_monitor.c | 6 +
arch/x86/kernel/reboot.c | 3 +-
arch/x86/kvm/x86.c | 4 +
arch/x86/mm/init_64.c | 6 +-
arch/x86/net/bpf_jit_comp.c | 7 +
arch/x86/net/bpf_jit_comp32.c | 6 +
arch/x86/xen/enlighten_pv.c | 7 +
arch/x86/xen/p2m.c | 4 +-
arch/xtensa/Kconfig | 2 +-
arch/xtensa/platforms/iss/console.c | 17 +-
block/bfq-iosched.c | 18 +-
block/blk-zoned.c | 6 -
certs/Makefile | 8 +
drivers/ata/libata-core.c | 6 +-
drivers/ata/sata_dwc_460ex.c | 12 +-
drivers/base/power/trace.c | 10 +
drivers/base/regmap/regmap.c | 2 +-
drivers/bcma/main.c | 6 +-
drivers/block/Kconfig | 4 +-
drivers/block/cryptoloop.c | 2 +
drivers/clk/clk.c | 10 +-
drivers/clk/mvebu/kirkwood.c | 1 +
drivers/clocksource/sh_cmt.c | 30 +-
drivers/cpufreq/powernv-cpufreq.c | 16 +-
drivers/crypto/mxs-dcp.c | 81 ++--
drivers/crypto/omap-sham.c | 2 +-
.../crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_common/adf_common_drv.h | 8 +-
drivers/crypto/qat/qat_common/adf_init.c | 5 +-
drivers/crypto/qat/qat_common/adf_isr.c | 7 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3 +-
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12 +-
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7 +-
.../qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4 +-
drivers/crypto/talitos.c | 4 +
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 2 +-
.../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 16 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 10 +-
drivers/gpu/drm/msm/dsi/dsi.c | 6 +-
drivers/gpu/ipu-v3/ipu-cpmem.c | 30 +-
drivers/hid/hid-input.c | 2 -
drivers/i2c/busses/i2c-highlander.c | 2 +-
drivers/i2c/busses/i2c-iop3xx.c | 6 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-s3c2410.c | 2 +-
drivers/iio/dac/ad5624r_spi.c | 18 +-
drivers/infiniband/core/iwcm.c | 19 +-
drivers/md/bcache/super.c | 16 +-
drivers/md/dm-crypt.c | 7 +-
drivers/md/dm-thin-metadata.c | 2 +-
drivers/md/persistent-data/dm-block-manager.c | 14 +-
drivers/media/dvb-frontends/dib8000.c | 58 ++-
drivers/media/i2c/imx258.c | 4 +-
drivers/media/i2c/tda1997x.c | 6 +-
drivers/media/platform/qcom/venus/venc.c | 2 +
drivers/media/platform/tegra-cec/tegra_cec.c | 10 +-
drivers/media/rc/rc-loopback.c | 2 +-
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6 +-
drivers/media/usb/dvb-usb/vp702x.c | 12 +-
drivers/media/usb/em28xx/em28xx-input.c | 1 -
drivers/media/usb/go7007/go7007-driver.c | 26 --
drivers/media/usb/stkwebcam/stk-webcam.c | 6 +-
drivers/media/usb/uvc/uvc_v4l2.c | 34 +-
drivers/media/v4l2-core/v4l2-dv-timings.c | 4 +-
drivers/mfd/ab8500-core.c | 2 +-
drivers/mfd/axp20x.c | 3 +-
drivers/mfd/stmpe.c | 4 +-
drivers/mfd/tc3589x.c | 2 +-
drivers/mfd/wm8994-irq.c | 2 +-
drivers/misc/aspeed-lpc-ctrl.c | 2 +-
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6 +-
drivers/mmc/core/block.c | 3 +-
drivers/mmc/host/dw_mmc.c | 1 +
drivers/mmc/host/moxart-mmc.c | 1 +
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 +-
drivers/mmc/host/sdhci-of-arasan.c | 18 +-
drivers/mtd/nand/raw/cafe_nand.c | 4 +-
drivers/net/bonding/bond_main.c | 3 +-
drivers/net/dsa/b53/b53_common.c | 3 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2 +-
drivers/net/ethernet/cadence/macb_ptp.c | 11 +-
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 1 +
drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 9 +-
drivers/net/ethernet/ibm/ibmvnic.c | 8 +
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 5 +-
drivers/net/ethernet/qlogic/qed/qed_main.c | 7 +-
drivers/net/ethernet/qlogic/qed/qed_mcp.c | 6 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 2 +-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 1 -
drivers/net/ethernet/qualcomm/qca_spi.c | 2 +-
drivers/net/ethernet/qualcomm/qca_uart.c | 2 +-
drivers/net/ethernet/rdc/r6040.c | 9 +-
drivers/net/ethernet/renesas/sh_eth.c | 1 +
.../net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 +-
drivers/net/ethernet/wiznet/w5100.c | 2 +
drivers/net/ethernet/xilinx/ll_temac_main.c | 4 +-
drivers/net/phy/dp83640_reg.h | 2 +-
drivers/net/usb/cdc_mbim.c | 5 +
drivers/net/wireless/ath/ath6kl/wmi.c | 4 +-
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3 +-
drivers/net/wireless/ath/ath9k/hw.c | 12 +-
drivers/ntb/test/ntb_perf.c | 1 +
drivers/nvme/host/rdma.c | 4 +-
drivers/of/kobj.c | 2 +-
drivers/parport/ieee1284_ops.c | 2 +-
drivers/pci/controller/pci-aardvark.c | 11 +-
drivers/pci/controller/pcie-xilinx-nwl.c | 12 +
drivers/pci/msi.c | 3 +
drivers/pci/pci.c | 33 +-
drivers/pci/quirks.c | 26 +-
drivers/pci/syscall.c | 4 +-
drivers/pinctrl/pinctrl-single.c | 1 +
drivers/pinctrl/samsung/pinctrl-samsung.c | 2 +-
drivers/platform/chrome/cros_ec_proto.c | 9 +
drivers/platform/x86/dell-smbios-wmi.c | 1 +
drivers/power/supply/axp288_fuel_gauge.c | 4 +-
drivers/power/supply/max17042_battery.c | 8 +-
drivers/rtc/rtc-tps65910.c | 2 +-
drivers/s390/cio/css.c | 17 +
drivers/scsi/BusLogic.c | 4 +-
drivers/scsi/qedi/qedi_main.c | 14 +-
drivers/scsi/qla2xxx/qla_nvme.c | 5 +-
drivers/soc/qcom/smsm.c | 11 +-
drivers/soc/rockchip/Kconfig | 4 +-
drivers/spi/spi-fsl-dspi.c | 1 +
drivers/spi/spi-pic32.c | 1 +
drivers/spi/spi-sprd-adi.c | 2 +-
drivers/staging/board/board.c | 7 +-
drivers/staging/ks7010/ks7010_sdio.c | 2 +-
drivers/staging/rts5208/rtsx_scsi.c | 10 +-
drivers/tty/hvc/hvsi.c | 19 +-
drivers/tty/serial/8250/8250_pci.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/fsl_lpuart.c | 2 +-
drivers/tty/serial/jsm/jsm_neo.c | 2 +
drivers/tty/serial/jsm/jsm_tty.c | 3 +
drivers/tty/serial/sh-sci.c | 7 +-
drivers/tty/tty_io.c | 4 +-
drivers/usb/gadget/composite.c | 8 +-
drivers/usb/gadget/function/u_ether.c | 5 +-
drivers/usb/gadget/udc/at91_udc.c | 4 +-
drivers/usb/gadget/udc/bdc/bdc_core.c | 3 +-
drivers/usb/gadget/udc/mv_u3d_core.c | 19 +-
drivers/usb/host/ehci-orion.c | 8 +-
drivers/usb/host/fotg210-hcd.c | 41 +-
drivers/usb/host/fotg210.h | 5 -
drivers/usb/host/ohci-tmio.c | 3 +
drivers/usb/host/xhci-rcar.c | 7 +
drivers/usb/host/xhci.c | 24 +-
drivers/usb/mtu3/mtu3_gadget.c | 6 +-
drivers/usb/musb/musb_dsps.c | 13 +-
drivers/usb/phy/phy-fsl-usb.c | 2 +
drivers/usb/phy/phy-tahvo.c | 4 +-
drivers/usb/phy/phy-twl6030-usb.c | 5 +
drivers/usb/serial/mos7720.c | 4 +-
drivers/usb/usbip/vhci_hcd.c | 32 +-
drivers/vfio/Kconfig | 2 +-
drivers/video/backlight/pwm_bl.c | 54 +--
drivers/video/fbdev/asiliantfb.c | 3 +
drivers/video/fbdev/core/fbmem.c | 6 +
drivers/video/fbdev/kyro/fbdev.c | 8 +
drivers/video/fbdev/riva/fbdev.c | 3 +
fs/btrfs/inode.c | 2 +-
fs/btrfs/volumes.c | 3 +
fs/cifs/cifs_unicode.c | 9 +-
fs/cifs/sess.c | 2 +-
fs/crypto/hooks.c | 44 ++
fs/ext4/inline.c | 6 +
fs/ext4/symlink.c | 11 +-
fs/f2fs/file.c | 4 +-
fs/f2fs/gc.c | 4 +-
fs/f2fs/namei.c | 11 +-
fs/fcntl.c | 5 +-
fs/fscache/cookie.c | 14 +-
fs/fscache/internal.h | 2 +
fs/fscache/main.c | 39 ++
fs/gfs2/lock_dlm.c | 5 +
fs/isofs/inode.c | 27 +-
fs/isofs/isofs.h | 1 -
fs/isofs/joliet.c | 4 +-
fs/nfs/callback_xdr.c | 2 +-
fs/overlayfs/dir.c | 6 +-
fs/ubifs/file.c | 12 +-
fs/udf/misc.c | 13 +-
fs/udf/super.c | 25 +-
fs/userfaultfd.c | 93 ++--
include/crypto/public_key.h | 4 +-
include/linux/bpf_verifier.h | 19 +-
include/linux/filter.h | 15 +
include/linux/fscrypt_notsupp.h | 6 +
include/linux/fscrypt_supp.h | 1 +
include/linux/hugetlb.h | 9 +
include/linux/list.h | 29 +-
include/linux/memory_hotplug.h | 4 +-
include/linux/pci.h | 5 +-
include/linux/power/max17042_battery.h | 2 +-
include/linux/skbuff.h | 2 +-
include/linux/sunrpc/svc.h | 2 +
include/uapi/linux/pkt_sched.h | 2 +
include/uapi/linux/serial_reg.h | 1 +
kernel/bpf/core.c | 18 +-
kernel/bpf/disasm.c | 16 +-
kernel/bpf/verifier.c | 498 ++++++++++-----------
kernel/events/core.c | 2 +-
kernel/fork.c | 1 +
kernel/locking/mutex.c | 15 +-
kernel/pid_namespace.c | 3 +-
kernel/sched/deadline.c | 8 +-
kernel/sched/sched.h | 2 +
kernel/time/hrtimer.c | 60 ++-
lib/mpi/mpiutil.c | 2 +-
lib/test_bpf.c | 13 +-
mm/memory_hotplug.c | 4 +-
mm/page_alloc.c | 8 +-
net/9p/trans_xen.c | 4 +-
net/bluetooth/cmtp/cmtp.h | 2 +-
net/bluetooth/hci_core.c | 14 +
net/bluetooth/hci_event.c | 108 +++--
net/bluetooth/sco.c | 85 ++--
net/caif/chnl_net.c | 19 +-
net/core/flow_dissector.c | 12 +-
net/core/net_namespace.c | 18 +-
net/dccp/minisocks.c | 2 +
net/dsa/slave.c | 12 +-
net/ipv4/icmp.c | 23 +-
net/ipv4/igmp.c | 2 +
net/ipv4/ip_gre.c | 9 +-
net/ipv4/ip_output.c | 5 +-
net/ipv4/route.c | 48 +-
net/ipv4/tcp_fastopen.c | 3 +-
net/ipv4/tcp_input.c | 2 +-
net/ipv4/tcp_ipv4.c | 5 +-
net/ipv6/netfilter/nf_socket_ipv6.c | 4 +-
net/l2tp/l2tp_core.c | 4 +-
net/mac80211/tx.c | 4 +-
net/netlabel/netlabel_cipso_v4.c | 12 +-
net/netlink/af_netlink.c | 4 +-
net/sched/sch_cbq.c | 2 +-
net/sched/sch_fq_codel.c | 12 +-
net/sunrpc/auth_gss/svcauth_gss.c | 2 +-
net/sunrpc/svc.c | 27 +-
net/tipc/socket.c | 36 +-
net/unix/af_unix.c | 2 +-
samples/bpf/test_override_return.sh | 1 +
samples/bpf/tracex7_user.c | 5 +
security/integrity/ima/Kconfig | 1 -
security/integrity/ima/ima_mok.c | 2 +-
security/smack/smack_access.c | 17 +-
sound/core/pcm_lib.c | 2 +-
sound/soc/intel/boards/bytcr_rt5640.c | 9 +-
sound/soc/rockchip/rockchip_i2s.c | 35 +-
sound/usb/quirks.c | 1 +
tools/perf/util/machine.c | 1 +
tools/testing/selftests/bpf/test_maps.c | 2 +-
tools/testing/selftests/bpf/test_verifier.c | 144 +++++-
tools/thermal/tmon/Makefile | 2 +-
virt/kvm/arm/arm.c | 8 +
294 files changed, 2182 insertions(+), 1183 deletions(-)
^ permalink raw reply [relevance 7%]
* [PATCH 4.14 163/217] Bluetooth: avoid circular locks in sco_sock_connect
2021-09-20 16:40 5% [PATCH 4.14 000/217] 4.14.247-rc1 review Greg Kroah-Hartman
2021-09-20 16:41 11% ` [PATCH 4.14 065/217] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2021-09-20 16:42 11% ` [PATCH 4.14 158/217] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
@ 2021-09-20 16:43 9% ` Greg Kroah-Hartman
2 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:43 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index f4b997fb33d6..f681e7ce8945 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -209,44 +209,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -254,7 +242,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -264,9 +252,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -550,6 +535,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -564,12 +550,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH 4.14 158/217] Bluetooth: skip invalid hci_sync_conn_complete_evt
2021-09-20 16:40 5% [PATCH 4.14 000/217] 4.14.247-rc1 review Greg Kroah-Hartman
2021-09-20 16:41 11% ` [PATCH 4.14 065/217] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
@ 2021-09-20 16:42 11% ` Greg Kroah-Hartman
2021-09-20 16:43 9% ` [PATCH 4.14 163/217] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
2 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:42 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+66264bf2fd0476be7e6c,
Desmond Cheong Zhi Xi, Marcel Holtmann, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index b3253f2e11af..5186f199d892 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -3761,6 +3761,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 4.14 065/217] Bluetooth: fix repeated calls to sco_sock_kill
2021-09-20 16:40 5% [PATCH 4.14 000/217] 4.14.247-rc1 review Greg Kroah-Hartman
@ 2021-09-20 16:41 11% ` Greg Kroah-Hartman
2021-09-20 16:42 11% ` [PATCH 4.14 158/217] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
2021-09-20 16:43 9% ` [PATCH 4.14 163/217] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
2 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:41 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit e1dee2c1de2b4dd00eb44004a4bda6326ed07b59 ]
In commit 4e1a720d0312 ("Bluetooth: avoid killing an already killed
socket"), a check was added to sco_sock_kill to skip killing a socket
if the SOCK_DEAD flag was set.
This was done after a trace for a use-after-free bug showed that the
same sock pointer was being killed twice.
Unfortunately, this check prevents sco_sock_kill from running on any
socket. sco_sock_kill kills a socket only if it's zapped and orphaned,
however sock_orphan announces that the socket is dead before detaching
it. i.e., orphaned sockets have the SOCK_DEAD flag set.
To fix this, we remove the check for SOCK_DEAD, and avoid repeated
calls to sco_sock_kill by removing incorrect calls in:
1. sco_sock_timeout. The socket should not be killed on timeout as
further processing is expected to be done. For example,
sco_sock_connect sets the timer then waits for the socket to be
connected or for an error to be returned.
2. sco_conn_del. This function should clean up resources for the
connection, but the socket itself should be cleaned up in
sco_sock_release.
3. sco_sock_close. Calls to sco_sock_close in sco_sock_cleanup_listen
and sco_sock_release are followed by sco_sock_kill. Hence the
duplicated call should be removed.
Fixes: 4e1a720d0312 ("Bluetooth: avoid killing an already killed socket")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 6 +-----
1 file changed, 1 insertion(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 930828ec2afb..f4b997fb33d6 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -84,7 +84,6 @@ static void sco_sock_timeout(unsigned long arg)
sk->sk_state_change(sk);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -176,7 +175,6 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_sock_clear_timer(sk);
sco_chan_del(sk, err);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -393,8 +391,7 @@ static void sco_sock_cleanup_listen(struct sock *parent)
*/
static void sco_sock_kill(struct sock *sk)
{
- if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket ||
- sock_flag(sk, SOCK_DEAD))
+ if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
return;
BT_DBG("sk %p state %d", sk, sk->sk_state);
@@ -446,7 +443,6 @@ static void sco_sock_close(struct sock *sk)
lock_sock(sk);
__sco_sock_close(sk);
release_sock(sk);
- sco_sock_kill(sk);
}
static void sco_sock_init(struct sock *sk, struct sock *parent)
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 4.14 000/217] 4.14.247-rc1 review
@ 2021-09-20 16:40 5% Greg Kroah-Hartman
2021-09-20 16:41 11% ` [PATCH 4.14 065/217] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
` (2 more replies)
0 siblings, 3 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:40 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 4.14.247 release.
There are 217 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 22 Sep 2021 16:38:49 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.247-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 4.14.247-rc1
Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Dinghao Liu <dinghao.liu@zju.edu.cn>
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Benjamin Hesmans <benjamin.hesmans@tessares.net>
netfilter: socket: icmp6: fix use-after-scope
Rafał Miłecki <rafal@milecki.pl>
net: dsa: b53: Fix calculating number of switch ports
Randy Dunlap <rdunlap@infradead.org>
ARC: export clear_user_page() for modules
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
Yang Li <yang.lee@linux.alibaba.com>
ethtool: Fix an error code in cxgb2.c
Daniele Palmas <dnlplm@gmail.com>
net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
George Cherian <george.cherian@marvell.com>
PCI: Add ACS quirks for Cavium multi-function devices
Marc Zyngier <maz@kernel.org>
mfd: Don't use irq_create_mapping() to resolve a mapping
Miquel Raynal <miquel.raynal@bootlin.com>
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
David Hildenbrand <david@redhat.com>
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: check failover_pending in login response
zhenggy <zhenggy@chinatelecom.cn>
tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
Eric Dumazet <edumazet@google.com>
net/af_unix: fix a data-race in unix_dgram_poll
Baptiste Lepers <baptiste.lepers@gmail.com>
events: Reuse value read using READ_ONCE instead of re-reading it
Hoang Le <hoang.h.le@dektech.com.au>
tipc: increase timeout in tipc_sk_enqueue()
Florian Fainelli <f.fainelli@gmail.com>
r6040: Restore MDIO clock frequency after MAC reset
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Lin, Zhenpeng <zplin@psu.edu>
dccp: don't duplicate ccid when cloning dccp sock
Randy Dunlap <rdunlap@infradead.org>
ptp: dp83640: don't define PAGE0
Eric Dumazet <edumazet@google.com>
net-caif: avoid user-triggerable WARN_ON(1)
Mike Rapoport <rppt@linux.ibm.com>
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
Juergen Gross <jgross@suse.com>
PM: base: power: don't try to use non-existing RTC for storing data
Adrian Bunk <bunk@kernel.org>
bnx2x: Fix enabling network interfaces without VFs
Juergen Gross <jgross@suse.com>
xen: reset legacy rtc flag for PV domU
Patryk Duda <pdk@semihalf.com>
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Vasily Averin <vvs@virtuozzo.com>
memcg: enable accounting for pids in nested pid namespaces
Liu Zixian <liuzixian4@huawei.com>
mm/hugetlb: initialize hugetlb_usage in mm_init
Pratik R. Sampat <psampat@linux.ibm.com>
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Maciej W. Rozycki <macro@orcam.me.uk>
scsi: BusLogic: Fix missing pr_cont() use
Mikulas Patocka <mpatocka@redhat.com>
parisc: fix crash with signals and alloca
Yang Yingliang <yangyingliang@huawei.com>
net: w5100: check return value after calling platform_get_resource()
王贇 <yun.wang@linux.alibaba.com>
net: fix NULL pointer reference in cipso_v4_doi_free
Miaoqing Pan <miaoqing@codeaurora.org>
ath9k: fix sleeping in atomic context
Zekun Shen <bruceshenzk@gmail.com>
ath9k: fix OOB read ar9300_eeprom_restore_internal
Colin Ian King <colin.king@canonical.com>
parport: remove non-zero check on count
Xiaotan Luo <lxt@rock-chips.com>
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Sugar Zhang <sugar.zhang@rock-chips.com>
ASoC: rockchip: i2s: Fix regmap_ops hang
Shuah Khan <skhan@linuxfoundation.org>
usbip:vhci_hcd USB port can get stuck in the disabled state
Anirudh Rayabharam <mail@anirudhrb.com>
usbip: give back URBs for unsent unlink requests during cleanup
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: musb: musb_dsps: request_irq() after initializing musb
Mathias Nyman <mathias.nyman@linux.intel.com>
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Ding Hui <dinghui@sangfor.com.cn>
cifs: fix wrong release in sess_alloc_buffer() failed path
Li Zhijian <lizhijian@cn.fujitsu.com>
selftests/bpf: Enlarge select() timeout for test_maps
Thomas Hebb <tommyhebb@gmail.com>
mmc: rtsx_pci: Fix long reads when clock is prescaled
Manish Narani <manish.narani@xilinx.com>
mmc: sdhci-of-arasan: Check return value of non-void funtions
Bob Peterson <rpeterso@redhat.com>
gfs2: Don't call dlm after protocol is unmounted
Kees Cook <keescook@chromium.org>
staging: rts5208: Fix get_ms_information() heap buffer size
J. Bruce Fields <bfields@redhat.com>
rpc: fix gss_svc_init cleanup on failure
Andreas Obergschwandtner <andreas.obergschwandtner@gmail.com>
ARM: tegra: tamonten: Fix UART pad setting
Tuo Li <islituo@gmail.com>
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: avoid circular locks in sco_sock_connect
Nathan Chancellor <nathan@kernel.org>
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: sdm660: use reg value for memory node
Hans Verkuil <hverkuil-cisco@xs4all.nl>
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Hans de Goede <hdegoede@redhat.com>
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: skip invalid hci_sync_conn_complete_evt
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
staging: ks7010: Fix the initialization of the 'sleep_status' structure
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Jiri Slaby <jslaby@suse.cz>
hvsi: don't panic on tty_register_driver failure
Jiri Slaby <jslaby@suse.cz>
xtensa: ISS: don't panic in rs_init
Maciej W. Rozycki <macro@orcam.me.uk>
serial: 8250: Define RX trigger levels for OxSemi 950 devices
Heiko Carstens <hca@linux.ibm.com>
s390/jump_label: print real address in a case of a jump label bug
Gustavo A. R. Silva <gustavoars@kernel.org>
flow_dissector: Fix out-of-bounds warnings
Gustavo A. R. Silva <gustavoars@kernel.org>
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: riva: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Do not PASS tests without actually testing the result
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix copy-and-paste error in double word test
Zheyu Ma <zheyuma97@gmail.com>
tty: serial: jsm: hold port lock when reporting modem line changes
Geert Uytterhoeven <geert+renesas@glider.be>
staging: board: Fix uninitialized spinlock when attaching genpd
Jack Pham <jackp@codeaurora.org>
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Maciej Żenczykowski <maze@google.com>
usb: gadget: u_ether: fix a potential null pointer dereference
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the actual_length of an iso packet
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Smack: Fix wrong semantics in smk_access_entry()
Yajun Deng <yajun.deng@linux.dev>
netlink: Deal with ESRCH error in nlmsg_notify()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: fix a DoS bug by restricting user input
David Heidelberg <david@ixit.cz>
ARM: dts: qcom: apq8064: correct clock names
Jonathan Cameron <Jonathan.Cameron@huawei.com>
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: dib8000: rewrite the init prbs logic
Oleksij Rempel <o.rempel@pengutronix.de>
MIPS: Malta: fix alignment of the devicetree buffer
Dan Carpenter <dan.carpenter@oracle.com>
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
Zhen Lei <thunder.leizhen@huawei.com>
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Randy Dunlap <rdunlap@infradead.org>
openrisc: don't printk() unconditionally
Jason Gunthorpe <jgg@nvidia.com>
vfio: Use config not menuconfig for VFIO_NOIOMMU
Jaehyoung Choi <jkkkkk.choi@samsung.com>
pinctrl: samsung: Fix pinctrl bank pin count
Leon Romanovsky <leonro@nvidia.com>
docs: Fix infiniband uverbs minor number
Leon Romanovsky <leonro@nvidia.com>
RDMA/iwcm: Release resources if iw_cm module initialization fails
Dmitry Torokhov <dmitry.torokhov@gmail.com>
HID: input: do not report stylus battery state as "full"
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
Hyun Kwon <hyun.kwon@xilinx.com>
PCI: xilinx-nwl: Enable the clock through CCF
Krzysztof Wilczyński <kw@linux.com>
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Marek Behún <kabel@kernel.org>
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
David Heidelberg <david@ixit.cz>
ARM: 9105/1: atags_to_fdt: don't warn about stack size
Hans de Goede <hdegoede@redhat.com>
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
Sean Young <sean@mess.org>
media: rc-loopback: return number of emitters rather than error
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: uvc: don't do DMA on stack
Wang Hai <wanghai38@huawei.com>
VMCI: fix NULL pointer dereference when unmapping queue pair
Arne Welzel <arne.welzel@corelight.com>
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
power: supply: max17042: handle fails of reading status register
Damien Le Moal <damien.lemoal@wdc.com>
block: bfq: fix bfq_set_next_ioprio_data()
zhenwei pi <pizhenwei@bytedance.com>
crypto: public_key: fix overflow during implicit conversion
Iwona Winiarska <iwona.winiarska@intel.com>
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
Harshvardhan Jha <harshvardhan.jha@oracle.com>
9p/xen: Fix end of loop tests for list_for_each_entry
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
include/linux/list.h: add a macro to test if entry is pointing to the head
Juergen Gross <jgross@suse.com>
xen: fix setting of max_pfn in shared_info
Kajol Jain <kjain@linux.ibm.com>
powerpc/perf/hv-gpci: Fix counter value parsing
Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
PCI/MSI: Skip masking MSI-X on Xen PV
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
Dmitry Osipenko <digetx@gmail.com>
rtc: tps65910: Correct driver module alias
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
fbmem: don't allow too huge resolutions
Linus Walleij <linus.walleij@linaro.org>
clk: kirkwood: Fix a clocking boot regression
Daniel Thompson <daniel.thompson@linaro.org>
backlight: pwm_bl: Improve bootloader/kernel device handover
Austin Kim <austin.kim@lge.com>
IMA: remove -Wmissing-prototypes warning
Zelin Deng <zelin.deng@linux.alibaba.com>
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Babu Moger <babu.moger@amd.com>
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
Nguyen Dinh Phi <phind.uet@gmail.com>
tty: Fix data race between tiocsti() and flush_to_ldisc()
Guillaume Nault <gnault@redhat.com>
netns: protect netns ID lookups with RCU
Stefan Wahren <stefan.wahren@i2se.com>
net: qualcomm: fix QCA7000 checksum handling
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
Eric Dumazet <edumazet@google.com>
ipv4: make exception cache less predictible
Zenghui Yu <yuzenghui@huawei.com>
bcma: Fix memory leak for internally-handled cores
Dan Carpenter <dan.carpenter@oracle.com>
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
Andy Duan <fugang.duan@nxp.com>
tty: serial: fsl_lpuart: fix the wrong mapbase value
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
Evgeny Novikov <novikov@ispras.ru>
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: mt65xx: fix IRQ check
Len Baker <len.baker@gmx.com>
CIFS: Fix a potencially linear read overflow
Tony Lindgren <tony@atomide.com>
mmc: moxart: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: s3c2410: fix IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: iop3xx: fix deferred probing
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: add timeout sanity check to hci_inquiry
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: gadget: mv_u3d: request_irq() after initializing UDC
Chih-Kang Chang <gary.chang@realtek.com>
mac80211: Fix insufficient headroom issue for AMSDU
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: tahvo: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: host: ohci-tmio: add IRQ check
Kai-Heng Feng <kai.heng.feng@canonical.com>
Bluetooth: Move shutdown callback before flushing tx and rx queue
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: twl6030: add IRQ checks
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: fsl-usb: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: gadget: udc: at91: add IRQ check
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
drm/msm/dsi: Fix some reference counted resource leaks
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix repeated calls to sco_sock_kill
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Colin Ian King <colin.king@canonical.com>
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Stephan Gerhold <stephan@gerhold.net>
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Enable PME if it can be signaled from D3cold
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
Dongliang Mu <mudongliangabcd@gmail.com>
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: highlander: add IRQ check
Pavel Skripkin <paskripkin@gmail.com>
net: cipso: fix warnings in netlbl_cipsov4_add_std
Martin KaFai Lau <kafai@fb.com>
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Dan Carpenter <dan.carpenter@oracle.com>
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
Pavel Skripkin <paskripkin@gmail.com>
media: go7007: remove redundant initialization
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
Geert Uytterhoeven <geert+renesas@glider.be>
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
Stefan Berger <stefanb@linux.ibm.com>
certs: Trigger creation of RSA module signing key if it's not an RSA key
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - use proper type for vf_mask
Phong Hoang <phong.hoang.wz@renesas.com>
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Tony Lindgren <tony@atomide.com>
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
Pavel Skripkin <paskripkin@gmail.com>
m68k: emu: Fix invalid free in nfeth_cleanup()
Stian Skjelstad <stian.skjelstad@gmail.com>
udf_get_extendedattr() had no boundary checks.
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not export adf_iov_putmsg()
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix reuse of completion variable
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - handle both source of interrupt in VF ISR
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not ignore errors from enable_vf2pf_comms()
Damien Le Moal <damien.lemoal@wdc.com>
libata: fix ata_host_start()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: add dev_busid sysfs entry for each subchannel
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Ruozhu Li <liruozhu@huawei.com>
nvme-rdma: don't update queue count when failing to set io queues
Pali Rohár <pali@kernel.org>
isofs: joliet: Fix iocharset=utf8 mount option
Jan Kara <jack@suse.cz>
udf: Check LVID earlier
Tony Lindgren <tony@atomide.com>
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
Hans de Goede <hdegoede@redhat.com>
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Check for DMA mapping errors
Jeongtae Park <jeongtae.park@gmail.com>
regmap: fix the offset of register error log
Marek Behún <kabel@kernel.org>
PCI: Call Max Payload Size-related fixup quirks early
Paul Gortmaker <paul.gortmaker@windriver.com>
x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
usb: host: xhci-rcar: Don't reload firmware after the completion
Qu Wenruo <wqu@suse.com>
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
Muchun Song <songmuchun@bytedance.com>
mm/page_alloc: speed up the iteration of max_order
Esben Haabendal <esben@geanix.com>
net: ll_temac: Remove left-over debug message
Fangrui Song <maskray@google.com>
powerpc/boot: Delete unneeded .globl _zimage_start
Michael Ellerman <mpe@ellerman.id.au>
powerpc/module64: Fix comment in R_PPC64_ENTRY handling
Christophe Leroy <christophe.leroy@c-s.fr>
crypto: talitos - reduce max key size for SEC1
Andrew Morton <akpm@linux-foundation.org>
mm/kmemleak.c: make cond_resched() rate-limiting more efficient
Vasily Gorbik <gor@linux.vnet.ibm.com>
s390/disassembler: correct disassembly lines alignment
Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
Christian Lamparter <chunkeey@gmail.com>
ath10k: fix recent bandwidth conversion bug
Chao Yu <yuchao0@huawei.com>
f2fs: fix potential overflow
Tom Rix <trix@redhat.com>
USB: serial: mos7720: improve OOM-handling in read_mos_reg()
Liu Jian <liujian56@huawei.com>
igmp: Add ip_mc_list lock in ip_check_mc_rcu
Pavel Skripkin <paskripkin@gmail.com>
media: stkwebcam: fix memory leak in stk_camera_probe
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
clk: fix build warning for orphan_list
Zubin Mithra <zsm@chromium.org>
ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
Ben Dooks <ben-linux@fluff.org>
ARM: 8918/2: only build return_address() if needed
Christoph Hellwig <hch@lst.de>
cryptoloop: add a deprecation warning
Kim Phillips <kim.phillips@amd.com>
perf/x86/amd/ibs: Work around erratum #1197
Xiaoyao Li <xiaoyao.li@intel.com>
perf/x86/intel/pt: Fix mask of num_address_ranges
Shai Malin <smalin@marvell.com>
qede: Fix memset corruption
Harini Katakam <harini.katakam@xilinx.com>
net: macb: Add a NULL check on desc_ptp
Shai Malin <smalin@marvell.com>
qed: Fix the VF msix vectors flow
Randy Dunlap <rdunlap@infradead.org>
xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
Theodore Ts'o <tytso@mit.edu>
ext4: fix race writing to an inline_data file while its xattrs are changing
-------------
Diffstat:
Documentation/admin-guide/devices.txt | 6 +-
.../devicetree/bindings/mtd/gpmc-nand.txt | 2 +-
Makefile | 4 +-
arch/arc/mm/cache.c | 2 +-
arch/arm/boot/compressed/Makefile | 2 +
arch/arm/boot/dts/qcom-apq8064.dtsi | 6 +-
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 ++--
arch/arm/kernel/Makefile | 6 +-
arch/arm/kernel/return_address.c | 4 --
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2 +-
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2 +-
arch/m68k/emu/nfeth.c | 4 +-
arch/mips/mti-malta/malta-dtshim.c | 2 +-
arch/openrisc/kernel/entry.S | 2 +
arch/parisc/kernel/signal.c | 6 ++
arch/powerpc/boot/crt0.S | 3 -
arch/powerpc/kernel/module_64.c | 2 +-
arch/powerpc/perf/hv-gpci.c | 2 +-
arch/s390/kernel/dis.c | 2 +-
arch/s390/kernel/jump_label.c | 2 +-
arch/x86/events/amd/ibs.c | 8 +++
arch/x86/events/intel/pt.c | 2 +-
arch/x86/kernel/cpu/intel_rdt_monitor.c | 6 ++
arch/x86/kernel/reboot.c | 3 +-
arch/x86/kvm/x86.c | 4 ++
arch/x86/mm/init_64.c | 6 +-
arch/x86/xen/enlighten_pv.c | 7 ++
arch/x86/xen/p2m.c | 4 +-
arch/xtensa/Kconfig | 2 +-
arch/xtensa/platforms/iss/console.c | 17 ++++-
block/bfq-iosched.c | 2 +-
block/blk-zoned.c | 6 --
certs/Makefile | 8 +++
drivers/ata/libata-core.c | 6 +-
drivers/ata/sata_dwc_460ex.c | 12 ++--
drivers/base/power/trace.c | 10 +++
drivers/base/regmap/regmap.c | 2 +-
drivers/bcma/main.c | 6 +-
drivers/block/Kconfig | 4 +-
drivers/block/cryptoloop.c | 2 +
drivers/clk/clk.c | 10 +--
drivers/clk/mvebu/kirkwood.c | 1 +
drivers/clocksource/sh_cmt.c | 30 ++++----
drivers/cpufreq/powernv-cpufreq.c | 16 ++++-
drivers/crypto/mxs-dcp.c | 81 ++++++++++++----------
drivers/crypto/omap-sham.c | 2 +-
.../crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_common/adf_common_drv.h | 8 +--
drivers/crypto/qat/qat_common/adf_init.c | 5 +-
drivers/crypto/qat/qat_common/adf_isr.c | 7 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3 +-
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12 ++--
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7 +-
.../qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4 +-
drivers/crypto/talitos.c | 4 ++
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2 +-
drivers/gpu/drm/msm/dsi/dsi.c | 6 +-
drivers/hid/hid-input.c | 2 -
drivers/i2c/busses/i2c-highlander.c | 2 +-
drivers/i2c/busses/i2c-iop3xx.c | 6 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-s3c2410.c | 2 +-
drivers/iio/dac/ad5624r_spi.c | 18 ++++-
drivers/infiniband/core/iwcm.c | 19 +++--
drivers/md/dm-crypt.c | 7 +-
drivers/media/dvb-frontends/dib8000.c | 58 +++++++++++-----
drivers/media/rc/rc-loopback.c | 2 +-
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6 +-
drivers/media/usb/dvb-usb/vp702x.c | 12 +++-
drivers/media/usb/em28xx/em28xx-input.c | 1 -
drivers/media/usb/go7007/go7007-driver.c | 26 -------
drivers/media/usb/stkwebcam/stk-webcam.c | 6 +-
drivers/media/usb/uvc/uvc_v4l2.c | 34 ++++++---
drivers/media/v4l2-core/v4l2-dv-timings.c | 4 +-
drivers/mfd/ab8500-core.c | 2 +-
drivers/mfd/stmpe.c | 4 +-
drivers/mfd/tc3589x.c | 2 +-
drivers/mfd/wm8994-irq.c | 2 +-
drivers/misc/aspeed-lpc-ctrl.c | 2 +-
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6 +-
drivers/mmc/host/dw_mmc.c | 1 +
drivers/mmc/host/moxart-mmc.c | 1 +
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 ++++++----
drivers/mmc/host/sdhci-of-arasan.c | 18 ++++-
drivers/mtd/nand/cafe_nand.c | 4 +-
drivers/net/dsa/b53/b53_common.c | 3 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2 +-
drivers/net/ethernet/cadence/macb_ptp.c | 11 ++-
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 1 +
drivers/net/ethernet/ibm/ibmvnic.c | 8 +++
drivers/net/ethernet/qlogic/qed/qed_main.c | 7 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 2 +-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 1 -
drivers/net/ethernet/qualcomm/qca_spi.c | 2 +-
drivers/net/ethernet/qualcomm/qca_uart.c | 2 +-
drivers/net/ethernet/rdc/r6040.c | 9 ++-
drivers/net/ethernet/renesas/sh_eth.c | 1 +
.../net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 +++--
drivers/net/ethernet/wiznet/w5100.c | 2 +
drivers/net/ethernet/xilinx/ll_temac_main.c | 4 +-
drivers/net/phy/dp83640_reg.h | 2 +-
drivers/net/usb/cdc_mbim.c | 5 ++
drivers/net/wireless/ath/ath10k/htt_rx.c | 42 ++++++-----
drivers/net/wireless/ath/ath6kl/wmi.c | 4 +-
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3 +-
drivers/net/wireless/ath/ath9k/hw.c | 12 ++--
drivers/nvme/host/rdma.c | 4 +-
drivers/parport/ieee1284_ops.c | 2 +-
drivers/pci/host/pci-aardvark.c | 11 ++-
drivers/pci/host/pcie-xilinx-nwl.c | 12 ++++
drivers/pci/msi.c | 3 +
drivers/pci/pci.c | 31 +++++----
drivers/pci/quirks.c | 17 +++--
drivers/pci/syscall.c | 4 +-
drivers/pinctrl/pinctrl-single.c | 1 +
drivers/pinctrl/samsung/pinctrl-samsung.c | 2 +-
drivers/platform/chrome/cros_ec_proto.c | 9 +++
drivers/power/supply/axp288_fuel_gauge.c | 4 +-
drivers/power/supply/max17042_battery.c | 8 ++-
drivers/rtc/rtc-tps65910.c | 2 +-
drivers/s390/cio/css.c | 17 +++++
drivers/scsi/BusLogic.c | 4 +-
drivers/scsi/qedi/qedi_main.c | 14 ++--
drivers/scsi/qla2xxx/qla_nvme.c | 5 +-
drivers/soc/qcom/smsm.c | 11 ++-
drivers/soc/rockchip/Kconfig | 4 +-
drivers/spi/spi-fsl-dspi.c | 1 +
drivers/spi/spi-pic32.c | 1 +
drivers/staging/board/board.c | 7 +-
drivers/staging/ks7010/ks7010_sdio.c | 2 +-
drivers/staging/rts5208/rtsx_scsi.c | 10 +--
drivers/tty/hvc/hvsi.c | 19 ++++-
drivers/tty/serial/8250/8250_pci.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/fsl_lpuart.c | 2 +-
drivers/tty/serial/jsm/jsm_neo.c | 2 +
drivers/tty/serial/jsm/jsm_tty.c | 3 +
drivers/tty/tty_io.c | 4 +-
drivers/usb/gadget/composite.c | 8 ++-
drivers/usb/gadget/function/u_ether.c | 5 +-
drivers/usb/gadget/udc/at91_udc.c | 4 +-
drivers/usb/gadget/udc/bdc/bdc_core.c | 3 +-
drivers/usb/gadget/udc/mv_u3d_core.c | 19 ++---
drivers/usb/host/ehci-orion.c | 8 ++-
drivers/usb/host/fotg210-hcd.c | 41 +++++------
drivers/usb/host/fotg210.h | 5 --
drivers/usb/host/ohci-tmio.c | 3 +
drivers/usb/host/xhci-rcar.c | 7 ++
drivers/usb/host/xhci.c | 24 +++----
drivers/usb/musb/musb_dsps.c | 13 ++--
drivers/usb/phy/phy-fsl-usb.c | 2 +
drivers/usb/phy/phy-tahvo.c | 4 +-
drivers/usb/phy/phy-twl6030-usb.c | 5 ++
drivers/usb/serial/mos7720.c | 4 +-
drivers/usb/usbip/vhci_hcd.c | 32 ++++++++-
drivers/vfio/Kconfig | 2 +-
drivers/video/backlight/pwm_bl.c | 54 ++++++++-------
drivers/video/fbdev/asiliantfb.c | 3 +
drivers/video/fbdev/core/fbmem.c | 7 ++
drivers/video/fbdev/kyro/fbdev.c | 8 +++
drivers/video/fbdev/riva/fbdev.c | 3 +
fs/btrfs/inode.c | 2 +-
fs/cifs/cifs_unicode.c | 9 +--
fs/cifs/sess.c | 2 +-
fs/ext4/inline.c | 6 ++
fs/f2fs/segment.c | 11 +--
fs/gfs2/lock_dlm.c | 5 ++
fs/isofs/inode.c | 27 ++++----
fs/isofs/isofs.h | 1 -
fs/isofs/joliet.c | 4 +-
fs/udf/misc.c | 13 +++-
fs/udf/super.c | 25 ++++---
include/crypto/public_key.h | 4 +-
include/linux/hugetlb.h | 9 +++
include/linux/list.h | 29 +++++---
include/linux/memory_hotplug.h | 4 +-
include/linux/pci.h | 5 +-
include/linux/power/max17042_battery.h | 2 +-
include/linux/skbuff.h | 2 +-
include/uapi/linux/serial_reg.h | 1 +
kernel/events/core.c | 2 +-
kernel/fork.c | 1 +
kernel/pid_namespace.c | 2 +-
lib/test_bpf.c | 13 +++-
mm/kmemleak.c | 2 +-
mm/memory_hotplug.c | 4 +-
mm/page_alloc.c | 8 +--
net/9p/trans_xen.c | 4 +-
net/bluetooth/cmtp/cmtp.h | 2 +-
net/bluetooth/hci_core.c | 14 ++++
net/bluetooth/hci_event.c | 15 ++++
net/bluetooth/sco.c | 50 ++++++-------
net/caif/chnl_net.c | 19 +----
net/core/flow_dissector.c | 12 ++--
net/core/net_namespace.c | 18 ++---
net/dccp/minisocks.c | 2 +
net/ipv4/icmp.c | 23 +++++-
net/ipv4/igmp.c | 2 +
net/ipv4/ip_output.c | 5 +-
net/ipv4/route.c | 46 +++++++-----
net/ipv4/tcp_input.c | 2 +-
net/ipv4/tcp_ipv4.c | 5 +-
net/ipv6/netfilter/nf_socket_ipv6.c | 4 +-
net/l2tp/l2tp_core.c | 4 +-
net/mac80211/tx.c | 4 +-
net/netlabel/netlabel_cipso_v4.c | 12 ++--
net/netlink/af_netlink.c | 4 +-
net/sched/sch_cbq.c | 2 +-
net/sunrpc/auth_gss/svcauth_gss.c | 2 +-
net/tipc/socket.c | 2 +-
net/unix/af_unix.c | 2 +-
security/integrity/ima/ima_mok.c | 2 +-
security/smack/smack_access.c | 17 +++--
sound/core/pcm_lib.c | 2 +-
sound/soc/intel/boards/bytcr_rt5640.c | 9 ++-
sound/soc/rockchip/rockchip_i2s.c | 35 ++++++----
tools/testing/selftests/bpf/test_maps.c | 2 +-
218 files changed, 1161 insertions(+), 663 deletions(-)
^ permalink raw reply [relevance 5%]
* [PATCH 4.9 134/175] Bluetooth: avoid circular locks in sco_sock_connect
2021-09-20 16:40 6% [PATCH 4.9 000/175] 4.9.283-rc1 review Greg Kroah-Hartman
2021-09-20 16:41 11% ` [PATCH 4.9 063/175] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2021-09-20 16:43 11% ` [PATCH 4.9 131/175] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
@ 2021-09-20 16:43 9% ` Greg Kroah-Hartman
2 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:43 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 70eb28df20d3..77f88c7df605 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -208,44 +208,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -253,7 +241,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -263,9 +251,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -551,6 +536,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -565,12 +551,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH 4.9 131/175] Bluetooth: skip invalid hci_sync_conn_complete_evt
2021-09-20 16:40 6% [PATCH 4.9 000/175] 4.9.283-rc1 review Greg Kroah-Hartman
2021-09-20 16:41 11% ` [PATCH 4.9 063/175] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
@ 2021-09-20 16:43 11% ` Greg Kroah-Hartman
2021-09-20 16:43 9% ` [PATCH 4.9 134/175] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
2 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:43 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+66264bf2fd0476be7e6c,
Desmond Cheong Zhi Xi, Marcel Holtmann, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index 44eeb27e341a..f9484755a9ba 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -3761,6 +3761,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 4.9 063/175] Bluetooth: fix repeated calls to sco_sock_kill
2021-09-20 16:40 6% [PATCH 4.9 000/175] 4.9.283-rc1 review Greg Kroah-Hartman
@ 2021-09-20 16:41 11% ` Greg Kroah-Hartman
2021-09-20 16:43 11% ` [PATCH 4.9 131/175] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
2021-09-20 16:43 9% ` [PATCH 4.9 134/175] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
2 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:41 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit e1dee2c1de2b4dd00eb44004a4bda6326ed07b59 ]
In commit 4e1a720d0312 ("Bluetooth: avoid killing an already killed
socket"), a check was added to sco_sock_kill to skip killing a socket
if the SOCK_DEAD flag was set.
This was done after a trace for a use-after-free bug showed that the
same sock pointer was being killed twice.
Unfortunately, this check prevents sco_sock_kill from running on any
socket. sco_sock_kill kills a socket only if it's zapped and orphaned,
however sock_orphan announces that the socket is dead before detaching
it. i.e., orphaned sockets have the SOCK_DEAD flag set.
To fix this, we remove the check for SOCK_DEAD, and avoid repeated
calls to sco_sock_kill by removing incorrect calls in:
1. sco_sock_timeout. The socket should not be killed on timeout as
further processing is expected to be done. For example,
sco_sock_connect sets the timer then waits for the socket to be
connected or for an error to be returned.
2. sco_conn_del. This function should clean up resources for the
connection, but the socket itself should be cleaned up in
sco_sock_release.
3. sco_sock_close. Calls to sco_sock_close in sco_sock_cleanup_listen
and sco_sock_release are followed by sco_sock_kill. Hence the
duplicated call should be removed.
Fixes: 4e1a720d0312 ("Bluetooth: avoid killing an already killed socket")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 6 +-----
1 file changed, 1 insertion(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 3174eab6eafc..70eb28df20d3 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -83,7 +83,6 @@ static void sco_sock_timeout(unsigned long arg)
sk->sk_state_change(sk);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -175,7 +174,6 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_sock_clear_timer(sk);
sco_chan_del(sk, err);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -392,8 +390,7 @@ static void sco_sock_cleanup_listen(struct sock *parent)
*/
static void sco_sock_kill(struct sock *sk)
{
- if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket ||
- sock_flag(sk, SOCK_DEAD))
+ if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
return;
BT_DBG("sk %p state %d", sk, sk->sk_state);
@@ -445,7 +442,6 @@ static void sco_sock_close(struct sock *sk)
lock_sock(sk);
__sco_sock_close(sk);
release_sock(sk);
- sco_sock_kill(sk);
}
static void sco_sock_init(struct sock *sk, struct sock *parent)
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 4.9 000/175] 4.9.283-rc1 review
@ 2021-09-20 16:40 6% Greg Kroah-Hartman
2021-09-20 16:41 11% ` [PATCH 4.9 063/175] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
` (2 more replies)
0 siblings, 3 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:40 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 4.9.283 release.
There are 175 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 22 Sep 2021 16:38:49 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.283-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 4.9.283-rc1
Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Dinghao Liu <dinghao.liu@zju.edu.cn>
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Rafał Miłecki <rafal@milecki.pl>
net: dsa: b53: Fix calculating number of switch ports
Randy Dunlap <rdunlap@infradead.org>
ARC: export clear_user_page() for modules
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
Yang Li <yang.lee@linux.alibaba.com>
ethtool: Fix an error code in cxgb2.c
Daniele Palmas <dnlplm@gmail.com>
net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
Marc Zyngier <maz@kernel.org>
mfd: Don't use irq_create_mapping() to resolve a mapping
Miquel Raynal <miquel.raynal@bootlin.com>
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
Mike Rapoport <rppt@linux.ibm.com>
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
Sukadev Bhattiprolu <sukadev@linux.ibm.com>
ibmvnic: check failover_pending in login response
zhenggy <zhenggy@chinatelecom.cn>
tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
Eric Dumazet <edumazet@google.com>
net/af_unix: fix a data-race in unix_dgram_poll
Baptiste Lepers <baptiste.lepers@gmail.com>
events: Reuse value read using READ_ONCE instead of re-reading it
Hoang Le <hoang.h.le@dektech.com.au>
tipc: increase timeout in tipc_sk_enqueue()
Florian Fainelli <f.fainelli@gmail.com>
r6040: Restore MDIO clock frequency after MAC reset
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Lin, Zhenpeng <zplin@psu.edu>
dccp: don't duplicate ccid when cloning dccp sock
Randy Dunlap <rdunlap@infradead.org>
ptp: dp83640: don't define PAGE0
Eric Dumazet <edumazet@google.com>
net-caif: avoid user-triggerable WARN_ON(1)
Adrian Bunk <bunk@kernel.org>
bnx2x: Fix enabling network interfaces without VFs
Juergen Gross <jgross@suse.com>
xen: reset legacy rtc flag for PV domU
Patryk Duda <pdk@semihalf.com>
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Vasily Averin <vvs@virtuozzo.com>
memcg: enable accounting for pids in nested pid namespaces
Liu Zixian <liuzixian4@huawei.com>
mm/hugetlb: initialize hugetlb_usage in mm_init
Maciej W. Rozycki <macro@orcam.me.uk>
scsi: BusLogic: Fix missing pr_cont() use
Mikulas Patocka <mpatocka@redhat.com>
parisc: fix crash with signals and alloca
Yang Yingliang <yangyingliang@huawei.com>
net: w5100: check return value after calling platform_get_resource()
王贇 <yun.wang@linux.alibaba.com>
net: fix NULL pointer reference in cipso_v4_doi_free
Miaoqing Pan <miaoqing@codeaurora.org>
ath9k: fix sleeping in atomic context
Zekun Shen <bruceshenzk@gmail.com>
ath9k: fix OOB read ar9300_eeprom_restore_internal
Colin Ian King <colin.king@canonical.com>
parport: remove non-zero check on count
Anirudh Rayabharam <mail@anirudhrb.com>
usbip: give back URBs for unsent unlink requests during cleanup
Mathias Nyman <mathias.nyman@linux.intel.com>
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Ding Hui <dinghui@sangfor.com.cn>
cifs: fix wrong release in sess_alloc_buffer() failed path
Thomas Hebb <tommyhebb@gmail.com>
mmc: rtsx_pci: Fix long reads when clock is prescaled
Bob Peterson <rpeterso@redhat.com>
gfs2: Don't call dlm after protocol is unmounted
J. Bruce Fields <bfields@redhat.com>
rpc: fix gss_svc_init cleanup on failure
Andreas Obergschwandtner <andreas.obergschwandtner@gmail.com>
ARM: tegra: tamonten: Fix UART pad setting
Tuo Li <islituo@gmail.com>
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: avoid circular locks in sco_sock_connect
Nathan Chancellor <nathan@kernel.org>
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
Hans de Goede <hdegoede@redhat.com>
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: skip invalid hci_sync_conn_complete_evt
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
staging: ks7010: Fix the initialization of the 'sleep_status' structure
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Jiri Slaby <jslaby@suse.cz>
hvsi: don't panic on tty_register_driver failure
Jiri Slaby <jslaby@suse.cz>
xtensa: ISS: don't panic in rs_init
Maciej W. Rozycki <macro@orcam.me.uk>
serial: 8250: Define RX trigger levels for OxSemi 950 devices
Heiko Carstens <hca@linux.ibm.com>
s390/jump_label: print real address in a case of a jump label bug
Gustavo A. R. Silva <gustavoars@kernel.org>
flow_dissector: Fix out-of-bounds warnings
Gustavo A. R. Silva <gustavoars@kernel.org>
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: riva: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Do not PASS tests without actually testing the result
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix copy-and-paste error in double word test
Zheyu Ma <zheyuma97@gmail.com>
tty: serial: jsm: hold port lock when reporting modem line changes
Geert Uytterhoeven <geert+renesas@glider.be>
staging: board: Fix uninitialized spinlock when attaching genpd
Jack Pham <jackp@codeaurora.org>
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Maciej Żenczykowski <maze@google.com>
usb: gadget: u_ether: fix a potential null pointer dereference
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the actual_length of an iso packet
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Smack: Fix wrong semantics in smk_access_entry()
Yajun Deng <yajun.deng@linux.dev>
netlink: Deal with ESRCH error in nlmsg_notify()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: fix a DoS bug by restricting user input
Jonathan Cameron <Jonathan.Cameron@huawei.com>
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Oleksij Rempel <o.rempel@pengutronix.de>
MIPS: Malta: fix alignment of the devicetree buffer
Zhen Lei <thunder.leizhen@huawei.com>
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Randy Dunlap <rdunlap@infradead.org>
openrisc: don't printk() unconditionally
Jason Gunthorpe <jgg@nvidia.com>
vfio: Use config not menuconfig for VFIO_NOIOMMU
Krzysztof Wilczyński <kw@linux.com>
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Marek Behún <kabel@kernel.org>
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
David Heidelberg <david@ixit.cz>
ARM: 9105/1: atags_to_fdt: don't warn about stack size
Hans de Goede <hdegoede@redhat.com>
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
Sean Young <sean@mess.org>
media: rc-loopback: return number of emitters rather than error
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: uvc: don't do DMA on stack
Wang Hai <wanghai38@huawei.com>
VMCI: fix NULL pointer dereference when unmapping queue pair
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
power: supply: max17042: handle fails of reading status register
zhenwei pi <pizhenwei@bytedance.com>
crypto: public_key: fix overflow during implicit conversion
Juergen Gross <jgross@suse.com>
xen: fix setting of max_pfn in shared_info
Kajol Jain <kjain@linux.ibm.com>
powerpc/perf/hv-gpci: Fix counter value parsing
Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
PCI/MSI: Skip masking MSI-X on Xen PV
Dmitry Osipenko <digetx@gmail.com>
rtc: tps65910: Correct driver module alias
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
fbmem: don't allow too huge resolutions
Linus Walleij <linus.walleij@linaro.org>
clk: kirkwood: Fix a clocking boot regression
Austin Kim <austin.kim@lge.com>
IMA: remove -Wmissing-prototypes warning
Zelin Deng <zelin.deng@linux.alibaba.com>
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Nguyen Dinh Phi <phind.uet@gmail.com>
tty: Fix data race between tiocsti() and flush_to_ldisc()
Eric Dumazet <edumazet@google.com>
ipv4: make exception cache less predictible
Zenghui Yu <yuzenghui@huawei.com>
bcma: Fix memory leak for internally-handled cores
Dan Carpenter <dan.carpenter@oracle.com>
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
Evgeny Novikov <novikov@ispras.ru>
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: mt65xx: fix IRQ check
Len Baker <len.baker@gmx.com>
CIFS: Fix a potencially linear read overflow
Tony Lindgren <tony@atomide.com>
mmc: moxart: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: s3c2410: fix IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: iop3xx: fix deferred probing
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: add timeout sanity check to hci_inquiry
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: gadget: mv_u3d: request_irq() after initializing UDC
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: tahvo: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: host: ohci-tmio: add IRQ check
Kai-Heng Feng <kai.heng.feng@canonical.com>
Bluetooth: Move shutdown callback before flushing tx and rx queue
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: twl6030: add IRQ checks
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: fsl-usb: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: gadget: udc: at91: add IRQ check
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
drm/msm/dsi: Fix some reference counted resource leaks
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix repeated calls to sco_sock_kill
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Colin Ian King <colin.king@canonical.com>
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Stephan Gerhold <stephan@gerhold.net>
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Enable PME if it can be signaled from D3cold
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: highlander: add IRQ check
Pavel Skripkin <paskripkin@gmail.com>
net: cipso: fix warnings in netlbl_cipsov4_add_std
Martin KaFai Lau <kafai@fb.com>
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Dan Carpenter <dan.carpenter@oracle.com>
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
Pavel Skripkin <paskripkin@gmail.com>
media: go7007: remove redundant initialization
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
Stefan Berger <stefanb@linux.ibm.com>
certs: Trigger creation of RSA module signing key if it's not an RSA key
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - use proper type for vf_mask
Tony Lindgren <tony@atomide.com>
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
Pavel Skripkin <paskripkin@gmail.com>
m68k: emu: Fix invalid free in nfeth_cleanup()
Stian Skjelstad <stian.skjelstad@gmail.com>
udf_get_extendedattr() had no boundary checks.
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not export adf_iov_putmsg()
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix reuse of completion variable
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - handle both source of interrupt in VF ISR
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not ignore errors from enable_vf2pf_comms()
Damien Le Moal <damien.lemoal@wdc.com>
libata: fix ata_host_start()
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Jan Kara <jack@suse.cz>
udf: Check LVID earlier
Tony Lindgren <tony@atomide.com>
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
Hans de Goede <hdegoede@redhat.com>
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Check for DMA mapping errors
Jeongtae Park <jeongtae.park@gmail.com>
regmap: fix the offset of register error log
Marek Behún <kabel@kernel.org>
PCI: Call Max Payload Size-related fixup quirks early
Paul Gortmaker <paul.gortmaker@windriver.com>
x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
Qu Wenruo <wqu@suse.com>
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
Muchun Song <songmuchun@bytedance.com>
mm/page_alloc: speed up the iteration of max_order
Esben Haabendal <esben@geanix.com>
net: ll_temac: Remove left-over debug message
Fangrui Song <maskray@google.com>
powerpc/boot: Delete unneeded .globl _zimage_start
Michael Ellerman <mpe@ellerman.id.au>
powerpc/module64: Fix comment in R_PPC64_ENTRY handling
Christophe Leroy <christophe.leroy@c-s.fr>
crypto: talitos - reduce max key size for SEC1
Andrew Morton <akpm@linux-foundation.org>
mm/kmemleak.c: make cond_resched() rate-limiting more efficient
Vasily Gorbik <gor@linux.vnet.ibm.com>
s390/disassembler: correct disassembly lines alignment
Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
Jan Kara <jack@suse.cz>
gfs2: Don't clear SGID when inheriting ACLs
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
nvme-pci: Fix an error handling path in 'nvme_probe()'
Philipp Zabel <p.zabel@pengutronix.de>
tc358743: fix register i2c_rd/wr function fix
Grygorii Strashko <grygorii.strashko@ti.com>
PM / wakeirq: Enable dedicated wakeirq for suspend
Paul Blakey <paulb@mellanox.com>
net/sched: cls_flower: Use mask for addr_type
Tom Rix <trix@redhat.com>
USB: serial: mos7720: improve OOM-handling in read_mos_reg()
Javier Martinez Canillas <javier@osg.samsung.com>
usb: phy: isp1301: Fix build warning when CONFIG_OF is disabled
Liu Jian <liujian56@huawei.com>
igmp: Add ip_mc_list lock in ip_check_mc_rcu
Pavel Skripkin <paskripkin@gmail.com>
media: stkwebcam: fix memory leak in stk_camera_probe
Jouni Malinen <jouni@codeaurora.org>
ath9k: Postpone key cache entry deletion for TXQ frames reference it
Jouni Malinen <jouni@codeaurora.org>
ath: Modify ath_key_delete() to not need full key entry
Jouni Malinen <jouni@codeaurora.org>
ath: Export ath_hw_keysetmac()
Jouni Malinen <jouni@codeaurora.org>
ath9k: Clear key cache explicitly on disabling hardware
Jouni Malinen <jouni@codeaurora.org>
ath: Use safer key clearing with key cache entries
Zubin Mithra <zsm@chromium.org>
ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
Ben Dooks <ben-linux@fluff.org>
ARM: 8918/2: only build return_address() if needed
Christoph Hellwig <hch@lst.de>
cryptoloop: add a deprecation warning
Kim Phillips <kim.phillips@amd.com>
perf/x86/amd/ibs: Work around erratum #1197
Shai Malin <smalin@marvell.com>
qede: Fix memset corruption
Shai Malin <smalin@marvell.com>
qed: Fix the VF msix vectors flow
Randy Dunlap <rdunlap@infradead.org>
xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
mtd: nand: atmel_nand: remove build warning in atmel_nand_remove()
Theodore Ts'o <tytso@mit.edu>
ext4: fix race writing to an inline_data file while its xattrs are changing
-------------
Diffstat:
.../devicetree/bindings/mtd/gpmc-nand.txt | 2 +-
Makefile | 4 +-
arch/arc/mm/cache.c | 2 +-
arch/arm/boot/compressed/Makefile | 2 +
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 ++--
arch/arm/kernel/Makefile | 6 +-
arch/arm/kernel/return_address.c | 4 -
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2 +-
arch/m68k/emu/nfeth.c | 4 +-
arch/mips/mti-malta/malta-dtshim.c | 2 +-
arch/openrisc/kernel/entry.S | 2 +
arch/parisc/kernel/signal.c | 6 ++
arch/powerpc/boot/crt0.S | 3 -
arch/powerpc/kernel/module_64.c | 2 +-
arch/powerpc/perf/hv-gpci.c | 2 +-
arch/s390/kernel/dis.c | 2 +-
arch/s390/kernel/jump_label.c | 2 +-
arch/x86/events/amd/ibs.c | 8 ++
arch/x86/kernel/reboot.c | 3 +-
arch/x86/kvm/x86.c | 4 +
arch/x86/mm/init_64.c | 6 +-
arch/x86/xen/enlighten.c | 7 ++
arch/x86/xen/p2m.c | 4 +-
arch/xtensa/Kconfig | 2 +-
arch/xtensa/platforms/iss/console.c | 17 +++-
certs/Makefile | 8 ++
drivers/ata/libata-core.c | 6 +-
drivers/ata/sata_dwc_460ex.c | 12 +--
drivers/base/power/wakeirq.c | 12 ++-
drivers/base/regmap/regmap.c | 2 +-
drivers/bcma/main.c | 6 +-
drivers/block/Kconfig | 4 +-
drivers/block/cryptoloop.c | 2 +
drivers/clk/mvebu/kirkwood.c | 1 +
drivers/crypto/mxs-dcp.c | 81 +++++++++---------
drivers/crypto/omap-sham.c | 2 +-
.../crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_common/adf_common_drv.h | 8 +-
drivers/crypto/qat/qat_common/adf_init.c | 5 +-
drivers/crypto/qat/qat_common/adf_isr.c | 7 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3 +-
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12 +--
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7 +-
.../qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4 +-
drivers/crypto/talitos.c | 4 +
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2 +-
drivers/gpu/drm/msm/dsi/dsi.c | 6 +-
drivers/i2c/busses/i2c-highlander.c | 2 +-
drivers/i2c/busses/i2c-iop3xx.c | 6 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-s3c2410.c | 2 +-
drivers/iio/dac/ad5624r_spi.c | 18 +++-
drivers/media/i2c/tc358743.c | 2 +-
drivers/media/rc/rc-loopback.c | 2 +-
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6 +-
drivers/media/usb/dvb-usb/vp702x.c | 12 ++-
drivers/media/usb/go7007/go7007-driver.c | 26 ------
drivers/media/usb/stkwebcam/stk-webcam.c | 6 +-
drivers/media/usb/uvc/uvc_v4l2.c | 34 +++++---
drivers/mfd/ab8500-core.c | 2 +-
drivers/mfd/stmpe.c | 4 +-
drivers/mfd/tc3589x.c | 2 +-
drivers/mfd/wm8994-irq.c | 2 +-
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6 +-
drivers/mmc/host/dw_mmc.c | 1 +
drivers/mmc/host/moxart-mmc.c | 1 +
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 +++++---
drivers/mtd/nand/atmel_nand.c | 1 -
drivers/mtd/nand/cafe_nand.c | 4 +-
drivers/net/dsa/b53/b53_common.c | 3 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2 +-
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 1 +
drivers/net/ethernet/ibm/ibmvnic.c | 8 ++
drivers/net/ethernet/qlogic/qed/qed_main.c | 7 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 2 +-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 1 -
drivers/net/ethernet/rdc/r6040.c | 9 +-
drivers/net/ethernet/renesas/sh_eth.c | 1 +
.../net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 ++--
drivers/net/ethernet/wiznet/w5100.c | 2 +
drivers/net/ethernet/xilinx/ll_temac_main.c | 4 +-
drivers/net/phy/dp83640_reg.h | 2 +-
drivers/net/usb/cdc_mbim.c | 5 ++
drivers/net/wireless/ath/ath.h | 3 +-
drivers/net/wireless/ath/ath5k/mac80211-ops.c | 2 +-
drivers/net/wireless/ath/ath6kl/wmi.c | 4 +-
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3 +-
drivers/net/wireless/ath/ath9k/htc_drv_main.c | 2 +-
drivers/net/wireless/ath/ath9k/hw.c | 12 +--
drivers/net/wireless/ath/ath9k/hw.h | 1 +
drivers/net/wireless/ath/ath9k/main.c | 95 +++++++++++++++++++++-
drivers/net/wireless/ath/key.c | 41 ++++++----
drivers/nvme/host/pci.c | 7 +-
drivers/parport/ieee1284_ops.c | 2 +-
drivers/pci/msi.c | 3 +
drivers/pci/pci.c | 15 ++--
drivers/pci/quirks.c | 13 +--
drivers/pci/syscall.c | 4 +-
drivers/pinctrl/pinctrl-single.c | 1 +
drivers/platform/chrome/cros_ec_proto.c | 9 ++
drivers/power/supply/axp288_fuel_gauge.c | 4 +-
drivers/power/supply/max17042_battery.c | 8 +-
drivers/rtc/rtc-tps65910.c | 2 +-
drivers/scsi/BusLogic.c | 4 +-
drivers/soc/qcom/smsm.c | 11 ++-
drivers/spi/spi-pic32.c | 1 +
drivers/staging/board/board.c | 7 +-
drivers/staging/ks7010/ks7010_sdio.c | 2 +-
drivers/tty/hvc/hvsi.c | 19 ++++-
drivers/tty/serial/8250/8250_pci.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/jsm/jsm_neo.c | 2 +
drivers/tty/serial/jsm/jsm_tty.c | 3 +
drivers/tty/tty_io.c | 4 +-
drivers/usb/gadget/composite.c | 8 +-
drivers/usb/gadget/function/u_ether.c | 5 +-
drivers/usb/gadget/udc/at91_udc.c | 4 +-
drivers/usb/gadget/udc/mv_u3d_core.c | 19 +++--
drivers/usb/host/ehci-orion.c | 8 +-
drivers/usb/host/fotg210-hcd.c | 41 +++++-----
drivers/usb/host/fotg210.h | 5 --
drivers/usb/host/ohci-tmio.c | 3 +
drivers/usb/host/xhci.c | 24 +++---
drivers/usb/phy/phy-fsl-usb.c | 2 +
drivers/usb/phy/phy-isp1301.c | 2 +-
drivers/usb/phy/phy-tahvo.c | 4 +-
drivers/usb/phy/phy-twl6030-usb.c | 5 ++
drivers/usb/serial/mos7720.c | 4 +-
drivers/usb/usbip/vhci_hcd.c | 24 ++++++
drivers/vfio/Kconfig | 2 +-
drivers/video/fbdev/asiliantfb.c | 3 +
drivers/video/fbdev/core/fbmem.c | 7 ++
drivers/video/fbdev/kyro/fbdev.c | 8 ++
drivers/video/fbdev/riva/fbdev.c | 3 +
fs/btrfs/inode.c | 2 +-
fs/cifs/cifs_unicode.c | 9 +-
fs/cifs/sess.c | 2 +-
fs/ext4/inline.c | 6 ++
fs/gfs2/acl.c | 27 +++---
fs/gfs2/lock_dlm.c | 5 ++
fs/udf/misc.c | 13 ++-
fs/udf/super.c | 25 ++++--
include/crypto/public_key.h | 4 +-
include/linux/hugetlb.h | 9 ++
include/linux/pci.h | 5 +-
include/linux/power/max17042_battery.h | 2 +-
include/linux/skbuff.h | 2 +-
include/uapi/linux/serial_reg.h | 1 +
kernel/events/core.c | 2 +-
kernel/fork.c | 1 +
kernel/pid_namespace.c | 2 +-
lib/test_bpf.c | 13 ++-
mm/kmemleak.c | 2 +-
mm/page_alloc.c | 8 +-
net/bluetooth/cmtp/cmtp.h | 2 +-
net/bluetooth/hci_core.c | 14 ++++
net/bluetooth/hci_event.c | 15 ++++
net/bluetooth/sco.c | 50 +++++-------
net/caif/chnl_net.c | 19 +----
net/core/flow_dissector.c | 12 ++-
net/dccp/minisocks.c | 2 +
net/ipv4/icmp.c | 23 +++++-
net/ipv4/igmp.c | 2 +
net/ipv4/ip_output.c | 5 +-
net/ipv4/route.c | 46 +++++++----
net/ipv4/tcp_input.c | 2 +-
net/ipv4/tcp_ipv4.c | 5 +-
net/l2tp/l2tp_core.c | 4 +-
net/netlabel/netlabel_cipso_v4.c | 12 +--
net/netlink/af_netlink.c | 4 +-
net/sched/cls_flower.c | 4 +
net/sunrpc/auth_gss/svcauth_gss.c | 2 +-
net/tipc/socket.c | 2 +-
net/unix/af_unix.c | 2 +-
security/integrity/ima/ima_mok.c | 2 +-
security/smack/smack_access.c | 17 ++--
sound/core/pcm_lib.c | 2 +-
sound/soc/intel/boards/bytcr_rt5640.c | 9 +-
179 files changed, 935 insertions(+), 488 deletions(-)
^ permalink raw reply [relevance 6%]
* [PATCH 4.4 105/133] Bluetooth: skip invalid hci_sync_conn_complete_evt
2021-09-20 16:41 6% [PATCH 4.4 000/133] 4.4.284-rc1 review Greg Kroah-Hartman
2021-09-20 16:42 11% ` [PATCH 4.4 048/133] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
@ 2021-09-20 16:43 11% ` Greg Kroah-Hartman
1 sibling, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:43 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+66264bf2fd0476be7e6c,
Desmond Cheong Zhi Xi, Marcel Holtmann, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index 7ed3c7df271a..6528ecc3a3bc 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -3747,6 +3747,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 4.4 048/133] Bluetooth: fix repeated calls to sco_sock_kill
2021-09-20 16:41 6% [PATCH 4.4 000/133] 4.4.284-rc1 review Greg Kroah-Hartman
@ 2021-09-20 16:42 11% ` Greg Kroah-Hartman
2021-09-20 16:43 11% ` [PATCH 4.4 105/133] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
1 sibling, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:42 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit e1dee2c1de2b4dd00eb44004a4bda6326ed07b59 ]
In commit 4e1a720d0312 ("Bluetooth: avoid killing an already killed
socket"), a check was added to sco_sock_kill to skip killing a socket
if the SOCK_DEAD flag was set.
This was done after a trace for a use-after-free bug showed that the
same sock pointer was being killed twice.
Unfortunately, this check prevents sco_sock_kill from running on any
socket. sco_sock_kill kills a socket only if it's zapped and orphaned,
however sock_orphan announces that the socket is dead before detaching
it. i.e., orphaned sockets have the SOCK_DEAD flag set.
To fix this, we remove the check for SOCK_DEAD, and avoid repeated
calls to sco_sock_kill by removing incorrect calls in:
1. sco_sock_timeout. The socket should not be killed on timeout as
further processing is expected to be done. For example,
sco_sock_connect sets the timer then waits for the socket to be
connected or for an error to be returned.
2. sco_conn_del. This function should clean up resources for the
connection, but the socket itself should be cleaned up in
sco_sock_release.
3. sco_sock_close. Calls to sco_sock_close in sco_sock_cleanup_listen
and sco_sock_release are followed by sco_sock_kill. Hence the
duplicated call should be removed.
Fixes: 4e1a720d0312 ("Bluetooth: avoid killing an already killed socket")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 6 +-----
1 file changed, 1 insertion(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index cad0d2750735..701d230fb9cf 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -83,7 +83,6 @@ static void sco_sock_timeout(unsigned long arg)
sk->sk_state_change(sk);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -175,7 +174,6 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_sock_clear_timer(sk);
sco_chan_del(sk, err);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -392,8 +390,7 @@ static void sco_sock_cleanup_listen(struct sock *parent)
*/
static void sco_sock_kill(struct sock *sk)
{
- if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket ||
- sock_flag(sk, SOCK_DEAD))
+ if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
return;
BT_DBG("sk %p state %d", sk, sk->sk_state);
@@ -445,7 +442,6 @@ static void sco_sock_close(struct sock *sk)
lock_sock(sk);
__sco_sock_close(sk);
release_sock(sk);
- sco_sock_kill(sk);
}
static void sco_sock_init(struct sock *sk, struct sock *parent)
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 4.4 000/133] 4.4.284-rc1 review
@ 2021-09-20 16:41 6% Greg Kroah-Hartman
2021-09-20 16:42 11% ` [PATCH 4.4 048/133] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2021-09-20 16:43 11% ` [PATCH 4.4 105/133] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
0 siblings, 2 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-20 16:41 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 4.4.284 release.
There are 133 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 22 Sep 2021 16:38:49 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.284-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 4.4.284-rc1
Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
net: renesas: sh_eth: Fix freeing wrong tx descriptor
Dinghao Liu <dinghao.liu@zju.edu.cn>
qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
Randy Dunlap <rdunlap@infradead.org>
ARC: export clear_user_page() for modules
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
Yang Li <yang.lee@linux.alibaba.com>
ethtool: Fix an error code in cxgb2.c
Miquel Raynal <miquel.raynal@bootlin.com>
dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
Mike Rapoport <rppt@linux.ibm.com>
x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
Eric Dumazet <edumazet@google.com>
net/af_unix: fix a data-race in unix_dgram_poll
Hoang Le <hoang.h.le@dektech.com.au>
tipc: increase timeout in tipc_sk_enqueue()
Florian Fainelli <f.fainelli@gmail.com>
r6040: Restore MDIO clock frequency after MAC reset
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
Lin, Zhenpeng <zplin@psu.edu>
dccp: don't duplicate ccid when cloning dccp sock
Randy Dunlap <rdunlap@infradead.org>
ptp: dp83640: don't define PAGE0
Eric Dumazet <edumazet@google.com>
net-caif: avoid user-triggerable WARN_ON(1)
Adrian Bunk <bunk@kernel.org>
bnx2x: Fix enabling network interfaces without VFs
Patryk Duda <pdk@semihalf.com>
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Mikulas Patocka <mpatocka@redhat.com>
parisc: fix crash with signals and alloca
王贇 <yun.wang@linux.alibaba.com>
net: fix NULL pointer reference in cipso_v4_doi_free
Zekun Shen <bruceshenzk@gmail.com>
ath9k: fix OOB read ar9300_eeprom_restore_internal
Colin Ian King <colin.king@canonical.com>
parport: remove non-zero check on count
Mathias Nyman <mathias.nyman@linux.intel.com>
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Ding Hui <dinghui@sangfor.com.cn>
cifs: fix wrong release in sess_alloc_buffer() failed path
Thomas Hebb <tommyhebb@gmail.com>
mmc: rtsx_pci: Fix long reads when clock is prescaled
Bob Peterson <rpeterso@redhat.com>
gfs2: Don't call dlm after protocol is unmounted
J. Bruce Fields <bfields@redhat.com>
rpc: fix gss_svc_init cleanup on failure
Andreas Obergschwandtner <andreas.obergschwandtner@gmail.com>
ARM: tegra: tamonten: Fix UART pad setting
Tuo Li <islituo@gmail.com>
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: skip invalid hci_sync_conn_complete_evt
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Jiri Slaby <jslaby@suse.cz>
hvsi: don't panic on tty_register_driver failure
Jiri Slaby <jslaby@suse.cz>
xtensa: ISS: don't panic in rs_init
Maciej W. Rozycki <macro@orcam.me.uk>
serial: 8250: Define RX trigger levels for OxSemi 950 devices
Heiko Carstens <hca@linux.ibm.com>
s390/jump_label: print real address in a case of a jump label bug
Gustavo A. R. Silva <gustavoars@kernel.org>
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: riva: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Do not PASS tests without actually testing the result
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix copy-and-paste error in double word test
Zheyu Ma <zheyuma97@gmail.com>
tty: serial: jsm: hold port lock when reporting modem line changes
Maciej Żenczykowski <maze@google.com>
usb: gadget: u_ether: fix a potential null pointer dereference
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the actual_length of an iso packet
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Smack: Fix wrong semantics in smk_access_entry()
Yajun Deng <yajun.deng@linux.dev>
netlink: Deal with ESRCH error in nlmsg_notify()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: fix a DoS bug by restricting user input
Jonathan Cameron <Jonathan.Cameron@huawei.com>
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Zhen Lei <thunder.leizhen@huawei.com>
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Randy Dunlap <rdunlap@infradead.org>
openrisc: don't printk() unconditionally
Krzysztof Wilczyński <kw@linux.com>
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Marek Behún <kabel@kernel.org>
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
David Heidelberg <david@ixit.cz>
ARM: 9105/1: atags_to_fdt: don't warn about stack size
Hans de Goede <hdegoede@redhat.com>
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
Sean Young <sean@mess.org>
media: rc-loopback: return number of emitters rather than error
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: uvc: don't do DMA on stack
Wang Hai <wanghai38@huawei.com>
VMCI: fix NULL pointer dereference when unmapping queue pair
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
power: supply: max17042: handle fails of reading status register
Juergen Gross <jgross@suse.com>
xen: fix setting of max_pfn in shared_info
Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
PCI/MSI: Skip masking MSI-X on Xen PV
Dmitry Osipenko <digetx@gmail.com>
rtc: tps65910: Correct driver module alias
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
fbmem: don't allow too huge resolutions
Linus Walleij <linus.walleij@linaro.org>
clk: kirkwood: Fix a clocking boot regression
Zelin Deng <zelin.deng@linux.alibaba.com>
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Nguyen Dinh Phi <phind.uet@gmail.com>
tty: Fix data race between tiocsti() and flush_to_ldisc()
Eric Dumazet <edumazet@google.com>
ipv4: make exception cache less predictible
Zenghui Yu <yuzenghui@huawei.com>
bcma: Fix memory leak for internally-handled cores
Dan Carpenter <dan.carpenter@oracle.com>
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
Evgeny Novikov <novikov@ispras.ru>
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: mt65xx: fix IRQ check
Len Baker <len.baker@gmx.com>
CIFS: Fix a potencially linear read overflow
Tony Lindgren <tony@atomide.com>
mmc: moxart: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: s3c2410: fix IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: iop3xx: fix deferred probing
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: add timeout sanity check to hci_inquiry
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: gadget: mv_u3d: request_irq() after initializing UDC
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: tahvo: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: host: ohci-tmio: add IRQ check
Kai-Heng Feng <kai.heng.feng@canonical.com>
Bluetooth: Move shutdown callback before flushing tx and rx queue
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: twl6030: add IRQ checks
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: fsl-usb: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: gadget: udc: at91: add IRQ check
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
drm/msm/dsi: Fix some reference counted resource leaks
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix repeated calls to sco_sock_kill
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Colin Ian King <colin.king@canonical.com>
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Enable PME if it can be signaled from D3cold
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: highlander: add IRQ check
Pavel Skripkin <paskripkin@gmail.com>
net: cipso: fix warnings in netlbl_cipsov4_add_std
Martin KaFai Lau <kafai@fb.com>
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Dan Carpenter <dan.carpenter@oracle.com>
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
Pavel Skripkin <paskripkin@gmail.com>
media: go7007: remove redundant initialization
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
Stefan Berger <stefanb@linux.ibm.com>
certs: Trigger creation of RSA module signing key if it's not an RSA key
Pavel Skripkin <paskripkin@gmail.com>
m68k: emu: Fix invalid free in nfeth_cleanup()
Stian Skjelstad <stian.skjelstad@gmail.com>
udf_get_extendedattr() had no boundary checks.
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix reuse of completion variable
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not ignore errors from enable_vf2pf_comms()
Damien Le Moal <damien.lemoal@wdc.com>
libata: fix ata_host_start()
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Tony Lindgren <tony@atomide.com>
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Check for DMA mapping errors
Marek Behún <kabel@kernel.org>
PCI: Call Max Payload Size-related fixup quirks early
Paul Gortmaker <paul.gortmaker@windriver.com>
x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
Qu Wenruo <wqu@suse.com>
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
Muchun Song <songmuchun@bytedance.com>
mm/page_alloc: speed up the iteration of max_order
Esben Haabendal <esben@geanix.com>
net: ll_temac: Remove left-over debug message
Fangrui Song <maskray@google.com>
powerpc/boot: Delete unneeded .globl _zimage_start
Michael Ellerman <mpe@ellerman.id.au>
powerpc/module64: Fix comment in R_PPC64_ENTRY handling
Andrew Morton <akpm@linux-foundation.org>
mm/kmemleak.c: make cond_resched() rate-limiting more efficient
Vasily Gorbik <gor@linux.vnet.ibm.com>
s390/disassembler: correct disassembly lines alignment
Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
Philipp Zabel <p.zabel@pengutronix.de>
tc358743: fix register i2c_rd/wr function fix
Grygorii Strashko <grygorii.strashko@ti.com>
PM / wakeirq: Enable dedicated wakeirq for suspend
Tom Rix <trix@redhat.com>
USB: serial: mos7720: improve OOM-handling in read_mos_reg()
Javier Martinez Canillas <javier@osg.samsung.com>
usb: phy: isp1301: Fix build warning when CONFIG_OF is disabled
Liu Jian <liujian56@huawei.com>
igmp: Add ip_mc_list lock in ip_check_mc_rcu
Pavel Skripkin <paskripkin@gmail.com>
media: stkwebcam: fix memory leak in stk_camera_probe
Jouni Malinen <jouni@codeaurora.org>
ath9k: Postpone key cache entry deletion for TXQ frames reference it
Jouni Malinen <jouni@codeaurora.org>
ath: Modify ath_key_delete() to not need full key entry
Jouni Malinen <jouni@codeaurora.org>
ath: Export ath_hw_keysetmac()
Jouni Malinen <jouni@codeaurora.org>
ath9k: Clear key cache explicitly on disabling hardware
Jouni Malinen <jouni@codeaurora.org>
ath: Use safer key clearing with key cache entries
Zubin Mithra <zsm@chromium.org>
ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
Ben Dooks <ben-linux@fluff.org>
ARM: 8918/2: only build return_address() if needed
Christoph Hellwig <hch@lst.de>
cryptoloop: add a deprecation warning
Shai Malin <smalin@marvell.com>
qede: Fix memset corruption
Vineet Gupta <vgupta@synopsys.com>
ARC: fix allnoconfig build warning
Randy Dunlap <rdunlap@infradead.org>
xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
Theodore Ts'o <tytso@mit.edu>
ext4: fix race writing to an inline_data file while its xattrs are changing
-------------
Diffstat:
.../devicetree/bindings/mtd/gpmc-nand.txt | 2 +-
Makefile | 4 +-
arch/arc/Kconfig | 2 +-
arch/arc/mm/cache.c | 2 +-
arch/arm/boot/compressed/Makefile | 2 +
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 ++--
arch/arm/kernel/Makefile | 6 +-
arch/arm/kernel/return_address.c | 4 -
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2 +-
arch/m68k/emu/nfeth.c | 4 +-
arch/openrisc/kernel/entry.S | 2 +
arch/parisc/kernel/signal.c | 6 ++
arch/powerpc/boot/crt0.S | 3 -
arch/powerpc/kernel/module_64.c | 2 +-
arch/s390/kernel/dis.c | 2 +-
arch/s390/kernel/jump_label.c | 2 +-
arch/x86/kernel/reboot.c | 3 +-
arch/x86/kvm/x86.c | 4 +
arch/x86/mm/init_64.c | 6 +-
arch/x86/xen/p2m.c | 4 +-
arch/xtensa/Kconfig | 2 +-
arch/xtensa/platforms/iss/console.c | 17 +++-
certs/Makefile | 8 ++
drivers/ata/libata-core.c | 6 +-
drivers/base/power/wakeirq.c | 12 ++-
drivers/bcma/main.c | 6 +-
drivers/block/Kconfig | 4 +-
drivers/block/cryptoloop.c | 2 +
drivers/clk/mvebu/kirkwood.c | 1 +
drivers/crypto/mxs-dcp.c | 81 +++++++++---------
drivers/crypto/omap-sham.c | 2 +-
drivers/crypto/qat/qat_common/adf_init.c | 5 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 2 +
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2 +-
drivers/gpu/drm/msm/dsi/dsi.c | 6 +-
drivers/i2c/busses/i2c-highlander.c | 2 +-
drivers/i2c/busses/i2c-iop3xx.c | 6 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-s3c2410.c | 2 +-
drivers/iio/dac/ad5624r_spi.c | 18 +++-
drivers/media/i2c/tc358743.c | 2 +-
drivers/media/rc/rc-loopback.c | 2 +-
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6 +-
drivers/media/usb/dvb-usb/vp702x.c | 12 ++-
drivers/media/usb/go7007/go7007-driver.c | 26 ------
drivers/media/usb/stkwebcam/stk-webcam.c | 6 +-
drivers/media/usb/uvc/uvc_v4l2.c | 34 +++++---
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6 +-
drivers/mmc/host/dw_mmc.c | 1 +
drivers/mmc/host/moxart-mmc.c | 1 +
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 +++++---
drivers/mtd/nand/cafe_nand.c | 4 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 2 +-
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 1 +
drivers/net/ethernet/qlogic/qede/qede_main.c | 2 +-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 1 -
drivers/net/ethernet/rdc/r6040.c | 9 +-
drivers/net/ethernet/renesas/sh_eth.c | 1 +
drivers/net/ethernet/xilinx/ll_temac_main.c | 4 +-
drivers/net/phy/dp83640_reg.h | 2 +-
drivers/net/wireless/ath/ath.h | 3 +-
drivers/net/wireless/ath/ath5k/mac80211-ops.c | 2 +-
drivers/net/wireless/ath/ath6kl/wmi.c | 4 +-
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3 +-
drivers/net/wireless/ath/ath9k/htc_drv_main.c | 2 +-
drivers/net/wireless/ath/ath9k/hw.h | 1 +
drivers/net/wireless/ath/ath9k/main.c | 95 +++++++++++++++++++++-
drivers/net/wireless/ath/key.c | 41 ++++++----
drivers/parport/ieee1284_ops.c | 2 +-
drivers/pci/msi.c | 3 +
drivers/pci/pci.c | 15 ++--
drivers/pci/quirks.c | 13 +--
drivers/pci/syscall.c | 4 +-
drivers/pinctrl/pinctrl-single.c | 1 +
drivers/platform/chrome/cros_ec_proto.c | 9 ++
drivers/power/max17042_battery.c | 8 +-
drivers/rtc/rtc-tps65910.c | 2 +-
drivers/tty/hvc/hvsi.c | 19 ++++-
drivers/tty/serial/8250/8250_pci.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/jsm/jsm_neo.c | 2 +
drivers/tty/serial/jsm/jsm_tty.c | 3 +
drivers/tty/tty_io.c | 4 +-
drivers/usb/gadget/function/u_ether.c | 5 +-
drivers/usb/gadget/udc/at91_udc.c | 4 +-
drivers/usb/gadget/udc/mv_u3d_core.c | 19 +++--
drivers/usb/host/ehci-orion.c | 8 +-
drivers/usb/host/fotg210-hcd.c | 5 +-
drivers/usb/host/fotg210.h | 5 --
drivers/usb/host/ohci-tmio.c | 3 +
drivers/usb/host/xhci.c | 24 +++---
drivers/usb/phy/phy-fsl-usb.c | 2 +
drivers/usb/phy/phy-isp1301.c | 2 +-
drivers/usb/phy/phy-tahvo.c | 4 +-
drivers/usb/phy/phy-twl6030-usb.c | 5 ++
drivers/usb/serial/mos7720.c | 4 +-
drivers/video/fbdev/asiliantfb.c | 3 +
drivers/video/fbdev/core/fbmem.c | 7 ++
drivers/video/fbdev/kyro/fbdev.c | 8 ++
drivers/video/fbdev/riva/fbdev.c | 3 +
fs/btrfs/inode.c | 2 +-
fs/cifs/cifs_unicode.c | 9 +-
fs/cifs/sess.c | 2 +-
fs/ext4/inline.c | 6 ++
fs/gfs2/lock_dlm.c | 5 ++
fs/udf/misc.c | 13 ++-
include/linux/pci.h | 5 +-
include/linux/power/max17042_battery.h | 2 +-
include/linux/skbuff.h | 2 +-
include/uapi/linux/serial_reg.h | 1 +
lib/test_bpf.c | 13 ++-
mm/kmemleak.c | 2 +-
mm/page_alloc.c | 8 +-
net/bluetooth/cmtp/cmtp.h | 2 +-
net/bluetooth/hci_core.c | 14 ++++
net/bluetooth/hci_event.c | 15 ++++
net/bluetooth/sco.c | 11 +--
net/caif/chnl_net.c | 19 +----
net/dccp/minisocks.c | 2 +
net/ipv4/icmp.c | 23 +++++-
net/ipv4/igmp.c | 2 +
net/ipv4/ip_output.c | 5 +-
net/ipv4/route.c | 46 +++++++----
net/ipv4/tcp_ipv4.c | 5 +-
net/l2tp/l2tp_core.c | 4 +-
net/netlabel/netlabel_cipso_v4.c | 12 +--
net/netlink/af_netlink.c | 4 +-
net/sunrpc/auth_gss/svcauth_gss.c | 2 +-
net/tipc/socket.c | 2 +-
net/unix/af_unix.c | 2 +-
security/smack/smack_access.c | 17 ++--
sound/core/pcm_lib.c | 2 +-
132 files changed, 692 insertions(+), 339 deletions(-)
^ permalink raw reply [relevance 6%]
* Linux 5.13.19
@ 2021-09-18 12:09 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-18 12:09 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
-------------------------
Note, this is the LAST 5.13.y kernel release. This branch is now end-of-life.
Everyone should move to the 5.14.y kernel branch now.
-------------------------
I'm announcing the release of the 5.13.19 kernel.
All users of the 5.13 kernel series must upgrade.
The updated 5.13.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.13.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/devices.txt | 6
Documentation/devicetree/bindings/pinctrl/marvell,armada-37xx-pinctrl.txt | 8
Documentation/filesystems/f2fs.rst | 4
Makefile | 7
arch/arm/boot/compressed/Makefile | 2
arch/arm/boot/dts/at91-kizbox3_common.dtsi | 2
arch/arm/boot/dts/at91-sam9x60ek.dts | 2
arch/arm/boot/dts/at91-sama5d27_som1_ek.dts | 2
arch/arm/boot/dts/at91-sama5d27_wlsom1_ek.dts | 2
arch/arm/boot/dts/at91-sama5d2_icp.dts | 2
arch/arm/boot/dts/at91-sama5d2_ptc_ek.dts | 2
arch/arm/boot/dts/at91-sama5d2_xplained.dts | 2
arch/arm/boot/dts/imx53-ppd.dts | 23
arch/arm/boot/dts/qcom-apq8064.dtsi | 6
arch/arm/boot/dts/stm32mp15xx-dhcom-pdk2.dtsi | 8
arch/arm/boot/dts/stm32mp15xx-dhcor-avenger96.dtsi | 6
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 8
arch/arm/boot/dts/tegra20-acer-a500-picasso.dts | 25
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14
arch/arm64/boot/dts/allwinner/sun50i-h6-tanix-tx6.dts | 4
arch/arm64/boot/dts/freescale/fsl-ls1046a-frwy.dts | 8
arch/arm64/boot/dts/freescale/fsl-ls1046a-rdb.dts | 7
arch/arm64/boot/dts/freescale/imx8mm-venice-gw700x.dtsi | 64 +-
arch/arm64/boot/dts/freescale/imx8mm-venice-gw71xx.dtsi | 5
arch/arm64/boot/dts/nvidia/tegra132.dtsi | 4
arch/arm64/boot/dts/nvidia/tegra194.dtsi | 6
arch/arm64/boot/dts/qcom/ipq6018.dtsi | 2
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2
arch/arm64/boot/dts/qcom/ipq8074.dtsi | 16
arch/arm64/boot/dts/qcom/msm8994.dtsi | 6
arch/arm64/boot/dts/qcom/msm8996.dtsi | 4
arch/arm64/boot/dts/qcom/sdm630.dtsi | 257 +++++----
arch/arm64/boot/dts/qcom/sm8250.dtsi | 2
arch/arm64/include/asm/el2_setup.h | 13
arch/arm64/include/asm/kernel-pgtable.h | 4
arch/arm64/include/asm/mmu.h | 29 -
arch/arm64/include/asm/tlbflush.h | 11
arch/arm64/kernel/head.S | 11
arch/arm64/kernel/vmlinux.lds.S | 4
arch/m68k/Kconfig.bus | 2
arch/mips/mti-malta/malta-dtshim.c | 2
arch/openrisc/kernel/entry.S | 2
arch/parisc/Makefile | 6
arch/parisc/kernel/signal.c | 6
arch/powerpc/configs/mpc885_ads_defconfig | 1
arch/powerpc/include/asm/pmc.h | 7
arch/powerpc/kernel/smp.c | 13
arch/powerpc/kernel/stacktrace.c | 1
arch/powerpc/kvm/book3s_64_mmu_radix.c | 6
arch/powerpc/kvm/book3s_64_vio_hv.c | 9
arch/powerpc/kvm/book3s_hv.c | 20
arch/powerpc/mm/numa.c | 13
arch/powerpc/perf/core-book3s.c | 12
arch/powerpc/perf/hv-gpci.c | 2
arch/s390/include/asm/setup.h | 2
arch/s390/include/asm/smp.h | 1
arch/s390/kernel/early.c | 4
arch/s390/kernel/jump_label.c | 2
arch/s390/kernel/smp.c | 9
arch/s390/kernel/topology.c | 13
arch/s390/mm/init.c | 2
arch/s390/pci/pci.c | 5
arch/x86/kernel/cpu/mshyperv.c | 9
arch/x86/xen/p2m.c | 4
arch/xtensa/platforms/iss/console.c | 17
block/bfq-iosched.c | 2
block/blk-zoned.c | 6
block/bsg.c | 5
drivers/ata/libata-core.c | 4
drivers/ata/sata_dwc_460ex.c | 12
drivers/bus/fsl-mc/fsl-mc-bus.c | 26
drivers/clk/at91/clk-generated.c | 6
drivers/clk/imx/clk-composite-8m.c | 3
drivers/clk/imx/clk-imx8mm.c | 11
drivers/clk/imx/clk-imx8mn.c | 7
drivers/clk/imx/clk-imx8mq.c | 7
drivers/clk/imx/clk.h | 16
drivers/clk/ralink/clk-mt7621.c | 9
drivers/clk/rockchip/clk-pll.c | 2
drivers/clk/socfpga/clk-agilex.c | 19
drivers/cpufreq/powernv-cpufreq.c | 16
drivers/cpuidle/cpuidle-pseries.c | 18
drivers/crypto/ccp/sev-dev.c | 49 -
drivers/crypto/ccp/sp-pci.c | 12
drivers/crypto/mxs-dcp.c | 36 -
drivers/dma/imx-sdma.c | 13
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 23
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 2
drivers/gpu/drm/amd/amdgpu/vcn_v1_0.c | 2
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 2
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 2
drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 2
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.c | 84 ++-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.h | 1
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 2
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 16
drivers/gpu/drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 11
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 14
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 2
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_dwb_cm.c | 90 ++-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 12
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_resource.c | 42 +
drivers/gpu/drm/ast/ast_drv.h | 6
drivers/gpu/drm/ast/ast_main.c | 5
drivers/gpu/drm/ast/ast_post.c | 91 ++-
drivers/gpu/drm/bridge/nwl-dsi.c | 2
drivers/gpu/drm/drm_auth.c | 42 +
drivers/gpu/drm/drm_debugfs.c | 3
drivers/gpu/drm/drm_dp_mst_topology.c | 10
drivers/gpu/drm/drm_file.c | 1
drivers/gpu/drm/drm_lease.c | 81 ++-
drivers/gpu/drm/exynos/exynos_drm_dma.c | 2
drivers/gpu/drm/mgag200/mgag200_drv.h | 16
drivers/gpu/drm/mgag200/mgag200_mode.c | 20
drivers/gpu/drm/mgag200/mgag200_reg.h | 9
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_catalog.c | 5
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 17
drivers/gpu/drm/msm/dp/dp_ctrl.c | 134 +++--
drivers/gpu/drm/msm/dp/dp_panel.c | 9
drivers/gpu/drm/msm/dsi/dsi_cfg.c | 1
drivers/gpu/drm/msm/dsi/phy/dsi_phy_14nm.c | 2
drivers/gpu/drm/omapdrm/omap_plane.c | 3
drivers/gpu/drm/panfrost/panfrost_device.h | 8
drivers/gpu/drm/panfrost/panfrost_drv.c | 50 -
drivers/gpu/drm/panfrost/panfrost_gem.c | 20
drivers/gpu/drm/panfrost/panfrost_job.c | 4
drivers/gpu/drm/panfrost/panfrost_mmu.c | 191 ++++---
drivers/gpu/drm/panfrost/panfrost_mmu.h | 5
drivers/gpu/drm/panfrost/panfrost_regs.h | 2
drivers/gpu/drm/rcar-du/rcar_du_drv.c | 8
drivers/gpu/drm/vc4/vc4_hdmi.c | 4
drivers/gpu/drm/vkms/vkms_plane.c | 38 -
drivers/gpu/drm/vmwgfx/ttm_memory.c | 2
drivers/gpu/drm/vmwgfx/vmwgfx_binding.c | 20
drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf.c | 2
drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf_res.c | 4
drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2
drivers/gpu/drm/vmwgfx/vmwgfx_mob.c | 4
drivers/gpu/drm/vmwgfx/vmwgfx_msg.c | 6
drivers/gpu/drm/vmwgfx/vmwgfx_resource.c | 8
drivers/gpu/drm/vmwgfx/vmwgfx_so.c | 3
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 9
drivers/gpu/drm/vmwgfx/vmwgfx_validation.c | 4
drivers/gpu/drm/xlnx/zynqmp_disp.c | 3
drivers/gpu/drm/xlnx/zynqmp_dp.c | 22
drivers/hid/Makefile | 1
drivers/hid/amd-sfh-hid/amd_sfh_client.c | 2
drivers/hid/hid-input.c | 2
drivers/hid/hid-quirks.c | 2
drivers/hid/i2c-hid/i2c-hid-core.c | 5
drivers/hwmon/pmbus/ibm-cffps.c | 6
drivers/iio/dac/ad5624r_spi.c | 18
drivers/iio/temperature/ltc2983.c | 30 -
drivers/infiniband/core/iwcm.c | 19
drivers/infiniband/hw/efa/efa_verbs.c | 1
drivers/infiniband/hw/hfi1/init.c | 7
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 4
drivers/infiniband/hw/hns/hns_roce_hw_v2.h | 2
drivers/infiniband/hw/hns/hns_roce_mr.c | 4
drivers/infiniband/hw/hns/hns_roce_qp.c | 11
drivers/infiniband/hw/mlx5/qp.c | 3
drivers/input/mouse/elan_i2c.h | 3
drivers/input/mouse/elan_i2c_core.c | 1
drivers/iommu/intel/pasid.h | 10
drivers/mailbox/mtk-cmdq-mailbox.c | 3
drivers/md/dm-crypt.c | 7
drivers/media/cec/platform/stm32/stm32-cec.c | 26
drivers/media/cec/platform/tegra/tegra_cec.c | 10
drivers/media/dvb-frontends/dib8000.c | 58 +-
drivers/media/i2c/imx258.c | 4
drivers/media/i2c/tda1997x.c | 5
drivers/media/platform/ti-vpe/cal-camerarx.c | 4
drivers/media/platform/ti-vpe/cal-video.c | 2
drivers/media/rc/rc-loopback.c | 2
drivers/media/usb/uvc/uvc_v4l2.c | 34 -
drivers/media/v4l2-core/v4l2-dv-timings.c | 4
drivers/misc/pvpanic/pvpanic-pci.c | 2
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6
drivers/mmc/core/block.c | 3
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 -
drivers/mmc/host/sdhci-of-arasan.c | 36 +
drivers/mtd/nand/raw/intel-nand-controller.c | 27 -
drivers/net/bonding/bond_main.c | 3
drivers/net/dsa/lantiq_gswip.c | 3
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c | 6
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 9
drivers/net/ethernet/intel/iavf/iavf.h | 9
drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 10
drivers/net/ethernet/intel/iavf/iavf_main.c | 122 +++-
drivers/net/ethernet/intel/igc/igc_main.c | 9
drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c | 15
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 8
drivers/net/ethernet/mellanox/mlx5/core/steering/dr_rule.c | 2
drivers/net/ethernet/mellanox/mlx5/core/steering/dr_send.c | 1
drivers/net/ethernet/netronome/nfp/nfp_net_common.c | 2
drivers/net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 10
drivers/net/ethernet/wiznet/w5100.c | 2
drivers/net/ipa/ipa_cmd.c | 38 -
drivers/net/ipa/ipa_cmd.h | 15
drivers/net/ipa/ipa_data-v4.11.c | 13
drivers/net/ipa/ipa_data-v4.9.c | 9
drivers/net/ipa/ipa_table.c | 2
drivers/net/phy/dp83822.c | 8
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3
drivers/net/wireless/ath/ath9k/hw.c | 12
drivers/net/wireless/ath/wcn36xx/main.c | 5
drivers/net/wireless/ath/wcn36xx/txrx.c | 4
drivers/net/wireless/ath/wcn36xx/wcn36xx.h | 1
drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 6
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 2
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 4
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 8
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 24
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 11
drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 30 -
drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 5
drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 3
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu.h | 2
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 33 -
drivers/net/wireless/realtek/rtw88/Makefile | 2
drivers/net/wireless/realtek/rtw88/fw.c | 8
drivers/net/wireless/realtek/rtw88/fw.h | 1
drivers/net/wireless/realtek/rtw88/wow.c | 21
drivers/nvdimm/pmem.c | 4
drivers/nvme/host/core.c | 3
drivers/nvme/host/nvme.h | 47 +
drivers/nvme/host/pci.c | 2
drivers/nvme/host/rdma.c | 4
drivers/nvme/host/tcp.c | 38 -
drivers/nvme/target/loop.c | 4
drivers/nvmem/core.c | 7
drivers/nvmem/qfprom.c | 6
drivers/of/kobj.c | 2
drivers/opp/of.c | 12
drivers/parport/ieee1284_ops.c | 2
drivers/pci/controller/pci-aardvark.c | 268 +++++++++-
drivers/pci/controller/pcie-xilinx-nwl.c | 12
drivers/pci/msi.c | 3
drivers/pci/pci.c | 6
drivers/pci/pcie/portdrv_core.c | 9
drivers/pci/quirks.c | 1
drivers/pci/syscall.c | 4
drivers/pinctrl/mvebu/pinctrl-armada-37xx.c | 16
drivers/pinctrl/pinctrl-ingenic.c | 12
drivers/pinctrl/pinctrl-single.c | 1
drivers/pinctrl/pinctrl-stmfx.c | 6
drivers/pinctrl/samsung/pinctrl-samsung.c | 2
drivers/platform/chrome/cros_ec_proto.c | 9
drivers/platform/x86/dell/dell-smbios-wmi.c | 1
drivers/power/supply/max17042_battery.c | 6
drivers/rtc/rtc-tps65910.c | 2
drivers/s390/cio/qdio_main.c | 82 +--
drivers/scsi/BusLogic.c | 6
drivers/scsi/pcmcia/fdomain_cs.c | 4
drivers/scsi/qedf/qedf_main.c | 10
drivers/scsi/qedi/qedi_main.c | 14
drivers/scsi/qla2xxx/qla_nvme.c | 5
drivers/scsi/qla2xxx/qla_os.c | 6
drivers/scsi/smartpqi/smartpqi_init.c | 1
drivers/scsi/ufs/ufs-exynos.c | 4
drivers/scsi/ufs/ufs-exynos.h | 2
drivers/scsi/ufs/ufshcd.c | 8
drivers/soc/aspeed/aspeed-lpc-ctrl.c | 2
drivers/soc/aspeed/aspeed-p2a-ctrl.c | 2
drivers/soc/mediatek/mtk-mmsys.h | 4
drivers/soc/qcom/qcom_aoss.c | 8
drivers/soundwire/intel.c | 23
drivers/spi/spi-fsi.c | 125 ----
drivers/staging/board/board.c | 7
drivers/staging/hikey9xx/hisilicon,hi6421-spmi-pmic.yaml | 6
drivers/staging/ks7010/ks7010_sdio.c | 2
drivers/staging/media/atomisp/pci/atomisp_v4l2.c | 4
drivers/staging/media/hantro/hantro_g1_vp8_dec.c | 13
drivers/staging/media/hantro/rk3399_vpu_hw_vp8_dec.c | 13
drivers/staging/media/imx/imx7-media-csi.c | 15
drivers/staging/rtl8723bs/hal/hal_com_phycfg.c | 2
drivers/staging/rts5208/rtsx_scsi.c | 10
drivers/thunderbolt/switch.c | 2
drivers/tty/hvc/hvsi.c | 19
drivers/tty/serial/8250/8250_omap.c | 25
drivers/tty/serial/8250/8250_pci.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/serial/jsm/jsm_neo.c | 2
drivers/tty/serial/jsm/jsm_tty.c | 3
drivers/tty/serial/sh-sci.c | 7
drivers/usb/chipidea/host.c | 14
drivers/usb/dwc3/dwc3-imx8mp.c | 14
drivers/usb/gadget/composite.c | 8
drivers/usb/gadget/function/u_ether.c | 5
drivers/usb/host/ehci-mv.c | 23
drivers/usb/host/fotg210-hcd.c | 41 -
drivers/usb/host/fotg210.h | 5
drivers/usb/host/xhci-mtk.c | 2
drivers/usb/host/xhci.c | 24
drivers/usb/musb/musb_dsps.c | 13
drivers/usb/usbip/vhci_hcd.c | 32 +
drivers/vfio/Kconfig | 2
drivers/video/fbdev/asiliantfb.c | 3
drivers/video/fbdev/kyro/fbdev.c | 8
drivers/video/fbdev/riva/fbdev.c | 3
fs/btrfs/block-group.c | 2
fs/btrfs/disk-io.c | 48 -
fs/btrfs/free-space-cache.c | 7
fs/btrfs/inode.c | 26
fs/btrfs/ordered-data.c | 8
fs/btrfs/space-info.c | 42 +
fs/btrfs/tree-log.c | 4
fs/btrfs/volumes.c | 3
fs/ceph/caps.c | 3
fs/cifs/sess.c | 2
fs/f2fs/checkpoint.c | 4
fs/f2fs/compress.c | 190 ++++++-
fs/f2fs/data.c | 122 +++-
fs/f2fs/debug.c | 13
fs/f2fs/dir.c | 22
fs/f2fs/f2fs.h | 173 +++++-
fs/f2fs/file.c | 4
fs/f2fs/gc.c | 11
fs/f2fs/inline.c | 4
fs/f2fs/inode.c | 23
fs/f2fs/node.c | 24
fs/f2fs/node.h | 30 -
fs/f2fs/segment.c | 25
fs/f2fs/super.c | 148 +++--
fs/fscache/cookie.c | 14
fs/fscache/internal.h | 2
fs/fscache/main.c | 39 +
fs/gfs2/glops.c | 17
fs/gfs2/lock_dlm.c | 5
fs/io-wq.c | 50 -
fs/io_uring.c | 65 +-
fs/iomap/buffered-io.c | 2
fs/lockd/svclock.c | 30 -
fs/nfs/export.c | 2
fs/nfs/pnfs.c | 16
fs/nfsd/nfs4state.c | 13
fs/overlayfs/dir.c | 6
fs/userfaultfd.c | 91 +--
include/crypto/public_key.h | 4
include/drm/drm_auth.h | 1
include/drm/drm_file.h | 18
include/linux/ethtool.h | 4
include/linux/exportfs.h | 2
include/linux/f2fs_fs.h | 1
include/linux/hugetlb.h | 9
include/linux/hugetlb_cgroup.h | 12
include/linux/intel-iommu.h | 6
include/linux/memory_hotplug.h | 4
include/linux/rcupdate.h | 2
include/linux/rtmutex.h | 19
include/linux/sunrpc/xprt.h | 1
include/linux/sunrpc/xprtsock.h | 1
include/net/bluetooth/hci_core.h | 4
include/net/flow_offload.h | 1
include/uapi/linux/serial_reg.h | 1
kernel/dma/debug.c | 7
kernel/fork.c | 1
kernel/locking/rtmutex.c | 2
kernel/pid_namespace.c | 3
kernel/printk/printk.c | 7
kernel/rcu/tree_plugin.h | 8
kernel/workqueue.c | 12
lib/test_bpf.c | 13
lib/test_stackinit.c | 20
mm/hmm.c | 5
mm/hugetlb.c | 4
mm/memory_hotplug.c | 4
mm/vmscan.c | 2
net/9p/trans_xen.c | 4
net/bluetooth/hci_event.c | 140 +++--
net/bluetooth/hci_request.c | 81 +--
net/bluetooth/sco.c | 74 +-
net/core/flow_dissector.c | 12
net/core/flow_offload.c | 89 +++
net/ethtool/ioctl.c | 136 ++++-
net/ipv4/ip_output.c | 5
net/ipv4/tcp_fastopen.c | 3
net/mac80211/iface.c | 11
net/netfilter/nf_flow_table_offload.c | 1
net/netfilter/nf_tables_offload.c | 1
net/netfilter/nft_compat.c | 8
net/netlabel/netlabel_cipso_v4.c | 4
net/netlink/af_netlink.c | 4
net/sched/cls_api.c | 1
net/sched/sch_taprio.c | 4
net/socket.c | 125 ----
net/sunrpc/auth_gss/svcauth_gss.c | 2
net/sunrpc/xprt.c | 8
net/sunrpc/xprtrdma/transport.c | 11
net/sunrpc/xprtrdma/verbs.c | 10
net/sunrpc/xprtsock.c | 7
net/tipc/socket.c | 36 +
samples/bpf/test_override_return.sh | 1
samples/bpf/tracex7_user.c | 5
samples/pktgen/pktgen_sample03_burst_single_flow.sh | 6
scripts/gen_ksymdeps.sh | 8
scripts/subarch.include | 2
security/smack/smack_access.c | 17
sound/soc/atmel/Kconfig | 1
sound/soc/intel/boards/bytcr_rt5640.c | 9
sound/soc/intel/boards/sof_pcm512x.c | 13
sound/soc/intel/skylake/skl-messages.c | 11
sound/soc/intel/skylake/skl-pcm.c | 25
sound/soc/rockchip/rockchip_i2s.c | 35 -
sound/soc/soc-pcm.c | 103 +++
sound/soc/ti/davinci-mcasp.c | 150 ++++-
tools/lib/bpf/libbpf.c | 63 ++
tools/testing/selftests/arm64/mte/mte_common_util.c | 2
tools/testing/selftests/arm64/pauth/pac.c | 10
tools/testing/selftests/bpf/prog_tests/send_signal.c | 16
tools/testing/selftests/bpf/prog_tests/sockopt_inherit.c | 4
tools/testing/selftests/bpf/progs/xdp_tx.c | 2
tools/testing/selftests/bpf/test_maps.c | 2
tools/testing/selftests/bpf/test_progs.c | 25
tools/testing/selftests/bpf/test_xdp_veth.sh | 2
tools/testing/selftests/firmware/fw_namespace.c | 3
tools/testing/selftests/ftrace/test.d/functions | 2
tools/testing/selftests/nci/nci_dev.c | 6
tools/thermal/tmon/Makefile | 2
422 files changed, 4602 insertions(+), 2422 deletions(-)
Aaron Liu (1):
drm/amd/display: setup system context for APUs
Ahmad Fatoum (1):
clk: imx8m: fix clock tree update of TF-A managed clocks
Alex Elder (3):
net: ipa: fix IPA v4.11 interconnect data
net: ipa: fix ipa_cmd_table_valid()
net: ipa: fix IPA v4.9 interconnects
Alexandru Elisei (1):
arm64: Do not trap PMSNEVFR_EL1
Alexey Kardashevskiy (1):
KVM: PPC: Fix clearing never mapped TCEs in realmode
Alim Akhtar (1):
scsi: ufs: ufs-exynos: Fix static checker warning
Alyssa Rosenzweig (3):
drm/panfrost: Simplify lock_region calculation
drm/panfrost: Use u64 for size in lock_region
drm/panfrost: Clamp lock region to Bifrost minimum
Anand Jain (1):
btrfs: fix upper limit for max_inline for page size 64K
Andreas Obergschwandtner (1):
ARM: tegra: tamonten: Fix UART pad setting
Andrey Grodzovsky (1):
drm/amdgpu: Fix BUG_ON assert
Andy Shevchenko (1):
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
AngeloGioacchino Del Regno (2):
arm64: dts: qcom: sdm630: Rewrite memory map
arm64: dts: qcom: sdm630: Fix TLMM node and pinctrl configuration
Ani Sinha (1):
x86/hyperv: fix for unwanted manipulation of sched_clock when TSC marked unstable
Anirudh Rayabharam (1):
usbip: give back URBs for unsent unlink requests during cleanup
Anna Schumaker (1):
sunrpc: Fix return value of get_srcport()
Anson Jacob (1):
drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
Anthony Iliopoulos (1):
dma-debug: fix debugfs initialization order
Arnd Bergmann (2):
ethtool: improve compat ioctl handling
m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
Arne Welzel (1):
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Aurabindo Pillai (1):
drm/amd/display: Update number of DCN3 clock states
Bart Van Assche (1):
scsi: ufs: Fix memory corruption by ufshcd_read_desc_param()
Basavaraj Natikar (1):
HID: amd_sfh: Fix period data field to enable sensor
Bob Peterson (2):
gfs2: Fix glock recursion in freeze_go_xmote_bh
gfs2: Don't call dlm after protocol is unmounted
Bongsu Jeon (2):
selftests: nci: Fix the code for next nlattr offset
selftests: nci: Fix the wrong condition
Boris Brezillon (1):
drm/panfrost: Make sure MMU context lifetime is not bound to panfrost_priv
Brandon Wyman (1):
hwmon: (pmbus/ibm-cffps) Fix write bits for LED control
Brijesh Singh (1):
crypto: ccp - shutdown SEV firmware on kexec
Cezary Rojewski (1):
ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
Chao Yu (10):
f2fs: fix to do sanity check for sb/cp fields correctly
f2fs: compress: fix to set zstd compress level correctly
f2fs: quota: fix potential deadlock
f2fs: restructure f2fs page.private layout
f2fs: compress: add compress_inode to cache compressed blocks
f2fs: fix wrong checkpoint_changed value in f2fs_remount()
f2fs: fix to keep compatibility of fault injection interface
f2fs: fix to account missing .skipped_gc_rwsem
f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
f2fs: fix to unmap pages from userspace process in punch_hole()
Chengfeng Ye (1):
selftests/bpf: Fix potential unreleased lock
Chin-Yen Lee (2):
rtw88: use read_poll_timeout instead of fixed sleep
rtw88: wow: fix size access error of probe request
Chris Chiu (1):
rtl8xxxu: Fix the handling of TX A-MPDU aggregation
Christoph Hellwig (1):
scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
Christophe JAILLET (1):
staging: ks7010: Fix the initialization of the 'sleep_status' structure
Chuck Lever (1):
xprtrdma: Put rpcrdma_reps before waking the tear-down completion
Chunfeng Yun (1):
usb: xhci-mtk: fix use-after-free of mtk->hcd
Codrin Ciubotariu (1):
clk: at91: clk-generated: Limit the requested rate to our range
Colin Ian King (3):
ceph: fix dereference of null pointer cf
scsi: BusLogic: Use %X for u32 sized integer rather than %lX
parport: remove non-zero check on count
Damien Le Moal (1):
block: bfq: fix bfq_set_next_ioprio_data()
Dan Carpenter (3):
scsi: smartpqi: Fix an error code in pqi_get_raid_map()
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
scsi: qedf: Fix error codes in qedf_alloc_global_queues()
Daniel Vetter (1):
drm/omap: Follow implicit fencing in prepare_fb
Darrick J. Wong (1):
iomap: pass writeback errors to the mapping
David Heidelberg (4):
ARM: 9105/1: atags_to_fdt: don't warn about stack size
ARM: dts: qcom: apq8064: correct clock names
drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
drm/msi/mdp4: populate priv->kms in mdp4_kms_init
David Hildenbrand (1):
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
David Howells (1):
fscache: Fix cookie key hashing
Desmond Cheong Zhi Xi (8):
btrfs: reset replace target device to allocation state on close
drm: avoid blocking in drm_clients_info's rcu section
drm: serialize drm_file.master with a new spinlock
drm: protect drm_master pointers in drm_lease.c
Bluetooth: skip invalid hci_sync_conn_complete_evt
drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
Bluetooth: schedule SCO timeouts with delayed_work
Bluetooth: avoid circular locks in sco_sock_connect
Ding Hui (1):
cifs: fix wrong release in sess_alloc_buffer() failed path
Dinghao Liu (1):
media: atomisp: Fix runtime PM imbalance in atomisp_pci_probe
Dinh Nguyen (3):
clk: socfpga: agilex: fix the parents of the psi_ref_clk
clk: socfpga: agilex: fix up s2f_user0_clk representation
clk: socfpga: agilex: add the bypass register for s2f_usr0 clock
Dmitry Osipenko (2):
rtc: tps65910: Correct driver module alias
ARM: tegra: acer-a500: Remove bogus USB VBUS regulators
Dmitry Torokhov (1):
HID: input: do not report stylus battery state as "full"
Dom Cobley (1):
drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET
Eddie James (1):
spi: fsi: Reduce max transfer size to 8 bytes
Eli Cohen (1):
net: Fix offloading indirect devices dependency on qdisc order creation
Enric Balletbo i Serra (1):
soc: mediatek: mmsys: Fix missing UFOE component in mt8173 table routing
Eran Ben Elisha (1):
net/mlx5: Fix variable type to match 64bit
Eric Auger (1):
misc/pvpanic-pci: Allow automatic loading
Evan Wang (1):
PCI: aardvark: Fix checking for PIO status
Evgeny Novikov (4):
USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
media: platform: stm32: unprepare clocks at handling errors in probe
media: tegra-cec: Handle errors of clk_prepare_enable()
mtd: rawnand: intel: Fix error handling in probe
Ezequiel Garcia (1):
media: hantro: vp8: Move noisy WARN_ON to vpu_debug
Fabiano Rosas (1):
KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines
Fabio Aiuto (1):
staging: rtl8723bs: fix right side of condition
Filipe Manana (1):
btrfs: remove racy and unnecessary inode transaction update when using no-holes
Gautham R. Shenoy (1):
cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards
Geert Uytterhoeven (2):
staging: board: Fix uninitialized spinlock when attaching genpd
drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit
Georgi Djakov (1):
arm64: dts: qcom: sm8250: Fix epss_l3 unit address
Greg Kroah-Hartman (2):
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Linux 5.13.19
Guojia Liao (1):
net: hns3: clean up a type mismatch warning
Gustavo A. R. Silva (2):
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
flow_dissector: Fix out-of-bounds warnings
Gustaw Lewandowski (1):
ASoC: Intel: Skylake: Fix passing loadable flag for module
Haimin Zhang (1):
fix array-index-out-of-bounds in taprio_change
Halil Pasic (1):
s390/pv: fix the forcing of the swiotlb
Hans Verkuil (1):
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Hans de Goede (3):
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Harshvardhan Jha (1):
9p/xen: Fix end of loop tests for list_for_each_entry
Heiko Carstens (1):
s390/jump_label: print real address in a case of a jump label bug
Hyun Kwon (1):
PCI: xilinx-nwl: Enable the clock through CCF
Ilan Peer (3):
iwlwifi: mvm: Do not use full SSIDs in 6GHz scan
iwlwifi: mvm: Fix umac scan request probe parameters
iwlwifi: mvm: Fix scan channel flags settings
Ioana Ciornei (1):
dpaa2-switch: do not enable the DPSW at probe time
Iwona Winiarska (2):
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
soc: aspeed: p2a-ctrl: Fix boundary check for mmap
J. Bruce Fields (4):
rpc: fix gss_svc_init cleanup on failure
lockd: lockd server-side shouldn't set fl_ops
nfs: don't atempt blocking locks on nfs reexports
nfsd: fix crash on LOCKT on reexported NFSv3
Jack Pham (1):
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Jaegeuk Kim (2):
f2fs: deallocate compressed pages when error happens
f2fs: should put a page beyond EOF when preparing a write
Jaehyoung Choi (1):
pinctrl: samsung: Fix pinctrl bank pin count
Jan Hoffmann (1):
net: dsa: lantiq_gswip: fix maximum frame length
Jason Gunthorpe (1):
vfio: Use config not menuconfig for VFIO_NOIOMMU
Jens Axboe (2):
io-wq: fix wakeup race when adding new work
io-wq: fix race between adding work and activating a free worker
Jernej Skrabec (1):
arm64: dts: allwinner: h6: tanix-tx6: Fix regulator node names
Jerry (Fangzhi) Zuo (1):
drm/amd/display: Update bounding box states (v2)
Jim Broadus (1):
HID: i2c-hid: Fix Elan touchpad regression
Jiri Slaby (2):
xtensa: ISS: don't panic in rs_init
hvsi: don't panic on tty_register_driver failure
Joel Stanley (1):
powerpc/config: Renable MTD_PHYSMAP_OF
Johan Almbladh (3):
bpf/tests: Fix copy-and-paste error in double word test
bpf/tests: Do not PASS tests without actually testing the result
mac80211: Fix monitor MTU limit so that A-MSDUs get through
Johannes Berg (4):
iwlwifi: pcie: free RBs during configure
iwlwifi: mvm: avoid static queue number aliasing
iwlwifi: mvm: fix access to BSS elements
iwlwifi: fw: correctly limit to monitor dump
Jonathan Cameron (1):
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Josef Bacik (3):
btrfs: wake up async_delalloc_pages waiters after submit
btrfs: wait on async extents when flushing delalloc
btrfs: reduce the preemptive flushing threshold to 90%
Joseph Gates (1):
wcn36xx: Ensure finish scan is not requested before start scan
Juergen Gross (1):
xen: fix setting of max_pfn in shared_info
Juhee Kang (2):
samples: bpf: Fix tracex7 error raised on the missing argument
samples: pktgen: fix to print when terminated normally
Julian Wiedmann (2):
s390/qdio: fix roll-back after timeout on ESTABLISH ccw
s390/qdio: cancel the ESTABLISH ccw after timeout
Junxian Huang (2):
RDMA/hns: Bugfix for data type of dip_idx
RDMA/hns: Bugfix for the missing assignment for dip_idx
Jussi Maki (1):
selftests/bpf: Fix xdp_tx.c prog section name
Kajol Jain (2):
powerpc/perf/hv-gpci: Fix counter value parsing
powerpc/perf: Fix the check for SIAR value
Kalyan Thota (1):
drm/msm/disp/dpu1: add safe lut config in dpu driver
Kees Cook (2):
staging: rts5208: Fix get_ms_information() heap buffer size
lib/test_stackinit: Fix static initializer test
Kelly Devilliv (2):
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
usb: host: fotg210: fix the actual_length of an iso packet
Konrad Dybcio (1):
drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660
Krzysztof Hałasa (1):
media: TDA1997x: fix tda1997x_query_dv_timings() return value
Krzysztof Kozlowski (1):
power: supply: max17042: handle fails of reading status register
Krzysztof Wilczyński (1):
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
KuoHsiang Chou (1):
drm/ast: Disable fast reset after DRAM initial
Kuogee Hsieh (3):
drm/msm/dp: reduce link rate if failed at link training 1
drm/msm/dp: return correct edid checksum after corrupted edid checksum read
drm/msm/dp: do not end dp link training until video is ready
Laurent Dufour (1):
powerpc/numa: Consider the max NUMA node for migratable LPAR
Laurent Pinchart (3):
drm: rcar-du: Shutdown the display on system shutdown
media: imx258: Rectify mismatch of VTS value
media: imx: imx7-media-csi: Fix buffer return upon stream start failure
Laurentiu Tudor (2):
bus: fsl-mc: fix arg in call to dprc_scan_objects()
bus: fsl-mc: fix mmio base address for child DPRCs
Leon Romanovsky (5):
RDMA/iwcm: Release resources if iw_cm module initialization fails
docs: Fix infiniband uverbs minor number
RDMA/hns: Don't overwrite supplied QP attributes
RDMA/efa: Remove double QP type assignment
RDMA/mlx5: Delete not-available udata check
Li Jun (1):
usb: chipidea: host: fix port index underflow and UBSAN complains
Li Zhijian (2):
selftests/bpf: Enlarge select() timeout for test_maps
mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled
Liu Zixian (1):
mm/hugetlb: initialize hugetlb_usage in mm_init
Loic Poulain (1):
wcn36xx: Fix missing frame timestamp for beacon/probe-resp
Lu Baolu (1):
iommu/vt-d: Update the virtual command related registers
Luben Tuikov (1):
drm/amdgpu: Fix amdgpu_ras_eeprom_init()
Lucas Stach (1):
clk: imx8mm: use correct mux type for clkout path
Luiz Augusto von Dentz (2):
Bluetooth: Fix not generating RPA when required
Bluetooth: Fix handling of LE Enhanced Connection Complete
Lukas Bulwahn (1):
HID: thrustmaster: clean up Makefile and adapt quirks
Luke Hsiao (1):
tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
Maciej W. Rozycki (2):
serial: 8250: Define RX trigger levels for OxSemi 950 devices
scsi: BusLogic: Fix missing pr_cont() use
Maciej Żenczykowski (1):
usb: gadget: u_ether: fix a potential null pointer dereference
Manish Narani (2):
mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP
mmc: sdhci-of-arasan: Check return value of non-void funtions
Manivannan Sadhasivam (1):
soc: qcom: aoss: Fix the out of bound usage of cooling_devs
Marc Zyngier (3):
pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
arm64: Move .hyp.rodata outside of the _sdata.._edata range
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
Marcos Paulo de Souza (1):
btrfs: tree-log: check btrfs_lookup_data_extent return value
Marek Behún (2):
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
pinctrl: armada-37xx: Correct PWM pins definitions
Marek Marczykowski-Górecki (1):
PCI/MSI: Skip masking MSI-X on Xen PV
Marek Vasut (4):
net: phy: Fix data type in DP83822 dp8382x_disable_wol()
ARM: dts: stm32: Set {bitclock,frame}-master phandles on DHCOM SoM
ARM: dts: stm32: Set {bitclock,frame}-master phandles on ST DKx
ARM: dts: stm32: Update AV96 adv7513 node per dtbs_check
Mark Brown (2):
kselftest/arm64: mte: Fix misleading output when skipping tests
kselftest/arm64: pac: Fix skipping of tests on systems without PAC
Mark Rutland (1):
arm64: head: avoid over-mapping in map_memory
Martynas Pumputis (2):
libbpf: Fix reuse of pinned map on older kernel
libbpf: Fix race when pinning maps in parallel
Masahiro Yamada (2):
kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
parisc: Fix compile failure when building 64-bit kernel natively
Mathias Nyman (1):
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Mauro Carvalho Chehab (3):
media: uvc: don't do DMA on stack
media: dib8000: rewrite the init prbs logic
staging: hisilicon,hi6421-spmi-pmic.yaml: fix patternProperties
Miaoqing Pan (1):
ath9k: fix sleeping in atomic context
Michal Suchanek (1):
powerpc/stacktrace: Include linux/delay.h
Mike Kravetz (1):
hugetlb: fix hugetlb cgroup refcounting during vma split
Mike Marciniszyn (1):
IB/hfi1: Adjust pkey entry in index 0
Mikulas Patocka (1):
parisc: fix crash with signals and alloca
Nadav Amit (1):
userfaultfd: prevent concurrent API initialization
Nadezda Lutovinova (2):
usb: dwc3: imx8mp: request irq after initializing dwc3
usb: musb: musb_dsps: request_irq() after initializing musb
Naohiro Aota (3):
btrfs: zoned: fix block group alloc_offset calculation
btrfs: zoned: suppress reclaim error message on EAGAIN
btrfs: zoned: fix double counting of split ordered extent
Nathan Chancellor (3):
cpuidle: pseries: Mark pseries_idle_proble() as __init
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
drm/exynos: Always initialize mapping in exynos_drm_register_dma()
Nicholas Piggin (1):
KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live
Nicolas Ferre (1):
ARM: dts: at91: use the right property for shutdown controller
Niklas Cassel (2):
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Niklas Schnelle (1):
s390: make PCI mio support a machine flag
Niklas Söderlund (1):
nfp: fix return statement in nfp_net_parse_meta()
Nishad Kamdar (1):
mmc: core: Return correct emmc response in case of ioctl error
Nuno Sá (1):
iio: ltc2983: fix device probe
Oak Zeng (1):
drm/amdgpu: Fix a printing message
Oleksij Rempel (1):
MIPS: Malta: fix alignment of the devicetree buffer
Olga Kornievskaia (1):
SUNRPC query transport's source port
Oliver Logush (1):
drm/amd/display: Fix timer_per_pixel unit error
Pablo Neira Ayuso (1):
netfilter: nft_compat: use nfnetlink_unicast()
Pali Rohár (3):
PCI: aardvark: Configure PCIe resources from 'ranges' DT property
PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Patryk Duda (1):
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Paul Cercueil (2):
pinctrl: ingenic: Fix incorrect pull up/down info
pinctrl: ingenic: Fix bias config for X2000(E)
Pavel Begunkov (4):
io_uring: place fixed tables under memcg limits
io_uring: add ->splice_fd_in checks
io_uring: fix io_try_cancel_userdata race for iowq
io_uring: fail links of cancelled timeouts
Peter Geis (1):
clk: rockchip: drop GRF dependency for rk3328/rk3036 pll types
Peter Ujfalusi (1):
ASoC: ti: davinci-mcasp: Fix DIT mode support
Petr Mladek (1):
printk/console: Check consistent sequence number when handling race in console_unlock()
Pierre-Louis Bossart (3):
ASoC: Intel: update sof_pcm512x quirks
soundwire: intel: fix potential race condition during power down
ASoC: soc-pcm: protect BE dailink state changes in trigger
Ping-Ke Shih (1):
rtw88: wow: build wow function only if CONFIG_PM is on
Pratik R. Sampat (1):
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Quanyang Wang (2):
drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock
drm: xlnx: zynqmp: release reset to DP controller before accessing DP registers
Raag Jadav (1):
arm64: dts: ls1046a: fix eeprom entries
Rafael J. Wysocki (1):
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Rajendra Nayak (2):
nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
opp: Don't print an error if required-opps is missing
Rajkumar Subbiah (1):
drm/dp_mst: Fix return code on sideband message failure
Randy Dunlap (2):
openrisc: don't printk() unconditionally
ASoC: atmel: ATMEL drivers don't need HAS_DMA
Rik van Riel (1):
mm,vmscan: fix divide by zero in get_scan_count
Robin Gong (2):
Revert "dmaengine: imx-sdma: refine to load context only once"
dmaengine: imx-sdma: remove duplicated sdma_load_context
Rolf Eike Beer (1):
tools/thermal/tmon: Add cross compiling support
Roy Chan (2):
drm/amd/display: fix missing writeback disablement if plane is removed
drm/amd/display: fix incorrect CM/TF programming sequence in dwb
Sagi Grimberg (2):
nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
nvme: code command_id with a genctr for use-after-free validation
Sanjay R Mehta (1):
thunderbolt: Fix port linking by checking all adapters
Sasha Neftin (1):
igc: Check if num of q_vectors is smaller than max before array access
Saurav Kashyap (2):
scsi: qla2xxx: Changes to support kdump kernel
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Sean Anderson (1):
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Sean Keely (1):
drm/amdkfd: Account for SH/SE count when setting up cu masks.
Sean Young (1):
media: rc-loopback: return number of emitters rather than error
Sebastian Reichel (1):
ARM: dts: imx53-ppd: Fix ACHC entry
Sergio Paracuellos (1):
clk: ralink: avoid to set 'CLK_IS_CRITICAL' flag for gates
Shuah Khan (2):
selftests: firmware: Fix ignored return val of asprintf() warn
usbip:vhci_hcd USB port can get stuck in the disabled state
Song Yoong Siang (1):
net: stmmac: Fix overall budget calculation for rxtx_napi
Srikar Dronamraju (2):
powerpc/smp: Fix a crash while booting kvm guest with nr_cpus=2
powerpc/smp: Update cpu_core_map on all PowerPc systems
Srinivas Kandagatla (1):
nvmem: core: fix error handling while validating keepout regions
Stefan Assmann (3):
iavf: do not override the adapter state in the watchdog task
iavf: fix locking of critical sections
iavf: use mutexes for locking of critical sections
Steven Rostedt (VMware) (1):
selftests/ftrace: Fix requirement check of README file
Stuart Hayes (1):
PCI/portdrv: Enable Bandwidth Notification only if port supports it
Subbaraya Sundeep (1):
octeontx2-pf: Fix NIX1_RX interface backpressure
Sugar Zhang (1):
ASoC: rockchip: i2s: Fix regmap_ops hang
Sven Schnelle (1):
s390/topology: fix topology information when calling cpu hotplug notifiers
Thierry Reding (1):
arm64: tegra: Fix compatible string for Tegra132 CPUs
Thomas Gleixner (1):
locking/rtmutex: Set proper wait context for lockdep
Thomas Hebb (1):
mmc: rtsx_pci: Fix long reads when clock is prescaled
Thomas Zimmermann (2):
drm/vkms: Let shadow-plane helpers prepare the plane's FB
drm/mgag200: Select clock in PLL update functions
Tianjia Zhang (1):
Smack: Fix wrong semantics in smk_access_entry()
Tim Harvey (3):
arm64: dts: imx8mm-venice-gw700x: fix mp5416 pmic config
arm64: dts: imx8mm-venice-gw700x: fix invalid pmic pin config
arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
Tomi Valkeinen (2):
media: ti-vpe: cal: fix error handling in cal_camerarx_create
media: ti-vpe: cal: fix queuing of the initial buffer
Tony Lindgren (1):
serial: 8250_omap: Handle optional overrun-throttle-ms property
Trond Myklebust (5):
NFSv4/pNFS: Fix a layoutget livelock loop
NFSv4/pNFS: Always allow update of a zero valued layout barrier
NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid
SUNRPC: Fix potential memory corruption
SUNRPC/xprtrdma: Fix reconnection locking
Tuo Li (2):
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
drm/display: fix possible null-pointer dereference in dcn10_set_clock()
Ulrich Hecht (1):
serial: sh-sci: fix break handling for sysrq
Umang Jain (1):
media: imx258: Limit the max analogue gain to 480
Vasily Averin (1):
memcg: enable accounting for pids in nested pid namespaces
Vidya Sagar (1):
arm64: tegra: Fix Tegra194 PCIe EP compatible string
Vinod Koul (6):
arm64: dts: qcom: ipq8074: fix pci node reg property
arm64: dts: qcom: sdm660: use reg value for memory node
arm64: dts: qcom: ipq6018: drop '0x' from unit address
arm64: dts: qcom: sdm630: don't use underscore in node name
arm64: dts: qcom: msm8994: don't use underscore in node name
arm64: dts: qcom: msm8996: don't use underscore in node name
Wang Hai (1):
VMCI: fix NULL pointer dereference when unmapping queue pair
Wei Li (1):
scsi: fdomain: Fix error return code in fdomain_probe()
Wenpeng Liang (1):
RDMA/hns: Fix QP's resp incomplete assignment
Wentao_Liang (1):
net/mlx5: DR, fix a potential use-after-free bug
Will Deacon (1):
arm64: mm: Fix TLBI vs ASID rollover
Xiaotan Luo (1):
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Xin Long (1):
tipc: keep the skb in rcv queue until the whole data is read
Yajun Deng (1):
netlink: Deal with ESRCH error in nlmsg_notify()
Yang Yingliang (2):
media: atomisp: pci: fix error return code in atomisp_pci_probe()
net: w5100: check return value after calling platform_get_resource()
Yangtao Li (1):
f2fs: reduce the scope of setting fsck tag when de->name_len is zero
Yevgeny Kliteynik (1):
net/mlx5: DR, Enable QP retransmission
Yonghong Song (1):
selftests/bpf: Fix flaky send_signal test
Yongqiang Niu (1):
soc: mediatek: cmdq: add address shift in jump
Yucong Sun (1):
selftests/bpf: Correctly display subtest skip status
YueHaibing (1):
RDMA/hns: Fix return in hns_roce_rereg_user_mr()
Yufeng Mo (1):
bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
Zack Rusin (2):
drm/vmwgfx: Fix subresource updates with new contexts
drm/vmwgfx: Fix some static checker warnings
Zekun Shen (1):
ath9k: fix OOB read ar9300_eeprom_restore_internal
Zhang Qilong (1):
iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
Zhen Lei (2):
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
workqueue: Fix possible memory leaks in wq_numa_init()
Zheyu Ma (5):
video: fbdev: kyro: fix a DoS bug by restricting user input
tty: serial: jsm: hold port lock when reporting modem line changes
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
video: fbdev: kyro: Error out if 'pixclock' equals zero
video: fbdev: riva: Error out if 'pixclock' equals zero
Zhouyi Zhou (1):
rcu: Fix macro name CONFIG_TASKS_RCU_TRACE
chenying (1):
ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
jingle.wu (1):
Input: elan_i2c - reduce the resume time for controller in Whitebox
sumiyawang (1):
libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
xinhui pan (1):
drm/amdgpu: Fix a deadlock if previous GEM object allocation fails
zhenwei pi (1):
crypto: public_key: fix overflow during implicit conversion
王贇 (1):
net: fix NULL pointer reference in cipso_v4_doi_free
^ permalink raw reply [relevance 1%]
* Linux 5.14.6
@ 2021-09-18 12:08 1% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-18 12:08 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 5.14.6 kernel.
All users of the 5.14 kernel series must upgrade.
The updated 5.14.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.14.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/devices.txt | 6
Documentation/devicetree/bindings/display/panel/samsung,lms397kf04.yaml | 18
Documentation/devicetree/bindings/pinctrl/marvell,armada-37xx-pinctrl.txt | 8
Documentation/filesystems/f2fs.rst | 1
Makefile | 9
arch/arm/boot/compressed/Makefile | 2
arch/arm/boot/dts/at91-kizbox3_common.dtsi | 2
arch/arm/boot/dts/at91-sam9x60ek.dts | 2
arch/arm/boot/dts/at91-sama5d27_som1_ek.dts | 2
arch/arm/boot/dts/at91-sama5d27_wlsom1_ek.dts | 2
arch/arm/boot/dts/at91-sama5d2_icp.dts | 2
arch/arm/boot/dts/at91-sama5d2_ptc_ek.dts | 2
arch/arm/boot/dts/at91-sama5d2_xplained.dts | 2
arch/arm/boot/dts/imx53-ppd.dts | 23
arch/arm/boot/dts/intel-ixp42x-linksys-nslu2.dts | 24
arch/arm/boot/dts/intel-ixp43x-gateworks-gw2358.dts | 48 -
arch/arm/boot/dts/qcom-apq8064.dtsi | 6
arch/arm/boot/dts/stm32mp15xx-dhcom-pdk2.dtsi | 8
arch/arm/boot/dts/stm32mp15xx-dhcor-avenger96.dtsi | 6
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 8
arch/arm/boot/dts/tegra20-acer-a500-picasso.dts | 25
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14
arch/arm64/boot/dts/allwinner/sun50i-h6-tanix-tx6.dts | 4
arch/arm64/boot/dts/freescale/fsl-ls1046a-frwy.dts | 8
arch/arm64/boot/dts/freescale/fsl-ls1046a-rdb.dts | 7
arch/arm64/boot/dts/freescale/imx8mm-venice-gw700x.dtsi | 64 +-
arch/arm64/boot/dts/freescale/imx8mm-venice-gw71xx.dtsi | 5
arch/arm64/boot/dts/nvidia/tegra132.dtsi | 4
arch/arm64/boot/dts/nvidia/tegra194.dtsi | 6
arch/arm64/boot/dts/qcom/ipq6018.dtsi | 2
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2
arch/arm64/boot/dts/qcom/ipq8074.dtsi | 16
arch/arm64/boot/dts/qcom/msm8994.dtsi | 6
arch/arm64/boot/dts/qcom/msm8996.dtsi | 4
arch/arm64/boot/dts/qcom/sa8155p-adp.dts | 60 +-
arch/arm64/boot/dts/qcom/sdm630.dtsi | 257 +++++----
arch/arm64/boot/dts/qcom/sm8250.dtsi | 2
arch/arm64/include/asm/el2_setup.h | 13
arch/arm64/include/asm/kernel-pgtable.h | 4
arch/arm64/include/asm/mmu.h | 29 -
arch/arm64/include/asm/tlbflush.h | 11
arch/arm64/kernel/head.S | 11
arch/arm64/kernel/vmlinux.lds.S | 4
arch/m68k/Kconfig.bus | 2
arch/mips/mti-malta/malta-dtshim.c | 2
arch/openrisc/kernel/entry.S | 2
arch/parisc/Makefile | 6
arch/parisc/kernel/signal.c | 6
arch/powerpc/configs/mpc885_ads_defconfig | 3
arch/powerpc/include/asm/pmc.h | 7
arch/powerpc/kernel/smp.c | 13
arch/powerpc/kernel/stacktrace.c | 1
arch/powerpc/kvm/book3s_64_mmu_radix.c | 6
arch/powerpc/kvm/book3s_64_vio_hv.c | 9
arch/powerpc/kvm/book3s_hv.c | 20
arch/powerpc/mm/numa.c | 13
arch/powerpc/perf/core-book3s.c | 12
arch/powerpc/perf/hv-gpci.c | 2
arch/s390/include/asm/setup.h | 2
arch/s390/include/asm/smp.h | 1
arch/s390/kernel/early.c | 4
arch/s390/kernel/jump_label.c | 2
arch/s390/kernel/smp.c | 9
arch/s390/kernel/topology.c | 13
arch/s390/mm/init.c | 2
arch/s390/pci/pci.c | 5
arch/x86/kernel/cpu/mshyperv.c | 9
arch/x86/xen/p2m.c | 4
arch/xtensa/platforms/iss/console.c | 17
block/bfq-iosched.c | 2
block/blk-zoned.c | 6
block/bsg.c | 5
drivers/ata/libata-core.c | 4
drivers/ata/sata_dwc_460ex.c | 12
drivers/base/core.c | 2
drivers/bus/fsl-mc/fsl-mc-bus.c | 26
drivers/clk/at91/clk-generated.c | 6
drivers/clk/imx/clk-composite-8m.c | 3
drivers/clk/imx/clk-imx8mm.c | 11
drivers/clk/imx/clk-imx8mn.c | 7
drivers/clk/imx/clk-imx8mq.c | 7
drivers/clk/imx/clk.h | 16
drivers/clk/ralink/clk-mt7621.c | 9
drivers/clk/renesas/renesas-rzg2l-cpg.c | 2
drivers/clk/rockchip/clk-pll.c | 2
drivers/clk/socfpga/clk-agilex.c | 19
drivers/cpufreq/powernv-cpufreq.c | 16
drivers/cpuidle/cpuidle-pseries.c | 18
drivers/crypto/ccp/sev-dev.c | 49 -
drivers/crypto/ccp/sp-pci.c | 12
drivers/crypto/mxs-dcp.c | 36 -
drivers/dma-buf/dma-resv.c | 33 -
drivers/dma/imx-sdma.c | 13
drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 1
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 23
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c | 16
drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 2
drivers/gpu/drm/amd/amdgpu/vcn_v1_0.c | 2
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 2
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 2
drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 2
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.c | 84 ++-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.h | 1
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 3
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 2
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 16
drivers/gpu/drm/amd/display/dc/dce/dmub_psr.c | 4
drivers/gpu/drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 38 -
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 14
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 2
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_dwb_cm.c | 90 ++-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 37 -
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_resource.c | 42 +
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_hwseq.c | 5
drivers/gpu/drm/ast/ast_drv.h | 6
drivers/gpu/drm/ast/ast_main.c | 5
drivers/gpu/drm/ast/ast_post.c | 91 ++-
drivers/gpu/drm/bridge/nwl-dsi.c | 2
drivers/gpu/drm/drm_auth.c | 42 +
drivers/gpu/drm/drm_debugfs.c | 3
drivers/gpu/drm/drm_dp_mst_topology.c | 10
drivers/gpu/drm/drm_file.c | 1
drivers/gpu/drm/drm_lease.c | 81 ++-
drivers/gpu/drm/exynos/exynos_drm_dma.c | 2
drivers/gpu/drm/mgag200/mgag200_drv.h | 16
drivers/gpu/drm/mgag200/mgag200_mode.c | 20
drivers/gpu/drm/mgag200/mgag200_reg.h | 9
drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 46 +
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_catalog.c | 5
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 17
drivers/gpu/drm/msm/dp/dp_aux.c | 3
drivers/gpu/drm/msm/dp/dp_ctrl.c | 134 +++--
drivers/gpu/drm/msm/dp/dp_panel.c | 9
drivers/gpu/drm/msm/dsi/dsi_cfg.c | 1
drivers/gpu/drm/msm/dsi/phy/dsi_phy_14nm.c | 2
drivers/gpu/drm/omapdrm/omap_plane.c | 3
drivers/gpu/drm/panfrost/panfrost_device.h | 8
drivers/gpu/drm/panfrost/panfrost_drv.c | 50 -
drivers/gpu/drm/panfrost/panfrost_gem.c | 20
drivers/gpu/drm/panfrost/panfrost_job.c | 4
drivers/gpu/drm/panfrost/panfrost_mmu.c | 191 ++++---
drivers/gpu/drm/panfrost/panfrost_mmu.h | 5
drivers/gpu/drm/panfrost/panfrost_regs.h | 2
drivers/gpu/drm/rcar-du/rcar_du_drv.c | 8
drivers/gpu/drm/ttm/ttm_bo.c | 63 +-
drivers/gpu/drm/ttm/ttm_bo_util.c | 7
drivers/gpu/drm/vc4/vc4_hdmi.c | 19
drivers/gpu/drm/vkms/vkms_plane.c | 38 -
drivers/gpu/drm/vmwgfx/ttm_memory.c | 2
drivers/gpu/drm/vmwgfx/vmwgfx_binding.c | 20
drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf.c | 2
drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf_res.c | 4
drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2
drivers/gpu/drm/vmwgfx/vmwgfx_mob.c | 4
drivers/gpu/drm/vmwgfx/vmwgfx_msg.c | 6
drivers/gpu/drm/vmwgfx/vmwgfx_resource.c | 8
drivers/gpu/drm/vmwgfx/vmwgfx_so.c | 3
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 9
drivers/gpu/drm/vmwgfx/vmwgfx_validation.c | 4
drivers/gpu/drm/xlnx/zynqmp_disp.c | 3
drivers/gpu/drm/xlnx/zynqmp_dp.c | 22
drivers/hid/Makefile | 1
drivers/hid/amd-sfh-hid/amd_sfh_client.c | 2
drivers/hid/hid-input.c | 2
drivers/hid/hid-quirks.c | 2
drivers/hid/i2c-hid/i2c-hid-core.c | 5
drivers/hwmon/pmbus/ibm-cffps.c | 6
drivers/iio/dac/ad5624r_spi.c | 18
drivers/iio/temperature/ltc2983.c | 30 -
drivers/infiniband/core/iwcm.c | 19
drivers/infiniband/hw/efa/efa_verbs.c | 1
drivers/infiniband/hw/hfi1/init.c | 7
drivers/infiniband/hw/hns/hns_roce_device.h | 9
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 21
drivers/infiniband/hw/hns/hns_roce_hw_v2.h | 2
drivers/infiniband/hw/hns/hns_roce_main.c | 8
drivers/infiniband/hw/hns/hns_roce_mr.c | 4
drivers/infiniband/hw/hns/hns_roce_qp.c | 21
drivers/infiniband/hw/mlx5/qp.c | 3
drivers/infiniband/ulp/rtrs/rtrs-clt.c | 11
drivers/infiniband/ulp/rtrs/rtrs-clt.h | 1
drivers/infiniband/ulp/rtrs/rtrs-pri.h | 3
drivers/infiniband/ulp/rtrs/rtrs-srv.c | 19
drivers/infiniband/ulp/rtrs/rtrs-srv.h | 2
drivers/infiniband/ulp/rtrs/rtrs.c | 8
drivers/input/mouse/elan_i2c.h | 3
drivers/input/mouse/elan_i2c_core.c | 1
drivers/iommu/intel/pasid.h | 10
drivers/mailbox/mtk-cmdq-mailbox.c | 3
drivers/md/dm-crypt.c | 7
drivers/media/cec/platform/stm32/stm32-cec.c | 26
drivers/media/cec/platform/tegra/tegra_cec.c | 10
drivers/media/dvb-frontends/dib8000.c | 58 +-
drivers/media/i2c/imx258.c | 4
drivers/media/i2c/tda1997x.c | 5
drivers/media/platform/ti-vpe/cal-camerarx.c | 4
drivers/media/platform/ti-vpe/cal-video.c | 2
drivers/media/rc/rc-loopback.c | 2
drivers/media/usb/uvc/uvc_v4l2.c | 34 -
drivers/media/v4l2-core/v4l2-dv-timings.c | 4
drivers/misc/pvpanic/pvpanic-pci.c | 2
drivers/misc/sram.c | 103 ++-
drivers/misc/sram.h | 9
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6
drivers/mmc/core/block.c | 77 +-
drivers/mmc/core/mmc_ops.c | 5
drivers/mmc/core/mmc_ops.h | 1
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 -
drivers/mmc/host/sdhci-of-arasan.c | 36 +
drivers/mtd/nand/raw/intel-nand-controller.c | 27 -
drivers/net/bonding/bond_main.c | 3
drivers/net/dsa/lantiq_gswip.c | 3
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c | 6
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 9
drivers/net/ethernet/intel/iavf/iavf.h | 9
drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 10
drivers/net/ethernet/intel/iavf/iavf_main.c | 122 +++-
drivers/net/ethernet/intel/igc/igc_main.c | 9
drivers/net/ethernet/marvell/octeontx2/af/mbox.h | 1
drivers/net/ethernet/marvell/octeontx2/af/rvu_nix.c | 9
drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c | 38 -
drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.h | 1
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 8
drivers/net/ethernet/mellanox/mlx5/core/steering/dr_rule.c | 2
drivers/net/ethernet/mellanox/mlx5/core/steering/dr_send.c | 1
drivers/net/ethernet/netronome/nfp/nfp_net_common.c | 2
drivers/net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 10
drivers/net/ethernet/wiznet/w5100.c | 2
drivers/net/ipa/ipa_cmd.c | 38 -
drivers/net/ipa/ipa_cmd.h | 15
drivers/net/ipa/ipa_data-v4.11.c | 13
drivers/net/ipa/ipa_data-v4.9.c | 9
drivers/net/ipa/ipa_table.c | 38 -
drivers/net/ipa/ipa_table.h | 16
drivers/net/phy/dp83822.c | 8
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3
drivers/net/wireless/ath/ath9k/hw.c | 12
drivers/net/wireless/ath/wcn36xx/main.c | 5
drivers/net/wireless/ath/wcn36xx/txrx.c | 4
drivers/net/wireless/ath/wcn36xx/wcn36xx.h | 1
drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 6
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 2
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 4
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 8
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 24
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 11
drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 30 -
drivers/net/wireless/intel/iwlwifi/mvm/time-event.c | 31 -
drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 5
drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 3
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu.h | 2
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 33 -
drivers/net/wireless/realtek/rtw88/Makefile | 2
drivers/net/wireless/realtek/rtw88/fw.c | 8
drivers/net/wireless/realtek/rtw88/fw.h | 1
drivers/net/wireless/realtek/rtw88/wow.c | 21
drivers/nvdimm/pmem.c | 4
drivers/nvme/host/core.c | 3
drivers/nvme/host/nvme.h | 47 +
drivers/nvme/host/pci.c | 2
drivers/nvme/host/rdma.c | 4
drivers/nvme/host/tcp.c | 38 -
drivers/nvme/target/loop.c | 4
drivers/nvmem/core.c | 7
drivers/nvmem/qfprom.c | 6
drivers/of/kobj.c | 2
drivers/opp/of.c | 12
drivers/parport/ieee1284_ops.c | 2
drivers/pci/controller/pci-aardvark.c | 268 +++++++++-
drivers/pci/controller/pcie-xilinx-nwl.c | 12
drivers/pci/pci.c | 6
drivers/pci/pcie/portdrv_core.c | 9
drivers/pci/quirks.c | 1
drivers/pci/syscall.c | 4
drivers/pinctrl/mvebu/pinctrl-armada-37xx.c | 16
drivers/pinctrl/pinctrl-ingenic.c | 12
drivers/pinctrl/pinctrl-single.c | 1
drivers/pinctrl/pinctrl-stmfx.c | 6
drivers/pinctrl/samsung/pinctrl-samsung.c | 2
drivers/platform/chrome/cros_ec_proto.c | 9
drivers/platform/x86/dell/dell-smbios-wmi.c | 1
drivers/platform/x86/intel_speed_select_if/isst_if_common.c | 3
drivers/power/supply/max17042_battery.c | 6
drivers/rtc/rtc-tps65910.c | 2
drivers/s390/cio/qdio_main.c | 82 +--
drivers/scsi/BusLogic.c | 6
drivers/scsi/pcmcia/fdomain_cs.c | 4
drivers/scsi/qedf/qedf_main.c | 10
drivers/scsi/qedi/qedi_main.c | 14
drivers/scsi/qla2xxx/qla_nvme.c | 5
drivers/scsi/qla2xxx/qla_os.c | 6
drivers/scsi/smartpqi/smartpqi_init.c | 1
drivers/scsi/ufs/ufs-exynos.c | 4
drivers/scsi/ufs/ufs-exynos.h | 2
drivers/scsi/ufs/ufshcd.c | 96 +--
drivers/soc/aspeed/aspeed-lpc-ctrl.c | 2
drivers/soc/aspeed/aspeed-p2a-ctrl.c | 2
drivers/soc/mediatek/mtk-mmsys.h | 4
drivers/soc/qcom/qcom_aoss.c | 8
drivers/soundwire/intel.c | 23
drivers/spi/spi-fsi.c | 125 ----
drivers/staging/board/board.c | 7
drivers/staging/hikey9xx/hisilicon,hi6421-spmi-pmic.yaml | 6
drivers/staging/ks7010/ks7010_sdio.c | 2
drivers/staging/media/atomisp/pci/atomisp_v4l2.c | 4
drivers/staging/media/hantro/hantro_g1_vp8_dec.c | 13
drivers/staging/media/hantro/rockchip_vpu2_hw_vp8_dec.c | 13
drivers/staging/media/imx/imx7-media-csi.c | 15
drivers/staging/rtl8723bs/hal/hal_com_phycfg.c | 2
drivers/staging/rts5208/rtsx_scsi.c | 10
drivers/thunderbolt/switch.c | 2
drivers/tty/hvc/hvsi.c | 19
drivers/tty/serial/8250/8250_omap.c | 25
drivers/tty/serial/8250/8250_pci.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/serial/jsm/jsm_neo.c | 2
drivers/tty/serial/jsm/jsm_tty.c | 3
drivers/tty/serial/max310x.c | 15
drivers/tty/serial/sh-sci.c | 7
drivers/tty/vt/keyboard.c | 30 -
drivers/usb/chipidea/host.c | 14
drivers/usb/dwc3/dwc3-imx8mp.c | 14
drivers/usb/gadget/composite.c | 8
drivers/usb/gadget/function/u_ether.c | 5
drivers/usb/host/ehci-mv.c | 23
drivers/usb/host/fotg210-hcd.c | 41 -
drivers/usb/host/fotg210.h | 5
drivers/usb/host/xhci-mtk-sch.c | 100 +--
drivers/usb/host/xhci-mtk.c | 2
drivers/usb/host/xhci-mtk.h | 11
drivers/usb/host/xhci.c | 24
drivers/usb/isp1760/isp1760-core.c | 50 -
drivers/usb/isp1760/isp1760-hcd.c | 33 -
drivers/usb/isp1760/isp1760-regs.h | 16
drivers/usb/isp1760/isp1760-udc.c | 12
drivers/usb/musb/musb_dsps.c | 13
drivers/usb/usbip/vhci_hcd.c | 32 +
drivers/vfio/Kconfig | 2
drivers/video/fbdev/asiliantfb.c | 3
drivers/video/fbdev/kyro/fbdev.c | 8
drivers/video/fbdev/riva/fbdev.c | 3
drivers/watchdog/iTCO_wdt.c | 2
fs/btrfs/block-group.c | 2
fs/btrfs/ctree.h | 9
fs/btrfs/disk-io.c | 48 -
fs/btrfs/free-space-cache.c | 7
fs/btrfs/inode.c | 26
fs/btrfs/ordered-data.c | 8
fs/btrfs/space-info.c | 96 +++
fs/btrfs/tree-log.c | 4
fs/btrfs/volumes.c | 3
fs/ceph/caps.c | 3
fs/cifs/sess.c | 2
fs/f2fs/compress.c | 12
fs/f2fs/data.c | 22
fs/f2fs/dir.c | 14
fs/f2fs/f2fs.h | 4
fs/f2fs/file.c | 4
fs/f2fs/gc.c | 4
fs/f2fs/node.c | 3
fs/f2fs/segment.c | 2
fs/f2fs/super.c | 113 ++--
fs/fscache/cookie.c | 14
fs/fscache/internal.h | 2
fs/fscache/main.c | 39 +
fs/gfs2/glops.c | 17
fs/gfs2/lock_dlm.c | 5
fs/io-wq.c | 50 -
fs/io_uring.c | 59 +-
fs/iomap/buffered-io.c | 2
fs/lockd/svclock.c | 30 -
fs/nfs/export.c | 2
fs/nfs/pnfs.c | 16
fs/nfsd/nfs4state.c | 13
fs/overlayfs/dir.c | 6
fs/userfaultfd.c | 91 +--
include/crypto/public_key.h | 4
include/drm/drm_auth.h | 1
include/drm/drm_file.h | 18
include/linux/ethtool.h | 4
include/linux/exportfs.h | 2
include/linux/hugetlb.h | 9
include/linux/hugetlb_cgroup.h | 12
include/linux/intel-iommu.h | 6
include/linux/memory_hotplug.h | 4
include/linux/rcupdate.h | 2
include/linux/rtmutex.h | 19
include/linux/sunrpc/xprt.h | 1
include/linux/vt_kern.h | 30 -
include/net/bluetooth/hci_core.h | 4
include/net/flow_offload.h | 1
include/trace/events/btrfs.h | 1
include/uapi/linux/serial_reg.h | 1
kernel/dma/debug.c | 7
kernel/fork.c | 1
kernel/locking/rtmutex.c | 2
kernel/pid_namespace.c | 3
kernel/printk/printk.c | 7
kernel/rcu/tree_plugin.h | 8
kernel/sched/core.c | 6
kernel/trace/trace_osnoise.c | 6
kernel/workqueue.c | 12
lib/test_bpf.c | 13
lib/test_stackinit.c | 20
mm/hmm.c | 5
mm/hugetlb.c | 4
mm/memory-failure.c | 4
mm/memory_hotplug.c | 4
mm/mempolicy.c | 17
mm/page_alloc.c | 4
mm/vmscan.c | 2
net/9p/trans_xen.c | 4
net/bluetooth/hci_event.c | 150 +++--
net/bluetooth/hci_request.c | 81 +--
net/bluetooth/sco.c | 74 +-
net/core/flow_dissector.c | 12
net/core/flow_offload.c | 89 +++
net/ethtool/ioctl.c | 136 ++++-
net/ipv4/ip_output.c | 5
net/ipv4/tcp_fastopen.c | 3
net/mac80211/iface.c | 11
net/netfilter/nf_flow_table_offload.c | 1
net/netfilter/nf_tables_offload.c | 1
net/netfilter/nft_compat.c | 8
net/netlabel/netlabel_cipso_v4.c | 4
net/netlink/af_netlink.c | 4
net/sched/cls_api.c | 1
net/sched/sch_taprio.c | 4
net/socket.c | 125 ----
net/sunrpc/auth_gss/svcauth_gss.c | 2
net/sunrpc/xprt.c | 8
net/sunrpc/xprtrdma/transport.c | 11
net/sunrpc/xprtrdma/verbs.c | 10
net/sunrpc/xprtsock.c | 2
net/tipc/socket.c | 36 +
samples/bpf/test_override_return.sh | 1
samples/bpf/tracex7_user.c | 5
samples/pktgen/pktgen_sample03_burst_single_flow.sh | 6
samples/vfio-mdev/mbochs.c | 24
scripts/gen_ksymdeps.sh | 8
scripts/subarch.include | 2
security/smack/smack_access.c | 17
sound/soc/atmel/Kconfig | 1
sound/soc/intel/boards/bytcr_rt5640.c | 9
sound/soc/intel/boards/sof_pcm512x.c | 13
sound/soc/intel/skylake/skl-messages.c | 11
sound/soc/intel/skylake/skl-pcm.c | 25
sound/soc/rockchip/rockchip_i2s.c | 35 -
sound/soc/sh/rcar/adg.c | 12
sound/soc/soc-pcm.c | 103 +++
sound/soc/ti/davinci-mcasp.c | 150 ++++-
tools/lib/bpf/libbpf.c | 63 ++
tools/testing/selftests/arm64/mte/mte_common_util.c | 2
tools/testing/selftests/arm64/pauth/pac.c | 10
tools/testing/selftests/bpf/prog_tests/send_signal.c | 16
tools/testing/selftests/bpf/prog_tests/sockopt_inherit.c | 4
tools/testing/selftests/bpf/progs/xdp_tx.c | 2
tools/testing/selftests/bpf/test_maps.c | 2
tools/testing/selftests/bpf/test_progs.c | 25
tools/testing/selftests/bpf/test_xdp_veth.sh | 2
tools/testing/selftests/firmware/fw_namespace.c | 3
tools/testing/selftests/ftrace/test.d/functions | 2
tools/testing/selftests/nci/nci_dev.c | 6
tools/thermal/tmon/Makefile | 2
467 files changed, 4861 insertions(+), 2869 deletions(-)
Aaron Liu (1):
drm/amd/display: setup system context for APUs
Adrian Hunter (1):
scsi: ufshcd: Fix device links when BOOT WLUN fails to probe
Ahmad Fatoum (1):
clk: imx8m: fix clock tree update of TF-A managed clocks
Akhil P Oommen (1):
drm/msm/a6xx: Fix llcc configuration for a660 gpu
Alex Elder (4):
net: ipa: fix IPA v4.11 interconnect data
net: ipa: fix ipa_cmd_table_valid()
net: ipa: always validate filter and route tables
net: ipa: fix IPA v4.9 interconnects
Alex Sierra (1):
drm/amdkfd: drop process ref count when xnack disable
Alexandru Elisei (1):
arm64: Do not trap PMSNEVFR_EL1
Alexey Kardashevskiy (1):
KVM: PPC: Fix clearing never mapped TCEs in realmode
Alim Akhtar (1):
scsi: ufs: ufs-exynos: Fix static checker warning
Alyssa Rosenzweig (3):
drm/panfrost: Simplify lock_region calculation
drm/panfrost: Use u64 for size in lock_region
drm/panfrost: Clamp lock region to Bifrost minimum
Anand Jain (1):
btrfs: fix upper limit for max_inline for page size 64K
Andreas Obergschwandtner (1):
ARM: tegra: tamonten: Fix UART pad setting
Andrey Grodzovsky (2):
drm/ttm: Fix multihop assert on eviction.
drm/amdgpu: Fix BUG_ON assert
Andy Shevchenko (2):
serial: max310x: Use clock-names property matching to recognize EXTCLK
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
AngeloGioacchino Del Regno (2):
arm64: dts: qcom: sdm630: Rewrite memory map
arm64: dts: qcom: sdm630: Fix TLMM node and pinctrl configuration
Ani Sinha (1):
x86/hyperv: fix for unwanted manipulation of sched_clock when TSC marked unstable
Anirudh Rayabharam (1):
usbip: give back URBs for unsent unlink requests during cleanup
Anna Schumaker (1):
sunrpc: Fix return value of get_srcport()
Anson Jacob (1):
drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
Anthony Iliopoulos (1):
dma-debug: fix debugfs initialization order
Arnd Bergmann (2):
ethtool: improve compat ioctl handling
m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
Arne Welzel (1):
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Aurabindo Pillai (1):
drm/amd/display: Update number of DCN3 clock states
Avraham Stern (1):
iwlwifi: mvm: don't schedule the roc_done_wk if it is already running
Bart Van Assche (3):
scsi: ufs: Fix memory corruption by ufshcd_read_desc_param()
scsi: ufs: Use DECLARE_COMPLETION_ONSTACK() where appropriate
scsi: ufs: Fix the SCSI abort handler
Basavaraj Natikar (1):
HID: amd_sfh: Fix period data field to enable sensor
Bhupesh Sharma (1):
arm64: dts: qcom: Fix usb entries for SA8155p adp board
Bob Peterson (2):
gfs2: Fix glock recursion in freeze_go_xmote_bh
gfs2: Don't call dlm after protocol is unmounted
Bongsu Jeon (2):
selftests: nci: Fix the code for next nlattr offset
selftests: nci: Fix the wrong condition
Boris Brezillon (1):
drm/panfrost: Make sure MMU context lifetime is not bound to panfrost_priv
Brandon Wyman (1):
hwmon: (pmbus/ibm-cffps) Fix write bits for LED control
Brijesh Singh (1):
crypto: ccp - shutdown SEV firmware on kexec
Cezary Rojewski (1):
ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
Chao Yu (8):
f2fs: fix to do sanity check for sb/cp fields correctly
f2fs: compress: fix to set zstd compress level correctly
f2fs: quota: fix potential deadlock
f2fs: fix wrong checkpoint_changed value in f2fs_remount()
f2fs: fix to keep compatibility of fault injection interface
f2fs: fix to account missing .skipped_gc_rwsem
f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
f2fs: fix to unmap pages from userspace process in punch_hole()
Chengfeng Ye (1):
selftests/bpf: Fix potential unreleased lock
Chin-Yen Lee (2):
rtw88: use read_poll_timeout instead of fixed sleep
rtw88: wow: fix size access error of probe request
Chris Chiu (1):
rtl8xxxu: Fix the handling of TX A-MPDU aggregation
Christian König (1):
dma-buf: fix dma_resv_test_signaled test_all handling v2
Christoph Hellwig (1):
scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
Christophe JAILLET (1):
staging: ks7010: Fix the initialization of the 'sleep_status' structure
Chuck Lever (1):
xprtrdma: Put rpcrdma_reps before waking the tear-down completion
Chunfeng Yun (2):
usb: xhci-mtk: fix use-after-free of mtk->hcd
usb: xhci-mtk: Do not use xhci's virt_dev in drop_endpoint
Codrin Ciubotariu (1):
clk: at91: clk-generated: Limit the requested rate to our range
Colin Ian King (4):
ceph: fix dereference of null pointer cf
scsi: BusLogic: Use %X for u32 sized integer rather than %lX
scsi: ufs: Fix unsigned int compared with less than zero
parport: remove non-zero check on count
Daeho Jeong (1):
f2fs: turn back remapped address in compressed page endio
Damien Le Moal (1):
block: bfq: fix bfq_set_next_ioprio_data()
Dan Carpenter (3):
scsi: smartpqi: Fix an error code in pqi_get_raid_map()
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
scsi: qedf: Fix error codes in qedf_alloc_global_queues()
Daniel Vetter (1):
drm/omap: Follow implicit fencing in prepare_fb
Darrick J. Wong (1):
iomap: pass writeback errors to the mapping
David Heidelberg (4):
ARM: 9105/1: atags_to_fdt: don't warn about stack size
ARM: dts: qcom: apq8064: correct clock names
drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
drm/msi/mdp4: populate priv->kms in mdp4_kms_init
David Hildenbrand (1):
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
David Howells (1):
fscache: Fix cookie key hashing
Desmond Cheong Zhi Xi (8):
btrfs: reset replace target device to allocation state on close
drm: avoid blocking in drm_clients_info's rcu section
drm: serialize drm_file.master with a new spinlock
drm: protect drm_master pointers in drm_lease.c
Bluetooth: skip invalid hci_sync_conn_complete_evt
drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
Bluetooth: schedule SCO timeouts with delayed_work
Bluetooth: avoid circular locks in sco_sock_connect
Ding Hui (1):
cifs: fix wrong release in sess_alloc_buffer() failed path
Dinghao Liu (1):
media: atomisp: Fix runtime PM imbalance in atomisp_pci_probe
Dinh Nguyen (3):
clk: socfpga: agilex: fix the parents of the psi_ref_clk
clk: socfpga: agilex: fix up s2f_user0_clk representation
clk: socfpga: agilex: add the bypass register for s2f_usr0 clock
Dmitry Osipenko (2):
rtc: tps65910: Correct driver module alias
ARM: tegra: acer-a500: Remove bogus USB VBUS regulators
Dmitry Torokhov (1):
HID: input: do not report stylus battery state as "full"
Dom Cobley (1):
drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET
Eddie James (1):
spi: fsi: Reduce max transfer size to 8 bytes
Eli Cohen (1):
net: Fix offloading indirect devices dependency on qdisc order creation
Enric Balletbo i Serra (1):
soc: mediatek: mmsys: Fix missing UFOE component in mt8173 table routing
Eran Ben Elisha (1):
net/mlx5: Fix variable type to match 64bit
Eric Auger (1):
misc/pvpanic-pci: Allow automatic loading
Evan Wang (1):
PCI: aardvark: Fix checking for PIO status
Evgeny Novikov (4):
USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
media: platform: stm32: unprepare clocks at handling errors in probe
media: tegra-cec: Handle errors of clk_prepare_enable()
mtd: rawnand: intel: Fix error handling in probe
Ezequiel Garcia (1):
media: hantro: vp8: Move noisy WARN_ON to vpu_debug
Fabiano Rosas (1):
KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines
Fabio Aiuto (1):
staging: rtl8723bs: fix right side of condition
Filipe Manana (1):
btrfs: remove racy and unnecessary inode transaction update when using no-holes
Gautham R. Shenoy (1):
cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards
Geert Uytterhoeven (2):
staging: board: Fix uninitialized spinlock when attaching genpd
drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit
Georgi Djakov (1):
arm64: dts: qcom: sm8250: Fix epss_l3 unit address
Greg Kroah-Hartman (3):
serial: 8250_pci: make setup_port() parameters explicitly unsigned
vt: keyboard.c: make console an unsigned int
Linux 5.14.6
Guojia Liao (1):
net: hns3: clean up a type mismatch warning
Gustavo A. R. Silva (2):
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
flow_dissector: Fix out-of-bounds warnings
Gustaw Lewandowski (1):
ASoC: Intel: Skylake: Fix passing loadable flag for module
Haimin Zhang (1):
fix array-index-out-of-bounds in taprio_change
Halil Pasic (1):
s390/pv: fix the forcing of the swiotlb
Hans Verkuil (1):
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Hans de Goede (3):
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Harshvardhan Jha (1):
9p/xen: Fix end of loop tests for list_for_each_entry
Heiko Carstens (1):
s390/jump_label: print real address in a case of a jump label bug
Hyun Kwon (1):
PCI: xilinx-nwl: Enable the clock through CCF
Ilan Peer (3):
iwlwifi: mvm: Do not use full SSIDs in 6GHz scan
iwlwifi: mvm: Fix umac scan request probe parameters
iwlwifi: mvm: Fix scan channel flags settings
Ioana Ciornei (1):
dpaa2-switch: do not enable the DPSW at probe time
Iwona Winiarska (2):
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
soc: aspeed: p2a-ctrl: Fix boundary check for mmap
J. Bruce Fields (4):
rpc: fix gss_svc_init cleanup on failure
lockd: lockd server-side shouldn't set fl_ops
nfs: don't atempt blocking locks on nfs reexports
nfsd: fix crash on LOCKT on reexported NFSv3
Jack Pham (1):
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Jack Wang (3):
RDMA/rtrs: move wr_cnt from rtrs_srv_con to rtrs_con
RDMA/rtrs: Enable the same selective signal for heartbeat and IO
RDMA/rtrs: Move sq_wr_avail to rtrs_con
Jaegeuk Kim (4):
f2fs: let's keep writing IOs on SBI_NEED_FSCK
f2fs: do not submit NEW_ADDR to read node block
f2fs: deallocate compressed pages when error happens
f2fs: should put a page beyond EOF when preparing a write
Jaehyoung Choi (1):
pinctrl: samsung: Fix pinctrl bank pin count
Jake Wang (1):
drm/amd/display: Fixed hardware power down bypass during headless boot
Jan Hoffmann (1):
net: dsa: lantiq_gswip: fix maximum frame length
Jan Kiszka (1):
watchdog: iTCO_wdt: Fix detection of SMI-off case
Jason Gunthorpe (2):
vfio: Use config not menuconfig for VFIO_NOIOMMU
vfio/mbochs: Fix missing error unwind of mbochs_used_mbytes
Jens Axboe (2):
io-wq: fix wakeup race when adding new work
io-wq: fix race between adding work and activating a free worker
Jernej Skrabec (1):
arm64: dts: allwinner: h6: tanix-tx6: Fix regulator node names
Jerry (Fangzhi) Zuo (1):
drm/amd/display: Update bounding box states (v2)
Jim Broadus (1):
HID: i2c-hid: Fix Elan touchpad regression
Jiri Slaby (2):
xtensa: ISS: don't panic in rs_init
hvsi: don't panic on tty_register_driver failure
Joel Stanley (2):
powerpc/config: Fix IPV6 warning in mpc855_ads
powerpc/config: Renable MTD_PHYSMAP_OF
Johan Almbladh (3):
bpf/tests: Fix copy-and-paste error in double word test
bpf/tests: Do not PASS tests without actually testing the result
mac80211: Fix monitor MTU limit so that A-MSDUs get through
Johannes Berg (4):
iwlwifi: pcie: free RBs during configure
iwlwifi: mvm: avoid static queue number aliasing
iwlwifi: mvm: fix access to BSS elements
iwlwifi: fw: correctly limit to monitor dump
Jonathan Cameron (1):
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Josef Bacik (5):
btrfs: use delalloc_bytes to determine flush amount for shrink_delalloc
btrfs: wake up async_delalloc_pages waiters after submit
btrfs: wait on async extents when flushing delalloc
btrfs: reduce the preemptive flushing threshold to 90%
btrfs: do not do preemptive flushing if the majority is global rsv
Joseph Gates (1):
wcn36xx: Ensure finish scan is not requested before start scan
Juergen Gross (1):
xen: fix setting of max_pfn in shared_info
Juhee Kang (2):
samples: bpf: Fix tracex7 error raised on the missing argument
samples: pktgen: fix to print when terminated normally
Julian Wiedmann (2):
s390/qdio: fix roll-back after timeout on ESTABLISH ccw
s390/qdio: cancel the ESTABLISH ccw after timeout
Junxian Huang (3):
RDMA/hns: Bugfix for data type of dip_idx
RDMA/hns: Bugfix for the missing assignment for dip_idx
RDMA/hns: Bugfix for incorrect association between dip_idx and dgid
Jussi Maki (1):
selftests/bpf: Fix xdp_tx.c prog section name
Kajol Jain (2):
powerpc/perf/hv-gpci: Fix counter value parsing
powerpc/perf: Fix the check for SIAR value
Kalyan Thota (1):
drm/msm/disp/dpu1: add safe lut config in dpu driver
Kees Cook (2):
staging: rts5208: Fix get_ms_information() heap buffer size
lib/test_stackinit: Fix static initializer test
Kelly Devilliv (2):
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
usb: host: fotg210: fix the actual_length of an iso packet
Kiran K (1):
Bluetooth: Fix race condition in handling NOP command
Konrad Dybcio (1):
drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660
Krzysztof Hałasa (1):
media: TDA1997x: fix tda1997x_query_dv_timings() return value
Krzysztof Kozlowski (1):
power: supply: max17042: handle fails of reading status register
Krzysztof Wilczyński (1):
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Kuninori Morimoto (1):
ASoC: rsnd: adg: clearly handle clock error / NULL case
KuoHsiang Chou (1):
drm/ast: Disable fast reset after DRAM initial
Kuogee Hsieh (4):
drm/msm/dp: reduce link rate if failed at link training 1
drm/msm/dp: reset aux controller after dp_aux_cmd_fifo_tx() failed.
drm/msm/dp: return correct edid checksum after corrupted edid checksum read
drm/msm/dp: do not end dp link training until video is ready
Lad Prabhakar (1):
clk: renesas: rzg2l: Fix off-by-one check in rzg2l_cpg_clk_src_twocell_get()
Lang Cheng (1):
RDMA/hns: Ownerbit mode add control field
Laurent Dufour (1):
powerpc/numa: Consider the max NUMA node for migratable LPAR
Laurent Pinchart (3):
drm: rcar-du: Shutdown the display on system shutdown
media: imx258: Rectify mismatch of VTS value
media: imx: imx7-media-csi: Fix buffer return upon stream start failure
Laurentiu Tudor (2):
bus: fsl-mc: fix arg in call to dprc_scan_objects()
bus: fsl-mc: fix mmio base address for child DPRCs
Leon Romanovsky (5):
RDMA/iwcm: Release resources if iw_cm module initialization fails
docs: Fix infiniband uverbs minor number
RDMA/hns: Don't overwrite supplied QP attributes
RDMA/efa: Remove double QP type assignment
RDMA/mlx5: Delete not-available udata check
Li Jun (1):
usb: chipidea: host: fix port index underflow and UBSAN complains
Li Zhijian (2):
selftests/bpf: Enlarge select() timeout for test_maps
mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled
Linus Walleij (2):
drm/panel: Fix up DT bindings for Samsung lms397kf04
ARM: dts: ixp4xx: Fix up bad interrupt flags
Liu Zixian (1):
mm/hugetlb: initialize hugetlb_usage in mm_init
Loic Poulain (1):
wcn36xx: Fix missing frame timestamp for beacon/probe-resp
Lu Baolu (1):
iommu/vt-d: Update the virtual command related registers
Luben Tuikov (2):
drm/amdgpu: Fix amdgpu_ras_eeprom_init()
drm/amdgpu: Fix koops when accessing RAS EEPROM
Lucas Stach (1):
clk: imx8mm: use correct mux type for clkout path
Luiz Augusto von Dentz (2):
Bluetooth: Fix not generating RPA when required
Bluetooth: Fix handling of LE Enhanced Connection Complete
Lukas Bulwahn (1):
HID: thrustmaster: clean up Makefile and adapt quirks
Luke Hsiao (1):
tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
Maciej W. Rozycki (2):
serial: 8250: Define RX trigger levels for OxSemi 950 devices
scsi: BusLogic: Fix missing pr_cont() use
Maciej Żenczykowski (1):
usb: gadget: u_ether: fix a potential null pointer dereference
Manish Narani (2):
mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP
mmc: sdhci-of-arasan: Check return value of non-void funtions
Manivannan Sadhasivam (1):
soc: qcom: aoss: Fix the out of bound usage of cooling_devs
Marc Zyngier (3):
pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
arm64: Move .hyp.rodata outside of the _sdata.._edata range
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
Marcos Paulo de Souza (1):
btrfs: tree-log: check btrfs_lookup_data_extent return value
Marek Behún (2):
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
pinctrl: armada-37xx: Correct PWM pins definitions
Marek Vasut (4):
net: phy: Fix data type in DP83822 dp8382x_disable_wol()
ARM: dts: stm32: Set {bitclock,frame}-master phandles on DHCOM SoM
ARM: dts: stm32: Set {bitclock,frame}-master phandles on ST DKx
ARM: dts: stm32: Update AV96 adv7513 node per dtbs_check
Mark Brown (2):
kselftest/arm64: mte: Fix misleading output when skipping tests
kselftest/arm64: pac: Fix skipping of tests on systems without PAC
Mark Rutland (1):
arm64: head: avoid over-mapping in map_memory
Martynas Pumputis (2):
libbpf: Fix reuse of pinned map on older kernel
libbpf: Fix race when pinning maps in parallel
Masahiro Yamada (2):
kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
parisc: Fix compile failure when building 64-bit kernel natively
Mathias Nyman (1):
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Mauro Carvalho Chehab (3):
media: uvc: don't do DMA on stack
media: dib8000: rewrite the init prbs logic
staging: hisilicon,hi6421-spmi-pmic.yaml: fix patternProperties
Miaohe Lin (1):
mm/page_alloc.c: avoid accessing uninitialized pcp page migratetype
Miaoqing Pan (1):
ath9k: fix sleeping in atomic context
Michael Wang (1):
mm: fix panic caused by __page_handle_poison()
Michal Suchanek (1):
powerpc/stacktrace: Include linux/delay.h
Mike Kravetz (1):
hugetlb: fix hugetlb cgroup refcounting during vma split
Mike Marciniszyn (1):
IB/hfi1: Adjust pkey entry in index 0
Mikita Lipski (1):
drm/amd/display: Fix PSR command version
Mikko Perttunen (1):
misc: sram: Only map reserved areas in Tegra SYSRAM
Mikulas Patocka (1):
parisc: fix crash with signals and alloca
Nadav Amit (1):
userfaultfd: prevent concurrent API initialization
Nadezda Lutovinova (2):
usb: dwc3: imx8mp: request irq after initializing dwc3
usb: musb: musb_dsps: request_irq() after initializing musb
Naohiro Aota (3):
btrfs: zoned: fix block group alloc_offset calculation
btrfs: zoned: suppress reclaim error message on EAGAIN
btrfs: zoned: fix double counting of split ordered extent
Nathan Chancellor (3):
cpuidle: pseries: Mark pseries_idle_proble() as __init
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
drm/exynos: Always initialize mapping in exynos_drm_register_dma()
Nicholas Kazlauskas (1):
drm/amdgpu: Enable S/G for Yellow Carp
Nicholas Piggin (1):
KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live
Nicolas Ferre (1):
ARM: dts: at91: use the right property for shutdown controller
Niklas Cassel (2):
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Niklas Schnelle (1):
s390: make PCI mio support a machine flag
Niklas Söderlund (1):
nfp: fix return statement in nfp_net_parse_meta()
Nishad Kamdar (1):
mmc: core: Return correct emmc response in case of ioctl error
Nuno Sá (1):
iio: ltc2983: fix device probe
Oak Zeng (1):
drm/amdgpu: Fix a printing message
Oleksij Rempel (1):
MIPS: Malta: fix alignment of the devicetree buffer
Oliver Logush (1):
drm/amd/display: Fix timer_per_pixel unit error
Pablo Neira Ayuso (1):
netfilter: nft_compat: use nfnetlink_unicast()
Pali Rohár (3):
PCI: aardvark: Configure PCIe resources from 'ranges' DT property
PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Patryk Duda (1):
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Paul Cercueil (2):
pinctrl: ingenic: Fix incorrect pull up/down info
pinctrl: ingenic: Fix bias config for X2000(E)
Pavel Begunkov (3):
io_uring: place fixed tables under memcg limits
io_uring: add ->splice_fd_in checks
io_uring: fix io_try_cancel_userdata race for iowq
Peter Geis (1):
clk: rockchip: drop GRF dependency for rk3328/rk3036 pll types
Peter Ujfalusi (1):
ASoC: ti: davinci-mcasp: Fix DIT mode support
Petr Mladek (1):
printk/console: Check consistent sequence number when handling race in console_unlock()
Pierre-Louis Bossart (3):
ASoC: Intel: update sof_pcm512x quirks
soundwire: intel: fix potential race condition during power down
ASoC: soc-pcm: protect BE dailink state changes in trigger
Ping-Ke Shih (1):
rtw88: wow: build wow function only if CONFIG_PM is on
Pratik R. Sampat (1):
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Qiang.Zhang (1):
tracing/osnoise: Fix missed cpus_read_unlock() in start_per_cpu_kthreads()
Quanyang Wang (2):
drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock
drm: xlnx: zynqmp: release reset to DP controller before accessing DP registers
Raag Jadav (1):
arm64: dts: ls1046a: fix eeprom entries
Rafael J. Wysocki (1):
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Rajendra Nayak (2):
nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
opp: Don't print an error if required-opps is missing
Rajkumar Subbiah (1):
drm/dp_mst: Fix return code on sideband message failure
Randy Dunlap (3):
Makefile: use -Wno-main in the full kernel tree
openrisc: don't printk() unconditionally
ASoC: atmel: ATMEL drivers don't need HAS_DMA
Rik van Riel (1):
mm,vmscan: fix divide by zero in get_scan_count
Robin Gong (2):
Revert "dmaengine: imx-sdma: refine to load context only once"
dmaengine: imx-sdma: remove duplicated sdma_load_context
Rolf Eike Beer (1):
tools/thermal/tmon: Add cross compiling support
Roy Chan (2):
drm/amd/display: fix missing writeback disablement if plane is removed
drm/amd/display: fix incorrect CM/TF programming sequence in dwb
Rui Miguel Silva (5):
usb: isp1760: fix memory pool initialization
usb: isp1760: fix qtd fill length
usb: isp1760: write to status and address register
usb: isp1760: use the right irq status bit
usb: isp1760: otg control register access
Sagi Grimberg (2):
nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
nvme: code command_id with a genctr for use-after-free validation
Sanjay R Mehta (1):
thunderbolt: Fix port linking by checking all adapters
Sasha Neftin (1):
igc: Check if num of q_vectors is smaller than max before array access
Saurav Kashyap (2):
scsi: qla2xxx: Changes to support kdump kernel
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Sean Anderson (1):
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Sean Keely (1):
drm/amdkfd: Account for SH/SE count when setting up cu masks.
Sean Young (1):
media: rc-loopback: return number of emitters rather than error
Sebastian Reichel (1):
ARM: dts: imx53-ppd: Fix ACHC entry
Sergio Paracuellos (1):
clk: ralink: avoid to set 'CLK_IS_CRITICAL' flag for gates
Shuah Khan (2):
selftests: firmware: Fix ignored return val of asprintf() warn
usbip:vhci_hcd USB port can get stuck in the disabled state
Song Yoong Siang (1):
net: stmmac: Fix overall budget calculation for rxtx_napi
Srikar Dronamraju (2):
powerpc/smp: Fix a crash while booting kvm guest with nr_cpus=2
powerpc/smp: Update cpu_core_map on all PowerPc systems
Srinivas Kandagatla (1):
nvmem: core: fix error handling while validating keepout regions
Srinivas Pandruvada (1):
platform/x86: ISST: Fix optimization with use of numa
Stefan Assmann (3):
iavf: do not override the adapter state in the watchdog task
iavf: fix locking of critical sections
iavf: use mutexes for locking of critical sections
Steven Rostedt (VMware) (1):
selftests/ftrace: Fix requirement check of README file
Stuart Hayes (1):
PCI/portdrv: Enable Bandwidth Notification only if port supports it
Subbaraya Sundeep (2):
octeontx2-pf: Fix NIX1_RX interface backpressure
octeontx2-pf: cleanup transmit link deriving logic
Sugar Zhang (1):
ASoC: rockchip: i2s: Fix regmap_ops hang
Sven Schnelle (1):
s390/topology: fix topology information when calling cpu hotplug notifiers
Thierry Reding (1):
arm64: tegra: Fix compatible string for Tegra132 CPUs
Thomas Gleixner (2):
sched: Prevent balance_push() on remote runqueues
locking/rtmutex: Set proper wait context for lockdep
Thomas Hebb (1):
mmc: rtsx_pci: Fix long reads when clock is prescaled
Thomas Hellström (1):
drm/ttm: Fix ttm_bo_move_memcpy() for subclassed struct ttm_resource
Thomas Zimmermann (2):
drm/vkms: Let shadow-plane helpers prepare the plane's FB
drm/mgag200: Select clock in PLL update functions
Tianjia Zhang (1):
Smack: Fix wrong semantics in smk_access_entry()
Tim Gover (1):
drm: vc4: Fix pixel-wrap issue with DVP teardown
Tim Harvey (3):
arm64: dts: imx8mm-venice-gw700x: fix mp5416 pmic config
arm64: dts: imx8mm-venice-gw700x: fix invalid pmic pin config
arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
Tomi Valkeinen (2):
media: ti-vpe: cal: fix error handling in cal_camerarx_create
media: ti-vpe: cal: fix queuing of the initial buffer
Tony Lindgren (1):
serial: 8250_omap: Handle optional overrun-throttle-ms property
Trond Myklebust (5):
NFSv4/pNFS: Fix a layoutget livelock loop
NFSv4/pNFS: Always allow update of a zero valued layout barrier
NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid
SUNRPC: Fix potential memory corruption
SUNRPC/xprtrdma: Fix reconnection locking
Tuo Li (2):
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
drm/display: fix possible null-pointer dereference in dcn10_set_clock()
Ulf Hansson (3):
mmc: core: Avoid hogging the CPU while polling for busy in the I/O err path
mmc: core: Avoid hogging the CPU while polling for busy for mmc ioctls
mmc: core: Avoid hogging the CPU while polling for busy after I/O writes
Ulrich Hecht (1):
serial: sh-sci: fix break handling for sysrq
Umang Jain (1):
media: imx258: Limit the max analogue gain to 480
Vasily Averin (1):
memcg: enable accounting for pids in nested pid namespaces
Vidya Sagar (1):
arm64: tegra: Fix Tegra194 PCIe EP compatible string
Vinod Koul (6):
arm64: dts: qcom: ipq8074: fix pci node reg property
arm64: dts: qcom: sdm660: use reg value for memory node
arm64: dts: qcom: ipq6018: drop '0x' from unit address
arm64: dts: qcom: sdm630: don't use underscore in node name
arm64: dts: qcom: msm8994: don't use underscore in node name
arm64: dts: qcom: msm8996: don't use underscore in node name
Wang Hai (1):
VMCI: fix NULL pointer dereference when unmapping queue pair
Wei Li (1):
scsi: fdomain: Fix error return code in fdomain_probe()
Wenpeng Liang (2):
RDMA/hns: Fix query destination qpn
RDMA/hns: Fix QP's resp incomplete assignment
Wentao_Liang (1):
net/mlx5: DR, fix a potential use-after-free bug
Will Deacon (1):
arm64: mm: Fix TLBI vs ASID rollover
Xiaotan Luo (1):
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Xin Long (1):
tipc: keep the skb in rcv queue until the whole data is read
Yajun Deng (1):
netlink: Deal with ESRCH error in nlmsg_notify()
Yang Yingliang (2):
media: atomisp: pci: fix error return code in atomisp_pci_probe()
net: w5100: check return value after calling platform_get_resource()
Yangtao Li (1):
f2fs: reduce the scope of setting fsck tag when de->name_len is zero
Yevgeny Kliteynik (1):
net/mlx5: DR, Enable QP retransmission
Yixing Liu (1):
RDMA/hns: Fix incorrect lsn field
Yonghong Song (1):
selftests/bpf: Fix flaky send_signal test
Yongqiang Niu (1):
soc: mediatek: cmdq: add address shift in jump
Yucong Sun (1):
selftests/bpf: Correctly display subtest skip status
YueHaibing (1):
RDMA/hns: Fix return in hns_roce_rereg_user_mr()
Yufeng Mo (1):
bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
Zack Rusin (2):
drm/vmwgfx: Fix subresource updates with new contexts
drm/vmwgfx: Fix some static checker warnings
Zekun Shen (1):
ath9k: fix OOB read ar9300_eeprom_restore_internal
Zhang Qilong (1):
iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
Zhen Lei (2):
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
workqueue: Fix possible memory leaks in wq_numa_init()
Zheyu Ma (5):
video: fbdev: kyro: fix a DoS bug by restricting user input
tty: serial: jsm: hold port lock when reporting modem line changes
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
video: fbdev: kyro: Error out if 'pixclock' equals zero
video: fbdev: riva: Error out if 'pixclock' equals zero
Zhouyi Zhou (1):
rcu: Fix macro name CONFIG_TASKS_RCU_TRACE
chenying (1):
ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
jingle.wu (1):
Input: elan_i2c - reduce the resume time for controller in Whitebox
sumiyawang (1):
libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
xinhui pan (1):
drm/amdgpu: Fix a deadlock if previous GEM object allocation fails
yanghui (1):
mm/mempolicy: fix a race between offset_il_node and mpol_rebind_task
zhenwei pi (1):
crypto: public_key: fix overflow during implicit conversion
王贇 (1):
net: fix NULL pointer reference in cipso_v4_doi_free
^ permalink raw reply [relevance 1%]
* Linux 5.10.67
@ 2021-09-18 12:07 2% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-18 12:07 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 5.10.67 kernel.
All users of the 5.10 kernel series must upgrade.
The updated 5.10.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/devices.txt | 6
Documentation/devicetree/bindings/pinctrl/marvell,armada-37xx-pinctrl.txt | 8
Makefile | 2
arch/arm/boot/compressed/Makefile | 2
arch/arm/boot/dts/at91-kizbox3_common.dtsi | 2
arch/arm/boot/dts/at91-sam9x60ek.dts | 2
arch/arm/boot/dts/at91-sama5d27_som1_ek.dts | 2
arch/arm/boot/dts/at91-sama5d27_wlsom1_ek.dts | 2
arch/arm/boot/dts/at91-sama5d2_icp.dts | 2
arch/arm/boot/dts/at91-sama5d2_ptc_ek.dts | 2
arch/arm/boot/dts/at91-sama5d2_xplained.dts | 2
arch/arm/boot/dts/imx53-ppd.dts | 23
arch/arm/boot/dts/qcom-apq8064.dtsi | 6
arch/arm/boot/dts/stm32mp15xx-dhcom-pdk2.dtsi | 8
arch/arm/boot/dts/stm32mp15xx-dhcor-avenger96.dtsi | 6
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 8
arch/arm/boot/dts/tegra20-acer-a500-picasso.dts | 25
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14
arch/arm64/boot/dts/allwinner/sun50i-h6-tanix-tx6.dts | 4
arch/arm64/boot/dts/freescale/fsl-ls1046a-frwy.dts | 8
arch/arm64/boot/dts/freescale/fsl-ls1046a-rdb.dts | 7
arch/arm64/boot/dts/nvidia/tegra132.dtsi | 4
arch/arm64/boot/dts/nvidia/tegra194.dtsi | 6
arch/arm64/boot/dts/qcom/ipq6018.dtsi | 2
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2
arch/arm64/boot/dts/qcom/ipq8074.dtsi | 16
arch/arm64/boot/dts/qcom/msm8994.dtsi | 6
arch/arm64/boot/dts/qcom/msm8996.dtsi | 4
arch/arm64/boot/dts/qcom/sdm630.dtsi | 257 +++++----
arch/arm64/boot/dts/qcom/sm8250.dtsi | 2
arch/arm64/include/asm/kernel-pgtable.h | 4
arch/arm64/include/asm/mmu.h | 29 -
arch/arm64/include/asm/tlbflush.h | 11
arch/arm64/kernel/head.S | 11
arch/m68k/Kconfig.bus | 2
arch/mips/mti-malta/malta-dtshim.c | 2
arch/openrisc/kernel/entry.S | 2
arch/parisc/kernel/signal.c | 6
arch/powerpc/configs/mpc885_ads_defconfig | 1
arch/powerpc/include/asm/pmc.h | 7
arch/powerpc/kernel/smp.c | 11
arch/powerpc/kernel/stacktrace.c | 1
arch/powerpc/kvm/book3s_64_mmu_radix.c | 6
arch/powerpc/kvm/book3s_64_vio_hv.c | 9
arch/powerpc/kvm/book3s_hv.c | 20
arch/powerpc/mm/numa.c | 13
arch/powerpc/perf/hv-gpci.c | 2
arch/s390/include/asm/setup.h | 2
arch/s390/kernel/early.c | 4
arch/s390/kernel/jump_label.c | 2
arch/s390/mm/init.c | 2
arch/s390/pci/pci.c | 5
arch/x86/kernel/cpu/mshyperv.c | 9
arch/x86/xen/p2m.c | 4
arch/xtensa/platforms/iss/console.c | 17
block/bfq-iosched.c | 2
block/blk-zoned.c | 6
block/bsg.c | 5
drivers/ata/libata-core.c | 4
drivers/ata/sata_dwc_460ex.c | 12
drivers/bus/fsl-mc/fsl-mc-bus.c | 24
drivers/clk/at91/clk-generated.c | 6
drivers/clk/imx/clk-composite-8m.c | 3
drivers/clk/imx/clk-imx8mm.c | 7
drivers/clk/imx/clk-imx8mn.c | 7
drivers/clk/imx/clk-imx8mq.c | 7
drivers/clk/imx/clk.h | 16
drivers/clk/rockchip/clk-pll.c | 2
drivers/clk/socfpga/clk-agilex.c | 19
drivers/cpufreq/powernv-cpufreq.c | 16
drivers/cpuidle/cpuidle-pseries.c | 18
drivers/crypto/ccp/sev-dev.c | 49 -
drivers/crypto/ccp/sp-pci.c | 12
drivers/crypto/mxs-dcp.c | 36 -
drivers/dma/imx-sdma.c | 13
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 2
drivers/gpu/drm/amd/amdgpu/vcn_v1_0.c | 2
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 2
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 2
drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 2
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.c | 84 ++-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.h | 1
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 16
drivers/gpu/drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 11
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 14
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 2
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_dwb_cm.c | 90 ++-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 12
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_resource.c | 42 +
drivers/gpu/drm/bridge/nwl-dsi.c | 2
drivers/gpu/drm/drm_auth.c | 42 +
drivers/gpu/drm/drm_debugfs.c | 3
drivers/gpu/drm/drm_dp_mst_topology.c | 10
drivers/gpu/drm/drm_file.c | 1
drivers/gpu/drm/drm_lease.c | 81 ++-
drivers/gpu/drm/exynos/exynos_drm_dma.c | 2
drivers/gpu/drm/mgag200/mgag200_drv.h | 16
drivers/gpu/drm/mgag200/mgag200_mode.c | 20
drivers/gpu/drm/mgag200/mgag200_reg.h | 9
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 17
drivers/gpu/drm/msm/dp/dp_panel.c | 9
drivers/gpu/drm/msm/dsi/dsi_cfg.c | 1
drivers/gpu/drm/msm/dsi/phy/dsi_phy_14nm.c | 2
drivers/gpu/drm/panfrost/panfrost_device.h | 8
drivers/gpu/drm/panfrost/panfrost_drv.c | 50 -
drivers/gpu/drm/panfrost/panfrost_gem.c | 20
drivers/gpu/drm/panfrost/panfrost_job.c | 4
drivers/gpu/drm/panfrost/panfrost_mmu.c | 191 ++++---
drivers/gpu/drm/panfrost/panfrost_mmu.h | 5
drivers/gpu/drm/panfrost/panfrost_regs.h | 2
drivers/gpu/drm/vc4/vc4_hdmi.c | 4
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 4
drivers/gpu/drm/xlnx/zynqmp_disp.c | 3
drivers/gpu/drm/xlnx/zynqmp_dp.c | 22
drivers/hid/hid-input.c | 2
drivers/hid/i2c-hid/i2c-hid-core.c | 5
drivers/hwmon/pmbus/ibm-cffps.c | 6
drivers/iio/dac/ad5624r_spi.c | 18
drivers/iio/temperature/ltc2983.c | 30 -
drivers/infiniband/core/iwcm.c | 19
drivers/infiniband/hw/efa/efa_verbs.c | 1
drivers/infiniband/hw/hfi1/init.c | 7
drivers/infiniband/hw/hns/hns_roce_qp.c | 3
drivers/infiniband/hw/mlx5/qp.c | 3
drivers/iommu/intel/pasid.h | 10
drivers/mailbox/mtk-cmdq-mailbox.c | 3
drivers/md/dm-crypt.c | 7
drivers/media/cec/platform/stm32/stm32-cec.c | 26
drivers/media/cec/platform/tegra/tegra_cec.c | 10
drivers/media/dvb-frontends/dib8000.c | 58 +-
drivers/media/i2c/imx258.c | 4
drivers/media/i2c/tda1997x.c | 5
drivers/media/rc/rc-loopback.c | 2
drivers/media/usb/uvc/uvc_v4l2.c | 34 -
drivers/media/v4l2-core/v4l2-dv-timings.c | 4
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6
drivers/mmc/core/block.c | 3
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 -
drivers/mmc/host/sdhci-of-arasan.c | 36 +
drivers/net/bonding/bond_main.c | 3
drivers/net/dsa/lantiq_gswip.c | 3
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 9
drivers/net/ethernet/intel/iavf/iavf_main.c | 58 +-
drivers/net/ethernet/intel/igc/igc_main.c | 9
drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c | 15
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 8
drivers/net/ethernet/mellanox/mlx5/core/steering/dr_rule.c | 2
drivers/net/ethernet/mellanox/mlx5/core/steering/dr_send.c | 1
drivers/net/ethernet/netronome/nfp/nfp_net_common.c | 2
drivers/net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18
drivers/net/ethernet/wiznet/w5100.c | 2
drivers/net/phy/dp83822.c | 8
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3
drivers/net/wireless/ath/ath9k/hw.c | 12
drivers/net/wireless/ath/wcn36xx/main.c | 5
drivers/net/wireless/ath/wcn36xx/txrx.c | 4
drivers/net/wireless/ath/wcn36xx/wcn36xx.h | 1
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 2
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 4
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 8
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 24
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2
drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 30 -
drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 5
drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 3
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu.h | 2
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 33 -
drivers/net/wireless/realtek/rtw88/Makefile | 2
drivers/net/wireless/realtek/rtw88/fw.c | 8
drivers/net/wireless/realtek/rtw88/fw.h | 1
drivers/net/wireless/realtek/rtw88/wow.c | 21
drivers/nvdimm/pmem.c | 4
drivers/nvme/host/core.c | 3
drivers/nvme/host/nvme.h | 47 +
drivers/nvme/host/pci.c | 2
drivers/nvme/host/rdma.c | 4
drivers/nvme/host/tcp.c | 38 -
drivers/nvme/target/loop.c | 4
drivers/nvmem/qfprom.c | 6
drivers/of/kobj.c | 2
drivers/opp/of.c | 12
drivers/parport/ieee1284_ops.c | 2
drivers/pci/controller/pci-aardvark.c | 266 +++++++++-
drivers/pci/controller/pcie-xilinx-nwl.c | 12
drivers/pci/msi.c | 3
drivers/pci/pci.c | 7
drivers/pci/pcie/portdrv_core.c | 9
drivers/pci/quirks.c | 1
drivers/pci/syscall.c | 4
drivers/pinctrl/actions/pinctrl-owl.c | 1
drivers/pinctrl/core.c | 1
drivers/pinctrl/freescale/pinctrl-imx1-core.c | 1
drivers/pinctrl/mvebu/pinctrl-armada-37xx.c | 17
drivers/pinctrl/pinctrl-at91.c | 1
drivers/pinctrl/pinctrl-ingenic.c | 6
drivers/pinctrl/pinctrl-single.c | 1
drivers/pinctrl/pinctrl-st.c | 1
drivers/pinctrl/pinctrl-stmfx.c | 6
drivers/pinctrl/pinctrl-sx150x.c | 1
drivers/pinctrl/qcom/pinctrl-sdm845.c | 1
drivers/pinctrl/qcom/pinctrl-ssbi-mpp.c | 1
drivers/pinctrl/renesas/pfc-r8a77950.c | 1
drivers/pinctrl/renesas/pfc-r8a77951.c | 1
drivers/pinctrl/renesas/pfc-r8a7796.c | 1
drivers/pinctrl/renesas/pfc-r8a77965.c | 1
drivers/pinctrl/samsung/pinctrl-samsung.c | 2
drivers/platform/chrome/cros_ec_proto.c | 9
drivers/platform/x86/dell-smbios-wmi.c | 1
drivers/power/supply/max17042_battery.c | 6
drivers/rtc/rtc-tps65910.c | 2
drivers/s390/cio/qdio_main.c | 82 +--
drivers/scsi/BusLogic.c | 6
drivers/scsi/pcmcia/fdomain_cs.c | 4
drivers/scsi/qedf/qedf_main.c | 10
drivers/scsi/qedi/qedi_main.c | 14
drivers/scsi/qla2xxx/qla_nvme.c | 5
drivers/scsi/qla2xxx/qla_os.c | 6
drivers/scsi/smartpqi/smartpqi_init.c | 1
drivers/scsi/ufs/ufs-exynos.c | 4
drivers/scsi/ufs/ufs-exynos.h | 2
drivers/scsi/ufs/ufshcd.c | 8
drivers/soc/aspeed/aspeed-lpc-ctrl.c | 2
drivers/soc/aspeed/aspeed-p2a-ctrl.c | 2
drivers/soc/qcom/qcom_aoss.c | 8
drivers/soundwire/intel.c | 23
drivers/staging/board/board.c | 7
drivers/staging/ks7010/ks7010_sdio.c | 2
drivers/staging/media/atomisp/pci/atomisp_v4l2.c | 4
drivers/staging/media/hantro/hantro_g1_vp8_dec.c | 13
drivers/staging/media/hantro/rk3399_vpu_hw_vp8_dec.c | 13
drivers/staging/rts5208/rtsx_scsi.c | 10
drivers/thunderbolt/switch.c | 2
drivers/tty/hvc/hvsi.c | 19
drivers/tty/serial/8250/8250_omap.c | 25
drivers/tty/serial/8250/8250_pci.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/serial/jsm/jsm_neo.c | 2
drivers/tty/serial/jsm/jsm_tty.c | 3
drivers/tty/serial/sh-sci.c | 7
drivers/usb/chipidea/host.c | 14
drivers/usb/gadget/composite.c | 8
drivers/usb/gadget/function/u_ether.c | 5
drivers/usb/host/ehci-mv.c | 23
drivers/usb/host/fotg210-hcd.c | 41 -
drivers/usb/host/fotg210.h | 5
drivers/usb/host/xhci.c | 24
drivers/usb/musb/musb_dsps.c | 13
drivers/usb/usbip/vhci_hcd.c | 32 +
drivers/vfio/Kconfig | 2
drivers/video/fbdev/asiliantfb.c | 3
drivers/video/fbdev/kyro/fbdev.c | 8
drivers/video/fbdev/riva/fbdev.c | 3
fs/btrfs/inode.c | 10
fs/btrfs/tree-log.c | 4
fs/btrfs/volumes.c | 3
fs/ceph/caps.c | 3
fs/cifs/sess.c | 2
fs/f2fs/compress.c | 12
fs/f2fs/data.c | 16
fs/f2fs/dir.c | 14
fs/f2fs/file.c | 4
fs/f2fs/gc.c | 4
fs/f2fs/super.c | 106 ++-
fs/fscache/cookie.c | 14
fs/fscache/internal.h | 2
fs/fscache/main.c | 39 +
fs/gfs2/glops.c | 17
fs/gfs2/lock_dlm.c | 5
fs/io-wq.c | 8
fs/io_uring.c | 70 +-
fs/iomap/buffered-io.c | 2
fs/lockd/svclock.c | 30 -
fs/nfs/pnfs.c | 16
fs/nfsd/nfs4state.c | 5
fs/notify/fanotify/fanotify.c | 6
fs/overlayfs/dir.c | 6
fs/userfaultfd.c | 91 +--
include/crypto/public_key.h | 4
include/drm/drm_auth.h | 1
include/drm/drm_file.h | 18
include/linux/ethtool.h | 4
include/linux/hugetlb.h | 9
include/linux/hugetlb_cgroup.h | 12
include/linux/intel-iommu.h | 6
include/linux/rcupdate.h | 2
include/linux/sunrpc/xprt.h | 1
include/linux/sunrpc/xprtsock.h | 1
include/net/flow_offload.h | 1
include/uapi/linux/serial_reg.h | 1
kernel/dma/debug.c | 7
kernel/fork.c | 1
kernel/pid_namespace.c | 3
kernel/rcu/tree_plugin.h | 8
kernel/workqueue.c | 12
lib/test_bpf.c | 13
lib/test_stackinit.c | 20
mm/hmm.c | 5
mm/hugetlb.c | 4
mm/vmscan.c | 2
net/9p/trans_xen.c | 4
net/bluetooth/hci_event.c | 108 ++--
net/bluetooth/sco.c | 74 +-
net/core/flow_dissector.c | 12
net/core/flow_offload.c | 89 +++
net/ethtool/ioctl.c | 136 ++++-
net/ipv4/ip_output.c | 5
net/ipv4/tcp_fastopen.c | 3
net/mac80211/iface.c | 11
net/netfilter/nf_flow_table_offload.c | 1
net/netfilter/nf_tables_offload.c | 1
net/netlabel/netlabel_cipso_v4.c | 4
net/netlink/af_netlink.c | 4
net/sched/cls_api.c | 1
net/sched/sch_taprio.c | 4
net/socket.c | 125 ----
net/sunrpc/auth_gss/svcauth_gss.c | 2
net/sunrpc/xprt.c | 8
net/sunrpc/xprtrdma/transport.c | 11
net/sunrpc/xprtsock.c | 7
net/tipc/socket.c | 36 +
samples/bpf/test_override_return.sh | 1
samples/bpf/tracex7_user.c | 5
scripts/gen_ksymdeps.sh | 8
security/smack/smack_access.c | 17
sound/soc/atmel/Kconfig | 1
sound/soc/intel/boards/bytcr_rt5640.c | 9
sound/soc/intel/boards/sof_pcm512x.c | 13
sound/soc/intel/skylake/skl-messages.c | 11
sound/soc/intel/skylake/skl-pcm.c | 25
sound/soc/rockchip/rockchip_i2s.c | 35 -
tools/lib/bpf/libbpf.c | 63 ++
tools/testing/selftests/arm64/mte/mte_common_util.c | 2
tools/testing/selftests/arm64/pauth/pac.c | 10
tools/testing/selftests/bpf/prog_tests/send_signal.c | 16
tools/testing/selftests/bpf/prog_tests/sockopt_inherit.c | 4
tools/testing/selftests/bpf/progs/xdp_tx.c | 2
tools/testing/selftests/bpf/test_maps.c | 2
tools/testing/selftests/bpf/test_xdp_veth.sh | 2
tools/testing/selftests/firmware/fw_namespace.c | 3
tools/testing/selftests/ftrace/test.d/functions | 2
tools/thermal/tmon/Makefile | 2
343 files changed, 3169 insertions(+), 1638 deletions(-)
Ahmad Fatoum (1):
clk: imx8m: fix clock tree update of TF-A managed clocks
Alexey Kardashevskiy (1):
KVM: PPC: Fix clearing never mapped TCEs in realmode
Alim Akhtar (1):
scsi: ufs: ufs-exynos: Fix static checker warning
Alyssa Rosenzweig (3):
drm/panfrost: Simplify lock_region calculation
drm/panfrost: Use u64 for size in lock_region
drm/panfrost: Clamp lock region to Bifrost minimum
Amir Goldstein (1):
fanotify: limit number of event merge attempts
Andreas Obergschwandtner (1):
ARM: tegra: tamonten: Fix UART pad setting
Andrey Grodzovsky (1):
drm/amdgpu: Fix BUG_ON assert
Andy Shevchenko (1):
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
AngeloGioacchino Del Regno (2):
arm64: dts: qcom: sdm630: Rewrite memory map
arm64: dts: qcom: sdm630: Fix TLMM node and pinctrl configuration
Ani Sinha (1):
x86/hyperv: fix for unwanted manipulation of sched_clock when TSC marked unstable
Anirudh Rayabharam (1):
usbip: give back URBs for unsent unlink requests during cleanup
Anna Schumaker (1):
sunrpc: Fix return value of get_srcport()
Anson Jacob (1):
drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
Anthony Iliopoulos (1):
dma-debug: fix debugfs initialization order
Arnd Bergmann (2):
ethtool: improve compat ioctl handling
m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
Arne Welzel (1):
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Aurabindo Pillai (1):
drm/amd/display: Update number of DCN3 clock states
Bart Van Assche (1):
scsi: ufs: Fix memory corruption by ufshcd_read_desc_param()
Bob Peterson (2):
gfs2: Fix glock recursion in freeze_go_xmote_bh
gfs2: Don't call dlm after protocol is unmounted
Boris Brezillon (1):
drm/panfrost: Make sure MMU context lifetime is not bound to panfrost_priv
Brandon Wyman (1):
hwmon: (pmbus/ibm-cffps) Fix write bits for LED control
Brijesh Singh (1):
crypto: ccp - shutdown SEV firmware on kexec
Cezary Rojewski (1):
ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
Chao Yu (5):
f2fs: fix to do sanity check for sb/cp fields correctly
f2fs: quota: fix potential deadlock
f2fs: fix to account missing .skipped_gc_rwsem
f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
f2fs: fix to unmap pages from userspace process in punch_hole()
Chengfeng Ye (1):
selftests/bpf: Fix potential unreleased lock
Chin-Yen Lee (2):
rtw88: use read_poll_timeout instead of fixed sleep
rtw88: wow: fix size access error of probe request
Chris Chiu (1):
rtl8xxxu: Fix the handling of TX A-MPDU aggregation
Christoph Hellwig (1):
scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
Christophe JAILLET (1):
staging: ks7010: Fix the initialization of the 'sleep_status' structure
Codrin Ciubotariu (1):
clk: at91: clk-generated: Limit the requested rate to our range
Colin Ian King (3):
ceph: fix dereference of null pointer cf
scsi: BusLogic: Use %X for u32 sized integer rather than %lX
parport: remove non-zero check on count
Damien Le Moal (1):
block: bfq: fix bfq_set_next_ioprio_data()
Dan Carpenter (3):
scsi: smartpqi: Fix an error code in pqi_get_raid_map()
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
scsi: qedf: Fix error codes in qedf_alloc_global_queues()
Darrick J. Wong (1):
iomap: pass writeback errors to the mapping
David Heidelberg (4):
ARM: 9105/1: atags_to_fdt: don't warn about stack size
ARM: dts: qcom: apq8064: correct clock names
drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
drm/msi/mdp4: populate priv->kms in mdp4_kms_init
David Howells (1):
fscache: Fix cookie key hashing
David Laight (1):
fs/io_uring Don't use the return value from import_iovec().
Desmond Cheong Zhi Xi (8):
btrfs: reset replace target device to allocation state on close
drm: avoid blocking in drm_clients_info's rcu section
drm: serialize drm_file.master with a new spinlock
drm: protect drm_master pointers in drm_lease.c
Bluetooth: skip invalid hci_sync_conn_complete_evt
drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
Bluetooth: schedule SCO timeouts with delayed_work
Bluetooth: avoid circular locks in sco_sock_connect
Ding Hui (1):
cifs: fix wrong release in sess_alloc_buffer() failed path
Dinghao Liu (1):
media: atomisp: Fix runtime PM imbalance in atomisp_pci_probe
Dinh Nguyen (3):
clk: socfpga: agilex: fix the parents of the psi_ref_clk
clk: socfpga: agilex: fix up s2f_user0_clk representation
clk: socfpga: agilex: add the bypass register for s2f_usr0 clock
Dmitry Osipenko (2):
rtc: tps65910: Correct driver module alias
ARM: tegra: acer-a500: Remove bogus USB VBUS regulators
Dmitry Torokhov (1):
HID: input: do not report stylus battery state as "full"
Dom Cobley (1):
drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET
Eli Cohen (1):
net: Fix offloading indirect devices dependency on qdisc order creation
Eran Ben Elisha (1):
net/mlx5: Fix variable type to match 64bit
Evan Wang (1):
PCI: aardvark: Fix checking for PIO status
Evgeny Novikov (3):
USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
media: platform: stm32: unprepare clocks at handling errors in probe
media: tegra-cec: Handle errors of clk_prepare_enable()
Ezequiel Garcia (1):
media: hantro: vp8: Move noisy WARN_ON to vpu_debug
Fabiano Rosas (1):
KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines
Gautham R. Shenoy (1):
cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards
Geert Uytterhoeven (2):
staging: board: Fix uninitialized spinlock when attaching genpd
drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit
Georgi Djakov (1):
arm64: dts: qcom: sm8250: Fix epss_l3 unit address
Greg Kroah-Hartman (2):
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Linux 5.10.67
Guojia Liao (1):
net: hns3: clean up a type mismatch warning
Gustavo A. R. Silva (2):
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
flow_dissector: Fix out-of-bounds warnings
Gustaw Lewandowski (1):
ASoC: Intel: Skylake: Fix passing loadable flag for module
Haimin Zhang (1):
fix array-index-out-of-bounds in taprio_change
Halil Pasic (1):
s390/pv: fix the forcing of the swiotlb
Hans Verkuil (1):
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Hans de Goede (3):
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Harshvardhan Jha (1):
9p/xen: Fix end of loop tests for list_for_each_entry
Heiko Carstens (1):
s390/jump_label: print real address in a case of a jump label bug
Hyun Kwon (1):
PCI: xilinx-nwl: Enable the clock through CCF
Ilan Peer (1):
iwlwifi: mvm: Fix scan channel flags settings
Iwona Winiarska (2):
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
soc: aspeed: p2a-ctrl: Fix boundary check for mmap
J. Bruce Fields (3):
rpc: fix gss_svc_init cleanup on failure
lockd: lockd server-side shouldn't set fl_ops
nfsd: fix crash on LOCKT on reexported NFSv3
Jack Pham (1):
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Jaegeuk Kim (2):
f2fs: deallocate compressed pages when error happens
f2fs: should put a page beyond EOF when preparing a write
Jaehyoung Choi (1):
pinctrl: samsung: Fix pinctrl bank pin count
Jan Hoffmann (1):
net: dsa: lantiq_gswip: fix maximum frame length
Jason Gunthorpe (1):
vfio: Use config not menuconfig for VFIO_NOIOMMU
Jens Axboe (1):
io-wq: fix wakeup race when adding new work
Jernej Skrabec (1):
arm64: dts: allwinner: h6: tanix-tx6: Fix regulator node names
Jerry (Fangzhi) Zuo (1):
drm/amd/display: Update bounding box states (v2)
Jianjun Wang (1):
PCI: Export pci_pio_to_address() for module use
Jim Broadus (1):
HID: i2c-hid: Fix Elan touchpad regression
Jiri Slaby (2):
xtensa: ISS: don't panic in rs_init
hvsi: don't panic on tty_register_driver failure
Joel Stanley (1):
powerpc/config: Renable MTD_PHYSMAP_OF
Johan Almbladh (3):
bpf/tests: Fix copy-and-paste error in double word test
bpf/tests: Do not PASS tests without actually testing the result
mac80211: Fix monitor MTU limit so that A-MSDUs get through
Johannes Berg (4):
iwlwifi: pcie: free RBs during configure
iwlwifi: mvm: avoid static queue number aliasing
iwlwifi: mvm: fix access to BSS elements
iwlwifi: fw: correctly limit to monitor dump
Jonathan Cameron (1):
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Josef Bacik (1):
btrfs: wake up async_delalloc_pages waiters after submit
Joseph Gates (1):
wcn36xx: Ensure finish scan is not requested before start scan
Juergen Gross (1):
xen: fix setting of max_pfn in shared_info
Juhee Kang (1):
samples: bpf: Fix tracex7 error raised on the missing argument
Julian Wiedmann (2):
s390/qdio: fix roll-back after timeout on ESTABLISH ccw
s390/qdio: cancel the ESTABLISH ccw after timeout
Jussi Maki (1):
selftests/bpf: Fix xdp_tx.c prog section name
Kajol Jain (1):
powerpc/perf/hv-gpci: Fix counter value parsing
Kees Cook (2):
staging: rts5208: Fix get_ms_information() heap buffer size
lib/test_stackinit: Fix static initializer test
Kelly Devilliv (2):
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
usb: host: fotg210: fix the actual_length of an iso packet
Konrad Dybcio (1):
drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660
Krzysztof Hałasa (1):
media: TDA1997x: fix tda1997x_query_dv_timings() return value
Krzysztof Kozlowski (1):
power: supply: max17042: handle fails of reading status register
Krzysztof Wilczyński (1):
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Kuogee Hsieh (1):
drm/msm/dp: return correct edid checksum after corrupted edid checksum read
Laurent Dufour (1):
powerpc/numa: Consider the max NUMA node for migratable LPAR
Laurent Pinchart (1):
media: imx258: Rectify mismatch of VTS value
Laurentiu Tudor (1):
bus: fsl-mc: fix mmio base address for child DPRCs
Leon Romanovsky (4):
RDMA/iwcm: Release resources if iw_cm module initialization fails
docs: Fix infiniband uverbs minor number
RDMA/efa: Remove double QP type assignment
RDMA/mlx5: Delete not-available udata check
Li Jun (1):
usb: chipidea: host: fix port index underflow and UBSAN complains
Li Zhijian (2):
selftests/bpf: Enlarge select() timeout for test_maps
mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled
Liu Zixian (1):
mm/hugetlb: initialize hugetlb_usage in mm_init
Loic Poulain (1):
wcn36xx: Fix missing frame timestamp for beacon/probe-resp
Lu Baolu (1):
iommu/vt-d: Update the virtual command related registers
Luben Tuikov (1):
drm/amdgpu: Fix amdgpu_ras_eeprom_init()
Luiz Augusto von Dentz (1):
Bluetooth: Fix handling of LE Enhanced Connection Complete
Luke Hsiao (1):
tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
Maciej W. Rozycki (2):
serial: 8250: Define RX trigger levels for OxSemi 950 devices
scsi: BusLogic: Fix missing pr_cont() use
Maciej Żenczykowski (1):
usb: gadget: u_ether: fix a potential null pointer dereference
Manish Narani (2):
mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP
mmc: sdhci-of-arasan: Check return value of non-void funtions
Manivannan Sadhasivam (1):
soc: qcom: aoss: Fix the out of bound usage of cooling_devs
Marc Zyngier (2):
pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
Marcos Paulo de Souza (1):
btrfs: tree-log: check btrfs_lookup_data_extent return value
Marek Behún (2):
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
pinctrl: armada-37xx: Correct PWM pins definitions
Marek Marczykowski-Górecki (1):
PCI/MSI: Skip masking MSI-X on Xen PV
Marek Vasut (4):
net: phy: Fix data type in DP83822 dp8382x_disable_wol()
ARM: dts: stm32: Set {bitclock,frame}-master phandles on DHCOM SoM
ARM: dts: stm32: Set {bitclock,frame}-master phandles on ST DKx
ARM: dts: stm32: Update AV96 adv7513 node per dtbs_check
Mark Brown (2):
kselftest/arm64: mte: Fix misleading output when skipping tests
kselftest/arm64: pac: Fix skipping of tests on systems without PAC
Mark Rutland (1):
arm64: head: avoid over-mapping in map_memory
Martynas Pumputis (2):
libbpf: Fix reuse of pinned map on older kernel
libbpf: Fix race when pinning maps in parallel
Masahiro Yamada (1):
kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
Mathias Nyman (1):
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Mauro Carvalho Chehab (2):
media: uvc: don't do DMA on stack
media: dib8000: rewrite the init prbs logic
Miaoqing Pan (1):
ath9k: fix sleeping in atomic context
Michal Suchanek (1):
powerpc/stacktrace: Include linux/delay.h
Mike Kravetz (1):
hugetlb: fix hugetlb cgroup refcounting during vma split
Mike Marciniszyn (1):
IB/hfi1: Adjust pkey entry in index 0
Mikulas Patocka (1):
parisc: fix crash with signals and alloca
Nadav Amit (1):
userfaultfd: prevent concurrent API initialization
Nadezda Lutovinova (1):
usb: musb: musb_dsps: request_irq() after initializing musb
Nathan Chancellor (3):
cpuidle: pseries: Mark pseries_idle_proble() as __init
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
drm/exynos: Always initialize mapping in exynos_drm_register_dma()
Nicholas Piggin (1):
KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live
Nicolas Ferre (1):
ARM: dts: at91: use the right property for shutdown controller
Niklas Cassel (2):
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Niklas Schnelle (1):
s390: make PCI mio support a machine flag
Niklas Söderlund (1):
nfp: fix return statement in nfp_net_parse_meta()
Nishad Kamdar (1):
mmc: core: Return correct emmc response in case of ioctl error
Nuno Sá (1):
iio: ltc2983: fix device probe
Oak Zeng (1):
drm/amdgpu: Fix a printing message
Oleksij Rempel (1):
MIPS: Malta: fix alignment of the devicetree buffer
Olga Kornievskaia (1):
SUNRPC query transport's source port
Oliver Logush (1):
drm/amd/display: Fix timer_per_pixel unit error
Pali Rohár (2):
PCI: aardvark: Configure PCIe resources from 'ranges' DT property
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Patryk Duda (1):
platform/chrome: cros_ec_proto: Send command again when timeout occurs
Paul Cercueil (1):
pinctrl: ingenic: Fix incorrect pull up/down info
Pavel Begunkov (5):
io_uring: limit fixed table size by RLIMIT_NOFILE
io_uring: place fixed tables under memcg limits
io_uring: add ->splice_fd_in checks
io_uring: fail links of cancelled timeouts
io_uring: remove duplicated io_size from rw
Peter Geis (1):
clk: rockchip: drop GRF dependency for rk3328/rk3036 pll types
Pierre-Louis Bossart (2):
ASoC: Intel: update sof_pcm512x quirks
soundwire: intel: fix potential race condition during power down
Ping-Ke Shih (1):
rtw88: wow: build wow function only if CONFIG_PM is on
Pratik R. Sampat (1):
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Quanyang Wang (2):
drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock
drm: xlnx: zynqmp: release reset to DP controller before accessing DP registers
Raag Jadav (1):
arm64: dts: ls1046a: fix eeprom entries
Rafael J. Wysocki (1):
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Rajendra Nayak (2):
nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
opp: Don't print an error if required-opps is missing
Rajkumar Subbiah (1):
drm/dp_mst: Fix return code on sideband message failure
Randy Dunlap (2):
openrisc: don't printk() unconditionally
ASoC: atmel: ATMEL drivers don't need HAS_DMA
Rik van Riel (1):
mm,vmscan: fix divide by zero in get_scan_count
Robin Gong (2):
Revert "dmaengine: imx-sdma: refine to load context only once"
dmaengine: imx-sdma: remove duplicated sdma_load_context
Rolf Eike Beer (1):
tools/thermal/tmon: Add cross compiling support
Roy Chan (2):
drm/amd/display: fix missing writeback disablement if plane is removed
drm/amd/display: fix incorrect CM/TF programming sequence in dwb
Sagi Grimberg (2):
nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
nvme: code command_id with a genctr for use-after-free validation
Sanjay R Mehta (1):
thunderbolt: Fix port linking by checking all adapters
Sasha Neftin (1):
igc: Check if num of q_vectors is smaller than max before array access
Saurav Kashyap (2):
scsi: qla2xxx: Changes to support kdump kernel
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Sean Anderson (1):
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Sean Keely (1):
drm/amdkfd: Account for SH/SE count when setting up cu masks.
Sean Young (1):
media: rc-loopback: return number of emitters rather than error
Sebastian Reichel (1):
ARM: dts: imx53-ppd: Fix ACHC entry
Shuah Khan (2):
selftests: firmware: Fix ignored return val of asprintf() warn
usbip:vhci_hcd USB port can get stuck in the disabled state
Srikar Dronamraju (1):
powerpc/smp: Update cpu_core_map on all PowerPc systems
Stefan Assmann (2):
iavf: do not override the adapter state in the watchdog task
iavf: fix locking of critical sections
Steven Rostedt (VMware) (1):
selftests/ftrace: Fix requirement check of README file
Stuart Hayes (1):
PCI/portdrv: Enable Bandwidth Notification only if port supports it
Subbaraya Sundeep (1):
octeontx2-pf: Fix NIX1_RX interface backpressure
Sugar Zhang (1):
ASoC: rockchip: i2s: Fix regmap_ops hang
Thierry Reding (1):
arm64: tegra: Fix compatible string for Tegra132 CPUs
Thomas Hebb (1):
mmc: rtsx_pci: Fix long reads when clock is prescaled
Thomas Zimmermann (1):
drm/mgag200: Select clock in PLL update functions
Tianjia Zhang (1):
Smack: Fix wrong semantics in smk_access_entry()
Tony Lindgren (1):
serial: 8250_omap: Handle optional overrun-throttle-ms property
Trond Myklebust (5):
NFSv4/pNFS: Fix a layoutget livelock loop
NFSv4/pNFS: Always allow update of a zero valued layout barrier
NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid
SUNRPC: Fix potential memory corruption
SUNRPC/xprtrdma: Fix reconnection locking
Tuo Li (2):
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
drm/display: fix possible null-pointer dereference in dcn10_set_clock()
Ulrich Hecht (1):
serial: sh-sci: fix break handling for sysrq
Umang Jain (1):
media: imx258: Limit the max analogue gain to 480
Vasily Averin (1):
memcg: enable accounting for pids in nested pid namespaces
Vidya Sagar (1):
arm64: tegra: Fix Tegra194 PCIe EP compatible string
Vinod Koul (6):
arm64: dts: qcom: ipq8074: fix pci node reg property
arm64: dts: qcom: sdm660: use reg value for memory node
arm64: dts: qcom: ipq6018: drop '0x' from unit address
arm64: dts: qcom: sdm630: don't use underscore in node name
arm64: dts: qcom: msm8994: don't use underscore in node name
arm64: dts: qcom: msm8996: don't use underscore in node name
Wang Hai (1):
VMCI: fix NULL pointer dereference when unmapping queue pair
Wei Li (1):
scsi: fdomain: Fix error return code in fdomain_probe()
Wenpeng Liang (1):
RDMA/hns: Fix QP's resp incomplete assignment
Wentao_Liang (1):
net/mlx5: DR, fix a potential use-after-free bug
Will Deacon (1):
arm64: mm: Fix TLBI vs ASID rollover
Xiaotan Luo (1):
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Xin Long (1):
tipc: keep the skb in rcv queue until the whole data is read
Yajun Deng (1):
netlink: Deal with ESRCH error in nlmsg_notify()
Yang Yingliang (2):
media: atomisp: pci: fix error return code in atomisp_pci_probe()
net: w5100: check return value after calling platform_get_resource()
Yangtao Li (1):
f2fs: reduce the scope of setting fsck tag when de->name_len is zero
Yevgeny Kliteynik (1):
net/mlx5: DR, Enable QP retransmission
Yonghong Song (1):
selftests/bpf: Fix flaky send_signal test
Yongqiang Niu (1):
soc: mediatek: cmdq: add address shift in jump
Yufeng Mo (1):
bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
Zekun Shen (1):
ath9k: fix OOB read ar9300_eeprom_restore_internal
Zhang Qilong (1):
iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
Zhaoyu Liu (1):
pinctrl: remove empty lines in pinctrl subsystem
Zhen Lei (2):
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
workqueue: Fix possible memory leaks in wq_numa_init()
Zheyu Ma (5):
video: fbdev: kyro: fix a DoS bug by restricting user input
tty: serial: jsm: hold port lock when reporting modem line changes
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
video: fbdev: kyro: Error out if 'pixclock' equals zero
video: fbdev: riva: Error out if 'pixclock' equals zero
Zhouyi Zhou (1):
rcu: Fix macro name CONFIG_TASKS_RCU_TRACE
chenying (1):
ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
sumiyawang (1):
libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
zhenwei pi (1):
crypto: public_key: fix overflow during implicit conversion
王贇 (1):
net: fix NULL pointer reference in cipso_v4_doi_free
^ permalink raw reply [relevance 2%]
* [PATCH 5.14 286/432] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
2021-09-16 15:55 7% [PATCH 5.14 000/432] 5.14.6-rc1 review Greg Kroah-Hartman
` (4 preceding siblings ...)
2021-09-16 15:59 11% ` [PATCH 5.14 241/432] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
@ 2021-09-16 16:00 12% ` Greg Kroah-Hartman
2021-09-16 16:00 10% ` [PATCH 5.14 288/432] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
2021-09-16 16:00 9% ` [PATCH 5.14 289/432] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 16:00 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Daniel Vetter,
Zack Rusin, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2bc5da528dd570c5ecabc107e6fbdbc55974276f ]
drm_file.master should be protected by either drm_device.master_mutex
or drm_file.master_lookup_lock when being dereferenced. However,
drm_master_get is called on unprotected file_priv->master pointers in
vmw_surface_define_ioctl and vmw_gb_surface_define_internal.
This is fixed by replacing drm_master_get with drm_file_get_master.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Reviewed-by: Zack Rusin <zackr@vmware.com>
Signed-off-by: Zack Rusin <zackr@vmware.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20210724111824.59266-4-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
index 47c03a276515..a04ad7812960 100644
--- a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
+++ b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
@@ -865,7 +865,7 @@ int vmw_surface_define_ioctl(struct drm_device *dev, void *data,
user_srf->prime.base.shareable = false;
user_srf->prime.base.tfile = NULL;
if (drm_is_primary_client(file_priv))
- user_srf->master = drm_master_get(file_priv->master);
+ user_srf->master = drm_file_get_master(file_priv);
/**
* From this point, the generic resource management functions
@@ -1534,7 +1534,7 @@ vmw_gb_surface_define_internal(struct drm_device *dev,
user_srf = container_of(srf, struct vmw_user_surface, srf);
if (drm_is_primary_client(file_priv))
- user_srf->master = drm_master_get(file_priv->master);
+ user_srf->master = drm_file_get_master(file_priv);
res = &user_srf->srf.res;
--
2.30.2
^ permalink raw reply related [relevance 12%]
* [PATCH 5.14 288/432] Bluetooth: schedule SCO timeouts with delayed_work
2021-09-16 15:55 7% [PATCH 5.14 000/432] 5.14.6-rc1 review Greg Kroah-Hartman
` (5 preceding siblings ...)
2021-09-16 16:00 12% ` [PATCH 5.14 286/432] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Greg Kroah-Hartman
@ 2021-09-16 16:00 10% ` Greg Kroah-Hartman
2021-09-16 16:00 9% ` [PATCH 5.14 289/432] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 16:00 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+2f6d7c28bb4bf7e82060,
Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit ba316be1b6a00db7126ed9a39f9bee434a508043 ]
struct sock.sk_timer should be used as a sock cleanup timer. However,
SCO uses it to implement sock timeouts.
This causes issues because struct sock.sk_timer's callback is run in
an IRQ context, and the timer callback function sco_sock_timeout takes
a spin lock on the socket. However, other functions such as
sco_conn_del and sco_conn_ready take the spin lock with interrupts
enabled.
This inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} lock usage could
lead to deadlocks as reported by Syzbot [1]:
CPU0
----
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
<Interrupt>
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
To fix this, we use delayed work to implement SCO sock timouts
instead. This allows us to avoid taking the spin lock on the socket in
an IRQ context, and corrects the misuse of struct sock.sk_timer.
As a note, cancel_delayed_work is used instead of
cancel_delayed_work_sync in sco_sock_set_timer and
sco_sock_clear_timer to avoid a deadlock. In the future, the call to
bh_lock_sock inside sco_sock_timeout should be changed to lock_sock to
synchronize with other functions using lock_sock. However, since
sco_sock_set_timer and sco_sock_clear_timer are sometimes called under
the locked socket (in sco_connect and __sco_sock_close),
cancel_delayed_work_sync might cause them to sleep until an
sco_sock_timeout that has started finishes running. But
sco_sock_timeout would also sleep until it can grab the lock_sock.
Using cancel_delayed_work is fine because sco_sock_timeout does not
change from run to run, hence there is no functional difference
between:
1. waiting for a timeout to finish running before scheduling another
timeout
2. scheduling another timeout while a timeout is running.
Link: https://syzkaller.appspot.com/bug?id=9089d89de0502e120f234ca0fc8a703f7368b31e [1]
Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Tested-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 35 +++++++++++++++++++++++++++++------
1 file changed, 29 insertions(+), 6 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index b5ab842c7c4a..9cf1ead1d832 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -48,6 +48,8 @@ struct sco_conn {
spinlock_t lock;
struct sock *sk;
+ struct delayed_work timeout_work;
+
unsigned int mtu;
};
@@ -74,9 +76,20 @@ struct sco_pinfo {
#define SCO_CONN_TIMEOUT (HZ * 40)
#define SCO_DISCONN_TIMEOUT (HZ * 2)
-static void sco_sock_timeout(struct timer_list *t)
+static void sco_sock_timeout(struct work_struct *work)
{
- struct sock *sk = from_timer(sk, t, sk_timer);
+ struct sco_conn *conn = container_of(work, struct sco_conn,
+ timeout_work.work);
+ struct sock *sk;
+
+ sco_conn_lock(conn);
+ sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
+ sco_conn_unlock(conn);
+
+ if (!sk)
+ return;
BT_DBG("sock %p state %d", sk, sk->sk_state);
@@ -90,14 +103,21 @@ static void sco_sock_timeout(struct timer_list *t)
static void sco_sock_set_timer(struct sock *sk, long timeout)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d timeout %ld", sk, sk->sk_state, timeout);
- sk_reset_timer(sk, &sk->sk_timer, jiffies + timeout);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
+ schedule_delayed_work(&sco_pi(sk)->conn->timeout_work, timeout);
}
static void sco_sock_clear_timer(struct sock *sk)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d", sk, sk->sk_state);
- sk_stop_timer(sk, &sk->sk_timer);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
}
/* ---- SCO connections ---- */
@@ -177,6 +197,9 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_chan_del(sk, err);
bh_unlock_sock(sk);
sock_put(sk);
+
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
}
hcon->sco_data = NULL;
@@ -191,6 +214,8 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
+
if (parent)
bt_accept_enqueue(parent, sk, true);
}
@@ -496,8 +521,6 @@ static struct sock *sco_sock_alloc(struct net *net, struct socket *sock,
sco_pi(sk)->setting = BT_VOICE_CVSD_16BIT;
- timer_setup(&sk->sk_timer, sco_sock_timeout, 0);
-
bt_sock_link(&sco_sk_list, sk);
return sk;
}
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH 5.14 289/432] Bluetooth: avoid circular locks in sco_sock_connect
2021-09-16 15:55 7% [PATCH 5.14 000/432] 5.14.6-rc1 review Greg Kroah-Hartman
` (6 preceding siblings ...)
2021-09-16 16:00 10% ` [PATCH 5.14 288/432] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
@ 2021-09-16 16:00 9% ` Greg Kroah-Hartman
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 16:00 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 9cf1ead1d832..110cfd6aa2b7 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -235,44 +235,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -280,7 +268,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -290,9 +278,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -585,6 +570,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -599,12 +585,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH 5.14 241/432] Bluetooth: skip invalid hci_sync_conn_complete_evt
2021-09-16 15:55 7% [PATCH 5.14 000/432] 5.14.6-rc1 review Greg Kroah-Hartman
` (3 preceding siblings ...)
2021-09-16 15:59 8% ` [PATCH 5.14 191/432] drm: protect drm_master pointers in drm_lease.c Greg Kroah-Hartman
@ 2021-09-16 15:59 11% ` Greg Kroah-Hartman
2021-09-16 16:00 12% ` [PATCH 5.14 286/432] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Greg Kroah-Hartman
` (2 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:59 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+66264bf2fd0476be7e6c,
Desmond Cheong Zhi Xi, Marcel Holtmann, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index 1c3018202564..ea7fc09478be 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -4382,6 +4382,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.14 189/432] drm: avoid blocking in drm_clients_infos rcu section
2021-09-16 15:55 7% [PATCH 5.14 000/432] 5.14.6-rc1 review Greg Kroah-Hartman
2021-09-16 15:56 10% ` [PATCH 5.14 016/432] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
@ 2021-09-16 15:58 11% ` Greg Kroah-Hartman
2021-09-16 15:58 10% ` [PATCH 5.14 190/432] drm: serialize drm_file.master with a new spinlock Greg Kroah-Hartman
` (5 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:58 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Daniel Vetter,
Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 5eff9585de220cdd131237f5665db5e6c6bdf590 ]
Inside drm_clients_info, the rcu_read_lock is held to lock
pid_task()->comm. However, within this protected section, a call to
drm_is_current_master is made, which involves a mutex lock in a future
patch. However, this is illegal because the mutex lock might block
while in the RCU read-side critical section.
Since drm_is_current_master isn't protected by rcu_read_lock, we avoid
this by moving it out of the RCU critical section.
The following report came from intel-gfx ci's
igt@debugfs_test@read_all_entries testcase:
=============================
[ BUG: Invalid wait context ]
5.13.0-CI-Patchwork_20515+ #1 Tainted: G W
-----------------------------
debugfs_test/1101 is trying to lock:
ffff888132d901a8 (&dev->master_mutex){+.+.}-{3:3}, at:
drm_is_current_master+0x1e/0x50
other info that might help us debug this:
context-{4:4}
3 locks held by debugfs_test/1101:
#0: ffff88810fdffc90 (&p->lock){+.+.}-{3:3}, at:
seq_read_iter+0x53/0x3b0
#1: ffff888132d90240 (&dev->filelist_mutex){+.+.}-{3:3}, at:
drm_clients_info+0x63/0x2a0
#2: ffffffff82734220 (rcu_read_lock){....}-{1:2}, at:
drm_clients_info+0x1b1/0x2a0
stack backtrace:
CPU: 8 PID: 1101 Comm: debugfs_test Tainted: G W
5.13.0-CI-Patchwork_20515+ #1
Hardware name: Intel Corporation CometLake Client Platform/CometLake S
UDIMM (ERB/CRB), BIOS CMLSFWR1.R00.1263.D00.1906260926 06/26/2019
Call Trace:
dump_stack+0x7f/0xad
__lock_acquire.cold.78+0x2af/0x2ca
lock_acquire+0xd3/0x300
? drm_is_current_master+0x1e/0x50
? __mutex_lock+0x76/0x970
? lockdep_hardirqs_on+0xbf/0x130
__mutex_lock+0xab/0x970
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
drm_is_current_master+0x1e/0x50
drm_clients_info+0x107/0x2a0
seq_read_iter+0x178/0x3b0
seq_read+0x104/0x150
full_proxy_read+0x4e/0x80
vfs_read+0xa5/0x1b0
ksys_read+0x5a/0xd0
do_syscall_64+0x39/0xb0
entry_SYSCALL_64_after_hwframe+0x44/0xae
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-3-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_debugfs.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/gpu/drm/drm_debugfs.c b/drivers/gpu/drm/drm_debugfs.c
index 3d7182001004..b0a826489488 100644
--- a/drivers/gpu/drm/drm_debugfs.c
+++ b/drivers/gpu/drm/drm_debugfs.c
@@ -91,6 +91,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
mutex_lock(&dev->filelist_mutex);
list_for_each_entry_reverse(priv, &dev->filelist, lhead) {
struct task_struct *task;
+ bool is_current_master = drm_is_current_master(priv);
rcu_read_lock(); /* locks pid_task()->comm */
task = pid_task(priv->pid, PIDTYPE_PID);
@@ -99,7 +100,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
task ? task->comm : "<unknown>",
pid_vnr(priv->pid),
priv->minor->index,
- drm_is_current_master(priv) ? 'y' : 'n',
+ is_current_master ? 'y' : 'n',
priv->authenticated ? 'y' : 'n',
from_kuid_munged(seq_user_ns(m), uid),
priv->magic);
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.14 190/432] drm: serialize drm_file.master with a new spinlock
2021-09-16 15:55 7% [PATCH 5.14 000/432] 5.14.6-rc1 review Greg Kroah-Hartman
2021-09-16 15:56 10% ` [PATCH 5.14 016/432] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
2021-09-16 15:58 11% ` [PATCH 5.14 189/432] drm: avoid blocking in drm_clients_infos rcu section Greg Kroah-Hartman
@ 2021-09-16 15:58 10% ` Greg Kroah-Hartman
2021-09-16 15:59 8% ` [PATCH 5.14 191/432] drm: protect drm_master pointers in drm_lease.c Greg Kroah-Hartman
` (4 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:58 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Daniel Vetter, Desmond Cheong Zhi Xi,
Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 0b0860a3cf5eccf183760b1177a1dcdb821b0b66 ]
Currently, drm_file.master pointers should be protected by
drm_device.master_mutex when being dereferenced. This is because
drm_file.master is not invariant for the lifetime of drm_file. If
drm_file is not the creator of master, then drm_file.is_master is
false, and a call to drm_setmaster_ioctl will invoke
drm_new_set_master, which then allocates a new master for drm_file and
puts the old master.
Thus, without holding drm_device.master_mutex, the old value of
drm_file.master could be freed while it is being used by another
concurrent process.
However, it is not always possible to lock drm_device.master_mutex to
dereference drm_file.master. Through the fbdev emulation code, this
might occur in a deep nest of other locks. But drm_device.master_mutex
is also the outermost lock in the nesting hierarchy, so this leads to
potential deadlocks.
To address this, we introduce a new spin lock at the bottom of the
lock hierarchy that only serializes drm_file.master. With this change,
the value of drm_file.master changes only when both
drm_device.master_mutex and drm_file.master_lookup_lock are
held. Hence, any process holding either of those locks can ensure that
the value of drm_file.master will not change concurrently.
Since no lock depends on the new drm_file.master_lookup_lock, when
drm_file.master is dereferenced, but drm_device.master_mutex cannot be
held, we can safely protect the master pointer with
drm_file.master_lookup_lock.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-5-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_auth.c | 17 +++++++++++------
drivers/gpu/drm/drm_file.c | 1 +
include/drm/drm_file.h | 12 +++++++++---
3 files changed, 21 insertions(+), 9 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index b59b26a71ad5..cbb896b91d94 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -135,16 +135,18 @@ static void drm_set_master(struct drm_device *dev, struct drm_file *fpriv,
static int drm_new_set_master(struct drm_device *dev, struct drm_file *fpriv)
{
struct drm_master *old_master;
+ struct drm_master *new_master;
lockdep_assert_held_once(&dev->master_mutex);
WARN_ON(fpriv->is_master);
old_master = fpriv->master;
- fpriv->master = drm_master_create(dev);
- if (!fpriv->master) {
- fpriv->master = old_master;
+ new_master = drm_master_create(dev);
+ if (!new_master)
return -ENOMEM;
- }
+ spin_lock(&fpriv->master_lookup_lock);
+ fpriv->master = new_master;
+ spin_unlock(&fpriv->master_lookup_lock);
fpriv->is_master = 1;
fpriv->authenticated = 1;
@@ -303,10 +305,13 @@ int drm_master_open(struct drm_file *file_priv)
* any master object for render clients
*/
mutex_lock(&dev->master_mutex);
- if (!dev->master)
+ if (!dev->master) {
ret = drm_new_set_master(dev, file_priv);
- else
+ } else {
+ spin_lock(&file_priv->master_lookup_lock);
file_priv->master = drm_master_get(dev->master);
+ spin_unlock(&file_priv->master_lookup_lock);
+ }
mutex_unlock(&dev->master_mutex);
return ret;
diff --git a/drivers/gpu/drm/drm_file.c b/drivers/gpu/drm/drm_file.c
index d4f0bac6f8f8..ceb1a9723855 100644
--- a/drivers/gpu/drm/drm_file.c
+++ b/drivers/gpu/drm/drm_file.c
@@ -176,6 +176,7 @@ struct drm_file *drm_file_alloc(struct drm_minor *minor)
init_waitqueue_head(&file->event_wait);
file->event_space = 4096; /* set aside 4k for event buffer */
+ spin_lock_init(&file->master_lookup_lock);
mutex_init(&file->event_read_lock);
if (drm_core_check_feature(dev, DRIVER_GEM))
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index b81b3bfb08c8..9b82988e3427 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -226,15 +226,21 @@ struct drm_file {
/**
* @master:
*
- * Master this node is currently associated with. Only relevant if
- * drm_is_primary_client() returns true. Note that this only
- * matches &drm_device.master if the master is the currently active one.
+ * Master this node is currently associated with. Protected by struct
+ * &drm_device.master_mutex, and serialized by @master_lookup_lock.
+ *
+ * Only relevant if drm_is_primary_client() returns true. Note that
+ * this only matches &drm_device.master if the master is the currently
+ * active one.
*
* See also @authentication and @is_master and the :ref:`section on
* primary nodes and authentication <drm_primary_node>`.
*/
struct drm_master *master;
+ /** @master_lock: Serializes @master. */
+ spinlock_t master_lookup_lock;
+
/** @pid: Process that opened this file. */
struct pid *pid;
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH 5.14 191/432] drm: protect drm_master pointers in drm_lease.c
2021-09-16 15:55 7% [PATCH 5.14 000/432] 5.14.6-rc1 review Greg Kroah-Hartman
` (2 preceding siblings ...)
2021-09-16 15:58 10% ` [PATCH 5.14 190/432] drm: serialize drm_file.master with a new spinlock Greg Kroah-Hartman
@ 2021-09-16 15:59 8% ` Greg Kroah-Hartman
2021-09-16 15:59 11% ` [PATCH 5.14 241/432] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
` (3 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:59 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Daniel Vetter, Desmond Cheong Zhi Xi,
Emil Velikov, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 56f0729a510f92151682ff6c89f69724d5595d6e ]
drm_file->master pointers should be protected by
drm_device.master_mutex or drm_file.master_lookup_lock when being
dereferenced.
However, in drm_lease.c, there are multiple instances where
drm_file->master is accessed and dereferenced while neither lock is
held. This makes drm_lease.c vulnerable to use-after-free bugs.
We address this issue in 2 ways:
1. Add a new drm_file_get_master() function that calls drm_master_get
on drm_file->master while holding on to
drm_file.master_lookup_lock. Since drm_master_get increments the
reference count of master, this prevents master from being freed until
we unreference it with drm_master_put.
2. In each case where drm_file->master is directly accessed and
eventually dereferenced in drm_lease.c, we wrap the access in a call
to the new drm_file_get_master function, then unreference the master
pointer once we are done using it.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Emil Velikov <emil.l.velikov@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-6-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_auth.c | 25 ++++++++++++
drivers/gpu/drm/drm_lease.c | 81 ++++++++++++++++++++++++++++---------
include/drm/drm_auth.h | 1 +
include/drm/drm_file.h | 6 +++
4 files changed, 93 insertions(+), 20 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index cbb896b91d94..3a298df00901 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -377,6 +377,31 @@ struct drm_master *drm_master_get(struct drm_master *master)
}
EXPORT_SYMBOL(drm_master_get);
+/**
+ * drm_file_get_master - reference &drm_file.master of @file_priv
+ * @file_priv: DRM file private
+ *
+ * Increments the reference count of @file_priv's &drm_file.master and returns
+ * the &drm_file.master. If @file_priv has no &drm_file.master, returns NULL.
+ *
+ * Master pointers returned from this function should be unreferenced using
+ * drm_master_put().
+ */
+struct drm_master *drm_file_get_master(struct drm_file *file_priv)
+{
+ struct drm_master *master = NULL;
+
+ spin_lock(&file_priv->master_lookup_lock);
+ if (!file_priv->master)
+ goto unlock;
+ master = drm_master_get(file_priv->master);
+
+unlock:
+ spin_unlock(&file_priv->master_lookup_lock);
+ return master;
+}
+EXPORT_SYMBOL(drm_file_get_master);
+
static void drm_master_destroy(struct kref *kref)
{
struct drm_master *master = container_of(kref, struct drm_master, refcount);
diff --git a/drivers/gpu/drm/drm_lease.c b/drivers/gpu/drm/drm_lease.c
index 00fb433bcef1..92eac73d9001 100644
--- a/drivers/gpu/drm/drm_lease.c
+++ b/drivers/gpu/drm/drm_lease.c
@@ -106,10 +106,19 @@ static bool _drm_has_leased(struct drm_master *master, int id)
*/
bool _drm_lease_held(struct drm_file *file_priv, int id)
{
- if (!file_priv || !file_priv->master)
+ bool ret;
+ struct drm_master *master;
+
+ if (!file_priv)
return true;
- return _drm_lease_held_master(file_priv->master, id);
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return true;
+ ret = _drm_lease_held_master(master, id);
+ drm_master_put(&master);
+
+ return ret;
}
/**
@@ -128,13 +137,22 @@ bool drm_lease_held(struct drm_file *file_priv, int id)
struct drm_master *master;
bool ret;
- if (!file_priv || !file_priv->master || !file_priv->master->lessor)
+ if (!file_priv)
return true;
- master = file_priv->master;
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return true;
+ if (!master->lessor) {
+ ret = true;
+ goto out;
+ }
mutex_lock(&master->dev->mode_config.idr_mutex);
ret = _drm_lease_held_master(master, id);
mutex_unlock(&master->dev->mode_config.idr_mutex);
+
+out:
+ drm_master_put(&master);
return ret;
}
@@ -154,10 +172,16 @@ uint32_t drm_lease_filter_crtcs(struct drm_file *file_priv, uint32_t crtcs_in)
int count_in, count_out;
uint32_t crtcs_out = 0;
- if (!file_priv || !file_priv->master || !file_priv->master->lessor)
+ if (!file_priv)
return crtcs_in;
- master = file_priv->master;
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return crtcs_in;
+ if (!master->lessor) {
+ crtcs_out = crtcs_in;
+ goto out;
+ }
dev = master->dev;
count_in = count_out = 0;
@@ -176,6 +200,9 @@ uint32_t drm_lease_filter_crtcs(struct drm_file *file_priv, uint32_t crtcs_in)
count_in++;
}
mutex_unlock(&master->dev->mode_config.idr_mutex);
+
+out:
+ drm_master_put(&master);
return crtcs_out;
}
@@ -489,7 +516,7 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
size_t object_count;
int ret = 0;
struct idr leases;
- struct drm_master *lessor = lessor_priv->master;
+ struct drm_master *lessor;
struct drm_master *lessee = NULL;
struct file *lessee_file = NULL;
struct file *lessor_file = lessor_priv->filp;
@@ -501,12 +528,6 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
- /* Do not allow sub-leases */
- if (lessor->lessor) {
- DRM_DEBUG_LEASE("recursive leasing not allowed\n");
- return -EINVAL;
- }
-
/* need some objects */
if (cl->object_count == 0) {
DRM_DEBUG_LEASE("no objects in lease\n");
@@ -518,12 +539,22 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
return -EINVAL;
}
+ lessor = drm_file_get_master(lessor_priv);
+ /* Do not allow sub-leases */
+ if (lessor->lessor) {
+ DRM_DEBUG_LEASE("recursive leasing not allowed\n");
+ ret = -EINVAL;
+ goto out_lessor;
+ }
+
object_count = cl->object_count;
object_ids = memdup_user(u64_to_user_ptr(cl->object_ids),
array_size(object_count, sizeof(__u32)));
- if (IS_ERR(object_ids))
- return PTR_ERR(object_ids);
+ if (IS_ERR(object_ids)) {
+ ret = PTR_ERR(object_ids);
+ goto out_lessor;
+ }
idr_init(&leases);
@@ -534,14 +565,15 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
if (ret) {
DRM_DEBUG_LEASE("lease object lookup failed: %i\n", ret);
idr_destroy(&leases);
- return ret;
+ goto out_lessor;
}
/* Allocate a file descriptor for the lease */
fd = get_unused_fd_flags(cl->flags & (O_CLOEXEC | O_NONBLOCK));
if (fd < 0) {
idr_destroy(&leases);
- return fd;
+ ret = fd;
+ goto out_lessor;
}
DRM_DEBUG_LEASE("Creating lease\n");
@@ -577,6 +609,7 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
/* Hook up the fd */
fd_install(fd, lessee_file);
+ drm_master_put(&lessor);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl succeeded\n");
return 0;
@@ -586,6 +619,8 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
out_leases:
put_unused_fd(fd);
+out_lessor:
+ drm_master_put(&lessor);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl failed: %d\n", ret);
return ret;
}
@@ -608,7 +643,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
struct drm_mode_list_lessees *arg = data;
__u32 __user *lessee_ids = (__u32 __user *) (uintptr_t) (arg->lessees_ptr);
__u32 count_lessees = arg->count_lessees;
- struct drm_master *lessor = lessor_priv->master, *lessee;
+ struct drm_master *lessor, *lessee;
int count;
int ret = 0;
@@ -619,6 +654,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessor = drm_file_get_master(lessor_priv);
DRM_DEBUG_LEASE("List lessees for %d\n", lessor->lessee_id);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -642,6 +678,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
arg->count_lessees = count;
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessor);
return ret;
}
@@ -661,7 +698,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
struct drm_mode_get_lease *arg = data;
__u32 __user *object_ids = (__u32 __user *) (uintptr_t) (arg->objects_ptr);
__u32 count_objects = arg->count_objects;
- struct drm_master *lessee = lessee_priv->master;
+ struct drm_master *lessee;
struct idr *object_idr;
int count;
void *entry;
@@ -675,6 +712,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessee = drm_file_get_master(lessee_priv);
DRM_DEBUG_LEASE("get lease for %d\n", lessee->lessee_id);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -702,6 +740,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
arg->count_objects = count;
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessee);
return ret;
}
@@ -720,7 +759,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
void *data, struct drm_file *lessor_priv)
{
struct drm_mode_revoke_lease *arg = data;
- struct drm_master *lessor = lessor_priv->master;
+ struct drm_master *lessor;
struct drm_master *lessee;
int ret = 0;
@@ -730,6 +769,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessor = drm_file_get_master(lessor_priv);
mutex_lock(&dev->mode_config.idr_mutex);
lessee = _drm_find_lessee(lessor, arg->lessee_id);
@@ -750,6 +790,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
fail:
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessor);
return ret;
}
diff --git a/include/drm/drm_auth.h b/include/drm/drm_auth.h
index 6bf8b2b78991..f99d3417f304 100644
--- a/include/drm/drm_auth.h
+++ b/include/drm/drm_auth.h
@@ -107,6 +107,7 @@ struct drm_master {
};
struct drm_master *drm_master_get(struct drm_master *master);
+struct drm_master *drm_file_get_master(struct drm_file *file_priv);
void drm_master_put(struct drm_master **master);
bool drm_is_current_master(struct drm_file *fpriv);
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index 9b82988e3427..726cfe0ff5f5 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -233,6 +233,12 @@ struct drm_file {
* this only matches &drm_device.master if the master is the currently
* active one.
*
+ * When dereferencing this pointer, either hold struct
+ * &drm_device.master_mutex for the duration of the pointer's use, or
+ * use drm_file_get_master() if struct &drm_device.master_mutex is not
+ * currently held and there is no other need to hold it. This prevents
+ * @master from being freed during use.
+ *
* See also @authentication and @is_master and the :ref:`section on
* primary nodes and authentication <drm_primary_node>`.
*/
--
2.30.2
^ permalink raw reply related [relevance 8%]
* [PATCH 5.14 000/432] 5.14.6-rc1 review
@ 2021-09-16 15:55 7% Greg Kroah-Hartman
2021-09-16 15:56 10% ` [PATCH 5.14 016/432] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
` (7 more replies)
0 siblings, 8 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:55 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.14.6 release.
There are 432 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 18 Sep 2021 15:57:06 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.14.6-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.14.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.14.6-rc1
Qiang.Zhang <qiang.zhang@windriver.com>
tracing/osnoise: Fix missed cpus_read_unlock() in start_per_cpu_kthreads()
Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
drm/panfrost: Clamp lock region to Bifrost minimum
Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
drm/panfrost: Use u64 for size in lock_region
Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
drm/panfrost: Simplify lock_region calculation
Thomas Hellström <thomas.hellstrom@linux.intel.com>
drm/ttm: Fix ttm_bo_move_memcpy() for subclassed struct ttm_resource
Kalyan Thota <kalyan_t@codeaurora.org>
drm/msm/disp/dpu1: add safe lut config in dpu driver
Aaron Liu <aaron.liu@amd.com>
drm/amd/display: setup system context for APUs
Alex Sierra <alex.sierra@amd.com>
drm/amdkfd: drop process ref count when xnack disable
Jerry (Fangzhi) Zuo <Jerry.Zuo@amd.com>
drm/amd/display: Update bounding box states (v2)
Aurabindo Pillai <aurabindo.pillai@amd.com>
drm/amd/display: Update number of DCN3 clock states
xinhui pan <xinhui.pan@amd.com>
drm/amdgpu: Fix a deadlock if previous GEM object allocation fails
Nicholas Kazlauskas <nicholas.kazlauskas@amd.com>
drm/amdgpu: Enable S/G for Yellow Carp
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix BUG_ON assert
Boris Brezillon <boris.brezillon@collabora.com>
drm/panfrost: Make sure MMU context lifetime is not bound to panfrost_priv
Rajkumar Subbiah <rsubbia@codeaurora.org>
drm/dp_mst: Fix return code on sideband message failure
David Heidelberg <david@ixit.cz>
drm/msi/mdp4: populate priv->kms in mdp4_kms_init
Thomas Zimmermann <tzimmermann@suse.de>
drm/mgag200: Select clock in PLL update functions
Song Yoong Siang <yoong.siang.song@intel.com>
net: stmmac: Fix overall budget calculation for rxtx_napi
Jan Hoffmann <jan@3e8.eu>
net: dsa: lantiq_gswip: fix maximum frame length
Kees Cook <keescook@chromium.org>
lib/test_stackinit: Fix static initializer test
Patryk Duda <pdk@semihalf.com>
platform/chrome: cros_ec_proto: Send command again when timeout occurs
sumiyawang <sumiyawang@tencent.com>
libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
Vasily Averin <vvs@virtuozzo.com>
memcg: enable accounting for pids in nested pid namespaces
yanghui <yanghui.def@bytedance.com>
mm/mempolicy: fix a race between offset_il_node and mpol_rebind_task
Miaohe Lin <linmiaohe@huawei.com>
mm/page_alloc.c: avoid accessing uninitialized pcp page migratetype
Rik van Riel <riel@surriel.com>
mm,vmscan: fix divide by zero in get_scan_count
Liu Zixian <liuzixian4@huawei.com>
mm/hugetlb: initialize hugetlb_usage in mm_init
Li Zhijian <lizhijian@cn.fujitsu.com>
mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled
David Hildenbrand <david@redhat.com>
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
Mike Kravetz <mike.kravetz@oracle.com>
hugetlb: fix hugetlb cgroup refcounting during vma split
Michael Wang <yun.wang@linux.alibaba.com>
mm: fix panic caused by __page_handle_poison()
Sven Schnelle <svens@linux.ibm.com>
s390/topology: fix topology information when calling cpu hotplug notifiers
Halil Pasic <pasic@linux.ibm.com>
s390/pv: fix the forcing of the swiotlb
Pratik R. Sampat <psampat@linux.ibm.com>
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Evgeny Novikov <novikov@ispras.ru>
mtd: rawnand: intel: Fix error handling in probe
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Changes to support kdump kernel
Maciej W. Rozycki <macro@orcam.me.uk>
scsi: BusLogic: Fix missing pr_cont() use
chenying <chenying.kernel@bytedance.com>
ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
Petr Mladek <pmladek@suse.com>
printk/console: Check consistent sequence number when handling race in console_unlock()
Masahiro Yamada <masahiroy@kernel.org>
parisc: Fix compile failure when building 64-bit kernel natively
Mikulas Patocka <mpatocka@redhat.com>
parisc: fix crash with signals and alloca
Guojia Liao <liaoguojia@huawei.com>
net: hns3: clean up a type mismatch warning
Yang Yingliang <yangyingliang@huawei.com>
net: w5100: check return value after calling platform_get_resource()
Haimin Zhang <tcs_kernel@tencent.com>
fix array-index-out-of-bounds in taprio_change
王贇 <yun.wang@linux.alibaba.com>
net: fix NULL pointer reference in cipso_v4_doi_free
Miaoqing Pan <miaoqing@codeaurora.org>
ath9k: fix sleeping in atomic context
Zekun Shen <bruceshenzk@gmail.com>
ath9k: fix OOB read ar9300_eeprom_restore_internal
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix missing frame timestamp for beacon/probe-resp
Chengfeng Ye <cyeaa@connect.ust.hk>
selftests/bpf: Fix potential unreleased lock
Colin Ian King <colin.king@canonical.com>
parport: remove non-zero check on count
Rui Miguel Silva <rui.silva@linaro.org>
usb: isp1760: otg control register access
Rui Miguel Silva <rui.silva@linaro.org>
usb: isp1760: use the right irq status bit
Rui Miguel Silva <rui.silva@linaro.org>
usb: isp1760: write to status and address register
Rui Miguel Silva <rui.silva@linaro.org>
usb: isp1760: fix qtd fill length
Rui Miguel Silva <rui.silva@linaro.org>
usb: isp1760: fix memory pool initialization
Yevgeny Kliteynik <kliteyn@nvidia.com>
net/mlx5: DR, Enable QP retransmission
Wentao_Liang <Wentao_Liang_g@163.com>
net/mlx5: DR, fix a potential use-after-free bug
Ilan Peer <ilan.peer@intel.com>
iwlwifi: mvm: Fix scan channel flags settings
Avraham Stern <avraham.stern@intel.com>
iwlwifi: mvm: don't schedule the roc_done_wk if it is already running
Johannes Berg <johannes.berg@intel.com>
iwlwifi: fw: correctly limit to monitor dump
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: fix access to BSS elements
Ilan Peer <ilan.peer@intel.com>
iwlwifi: mvm: Fix umac scan request probe parameters
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: avoid static queue number aliasing
Zhang Qilong <zhangqilong3@huawei.com>
iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
Ilan Peer <ilan.peer@intel.com>
iwlwifi: mvm: Do not use full SSIDs in 6GHz scan
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pcie: free RBs during configure
J. Bruce Fields <bfields@redhat.com>
nfsd: fix crash on LOCKT on reexported NFSv3
J. Bruce Fields <bfields@redhat.com>
nfs: don't atempt blocking locks on nfs reexports
Sean Keely <Sean.Keely@amd.com>
drm/amdkfd: Account for SH/SE count when setting up cu masks.
Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
ASoC: soc-pcm: protect BE dailink state changes in trigger
Xiaotan Luo <lxt@rock-chips.com>
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Sugar Zhang <sugar.zhang@rock-chips.com>
ASoC: rockchip: i2s: Fix regmap_ops hang
Chunfeng Yun <chunfeng.yun@mediatek.com>
usb: xhci-mtk: Do not use xhci's virt_dev in drop_endpoint
Chunfeng Yun <chunfeng.yun@mediatek.com>
usb: xhci-mtk: fix use-after-free of mtk->hcd
Shuah Khan <skhan@linuxfoundation.org>
usbip:vhci_hcd USB port can get stuck in the disabled state
Anirudh Rayabharam <mail@anirudhrb.com>
usbip: give back URBs for unsent unlink requests during cleanup
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: musb: musb_dsps: request_irq() after initializing musb
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: dwc3: imx8mp: request irq after initializing dwc3
Mathias Nyman <mathias.nyman@linux.intel.com>
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Ding Hui <dinghui@sangfor.com.cn>
cifs: fix wrong release in sess_alloc_buffer() failed path
Juhee Kang <claudiajkang@gmail.com>
samples: pktgen: fix to print when terminated normally
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-pf: cleanup transmit link deriving logic
Nishad Kamdar <nishadkamdar@gmail.com>
mmc: core: Return correct emmc response in case of ioctl error
Li Zhijian <lizhijian@cn.fujitsu.com>
selftests/bpf: Enlarge select() timeout for test_maps
Thomas Hebb <tommyhebb@gmail.com>
mmc: rtsx_pci: Fix long reads when clock is prescaled
Ulf Hansson <ulf.hansson@linaro.org>
mmc: core: Avoid hogging the CPU while polling for busy after I/O writes
Ulf Hansson <ulf.hansson@linaro.org>
mmc: core: Avoid hogging the CPU while polling for busy for mmc ioctls
Ulf Hansson <ulf.hansson@linaro.org>
mmc: core: Avoid hogging the CPU while polling for busy in the I/O err path
Manish Narani <manish.narani@xilinx.com>
mmc: sdhci-of-arasan: Check return value of non-void funtions
Manish Narani <manish.narani@xilinx.com>
mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP
Marc Zyngier <maz@kernel.org>
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
Gustaw Lewandowski <gustaw.lewandowski@linux.intel.com>
ASoC: Intel: Skylake: Fix passing loadable flag for module
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
soundwire: intel: fix potential race condition during power down
Marcos Paulo de Souza <mpdesouza@suse.com>
btrfs: tree-log: check btrfs_lookup_data_extent return value
Filipe Manana <fdmanana@suse.com>
btrfs: remove racy and unnecessary inode transaction update when using no-holes
Arnd Bergmann <arnd@arndb.de>
m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-pf: Fix NIX1_RX interface backpressure
Chin-Yen Lee <timlee@realtek.com>
rtw88: wow: fix size access error of probe request
Ping-Ke Shih <pkshih@realtek.com>
rtw88: wow: build wow function only if CONFIG_PM is on
Chin-Yen Lee <timlee@realtek.com>
rtw88: use read_poll_timeout instead of fixed sleep
Chris Chiu <chris.chiu@canonical.com>
rtl8xxxu: Fix the handling of TX A-MPDU aggregation
Nathan Chancellor <nathan@kernel.org>
drm/exynos: Always initialize mapping in exynos_drm_register_dma()
J. Bruce Fields <bfields@redhat.com>
lockd: lockd server-side shouldn't set fl_ops
Li Jun <jun.li@nxp.com>
usb: chipidea: host: fix port index underflow and UBSAN complains
Bob Peterson <rpeterso@redhat.com>
gfs2: Don't call dlm after protocol is unmounted
Kuninori Morimoto <kuninori.morimoto.gx@renesas.com>
ASoC: rsnd: adg: clearly handle clock error / NULL case
Mark Brown <broonie@kernel.org>
kselftest/arm64: pac: Fix skipping of tests on systems without PAC
Mark Brown <broonie@kernel.org>
kselftest/arm64: mte: Fix misleading output when skipping tests
Eli Cohen <elic@nvidia.com>
net: Fix offloading indirect devices dependency on qdisc order creation
Bongsu Jeon <bongsu.jeon@samsung.com>
selftests: nci: Fix the wrong condition
Bongsu Jeon <bongsu.jeon@samsung.com>
selftests: nci: Fix the code for next nlattr offset
Kees Cook <keescook@chromium.org>
staging: rts5208: Fix get_ms_information() heap buffer size
Brandon Wyman <bjwyman@gmail.com>
hwmon: (pmbus/ibm-cffps) Fix write bits for LED control
Yonghong Song <yhs@fb.com>
selftests/bpf: Fix flaky send_signal test
Yucong Sun <fallentree@fb.com>
selftests/bpf: Correctly display subtest skip status
Stefan Assmann <sassmann@kpanic.de>
iavf: use mutexes for locking of critical sections
J. Bruce Fields <bfields@redhat.com>
rpc: fix gss_svc_init cleanup on failure
Thomas Gleixner <tglx@linutronix.de>
locking/rtmutex: Set proper wait context for lockdep
Luke Hsiao <lukehsiao@google.com>
tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
Darrick J. Wong <djwong@kernel.org>
iomap: pass writeback errors to the mapping
Ulrich Hecht <uli+renesas@fpond.eu>
serial: sh-sci: fix break handling for sysrq
Rajendra Nayak <rnayak@codeaurora.org>
opp: Don't print an error if required-opps is missing
Kiran K <kiran.k@intel.com>
Bluetooth: Fix race condition in handling NOP command
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: Fix handling of LE Enhanced Connection Complete
Sagi Grimberg <sagi@grimberg.me>
nvme: code command_id with a genctr for use-after-free validation
Sagi Grimberg <sagi@grimberg.me>
nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
Raag Jadav <raagjadav@gmail.com>
arm64: dts: ls1046a: fix eeprom entries
Tim Harvey <tharvey@gateworks.com>
arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
Tim Harvey <tharvey@gateworks.com>
arm64: dts: imx8mm-venice-gw700x: fix invalid pmic pin config
Tim Harvey <tharvey@gateworks.com>
arm64: dts: imx8mm-venice-gw700x: fix mp5416 pmic config
Thierry Reding <treding@nvidia.com>
arm64: tegra: Fix compatible string for Tegra132 CPUs
Andreas Obergschwandtner <andreas.obergschwandtner@gmail.com>
ARM: tegra: tamonten: Fix UART pad setting
Dmitry Osipenko <digetx@gmail.com>
ARM: tegra: acer-a500: Remove bogus USB VBUS regulators
Johan Almbladh <johan.almbladh@anyfinetworks.com>
mac80211: Fix monitor MTU limit so that A-MSDUs get through
Tuo Li <islituo@gmail.com>
drm/display: fix possible null-pointer dereference in dcn10_set_clock()
Tuo Li <islituo@gmail.com>
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Eran Ben Elisha <eranbe@nvidia.com>
net/mlx5: Fix variable type to match 64bit
Kuogee Hsieh <khsieh@codeaurora.org>
drm/msm/dp: do not end dp link training until video is ready
Kuogee Hsieh <khsieh@codeaurora.org>
drm/msm/dp: return correct edid checksum after corrupted edid checksum read
Kuogee Hsieh <khsieh@codeaurora.org>
drm/msm/dp: reset aux controller after dp_aux_cmd_fifo_tx() failed.
Kuogee Hsieh <khsieh@codeaurora.org>
drm/msm/dp: reduce link rate if failed at link training 1
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: avoid circular locks in sco_sock_connect
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: schedule SCO timeouts with delayed_work
Fabio Aiuto <fabioaiuto83@gmail.com>
staging: rtl8723bs: fix right side of condition
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
Jussi Maki <joamaki@gmail.com>
selftests/bpf: Fix xdp_tx.c prog section name
Roy Chan <roy.chan@amd.com>
drm/amd/display: fix incorrect CM/TF programming sequence in dwb
Roy Chan <roy.chan@amd.com>
drm/amd/display: fix missing writeback disablement if plane is removed
Sanjay R Mehta <sanju.mehta@amd.com>
thunderbolt: Fix port linking by checking all adapters
Linus Walleij <linus.walleij@linaro.org>
ARM: dts: ixp4xx: Fix up bad interrupt flags
Quanyang Wang <quanyang.wang@windriver.com>
drm: xlnx: zynqmp: release reset to DP controller before accessing DP registers
Quanyang Wang <quanyang.wang@windriver.com>
drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock
Konrad Dybcio <konrad.dybcio@somainline.org>
drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660
David Heidelberg <david@ixit.cz>
drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
Nathan Chancellor <nathan@kernel.org>
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
Rajendra Nayak <rnayak@codeaurora.org>
nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
Georgi Djakov <georgi.djakov@linaro.org>
arm64: dts: qcom: sm8250: Fix epss_l3 unit address
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: msm8996: don't use underscore in node name
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: msm8994: don't use underscore in node name
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: sdm630: don't use underscore in node name
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: ipq6018: drop '0x' from unit address
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: sdm660: use reg value for memory node
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: ipq8074: fix pci node reg property
Sebastian Reichel <sebastian.reichel@collabora.com>
ARM: dts: imx53-ppd: Fix ACHC entry
Mikko Perttunen <mperttunen@nvidia.com>
misc: sram: Only map reserved areas in Tegra SYSRAM
Tony Lindgren <tony@atomide.com>
serial: 8250_omap: Handle optional overrun-throttle-ms property
Alex Elder <elder@linaro.org>
net: ipa: fix IPA v4.9 interconnects
AngeloGioacchino Del Regno <angelogioacchino.delregno@somainline.org>
arm64: dts: qcom: sdm630: Fix TLMM node and pinctrl configuration
AngeloGioacchino Del Regno <angelogioacchino.delregno@somainline.org>
arm64: dts: qcom: sdm630: Rewrite memory map
Bob Peterson <rpeterso@redhat.com>
gfs2: Fix glock recursion in freeze_go_xmote_bh
Evgeny Novikov <novikov@ispras.ru>
media: tegra-cec: Handle errors of clk_prepare_enable()
Krzysztof Hałasa <khalasa@piap.pl>
media: TDA1997x: fix tda1997x_query_dv_timings() return value
Hans Verkuil <hverkuil-cisco@xs4all.nl>
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Laurent Pinchart <laurent.pinchart@ideasonboard.com>
media: imx: imx7-media-csi: Fix buffer return upon stream start failure
Umang Jain <umang.jain@ideasonboard.com>
media: imx258: Limit the max analogue gain to 480
Laurent Pinchart <laurent.pinchart@ideasonboard.com>
media: imx258: Rectify mismatch of VTS value
Ioana Ciornei <ioana.ciornei@nxp.com>
dpaa2-switch: do not enable the DPSW at probe time
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: Fix not generating RPA when required
Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
ASoC: Intel: update sof_pcm512x quirks
Hans de Goede <hdegoede@redhat.com>
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Vidya Sagar <vidyas@nvidia.com>
arm64: tegra: Fix Tegra194 PCIe EP compatible string
Nicolas Ferre <nicolas.ferre@microchip.com>
ARM: dts: at91: use the right property for shutdown controller
Yufeng Mo <moyufeng@huawei.com>
bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_compat: use nfnetlink_unicast()
Akhil P Oommen <akhilpo@codeaurora.org>
drm/msm/a6xx: Fix llcc configuration for a660 gpu
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Update AV96 adv7513 node per dtbs_check
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Set {bitclock,frame}-master phandles on ST DKx
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Set {bitclock,frame}-master phandles on DHCOM SoM
Zhen Lei <thunder.leizhen@huawei.com>
workqueue: Fix possible memory leaks in wq_numa_init()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: skip invalid hci_sync_conn_complete_evt
Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
drm: rcar-du: Shutdown the display on system shutdown
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
Martynas Pumputis <m@lambda.lt>
libbpf: Fix race when pinning maps in parallel
Juhee Kang <claudiajkang@gmail.com>
samples: bpf: Fix tracex7 error raised on the missing argument
Mikita Lipski <mikita.lipski@amd.com>
drm/amd/display: Fix PSR command version
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
staging: ks7010: Fix the initialization of the 'sleep_status' structure
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
vt: keyboard.c: make console an unsigned int
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Jiri Slaby <jirislaby@kernel.org>
hvsi: don't panic on tty_register_driver failure
Jiri Slaby <jirislaby@kernel.org>
xtensa: ISS: don't panic in rs_init
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: max310x: Use clock-names property matching to recognize EXTCLK
Maciej W. Rozycki <macro@orcam.me.uk>
serial: 8250: Define RX trigger levels for OxSemi 950 devices
Niklas Schnelle <schnelle@linux.ibm.com>
s390: make PCI mio support a machine flag
Heiko Carstens <hca@linux.ibm.com>
s390/jump_label: print real address in a case of a jump label bug
Gustavo A. R. Silva <gustavoars@kernel.org>
flow_dissector: Fix out-of-bounds warnings
Gustavo A. R. Silva <gustavoars@kernel.org>
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
Alex Elder <elder@linaro.org>
net: ipa: always validate filter and route tables
Alex Elder <elder@linaro.org>
net: ipa: fix ipa_cmd_table_valid()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: riva: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
Jernej Skrabec <jernej.skrabec@gmail.com>
arm64: dts: allwinner: h6: tanix-tx6: Fix regulator node names
Geert Uytterhoeven <geert+renesas@glider.be>
drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Do not PASS tests without actually testing the result
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix copy-and-paste error in double word test
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
Oak Zeng <Oak.Zeng@amd.com>
drm/amdgpu: Fix a printing message
Jake Wang <haonan.wang2@amd.com>
drm/amd/display: Fixed hardware power down bypass during headless boot
Arnd Bergmann <arnd@arndb.de>
ethtool: improve compat ioctl handling
Niklas Söderlund <niklas.soderlund@corigine.com>
nfp: fix return statement in nfp_net_parse_meta()
Yang Yingliang <yangyingliang@huawei.com>
media: atomisp: pci: fix error return code in atomisp_pci_probe()
Dinghao Liu <dinghao.liu@zju.edu.cn>
media: atomisp: Fix runtime PM imbalance in atomisp_pci_probe
Evgeny Novikov <novikov@ispras.ru>
media: platform: stm32: unprepare clocks at handling errors in probe
Ezequiel Garcia <ezequiel@collabora.com>
media: hantro: vp8: Move noisy WARN_ON to vpu_debug
Oliver Logush <oliver.logush@amd.com>
drm/amd/display: Fix timer_per_pixel unit error
Shuah Khan <skhan@linuxfoundation.org>
selftests: firmware: Fix ignored return val of asprintf() warn
Eric Auger <eric.auger@redhat.com>
misc/pvpanic-pci: Allow automatic loading
Laurentiu Tudor <laurentiu.tudor@nxp.com>
bus: fsl-mc: fix mmio base address for child DPRCs
Laurentiu Tudor <laurentiu.tudor@nxp.com>
bus: fsl-mc: fix arg in call to dprc_scan_objects()
Zheyu Ma <zheyuma97@gmail.com>
tty: serial: jsm: hold port lock when reporting modem line changes
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
staging: hisilicon,hi6421-spmi-pmic.yaml: fix patternProperties
Geert Uytterhoeven <geert+renesas@glider.be>
staging: board: Fix uninitialized spinlock when attaching genpd
Jack Pham <jackp@codeaurora.org>
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Evgeny Novikov <novikov@ispras.ru>
USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
Maciej Żenczykowski <maze@google.com>
usb: gadget: u_ether: fix a potential null pointer dereference
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the actual_length of an iso packet
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
Sasha Neftin <sasha.neftin@intel.com>
igc: Check if num of q_vectors is smaller than max before array access
Zhouyi Zhou <zhouzhouyi@gmail.com>
rcu: Fix macro name CONFIG_TASKS_RCU_TRACE
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
drm: protect drm_master pointers in drm_lease.c
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
drm: serialize drm_file.master with a new spinlock
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
drm: avoid blocking in drm_clients_info's rcu section
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Smack: Fix wrong semantics in smk_access_entry()
Alex Elder <elder@linaro.org>
net: ipa: fix IPA v4.11 interconnect data
Bhupesh Sharma <bhupesh.sharma@linaro.org>
arm64: dts: qcom: Fix usb entries for SA8155p adp board
Yajun Deng <yajun.deng@linux.dev>
netlink: Deal with ESRCH error in nlmsg_notify()
KuoHsiang Chou <kuohsiang_chou@aspeedtech.com>
drm/ast: Disable fast reset after DRAM initial
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: fix a DoS bug by restricting user input
David Heidelberg <david@ixit.cz>
ARM: dts: qcom: apq8064: correct clock names
Stefan Assmann <sassmann@kpanic.de>
iavf: fix locking of critical sections
Stefan Assmann <sassmann@kpanic.de>
iavf: do not override the adapter state in the watchdog task
Jonathan Cameron <Jonathan.Cameron@huawei.com>
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Marek Vasut <marex@denx.de>
net: phy: Fix data type in DP83822 dp8382x_disable_wol()
Xin Long <lucien.xin@gmail.com>
tipc: keep the skb in rcv queue until the whole data is read
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Ani Sinha <ani@anisinha.ca>
x86/hyperv: fix for unwanted manipulation of sched_clock when TSC marked unstable
Thomas Zimmermann <tzimmermann@suse.de>
drm/vkms: Let shadow-plane helpers prepare the plane's FB
Martynas Pumputis <m@lambda.lt>
libbpf: Fix reuse of pinned map on older kernel
Tomi Valkeinen <tomi.valkeinen@ideasonboard.com>
media: ti-vpe: cal: fix queuing of the initial buffer
Tomi Valkeinen <tomi.valkeinen@ideasonboard.com>
media: ti-vpe: cal: fix error handling in cal_camerarx_create
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: dib8000: rewrite the init prbs logic
Randy Dunlap <rdunlap@infradead.org>
ASoC: atmel: ATMEL drivers don't need HAS_DMA
Peter Ujfalusi <peter.ujfalusi@gmail.com>
ASoC: ti: davinci-mcasp: Fix DIT mode support
Linus Walleij <linus.walleij@linaro.org>
drm/panel: Fix up DT bindings for Samsung lms397kf04
Christian König <christian.koenig@amd.com>
dma-buf: fix dma_resv_test_signaled test_all handling v2
Tim Gover <tim.gover@raspberrypi.com>
drm: vc4: Fix pixel-wrap issue with DVP teardown
Luben Tuikov <luben.tuikov@amd.com>
drm/amdgpu: Fix koops when accessing RAS EEPROM
Luben Tuikov <luben.tuikov@amd.com>
drm/amdgpu: Fix amdgpu_ras_eeprom_init()
Daniel Vetter <daniel.vetter@ffwll.ch>
drm/omap: Follow implicit fencing in prepare_fb
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/ttm: Fix multihop assert on eviction.
Dom Cobley <popcornmix@gmail.com>
drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET
Zack Rusin <zackr@vmware.com>
drm/vmwgfx: Fix some static checker warnings
Zack Rusin <zackr@vmware.com>
drm/vmwgfx: Fix subresource updates with new contexts
Nadav Amit <namit@vmware.com>
userfaultfd: prevent concurrent API initialization
Masahiro Yamada <masahiroy@kernel.org>
kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
Oleksij Rempel <linux@rempel-privat.de>
MIPS: Malta: fix alignment of the devicetree buffer
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should put a page beyond EOF when preparing a write
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: deallocate compressed pages when error happens
Chao Yu <chao@kernel.org>
f2fs: fix to unmap pages from userspace process in punch_hole()
Chao Yu <chao@kernel.org>
f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
Chao Yu <chao@kernel.org>
f2fs: fix to account missing .skipped_gc_rwsem
Yongqiang Niu <yongqiang.niu@mediatek.com>
soc: mediatek: cmdq: add address shift in jump
Alexey Kardashevskiy <aik@ozlabs.ru>
KVM: PPC: Fix clearing never mapped TCEs in realmode
Codrin Ciubotariu <codrin.ciubotariu@microchip.com>
clk: at91: clk-generated: Limit the requested rate to our range
Sergio Paracuellos <sergio.paracuellos@gmail.com>
clk: ralink: avoid to set 'CLK_IS_CRITICAL' flag for gates
David Howells <dhowells@redhat.com>
fscache: Fix cookie key hashing
Wenpeng Liang <liangwenpeng@huawei.com>
RDMA/hns: Fix QP's resp incomplete assignment
Wenpeng Liang <liangwenpeng@huawei.com>
RDMA/hns: Fix query destination qpn
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc/smp: Update cpu_core_map on all PowerPc systems
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc/smp: Fix a crash while booting kvm guest with nr_cpus=2
Hans de Goede <hdegoede@redhat.com>
platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
Junxian Huang <huangjunxian4@hisilicon.com>
RDMA/hns: Bugfix for incorrect association between dip_idx and dgid
Junxian Huang <huangjunxian4@hisilicon.com>
RDMA/hns: Bugfix for the missing assignment for dip_idx
Junxian Huang <huangjunxian4@hisilicon.com>
RDMA/hns: Bugfix for data type of dip_idx
Yixing Liu <liuyixing1@huawei.com>
RDMA/hns: Fix incorrect lsn field
Kajol Jain <kjain@linux.ibm.com>
powerpc/perf: Fix the check for SIAR value
Nicholas Piggin <npiggin@gmail.com>
KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live
Alim Akhtar <alim.akhtar@samsung.com>
scsi: ufs: ufs-exynos: Fix static checker warning
Fabiano Rosas <farosas@linux.ibm.com>
KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines
Ahmad Fatoum <a.fatoum@pengutronix.de>
clk: imx8m: fix clock tree update of TF-A managed clocks
Lucas Stach <l.stach@pengutronix.de>
clk: imx8mm: use correct mux type for clkout path
Lang Cheng <chenglang@huawei.com>
RDMA/hns: Ownerbit mode add control field
Lukas Bulwahn <lukas.bulwahn@gmail.com>
HID: thrustmaster: clean up Makefile and adapt quirks
Jim Broadus <jbroadus@gmail.com>
HID: i2c-hid: Fix Elan touchpad regression
Basavaraj Natikar <Basavaraj.Natikar@amd.com>
HID: amd_sfh: Fix period data field to enable sensor
YueHaibing <yuehaibing@huawei.com>
RDMA/hns: Fix return in hns_roce_rereg_user_mr()
Lu Baolu <baolu.lu@linux.intel.com>
iommu/vt-d: Update the virtual command related registers
Chao Yu <chao@kernel.org>
f2fs: fix to keep compatibility of fault injection interface
Joel Stanley <joel@jms.id.au>
powerpc/config: Renable MTD_PHYSMAP_OF
Joel Stanley <joel@jms.id.au>
powerpc/config: Fix IPV6 warning in mpc855_ads
Dan Carpenter <dan.carpenter@oracle.com>
scsi: qedf: Fix error codes in qedf_alloc_global_queues()
Dan Carpenter <dan.carpenter@oracle.com>
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
Dan Carpenter <dan.carpenter@oracle.com>
scsi: smartpqi: Fix an error code in pqi_get_raid_map()
Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
platform/x86: ISST: Fix optimization with use of numa
Jason Gunthorpe <jgg@ziepe.ca>
vfio/mbochs: Fix missing error unwind of mbochs_used_mbytes
Laurent Dufour <ldufour@linux.ibm.com>
powerpc/numa: Consider the max NUMA node for migratable LPAR
Zhen Lei <thunder.leizhen@huawei.com>
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Wei Li <liwei391@huawei.com>
scsi: fdomain: Fix error return code in fdomain_probe()
Adrian Hunter <adrian.hunter@intel.com>
scsi: ufshcd: Fix device links when BOOT WLUN fails to probe
Colin Ian King <colin.king@canonical.com>
scsi: ufs: Fix unsigned int compared with less than zero
Anna Schumaker <Anna.Schumaker@Netapp.com>
sunrpc: Fix return value of get_srcport()
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC/xprtrdma: Fix reconnection locking
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Fix potential memory corruption
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4/pNFS: Always allow update of a zero valued layout barrier
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4/pNFS: Fix a layoutget livelock loop
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Put rpcrdma_reps before waking the tear-down completion
Anthony Iliopoulos <ailiop@suse.com>
dma-debug: fix debugfs initialization order
Randy Dunlap <rdunlap@infradead.org>
openrisc: don't printk() unconditionally
Yangtao Li <frank.li@vivo.com>
f2fs: reduce the scope of setting fsck tag when de->name_len is zero
Nathan Chancellor <nathan@kernel.org>
cpuidle: pseries: Mark pseries_idle_proble() as __init
Leon Romanovsky <leon@kernel.org>
RDMA/mlx5: Delete not-available udata check
Leon Romanovsky <leon@kernel.org>
RDMA/efa: Remove double QP type assignment
Leon Romanovsky <leon@kernel.org>
RDMA/hns: Don't overwrite supplied QP attributes
Michal Suchanek <msuchanek@suse.de>
powerpc/stacktrace: Include linux/delay.h
Gautham R. Shenoy <ego@linux.vnet.ibm.com>
cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards
Bart Van Assche <bvanassche@acm.org>
scsi: ufs: Fix the SCSI abort handler
Bart Van Assche <bvanassche@acm.org>
scsi: ufs: Use DECLARE_COMPLETION_ONSTACK() where appropriate
Bart Van Assche <bvanassche@acm.org>
scsi: ufs: Fix memory corruption by ufshcd_read_desc_param()
Jason Gunthorpe <jgg@ziepe.ca>
vfio: Use config not menuconfig for VFIO_NOIOMMU
Chao Yu <chao@kernel.org>
f2fs: fix wrong checkpoint_changed value in f2fs_remount()
Daeho Jeong <daehojeong@google.com>
f2fs: turn back remapped address in compressed page endio
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: do not submit NEW_ADDR to read node block
Jaehyoung Choi <jkkkkk.choi@samsung.com>
pinctrl: samsung: Fix pinctrl bank pin count
Colin Ian King <colin.king@canonical.com>
scsi: BusLogic: Use %X for u32 sized integer rather than %lX
Leon Romanovsky <leon@kernel.org>
docs: Fix infiniband uverbs minor number
Leon Romanovsky <leon@kernel.org>
RDMA/iwcm: Release resources if iw_cm module initialization fails
Mike Marciniszyn <mike.marciniszyn@cornelisnetworks.com>
IB/hfi1: Adjust pkey entry in index 0
Peter Geis <pgwipeout@gmail.com>
clk: rockchip: drop GRF dependency for rk3328/rk3036 pll types
Christoph Hellwig <hch@lst.de>
scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
Marek Behún <kabel@kernel.org>
pinctrl: armada-37xx: Correct PWM pins definitions
Chao Yu <chao@kernel.org>
f2fs: quota: fix potential deadlock
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
clk: renesas: rzg2l: Fix off-by-one check in rzg2l_cpg_clk_src_twocell_get()
Dmitry Torokhov <dmitry.torokhov@gmail.com>
HID: input: do not report stylus battery state as "full"
Jack Wang <jinpu.wang@ionos.com>
RDMA/rtrs: Move sq_wr_avail to rtrs_con
Jack Wang <jinpu.wang@ionos.com>
RDMA/rtrs: Enable the same selective signal for heartbeat and IO
Jack Wang <jinpu.wang@ionos.com>
RDMA/rtrs: move wr_cnt from rtrs_srv_con to rtrs_con
Chao Yu <chao@kernel.org>
f2fs: compress: fix to set zstd compress level correctly
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
Evan Wang <xswang@marvell.com>
PCI: aardvark: Fix checking for PIO status
Pali Rohár <pali@kernel.org>
PCI: aardvark: Configure PCIe resources from 'ranges' DT property
Hyun Kwon <hyun.kwon@xilinx.com>
PCI: xilinx-nwl: Enable the clock through CCF
Krzysztof Wilczyński <kw@linux.com>
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Marek Behún <kabel@kernel.org>
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
Stuart Hayes <stuart.w.hayes@gmail.com>
PCI/portdrv: Enable Bandwidth Notification only if port supports it
Chao Yu <chao@kernel.org>
f2fs: fix to do sanity check for sb/cp fields correctly
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: let's keep writing IOs on SBI_NEED_FSCK
Thomas Gleixner <tglx@linutronix.de>
sched: Prevent balance_push() on remote runqueues
David Heidelberg <david@ixit.cz>
ARM: 9105/1: atags_to_fdt: don't warn about stack size
Hans de Goede <hdegoede@redhat.com>
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
Jan Kiszka <jan.kiszka@siemens.com>
watchdog: iTCO_wdt: Fix detection of SMI-off case
Robin Gong <yibin.gong@nxp.com>
dmaengine: imx-sdma: remove duplicated sdma_load_context
Robin Gong <yibin.gong@nxp.com>
Revert "dmaengine: imx-sdma: refine to load context only once"
Julian Wiedmann <jwi@linux.ibm.com>
s390/qdio: cancel the ESTABLISH ccw after timeout
Julian Wiedmann <jwi@linux.ibm.com>
s390/qdio: fix roll-back after timeout on ESTABLISH ccw
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
nvmem: core: fix error handling while validating keepout regions
Sean Young <sean@mess.org>
media: rc-loopback: return number of emitters rather than error
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: uvc: don't do DMA on stack
Wang Hai <wanghai38@huawei.com>
VMCI: fix NULL pointer dereference when unmapping queue pair
Eddie James <eajames@linux.ibm.com>
spi: fsi: Reduce max transfer size to 8 bytes
Brijesh Singh <brijesh.singh@amd.com>
crypto: ccp - shutdown SEV firmware on kexec
Arne Welzel <arne.welzel@corelight.com>
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Kevin Hao <haokexin@gmail.com>
cpufreq: schedutil: Use kobject release() method to free sugov_tunables
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
power: supply: max17042: handle fails of reading status register
Damien Le Moal <damien.lemoal@wdc.com>
block: bfq: fix bfq_set_next_ioprio_data()
zhenwei pi <pizhenwei@bytedance.com>
crypto: public_key: fix overflow during implicit conversion
Joseph Gates <jgates@squareup.com>
wcn36xx: Ensure finish scan is not requested before start scan
Nuno Sá <nuno.sa@analog.com>
iio: ltc2983: fix device probe
Alexandru Elisei <alexandru.elisei@arm.com>
arm64: Do not trap PMSNEVFR_EL1
Mark Rutland <mark.rutland@arm.com>
arm64: head: avoid over-mapping in map_memory
Will Deacon <will@kernel.org>
arm64: mm: Fix TLBI vs ASID rollover
Marc Zyngier <maz@kernel.org>
arm64: Move .hyp.rodata outside of the _sdata.._edata range
Iwona Winiarska <iwona.winiarska@intel.com>
soc: aspeed: p2a-ctrl: Fix boundary check for mmap
Iwona Winiarska <iwona.winiarska@intel.com>
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
Manivannan Sadhasivam <mani@kernel.org>
soc: qcom: aoss: Fix the out of bound usage of cooling_devs
Enric Balletbo i Serra <enric.balletbo@collabora.com>
soc: mediatek: mmsys: Fix missing UFOE component in mt8173 table routing
Paul Cercueil <paul@crapouillou.net>
pinctrl: ingenic: Fix bias config for X2000(E)
Paul Cercueil <paul@crapouillou.net>
pinctrl: ingenic: Fix incorrect pull up/down info
Marc Zyngier <maz@kernel.org>
pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
Dinh Nguyen <dinguyen@kernel.org>
clk: socfpga: agilex: add the bypass register for s2f_usr0 clock
Dinh Nguyen <dinguyen@kernel.org>
clk: socfpga: agilex: fix up s2f_user0_clk representation
Dinh Nguyen <dinguyen@kernel.org>
clk: socfpga: agilex: fix the parents of the psi_ref_clk
Rolf Eike Beer <eb@emlix.com>
tools/thermal/tmon: Add cross compiling support
Steven Rostedt (VMware) <rostedt@goodmis.org>
selftests/ftrace: Fix requirement check of README file
jingle.wu <jingle.wu@emc.com.tw>
Input: elan_i2c - reduce the resume time for controller in Whitebox
Colin Ian King <colin.king@canonical.com>
ceph: fix dereference of null pointer cf
Harshvardhan Jha <harshvardhan.jha@oracle.com>
9p/xen: Fix end of loop tests for list_for_each_entry
Juergen Gross <jgross@suse.com>
xen: fix setting of max_pfn in shared_info
Kajol Jain <kjain@linux.ibm.com>
powerpc/perf/hv-gpci: Fix counter value parsing
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
Naohiro Aota <naohiro.aota@wdc.com>
btrfs: zoned: fix double counting of split ordered extent
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
btrfs: reset replace target device to allocation state on close
Anand Jain <anand.jain@oracle.com>
btrfs: fix upper limit for max_inline for page size 64K
Naohiro Aota <naohiro.aota@wdc.com>
btrfs: zoned: suppress reclaim error message on EAGAIN
Naohiro Aota <naohiro.aota@wdc.com>
btrfs: zoned: fix block group alloc_offset calculation
Josef Bacik <josef@toxicpanda.com>
btrfs: do not do preemptive flushing if the majority is global rsv
Josef Bacik <josef@toxicpanda.com>
btrfs: reduce the preemptive flushing threshold to 90%
Josef Bacik <josef@toxicpanda.com>
btrfs: wait on async extents when flushing delalloc
Josef Bacik <josef@toxicpanda.com>
btrfs: wake up async_delalloc_pages waiters after submit
Josef Bacik <josef@toxicpanda.com>
btrfs: use delalloc_bytes to determine flush amount for shrink_delalloc
Jens Axboe <axboe@kernel.dk>
io-wq: fix race between adding work and activating a free worker
Jens Axboe <axboe@kernel.dk>
io-wq: fix wakeup race when adding new work
Pavel Begunkov <asml.silence@gmail.com>
io_uring: fix io_try_cancel_userdata race for iowq
Pavel Begunkov <asml.silence@gmail.com>
io_uring: add ->splice_fd_in checks
Pavel Begunkov <asml.silence@gmail.com>
io_uring: place fixed tables under memcg limits
Dmitry Osipenko <digetx@gmail.com>
rtc: tps65910: Correct driver module alias
Randy Dunlap <rdunlap@infradead.org>
Makefile: use -Wno-main in the full kernel tree
-------------
Diffstat:
Documentation/admin-guide/devices.txt | 6 +-
.../bindings/display/panel/samsung,lms397kf04.yaml | 18 +-
.../pinctrl/marvell,armada-37xx-pinctrl.txt | 8 +-
Documentation/filesystems/f2fs.rst | 1 +
Makefile | 11 +-
arch/arm/boot/compressed/Makefile | 2 +
arch/arm/boot/dts/at91-kizbox3_common.dtsi | 2 +-
arch/arm/boot/dts/at91-sam9x60ek.dts | 2 +-
arch/arm/boot/dts/at91-sama5d27_som1_ek.dts | 2 +-
arch/arm/boot/dts/at91-sama5d27_wlsom1_ek.dts | 2 +-
arch/arm/boot/dts/at91-sama5d2_icp.dts | 2 +-
arch/arm/boot/dts/at91-sama5d2_ptc_ek.dts | 2 +-
arch/arm/boot/dts/at91-sama5d2_xplained.dts | 2 +-
arch/arm/boot/dts/imx53-ppd.dts | 23 +-
arch/arm/boot/dts/intel-ixp42x-linksys-nslu2.dts | 24 +-
.../arm/boot/dts/intel-ixp43x-gateworks-gw2358.dts | 48 ++--
arch/arm/boot/dts/qcom-apq8064.dtsi | 6 +-
arch/arm/boot/dts/stm32mp15xx-dhcom-pdk2.dtsi | 8 +-
arch/arm/boot/dts/stm32mp15xx-dhcor-avenger96.dtsi | 6 +-
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 8 +-
arch/arm/boot/dts/tegra20-acer-a500-picasso.dts | 25 +-
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 +-
.../boot/dts/allwinner/sun50i-h6-tanix-tx6.dts | 4 +-
arch/arm64/boot/dts/freescale/fsl-ls1046a-frwy.dts | 8 +-
arch/arm64/boot/dts/freescale/fsl-ls1046a-rdb.dts | 7 +-
.../boot/dts/freescale/imx8mm-venice-gw700x.dtsi | 64 ++---
.../boot/dts/freescale/imx8mm-venice-gw71xx.dtsi | 5 +-
arch/arm64/boot/dts/nvidia/tegra132.dtsi | 4 +-
arch/arm64/boot/dts/nvidia/tegra194.dtsi | 6 +-
arch/arm64/boot/dts/qcom/ipq6018.dtsi | 2 +-
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2 +-
arch/arm64/boot/dts/qcom/ipq8074.dtsi | 16 +-
arch/arm64/boot/dts/qcom/msm8994.dtsi | 6 +-
arch/arm64/boot/dts/qcom/msm8996.dtsi | 4 +-
arch/arm64/boot/dts/qcom/sa8155p-adp.dts | 60 ++++-
arch/arm64/boot/dts/qcom/sdm630.dtsi | 257 ++++++++++++--------
arch/arm64/boot/dts/qcom/sm8250.dtsi | 2 +-
arch/arm64/include/asm/el2_setup.h | 13 +-
arch/arm64/include/asm/kernel-pgtable.h | 4 +-
arch/arm64/include/asm/mmu.h | 29 ++-
arch/arm64/include/asm/tlbflush.h | 11 +-
arch/arm64/kernel/head.S | 11 +-
arch/arm64/kernel/vmlinux.lds.S | 4 +-
arch/m68k/Kconfig.bus | 2 +-
arch/mips/mti-malta/malta-dtshim.c | 2 +-
arch/openrisc/kernel/entry.S | 2 +
arch/parisc/Makefile | 6 +-
arch/parisc/kernel/signal.c | 6 +
arch/powerpc/configs/mpc885_ads_defconfig | 3 +-
arch/powerpc/include/asm/pmc.h | 7 +
arch/powerpc/kernel/smp.c | 13 +-
arch/powerpc/kernel/stacktrace.c | 1 +
arch/powerpc/kvm/book3s_64_mmu_radix.c | 6 +-
arch/powerpc/kvm/book3s_64_vio_hv.c | 9 +-
arch/powerpc/kvm/book3s_hv.c | 20 ++
arch/powerpc/mm/numa.c | 13 +-
arch/powerpc/perf/core-book3s.c | 12 +-
arch/powerpc/perf/hv-gpci.c | 2 +-
arch/s390/include/asm/setup.h | 2 +
arch/s390/include/asm/smp.h | 1 +
arch/s390/kernel/early.c | 4 +
arch/s390/kernel/jump_label.c | 2 +-
arch/s390/kernel/smp.c | 9 +-
arch/s390/kernel/topology.c | 13 +-
arch/s390/mm/init.c | 2 +-
arch/s390/pci/pci.c | 5 +-
arch/x86/kernel/cpu/mshyperv.c | 9 +-
arch/x86/xen/p2m.c | 4 +-
arch/xtensa/platforms/iss/console.c | 17 +-
block/bfq-iosched.c | 2 +-
block/blk-zoned.c | 6 -
block/bsg.c | 5 +-
drivers/ata/libata-core.c | 4 +
drivers/ata/sata_dwc_460ex.c | 12 +-
drivers/base/core.c | 2 +
drivers/bus/fsl-mc/fsl-mc-bus.c | 26 +-
drivers/clk/at91/clk-generated.c | 6 +
drivers/clk/imx/clk-composite-8m.c | 3 +-
drivers/clk/imx/clk-imx8mm.c | 11 +-
drivers/clk/imx/clk-imx8mn.c | 7 +-
drivers/clk/imx/clk-imx8mq.c | 7 +-
drivers/clk/imx/clk.h | 16 +-
drivers/clk/ralink/clk-mt7621.c | 9 +-
drivers/clk/renesas/renesas-rzg2l-cpg.c | 2 +-
drivers/clk/rockchip/clk-pll.c | 2 +-
drivers/clk/socfpga/clk-agilex.c | 19 +-
drivers/cpufreq/powernv-cpufreq.c | 16 +-
drivers/cpuidle/cpuidle-pseries.c | 18 +-
drivers/crypto/ccp/sev-dev.c | 49 ++--
drivers/crypto/ccp/sp-pci.c | 12 +
drivers/crypto/mxs-dcp.c | 36 +--
drivers/dma-buf/dma-resv.c | 33 +--
drivers/dma/imx-sdma.c | 13 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 23 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c | 16 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 2 +-
drivers/gpu/drm/amd/amdgpu/vcn_v1_0.c | 2 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 2 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 2 +-
drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.c | 84 +++++--
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.h | 1 +
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 3 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 2 +-
.../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 16 +-
drivers/gpu/drm/amd/display/dc/dce/dmub_psr.c | 4 +-
.../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 38 ++-
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 14 +-
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 2 +-
.../gpu/drm/amd/display/dc/dcn30/dcn30_dwb_cm.c | 90 +++++--
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 37 +--
.../gpu/drm/amd/display/dc/dcn30/dcn30_resource.c | 42 +++-
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_hwseq.c | 5 +-
drivers/gpu/drm/ast/ast_drv.h | 6 +
drivers/gpu/drm/ast/ast_main.c | 5 +
drivers/gpu/drm/ast/ast_post.c | 91 +++++--
drivers/gpu/drm/bridge/nwl-dsi.c | 2 +-
drivers/gpu/drm/drm_auth.c | 42 +++-
drivers/gpu/drm/drm_debugfs.c | 3 +-
drivers/gpu/drm/drm_dp_mst_topology.c | 10 +-
drivers/gpu/drm/drm_file.c | 1 +
drivers/gpu/drm/drm_lease.c | 81 +++++--
drivers/gpu/drm/exynos/exynos_drm_dma.c | 2 +
drivers/gpu/drm/mgag200/mgag200_drv.h | 16 ++
drivers/gpu/drm/mgag200/mgag200_mode.c | 20 +-
drivers/gpu/drm/mgag200/mgag200_reg.h | 9 +-
drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 46 ++--
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_catalog.c | 5 +
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 17 +-
drivers/gpu/drm/msm/dp/dp_aux.c | 3 +
drivers/gpu/drm/msm/dp/dp_ctrl.c | 134 +++++++----
drivers/gpu/drm/msm/dp/dp_panel.c | 9 +-
drivers/gpu/drm/msm/dsi/dsi_cfg.c | 1 -
drivers/gpu/drm/msm/dsi/phy/dsi_phy_14nm.c | 2 +-
drivers/gpu/drm/omapdrm/omap_plane.c | 3 +
drivers/gpu/drm/panfrost/panfrost_device.h | 8 +-
drivers/gpu/drm/panfrost/panfrost_drv.c | 50 +---
drivers/gpu/drm/panfrost/panfrost_gem.c | 20 +-
drivers/gpu/drm/panfrost/panfrost_job.c | 4 +-
drivers/gpu/drm/panfrost/panfrost_mmu.c | 191 +++++++++------
drivers/gpu/drm/panfrost/panfrost_mmu.h | 5 +-
drivers/gpu/drm/panfrost/panfrost_regs.h | 2 +
drivers/gpu/drm/rcar-du/rcar_du_drv.c | 8 +
drivers/gpu/drm/ttm/ttm_bo.c | 63 ++---
drivers/gpu/drm/ttm/ttm_bo_util.c | 7 +-
drivers/gpu/drm/vc4/vc4_hdmi.c | 19 +-
drivers/gpu/drm/vkms/vkms_plane.c | 38 +--
drivers/gpu/drm/vmwgfx/ttm_memory.c | 2 +
drivers/gpu/drm/vmwgfx/vmwgfx_binding.c | 20 +-
drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf.c | 2 +-
drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf_res.c | 4 +-
drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 +
drivers/gpu/drm/vmwgfx/vmwgfx_mob.c | 4 +-
drivers/gpu/drm/vmwgfx/vmwgfx_msg.c | 6 +-
drivers/gpu/drm/vmwgfx/vmwgfx_resource.c | 8 +-
drivers/gpu/drm/vmwgfx/vmwgfx_so.c | 3 +-
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 9 +-
drivers/gpu/drm/vmwgfx/vmwgfx_validation.c | 4 +-
drivers/gpu/drm/xlnx/zynqmp_disp.c | 3 +-
drivers/gpu/drm/xlnx/zynqmp_dp.c | 22 +-
drivers/hid/Makefile | 1 -
drivers/hid/amd-sfh-hid/amd_sfh_client.c | 2 +-
drivers/hid/hid-input.c | 2 -
drivers/hid/hid-quirks.c | 2 -
drivers/hid/i2c-hid/i2c-hid-core.c | 5 +-
drivers/hwmon/pmbus/ibm-cffps.c | 6 +-
drivers/iio/dac/ad5624r_spi.c | 18 +-
drivers/iio/temperature/ltc2983.c | 30 ++-
drivers/infiniband/core/iwcm.c | 19 +-
drivers/infiniband/hw/efa/efa_verbs.c | 1 -
drivers/infiniband/hw/hfi1/init.c | 7 +-
drivers/infiniband/hw/hns/hns_roce_device.h | 9 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 21 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.h | 2 +-
drivers/infiniband/hw/hns/hns_roce_main.c | 8 +-
drivers/infiniband/hw/hns/hns_roce_mr.c | 4 +-
drivers/infiniband/hw/hns/hns_roce_qp.c | 21 +-
drivers/infiniband/hw/mlx5/qp.c | 3 -
drivers/infiniband/ulp/rtrs/rtrs-clt.c | 11 +-
drivers/infiniband/ulp/rtrs/rtrs-clt.h | 1 -
drivers/infiniband/ulp/rtrs/rtrs-pri.h | 3 +
drivers/infiniband/ulp/rtrs/rtrs-srv.c | 19 +-
drivers/infiniband/ulp/rtrs/rtrs-srv.h | 2 -
drivers/infiniband/ulp/rtrs/rtrs.c | 8 +-
drivers/input/mouse/elan_i2c.h | 3 +-
drivers/input/mouse/elan_i2c_core.c | 1 +
drivers/iommu/intel/pasid.h | 10 +-
drivers/mailbox/mtk-cmdq-mailbox.c | 3 +-
drivers/md/dm-crypt.c | 7 +-
drivers/media/cec/platform/stm32/stm32-cec.c | 26 +-
drivers/media/cec/platform/tegra/tegra_cec.c | 10 +-
drivers/media/dvb-frontends/dib8000.c | 58 +++--
drivers/media/i2c/imx258.c | 4 +-
drivers/media/i2c/tda1997x.c | 5 +-
drivers/media/platform/ti-vpe/cal-camerarx.c | 4 +-
drivers/media/platform/ti-vpe/cal-video.c | 2 +-
drivers/media/rc/rc-loopback.c | 2 +-
drivers/media/usb/uvc/uvc_v4l2.c | 34 ++-
drivers/media/v4l2-core/v4l2-dv-timings.c | 4 +-
drivers/misc/pvpanic/pvpanic-pci.c | 2 +
drivers/misc/sram.c | 103 +++++---
drivers/misc/sram.h | 9 +
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6 +-
drivers/mmc/core/block.c | 77 +++---
drivers/mmc/core/mmc_ops.c | 5 +-
drivers/mmc/core/mmc_ops.h | 1 +
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 ++-
drivers/mmc/host/sdhci-of-arasan.c | 36 ++-
drivers/mtd/nand/raw/intel-nand-controller.c | 27 ++-
drivers/net/bonding/bond_main.c | 3 +-
drivers/net/dsa/lantiq_gswip.c | 3 +-
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 6 -
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 9 +-
drivers/net/ethernet/intel/iavf/iavf.h | 9 +-
drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 10 +-
drivers/net/ethernet/intel/iavf/iavf_main.c | 122 ++++++----
drivers/net/ethernet/intel/igc/igc_main.c | 9 +-
drivers/net/ethernet/marvell/octeontx2/af/mbox.h | 1 +
.../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 9 +-
.../ethernet/marvell/octeontx2/nic/otx2_common.c | 38 ++-
.../ethernet/marvell/octeontx2/nic/otx2_common.h | 1 +
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 8 +-
.../ethernet/mellanox/mlx5/core/steering/dr_rule.c | 2 +-
.../ethernet/mellanox/mlx5/core/steering/dr_send.c | 1 +
.../net/ethernet/netronome/nfp/nfp_net_common.c | 2 +-
.../net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 10 +-
drivers/net/ethernet/wiznet/w5100.c | 2 +
drivers/net/ipa/ipa_cmd.c | 38 ++-
drivers/net/ipa/ipa_cmd.h | 15 +-
drivers/net/ipa/ipa_data-v4.11.c | 13 +-
drivers/net/ipa/ipa_data-v4.9.c | 9 +-
drivers/net/ipa/ipa_table.c | 38 ++-
drivers/net/ipa/ipa_table.h | 16 --
drivers/net/phy/dp83822.c | 8 +-
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3 +-
drivers/net/wireless/ath/ath9k/hw.c | 12 +-
drivers/net/wireless/ath/wcn36xx/main.c | 5 +-
drivers/net/wireless/ath/wcn36xx/txrx.c | 4 +
drivers/net/wireless/ath/wcn36xx/wcn36xx.h | 1 +
drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 6 +-
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 4 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 8 +-
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 24 +-
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 11 +-
drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 30 ++-
.../net/wireless/intel/iwlwifi/mvm/time-event.c | 31 ++-
drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 5 +-
drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 3 +
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu.h | 2 +
.../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 33 ++-
drivers/net/wireless/realtek/rtw88/Makefile | 2 +-
drivers/net/wireless/realtek/rtw88/fw.c | 8 +-
drivers/net/wireless/realtek/rtw88/fw.h | 1 +
drivers/net/wireless/realtek/rtw88/wow.c | 21 +-
drivers/nvdimm/pmem.c | 4 +-
drivers/nvme/host/core.c | 3 +-
drivers/nvme/host/nvme.h | 47 +++-
drivers/nvme/host/pci.c | 2 +-
drivers/nvme/host/rdma.c | 4 +-
drivers/nvme/host/tcp.c | 38 ++-
drivers/nvme/target/loop.c | 4 +-
drivers/nvmem/core.c | 7 +-
drivers/nvmem/qfprom.c | 6 +-
drivers/of/kobj.c | 2 +-
drivers/opp/of.c | 12 +-
drivers/parport/ieee1284_ops.c | 2 +-
drivers/pci/controller/pci-aardvark.c | 268 ++++++++++++++++++++-
drivers/pci/controller/pcie-xilinx-nwl.c | 12 +
drivers/pci/pci.c | 6 +-
drivers/pci/pcie/portdrv_core.c | 9 +-
drivers/pci/quirks.c | 1 +
drivers/pci/syscall.c | 4 +-
drivers/pinctrl/mvebu/pinctrl-armada-37xx.c | 16 +-
drivers/pinctrl/pinctrl-ingenic.c | 12 +-
drivers/pinctrl/pinctrl-single.c | 1 +
drivers/pinctrl/pinctrl-stmfx.c | 6 +-
drivers/pinctrl/samsung/pinctrl-samsung.c | 2 +-
drivers/platform/chrome/cros_ec_proto.c | 9 +
drivers/platform/x86/dell/dell-smbios-wmi.c | 1 +
.../x86/intel_speed_select_if/isst_if_common.c | 3 +-
drivers/power/supply/max17042_battery.c | 6 +-
drivers/rtc/rtc-tps65910.c | 2 +-
drivers/s390/cio/qdio_main.c | 82 ++++---
drivers/scsi/BusLogic.c | 6 +-
drivers/scsi/pcmcia/fdomain_cs.c | 4 +-
drivers/scsi/qedf/qedf_main.c | 10 +-
drivers/scsi/qedi/qedi_main.c | 14 +-
drivers/scsi/qla2xxx/qla_nvme.c | 5 +-
drivers/scsi/qla2xxx/qla_os.c | 6 +
drivers/scsi/smartpqi/smartpqi_init.c | 1 +
drivers/scsi/ufs/ufs-exynos.c | 4 +-
drivers/scsi/ufs/ufs-exynos.h | 2 +-
drivers/scsi/ufs/ufshcd.c | 96 ++++----
drivers/soc/aspeed/aspeed-lpc-ctrl.c | 2 +-
drivers/soc/aspeed/aspeed-p2a-ctrl.c | 2 +-
drivers/soc/mediatek/mtk-mmsys.h | 4 +
drivers/soc/qcom/qcom_aoss.c | 8 +-
drivers/soundwire/intel.c | 23 +-
drivers/spi/spi-fsi.c | 125 ++--------
drivers/staging/board/board.c | 7 +-
.../hikey9xx/hisilicon,hi6421-spmi-pmic.yaml | 6 +-
drivers/staging/ks7010/ks7010_sdio.c | 2 +-
drivers/staging/media/atomisp/pci/atomisp_v4l2.c | 4 +-
drivers/staging/media/hantro/hantro_g1_vp8_dec.c | 13 +-
.../media/hantro/rockchip_vpu2_hw_vp8_dec.c | 13 +-
drivers/staging/media/imx/imx7-media-csi.c | 15 +-
drivers/staging/rtl8723bs/hal/hal_com_phycfg.c | 2 +-
drivers/staging/rts5208/rtsx_scsi.c | 10 +-
drivers/thunderbolt/switch.c | 2 +-
drivers/tty/hvc/hvsi.c | 19 +-
drivers/tty/serial/8250/8250_omap.c | 25 +-
drivers/tty/serial/8250/8250_pci.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/jsm/jsm_neo.c | 2 +
drivers/tty/serial/jsm/jsm_tty.c | 3 +
drivers/tty/serial/max310x.c | 15 +-
drivers/tty/serial/sh-sci.c | 7 +-
drivers/tty/vt/keyboard.c | 30 +--
drivers/usb/chipidea/host.c | 14 +-
drivers/usb/dwc3/dwc3-imx8mp.c | 14 +-
drivers/usb/gadget/composite.c | 8 +-
drivers/usb/gadget/function/u_ether.c | 5 +-
drivers/usb/host/ehci-mv.c | 23 +-
drivers/usb/host/fotg210-hcd.c | 41 ++--
drivers/usb/host/fotg210.h | 5 -
drivers/usb/host/xhci-mtk-sch.c | 100 ++++----
drivers/usb/host/xhci-mtk.c | 2 +-
drivers/usb/host/xhci-mtk.h | 11 +-
drivers/usb/host/xhci.c | 24 +-
drivers/usb/isp1760/isp1760-core.c | 50 ++--
drivers/usb/isp1760/isp1760-hcd.c | 33 +--
drivers/usb/isp1760/isp1760-regs.h | 16 ++
drivers/usb/isp1760/isp1760-udc.c | 12 +-
drivers/usb/musb/musb_dsps.c | 13 +-
drivers/usb/usbip/vhci_hcd.c | 32 ++-
drivers/vfio/Kconfig | 2 +-
drivers/video/fbdev/asiliantfb.c | 3 +
drivers/video/fbdev/kyro/fbdev.c | 8 +
drivers/video/fbdev/riva/fbdev.c | 3 +
drivers/watchdog/iTCO_wdt.c | 2 +-
fs/btrfs/block-group.c | 2 +-
fs/btrfs/ctree.h | 9 +-
fs/btrfs/disk-io.c | 48 ++--
fs/btrfs/free-space-cache.c | 7 +-
fs/btrfs/inode.c | 26 +-
fs/btrfs/ordered-data.c | 8 +
fs/btrfs/space-info.c | 96 +++++++-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 3 +
fs/ceph/caps.c | 3 +
fs/cifs/sess.c | 2 +-
fs/f2fs/compress.c | 12 +-
fs/f2fs/data.c | 22 +-
fs/f2fs/dir.c | 14 +-
fs/f2fs/f2fs.h | 4 +-
fs/f2fs/file.c | 4 +-
fs/f2fs/gc.c | 4 +-
fs/f2fs/node.c | 3 +-
fs/f2fs/segment.c | 2 +-
fs/f2fs/super.c | 113 +++++----
fs/fscache/cookie.c | 14 +-
fs/fscache/internal.h | 2 +
fs/fscache/main.c | 39 +++
fs/gfs2/glops.c | 17 +-
fs/gfs2/lock_dlm.c | 5 +
fs/io-wq.c | 50 ++--
fs/io_uring.c | 59 +++--
fs/iomap/buffered-io.c | 2 +-
fs/lockd/svclock.c | 30 +--
fs/nfs/export.c | 2 +-
fs/nfs/pnfs.c | 16 +-
fs/nfsd/nfs4state.c | 13 +-
fs/overlayfs/dir.c | 6 +-
fs/userfaultfd.c | 91 ++++---
include/crypto/public_key.h | 4 +-
include/drm/drm_auth.h | 1 +
include/drm/drm_file.h | 18 +-
include/linux/ethtool.h | 4 -
include/linux/exportfs.h | 2 +
include/linux/hugetlb.h | 9 +
include/linux/hugetlb_cgroup.h | 12 +
include/linux/intel-iommu.h | 6 +-
include/linux/memory_hotplug.h | 4 +-
include/linux/rcupdate.h | 2 +-
include/linux/rtmutex.h | 19 +-
include/linux/sunrpc/xprt.h | 1 +
include/linux/vt_kern.h | 30 +--
include/net/bluetooth/hci_core.h | 4 +
include/net/flow_offload.h | 1 +
include/trace/events/btrfs.h | 1 +
include/uapi/linux/serial_reg.h | 1 +
kernel/dma/debug.c | 7 +-
kernel/fork.c | 1 +
kernel/locking/rtmutex.c | 2 +-
kernel/pid_namespace.c | 3 +-
kernel/printk/printk.c | 7 +-
kernel/rcu/tree_plugin.h | 8 +-
kernel/sched/core.c | 6 +-
kernel/sched/cpufreq_schedutil.c | 16 +-
kernel/trace/trace_osnoise.c | 6 +-
kernel/workqueue.c | 12 +-
lib/test_bpf.c | 13 +-
lib/test_stackinit.c | 20 +-
mm/hmm.c | 5 +-
mm/hugetlb.c | 4 +-
mm/memory-failure.c | 4 +-
mm/memory_hotplug.c | 4 +-
mm/mempolicy.c | 17 +-
mm/page_alloc.c | 4 +-
mm/vmscan.c | 2 +-
net/9p/trans_xen.c | 4 +-
net/bluetooth/hci_event.c | 150 ++++++++----
net/bluetooth/hci_request.c | 81 +++----
net/bluetooth/sco.c | 74 +++---
net/core/flow_dissector.c | 12 +-
net/core/flow_offload.c | 89 ++++++-
net/ethtool/ioctl.c | 136 +++++++++--
net/ipv4/ip_output.c | 5 +-
net/ipv4/tcp_fastopen.c | 3 +-
net/mac80211/iface.c | 11 +-
net/netfilter/nf_flow_table_offload.c | 1 +
net/netfilter/nf_tables_offload.c | 1 +
net/netfilter/nft_compat.c | 8 +-
net/netlabel/netlabel_cipso_v4.c | 4 +-
net/netlink/af_netlink.c | 4 +-
net/sched/cls_api.c | 1 +
net/sched/sch_taprio.c | 4 +-
net/socket.c | 125 +---------
net/sunrpc/auth_gss/svcauth_gss.c | 2 +-
net/sunrpc/xprt.c | 8 +-
net/sunrpc/xprtrdma/transport.c | 11 +-
net/sunrpc/xprtrdma/verbs.c | 10 +-
net/sunrpc/xprtsock.c | 2 +-
net/tipc/socket.c | 36 ++-
samples/bpf/test_override_return.sh | 1 +
samples/bpf/tracex7_user.c | 5 +
.../pktgen/pktgen_sample03_burst_single_flow.sh | 6 +-
samples/vfio-mdev/mbochs.c | 24 +-
scripts/gen_ksymdeps.sh | 8 +-
scripts/subarch.include | 2 +-
security/smack/smack_access.c | 17 +-
sound/soc/atmel/Kconfig | 1 -
sound/soc/intel/boards/bytcr_rt5640.c | 9 +-
sound/soc/intel/boards/sof_pcm512x.c | 13 +-
sound/soc/intel/skylake/skl-messages.c | 11 +-
sound/soc/intel/skylake/skl-pcm.c | 25 +-
sound/soc/rockchip/rockchip_i2s.c | 35 ++-
sound/soc/sh/rcar/adg.c | 12 +-
sound/soc/soc-pcm.c | 103 ++++++--
sound/soc/ti/davinci-mcasp.c | 150 ++++++++++--
tools/lib/bpf/libbpf.c | 63 ++++-
.../testing/selftests/arm64/mte/mte_common_util.c | 2 +-
tools/testing/selftests/arm64/pauth/pac.c | 10 +-
.../testing/selftests/bpf/prog_tests/send_signal.c | 16 ++
.../selftests/bpf/prog_tests/sockopt_inherit.c | 4 +-
tools/testing/selftests/bpf/progs/xdp_tx.c | 2 +-
tools/testing/selftests/bpf/test_maps.c | 2 +-
tools/testing/selftests/bpf/test_progs.c | 25 +-
tools/testing/selftests/bpf/test_xdp_veth.sh | 2 +-
tools/testing/selftests/firmware/fw_namespace.c | 3 +-
tools/testing/selftests/ftrace/test.d/functions | 2 +-
tools/testing/selftests/nci/nci_dev.c | 6 +-
tools/thermal/tmon/Makefile | 2 +-
468 files changed, 4873 insertions(+), 2875 deletions(-)
^ permalink raw reply [relevance 7%]
* [PATCH 5.14 016/432] btrfs: reset replace target device to allocation state on close
2021-09-16 15:55 7% [PATCH 5.14 000/432] 5.14.6-rc1 review Greg Kroah-Hartman
@ 2021-09-16 15:56 10% ` Greg Kroah-Hartman
2021-09-16 15:58 11% ` [PATCH 5.14 189/432] drm: avoid blocking in drm_clients_infos rcu section Greg Kroah-Hartman
` (6 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:56 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, David Sterba, Anand Jain,
Desmond Cheong Zhi Xi
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
commit 0d977e0eba234e01a60bdde27314dc21374201b3 upstream.
This crash was observed with a failed assertion on device close:
BTRFS: Transaction aborted (error -28)
WARNING: CPU: 1 PID: 3902 at fs/btrfs/extent-tree.c:2150 btrfs_run_delayed_refs+0x1d2/0x1e0 [btrfs]
Modules linked in: btrfs blake2b_generic libcrc32c crc32c_intel xor zstd_decompress zstd_compress xxhash lzo_compress lzo_decompress raid6_pq loop
CPU: 1 PID: 3902 Comm: kworker/u8:4 Not tainted 5.14.0-rc5-default+ #1532
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-59-gc9ba527-rebuilt.opensuse.org 04/01/2014
Workqueue: events_unbound btrfs_async_reclaim_metadata_space [btrfs]
RIP: 0010:btrfs_run_delayed_refs+0x1d2/0x1e0 [btrfs]
RSP: 0018:ffffb7a5452d7d80 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffabee13c4 RDI: 00000000ffffffff
RBP: ffff97834176a378 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff97835195d388
R13: 0000000005b08000 R14: ffff978385484000 R15: 000000000000016c
FS: 0000000000000000(0000) GS:ffff9783bd800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056190d003fe8 CR3: 000000002a81e005 CR4: 0000000000170ea0
Call Trace:
flush_space+0x197/0x2f0 [btrfs]
btrfs_async_reclaim_metadata_space+0x139/0x300 [btrfs]
process_one_work+0x262/0x5e0
worker_thread+0x4c/0x320
? process_one_work+0x5e0/0x5e0
kthread+0x144/0x170
? set_kthread_struct+0x40/0x40
ret_from_fork+0x1f/0x30
irq event stamp: 19334989
hardirqs last enabled at (19334997): [<ffffffffab0e0c87>] console_unlock+0x2b7/0x400
hardirqs last disabled at (19335006): [<ffffffffab0e0d0d>] console_unlock+0x33d/0x400
softirqs last enabled at (19334900): [<ffffffffaba0030d>] __do_softirq+0x30d/0x574
softirqs last disabled at (19334893): [<ffffffffab0721ec>] irq_exit_rcu+0x12c/0x140
---[ end trace 45939e308e0dd3c7 ]---
BTRFS: error (device vdd) in btrfs_run_delayed_refs:2150: errno=-28 No space left
BTRFS info (device vdd): forced readonly
BTRFS warning (device vdd): failed setting block group ro: -30
BTRFS info (device vdd): suspending dev_replace for unmount
assertion failed: !test_bit(BTRFS_DEV_STATE_REPLACE_TGT, &device->dev_state), in fs/btrfs/volumes.c:1150
------------[ cut here ]------------
kernel BUG at fs/btrfs/ctree.h:3431!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 1 PID: 3982 Comm: umount Tainted: G W 5.14.0-rc5-default+ #1532
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-59-gc9ba527-rebuilt.opensuse.org 04/01/2014
RIP: 0010:assertfail.constprop.0+0x18/0x1a [btrfs]
RSP: 0018:ffffb7a5454c7db8 EFLAGS: 00010246
RAX: 0000000000000068 RBX: ffff978364b91c00 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffffabee13c4 RDI: 00000000ffffffff
RBP: ffff9783523a4c00 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff9783523a4d18
R13: 0000000000000000 R14: 0000000000000004 R15: 0000000000000003
FS: 00007f61c8f42800(0000) GS:ffff9783bd800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056190cffa810 CR3: 0000000030b96002 CR4: 0000000000170ea0
Call Trace:
btrfs_close_one_device.cold+0x11/0x55 [btrfs]
close_fs_devices+0x44/0xb0 [btrfs]
btrfs_close_devices+0x48/0x160 [btrfs]
generic_shutdown_super+0x69/0x100
kill_anon_super+0x14/0x30
btrfs_kill_super+0x12/0x20 [btrfs]
deactivate_locked_super+0x2c/0xa0
cleanup_mnt+0x144/0x1b0
task_work_run+0x59/0xa0
exit_to_user_mode_loop+0xe7/0xf0
exit_to_user_mode_prepare+0xaf/0xf0
syscall_exit_to_user_mode+0x19/0x50
do_syscall_64+0x4a/0x90
entry_SYSCALL_64_after_hwframe+0x44/0xae
This happens when close_ctree is called while a dev_replace hasn't
completed. In close_ctree, we suspend the dev_replace, but keep the
replace target around so that we can resume the dev_replace procedure
when we mount the root again. This is the call trace:
close_ctree():
btrfs_dev_replace_suspend_for_unmount();
btrfs_close_devices():
btrfs_close_fs_devices():
btrfs_close_one_device():
ASSERT(!test_bit(BTRFS_DEV_STATE_REPLACE_TGT,
&device->dev_state));
However, since the replace target sticks around, there is a device
with BTRFS_DEV_STATE_REPLACE_TGT set on close, and we fail the
assertion in btrfs_close_one_device.
To fix this, if we come across the replace target device when
closing, we should properly reset it back to allocation state. This
fix also ensures that if a non-target device has a corrupted state and
has the BTRFS_DEV_STATE_REPLACE_TGT bit set, the assertion will still
catch the error.
Reported-by: David Sterba <dsterba@suse.com>
Fixes: b2a616676839 ("btrfs: fix rw device counting in __btrfs_free_extra_devids")
CC: stable@vger.kernel.org # 4.19+
Reviewed-by: Anand Jain <anand.jain@oracle.com>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
fs/btrfs/volumes.c | 3 +++
1 file changed, 3 insertions(+)
--- a/fs/btrfs/volumes.c
+++ b/fs/btrfs/volumes.c
@@ -1130,6 +1130,9 @@ static void btrfs_close_one_device(struc
fs_devices->rw_devices--;
}
+ if (device->devid == BTRFS_DEV_REPLACE_DEVID)
+ clear_bit(BTRFS_DEV_STATE_REPLACE_TGT, &device->dev_state);
+
if (test_bit(BTRFS_DEV_STATE_MISSING, &device->dev_state))
fs_devices->missing_devices--;
^ permalink raw reply [relevance 10%]
* [PATCH 5.13 256/380] Bluetooth: schedule SCO timeouts with delayed_work
2021-09-16 15:55 7% [PATCH 5.13 000/380] 5.13.19-rc1 review Greg Kroah-Hartman
` (5 preceding siblings ...)
2021-09-16 16:00 12% ` [PATCH 5.13 254/380] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Greg Kroah-Hartman
@ 2021-09-16 16:00 10% ` Greg Kroah-Hartman
2021-09-16 16:00 9% ` [PATCH 5.13 257/380] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 16:00 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+2f6d7c28bb4bf7e82060,
Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit ba316be1b6a00db7126ed9a39f9bee434a508043 ]
struct sock.sk_timer should be used as a sock cleanup timer. However,
SCO uses it to implement sock timeouts.
This causes issues because struct sock.sk_timer's callback is run in
an IRQ context, and the timer callback function sco_sock_timeout takes
a spin lock on the socket. However, other functions such as
sco_conn_del and sco_conn_ready take the spin lock with interrupts
enabled.
This inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} lock usage could
lead to deadlocks as reported by Syzbot [1]:
CPU0
----
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
<Interrupt>
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
To fix this, we use delayed work to implement SCO sock timouts
instead. This allows us to avoid taking the spin lock on the socket in
an IRQ context, and corrects the misuse of struct sock.sk_timer.
As a note, cancel_delayed_work is used instead of
cancel_delayed_work_sync in sco_sock_set_timer and
sco_sock_clear_timer to avoid a deadlock. In the future, the call to
bh_lock_sock inside sco_sock_timeout should be changed to lock_sock to
synchronize with other functions using lock_sock. However, since
sco_sock_set_timer and sco_sock_clear_timer are sometimes called under
the locked socket (in sco_connect and __sco_sock_close),
cancel_delayed_work_sync might cause them to sleep until an
sco_sock_timeout that has started finishes running. But
sco_sock_timeout would also sleep until it can grab the lock_sock.
Using cancel_delayed_work is fine because sco_sock_timeout does not
change from run to run, hence there is no functional difference
between:
1. waiting for a timeout to finish running before scheduling another
timeout
2. scheduling another timeout while a timeout is running.
Link: https://syzkaller.appspot.com/bug?id=9089d89de0502e120f234ca0fc8a703f7368b31e [1]
Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Tested-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 35 +++++++++++++++++++++++++++++------
1 file changed, 29 insertions(+), 6 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 9769a7ceb689..04deea76b52b 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -48,6 +48,8 @@ struct sco_conn {
spinlock_t lock;
struct sock *sk;
+ struct delayed_work timeout_work;
+
unsigned int mtu;
};
@@ -74,9 +76,20 @@ struct sco_pinfo {
#define SCO_CONN_TIMEOUT (HZ * 40)
#define SCO_DISCONN_TIMEOUT (HZ * 2)
-static void sco_sock_timeout(struct timer_list *t)
+static void sco_sock_timeout(struct work_struct *work)
{
- struct sock *sk = from_timer(sk, t, sk_timer);
+ struct sco_conn *conn = container_of(work, struct sco_conn,
+ timeout_work.work);
+ struct sock *sk;
+
+ sco_conn_lock(conn);
+ sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
+ sco_conn_unlock(conn);
+
+ if (!sk)
+ return;
BT_DBG("sock %p state %d", sk, sk->sk_state);
@@ -90,14 +103,21 @@ static void sco_sock_timeout(struct timer_list *t)
static void sco_sock_set_timer(struct sock *sk, long timeout)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d timeout %ld", sk, sk->sk_state, timeout);
- sk_reset_timer(sk, &sk->sk_timer, jiffies + timeout);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
+ schedule_delayed_work(&sco_pi(sk)->conn->timeout_work, timeout);
}
static void sco_sock_clear_timer(struct sock *sk)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d", sk, sk->sk_state);
- sk_stop_timer(sk, &sk->sk_timer);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
}
/* ---- SCO connections ---- */
@@ -177,6 +197,9 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_chan_del(sk, err);
bh_unlock_sock(sk);
sock_put(sk);
+
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
}
hcon->sco_data = NULL;
@@ -191,6 +214,8 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
+
if (parent)
bt_accept_enqueue(parent, sk, true);
}
@@ -496,8 +521,6 @@ static struct sock *sco_sock_alloc(struct net *net, struct socket *sock,
sco_pi(sk)->setting = BT_VOICE_CVSD_16BIT;
- timer_setup(&sk->sk_timer, sco_sock_timeout, 0);
-
bt_sock_link(&sco_sk_list, sk);
return sk;
}
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH 5.13 257/380] Bluetooth: avoid circular locks in sco_sock_connect
2021-09-16 15:55 7% [PATCH 5.13 000/380] 5.13.19-rc1 review Greg Kroah-Hartman
` (6 preceding siblings ...)
2021-09-16 16:00 10% ` [PATCH 5.13 256/380] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
@ 2021-09-16 16:00 9% ` Greg Kroah-Hartman
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 16:00 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 04deea76b52b..bd0d616dbc37 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -235,44 +235,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -280,7 +268,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -290,9 +278,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -585,6 +570,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -599,12 +585,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH 5.13 254/380] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
2021-09-16 15:55 7% [PATCH 5.13 000/380] 5.13.19-rc1 review Greg Kroah-Hartman
` (4 preceding siblings ...)
2021-09-16 15:59 11% ` [PATCH 5.13 212/380] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
@ 2021-09-16 16:00 12% ` Greg Kroah-Hartman
2021-09-16 16:00 10% ` [PATCH 5.13 256/380] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
2021-09-16 16:00 9% ` [PATCH 5.13 257/380] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 16:00 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Daniel Vetter,
Zack Rusin, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2bc5da528dd570c5ecabc107e6fbdbc55974276f ]
drm_file.master should be protected by either drm_device.master_mutex
or drm_file.master_lookup_lock when being dereferenced. However,
drm_master_get is called on unprotected file_priv->master pointers in
vmw_surface_define_ioctl and vmw_gb_surface_define_internal.
This is fixed by replacing drm_master_get with drm_file_get_master.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Reviewed-by: Zack Rusin <zackr@vmware.com>
Signed-off-by: Zack Rusin <zackr@vmware.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20210724111824.59266-4-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
index 5ff88f8c2382..0c62cd400b64 100644
--- a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
+++ b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
@@ -869,7 +869,7 @@ int vmw_surface_define_ioctl(struct drm_device *dev, void *data,
user_srf->prime.base.shareable = false;
user_srf->prime.base.tfile = NULL;
if (drm_is_primary_client(file_priv))
- user_srf->master = drm_master_get(file_priv->master);
+ user_srf->master = drm_file_get_master(file_priv);
/**
* From this point, the generic resource management functions
@@ -1540,7 +1540,7 @@ vmw_gb_surface_define_internal(struct drm_device *dev,
user_srf = container_of(srf, struct vmw_user_surface, srf);
if (drm_is_primary_client(file_priv))
- user_srf->master = drm_master_get(file_priv->master);
+ user_srf->master = drm_file_get_master(file_priv);
ret = ttm_read_lock(&dev_priv->reservation_sem, true);
if (unlikely(ret != 0))
--
2.30.2
^ permalink raw reply related [relevance 12%]
* [PATCH 5.13 212/380] Bluetooth: skip invalid hci_sync_conn_complete_evt
2021-09-16 15:55 7% [PATCH 5.13 000/380] 5.13.19-rc1 review Greg Kroah-Hartman
` (3 preceding siblings ...)
2021-09-16 15:58 8% ` [PATCH 5.13 167/380] drm: protect drm_master pointers in drm_lease.c Greg Kroah-Hartman
@ 2021-09-16 15:59 11% ` Greg Kroah-Hartman
2021-09-16 16:00 12% ` [PATCH 5.13 254/380] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Greg Kroah-Hartman
` (2 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:59 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+66264bf2fd0476be7e6c,
Desmond Cheong Zhi Xi, Marcel Holtmann, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index 62c99e015609..c5de24372971 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -4373,6 +4373,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.13 167/380] drm: protect drm_master pointers in drm_lease.c
2021-09-16 15:55 7% [PATCH 5.13 000/380] 5.13.19-rc1 review Greg Kroah-Hartman
` (2 preceding siblings ...)
2021-09-16 15:58 10% ` [PATCH 5.13 166/380] drm: serialize drm_file.master with a new spinlock Greg Kroah-Hartman
@ 2021-09-16 15:58 8% ` Greg Kroah-Hartman
2021-09-16 15:59 11% ` [PATCH 5.13 212/380] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
` (3 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:58 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Daniel Vetter, Desmond Cheong Zhi Xi,
Emil Velikov, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 56f0729a510f92151682ff6c89f69724d5595d6e ]
drm_file->master pointers should be protected by
drm_device.master_mutex or drm_file.master_lookup_lock when being
dereferenced.
However, in drm_lease.c, there are multiple instances where
drm_file->master is accessed and dereferenced while neither lock is
held. This makes drm_lease.c vulnerable to use-after-free bugs.
We address this issue in 2 ways:
1. Add a new drm_file_get_master() function that calls drm_master_get
on drm_file->master while holding on to
drm_file.master_lookup_lock. Since drm_master_get increments the
reference count of master, this prevents master from being freed until
we unreference it with drm_master_put.
2. In each case where drm_file->master is directly accessed and
eventually dereferenced in drm_lease.c, we wrap the access in a call
to the new drm_file_get_master function, then unreference the master
pointer once we are done using it.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Emil Velikov <emil.l.velikov@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-6-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_auth.c | 25 ++++++++++++
drivers/gpu/drm/drm_lease.c | 81 ++++++++++++++++++++++++++++---------
include/drm/drm_auth.h | 1 +
include/drm/drm_file.h | 6 +++
4 files changed, 93 insertions(+), 20 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index 0024ad93d24b..c7adbeaf10b1 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -376,6 +376,31 @@ struct drm_master *drm_master_get(struct drm_master *master)
}
EXPORT_SYMBOL(drm_master_get);
+/**
+ * drm_file_get_master - reference &drm_file.master of @file_priv
+ * @file_priv: DRM file private
+ *
+ * Increments the reference count of @file_priv's &drm_file.master and returns
+ * the &drm_file.master. If @file_priv has no &drm_file.master, returns NULL.
+ *
+ * Master pointers returned from this function should be unreferenced using
+ * drm_master_put().
+ */
+struct drm_master *drm_file_get_master(struct drm_file *file_priv)
+{
+ struct drm_master *master = NULL;
+
+ spin_lock(&file_priv->master_lookup_lock);
+ if (!file_priv->master)
+ goto unlock;
+ master = drm_master_get(file_priv->master);
+
+unlock:
+ spin_unlock(&file_priv->master_lookup_lock);
+ return master;
+}
+EXPORT_SYMBOL(drm_file_get_master);
+
static void drm_master_destroy(struct kref *kref)
{
struct drm_master *master = container_of(kref, struct drm_master, refcount);
diff --git a/drivers/gpu/drm/drm_lease.c b/drivers/gpu/drm/drm_lease.c
index da4f085fc09e..aef22634005e 100644
--- a/drivers/gpu/drm/drm_lease.c
+++ b/drivers/gpu/drm/drm_lease.c
@@ -107,10 +107,19 @@ static bool _drm_has_leased(struct drm_master *master, int id)
*/
bool _drm_lease_held(struct drm_file *file_priv, int id)
{
- if (!file_priv || !file_priv->master)
+ bool ret;
+ struct drm_master *master;
+
+ if (!file_priv)
return true;
- return _drm_lease_held_master(file_priv->master, id);
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return true;
+ ret = _drm_lease_held_master(master, id);
+ drm_master_put(&master);
+
+ return ret;
}
/**
@@ -129,13 +138,22 @@ bool drm_lease_held(struct drm_file *file_priv, int id)
struct drm_master *master;
bool ret;
- if (!file_priv || !file_priv->master || !file_priv->master->lessor)
+ if (!file_priv)
return true;
- master = file_priv->master;
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return true;
+ if (!master->lessor) {
+ ret = true;
+ goto out;
+ }
mutex_lock(&master->dev->mode_config.idr_mutex);
ret = _drm_lease_held_master(master, id);
mutex_unlock(&master->dev->mode_config.idr_mutex);
+
+out:
+ drm_master_put(&master);
return ret;
}
@@ -155,10 +173,16 @@ uint32_t drm_lease_filter_crtcs(struct drm_file *file_priv, uint32_t crtcs_in)
int count_in, count_out;
uint32_t crtcs_out = 0;
- if (!file_priv || !file_priv->master || !file_priv->master->lessor)
+ if (!file_priv)
return crtcs_in;
- master = file_priv->master;
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return crtcs_in;
+ if (!master->lessor) {
+ crtcs_out = crtcs_in;
+ goto out;
+ }
dev = master->dev;
count_in = count_out = 0;
@@ -177,6 +201,9 @@ uint32_t drm_lease_filter_crtcs(struct drm_file *file_priv, uint32_t crtcs_in)
count_in++;
}
mutex_unlock(&master->dev->mode_config.idr_mutex);
+
+out:
+ drm_master_put(&master);
return crtcs_out;
}
@@ -490,7 +517,7 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
size_t object_count;
int ret = 0;
struct idr leases;
- struct drm_master *lessor = lessor_priv->master;
+ struct drm_master *lessor;
struct drm_master *lessee = NULL;
struct file *lessee_file = NULL;
struct file *lessor_file = lessor_priv->filp;
@@ -502,12 +529,6 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
- /* Do not allow sub-leases */
- if (lessor->lessor) {
- DRM_DEBUG_LEASE("recursive leasing not allowed\n");
- return -EINVAL;
- }
-
/* need some objects */
if (cl->object_count == 0) {
DRM_DEBUG_LEASE("no objects in lease\n");
@@ -519,12 +540,22 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
return -EINVAL;
}
+ lessor = drm_file_get_master(lessor_priv);
+ /* Do not allow sub-leases */
+ if (lessor->lessor) {
+ DRM_DEBUG_LEASE("recursive leasing not allowed\n");
+ ret = -EINVAL;
+ goto out_lessor;
+ }
+
object_count = cl->object_count;
object_ids = memdup_user(u64_to_user_ptr(cl->object_ids),
array_size(object_count, sizeof(__u32)));
- if (IS_ERR(object_ids))
- return PTR_ERR(object_ids);
+ if (IS_ERR(object_ids)) {
+ ret = PTR_ERR(object_ids);
+ goto out_lessor;
+ }
idr_init(&leases);
@@ -535,14 +566,15 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
if (ret) {
DRM_DEBUG_LEASE("lease object lookup failed: %i\n", ret);
idr_destroy(&leases);
- return ret;
+ goto out_lessor;
}
/* Allocate a file descriptor for the lease */
fd = get_unused_fd_flags(cl->flags & (O_CLOEXEC | O_NONBLOCK));
if (fd < 0) {
idr_destroy(&leases);
- return fd;
+ ret = fd;
+ goto out_lessor;
}
DRM_DEBUG_LEASE("Creating lease\n");
@@ -578,6 +610,7 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
/* Hook up the fd */
fd_install(fd, lessee_file);
+ drm_master_put(&lessor);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl succeeded\n");
return 0;
@@ -587,6 +620,8 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
out_leases:
put_unused_fd(fd);
+out_lessor:
+ drm_master_put(&lessor);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl failed: %d\n", ret);
return ret;
}
@@ -609,7 +644,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
struct drm_mode_list_lessees *arg = data;
__u32 __user *lessee_ids = (__u32 __user *) (uintptr_t) (arg->lessees_ptr);
__u32 count_lessees = arg->count_lessees;
- struct drm_master *lessor = lessor_priv->master, *lessee;
+ struct drm_master *lessor, *lessee;
int count;
int ret = 0;
@@ -620,6 +655,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessor = drm_file_get_master(lessor_priv);
DRM_DEBUG_LEASE("List lessees for %d\n", lessor->lessee_id);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -643,6 +679,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
arg->count_lessees = count;
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessor);
return ret;
}
@@ -662,7 +699,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
struct drm_mode_get_lease *arg = data;
__u32 __user *object_ids = (__u32 __user *) (uintptr_t) (arg->objects_ptr);
__u32 count_objects = arg->count_objects;
- struct drm_master *lessee = lessee_priv->master;
+ struct drm_master *lessee;
struct idr *object_idr;
int count;
void *entry;
@@ -676,6 +713,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessee = drm_file_get_master(lessee_priv);
DRM_DEBUG_LEASE("get lease for %d\n", lessee->lessee_id);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -703,6 +741,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
arg->count_objects = count;
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessee);
return ret;
}
@@ -721,7 +760,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
void *data, struct drm_file *lessor_priv)
{
struct drm_mode_revoke_lease *arg = data;
- struct drm_master *lessor = lessor_priv->master;
+ struct drm_master *lessor;
struct drm_master *lessee;
int ret = 0;
@@ -731,6 +770,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessor = drm_file_get_master(lessor_priv);
mutex_lock(&dev->mode_config.idr_mutex);
lessee = _drm_find_lessee(lessor, arg->lessee_id);
@@ -751,6 +791,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
fail:
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessor);
return ret;
}
diff --git a/include/drm/drm_auth.h b/include/drm/drm_auth.h
index 6bf8b2b78991..f99d3417f304 100644
--- a/include/drm/drm_auth.h
+++ b/include/drm/drm_auth.h
@@ -107,6 +107,7 @@ struct drm_master {
};
struct drm_master *drm_master_get(struct drm_master *master);
+struct drm_master *drm_file_get_master(struct drm_file *file_priv);
void drm_master_put(struct drm_master **master);
bool drm_is_current_master(struct drm_file *fpriv);
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index 9b82988e3427..726cfe0ff5f5 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -233,6 +233,12 @@ struct drm_file {
* this only matches &drm_device.master if the master is the currently
* active one.
*
+ * When dereferencing this pointer, either hold struct
+ * &drm_device.master_mutex for the duration of the pointer's use, or
+ * use drm_file_get_master() if struct &drm_device.master_mutex is not
+ * currently held and there is no other need to hold it. This prevents
+ * @master from being freed during use.
+ *
* See also @authentication and @is_master and the :ref:`section on
* primary nodes and authentication <drm_primary_node>`.
*/
--
2.30.2
^ permalink raw reply related [relevance 8%]
* [PATCH 5.13 166/380] drm: serialize drm_file.master with a new spinlock
2021-09-16 15:55 7% [PATCH 5.13 000/380] 5.13.19-rc1 review Greg Kroah-Hartman
2021-09-16 15:56 10% ` [PATCH 5.13 008/380] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
2021-09-16 15:58 11% ` [PATCH 5.13 165/380] drm: avoid blocking in drm_clients_infos rcu section Greg Kroah-Hartman
@ 2021-09-16 15:58 10% ` Greg Kroah-Hartman
2021-09-16 15:58 8% ` [PATCH 5.13 167/380] drm: protect drm_master pointers in drm_lease.c Greg Kroah-Hartman
` (4 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:58 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Daniel Vetter, Desmond Cheong Zhi Xi,
Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 0b0860a3cf5eccf183760b1177a1dcdb821b0b66 ]
Currently, drm_file.master pointers should be protected by
drm_device.master_mutex when being dereferenced. This is because
drm_file.master is not invariant for the lifetime of drm_file. If
drm_file is not the creator of master, then drm_file.is_master is
false, and a call to drm_setmaster_ioctl will invoke
drm_new_set_master, which then allocates a new master for drm_file and
puts the old master.
Thus, without holding drm_device.master_mutex, the old value of
drm_file.master could be freed while it is being used by another
concurrent process.
However, it is not always possible to lock drm_device.master_mutex to
dereference drm_file.master. Through the fbdev emulation code, this
might occur in a deep nest of other locks. But drm_device.master_mutex
is also the outermost lock in the nesting hierarchy, so this leads to
potential deadlocks.
To address this, we introduce a new spin lock at the bottom of the
lock hierarchy that only serializes drm_file.master. With this change,
the value of drm_file.master changes only when both
drm_device.master_mutex and drm_file.master_lookup_lock are
held. Hence, any process holding either of those locks can ensure that
the value of drm_file.master will not change concurrently.
Since no lock depends on the new drm_file.master_lookup_lock, when
drm_file.master is dereferenced, but drm_device.master_mutex cannot be
held, we can safely protect the master pointer with
drm_file.master_lookup_lock.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-5-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_auth.c | 17 +++++++++++------
drivers/gpu/drm/drm_file.c | 1 +
include/drm/drm_file.h | 12 +++++++++---
3 files changed, 21 insertions(+), 9 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index 232abbba3686..0024ad93d24b 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -135,16 +135,18 @@ static void drm_set_master(struct drm_device *dev, struct drm_file *fpriv,
static int drm_new_set_master(struct drm_device *dev, struct drm_file *fpriv)
{
struct drm_master *old_master;
+ struct drm_master *new_master;
lockdep_assert_held_once(&dev->master_mutex);
WARN_ON(fpriv->is_master);
old_master = fpriv->master;
- fpriv->master = drm_master_create(dev);
- if (!fpriv->master) {
- fpriv->master = old_master;
+ new_master = drm_master_create(dev);
+ if (!new_master)
return -ENOMEM;
- }
+ spin_lock(&fpriv->master_lookup_lock);
+ fpriv->master = new_master;
+ spin_unlock(&fpriv->master_lookup_lock);
fpriv->is_master = 1;
fpriv->authenticated = 1;
@@ -302,10 +304,13 @@ int drm_master_open(struct drm_file *file_priv)
/* if there is no current master make this fd it, but do not create
* any master object for render clients */
mutex_lock(&dev->master_mutex);
- if (!dev->master)
+ if (!dev->master) {
ret = drm_new_set_master(dev, file_priv);
- else
+ } else {
+ spin_lock(&file_priv->master_lookup_lock);
file_priv->master = drm_master_get(dev->master);
+ spin_unlock(&file_priv->master_lookup_lock);
+ }
mutex_unlock(&dev->master_mutex);
return ret;
diff --git a/drivers/gpu/drm/drm_file.c b/drivers/gpu/drm/drm_file.c
index 7efbccffc2ea..c6feeb5651b0 100644
--- a/drivers/gpu/drm/drm_file.c
+++ b/drivers/gpu/drm/drm_file.c
@@ -176,6 +176,7 @@ struct drm_file *drm_file_alloc(struct drm_minor *minor)
init_waitqueue_head(&file->event_wait);
file->event_space = 4096; /* set aside 4k for event buffer */
+ spin_lock_init(&file->master_lookup_lock);
mutex_init(&file->event_read_lock);
if (drm_core_check_feature(dev, DRIVER_GEM))
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index b81b3bfb08c8..9b82988e3427 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -226,15 +226,21 @@ struct drm_file {
/**
* @master:
*
- * Master this node is currently associated with. Only relevant if
- * drm_is_primary_client() returns true. Note that this only
- * matches &drm_device.master if the master is the currently active one.
+ * Master this node is currently associated with. Protected by struct
+ * &drm_device.master_mutex, and serialized by @master_lookup_lock.
+ *
+ * Only relevant if drm_is_primary_client() returns true. Note that
+ * this only matches &drm_device.master if the master is the currently
+ * active one.
*
* See also @authentication and @is_master and the :ref:`section on
* primary nodes and authentication <drm_primary_node>`.
*/
struct drm_master *master;
+ /** @master_lock: Serializes @master. */
+ spinlock_t master_lookup_lock;
+
/** @pid: Process that opened this file. */
struct pid *pid;
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH 5.13 165/380] drm: avoid blocking in drm_clients_infos rcu section
2021-09-16 15:55 7% [PATCH 5.13 000/380] 5.13.19-rc1 review Greg Kroah-Hartman
2021-09-16 15:56 10% ` [PATCH 5.13 008/380] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
@ 2021-09-16 15:58 11% ` Greg Kroah-Hartman
2021-09-16 15:58 10% ` [PATCH 5.13 166/380] drm: serialize drm_file.master with a new spinlock Greg Kroah-Hartman
` (5 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:58 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Daniel Vetter,
Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 5eff9585de220cdd131237f5665db5e6c6bdf590 ]
Inside drm_clients_info, the rcu_read_lock is held to lock
pid_task()->comm. However, within this protected section, a call to
drm_is_current_master is made, which involves a mutex lock in a future
patch. However, this is illegal because the mutex lock might block
while in the RCU read-side critical section.
Since drm_is_current_master isn't protected by rcu_read_lock, we avoid
this by moving it out of the RCU critical section.
The following report came from intel-gfx ci's
igt@debugfs_test@read_all_entries testcase:
=============================
[ BUG: Invalid wait context ]
5.13.0-CI-Patchwork_20515+ #1 Tainted: G W
-----------------------------
debugfs_test/1101 is trying to lock:
ffff888132d901a8 (&dev->master_mutex){+.+.}-{3:3}, at:
drm_is_current_master+0x1e/0x50
other info that might help us debug this:
context-{4:4}
3 locks held by debugfs_test/1101:
#0: ffff88810fdffc90 (&p->lock){+.+.}-{3:3}, at:
seq_read_iter+0x53/0x3b0
#1: ffff888132d90240 (&dev->filelist_mutex){+.+.}-{3:3}, at:
drm_clients_info+0x63/0x2a0
#2: ffffffff82734220 (rcu_read_lock){....}-{1:2}, at:
drm_clients_info+0x1b1/0x2a0
stack backtrace:
CPU: 8 PID: 1101 Comm: debugfs_test Tainted: G W
5.13.0-CI-Patchwork_20515+ #1
Hardware name: Intel Corporation CometLake Client Platform/CometLake S
UDIMM (ERB/CRB), BIOS CMLSFWR1.R00.1263.D00.1906260926 06/26/2019
Call Trace:
dump_stack+0x7f/0xad
__lock_acquire.cold.78+0x2af/0x2ca
lock_acquire+0xd3/0x300
? drm_is_current_master+0x1e/0x50
? __mutex_lock+0x76/0x970
? lockdep_hardirqs_on+0xbf/0x130
__mutex_lock+0xab/0x970
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
drm_is_current_master+0x1e/0x50
drm_clients_info+0x107/0x2a0
seq_read_iter+0x178/0x3b0
seq_read+0x104/0x150
full_proxy_read+0x4e/0x80
vfs_read+0xa5/0x1b0
ksys_read+0x5a/0xd0
do_syscall_64+0x39/0xb0
entry_SYSCALL_64_after_hwframe+0x44/0xae
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-3-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_debugfs.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/gpu/drm/drm_debugfs.c b/drivers/gpu/drm/drm_debugfs.c
index 3d7182001004..b0a826489488 100644
--- a/drivers/gpu/drm/drm_debugfs.c
+++ b/drivers/gpu/drm/drm_debugfs.c
@@ -91,6 +91,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
mutex_lock(&dev->filelist_mutex);
list_for_each_entry_reverse(priv, &dev->filelist, lhead) {
struct task_struct *task;
+ bool is_current_master = drm_is_current_master(priv);
rcu_read_lock(); /* locks pid_task()->comm */
task = pid_task(priv->pid, PIDTYPE_PID);
@@ -99,7 +100,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
task ? task->comm : "<unknown>",
pid_vnr(priv->pid),
priv->minor->index,
- drm_is_current_master(priv) ? 'y' : 'n',
+ is_current_master ? 'y' : 'n',
priv->authenticated ? 'y' : 'n',
from_kuid_munged(seq_user_ns(m), uid),
priv->magic);
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.13 008/380] btrfs: reset replace target device to allocation state on close
2021-09-16 15:55 7% [PATCH 5.13 000/380] 5.13.19-rc1 review Greg Kroah-Hartman
@ 2021-09-16 15:56 10% ` Greg Kroah-Hartman
2021-09-16 15:58 11% ` [PATCH 5.13 165/380] drm: avoid blocking in drm_clients_infos rcu section Greg Kroah-Hartman
` (6 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:56 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, David Sterba, Anand Jain,
Desmond Cheong Zhi Xi
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
commit 0d977e0eba234e01a60bdde27314dc21374201b3 upstream.
This crash was observed with a failed assertion on device close:
BTRFS: Transaction aborted (error -28)
WARNING: CPU: 1 PID: 3902 at fs/btrfs/extent-tree.c:2150 btrfs_run_delayed_refs+0x1d2/0x1e0 [btrfs]
Modules linked in: btrfs blake2b_generic libcrc32c crc32c_intel xor zstd_decompress zstd_compress xxhash lzo_compress lzo_decompress raid6_pq loop
CPU: 1 PID: 3902 Comm: kworker/u8:4 Not tainted 5.14.0-rc5-default+ #1532
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-59-gc9ba527-rebuilt.opensuse.org 04/01/2014
Workqueue: events_unbound btrfs_async_reclaim_metadata_space [btrfs]
RIP: 0010:btrfs_run_delayed_refs+0x1d2/0x1e0 [btrfs]
RSP: 0018:ffffb7a5452d7d80 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffabee13c4 RDI: 00000000ffffffff
RBP: ffff97834176a378 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff97835195d388
R13: 0000000005b08000 R14: ffff978385484000 R15: 000000000000016c
FS: 0000000000000000(0000) GS:ffff9783bd800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056190d003fe8 CR3: 000000002a81e005 CR4: 0000000000170ea0
Call Trace:
flush_space+0x197/0x2f0 [btrfs]
btrfs_async_reclaim_metadata_space+0x139/0x300 [btrfs]
process_one_work+0x262/0x5e0
worker_thread+0x4c/0x320
? process_one_work+0x5e0/0x5e0
kthread+0x144/0x170
? set_kthread_struct+0x40/0x40
ret_from_fork+0x1f/0x30
irq event stamp: 19334989
hardirqs last enabled at (19334997): [<ffffffffab0e0c87>] console_unlock+0x2b7/0x400
hardirqs last disabled at (19335006): [<ffffffffab0e0d0d>] console_unlock+0x33d/0x400
softirqs last enabled at (19334900): [<ffffffffaba0030d>] __do_softirq+0x30d/0x574
softirqs last disabled at (19334893): [<ffffffffab0721ec>] irq_exit_rcu+0x12c/0x140
---[ end trace 45939e308e0dd3c7 ]---
BTRFS: error (device vdd) in btrfs_run_delayed_refs:2150: errno=-28 No space left
BTRFS info (device vdd): forced readonly
BTRFS warning (device vdd): failed setting block group ro: -30
BTRFS info (device vdd): suspending dev_replace for unmount
assertion failed: !test_bit(BTRFS_DEV_STATE_REPLACE_TGT, &device->dev_state), in fs/btrfs/volumes.c:1150
------------[ cut here ]------------
kernel BUG at fs/btrfs/ctree.h:3431!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 1 PID: 3982 Comm: umount Tainted: G W 5.14.0-rc5-default+ #1532
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-59-gc9ba527-rebuilt.opensuse.org 04/01/2014
RIP: 0010:assertfail.constprop.0+0x18/0x1a [btrfs]
RSP: 0018:ffffb7a5454c7db8 EFLAGS: 00010246
RAX: 0000000000000068 RBX: ffff978364b91c00 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffffabee13c4 RDI: 00000000ffffffff
RBP: ffff9783523a4c00 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff9783523a4d18
R13: 0000000000000000 R14: 0000000000000004 R15: 0000000000000003
FS: 00007f61c8f42800(0000) GS:ffff9783bd800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056190cffa810 CR3: 0000000030b96002 CR4: 0000000000170ea0
Call Trace:
btrfs_close_one_device.cold+0x11/0x55 [btrfs]
close_fs_devices+0x44/0xb0 [btrfs]
btrfs_close_devices+0x48/0x160 [btrfs]
generic_shutdown_super+0x69/0x100
kill_anon_super+0x14/0x30
btrfs_kill_super+0x12/0x20 [btrfs]
deactivate_locked_super+0x2c/0xa0
cleanup_mnt+0x144/0x1b0
task_work_run+0x59/0xa0
exit_to_user_mode_loop+0xe7/0xf0
exit_to_user_mode_prepare+0xaf/0xf0
syscall_exit_to_user_mode+0x19/0x50
do_syscall_64+0x4a/0x90
entry_SYSCALL_64_after_hwframe+0x44/0xae
This happens when close_ctree is called while a dev_replace hasn't
completed. In close_ctree, we suspend the dev_replace, but keep the
replace target around so that we can resume the dev_replace procedure
when we mount the root again. This is the call trace:
close_ctree():
btrfs_dev_replace_suspend_for_unmount();
btrfs_close_devices():
btrfs_close_fs_devices():
btrfs_close_one_device():
ASSERT(!test_bit(BTRFS_DEV_STATE_REPLACE_TGT,
&device->dev_state));
However, since the replace target sticks around, there is a device
with BTRFS_DEV_STATE_REPLACE_TGT set on close, and we fail the
assertion in btrfs_close_one_device.
To fix this, if we come across the replace target device when
closing, we should properly reset it back to allocation state. This
fix also ensures that if a non-target device has a corrupted state and
has the BTRFS_DEV_STATE_REPLACE_TGT bit set, the assertion will still
catch the error.
Reported-by: David Sterba <dsterba@suse.com>
Fixes: b2a616676839 ("btrfs: fix rw device counting in __btrfs_free_extra_devids")
CC: stable@vger.kernel.org # 4.19+
Reviewed-by: Anand Jain <anand.jain@oracle.com>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
fs/btrfs/volumes.c | 3 +++
1 file changed, 3 insertions(+)
--- a/fs/btrfs/volumes.c
+++ b/fs/btrfs/volumes.c
@@ -1130,6 +1130,9 @@ static void btrfs_close_one_device(struc
fs_devices->rw_devices--;
}
+ if (device->devid == BTRFS_DEV_REPLACE_DEVID)
+ clear_bit(BTRFS_DEV_STATE_REPLACE_TGT, &device->dev_state);
+
if (test_bit(BTRFS_DEV_STATE_MISSING, &device->dev_state))
fs_devices->missing_devices--;
^ permalink raw reply [relevance 10%]
* [PATCH 5.13 000/380] 5.13.19-rc1 review
@ 2021-09-16 15:55 7% Greg Kroah-Hartman
2021-09-16 15:56 10% ` [PATCH 5.13 008/380] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
` (7 more replies)
0 siblings, 8 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:55 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.13.19 release.
There are 380 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 18 Sep 2021 15:57:06 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.13.19-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.13.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.13.19-rc1
Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
drm/panfrost: Clamp lock region to Bifrost minimum
Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
drm/panfrost: Use u64 for size in lock_region
Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
drm/panfrost: Simplify lock_region calculation
Kalyan Thota <kalyan_t@codeaurora.org>
drm/msm/disp/dpu1: add safe lut config in dpu driver
Aaron Liu <aaron.liu@amd.com>
drm/amd/display: setup system context for APUs
Jerry (Fangzhi) Zuo <Jerry.Zuo@amd.com>
drm/amd/display: Update bounding box states (v2)
Aurabindo Pillai <aurabindo.pillai@amd.com>
drm/amd/display: Update number of DCN3 clock states
xinhui pan <xinhui.pan@amd.com>
drm/amdgpu: Fix a deadlock if previous GEM object allocation fails
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix BUG_ON assert
Boris Brezillon <boris.brezillon@collabora.com>
drm/panfrost: Make sure MMU context lifetime is not bound to panfrost_priv
Rajkumar Subbiah <rsubbia@codeaurora.org>
drm/dp_mst: Fix return code on sideband message failure
David Heidelberg <david@ixit.cz>
drm/msi/mdp4: populate priv->kms in mdp4_kms_init
Thomas Zimmermann <tzimmermann@suse.de>
drm/mgag200: Select clock in PLL update functions
Song Yoong Siang <yoong.siang.song@intel.com>
net: stmmac: Fix overall budget calculation for rxtx_napi
Jan Hoffmann <jan@3e8.eu>
net: dsa: lantiq_gswip: fix maximum frame length
Kees Cook <keescook@chromium.org>
lib/test_stackinit: Fix static initializer test
Patryk Duda <pdk@semihalf.com>
platform/chrome: cros_ec_proto: Send command again when timeout occurs
sumiyawang <sumiyawang@tencent.com>
libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
Vasily Averin <vvs@virtuozzo.com>
memcg: enable accounting for pids in nested pid namespaces
Rik van Riel <riel@surriel.com>
mm,vmscan: fix divide by zero in get_scan_count
Liu Zixian <liuzixian4@huawei.com>
mm/hugetlb: initialize hugetlb_usage in mm_init
Li Zhijian <lizhijian@cn.fujitsu.com>
mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled
David Hildenbrand <david@redhat.com>
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
Mike Kravetz <mike.kravetz@oracle.com>
hugetlb: fix hugetlb cgroup refcounting during vma split
Sven Schnelle <svens@linux.ibm.com>
s390/topology: fix topology information when calling cpu hotplug notifiers
Halil Pasic <pasic@linux.ibm.com>
s390/pv: fix the forcing of the swiotlb
Pratik R. Sampat <psampat@linux.ibm.com>
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Evgeny Novikov <novikov@ispras.ru>
mtd: rawnand: intel: Fix error handling in probe
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Changes to support kdump kernel
Maciej W. Rozycki <macro@orcam.me.uk>
scsi: BusLogic: Fix missing pr_cont() use
chenying <chenying.kernel@bytedance.com>
ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
Petr Mladek <pmladek@suse.com>
printk/console: Check consistent sequence number when handling race in console_unlock()
Masahiro Yamada <masahiroy@kernel.org>
parisc: Fix compile failure when building 64-bit kernel natively
Mikulas Patocka <mpatocka@redhat.com>
parisc: fix crash with signals and alloca
Marc Zyngier <maz@kernel.org>
KVM: arm64: vgic: move irq->get_input_level into an ops structure
Guojia Liao <liaoguojia@huawei.com>
net: hns3: clean up a type mismatch warning
Yang Yingliang <yangyingliang@huawei.com>
net: w5100: check return value after calling platform_get_resource()
Haimin Zhang <tcs_kernel@tencent.com>
fix array-index-out-of-bounds in taprio_change
王贇 <yun.wang@linux.alibaba.com>
net: fix NULL pointer reference in cipso_v4_doi_free
Miaoqing Pan <miaoqing@codeaurora.org>
ath9k: fix sleeping in atomic context
Zekun Shen <bruceshenzk@gmail.com>
ath9k: fix OOB read ar9300_eeprom_restore_internal
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix missing frame timestamp for beacon/probe-resp
Chengfeng Ye <cyeaa@connect.ust.hk>
selftests/bpf: Fix potential unreleased lock
Colin Ian King <colin.king@canonical.com>
parport: remove non-zero check on count
Yevgeny Kliteynik <kliteyn@nvidia.com>
net/mlx5: DR, Enable QP retransmission
Wentao_Liang <Wentao_Liang_g@163.com>
net/mlx5: DR, fix a potential use-after-free bug
Ilan Peer <ilan.peer@intel.com>
iwlwifi: mvm: Fix scan channel flags settings
Johannes Berg <johannes.berg@intel.com>
iwlwifi: fw: correctly limit to monitor dump
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: fix access to BSS elements
Ilan Peer <ilan.peer@intel.com>
iwlwifi: mvm: Fix umac scan request probe parameters
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: avoid static queue number aliasing
Zhang Qilong <zhangqilong3@huawei.com>
iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
Ilan Peer <ilan.peer@intel.com>
iwlwifi: mvm: Do not use full SSIDs in 6GHz scan
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pcie: free RBs during configure
J. Bruce Fields <bfields@redhat.com>
nfsd: fix crash on LOCKT on reexported NFSv3
J. Bruce Fields <bfields@redhat.com>
nfs: don't atempt blocking locks on nfs reexports
Sean Keely <Sean.Keely@amd.com>
drm/amdkfd: Account for SH/SE count when setting up cu masks.
Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
ASoC: soc-pcm: protect BE dailink state changes in trigger
Xiaotan Luo <lxt@rock-chips.com>
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Sugar Zhang <sugar.zhang@rock-chips.com>
ASoC: rockchip: i2s: Fix regmap_ops hang
Chunfeng Yun <chunfeng.yun@mediatek.com>
usb: xhci-mtk: fix use-after-free of mtk->hcd
Shuah Khan <skhan@linuxfoundation.org>
usbip:vhci_hcd USB port can get stuck in the disabled state
Anirudh Rayabharam <mail@anirudhrb.com>
usbip: give back URBs for unsent unlink requests during cleanup
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: musb: musb_dsps: request_irq() after initializing musb
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: dwc3: imx8mp: request irq after initializing dwc3
Mathias Nyman <mathias.nyman@linux.intel.com>
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Ding Hui <dinghui@sangfor.com.cn>
cifs: fix wrong release in sess_alloc_buffer() failed path
Juhee Kang <claudiajkang@gmail.com>
samples: pktgen: fix to print when terminated normally
Nishad Kamdar <nishadkamdar@gmail.com>
mmc: core: Return correct emmc response in case of ioctl error
Li Zhijian <lizhijian@cn.fujitsu.com>
selftests/bpf: Enlarge select() timeout for test_maps
Thomas Hebb <tommyhebb@gmail.com>
mmc: rtsx_pci: Fix long reads when clock is prescaled
Manish Narani <manish.narani@xilinx.com>
mmc: sdhci-of-arasan: Check return value of non-void funtions
Manish Narani <manish.narani@xilinx.com>
mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP
Marc Zyngier <maz@kernel.org>
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
Gustaw Lewandowski <gustaw.lewandowski@linux.intel.com>
ASoC: Intel: Skylake: Fix passing loadable flag for module
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
soundwire: intel: fix potential race condition during power down
Marcos Paulo de Souza <mpdesouza@suse.com>
btrfs: tree-log: check btrfs_lookup_data_extent return value
Filipe Manana <fdmanana@suse.com>
btrfs: remove racy and unnecessary inode transaction update when using no-holes
Arnd Bergmann <arnd@arndb.de>
m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-pf: Fix NIX1_RX interface backpressure
Chin-Yen Lee <timlee@realtek.com>
rtw88: wow: fix size access error of probe request
Ping-Ke Shih <pkshih@realtek.com>
rtw88: wow: build wow function only if CONFIG_PM is on
Chin-Yen Lee <timlee@realtek.com>
rtw88: use read_poll_timeout instead of fixed sleep
Chris Chiu <chris.chiu@canonical.com>
rtl8xxxu: Fix the handling of TX A-MPDU aggregation
Nathan Chancellor <nathan@kernel.org>
drm/exynos: Always initialize mapping in exynos_drm_register_dma()
J. Bruce Fields <bfields@redhat.com>
lockd: lockd server-side shouldn't set fl_ops
Li Jun <jun.li@nxp.com>
usb: chipidea: host: fix port index underflow and UBSAN complains
Bob Peterson <rpeterso@redhat.com>
gfs2: Don't call dlm after protocol is unmounted
Mark Brown <broonie@kernel.org>
kselftest/arm64: pac: Fix skipping of tests on systems without PAC
Mark Brown <broonie@kernel.org>
kselftest/arm64: mte: Fix misleading output when skipping tests
Eli Cohen <elic@nvidia.com>
net: Fix offloading indirect devices dependency on qdisc order creation
Bongsu Jeon <bongsu.jeon@samsung.com>
selftests: nci: Fix the wrong condition
Bongsu Jeon <bongsu.jeon@samsung.com>
selftests: nci: Fix the code for next nlattr offset
Kees Cook <keescook@chromium.org>
staging: rts5208: Fix get_ms_information() heap buffer size
Brandon Wyman <bjwyman@gmail.com>
hwmon: (pmbus/ibm-cffps) Fix write bits for LED control
Yonghong Song <yhs@fb.com>
selftests/bpf: Fix flaky send_signal test
Yucong Sun <fallentree@fb.com>
selftests/bpf: Correctly display subtest skip status
Stefan Assmann <sassmann@kpanic.de>
iavf: use mutexes for locking of critical sections
J. Bruce Fields <bfields@redhat.com>
rpc: fix gss_svc_init cleanup on failure
Thomas Gleixner <tglx@linutronix.de>
locking/rtmutex: Set proper wait context for lockdep
Luke Hsiao <lukehsiao@google.com>
tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
Darrick J. Wong <djwong@kernel.org>
iomap: pass writeback errors to the mapping
Ulrich Hecht <uli+renesas@fpond.eu>
serial: sh-sci: fix break handling for sysrq
Rajendra Nayak <rnayak@codeaurora.org>
opp: Don't print an error if required-opps is missing
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: Fix handling of LE Enhanced Connection Complete
Sagi Grimberg <sagi@grimberg.me>
nvme: code command_id with a genctr for use-after-free validation
Sagi Grimberg <sagi@grimberg.me>
nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
Raag Jadav <raagjadav@gmail.com>
arm64: dts: ls1046a: fix eeprom entries
Tim Harvey <tharvey@gateworks.com>
arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
Tim Harvey <tharvey@gateworks.com>
arm64: dts: imx8mm-venice-gw700x: fix invalid pmic pin config
Tim Harvey <tharvey@gateworks.com>
arm64: dts: imx8mm-venice-gw700x: fix mp5416 pmic config
Thierry Reding <treding@nvidia.com>
arm64: tegra: Fix compatible string for Tegra132 CPUs
Andreas Obergschwandtner <andreas.obergschwandtner@gmail.com>
ARM: tegra: tamonten: Fix UART pad setting
Dmitry Osipenko <digetx@gmail.com>
ARM: tegra: acer-a500: Remove bogus USB VBUS regulators
Johan Almbladh <johan.almbladh@anyfinetworks.com>
mac80211: Fix monitor MTU limit so that A-MSDUs get through
Tuo Li <islituo@gmail.com>
drm/display: fix possible null-pointer dereference in dcn10_set_clock()
Tuo Li <islituo@gmail.com>
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Eran Ben Elisha <eranbe@nvidia.com>
net/mlx5: Fix variable type to match 64bit
Kuogee Hsieh <khsieh@codeaurora.org>
drm/msm/dp: do not end dp link training until video is ready
Kuogee Hsieh <khsieh@codeaurora.org>
drm/msm/dp: return correct edid checksum after corrupted edid checksum read
Kuogee Hsieh <khsieh@codeaurora.org>
drm/msm/dp: reduce link rate if failed at link training 1
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: avoid circular locks in sco_sock_connect
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: schedule SCO timeouts with delayed_work
Fabio Aiuto <fabioaiuto83@gmail.com>
staging: rtl8723bs: fix right side of condition
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
Jussi Maki <joamaki@gmail.com>
selftests/bpf: Fix xdp_tx.c prog section name
Roy Chan <roy.chan@amd.com>
drm/amd/display: fix incorrect CM/TF programming sequence in dwb
Roy Chan <roy.chan@amd.com>
drm/amd/display: fix missing writeback disablement if plane is removed
Sanjay R Mehta <sanju.mehta@amd.com>
thunderbolt: Fix port linking by checking all adapters
Quanyang Wang <quanyang.wang@windriver.com>
drm: xlnx: zynqmp: release reset to DP controller before accessing DP registers
Quanyang Wang <quanyang.wang@windriver.com>
drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock
Konrad Dybcio <konrad.dybcio@somainline.org>
drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660
David Heidelberg <david@ixit.cz>
drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
Nathan Chancellor <nathan@kernel.org>
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
Rajendra Nayak <rnayak@codeaurora.org>
nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
Georgi Djakov <georgi.djakov@linaro.org>
arm64: dts: qcom: sm8250: Fix epss_l3 unit address
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: msm8996: don't use underscore in node name
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: msm8994: don't use underscore in node name
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: sdm630: don't use underscore in node name
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: ipq6018: drop '0x' from unit address
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: sdm660: use reg value for memory node
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: ipq8074: fix pci node reg property
Sebastian Reichel <sebastian.reichel@collabora.com>
ARM: dts: imx53-ppd: Fix ACHC entry
Tony Lindgren <tony@atomide.com>
serial: 8250_omap: Handle optional overrun-throttle-ms property
Alex Elder <elder@linaro.org>
net: ipa: fix IPA v4.9 interconnects
AngeloGioacchino Del Regno <angelogioacchino.delregno@somainline.org>
arm64: dts: qcom: sdm630: Fix TLMM node and pinctrl configuration
AngeloGioacchino Del Regno <angelogioacchino.delregno@somainline.org>
arm64: dts: qcom: sdm630: Rewrite memory map
Bob Peterson <rpeterso@redhat.com>
gfs2: Fix glock recursion in freeze_go_xmote_bh
Evgeny Novikov <novikov@ispras.ru>
media: tegra-cec: Handle errors of clk_prepare_enable()
Krzysztof Hałasa <khalasa@piap.pl>
media: TDA1997x: fix tda1997x_query_dv_timings() return value
Hans Verkuil <hverkuil-cisco@xs4all.nl>
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Laurent Pinchart <laurent.pinchart@ideasonboard.com>
media: imx: imx7-media-csi: Fix buffer return upon stream start failure
Umang Jain <umang.jain@ideasonboard.com>
media: imx258: Limit the max analogue gain to 480
Laurent Pinchart <laurent.pinchart@ideasonboard.com>
media: imx258: Rectify mismatch of VTS value
Ioana Ciornei <ioana.ciornei@nxp.com>
dpaa2-switch: do not enable the DPSW at probe time
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: Fix not generating RPA when required
Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
ASoC: Intel: update sof_pcm512x quirks
Hans de Goede <hdegoede@redhat.com>
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Vidya Sagar <vidyas@nvidia.com>
arm64: tegra: Fix Tegra194 PCIe EP compatible string
Nicolas Ferre <nicolas.ferre@microchip.com>
ARM: dts: at91: use the right property for shutdown controller
Yufeng Mo <moyufeng@huawei.com>
bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_compat: use nfnetlink_unicast()
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Update AV96 adv7513 node per dtbs_check
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Set {bitclock,frame}-master phandles on ST DKx
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Set {bitclock,frame}-master phandles on DHCOM SoM
Zhen Lei <thunder.leizhen@huawei.com>
workqueue: Fix possible memory leaks in wq_numa_init()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: skip invalid hci_sync_conn_complete_evt
Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
drm: rcar-du: Shutdown the display on system shutdown
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
Martynas Pumputis <m@lambda.lt>
libbpf: Fix race when pinning maps in parallel
Juhee Kang <claudiajkang@gmail.com>
samples: bpf: Fix tracex7 error raised on the missing argument
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
staging: ks7010: Fix the initialization of the 'sleep_status' structure
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Jiri Slaby <jirislaby@kernel.org>
hvsi: don't panic on tty_register_driver failure
Jiri Slaby <jirislaby@kernel.org>
xtensa: ISS: don't panic in rs_init
Maciej W. Rozycki <macro@orcam.me.uk>
serial: 8250: Define RX trigger levels for OxSemi 950 devices
Niklas Schnelle <schnelle@linux.ibm.com>
s390: make PCI mio support a machine flag
Heiko Carstens <hca@linux.ibm.com>
s390/jump_label: print real address in a case of a jump label bug
Gustavo A. R. Silva <gustavoars@kernel.org>
flow_dissector: Fix out-of-bounds warnings
Gustavo A. R. Silva <gustavoars@kernel.org>
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
Alex Elder <elder@linaro.org>
net: ipa: fix ipa_cmd_table_valid()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: riva: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
Jernej Skrabec <jernej.skrabec@gmail.com>
arm64: dts: allwinner: h6: tanix-tx6: Fix regulator node names
Geert Uytterhoeven <geert+renesas@glider.be>
drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Do not PASS tests without actually testing the result
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix copy-and-paste error in double word test
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
Oak Zeng <Oak.Zeng@amd.com>
drm/amdgpu: Fix a printing message
Arnd Bergmann <arnd@arndb.de>
ethtool: improve compat ioctl handling
Niklas Söderlund <niklas.soderlund@corigine.com>
nfp: fix return statement in nfp_net_parse_meta()
Yang Yingliang <yangyingliang@huawei.com>
media: atomisp: pci: fix error return code in atomisp_pci_probe()
Dinghao Liu <dinghao.liu@zju.edu.cn>
media: atomisp: Fix runtime PM imbalance in atomisp_pci_probe
Evgeny Novikov <novikov@ispras.ru>
media: platform: stm32: unprepare clocks at handling errors in probe
Ezequiel Garcia <ezequiel@collabora.com>
media: hantro: vp8: Move noisy WARN_ON to vpu_debug
Oliver Logush <oliver.logush@amd.com>
drm/amd/display: Fix timer_per_pixel unit error
Shuah Khan <skhan@linuxfoundation.org>
selftests: firmware: Fix ignored return val of asprintf() warn
Eric Auger <eric.auger@redhat.com>
misc/pvpanic-pci: Allow automatic loading
Laurentiu Tudor <laurentiu.tudor@nxp.com>
bus: fsl-mc: fix mmio base address for child DPRCs
Laurentiu Tudor <laurentiu.tudor@nxp.com>
bus: fsl-mc: fix arg in call to dprc_scan_objects()
Zheyu Ma <zheyuma97@gmail.com>
tty: serial: jsm: hold port lock when reporting modem line changes
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
staging: hisilicon,hi6421-spmi-pmic.yaml: fix patternProperties
Geert Uytterhoeven <geert+renesas@glider.be>
staging: board: Fix uninitialized spinlock when attaching genpd
Jack Pham <jackp@codeaurora.org>
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Evgeny Novikov <novikov@ispras.ru>
USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
Maciej Żenczykowski <maze@google.com>
usb: gadget: u_ether: fix a potential null pointer dereference
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the actual_length of an iso packet
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
Sasha Neftin <sasha.neftin@intel.com>
igc: Check if num of q_vectors is smaller than max before array access
Zhouyi Zhou <zhouzhouyi@gmail.com>
rcu: Fix macro name CONFIG_TASKS_RCU_TRACE
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
drm: protect drm_master pointers in drm_lease.c
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
drm: serialize drm_file.master with a new spinlock
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
drm: avoid blocking in drm_clients_info's rcu section
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Smack: Fix wrong semantics in smk_access_entry()
Alex Elder <elder@linaro.org>
net: ipa: fix IPA v4.11 interconnect data
Yajun Deng <yajun.deng@linux.dev>
netlink: Deal with ESRCH error in nlmsg_notify()
KuoHsiang Chou <kuohsiang_chou@aspeedtech.com>
drm/ast: Disable fast reset after DRAM initial
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: fix a DoS bug by restricting user input
David Heidelberg <david@ixit.cz>
ARM: dts: qcom: apq8064: correct clock names
Stefan Assmann <sassmann@kpanic.de>
iavf: fix locking of critical sections
Stefan Assmann <sassmann@kpanic.de>
iavf: do not override the adapter state in the watchdog task
Jonathan Cameron <Jonathan.Cameron@huawei.com>
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Marek Vasut <marex@denx.de>
net: phy: Fix data type in DP83822 dp8382x_disable_wol()
Xin Long <lucien.xin@gmail.com>
tipc: keep the skb in rcv queue until the whole data is read
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Ani Sinha <ani@anisinha.ca>
x86/hyperv: fix for unwanted manipulation of sched_clock when TSC marked unstable
Thomas Zimmermann <tzimmermann@suse.de>
drm/vkms: Let shadow-plane helpers prepare the plane's FB
Martynas Pumputis <m@lambda.lt>
libbpf: Fix reuse of pinned map on older kernel
Tomi Valkeinen <tomi.valkeinen@ideasonboard.com>
media: ti-vpe: cal: fix queuing of the initial buffer
Tomi Valkeinen <tomi.valkeinen@ideasonboard.com>
media: ti-vpe: cal: fix error handling in cal_camerarx_create
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: dib8000: rewrite the init prbs logic
Randy Dunlap <rdunlap@infradead.org>
ASoC: atmel: ATMEL drivers don't need HAS_DMA
Peter Ujfalusi <peter.ujfalusi@gmail.com>
ASoC: ti: davinci-mcasp: Fix DIT mode support
Luben Tuikov <luben.tuikov@amd.com>
drm/amdgpu: Fix amdgpu_ras_eeprom_init()
Daniel Vetter <daniel.vetter@ffwll.ch>
drm/omap: Follow implicit fencing in prepare_fb
Dom Cobley <popcornmix@gmail.com>
drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET
Zack Rusin <zackr@vmware.com>
drm/vmwgfx: Fix some static checker warnings
Zack Rusin <zackr@vmware.com>
drm/vmwgfx: Fix subresource updates with new contexts
Nadav Amit <namit@vmware.com>
userfaultfd: prevent concurrent API initialization
Masahiro Yamada <masahiroy@kernel.org>
kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
Oleksij Rempel <linux@rempel-privat.de>
MIPS: Malta: fix alignment of the devicetree buffer
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should put a page beyond EOF when preparing a write
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: deallocate compressed pages when error happens
Chao Yu <chao@kernel.org>
f2fs: fix to unmap pages from userspace process in punch_hole()
Chao Yu <chao@kernel.org>
f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
Chao Yu <chao@kernel.org>
f2fs: fix to account missing .skipped_gc_rwsem
Yongqiang Niu <yongqiang.niu@mediatek.com>
soc: mediatek: cmdq: add address shift in jump
Alexey Kardashevskiy <aik@ozlabs.ru>
KVM: PPC: Fix clearing never mapped TCEs in realmode
Codrin Ciubotariu <codrin.ciubotariu@microchip.com>
clk: at91: clk-generated: Limit the requested rate to our range
Sergio Paracuellos <sergio.paracuellos@gmail.com>
clk: ralink: avoid to set 'CLK_IS_CRITICAL' flag for gates
David Howells <dhowells@redhat.com>
fscache: Fix cookie key hashing
Wenpeng Liang <liangwenpeng@huawei.com>
RDMA/hns: Fix QP's resp incomplete assignment
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc/smp: Update cpu_core_map on all PowerPc systems
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc/smp: Fix a crash while booting kvm guest with nr_cpus=2
Hans de Goede <hdegoede@redhat.com>
platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
Junxian Huang <huangjunxian4@hisilicon.com>
RDMA/hns: Bugfix for the missing assignment for dip_idx
Junxian Huang <huangjunxian4@hisilicon.com>
RDMA/hns: Bugfix for data type of dip_idx
Kajol Jain <kjain@linux.ibm.com>
powerpc/perf: Fix the check for SIAR value
Nicholas Piggin <npiggin@gmail.com>
KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live
Alim Akhtar <alim.akhtar@samsung.com>
scsi: ufs: ufs-exynos: Fix static checker warning
Fabiano Rosas <farosas@linux.ibm.com>
KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines
Ahmad Fatoum <a.fatoum@pengutronix.de>
clk: imx8m: fix clock tree update of TF-A managed clocks
Lucas Stach <l.stach@pengutronix.de>
clk: imx8mm: use correct mux type for clkout path
Lukas Bulwahn <lukas.bulwahn@gmail.com>
HID: thrustmaster: clean up Makefile and adapt quirks
Jim Broadus <jbroadus@gmail.com>
HID: i2c-hid: Fix Elan touchpad regression
Basavaraj Natikar <Basavaraj.Natikar@amd.com>
HID: amd_sfh: Fix period data field to enable sensor
YueHaibing <yuehaibing@huawei.com>
RDMA/hns: Fix return in hns_roce_rereg_user_mr()
Lu Baolu <baolu.lu@linux.intel.com>
iommu/vt-d: Update the virtual command related registers
Chao Yu <chao@kernel.org>
f2fs: fix to keep compatibility of fault injection interface
Joel Stanley <joel@jms.id.au>
powerpc/config: Renable MTD_PHYSMAP_OF
Dan Carpenter <dan.carpenter@oracle.com>
scsi: qedf: Fix error codes in qedf_alloc_global_queues()
Dan Carpenter <dan.carpenter@oracle.com>
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
Dan Carpenter <dan.carpenter@oracle.com>
scsi: smartpqi: Fix an error code in pqi_get_raid_map()
Laurent Dufour <ldufour@linux.ibm.com>
powerpc/numa: Consider the max NUMA node for migratable LPAR
Zhen Lei <thunder.leizhen@huawei.com>
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Wei Li <liwei391@huawei.com>
scsi: fdomain: Fix error return code in fdomain_probe()
Anna Schumaker <Anna.Schumaker@Netapp.com>
sunrpc: Fix return value of get_srcport()
Olga Kornievskaia <kolga@netapp.com>
SUNRPC query transport's source port
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC/xprtrdma: Fix reconnection locking
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Fix potential memory corruption
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4/pNFS: Always allow update of a zero valued layout barrier
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4/pNFS: Fix a layoutget livelock loop
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Put rpcrdma_reps before waking the tear-down completion
Anthony Iliopoulos <ailiop@suse.com>
dma-debug: fix debugfs initialization order
Randy Dunlap <rdunlap@infradead.org>
openrisc: don't printk() unconditionally
Yangtao Li <frank.li@vivo.com>
f2fs: reduce the scope of setting fsck tag when de->name_len is zero
Nathan Chancellor <nathan@kernel.org>
cpuidle: pseries: Mark pseries_idle_proble() as __init
Leon Romanovsky <leon@kernel.org>
RDMA/mlx5: Delete not-available udata check
Leon Romanovsky <leon@kernel.org>
RDMA/efa: Remove double QP type assignment
Leon Romanovsky <leon@kernel.org>
RDMA/hns: Don't overwrite supplied QP attributes
Michal Suchanek <msuchanek@suse.de>
powerpc/stacktrace: Include linux/delay.h
Gautham R. Shenoy <ego@linux.vnet.ibm.com>
cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards
Bart Van Assche <bvanassche@acm.org>
scsi: ufs: Fix memory corruption by ufshcd_read_desc_param()
Jason Gunthorpe <jgg@ziepe.ca>
vfio: Use config not menuconfig for VFIO_NOIOMMU
Chao Yu <chao@kernel.org>
f2fs: fix wrong checkpoint_changed value in f2fs_remount()
Chao Yu <chao@kernel.org>
f2fs: compress: add compress_inode to cache compressed blocks
Chao Yu <chao@kernel.org>
f2fs: restructure f2fs page.private layout
Jaehyoung Choi <jkkkkk.choi@samsung.com>
pinctrl: samsung: Fix pinctrl bank pin count
Colin Ian King <colin.king@canonical.com>
scsi: BusLogic: Use %X for u32 sized integer rather than %lX
Leon Romanovsky <leon@kernel.org>
docs: Fix infiniband uverbs minor number
Leon Romanovsky <leon@kernel.org>
RDMA/iwcm: Release resources if iw_cm module initialization fails
Mike Marciniszyn <mike.marciniszyn@cornelisnetworks.com>
IB/hfi1: Adjust pkey entry in index 0
Peter Geis <pgwipeout@gmail.com>
clk: rockchip: drop GRF dependency for rk3328/rk3036 pll types
Christoph Hellwig <hch@lst.de>
scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
Marek Behún <kabel@kernel.org>
pinctrl: armada-37xx: Correct PWM pins definitions
Chao Yu <chao@kernel.org>
f2fs: quota: fix potential deadlock
Dmitry Torokhov <dmitry.torokhov@gmail.com>
HID: input: do not report stylus battery state as "full"
Chao Yu <chao@kernel.org>
f2fs: compress: fix to set zstd compress level correctly
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Pali Rohár <pali@kernel.org>
PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
Evan Wang <xswang@marvell.com>
PCI: aardvark: Fix checking for PIO status
Pali Rohár <pali@kernel.org>
PCI: aardvark: Configure PCIe resources from 'ranges' DT property
Hyun Kwon <hyun.kwon@xilinx.com>
PCI: xilinx-nwl: Enable the clock through CCF
Krzysztof Wilczyński <kw@linux.com>
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Marek Behún <kabel@kernel.org>
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
Stuart Hayes <stuart.w.hayes@gmail.com>
PCI/portdrv: Enable Bandwidth Notification only if port supports it
Chao Yu <chao@kernel.org>
f2fs: fix to do sanity check for sb/cp fields correctly
David Heidelberg <david@ixit.cz>
ARM: 9105/1: atags_to_fdt: don't warn about stack size
Hans de Goede <hdegoede@redhat.com>
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
Pavel Begunkov <asml.silence@gmail.com>
io_uring: fail links of cancelled timeouts
Jens Axboe <axboe@kernel.dk>
io-wq: fix race between adding work and activating a free worker
Jens Axboe <axboe@kernel.dk>
io-wq: fix wakeup race when adding new work
Pavel Begunkov <asml.silence@gmail.com>
io_uring: fix io_try_cancel_userdata race for iowq
Pavel Begunkov <asml.silence@gmail.com>
io_uring: add ->splice_fd_in checks
Pavel Begunkov <asml.silence@gmail.com>
io_uring: place fixed tables under memcg limits
Robin Gong <yibin.gong@nxp.com>
dmaengine: imx-sdma: remove duplicated sdma_load_context
Robin Gong <yibin.gong@nxp.com>
Revert "dmaengine: imx-sdma: refine to load context only once"
Julian Wiedmann <jwi@linux.ibm.com>
s390/qdio: cancel the ESTABLISH ccw after timeout
Julian Wiedmann <jwi@linux.ibm.com>
s390/qdio: fix roll-back after timeout on ESTABLISH ccw
Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
nvmem: core: fix error handling while validating keepout regions
Sean Young <sean@mess.org>
media: rc-loopback: return number of emitters rather than error
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: uvc: don't do DMA on stack
Wang Hai <wanghai38@huawei.com>
VMCI: fix NULL pointer dereference when unmapping queue pair
Eddie James <eajames@linux.ibm.com>
spi: fsi: Reduce max transfer size to 8 bytes
Brijesh Singh <brijesh.singh@amd.com>
crypto: ccp - shutdown SEV firmware on kexec
Arne Welzel <arne.welzel@corelight.com>
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Kevin Hao <haokexin@gmail.com>
cpufreq: schedutil: Use kobject release() method to free sugov_tunables
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
power: supply: max17042: handle fails of reading status register
Damien Le Moal <damien.lemoal@wdc.com>
block: bfq: fix bfq_set_next_ioprio_data()
zhenwei pi <pizhenwei@bytedance.com>
crypto: public_key: fix overflow during implicit conversion
Joseph Gates <jgates@squareup.com>
wcn36xx: Ensure finish scan is not requested before start scan
Nuno Sá <nuno.sa@analog.com>
iio: ltc2983: fix device probe
Alexandru Elisei <alexandru.elisei@arm.com>
arm64: Do not trap PMSNEVFR_EL1
Mark Rutland <mark.rutland@arm.com>
arm64: head: avoid over-mapping in map_memory
Will Deacon <will@kernel.org>
arm64: mm: Fix TLBI vs ASID rollover
Marc Zyngier <maz@kernel.org>
arm64: Move .hyp.rodata outside of the _sdata.._edata range
Iwona Winiarska <iwona.winiarska@intel.com>
soc: aspeed: p2a-ctrl: Fix boundary check for mmap
Iwona Winiarska <iwona.winiarska@intel.com>
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
Manivannan Sadhasivam <mani@kernel.org>
soc: qcom: aoss: Fix the out of bound usage of cooling_devs
Enric Balletbo i Serra <enric.balletbo@collabora.com>
soc: mediatek: mmsys: Fix missing UFOE component in mt8173 table routing
Paul Cercueil <paul@crapouillou.net>
pinctrl: ingenic: Fix bias config for X2000(E)
Paul Cercueil <paul@crapouillou.net>
pinctrl: ingenic: Fix incorrect pull up/down info
Marc Zyngier <maz@kernel.org>
pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
Dinh Nguyen <dinguyen@kernel.org>
clk: socfpga: agilex: add the bypass register for s2f_usr0 clock
Dinh Nguyen <dinguyen@kernel.org>
clk: socfpga: agilex: fix up s2f_user0_clk representation
Dinh Nguyen <dinguyen@kernel.org>
clk: socfpga: agilex: fix the parents of the psi_ref_clk
Rolf Eike Beer <eb@emlix.com>
tools/thermal/tmon: Add cross compiling support
Steven Rostedt (VMware) <rostedt@goodmis.org>
selftests/ftrace: Fix requirement check of README file
jingle.wu <jingle.wu@emc.com.tw>
Input: elan_i2c - reduce the resume time for controller in Whitebox
Colin Ian King <colin.king@canonical.com>
ceph: fix dereference of null pointer cf
Harshvardhan Jha <harshvardhan.jha@oracle.com>
9p/xen: Fix end of loop tests for list_for_each_entry
Juergen Gross <jgross@suse.com>
xen: fix setting of max_pfn in shared_info
Kajol Jain <kjain@linux.ibm.com>
powerpc/perf/hv-gpci: Fix counter value parsing
Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
PCI/MSI: Skip masking MSI-X on Xen PV
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
Naohiro Aota <naohiro.aota@wdc.com>
btrfs: zoned: fix double counting of split ordered extent
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
btrfs: reset replace target device to allocation state on close
Anand Jain <anand.jain@oracle.com>
btrfs: fix upper limit for max_inline for page size 64K
Naohiro Aota <naohiro.aota@wdc.com>
btrfs: zoned: suppress reclaim error message on EAGAIN
Naohiro Aota <naohiro.aota@wdc.com>
btrfs: zoned: fix block group alloc_offset calculation
Josef Bacik <josef@toxicpanda.com>
btrfs: reduce the preemptive flushing threshold to 90%
Josef Bacik <josef@toxicpanda.com>
btrfs: wait on async extents when flushing delalloc
Josef Bacik <josef@toxicpanda.com>
btrfs: wake up async_delalloc_pages waiters after submit
Dmitry Osipenko <digetx@gmail.com>
rtc: tps65910: Correct driver module alias
-------------
Diffstat:
Documentation/admin-guide/devices.txt | 6 +-
.../pinctrl/marvell,armada-37xx-pinctrl.txt | 8 +-
Documentation/filesystems/f2fs.rst | 4 +
Makefile | 9 +-
arch/arm/boot/compressed/Makefile | 2 +
arch/arm/boot/dts/at91-kizbox3_common.dtsi | 2 +-
arch/arm/boot/dts/at91-sam9x60ek.dts | 2 +-
arch/arm/boot/dts/at91-sama5d27_som1_ek.dts | 2 +-
arch/arm/boot/dts/at91-sama5d27_wlsom1_ek.dts | 2 +-
arch/arm/boot/dts/at91-sama5d2_icp.dts | 2 +-
arch/arm/boot/dts/at91-sama5d2_ptc_ek.dts | 2 +-
arch/arm/boot/dts/at91-sama5d2_xplained.dts | 2 +-
arch/arm/boot/dts/imx53-ppd.dts | 23 +-
arch/arm/boot/dts/qcom-apq8064.dtsi | 6 +-
arch/arm/boot/dts/stm32mp15xx-dhcom-pdk2.dtsi | 8 +-
arch/arm/boot/dts/stm32mp15xx-dhcor-avenger96.dtsi | 6 +-
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 8 +-
arch/arm/boot/dts/tegra20-acer-a500-picasso.dts | 25 +-
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 +-
.../boot/dts/allwinner/sun50i-h6-tanix-tx6.dts | 4 +-
arch/arm64/boot/dts/freescale/fsl-ls1046a-frwy.dts | 8 +-
arch/arm64/boot/dts/freescale/fsl-ls1046a-rdb.dts | 7 +-
.../boot/dts/freescale/imx8mm-venice-gw700x.dtsi | 64 ++---
.../boot/dts/freescale/imx8mm-venice-gw71xx.dtsi | 5 +-
arch/arm64/boot/dts/nvidia/tegra132.dtsi | 4 +-
arch/arm64/boot/dts/nvidia/tegra194.dtsi | 6 +-
arch/arm64/boot/dts/qcom/ipq6018.dtsi | 2 +-
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2 +-
arch/arm64/boot/dts/qcom/ipq8074.dtsi | 16 +-
arch/arm64/boot/dts/qcom/msm8994.dtsi | 6 +-
arch/arm64/boot/dts/qcom/msm8996.dtsi | 4 +-
arch/arm64/boot/dts/qcom/sdm630.dtsi | 257 ++++++++++++--------
arch/arm64/boot/dts/qcom/sm8250.dtsi | 2 +-
arch/arm64/include/asm/el2_setup.h | 13 +-
arch/arm64/include/asm/kernel-pgtable.h | 4 +-
arch/arm64/include/asm/mmu.h | 29 ++-
arch/arm64/include/asm/tlbflush.h | 11 +-
arch/arm64/kernel/head.S | 11 +-
arch/arm64/kernel/vmlinux.lds.S | 4 +-
arch/arm64/kvm/arch_timer.c | 8 +-
arch/arm64/kvm/vgic/vgic.c | 14 +-
arch/m68k/Kconfig.bus | 2 +-
arch/mips/mti-malta/malta-dtshim.c | 2 +-
arch/openrisc/kernel/entry.S | 2 +
arch/parisc/Makefile | 6 +-
arch/parisc/kernel/signal.c | 6 +
arch/powerpc/configs/mpc885_ads_defconfig | 1 +
arch/powerpc/include/asm/pmc.h | 7 +
arch/powerpc/kernel/smp.c | 13 +-
arch/powerpc/kernel/stacktrace.c | 1 +
arch/powerpc/kvm/book3s_64_mmu_radix.c | 6 +-
arch/powerpc/kvm/book3s_64_vio_hv.c | 9 +-
arch/powerpc/kvm/book3s_hv.c | 20 ++
arch/powerpc/mm/numa.c | 13 +-
arch/powerpc/perf/core-book3s.c | 12 +-
arch/powerpc/perf/hv-gpci.c | 2 +-
arch/s390/include/asm/setup.h | 2 +
arch/s390/include/asm/smp.h | 1 +
arch/s390/kernel/early.c | 4 +
arch/s390/kernel/jump_label.c | 2 +-
arch/s390/kernel/smp.c | 9 +-
arch/s390/kernel/topology.c | 13 +-
arch/s390/mm/init.c | 2 +-
arch/s390/pci/pci.c | 5 +-
arch/x86/kernel/cpu/mshyperv.c | 9 +-
arch/x86/xen/p2m.c | 4 +-
arch/xtensa/platforms/iss/console.c | 17 +-
block/bfq-iosched.c | 2 +-
block/blk-zoned.c | 6 -
block/bsg.c | 5 +-
drivers/ata/libata-core.c | 4 +
drivers/ata/sata_dwc_460ex.c | 12 +-
drivers/bus/fsl-mc/fsl-mc-bus.c | 26 +-
drivers/clk/at91/clk-generated.c | 6 +
drivers/clk/imx/clk-composite-8m.c | 3 +-
drivers/clk/imx/clk-imx8mm.c | 11 +-
drivers/clk/imx/clk-imx8mn.c | 7 +-
drivers/clk/imx/clk-imx8mq.c | 7 +-
drivers/clk/imx/clk.h | 16 +-
drivers/clk/ralink/clk-mt7621.c | 9 +-
drivers/clk/rockchip/clk-pll.c | 2 +-
drivers/clk/socfpga/clk-agilex.c | 19 +-
drivers/cpufreq/powernv-cpufreq.c | 16 +-
drivers/cpuidle/cpuidle-pseries.c | 18 +-
drivers/crypto/ccp/sev-dev.c | 49 ++--
drivers/crypto/ccp/sp-pci.c | 12 +
drivers/crypto/mxs-dcp.c | 36 +--
drivers/dma/imx-sdma.c | 13 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 23 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 2 +-
drivers/gpu/drm/amd/amdgpu/vcn_v1_0.c | 2 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 2 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 2 +-
drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.c | 84 +++++--
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.h | 1 +
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 2 +-
.../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 16 +-
.../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 11 +-
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 14 +-
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 2 +-
.../gpu/drm/amd/display/dc/dcn30/dcn30_dwb_cm.c | 90 +++++--
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 12 +-
.../gpu/drm/amd/display/dc/dcn30/dcn30_resource.c | 42 +++-
drivers/gpu/drm/ast/ast_drv.h | 6 +
drivers/gpu/drm/ast/ast_main.c | 5 +
drivers/gpu/drm/ast/ast_post.c | 91 +++++--
drivers/gpu/drm/bridge/nwl-dsi.c | 2 +-
drivers/gpu/drm/drm_auth.c | 42 +++-
drivers/gpu/drm/drm_debugfs.c | 3 +-
drivers/gpu/drm/drm_dp_mst_topology.c | 10 +-
drivers/gpu/drm/drm_file.c | 1 +
drivers/gpu/drm/drm_lease.c | 81 +++++--
drivers/gpu/drm/exynos/exynos_drm_dma.c | 2 +
drivers/gpu/drm/mgag200/mgag200_drv.h | 16 ++
drivers/gpu/drm/mgag200/mgag200_mode.c | 20 +-
drivers/gpu/drm/mgag200/mgag200_reg.h | 9 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_catalog.c | 5 +
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 17 +-
drivers/gpu/drm/msm/dp/dp_ctrl.c | 134 +++++++----
drivers/gpu/drm/msm/dp/dp_panel.c | 9 +-
drivers/gpu/drm/msm/dsi/dsi_cfg.c | 1 -
drivers/gpu/drm/msm/dsi/phy/dsi_phy_14nm.c | 2 +-
drivers/gpu/drm/omapdrm/omap_plane.c | 3 +
drivers/gpu/drm/panfrost/panfrost_device.h | 8 +-
drivers/gpu/drm/panfrost/panfrost_drv.c | 50 +---
drivers/gpu/drm/panfrost/panfrost_gem.c | 20 +-
drivers/gpu/drm/panfrost/panfrost_job.c | 4 +-
drivers/gpu/drm/panfrost/panfrost_mmu.c | 191 +++++++++------
drivers/gpu/drm/panfrost/panfrost_mmu.h | 5 +-
drivers/gpu/drm/panfrost/panfrost_regs.h | 2 +
drivers/gpu/drm/rcar-du/rcar_du_drv.c | 8 +
drivers/gpu/drm/vc4/vc4_hdmi.c | 4 +-
drivers/gpu/drm/vkms/vkms_plane.c | 38 +--
drivers/gpu/drm/vmwgfx/ttm_memory.c | 2 +
drivers/gpu/drm/vmwgfx/vmwgfx_binding.c | 20 +-
drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf.c | 2 +-
drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf_res.c | 4 +-
drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 +
drivers/gpu/drm/vmwgfx/vmwgfx_mob.c | 4 +-
drivers/gpu/drm/vmwgfx/vmwgfx_msg.c | 6 +-
drivers/gpu/drm/vmwgfx/vmwgfx_resource.c | 8 +-
drivers/gpu/drm/vmwgfx/vmwgfx_so.c | 3 +-
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 9 +-
drivers/gpu/drm/vmwgfx/vmwgfx_validation.c | 4 +-
drivers/gpu/drm/xlnx/zynqmp_disp.c | 3 +-
drivers/gpu/drm/xlnx/zynqmp_dp.c | 22 +-
drivers/hid/Makefile | 1 -
drivers/hid/amd-sfh-hid/amd_sfh_client.c | 2 +-
drivers/hid/hid-input.c | 2 -
drivers/hid/hid-quirks.c | 2 -
drivers/hid/i2c-hid/i2c-hid-core.c | 5 +-
drivers/hwmon/pmbus/ibm-cffps.c | 6 +-
drivers/iio/dac/ad5624r_spi.c | 18 +-
drivers/iio/temperature/ltc2983.c | 30 ++-
drivers/infiniband/core/iwcm.c | 19 +-
drivers/infiniband/hw/efa/efa_verbs.c | 1 -
drivers/infiniband/hw/hfi1/init.c | 7 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 4 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.h | 2 +-
drivers/infiniband/hw/hns/hns_roce_mr.c | 4 +-
drivers/infiniband/hw/hns/hns_roce_qp.c | 11 +-
drivers/infiniband/hw/mlx5/qp.c | 3 -
drivers/input/mouse/elan_i2c.h | 3 +-
drivers/input/mouse/elan_i2c_core.c | 1 +
drivers/iommu/intel/pasid.h | 10 +-
drivers/mailbox/mtk-cmdq-mailbox.c | 3 +-
drivers/md/dm-crypt.c | 7 +-
drivers/media/cec/platform/stm32/stm32-cec.c | 26 +-
drivers/media/cec/platform/tegra/tegra_cec.c | 10 +-
drivers/media/dvb-frontends/dib8000.c | 58 +++--
drivers/media/i2c/imx258.c | 4 +-
drivers/media/i2c/tda1997x.c | 5 +-
drivers/media/platform/ti-vpe/cal-camerarx.c | 4 +-
drivers/media/platform/ti-vpe/cal-video.c | 2 +-
drivers/media/rc/rc-loopback.c | 2 +-
drivers/media/usb/uvc/uvc_v4l2.c | 34 ++-
drivers/media/v4l2-core/v4l2-dv-timings.c | 4 +-
drivers/misc/pvpanic/pvpanic-pci.c | 2 +
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6 +-
drivers/mmc/core/block.c | 3 +-
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 ++-
drivers/mmc/host/sdhci-of-arasan.c | 36 ++-
drivers/mtd/nand/raw/intel-nand-controller.c | 27 ++-
drivers/net/bonding/bond_main.c | 3 +-
drivers/net/dsa/lantiq_gswip.c | 3 +-
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 6 -
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 9 +-
drivers/net/ethernet/intel/iavf/iavf.h | 9 +-
drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 10 +-
drivers/net/ethernet/intel/iavf/iavf_main.c | 122 ++++++----
drivers/net/ethernet/intel/igc/igc_main.c | 9 +-
.../ethernet/marvell/octeontx2/nic/otx2_common.c | 15 ++
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 8 +-
.../ethernet/mellanox/mlx5/core/steering/dr_rule.c | 2 +-
.../ethernet/mellanox/mlx5/core/steering/dr_send.c | 1 +
.../net/ethernet/netronome/nfp/nfp_net_common.c | 2 +-
.../net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 10 +-
drivers/net/ethernet/wiznet/w5100.c | 2 +
drivers/net/ipa/ipa_cmd.c | 38 ++-
drivers/net/ipa/ipa_cmd.h | 15 +-
drivers/net/ipa/ipa_data-v4.11.c | 13 +-
drivers/net/ipa/ipa_data-v4.9.c | 9 +-
drivers/net/ipa/ipa_table.c | 2 +-
drivers/net/phy/dp83822.c | 8 +-
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3 +-
drivers/net/wireless/ath/ath9k/hw.c | 12 +-
drivers/net/wireless/ath/wcn36xx/main.c | 5 +-
drivers/net/wireless/ath/wcn36xx/txrx.c | 4 +
drivers/net/wireless/ath/wcn36xx/wcn36xx.h | 1 +
drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 6 +-
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 4 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 8 +-
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 24 +-
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 11 +-
drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 30 ++-
drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 5 +-
drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 3 +
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu.h | 2 +
.../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 33 ++-
drivers/net/wireless/realtek/rtw88/Makefile | 2 +-
drivers/net/wireless/realtek/rtw88/fw.c | 8 +-
drivers/net/wireless/realtek/rtw88/fw.h | 1 +
drivers/net/wireless/realtek/rtw88/wow.c | 21 +-
drivers/nvdimm/pmem.c | 4 +-
drivers/nvme/host/core.c | 3 +-
drivers/nvme/host/nvme.h | 47 +++-
drivers/nvme/host/pci.c | 2 +-
drivers/nvme/host/rdma.c | 4 +-
drivers/nvme/host/tcp.c | 38 ++-
drivers/nvme/target/loop.c | 4 +-
drivers/nvmem/core.c | 7 +-
drivers/nvmem/qfprom.c | 6 +-
drivers/of/kobj.c | 2 +-
drivers/opp/of.c | 12 +-
drivers/parport/ieee1284_ops.c | 2 +-
drivers/pci/controller/pci-aardvark.c | 268 ++++++++++++++++++++-
drivers/pci/controller/pcie-xilinx-nwl.c | 12 +
drivers/pci/msi.c | 3 +
drivers/pci/pci.c | 6 +-
drivers/pci/pcie/portdrv_core.c | 9 +-
drivers/pci/quirks.c | 1 +
drivers/pci/syscall.c | 4 +-
drivers/pinctrl/mvebu/pinctrl-armada-37xx.c | 16 +-
drivers/pinctrl/pinctrl-ingenic.c | 12 +-
drivers/pinctrl/pinctrl-single.c | 1 +
drivers/pinctrl/pinctrl-stmfx.c | 6 +-
drivers/pinctrl/samsung/pinctrl-samsung.c | 2 +-
drivers/platform/chrome/cros_ec_proto.c | 9 +
drivers/platform/x86/dell/dell-smbios-wmi.c | 1 +
drivers/power/supply/max17042_battery.c | 6 +-
drivers/rtc/rtc-tps65910.c | 2 +-
drivers/s390/cio/qdio_main.c | 82 ++++---
drivers/scsi/BusLogic.c | 6 +-
drivers/scsi/pcmcia/fdomain_cs.c | 4 +-
drivers/scsi/qedf/qedf_main.c | 10 +-
drivers/scsi/qedi/qedi_main.c | 14 +-
drivers/scsi/qla2xxx/qla_nvme.c | 5 +-
drivers/scsi/qla2xxx/qla_os.c | 6 +
drivers/scsi/smartpqi/smartpqi_init.c | 1 +
drivers/scsi/ufs/ufs-exynos.c | 4 +-
drivers/scsi/ufs/ufs-exynos.h | 2 +-
drivers/scsi/ufs/ufshcd.c | 8 +-
drivers/soc/aspeed/aspeed-lpc-ctrl.c | 2 +-
drivers/soc/aspeed/aspeed-p2a-ctrl.c | 2 +-
drivers/soc/mediatek/mtk-mmsys.h | 4 +
drivers/soc/qcom/qcom_aoss.c | 8 +-
drivers/soundwire/intel.c | 23 +-
drivers/spi/spi-fsi.c | 125 ++--------
drivers/staging/board/board.c | 7 +-
.../hikey9xx/hisilicon,hi6421-spmi-pmic.yaml | 6 +-
drivers/staging/ks7010/ks7010_sdio.c | 2 +-
drivers/staging/media/atomisp/pci/atomisp_v4l2.c | 4 +-
drivers/staging/media/hantro/hantro_g1_vp8_dec.c | 13 +-
.../staging/media/hantro/rk3399_vpu_hw_vp8_dec.c | 13 +-
drivers/staging/media/imx/imx7-media-csi.c | 15 +-
drivers/staging/rtl8723bs/hal/hal_com_phycfg.c | 2 +-
drivers/staging/rts5208/rtsx_scsi.c | 10 +-
drivers/thunderbolt/switch.c | 2 +-
drivers/tty/hvc/hvsi.c | 19 +-
drivers/tty/serial/8250/8250_omap.c | 25 +-
drivers/tty/serial/8250/8250_pci.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/jsm/jsm_neo.c | 2 +
drivers/tty/serial/jsm/jsm_tty.c | 3 +
drivers/tty/serial/sh-sci.c | 7 +-
drivers/usb/chipidea/host.c | 14 +-
drivers/usb/dwc3/dwc3-imx8mp.c | 14 +-
drivers/usb/gadget/composite.c | 8 +-
drivers/usb/gadget/function/u_ether.c | 5 +-
drivers/usb/host/ehci-mv.c | 23 +-
drivers/usb/host/fotg210-hcd.c | 41 ++--
drivers/usb/host/fotg210.h | 5 -
drivers/usb/host/xhci-mtk.c | 2 +-
drivers/usb/host/xhci.c | 24 +-
drivers/usb/musb/musb_dsps.c | 13 +-
drivers/usb/usbip/vhci_hcd.c | 32 ++-
drivers/vfio/Kconfig | 2 +-
drivers/video/fbdev/asiliantfb.c | 3 +
drivers/video/fbdev/kyro/fbdev.c | 8 +
drivers/video/fbdev/riva/fbdev.c | 3 +
fs/btrfs/block-group.c | 2 +-
fs/btrfs/disk-io.c | 48 ++--
fs/btrfs/free-space-cache.c | 7 +-
fs/btrfs/inode.c | 26 +-
fs/btrfs/ordered-data.c | 8 +
fs/btrfs/space-info.c | 42 +++-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 3 +
fs/ceph/caps.c | 3 +
fs/cifs/sess.c | 2 +-
fs/f2fs/checkpoint.c | 4 +-
fs/f2fs/compress.c | 190 +++++++++++++--
fs/f2fs/data.c | 122 +++++++---
fs/f2fs/debug.c | 13 +
fs/f2fs/dir.c | 22 +-
fs/f2fs/f2fs.h | 173 +++++++++++--
fs/f2fs/file.c | 4 +-
fs/f2fs/gc.c | 11 +-
fs/f2fs/inline.c | 4 +-
fs/f2fs/inode.c | 23 +-
fs/f2fs/node.c | 24 +-
fs/f2fs/node.h | 30 +--
fs/f2fs/segment.c | 25 +-
fs/f2fs/super.c | 148 ++++++++----
fs/fscache/cookie.c | 14 +-
fs/fscache/internal.h | 2 +
fs/fscache/main.c | 39 +++
fs/gfs2/glops.c | 17 +-
fs/gfs2/lock_dlm.c | 5 +
fs/io-wq.c | 50 ++--
fs/io_uring.c | 65 ++---
fs/iomap/buffered-io.c | 2 +-
fs/lockd/svclock.c | 30 +--
fs/nfs/export.c | 2 +-
fs/nfs/pnfs.c | 16 +-
fs/nfsd/nfs4state.c | 13 +-
fs/overlayfs/dir.c | 6 +-
fs/userfaultfd.c | 91 ++++---
include/crypto/public_key.h | 4 +-
include/drm/drm_auth.h | 1 +
include/drm/drm_file.h | 18 +-
include/kvm/arm_vgic.h | 28 ++-
include/linux/ethtool.h | 4 -
include/linux/exportfs.h | 2 +
include/linux/f2fs_fs.h | 1 +
include/linux/hugetlb.h | 9 +
include/linux/hugetlb_cgroup.h | 12 +
include/linux/intel-iommu.h | 6 +-
include/linux/memory_hotplug.h | 4 +-
include/linux/rcupdate.h | 2 +-
include/linux/rtmutex.h | 19 +-
include/linux/sunrpc/xprt.h | 1 +
include/linux/sunrpc/xprtsock.h | 1 +
include/net/bluetooth/hci_core.h | 4 +
include/net/flow_offload.h | 1 +
include/uapi/linux/serial_reg.h | 1 +
kernel/dma/debug.c | 7 +-
kernel/fork.c | 1 +
kernel/locking/rtmutex.c | 2 +-
kernel/pid_namespace.c | 3 +-
kernel/printk/printk.c | 7 +-
kernel/rcu/tree_plugin.h | 8 +-
kernel/sched/cpufreq_schedutil.c | 16 +-
kernel/workqueue.c | 12 +-
lib/test_bpf.c | 13 +-
lib/test_stackinit.c | 20 +-
mm/hmm.c | 5 +-
mm/hugetlb.c | 4 +-
mm/memory_hotplug.c | 4 +-
mm/vmscan.c | 2 +-
net/9p/trans_xen.c | 4 +-
net/bluetooth/hci_event.c | 140 ++++++++---
net/bluetooth/hci_request.c | 81 +++----
net/bluetooth/sco.c | 74 +++---
net/core/flow_dissector.c | 12 +-
net/core/flow_offload.c | 89 ++++++-
net/ethtool/ioctl.c | 136 +++++++++--
net/ipv4/ip_output.c | 5 +-
net/ipv4/tcp_fastopen.c | 3 +-
net/mac80211/iface.c | 11 +-
net/netfilter/nf_flow_table_offload.c | 1 +
net/netfilter/nf_tables_offload.c | 1 +
net/netfilter/nft_compat.c | 8 +-
net/netlabel/netlabel_cipso_v4.c | 4 +-
net/netlink/af_netlink.c | 4 +-
net/sched/cls_api.c | 1 +
net/sched/sch_taprio.c | 4 +-
net/socket.c | 125 +---------
net/sunrpc/auth_gss/svcauth_gss.c | 2 +-
net/sunrpc/xprt.c | 8 +-
net/sunrpc/xprtrdma/transport.c | 11 +-
net/sunrpc/xprtrdma/verbs.c | 10 +-
net/sunrpc/xprtsock.c | 7 +
net/tipc/socket.c | 36 ++-
samples/bpf/test_override_return.sh | 1 +
samples/bpf/tracex7_user.c | 5 +
.../pktgen/pktgen_sample03_burst_single_flow.sh | 6 +-
scripts/gen_ksymdeps.sh | 8 +-
scripts/subarch.include | 2 +-
security/smack/smack_access.c | 17 +-
sound/soc/atmel/Kconfig | 1 -
sound/soc/intel/boards/bytcr_rt5640.c | 9 +-
sound/soc/intel/boards/sof_pcm512x.c | 13 +-
sound/soc/intel/skylake/skl-messages.c | 11 +-
sound/soc/intel/skylake/skl-pcm.c | 25 +-
sound/soc/rockchip/rockchip_i2s.c | 35 ++-
sound/soc/soc-pcm.c | 103 ++++++--
sound/soc/ti/davinci-mcasp.c | 150 ++++++++++--
tools/lib/bpf/libbpf.c | 63 ++++-
.../testing/selftests/arm64/mte/mte_common_util.c | 2 +-
tools/testing/selftests/arm64/pauth/pac.c | 10 +-
.../testing/selftests/bpf/prog_tests/send_signal.c | 16 ++
.../selftests/bpf/prog_tests/sockopt_inherit.c | 4 +-
tools/testing/selftests/bpf/progs/xdp_tx.c | 2 +-
tools/testing/selftests/bpf/test_maps.c | 2 +-
tools/testing/selftests/bpf/test_progs.c | 25 +-
tools/testing/selftests/bpf/test_xdp_veth.sh | 2 +-
tools/testing/selftests/firmware/fw_namespace.c | 3 +-
tools/testing/selftests/ftrace/test.d/functions | 2 +-
tools/testing/selftests/nci/nci_dev.c | 6 +-
tools/thermal/tmon/Makefile | 2 +-
426 files changed, 4644 insertions(+), 2448 deletions(-)
^ permalink raw reply [relevance 7%]
* [PATCH 5.10 208/306] Bluetooth: avoid circular locks in sco_sock_connect
2021-09-16 15:55 8% [PATCH 5.10 000/306] 5.10.67-rc1 review Greg Kroah-Hartman
` (6 preceding siblings ...)
2021-09-16 15:59 10% ` [PATCH 5.10 207/306] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
@ 2021-09-16 15:59 9% ` Greg Kroah-Hartman
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:59 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 6a338c6926e0..7c24a9acbc45 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -235,44 +235,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -280,7 +268,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -290,9 +278,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -585,6 +570,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -599,12 +585,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH 5.10 206/306] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
2021-09-16 15:55 8% [PATCH 5.10 000/306] 5.10.67-rc1 review Greg Kroah-Hartman
` (4 preceding siblings ...)
2021-09-16 15:58 11% ` [PATCH 5.10 169/306] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
@ 2021-09-16 15:59 12% ` Greg Kroah-Hartman
2021-09-16 15:59 10% ` [PATCH 5.10 207/306] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
2021-09-16 15:59 9% ` [PATCH 5.10 208/306] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:59 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Daniel Vetter,
Zack Rusin, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2bc5da528dd570c5ecabc107e6fbdbc55974276f ]
drm_file.master should be protected by either drm_device.master_mutex
or drm_file.master_lookup_lock when being dereferenced. However,
drm_master_get is called on unprotected file_priv->master pointers in
vmw_surface_define_ioctl and vmw_gb_surface_define_internal.
This is fixed by replacing drm_master_get with drm_file_get_master.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Reviewed-by: Zack Rusin <zackr@vmware.com>
Signed-off-by: Zack Rusin <zackr@vmware.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20210724111824.59266-4-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
index f493b20c7a38..f1a51371de5b 100644
--- a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
+++ b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
@@ -866,7 +866,7 @@ int vmw_surface_define_ioctl(struct drm_device *dev, void *data,
user_srf->prime.base.shareable = false;
user_srf->prime.base.tfile = NULL;
if (drm_is_primary_client(file_priv))
- user_srf->master = drm_master_get(file_priv->master);
+ user_srf->master = drm_file_get_master(file_priv);
/**
* From this point, the generic resource management functions
@@ -1537,7 +1537,7 @@ vmw_gb_surface_define_internal(struct drm_device *dev,
user_srf = container_of(srf, struct vmw_user_surface, srf);
if (drm_is_primary_client(file_priv))
- user_srf->master = drm_master_get(file_priv->master);
+ user_srf->master = drm_file_get_master(file_priv);
ret = ttm_read_lock(&dev_priv->reservation_sem, true);
if (unlikely(ret != 0))
--
2.30.2
^ permalink raw reply related [relevance 12%]
* [PATCH 5.10 207/306] Bluetooth: schedule SCO timeouts with delayed_work
2021-09-16 15:55 8% [PATCH 5.10 000/306] 5.10.67-rc1 review Greg Kroah-Hartman
` (5 preceding siblings ...)
2021-09-16 15:59 12% ` [PATCH 5.10 206/306] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Greg Kroah-Hartman
@ 2021-09-16 15:59 10% ` Greg Kroah-Hartman
2021-09-16 15:59 9% ` [PATCH 5.10 208/306] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:59 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+2f6d7c28bb4bf7e82060,
Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit ba316be1b6a00db7126ed9a39f9bee434a508043 ]
struct sock.sk_timer should be used as a sock cleanup timer. However,
SCO uses it to implement sock timeouts.
This causes issues because struct sock.sk_timer's callback is run in
an IRQ context, and the timer callback function sco_sock_timeout takes
a spin lock on the socket. However, other functions such as
sco_conn_del and sco_conn_ready take the spin lock with interrupts
enabled.
This inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} lock usage could
lead to deadlocks as reported by Syzbot [1]:
CPU0
----
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
<Interrupt>
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
To fix this, we use delayed work to implement SCO sock timouts
instead. This allows us to avoid taking the spin lock on the socket in
an IRQ context, and corrects the misuse of struct sock.sk_timer.
As a note, cancel_delayed_work is used instead of
cancel_delayed_work_sync in sco_sock_set_timer and
sco_sock_clear_timer to avoid a deadlock. In the future, the call to
bh_lock_sock inside sco_sock_timeout should be changed to lock_sock to
synchronize with other functions using lock_sock. However, since
sco_sock_set_timer and sco_sock_clear_timer are sometimes called under
the locked socket (in sco_connect and __sco_sock_close),
cancel_delayed_work_sync might cause them to sleep until an
sco_sock_timeout that has started finishes running. But
sco_sock_timeout would also sleep until it can grab the lock_sock.
Using cancel_delayed_work is fine because sco_sock_timeout does not
change from run to run, hence there is no functional difference
between:
1. waiting for a timeout to finish running before scheduling another
timeout
2. scheduling another timeout while a timeout is running.
Link: https://syzkaller.appspot.com/bug?id=9089d89de0502e120f234ca0fc8a703f7368b31e [1]
Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Tested-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 35 +++++++++++++++++++++++++++++------
1 file changed, 29 insertions(+), 6 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 600b1832e1dd..6a338c6926e0 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -48,6 +48,8 @@ struct sco_conn {
spinlock_t lock;
struct sock *sk;
+ struct delayed_work timeout_work;
+
unsigned int mtu;
};
@@ -74,9 +76,20 @@ struct sco_pinfo {
#define SCO_CONN_TIMEOUT (HZ * 40)
#define SCO_DISCONN_TIMEOUT (HZ * 2)
-static void sco_sock_timeout(struct timer_list *t)
+static void sco_sock_timeout(struct work_struct *work)
{
- struct sock *sk = from_timer(sk, t, sk_timer);
+ struct sco_conn *conn = container_of(work, struct sco_conn,
+ timeout_work.work);
+ struct sock *sk;
+
+ sco_conn_lock(conn);
+ sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
+ sco_conn_unlock(conn);
+
+ if (!sk)
+ return;
BT_DBG("sock %p state %d", sk, sk->sk_state);
@@ -90,14 +103,21 @@ static void sco_sock_timeout(struct timer_list *t)
static void sco_sock_set_timer(struct sock *sk, long timeout)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d timeout %ld", sk, sk->sk_state, timeout);
- sk_reset_timer(sk, &sk->sk_timer, jiffies + timeout);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
+ schedule_delayed_work(&sco_pi(sk)->conn->timeout_work, timeout);
}
static void sco_sock_clear_timer(struct sock *sk)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d", sk, sk->sk_state);
- sk_stop_timer(sk, &sk->sk_timer);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
}
/* ---- SCO connections ---- */
@@ -177,6 +197,9 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_chan_del(sk, err);
bh_unlock_sock(sk);
sock_put(sk);
+
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
}
hcon->sco_data = NULL;
@@ -191,6 +214,8 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
+
if (parent)
bt_accept_enqueue(parent, sk, true);
}
@@ -496,8 +521,6 @@ static struct sock *sco_sock_alloc(struct net *net, struct socket *sock,
sco_pi(sk)->setting = BT_VOICE_CVSD_16BIT;
- timer_setup(&sk->sk_timer, sco_sock_timeout, 0);
-
bt_sock_link(&sco_sk_list, sk);
return sk;
}
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH 5.10 169/306] Bluetooth: skip invalid hci_sync_conn_complete_evt
2021-09-16 15:55 8% [PATCH 5.10 000/306] 5.10.67-rc1 review Greg Kroah-Hartman
` (3 preceding siblings ...)
2021-09-16 15:57 8% ` [PATCH 5.10 129/306] drm: protect drm_master pointers in drm_lease.c Greg Kroah-Hartman
@ 2021-09-16 15:58 11% ` Greg Kroah-Hartman
2021-09-16 15:59 12% ` [PATCH 5.10 206/306] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Greg Kroah-Hartman
` (2 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:58 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, syzbot+66264bf2fd0476be7e6c,
Desmond Cheong Zhi Xi, Marcel Holtmann, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index e59ae24a8f17..45de2d8b9a9d 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -4329,6 +4329,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.10 129/306] drm: protect drm_master pointers in drm_lease.c
2021-09-16 15:55 8% [PATCH 5.10 000/306] 5.10.67-rc1 review Greg Kroah-Hartman
` (2 preceding siblings ...)
2021-09-16 15:57 10% ` [PATCH 5.10 128/306] drm: serialize drm_file.master with a new spinlock Greg Kroah-Hartman
@ 2021-09-16 15:57 8% ` Greg Kroah-Hartman
2021-09-16 15:58 11% ` [PATCH 5.10 169/306] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
` (3 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:57 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Daniel Vetter, Desmond Cheong Zhi Xi,
Emil Velikov, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 56f0729a510f92151682ff6c89f69724d5595d6e ]
drm_file->master pointers should be protected by
drm_device.master_mutex or drm_file.master_lookup_lock when being
dereferenced.
However, in drm_lease.c, there are multiple instances where
drm_file->master is accessed and dereferenced while neither lock is
held. This makes drm_lease.c vulnerable to use-after-free bugs.
We address this issue in 2 ways:
1. Add a new drm_file_get_master() function that calls drm_master_get
on drm_file->master while holding on to
drm_file.master_lookup_lock. Since drm_master_get increments the
reference count of master, this prevents master from being freed until
we unreference it with drm_master_put.
2. In each case where drm_file->master is directly accessed and
eventually dereferenced in drm_lease.c, we wrap the access in a call
to the new drm_file_get_master function, then unreference the master
pointer once we are done using it.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Emil Velikov <emil.l.velikov@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-6-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_auth.c | 25 ++++++++++++
drivers/gpu/drm/drm_lease.c | 81 ++++++++++++++++++++++++++++---------
include/drm/drm_auth.h | 1 +
include/drm/drm_file.h | 6 +++
4 files changed, 93 insertions(+), 20 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index 0024ad93d24b..c7adbeaf10b1 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -376,6 +376,31 @@ struct drm_master *drm_master_get(struct drm_master *master)
}
EXPORT_SYMBOL(drm_master_get);
+/**
+ * drm_file_get_master - reference &drm_file.master of @file_priv
+ * @file_priv: DRM file private
+ *
+ * Increments the reference count of @file_priv's &drm_file.master and returns
+ * the &drm_file.master. If @file_priv has no &drm_file.master, returns NULL.
+ *
+ * Master pointers returned from this function should be unreferenced using
+ * drm_master_put().
+ */
+struct drm_master *drm_file_get_master(struct drm_file *file_priv)
+{
+ struct drm_master *master = NULL;
+
+ spin_lock(&file_priv->master_lookup_lock);
+ if (!file_priv->master)
+ goto unlock;
+ master = drm_master_get(file_priv->master);
+
+unlock:
+ spin_unlock(&file_priv->master_lookup_lock);
+ return master;
+}
+EXPORT_SYMBOL(drm_file_get_master);
+
static void drm_master_destroy(struct kref *kref)
{
struct drm_master *master = container_of(kref, struct drm_master, refcount);
diff --git a/drivers/gpu/drm/drm_lease.c b/drivers/gpu/drm/drm_lease.c
index da4f085fc09e..aef22634005e 100644
--- a/drivers/gpu/drm/drm_lease.c
+++ b/drivers/gpu/drm/drm_lease.c
@@ -107,10 +107,19 @@ static bool _drm_has_leased(struct drm_master *master, int id)
*/
bool _drm_lease_held(struct drm_file *file_priv, int id)
{
- if (!file_priv || !file_priv->master)
+ bool ret;
+ struct drm_master *master;
+
+ if (!file_priv)
return true;
- return _drm_lease_held_master(file_priv->master, id);
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return true;
+ ret = _drm_lease_held_master(master, id);
+ drm_master_put(&master);
+
+ return ret;
}
/**
@@ -129,13 +138,22 @@ bool drm_lease_held(struct drm_file *file_priv, int id)
struct drm_master *master;
bool ret;
- if (!file_priv || !file_priv->master || !file_priv->master->lessor)
+ if (!file_priv)
return true;
- master = file_priv->master;
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return true;
+ if (!master->lessor) {
+ ret = true;
+ goto out;
+ }
mutex_lock(&master->dev->mode_config.idr_mutex);
ret = _drm_lease_held_master(master, id);
mutex_unlock(&master->dev->mode_config.idr_mutex);
+
+out:
+ drm_master_put(&master);
return ret;
}
@@ -155,10 +173,16 @@ uint32_t drm_lease_filter_crtcs(struct drm_file *file_priv, uint32_t crtcs_in)
int count_in, count_out;
uint32_t crtcs_out = 0;
- if (!file_priv || !file_priv->master || !file_priv->master->lessor)
+ if (!file_priv)
return crtcs_in;
- master = file_priv->master;
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return crtcs_in;
+ if (!master->lessor) {
+ crtcs_out = crtcs_in;
+ goto out;
+ }
dev = master->dev;
count_in = count_out = 0;
@@ -177,6 +201,9 @@ uint32_t drm_lease_filter_crtcs(struct drm_file *file_priv, uint32_t crtcs_in)
count_in++;
}
mutex_unlock(&master->dev->mode_config.idr_mutex);
+
+out:
+ drm_master_put(&master);
return crtcs_out;
}
@@ -490,7 +517,7 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
size_t object_count;
int ret = 0;
struct idr leases;
- struct drm_master *lessor = lessor_priv->master;
+ struct drm_master *lessor;
struct drm_master *lessee = NULL;
struct file *lessee_file = NULL;
struct file *lessor_file = lessor_priv->filp;
@@ -502,12 +529,6 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
- /* Do not allow sub-leases */
- if (lessor->lessor) {
- DRM_DEBUG_LEASE("recursive leasing not allowed\n");
- return -EINVAL;
- }
-
/* need some objects */
if (cl->object_count == 0) {
DRM_DEBUG_LEASE("no objects in lease\n");
@@ -519,12 +540,22 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
return -EINVAL;
}
+ lessor = drm_file_get_master(lessor_priv);
+ /* Do not allow sub-leases */
+ if (lessor->lessor) {
+ DRM_DEBUG_LEASE("recursive leasing not allowed\n");
+ ret = -EINVAL;
+ goto out_lessor;
+ }
+
object_count = cl->object_count;
object_ids = memdup_user(u64_to_user_ptr(cl->object_ids),
array_size(object_count, sizeof(__u32)));
- if (IS_ERR(object_ids))
- return PTR_ERR(object_ids);
+ if (IS_ERR(object_ids)) {
+ ret = PTR_ERR(object_ids);
+ goto out_lessor;
+ }
idr_init(&leases);
@@ -535,14 +566,15 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
if (ret) {
DRM_DEBUG_LEASE("lease object lookup failed: %i\n", ret);
idr_destroy(&leases);
- return ret;
+ goto out_lessor;
}
/* Allocate a file descriptor for the lease */
fd = get_unused_fd_flags(cl->flags & (O_CLOEXEC | O_NONBLOCK));
if (fd < 0) {
idr_destroy(&leases);
- return fd;
+ ret = fd;
+ goto out_lessor;
}
DRM_DEBUG_LEASE("Creating lease\n");
@@ -578,6 +610,7 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
/* Hook up the fd */
fd_install(fd, lessee_file);
+ drm_master_put(&lessor);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl succeeded\n");
return 0;
@@ -587,6 +620,8 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
out_leases:
put_unused_fd(fd);
+out_lessor:
+ drm_master_put(&lessor);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl failed: %d\n", ret);
return ret;
}
@@ -609,7 +644,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
struct drm_mode_list_lessees *arg = data;
__u32 __user *lessee_ids = (__u32 __user *) (uintptr_t) (arg->lessees_ptr);
__u32 count_lessees = arg->count_lessees;
- struct drm_master *lessor = lessor_priv->master, *lessee;
+ struct drm_master *lessor, *lessee;
int count;
int ret = 0;
@@ -620,6 +655,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessor = drm_file_get_master(lessor_priv);
DRM_DEBUG_LEASE("List lessees for %d\n", lessor->lessee_id);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -643,6 +679,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
arg->count_lessees = count;
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessor);
return ret;
}
@@ -662,7 +699,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
struct drm_mode_get_lease *arg = data;
__u32 __user *object_ids = (__u32 __user *) (uintptr_t) (arg->objects_ptr);
__u32 count_objects = arg->count_objects;
- struct drm_master *lessee = lessee_priv->master;
+ struct drm_master *lessee;
struct idr *object_idr;
int count;
void *entry;
@@ -676,6 +713,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessee = drm_file_get_master(lessee_priv);
DRM_DEBUG_LEASE("get lease for %d\n", lessee->lessee_id);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -703,6 +741,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
arg->count_objects = count;
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessee);
return ret;
}
@@ -721,7 +760,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
void *data, struct drm_file *lessor_priv)
{
struct drm_mode_revoke_lease *arg = data;
- struct drm_master *lessor = lessor_priv->master;
+ struct drm_master *lessor;
struct drm_master *lessee;
int ret = 0;
@@ -731,6 +770,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessor = drm_file_get_master(lessor_priv);
mutex_lock(&dev->mode_config.idr_mutex);
lessee = _drm_find_lessee(lessor, arg->lessee_id);
@@ -751,6 +791,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
fail:
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessor);
return ret;
}
diff --git a/include/drm/drm_auth.h b/include/drm/drm_auth.h
index 6bf8b2b78991..f99d3417f304 100644
--- a/include/drm/drm_auth.h
+++ b/include/drm/drm_auth.h
@@ -107,6 +107,7 @@ struct drm_master {
};
struct drm_master *drm_master_get(struct drm_master *master);
+struct drm_master *drm_file_get_master(struct drm_file *file_priv);
void drm_master_put(struct drm_master **master);
bool drm_is_current_master(struct drm_file *fpriv);
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index ca659ece3ee8..42d04607d091 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -233,6 +233,12 @@ struct drm_file {
* this only matches &drm_device.master if the master is the currently
* active one.
*
+ * When dereferencing this pointer, either hold struct
+ * &drm_device.master_mutex for the duration of the pointer's use, or
+ * use drm_file_get_master() if struct &drm_device.master_mutex is not
+ * currently held and there is no other need to hold it. This prevents
+ * @master from being freed during use.
+ *
* See also @authentication and @is_master and the :ref:`section on
* primary nodes and authentication <drm_primary_node>`.
*/
--
2.30.2
^ permalink raw reply related [relevance 8%]
* [PATCH 5.10 127/306] drm: avoid blocking in drm_clients_infos rcu section
2021-09-16 15:55 8% [PATCH 5.10 000/306] 5.10.67-rc1 review Greg Kroah-Hartman
2021-09-16 15:55 10% ` [PATCH 5.10 008/306] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
@ 2021-09-16 15:57 11% ` Greg Kroah-Hartman
2021-09-16 15:57 10% ` [PATCH 5.10 128/306] drm: serialize drm_file.master with a new spinlock Greg Kroah-Hartman
` (5 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:57 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Daniel Vetter,
Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 5eff9585de220cdd131237f5665db5e6c6bdf590 ]
Inside drm_clients_info, the rcu_read_lock is held to lock
pid_task()->comm. However, within this protected section, a call to
drm_is_current_master is made, which involves a mutex lock in a future
patch. However, this is illegal because the mutex lock might block
while in the RCU read-side critical section.
Since drm_is_current_master isn't protected by rcu_read_lock, we avoid
this by moving it out of the RCU critical section.
The following report came from intel-gfx ci's
igt@debugfs_test@read_all_entries testcase:
=============================
[ BUG: Invalid wait context ]
5.13.0-CI-Patchwork_20515+ #1 Tainted: G W
-----------------------------
debugfs_test/1101 is trying to lock:
ffff888132d901a8 (&dev->master_mutex){+.+.}-{3:3}, at:
drm_is_current_master+0x1e/0x50
other info that might help us debug this:
context-{4:4}
3 locks held by debugfs_test/1101:
#0: ffff88810fdffc90 (&p->lock){+.+.}-{3:3}, at:
seq_read_iter+0x53/0x3b0
#1: ffff888132d90240 (&dev->filelist_mutex){+.+.}-{3:3}, at:
drm_clients_info+0x63/0x2a0
#2: ffffffff82734220 (rcu_read_lock){....}-{1:2}, at:
drm_clients_info+0x1b1/0x2a0
stack backtrace:
CPU: 8 PID: 1101 Comm: debugfs_test Tainted: G W
5.13.0-CI-Patchwork_20515+ #1
Hardware name: Intel Corporation CometLake Client Platform/CometLake S
UDIMM (ERB/CRB), BIOS CMLSFWR1.R00.1263.D00.1906260926 06/26/2019
Call Trace:
dump_stack+0x7f/0xad
__lock_acquire.cold.78+0x2af/0x2ca
lock_acquire+0xd3/0x300
? drm_is_current_master+0x1e/0x50
? __mutex_lock+0x76/0x970
? lockdep_hardirqs_on+0xbf/0x130
__mutex_lock+0xab/0x970
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
drm_is_current_master+0x1e/0x50
drm_clients_info+0x107/0x2a0
seq_read_iter+0x178/0x3b0
seq_read+0x104/0x150
full_proxy_read+0x4e/0x80
vfs_read+0xa5/0x1b0
ksys_read+0x5a/0xd0
do_syscall_64+0x39/0xb0
entry_SYSCALL_64_after_hwframe+0x44/0xae
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-3-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_debugfs.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/gpu/drm/drm_debugfs.c b/drivers/gpu/drm/drm_debugfs.c
index 3d7182001004..b0a826489488 100644
--- a/drivers/gpu/drm/drm_debugfs.c
+++ b/drivers/gpu/drm/drm_debugfs.c
@@ -91,6 +91,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
mutex_lock(&dev->filelist_mutex);
list_for_each_entry_reverse(priv, &dev->filelist, lhead) {
struct task_struct *task;
+ bool is_current_master = drm_is_current_master(priv);
rcu_read_lock(); /* locks pid_task()->comm */
task = pid_task(priv->pid, PIDTYPE_PID);
@@ -99,7 +100,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
task ? task->comm : "<unknown>",
pid_vnr(priv->pid),
priv->minor->index,
- drm_is_current_master(priv) ? 'y' : 'n',
+ is_current_master ? 'y' : 'n',
priv->authenticated ? 'y' : 'n',
from_kuid_munged(seq_user_ns(m), uid),
priv->magic);
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.10 128/306] drm: serialize drm_file.master with a new spinlock
2021-09-16 15:55 8% [PATCH 5.10 000/306] 5.10.67-rc1 review Greg Kroah-Hartman
2021-09-16 15:55 10% ` [PATCH 5.10 008/306] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
2021-09-16 15:57 11% ` [PATCH 5.10 127/306] drm: avoid blocking in drm_clients_infos rcu section Greg Kroah-Hartman
@ 2021-09-16 15:57 10% ` Greg Kroah-Hartman
2021-09-16 15:57 8% ` [PATCH 5.10 129/306] drm: protect drm_master pointers in drm_lease.c Greg Kroah-Hartman
` (4 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:57 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Daniel Vetter, Desmond Cheong Zhi Xi,
Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 0b0860a3cf5eccf183760b1177a1dcdb821b0b66 ]
Currently, drm_file.master pointers should be protected by
drm_device.master_mutex when being dereferenced. This is because
drm_file.master is not invariant for the lifetime of drm_file. If
drm_file is not the creator of master, then drm_file.is_master is
false, and a call to drm_setmaster_ioctl will invoke
drm_new_set_master, which then allocates a new master for drm_file and
puts the old master.
Thus, without holding drm_device.master_mutex, the old value of
drm_file.master could be freed while it is being used by another
concurrent process.
However, it is not always possible to lock drm_device.master_mutex to
dereference drm_file.master. Through the fbdev emulation code, this
might occur in a deep nest of other locks. But drm_device.master_mutex
is also the outermost lock in the nesting hierarchy, so this leads to
potential deadlocks.
To address this, we introduce a new spin lock at the bottom of the
lock hierarchy that only serializes drm_file.master. With this change,
the value of drm_file.master changes only when both
drm_device.master_mutex and drm_file.master_lookup_lock are
held. Hence, any process holding either of those locks can ensure that
the value of drm_file.master will not change concurrently.
Since no lock depends on the new drm_file.master_lookup_lock, when
drm_file.master is dereferenced, but drm_device.master_mutex cannot be
held, we can safely protect the master pointer with
drm_file.master_lookup_lock.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-5-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_auth.c | 17 +++++++++++------
drivers/gpu/drm/drm_file.c | 1 +
include/drm/drm_file.h | 12 +++++++++---
3 files changed, 21 insertions(+), 9 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index 232abbba3686..0024ad93d24b 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -135,16 +135,18 @@ static void drm_set_master(struct drm_device *dev, struct drm_file *fpriv,
static int drm_new_set_master(struct drm_device *dev, struct drm_file *fpriv)
{
struct drm_master *old_master;
+ struct drm_master *new_master;
lockdep_assert_held_once(&dev->master_mutex);
WARN_ON(fpriv->is_master);
old_master = fpriv->master;
- fpriv->master = drm_master_create(dev);
- if (!fpriv->master) {
- fpriv->master = old_master;
+ new_master = drm_master_create(dev);
+ if (!new_master)
return -ENOMEM;
- }
+ spin_lock(&fpriv->master_lookup_lock);
+ fpriv->master = new_master;
+ spin_unlock(&fpriv->master_lookup_lock);
fpriv->is_master = 1;
fpriv->authenticated = 1;
@@ -302,10 +304,13 @@ int drm_master_open(struct drm_file *file_priv)
/* if there is no current master make this fd it, but do not create
* any master object for render clients */
mutex_lock(&dev->master_mutex);
- if (!dev->master)
+ if (!dev->master) {
ret = drm_new_set_master(dev, file_priv);
- else
+ } else {
+ spin_lock(&file_priv->master_lookup_lock);
file_priv->master = drm_master_get(dev->master);
+ spin_unlock(&file_priv->master_lookup_lock);
+ }
mutex_unlock(&dev->master_mutex);
return ret;
diff --git a/drivers/gpu/drm/drm_file.c b/drivers/gpu/drm/drm_file.c
index 0ac4566ae3f4..537e7de8e9c3 100644
--- a/drivers/gpu/drm/drm_file.c
+++ b/drivers/gpu/drm/drm_file.c
@@ -177,6 +177,7 @@ struct drm_file *drm_file_alloc(struct drm_minor *minor)
init_waitqueue_head(&file->event_wait);
file->event_space = 4096; /* set aside 4k for event buffer */
+ spin_lock_init(&file->master_lookup_lock);
mutex_init(&file->event_read_lock);
if (drm_core_check_feature(dev, DRIVER_GEM))
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index 716990bace10..ca659ece3ee8 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -226,15 +226,21 @@ struct drm_file {
/**
* @master:
*
- * Master this node is currently associated with. Only relevant if
- * drm_is_primary_client() returns true. Note that this only
- * matches &drm_device.master if the master is the currently active one.
+ * Master this node is currently associated with. Protected by struct
+ * &drm_device.master_mutex, and serialized by @master_lookup_lock.
+ *
+ * Only relevant if drm_is_primary_client() returns true. Note that
+ * this only matches &drm_device.master if the master is the currently
+ * active one.
*
* See also @authentication and @is_master and the :ref:`section on
* primary nodes and authentication <drm_primary_node>`.
*/
struct drm_master *master;
+ /** @master_lock: Serializes @master. */
+ spinlock_t master_lookup_lock;
+
/** @pid: Process that opened this file. */
struct pid *pid;
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH 5.10 000/306] 5.10.67-rc1 review
@ 2021-09-16 15:55 8% Greg Kroah-Hartman
2021-09-16 15:55 10% ` [PATCH 5.10 008/306] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
` (7 more replies)
0 siblings, 8 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:55 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.10.67 release.
There are 306 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 18 Sep 2021 15:57:06 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.67-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.10.67-rc1
Amir Goldstein <amir73il@gmail.com>
fanotify: limit number of event merge attempts
Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
drm/panfrost: Clamp lock region to Bifrost minimum
Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
drm/panfrost: Use u64 for size in lock_region
Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
drm/panfrost: Simplify lock_region calculation
Jerry (Fangzhi) Zuo <Jerry.Zuo@amd.com>
drm/amd/display: Update bounding box states (v2)
Aurabindo Pillai <aurabindo.pillai@amd.com>
drm/amd/display: Update number of DCN3 clock states
Andrey Grodzovsky <andrey.grodzovsky@amd.com>
drm/amdgpu: Fix BUG_ON assert
Boris Brezillon <boris.brezillon@collabora.com>
drm/panfrost: Make sure MMU context lifetime is not bound to panfrost_priv
Rajkumar Subbiah <rsubbia@codeaurora.org>
drm/dp_mst: Fix return code on sideband message failure
David Heidelberg <david@ixit.cz>
drm/msi/mdp4: populate priv->kms in mdp4_kms_init
Thomas Zimmermann <tzimmermann@suse.de>
drm/mgag200: Select clock in PLL update functions
Jan Hoffmann <jan@3e8.eu>
net: dsa: lantiq_gswip: fix maximum frame length
Kees Cook <keescook@chromium.org>
lib/test_stackinit: Fix static initializer test
Patryk Duda <pdk@semihalf.com>
platform/chrome: cros_ec_proto: Send command again when timeout occurs
sumiyawang <sumiyawang@tencent.com>
libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
Vasily Averin <vvs@virtuozzo.com>
memcg: enable accounting for pids in nested pid namespaces
Rik van Riel <riel@surriel.com>
mm,vmscan: fix divide by zero in get_scan_count
Liu Zixian <liuzixian4@huawei.com>
mm/hugetlb: initialize hugetlb_usage in mm_init
Li Zhijian <lizhijian@cn.fujitsu.com>
mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled
Mike Kravetz <mike.kravetz@oracle.com>
hugetlb: fix hugetlb cgroup refcounting during vma split
Halil Pasic <pasic@linux.ibm.com>
s390/pv: fix the forcing of the swiotlb
Pratik R. Sampat <psampat@linux.ibm.com>
cpufreq: powernv: Fix init_chip_info initialization in numa=off
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Sync queue idx with queue_pair_map idx
Saurav Kashyap <skashyap@marvell.com>
scsi: qla2xxx: Changes to support kdump kernel
Maciej W. Rozycki <macro@orcam.me.uk>
scsi: BusLogic: Fix missing pr_cont() use
chenying <chenying.kernel@bytedance.com>
ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
Mikulas Patocka <mpatocka@redhat.com>
parisc: fix crash with signals and alloca
Pavel Begunkov <asml.silence@gmail.com>
io_uring: remove duplicated io_size from rw
David Laight <David.Laight@ACULAB.COM>
fs/io_uring Don't use the return value from import_iovec().
Guojia Liao <liaoguojia@huawei.com>
net: hns3: clean up a type mismatch warning
Yang Yingliang <yangyingliang@huawei.com>
net: w5100: check return value after calling platform_get_resource()
Haimin Zhang <tcs_kernel@tencent.com>
fix array-index-out-of-bounds in taprio_change
王贇 <yun.wang@linux.alibaba.com>
net: fix NULL pointer reference in cipso_v4_doi_free
Miaoqing Pan <miaoqing@codeaurora.org>
ath9k: fix sleeping in atomic context
Zekun Shen <bruceshenzk@gmail.com>
ath9k: fix OOB read ar9300_eeprom_restore_internal
Loic Poulain <loic.poulain@linaro.org>
wcn36xx: Fix missing frame timestamp for beacon/probe-resp
Chengfeng Ye <cyeaa@connect.ust.hk>
selftests/bpf: Fix potential unreleased lock
Colin Ian King <colin.king@canonical.com>
parport: remove non-zero check on count
Yevgeny Kliteynik <kliteyn@nvidia.com>
net/mlx5: DR, Enable QP retransmission
Wentao_Liang <Wentao_Liang_g@163.com>
net/mlx5: DR, fix a potential use-after-free bug
Ilan Peer <ilan.peer@intel.com>
iwlwifi: mvm: Fix scan channel flags settings
Johannes Berg <johannes.berg@intel.com>
iwlwifi: fw: correctly limit to monitor dump
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: fix access to BSS elements
Johannes Berg <johannes.berg@intel.com>
iwlwifi: mvm: avoid static queue number aliasing
Zhang Qilong <zhangqilong3@huawei.com>
iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
Johannes Berg <johannes.berg@intel.com>
iwlwifi: pcie: free RBs during configure
J. Bruce Fields <bfields@redhat.com>
nfsd: fix crash on LOCKT on reexported NFSv3
Sean Keely <Sean.Keely@amd.com>
drm/amdkfd: Account for SH/SE count when setting up cu masks.
Xiaotan Luo <lxt@rock-chips.com>
ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
Sugar Zhang <sugar.zhang@rock-chips.com>
ASoC: rockchip: i2s: Fix regmap_ops hang
Shuah Khan <skhan@linuxfoundation.org>
usbip:vhci_hcd USB port can get stuck in the disabled state
Anirudh Rayabharam <mail@anirudhrb.com>
usbip: give back URBs for unsent unlink requests during cleanup
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: musb: musb_dsps: request_irq() after initializing musb
Mathias Nyman <mathias.nyman@linux.intel.com>
Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
Ding Hui <dinghui@sangfor.com.cn>
cifs: fix wrong release in sess_alloc_buffer() failed path
Nishad Kamdar <nishadkamdar@gmail.com>
mmc: core: Return correct emmc response in case of ioctl error
Li Zhijian <lizhijian@cn.fujitsu.com>
selftests/bpf: Enlarge select() timeout for test_maps
Thomas Hebb <tommyhebb@gmail.com>
mmc: rtsx_pci: Fix long reads when clock is prescaled
Manish Narani <manish.narani@xilinx.com>
mmc: sdhci-of-arasan: Check return value of non-void funtions
Manish Narani <manish.narani@xilinx.com>
mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP
Marc Zyngier <maz@kernel.org>
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
Gustaw Lewandowski <gustaw.lewandowski@linux.intel.com>
ASoC: Intel: Skylake: Fix passing loadable flag for module
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
soundwire: intel: fix potential race condition during power down
Marcos Paulo de Souza <mpdesouza@suse.com>
btrfs: tree-log: check btrfs_lookup_data_extent return value
Arnd Bergmann <arnd@arndb.de>
m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-pf: Fix NIX1_RX interface backpressure
Chin-Yen Lee <timlee@realtek.com>
rtw88: wow: fix size access error of probe request
Ping-Ke Shih <pkshih@realtek.com>
rtw88: wow: build wow function only if CONFIG_PM is on
Chin-Yen Lee <timlee@realtek.com>
rtw88: use read_poll_timeout instead of fixed sleep
Chris Chiu <chris.chiu@canonical.com>
rtl8xxxu: Fix the handling of TX A-MPDU aggregation
Nathan Chancellor <nathan@kernel.org>
drm/exynos: Always initialize mapping in exynos_drm_register_dma()
J. Bruce Fields <bfields@redhat.com>
lockd: lockd server-side shouldn't set fl_ops
Li Jun <jun.li@nxp.com>
usb: chipidea: host: fix port index underflow and UBSAN complains
Bob Peterson <rpeterso@redhat.com>
gfs2: Don't call dlm after protocol is unmounted
Mark Brown <broonie@kernel.org>
kselftest/arm64: pac: Fix skipping of tests on systems without PAC
Mark Brown <broonie@kernel.org>
kselftest/arm64: mte: Fix misleading output when skipping tests
Eli Cohen <elic@nvidia.com>
net: Fix offloading indirect devices dependency on qdisc order creation
Kees Cook <keescook@chromium.org>
staging: rts5208: Fix get_ms_information() heap buffer size
Brandon Wyman <bjwyman@gmail.com>
hwmon: (pmbus/ibm-cffps) Fix write bits for LED control
Yonghong Song <yhs@fb.com>
selftests/bpf: Fix flaky send_signal test
J. Bruce Fields <bfields@redhat.com>
rpc: fix gss_svc_init cleanup on failure
Luke Hsiao <lukehsiao@google.com>
tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
Darrick J. Wong <djwong@kernel.org>
iomap: pass writeback errors to the mapping
Ulrich Hecht <uli+renesas@fpond.eu>
serial: sh-sci: fix break handling for sysrq
Rajendra Nayak <rnayak@codeaurora.org>
opp: Don't print an error if required-opps is missing
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: Fix handling of LE Enhanced Connection Complete
Sagi Grimberg <sagi@grimberg.me>
nvme: code command_id with a genctr for use-after-free validation
Sagi Grimberg <sagi@grimberg.me>
nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
Raag Jadav <raagjadav@gmail.com>
arm64: dts: ls1046a: fix eeprom entries
Thierry Reding <treding@nvidia.com>
arm64: tegra: Fix compatible string for Tegra132 CPUs
Andreas Obergschwandtner <andreas.obergschwandtner@gmail.com>
ARM: tegra: tamonten: Fix UART pad setting
Dmitry Osipenko <digetx@gmail.com>
ARM: tegra: acer-a500: Remove bogus USB VBUS regulators
Johan Almbladh <johan.almbladh@anyfinetworks.com>
mac80211: Fix monitor MTU limit so that A-MSDUs get through
Tuo Li <islituo@gmail.com>
drm/display: fix possible null-pointer dereference in dcn10_set_clock()
Tuo Li <islituo@gmail.com>
gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
Eran Ben Elisha <eranbe@nvidia.com>
net/mlx5: Fix variable type to match 64bit
Kuogee Hsieh <khsieh@codeaurora.org>
drm/msm/dp: return correct edid checksum after corrupted edid checksum read
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: avoid circular locks in sco_sock_connect
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: schedule SCO timeouts with delayed_work
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
Jussi Maki <joamaki@gmail.com>
selftests/bpf: Fix xdp_tx.c prog section name
Roy Chan <roy.chan@amd.com>
drm/amd/display: fix incorrect CM/TF programming sequence in dwb
Roy Chan <roy.chan@amd.com>
drm/amd/display: fix missing writeback disablement if plane is removed
Sanjay R Mehta <sanju.mehta@amd.com>
thunderbolt: Fix port linking by checking all adapters
Quanyang Wang <quanyang.wang@windriver.com>
drm: xlnx: zynqmp: release reset to DP controller before accessing DP registers
Quanyang Wang <quanyang.wang@windriver.com>
drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock
Konrad Dybcio <konrad.dybcio@somainline.org>
drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660
David Heidelberg <david@ixit.cz>
drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
Nathan Chancellor <nathan@kernel.org>
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
Rajendra Nayak <rnayak@codeaurora.org>
nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
Georgi Djakov <georgi.djakov@linaro.org>
arm64: dts: qcom: sm8250: Fix epss_l3 unit address
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: msm8996: don't use underscore in node name
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: msm8994: don't use underscore in node name
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: sdm630: don't use underscore in node name
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: ipq6018: drop '0x' from unit address
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: sdm660: use reg value for memory node
Vinod Koul <vkoul@kernel.org>
arm64: dts: qcom: ipq8074: fix pci node reg property
Sebastian Reichel <sebastian.reichel@collabora.com>
ARM: dts: imx53-ppd: Fix ACHC entry
Tony Lindgren <tony@atomide.com>
serial: 8250_omap: Handle optional overrun-throttle-ms property
AngeloGioacchino Del Regno <angelogioacchino.delregno@somainline.org>
arm64: dts: qcom: sdm630: Fix TLMM node and pinctrl configuration
AngeloGioacchino Del Regno <angelogioacchino.delregno@somainline.org>
arm64: dts: qcom: sdm630: Rewrite memory map
Bob Peterson <rpeterso@redhat.com>
gfs2: Fix glock recursion in freeze_go_xmote_bh
Evgeny Novikov <novikov@ispras.ru>
media: tegra-cec: Handle errors of clk_prepare_enable()
Krzysztof Hałasa <khalasa@piap.pl>
media: TDA1997x: fix tda1997x_query_dv_timings() return value
Hans Verkuil <hverkuil-cisco@xs4all.nl>
media: v4l2-dv-timings.c: fix wrong condition in two for-loops
Umang Jain <umang.jain@ideasonboard.com>
media: imx258: Limit the max analogue gain to 480
Laurent Pinchart <laurent.pinchart@ideasonboard.com>
media: imx258: Rectify mismatch of VTS value
Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
ASoC: Intel: update sof_pcm512x quirks
Hans de Goede <hdegoede@redhat.com>
ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
Vidya Sagar <vidyas@nvidia.com>
arm64: tegra: Fix Tegra194 PCIe EP compatible string
Nicolas Ferre <nicolas.ferre@microchip.com>
ARM: dts: at91: use the right property for shutdown controller
Yufeng Mo <moyufeng@huawei.com>
bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Update AV96 adv7513 node per dtbs_check
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Set {bitclock,frame}-master phandles on ST DKx
Marek Vasut <marex@denx.de>
ARM: dts: stm32: Set {bitclock,frame}-master phandles on DHCOM SoM
Zhen Lei <thunder.leizhen@huawei.com>
workqueue: Fix possible memory leaks in wq_numa_init()
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: skip invalid hci_sync_conn_complete_evt
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
Martynas Pumputis <m@lambda.lt>
libbpf: Fix race when pinning maps in parallel
Juhee Kang <claudiajkang@gmail.com>
samples: bpf: Fix tracex7 error raised on the missing argument
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
staging: ks7010: Fix the initialization of the 'sleep_status' structure
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
serial: 8250_pci: make setup_port() parameters explicitly unsigned
Jiri Slaby <jirislaby@kernel.org>
hvsi: don't panic on tty_register_driver failure
Jiri Slaby <jirislaby@kernel.org>
xtensa: ISS: don't panic in rs_init
Maciej W. Rozycki <macro@orcam.me.uk>
serial: 8250: Define RX trigger levels for OxSemi 950 devices
Niklas Schnelle <schnelle@linux.ibm.com>
s390: make PCI mio support a machine flag
Heiko Carstens <hca@linux.ibm.com>
s390/jump_label: print real address in a case of a jump label bug
Gustavo A. R. Silva <gustavoars@kernel.org>
flow_dissector: Fix out-of-bounds warnings
Gustavo A. R. Silva <gustavoars@kernel.org>
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: riva: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: Error out if 'pixclock' equals zero
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
Jernej Skrabec <jernej.skrabec@gmail.com>
arm64: dts: allwinner: h6: tanix-tx6: Fix regulator node names
Geert Uytterhoeven <geert+renesas@glider.be>
drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Do not PASS tests without actually testing the result
Johan Almbladh <johan.almbladh@anyfinetworks.com>
bpf/tests: Fix copy-and-paste error in double word test
Anson Jacob <Anson.Jacob@amd.com>
drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
Oak Zeng <Oak.Zeng@amd.com>
drm/amdgpu: Fix a printing message
Arnd Bergmann <arnd@arndb.de>
ethtool: improve compat ioctl handling
Niklas Söderlund <niklas.soderlund@corigine.com>
nfp: fix return statement in nfp_net_parse_meta()
Yang Yingliang <yangyingliang@huawei.com>
media: atomisp: pci: fix error return code in atomisp_pci_probe()
Dinghao Liu <dinghao.liu@zju.edu.cn>
media: atomisp: Fix runtime PM imbalance in atomisp_pci_probe
Evgeny Novikov <novikov@ispras.ru>
media: platform: stm32: unprepare clocks at handling errors in probe
Ezequiel Garcia <ezequiel@collabora.com>
media: hantro: vp8: Move noisy WARN_ON to vpu_debug
Oliver Logush <oliver.logush@amd.com>
drm/amd/display: Fix timer_per_pixel unit error
Shuah Khan <skhan@linuxfoundation.org>
selftests: firmware: Fix ignored return val of asprintf() warn
Laurentiu Tudor <laurentiu.tudor@nxp.com>
bus: fsl-mc: fix mmio base address for child DPRCs
Zheyu Ma <zheyuma97@gmail.com>
tty: serial: jsm: hold port lock when reporting modem line changes
Geert Uytterhoeven <geert+renesas@glider.be>
staging: board: Fix uninitialized spinlock when attaching genpd
Jack Pham <jackp@codeaurora.org>
usb: gadget: composite: Allow bMaxPower=0 if self-powered
Evgeny Novikov <novikov@ispras.ru>
USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
Maciej Żenczykowski <maze@google.com>
usb: gadget: u_ether: fix a potential null pointer dereference
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the actual_length of an iso packet
Kelly Devilliv <kelly.devilliv@gmail.com>
usb: host: fotg210: fix the endpoint's transactional opportunities calculation
Sasha Neftin <sasha.neftin@intel.com>
igc: Check if num of q_vectors is smaller than max before array access
Zhouyi Zhou <zhouzhouyi@gmail.com>
rcu: Fix macro name CONFIG_TASKS_RCU_TRACE
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
drm: protect drm_master pointers in drm_lease.c
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
drm: serialize drm_file.master with a new spinlock
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
drm: avoid blocking in drm_clients_info's rcu section
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Smack: Fix wrong semantics in smk_access_entry()
Yajun Deng <yajun.deng@linux.dev>
netlink: Deal with ESRCH error in nlmsg_notify()
Zheyu Ma <zheyuma97@gmail.com>
video: fbdev: kyro: fix a DoS bug by restricting user input
David Heidelberg <david@ixit.cz>
ARM: dts: qcom: apq8064: correct clock names
Stefan Assmann <sassmann@kpanic.de>
iavf: fix locking of critical sections
Stefan Assmann <sassmann@kpanic.de>
iavf: do not override the adapter state in the watchdog task
Jonathan Cameron <Jonathan.Cameron@huawei.com>
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
Marek Vasut <marex@denx.de>
net: phy: Fix data type in DP83822 dp8382x_disable_wol()
Xin Long <lucien.xin@gmail.com>
tipc: keep the skb in rcv queue until the whole data is read
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: Use pci_update_current_state() in pci_enable_device_flags()
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Use sg_mapping_iter to copy data
Ani Sinha <ani@anisinha.ca>
x86/hyperv: fix for unwanted manipulation of sched_clock when TSC marked unstable
Martynas Pumputis <m@lambda.lt>
libbpf: Fix reuse of pinned map on older kernel
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: dib8000: rewrite the init prbs logic
Randy Dunlap <rdunlap@infradead.org>
ASoC: atmel: ATMEL drivers don't need HAS_DMA
Luben Tuikov <luben.tuikov@amd.com>
drm/amdgpu: Fix amdgpu_ras_eeprom_init()
Dom Cobley <popcornmix@gmail.com>
drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET
Nadav Amit <namit@vmware.com>
userfaultfd: prevent concurrent API initialization
Masahiro Yamada <masahiroy@kernel.org>
kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
Oleksij Rempel <linux@rempel-privat.de>
MIPS: Malta: fix alignment of the devicetree buffer
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: should put a page beyond EOF when preparing a write
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: deallocate compressed pages when error happens
Chao Yu <chao@kernel.org>
f2fs: fix to unmap pages from userspace process in punch_hole()
Chao Yu <chao@kernel.org>
f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
Chao Yu <chao@kernel.org>
f2fs: fix to account missing .skipped_gc_rwsem
Yongqiang Niu <yongqiang.niu@mediatek.com>
soc: mediatek: cmdq: add address shift in jump
Alexey Kardashevskiy <aik@ozlabs.ru>
KVM: PPC: Fix clearing never mapped TCEs in realmode
Codrin Ciubotariu <codrin.ciubotariu@microchip.com>
clk: at91: clk-generated: Limit the requested rate to our range
David Howells <dhowells@redhat.com>
fscache: Fix cookie key hashing
Wenpeng Liang <liangwenpeng@huawei.com>
RDMA/hns: Fix QP's resp incomplete assignment
Srikar Dronamraju <srikar@linux.vnet.ibm.com>
powerpc/smp: Update cpu_core_map on all PowerPc systems
Hans de Goede <hdegoede@redhat.com>
platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
Nicholas Piggin <npiggin@gmail.com>
KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live
Alim Akhtar <alim.akhtar@samsung.com>
scsi: ufs: ufs-exynos: Fix static checker warning
Fabiano Rosas <farosas@linux.ibm.com>
KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines
Ahmad Fatoum <a.fatoum@pengutronix.de>
clk: imx8m: fix clock tree update of TF-A managed clocks
Jim Broadus <jbroadus@gmail.com>
HID: i2c-hid: Fix Elan touchpad regression
Lu Baolu <baolu.lu@linux.intel.com>
iommu/vt-d: Update the virtual command related registers
Joel Stanley <joel@jms.id.au>
powerpc/config: Renable MTD_PHYSMAP_OF
Dan Carpenter <dan.carpenter@oracle.com>
scsi: qedf: Fix error codes in qedf_alloc_global_queues()
Dan Carpenter <dan.carpenter@oracle.com>
scsi: qedi: Fix error codes in qedi_alloc_global_queues()
Dan Carpenter <dan.carpenter@oracle.com>
scsi: smartpqi: Fix an error code in pqi_get_raid_map()
Laurent Dufour <ldufour@linux.ibm.com>
powerpc/numa: Consider the max NUMA node for migratable LPAR
Zhen Lei <thunder.leizhen@huawei.com>
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
Wei Li <liwei391@huawei.com>
scsi: fdomain: Fix error return code in fdomain_probe()
Anna Schumaker <Anna.Schumaker@Netapp.com>
sunrpc: Fix return value of get_srcport()
Olga Kornievskaia <kolga@netapp.com>
SUNRPC query transport's source port
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC/xprtrdma: Fix reconnection locking
Trond Myklebust <trond.myklebust@hammerspace.com>
SUNRPC: Fix potential memory corruption
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4/pNFS: Always allow update of a zero valued layout barrier
Trond Myklebust <trond.myklebust@hammerspace.com>
NFSv4/pNFS: Fix a layoutget livelock loop
Anthony Iliopoulos <ailiop@suse.com>
dma-debug: fix debugfs initialization order
Randy Dunlap <rdunlap@infradead.org>
openrisc: don't printk() unconditionally
Yangtao Li <frank.li@vivo.com>
f2fs: reduce the scope of setting fsck tag when de->name_len is zero
Nathan Chancellor <nathan@kernel.org>
cpuidle: pseries: Mark pseries_idle_proble() as __init
Leon Romanovsky <leon@kernel.org>
RDMA/mlx5: Delete not-available udata check
Leon Romanovsky <leon@kernel.org>
RDMA/efa: Remove double QP type assignment
Michal Suchanek <msuchanek@suse.de>
powerpc/stacktrace: Include linux/delay.h
Gautham R. Shenoy <ego@linux.vnet.ibm.com>
cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards
Bart Van Assche <bvanassche@acm.org>
scsi: ufs: Fix memory corruption by ufshcd_read_desc_param()
Jason Gunthorpe <jgg@ziepe.ca>
vfio: Use config not menuconfig for VFIO_NOIOMMU
Jaehyoung Choi <jkkkkk.choi@samsung.com>
pinctrl: samsung: Fix pinctrl bank pin count
Colin Ian King <colin.king@canonical.com>
scsi: BusLogic: Use %X for u32 sized integer rather than %lX
Leon Romanovsky <leon@kernel.org>
docs: Fix infiniband uverbs minor number
Leon Romanovsky <leon@kernel.org>
RDMA/iwcm: Release resources if iw_cm module initialization fails
Mike Marciniszyn <mike.marciniszyn@cornelisnetworks.com>
IB/hfi1: Adjust pkey entry in index 0
Peter Geis <pgwipeout@gmail.com>
clk: rockchip: drop GRF dependency for rk3328/rk3036 pll types
Christoph Hellwig <hch@lst.de>
scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
Marek Behún <kabel@kernel.org>
pinctrl: armada-37xx: Correct PWM pins definitions
Zhaoyu Liu <zackary.liu.pro@gmail.com>
pinctrl: remove empty lines in pinctrl subsystem
Chao Yu <chao@kernel.org>
f2fs: quota: fix potential deadlock
Dmitry Torokhov <dmitry.torokhov@gmail.com>
HID: input: do not report stylus battery state as "full"
Pali Rohár <pali@kernel.org>
PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
Evan Wang <xswang@marvell.com>
PCI: aardvark: Fix checking for PIO status
Jianjun Wang <jianjun.wang@mediatek.com>
PCI: Export pci_pio_to_address() for module use
Pali Rohár <pali@kernel.org>
PCI: aardvark: Configure PCIe resources from 'ranges' DT property
Hyun Kwon <hyun.kwon@xilinx.com>
PCI: xilinx-nwl: Enable the clock through CCF
Krzysztof Wilczyński <kw@linux.com>
PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
Marek Behún <kabel@kernel.org>
PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
Stuart Hayes <stuart.w.hayes@gmail.com>
PCI/portdrv: Enable Bandwidth Notification only if port supports it
Chao Yu <chao@kernel.org>
f2fs: fix to do sanity check for sb/cp fields correctly
David Heidelberg <david@ixit.cz>
ARM: 9105/1: atags_to_fdt: don't warn about stack size
Hans de Goede <hdegoede@redhat.com>
libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
Robin Gong <yibin.gong@nxp.com>
dmaengine: imx-sdma: remove duplicated sdma_load_context
Robin Gong <yibin.gong@nxp.com>
Revert "dmaengine: imx-sdma: refine to load context only once"
Julian Wiedmann <jwi@linux.ibm.com>
s390/qdio: cancel the ESTABLISH ccw after timeout
Julian Wiedmann <jwi@linux.ibm.com>
s390/qdio: fix roll-back after timeout on ESTABLISH ccw
Sean Young <sean@mess.org>
media: rc-loopback: return number of emitters rather than error
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: uvc: don't do DMA on stack
Wang Hai <wanghai38@huawei.com>
VMCI: fix NULL pointer dereference when unmapping queue pair
Brijesh Singh <brijesh.singh@amd.com>
crypto: ccp - shutdown SEV firmware on kexec
Arne Welzel <arne.welzel@corelight.com>
dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
Kevin Hao <haokexin@gmail.com>
cpufreq: schedutil: Use kobject release() method to free sugov_tunables
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
power: supply: max17042: handle fails of reading status register
Damien Le Moal <damien.lemoal@wdc.com>
block: bfq: fix bfq_set_next_ioprio_data()
zhenwei pi <pizhenwei@bytedance.com>
crypto: public_key: fix overflow during implicit conversion
Joseph Gates <jgates@squareup.com>
wcn36xx: Ensure finish scan is not requested before start scan
Nuno Sá <nuno.sa@analog.com>
iio: ltc2983: fix device probe
Mark Rutland <mark.rutland@arm.com>
arm64: head: avoid over-mapping in map_memory
Will Deacon <will@kernel.org>
arm64: mm: Fix TLBI vs ASID rollover
Iwona Winiarska <iwona.winiarska@intel.com>
soc: aspeed: p2a-ctrl: Fix boundary check for mmap
Iwona Winiarska <iwona.winiarska@intel.com>
soc: aspeed: lpc-ctrl: Fix boundary check for mmap
Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org>
soc: qcom: aoss: Fix the out of bound usage of cooling_devs
Paul Cercueil <paul@crapouillou.net>
pinctrl: ingenic: Fix incorrect pull up/down info
Marc Zyngier <maz@kernel.org>
pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
Dinh Nguyen <dinguyen@kernel.org>
clk: socfpga: agilex: add the bypass register for s2f_usr0 clock
Dinh Nguyen <dinguyen@kernel.org>
clk: socfpga: agilex: fix up s2f_user0_clk representation
Dinh Nguyen <dinguyen@kernel.org>
clk: socfpga: agilex: fix the parents of the psi_ref_clk
Rolf Eike Beer <eb@emlix.com>
tools/thermal/tmon: Add cross compiling support
Steven Rostedt (VMware) <rostedt@goodmis.org>
selftests/ftrace: Fix requirement check of README file
Colin Ian King <colin.king@canonical.com>
ceph: fix dereference of null pointer cf
Harshvardhan Jha <harshvardhan.jha@oracle.com>
9p/xen: Fix end of loop tests for list_for_each_entry
Juergen Gross <jgross@suse.com>
xen: fix setting of max_pfn in shared_info
Kajol Jain <kjain@linux.ibm.com>
powerpc/perf/hv-gpci: Fix counter value parsing
Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
PCI/MSI: Skip masking MSI-X on Xen PV
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
Niklas Cassel <niklas.cassel@wdc.com>
blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
btrfs: reset replace target device to allocation state on close
Josef Bacik <josef@toxicpanda.com>
btrfs: wake up async_delalloc_pages waiters after submit
Jens Axboe <axboe@kernel.dk>
io-wq: fix wakeup race when adding new work
Pavel Begunkov <asml.silence@gmail.com>
io_uring: fail links of cancelled timeouts
Pavel Begunkov <asml.silence@gmail.com>
io_uring: add ->splice_fd_in checks
Pavel Begunkov <asml.silence@gmail.com>
io_uring: place fixed tables under memcg limits
Pavel Begunkov <asml.silence@gmail.com>
io_uring: limit fixed table size by RLIMIT_NOFILE
Dmitry Osipenko <digetx@gmail.com>
rtc: tps65910: Correct driver module alias
-------------
Diffstat:
Documentation/admin-guide/devices.txt | 6 +-
.../pinctrl/marvell,armada-37xx-pinctrl.txt | 8 +-
Makefile | 4 +-
arch/arm/boot/compressed/Makefile | 2 +
arch/arm/boot/dts/at91-kizbox3_common.dtsi | 2 +-
arch/arm/boot/dts/at91-sam9x60ek.dts | 2 +-
arch/arm/boot/dts/at91-sama5d27_som1_ek.dts | 2 +-
arch/arm/boot/dts/at91-sama5d27_wlsom1_ek.dts | 2 +-
arch/arm/boot/dts/at91-sama5d2_icp.dts | 2 +-
arch/arm/boot/dts/at91-sama5d2_ptc_ek.dts | 2 +-
arch/arm/boot/dts/at91-sama5d2_xplained.dts | 2 +-
arch/arm/boot/dts/imx53-ppd.dts | 23 +-
arch/arm/boot/dts/qcom-apq8064.dtsi | 6 +-
arch/arm/boot/dts/stm32mp15xx-dhcom-pdk2.dtsi | 8 +-
arch/arm/boot/dts/stm32mp15xx-dhcor-avenger96.dtsi | 6 +-
arch/arm/boot/dts/stm32mp15xx-dkx.dtsi | 8 +-
arch/arm/boot/dts/tegra20-acer-a500-picasso.dts | 25 +-
arch/arm/boot/dts/tegra20-tamonten.dtsi | 14 +-
.../boot/dts/allwinner/sun50i-h6-tanix-tx6.dts | 4 +-
arch/arm64/boot/dts/freescale/fsl-ls1046a-frwy.dts | 8 +-
arch/arm64/boot/dts/freescale/fsl-ls1046a-rdb.dts | 7 +-
arch/arm64/boot/dts/nvidia/tegra132.dtsi | 4 +-
arch/arm64/boot/dts/nvidia/tegra194.dtsi | 6 +-
arch/arm64/boot/dts/qcom/ipq6018.dtsi | 2 +-
arch/arm64/boot/dts/qcom/ipq8074-hk01.dts | 2 +-
arch/arm64/boot/dts/qcom/ipq8074.dtsi | 16 +-
arch/arm64/boot/dts/qcom/msm8994.dtsi | 6 +-
arch/arm64/boot/dts/qcom/msm8996.dtsi | 4 +-
arch/arm64/boot/dts/qcom/sdm630.dtsi | 257 ++++++++++++--------
arch/arm64/boot/dts/qcom/sm8250.dtsi | 2 +-
arch/arm64/include/asm/kernel-pgtable.h | 4 +-
arch/arm64/include/asm/mmu.h | 29 ++-
arch/arm64/include/asm/tlbflush.h | 11 +-
arch/arm64/kernel/head.S | 11 +-
arch/m68k/Kconfig.bus | 2 +-
arch/mips/mti-malta/malta-dtshim.c | 2 +-
arch/openrisc/kernel/entry.S | 2 +
arch/parisc/kernel/signal.c | 6 +
arch/powerpc/configs/mpc885_ads_defconfig | 1 +
arch/powerpc/include/asm/pmc.h | 7 +
arch/powerpc/kernel/smp.c | 11 +-
arch/powerpc/kernel/stacktrace.c | 1 +
arch/powerpc/kvm/book3s_64_mmu_radix.c | 6 +-
arch/powerpc/kvm/book3s_64_vio_hv.c | 9 +-
arch/powerpc/kvm/book3s_hv.c | 20 ++
arch/powerpc/mm/numa.c | 13 +-
arch/powerpc/perf/hv-gpci.c | 2 +-
arch/s390/include/asm/setup.h | 2 +
arch/s390/kernel/early.c | 4 +
arch/s390/kernel/jump_label.c | 2 +-
arch/s390/mm/init.c | 2 +-
arch/s390/pci/pci.c | 5 +-
arch/x86/kernel/cpu/mshyperv.c | 9 +-
arch/x86/xen/p2m.c | 4 +-
arch/xtensa/platforms/iss/console.c | 17 +-
block/bfq-iosched.c | 2 +-
block/blk-zoned.c | 6 -
block/bsg.c | 5 +-
drivers/ata/libata-core.c | 4 +
drivers/ata/sata_dwc_460ex.c | 12 +-
drivers/bus/fsl-mc/fsl-mc-bus.c | 24 +-
drivers/clk/at91/clk-generated.c | 6 +
drivers/clk/imx/clk-composite-8m.c | 3 +-
drivers/clk/imx/clk-imx8mm.c | 7 +-
drivers/clk/imx/clk-imx8mn.c | 7 +-
drivers/clk/imx/clk-imx8mq.c | 7 +-
drivers/clk/imx/clk.h | 16 +-
drivers/clk/rockchip/clk-pll.c | 2 +-
drivers/clk/socfpga/clk-agilex.c | 19 +-
drivers/cpufreq/powernv-cpufreq.c | 16 +-
drivers/cpuidle/cpuidle-pseries.c | 18 +-
drivers/crypto/ccp/sev-dev.c | 49 ++--
drivers/crypto/ccp/sp-pci.c | 12 +
drivers/crypto/mxs-dcp.c | 36 +--
drivers/dma/imx-sdma.c | 13 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 2 +-
drivers/gpu/drm/amd/amdgpu/vcn_v1_0.c | 2 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 2 +-
drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 2 +-
drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.c | 84 +++++--
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.h | 1 +
.../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 16 +-
.../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 11 +-
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 14 +-
.../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 2 +-
.../gpu/drm/amd/display/dc/dcn30/dcn30_dwb_cm.c | 90 +++++--
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 12 +-
.../gpu/drm/amd/display/dc/dcn30/dcn30_resource.c | 42 +++-
drivers/gpu/drm/bridge/nwl-dsi.c | 2 +-
drivers/gpu/drm/drm_auth.c | 42 +++-
drivers/gpu/drm/drm_debugfs.c | 3 +-
drivers/gpu/drm/drm_dp_mst_topology.c | 10 +-
drivers/gpu/drm/drm_file.c | 1 +
drivers/gpu/drm/drm_lease.c | 81 +++++--
drivers/gpu/drm/exynos/exynos_drm_dma.c | 2 +
drivers/gpu/drm/mgag200/mgag200_drv.h | 16 ++
drivers/gpu/drm/mgag200/mgag200_mode.c | 20 +-
drivers/gpu/drm/mgag200/mgag200_reg.h | 9 +-
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 17 +-
drivers/gpu/drm/msm/dp/dp_panel.c | 9 +-
drivers/gpu/drm/msm/dsi/dsi_cfg.c | 1 -
drivers/gpu/drm/msm/dsi/phy/dsi_phy_14nm.c | 2 +-
drivers/gpu/drm/panfrost/panfrost_device.h | 8 +-
drivers/gpu/drm/panfrost/panfrost_drv.c | 50 +---
drivers/gpu/drm/panfrost/panfrost_gem.c | 20 +-
drivers/gpu/drm/panfrost/panfrost_job.c | 4 +-
drivers/gpu/drm/panfrost/panfrost_mmu.c | 191 +++++++++------
drivers/gpu/drm/panfrost/panfrost_mmu.h | 5 +-
drivers/gpu/drm/panfrost/panfrost_regs.h | 2 +
drivers/gpu/drm/vc4/vc4_hdmi.c | 4 +-
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 4 +-
drivers/gpu/drm/xlnx/zynqmp_disp.c | 3 +-
drivers/gpu/drm/xlnx/zynqmp_dp.c | 22 +-
drivers/hid/hid-input.c | 2 -
drivers/hid/i2c-hid/i2c-hid-core.c | 5 +-
drivers/hwmon/pmbus/ibm-cffps.c | 6 +-
drivers/iio/dac/ad5624r_spi.c | 18 +-
drivers/iio/temperature/ltc2983.c | 30 ++-
drivers/infiniband/core/iwcm.c | 19 +-
drivers/infiniband/hw/efa/efa_verbs.c | 1 -
drivers/infiniband/hw/hfi1/init.c | 7 +-
drivers/infiniband/hw/hns/hns_roce_qp.c | 3 +-
drivers/infiniband/hw/mlx5/qp.c | 3 -
drivers/iommu/intel/pasid.h | 10 +-
drivers/mailbox/mtk-cmdq-mailbox.c | 3 +-
drivers/md/dm-crypt.c | 7 +-
drivers/media/cec/platform/stm32/stm32-cec.c | 26 +-
drivers/media/cec/platform/tegra/tegra_cec.c | 10 +-
drivers/media/dvb-frontends/dib8000.c | 58 +++--
drivers/media/i2c/imx258.c | 4 +-
drivers/media/i2c/tda1997x.c | 5 +-
drivers/media/rc/rc-loopback.c | 2 +-
drivers/media/usb/uvc/uvc_v4l2.c | 34 ++-
drivers/media/v4l2-core/v4l2-dv-timings.c | 4 +-
drivers/misc/vmw_vmci/vmci_queue_pair.c | 6 +-
drivers/mmc/core/block.c | 3 +-
drivers/mmc/host/rtsx_pci_sdmmc.c | 36 ++-
drivers/mmc/host/sdhci-of-arasan.c | 36 ++-
drivers/net/bonding/bond_main.c | 3 +-
drivers/net/dsa/lantiq_gswip.c | 3 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 9 +-
drivers/net/ethernet/intel/iavf/iavf_main.c | 58 ++++-
drivers/net/ethernet/intel/igc/igc_main.c | 9 +-
.../ethernet/marvell/octeontx2/nic/otx2_common.c | 15 ++
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 8 +-
.../ethernet/mellanox/mlx5/core/steering/dr_rule.c | 2 +-
.../ethernet/mellanox/mlx5/core/steering/dr_send.c | 1 +
.../net/ethernet/netronome/nfp/nfp_net_common.c | 2 +-
.../net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 +-
drivers/net/ethernet/wiznet/w5100.c | 2 +
drivers/net/phy/dp83822.c | 8 +-
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3 +-
drivers/net/wireless/ath/ath9k/hw.c | 12 +-
drivers/net/wireless/ath/wcn36xx/main.c | 5 +-
drivers/net/wireless/ath/wcn36xx/txrx.c | 4 +
drivers/net/wireless/ath/wcn36xx/wcn36xx.h | 1 +
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 4 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 8 +-
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 24 +-
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 30 ++-
drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 5 +-
drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 3 +
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu.h | 2 +
.../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 33 ++-
drivers/net/wireless/realtek/rtw88/Makefile | 2 +-
drivers/net/wireless/realtek/rtw88/fw.c | 8 +-
drivers/net/wireless/realtek/rtw88/fw.h | 1 +
drivers/net/wireless/realtek/rtw88/wow.c | 21 +-
drivers/nvdimm/pmem.c | 4 +-
drivers/nvme/host/core.c | 3 +-
drivers/nvme/host/nvme.h | 47 +++-
drivers/nvme/host/pci.c | 2 +-
drivers/nvme/host/rdma.c | 4 +-
drivers/nvme/host/tcp.c | 38 ++-
drivers/nvme/target/loop.c | 4 +-
drivers/nvmem/qfprom.c | 6 +-
drivers/of/kobj.c | 2 +-
drivers/opp/of.c | 12 +-
drivers/parport/ieee1284_ops.c | 2 +-
drivers/pci/controller/pci-aardvark.c | 266 ++++++++++++++++++++-
drivers/pci/controller/pcie-xilinx-nwl.c | 12 +
drivers/pci/msi.c | 3 +
drivers/pci/pci.c | 7 +-
drivers/pci/pcie/portdrv_core.c | 9 +-
drivers/pci/quirks.c | 1 +
drivers/pci/syscall.c | 4 +-
drivers/pinctrl/actions/pinctrl-owl.c | 1 -
drivers/pinctrl/core.c | 1 -
drivers/pinctrl/freescale/pinctrl-imx1-core.c | 1 -
drivers/pinctrl/mvebu/pinctrl-armada-37xx.c | 17 +-
drivers/pinctrl/pinctrl-at91.c | 1 -
drivers/pinctrl/pinctrl-ingenic.c | 6 +-
drivers/pinctrl/pinctrl-single.c | 1 +
drivers/pinctrl/pinctrl-st.c | 1 -
drivers/pinctrl/pinctrl-stmfx.c | 6 +-
drivers/pinctrl/pinctrl-sx150x.c | 1 -
drivers/pinctrl/qcom/pinctrl-sdm845.c | 1 -
drivers/pinctrl/qcom/pinctrl-ssbi-mpp.c | 1 -
drivers/pinctrl/renesas/pfc-r8a77950.c | 1 -
drivers/pinctrl/renesas/pfc-r8a77951.c | 1 -
drivers/pinctrl/renesas/pfc-r8a7796.c | 1 -
drivers/pinctrl/renesas/pfc-r8a77965.c | 1 -
drivers/pinctrl/samsung/pinctrl-samsung.c | 2 +-
drivers/platform/chrome/cros_ec_proto.c | 9 +
drivers/platform/x86/dell-smbios-wmi.c | 1 +
drivers/power/supply/max17042_battery.c | 6 +-
drivers/rtc/rtc-tps65910.c | 2 +-
drivers/s390/cio/qdio_main.c | 82 ++++---
drivers/scsi/BusLogic.c | 6 +-
drivers/scsi/pcmcia/fdomain_cs.c | 4 +-
drivers/scsi/qedf/qedf_main.c | 10 +-
drivers/scsi/qedi/qedi_main.c | 14 +-
drivers/scsi/qla2xxx/qla_nvme.c | 5 +-
drivers/scsi/qla2xxx/qla_os.c | 6 +
drivers/scsi/smartpqi/smartpqi_init.c | 1 +
drivers/scsi/ufs/ufs-exynos.c | 4 +-
drivers/scsi/ufs/ufs-exynos.h | 2 +-
drivers/scsi/ufs/ufshcd.c | 8 +-
drivers/soc/aspeed/aspeed-lpc-ctrl.c | 2 +-
drivers/soc/aspeed/aspeed-p2a-ctrl.c | 2 +-
drivers/soc/qcom/qcom_aoss.c | 8 +-
drivers/soundwire/intel.c | 23 +-
drivers/staging/board/board.c | 7 +-
drivers/staging/ks7010/ks7010_sdio.c | 2 +-
drivers/staging/media/atomisp/pci/atomisp_v4l2.c | 4 +-
drivers/staging/media/hantro/hantro_g1_vp8_dec.c | 13 +-
.../staging/media/hantro/rk3399_vpu_hw_vp8_dec.c | 13 +-
drivers/staging/rts5208/rtsx_scsi.c | 10 +-
drivers/thunderbolt/switch.c | 2 +-
drivers/tty/hvc/hvsi.c | 19 +-
drivers/tty/serial/8250/8250_omap.c | 25 +-
drivers/tty/serial/8250/8250_pci.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/jsm/jsm_neo.c | 2 +
drivers/tty/serial/jsm/jsm_tty.c | 3 +
drivers/tty/serial/sh-sci.c | 7 +-
drivers/usb/chipidea/host.c | 14 +-
drivers/usb/gadget/composite.c | 8 +-
drivers/usb/gadget/function/u_ether.c | 5 +-
drivers/usb/host/ehci-mv.c | 23 +-
drivers/usb/host/fotg210-hcd.c | 41 ++--
drivers/usb/host/fotg210.h | 5 -
drivers/usb/host/xhci.c | 24 +-
drivers/usb/musb/musb_dsps.c | 13 +-
drivers/usb/usbip/vhci_hcd.c | 32 ++-
drivers/vfio/Kconfig | 2 +-
drivers/video/fbdev/asiliantfb.c | 3 +
drivers/video/fbdev/kyro/fbdev.c | 8 +
drivers/video/fbdev/riva/fbdev.c | 3 +
fs/btrfs/inode.c | 10 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 3 +
fs/ceph/caps.c | 3 +
fs/cifs/sess.c | 2 +-
fs/f2fs/compress.c | 12 +-
fs/f2fs/data.c | 16 ++
fs/f2fs/dir.c | 14 +-
fs/f2fs/file.c | 4 +-
fs/f2fs/gc.c | 4 +-
fs/f2fs/super.c | 106 ++++----
fs/fscache/cookie.c | 14 +-
fs/fscache/internal.h | 2 +
fs/fscache/main.c | 39 +++
fs/gfs2/glops.c | 17 +-
fs/gfs2/lock_dlm.c | 5 +
fs/io-wq.c | 8 +-
fs/io_uring.c | 70 +++---
fs/iomap/buffered-io.c | 2 +-
fs/lockd/svclock.c | 30 +--
fs/nfs/pnfs.c | 16 +-
fs/nfsd/nfs4state.c | 5 +-
fs/notify/fanotify/fanotify.c | 6 +
fs/overlayfs/dir.c | 6 +-
fs/userfaultfd.c | 91 ++++---
include/crypto/public_key.h | 4 +-
include/drm/drm_auth.h | 1 +
include/drm/drm_file.h | 18 +-
include/linux/ethtool.h | 4 -
include/linux/hugetlb.h | 9 +
include/linux/hugetlb_cgroup.h | 12 +
include/linux/intel-iommu.h | 6 +-
include/linux/rcupdate.h | 2 +-
include/linux/sunrpc/xprt.h | 1 +
include/linux/sunrpc/xprtsock.h | 1 +
include/net/flow_offload.h | 1 +
include/uapi/linux/serial_reg.h | 1 +
kernel/dma/debug.c | 7 +-
kernel/fork.c | 1 +
kernel/pid_namespace.c | 3 +-
kernel/rcu/tree_plugin.h | 8 +-
kernel/sched/cpufreq_schedutil.c | 16 +-
kernel/workqueue.c | 12 +-
lib/test_bpf.c | 13 +-
lib/test_stackinit.c | 20 +-
mm/hmm.c | 5 +-
mm/hugetlb.c | 4 +-
mm/vmscan.c | 2 +-
net/9p/trans_xen.c | 4 +-
net/bluetooth/hci_event.c | 108 ++++++---
net/bluetooth/sco.c | 74 +++---
net/core/flow_dissector.c | 12 +-
net/core/flow_offload.c | 89 ++++++-
net/ethtool/ioctl.c | 136 +++++++++--
net/ipv4/ip_output.c | 5 +-
net/ipv4/tcp_fastopen.c | 3 +-
net/mac80211/iface.c | 11 +-
net/netfilter/nf_flow_table_offload.c | 1 +
net/netfilter/nf_tables_offload.c | 1 +
net/netlabel/netlabel_cipso_v4.c | 4 +-
net/netlink/af_netlink.c | 4 +-
net/sched/cls_api.c | 1 +
net/sched/sch_taprio.c | 4 +-
net/socket.c | 125 +---------
net/sunrpc/auth_gss/svcauth_gss.c | 2 +-
net/sunrpc/xprt.c | 8 +-
net/sunrpc/xprtrdma/transport.c | 11 +-
net/sunrpc/xprtsock.c | 7 +
net/tipc/socket.c | 36 ++-
samples/bpf/test_override_return.sh | 1 +
samples/bpf/tracex7_user.c | 5 +
scripts/gen_ksymdeps.sh | 8 +-
security/smack/smack_access.c | 17 +-
sound/soc/atmel/Kconfig | 1 -
sound/soc/intel/boards/bytcr_rt5640.c | 9 +-
sound/soc/intel/boards/sof_pcm512x.c | 13 +-
sound/soc/intel/skylake/skl-messages.c | 11 +-
sound/soc/intel/skylake/skl-pcm.c | 25 +-
sound/soc/rockchip/rockchip_i2s.c | 35 ++-
tools/lib/bpf/libbpf.c | 63 ++++-
.../testing/selftests/arm64/mte/mte_common_util.c | 2 +-
tools/testing/selftests/arm64/pauth/pac.c | 10 +-
.../testing/selftests/bpf/prog_tests/send_signal.c | 16 ++
.../selftests/bpf/prog_tests/sockopt_inherit.c | 4 +-
tools/testing/selftests/bpf/progs/xdp_tx.c | 2 +-
tools/testing/selftests/bpf/test_maps.c | 2 +-
tools/testing/selftests/bpf/test_xdp_veth.sh | 2 +-
tools/testing/selftests/firmware/fw_namespace.c | 3 +-
tools/testing/selftests/ftrace/test.d/functions | 2 +-
tools/thermal/tmon/Makefile | 2 +-
344 files changed, 3181 insertions(+), 1644 deletions(-)
^ permalink raw reply [relevance 8%]
* [PATCH 5.10 008/306] btrfs: reset replace target device to allocation state on close
2021-09-16 15:55 8% [PATCH 5.10 000/306] 5.10.67-rc1 review Greg Kroah-Hartman
@ 2021-09-16 15:55 10% ` Greg Kroah-Hartman
2021-09-16 15:57 11% ` [PATCH 5.10 127/306] drm: avoid blocking in drm_clients_infos rcu section Greg Kroah-Hartman
` (6 subsequent siblings)
7 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-16 15:55 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, David Sterba, Anand Jain,
Desmond Cheong Zhi Xi
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
commit 0d977e0eba234e01a60bdde27314dc21374201b3 upstream.
This crash was observed with a failed assertion on device close:
BTRFS: Transaction aborted (error -28)
WARNING: CPU: 1 PID: 3902 at fs/btrfs/extent-tree.c:2150 btrfs_run_delayed_refs+0x1d2/0x1e0 [btrfs]
Modules linked in: btrfs blake2b_generic libcrc32c crc32c_intel xor zstd_decompress zstd_compress xxhash lzo_compress lzo_decompress raid6_pq loop
CPU: 1 PID: 3902 Comm: kworker/u8:4 Not tainted 5.14.0-rc5-default+ #1532
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-59-gc9ba527-rebuilt.opensuse.org 04/01/2014
Workqueue: events_unbound btrfs_async_reclaim_metadata_space [btrfs]
RIP: 0010:btrfs_run_delayed_refs+0x1d2/0x1e0 [btrfs]
RSP: 0018:ffffb7a5452d7d80 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffabee13c4 RDI: 00000000ffffffff
RBP: ffff97834176a378 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff97835195d388
R13: 0000000005b08000 R14: ffff978385484000 R15: 000000000000016c
FS: 0000000000000000(0000) GS:ffff9783bd800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056190d003fe8 CR3: 000000002a81e005 CR4: 0000000000170ea0
Call Trace:
flush_space+0x197/0x2f0 [btrfs]
btrfs_async_reclaim_metadata_space+0x139/0x300 [btrfs]
process_one_work+0x262/0x5e0
worker_thread+0x4c/0x320
? process_one_work+0x5e0/0x5e0
kthread+0x144/0x170
? set_kthread_struct+0x40/0x40
ret_from_fork+0x1f/0x30
irq event stamp: 19334989
hardirqs last enabled at (19334997): [<ffffffffab0e0c87>] console_unlock+0x2b7/0x400
hardirqs last disabled at (19335006): [<ffffffffab0e0d0d>] console_unlock+0x33d/0x400
softirqs last enabled at (19334900): [<ffffffffaba0030d>] __do_softirq+0x30d/0x574
softirqs last disabled at (19334893): [<ffffffffab0721ec>] irq_exit_rcu+0x12c/0x140
---[ end trace 45939e308e0dd3c7 ]---
BTRFS: error (device vdd) in btrfs_run_delayed_refs:2150: errno=-28 No space left
BTRFS info (device vdd): forced readonly
BTRFS warning (device vdd): failed setting block group ro: -30
BTRFS info (device vdd): suspending dev_replace for unmount
assertion failed: !test_bit(BTRFS_DEV_STATE_REPLACE_TGT, &device->dev_state), in fs/btrfs/volumes.c:1150
------------[ cut here ]------------
kernel BUG at fs/btrfs/ctree.h:3431!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 1 PID: 3982 Comm: umount Tainted: G W 5.14.0-rc5-default+ #1532
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-59-gc9ba527-rebuilt.opensuse.org 04/01/2014
RIP: 0010:assertfail.constprop.0+0x18/0x1a [btrfs]
RSP: 0018:ffffb7a5454c7db8 EFLAGS: 00010246
RAX: 0000000000000068 RBX: ffff978364b91c00 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffffabee13c4 RDI: 00000000ffffffff
RBP: ffff9783523a4c00 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff9783523a4d18
R13: 0000000000000000 R14: 0000000000000004 R15: 0000000000000003
FS: 00007f61c8f42800(0000) GS:ffff9783bd800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056190cffa810 CR3: 0000000030b96002 CR4: 0000000000170ea0
Call Trace:
btrfs_close_one_device.cold+0x11/0x55 [btrfs]
close_fs_devices+0x44/0xb0 [btrfs]
btrfs_close_devices+0x48/0x160 [btrfs]
generic_shutdown_super+0x69/0x100
kill_anon_super+0x14/0x30
btrfs_kill_super+0x12/0x20 [btrfs]
deactivate_locked_super+0x2c/0xa0
cleanup_mnt+0x144/0x1b0
task_work_run+0x59/0xa0
exit_to_user_mode_loop+0xe7/0xf0
exit_to_user_mode_prepare+0xaf/0xf0
syscall_exit_to_user_mode+0x19/0x50
do_syscall_64+0x4a/0x90
entry_SYSCALL_64_after_hwframe+0x44/0xae
This happens when close_ctree is called while a dev_replace hasn't
completed. In close_ctree, we suspend the dev_replace, but keep the
replace target around so that we can resume the dev_replace procedure
when we mount the root again. This is the call trace:
close_ctree():
btrfs_dev_replace_suspend_for_unmount();
btrfs_close_devices():
btrfs_close_fs_devices():
btrfs_close_one_device():
ASSERT(!test_bit(BTRFS_DEV_STATE_REPLACE_TGT,
&device->dev_state));
However, since the replace target sticks around, there is a device
with BTRFS_DEV_STATE_REPLACE_TGT set on close, and we fail the
assertion in btrfs_close_one_device.
To fix this, if we come across the replace target device when
closing, we should properly reset it back to allocation state. This
fix also ensures that if a non-target device has a corrupted state and
has the BTRFS_DEV_STATE_REPLACE_TGT bit set, the assertion will still
catch the error.
Reported-by: David Sterba <dsterba@suse.com>
Fixes: b2a616676839 ("btrfs: fix rw device counting in __btrfs_free_extra_devids")
CC: stable@vger.kernel.org # 4.19+
Reviewed-by: Anand Jain <anand.jain@oracle.com>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
fs/btrfs/volumes.c | 3 +++
1 file changed, 3 insertions(+)
--- a/fs/btrfs/volumes.c
+++ b/fs/btrfs/volumes.c
@@ -1129,6 +1129,9 @@ static void btrfs_close_one_device(struc
fs_devices->rw_devices--;
}
+ if (device->devid == BTRFS_DEV_REPLACE_DEVID)
+ clear_bit(BTRFS_DEV_STATE_REPLACE_TGT, &device->dev_state);
+
if (test_bit(BTRFS_DEV_STATE_MISSING, &device->dev_state))
fs_devices->missing_devices--;
^ permalink raw reply [relevance 10%]
* Linux 5.14.4
@ 2021-09-15 8:09 2% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-15 8:09 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 5.14.4 kernel.
All users of the 5.14 kernel series must upgrade.
The updated 5.14.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.14.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/fault-injection/provoke-crashes.rst | 2
Makefile | 2
arch/arm/boot/dts/aspeed-bmc-ibm-everest.dts | 2
arch/arm/boot/dts/aspeed-g6-pinctrl.dtsi | 4
arch/arm/boot/dts/at91-sam9x60ek.dts | 16
arch/arm/boot/dts/at91-sama5d3_xplained.dts | 29 +
arch/arm/boot/dts/at91-sama5d4_xplained.dts | 19
arch/arm/boot/dts/meson8.dtsi | 5
arch/arm/boot/dts/meson8b-ec100.dts | 4
arch/arm/boot/dts/meson8b-mxq.dts | 4
arch/arm/boot/dts/meson8b-odroidc1.dts | 4
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2
arch/arm64/boot/dts/marvell/armada-3720-turris-mox.dts | 17
arch/arm64/boot/dts/marvell/armada-37xx.dtsi | 11
arch/arm64/boot/dts/qcom/sc7180-trogdor-coachz.dtsi | 2
arch/arm64/boot/dts/qcom/sc7280.dtsi | 6
arch/arm64/boot/dts/qcom/sm8250.dtsi | 2
arch/arm64/boot/dts/qcom/sm8350.dtsi | 8
arch/arm64/boot/dts/renesas/hihope-rzg2-ex.dtsi | 1
arch/arm64/boot/dts/renesas/r8a77995-draak.dts | 4
arch/arm64/kvm/arm.c | 7
arch/arm64/kvm/vgic/vgic-v2.c | 36 -
arch/arm64/kvm/vgic/vgic-v3.c | 36 -
arch/arm64/kvm/vgic/vgic.c | 38 +
arch/arm64/kvm/vgic/vgic.h | 2
arch/m68k/Kconfig.cpu | 8
arch/m68k/coldfire/clk.c | 2
arch/m68k/emu/nfeth.c | 4
arch/m68k/include/asm/atomic.h | 4
arch/parisc/boot/compressed/misc.c | 2
arch/s390/include/asm/kvm_host.h | 1
arch/s390/include/asm/lowcore.h | 3
arch/s390/include/asm/processor.h | 2
arch/s390/kernel/asm-offsets.c | 1
arch/s390/kernel/debug.c | 176 ++++----
arch/s390/kernel/entry.S | 11
arch/s390/kernel/ipl.c | 3
arch/s390/kernel/machine_kexec.c | 1
arch/s390/kernel/setup.c | 9
arch/s390/kernel/smp.c | 31 +
arch/s390/kvm/interrupt.c | 12
arch/s390/kvm/kvm-s390.c | 2
arch/s390/kvm/kvm-s390.h | 2
arch/s390/mm/kasan_init.c | 41 -
arch/s390/pci/pci.c | 7
arch/s390/pci/pci_clp.c | 33 -
arch/x86/crypto/aesni-intel_glue.c | 5
arch/x86/events/intel/uncore_snbep.c | 40 +
arch/x86/include/asm/mce.h | 1
arch/x86/kernel/cpu/mce/core.c | 11
arch/x86/kvm/mmu/mmu.c | 19
arch/x86/kvm/mmu/tdp_mmu.c | 20
arch/x86/kvm/vmx/nested.c | 7
arch/x86/kvm/vmx/vmx.c | 3
arch/x86/kvm/x86.c | 4
block/bfq-iosched.c | 3
block/bio.c | 15
block/blk-crypto.c | 2
block/blk-merge.c | 18
block/blk-throttle.c | 32 +
block/blk.h | 2
block/elevator.c | 3
block/mq-deadline.c | 2
certs/Makefile | 8
crypto/ecc.h | 5
crypto/tcrypt.c | 29 -
drivers/acpi/prmt.c | 10
drivers/ata/libata-core.c | 2
drivers/auxdisplay/hd44780.c | 2
drivers/base/dd.c | 16
drivers/base/firmware_loader/main.c | 20
drivers/base/regmap/regmap.c | 2
drivers/bcma/main.c | 6
drivers/block/nbd.c | 86 +++
drivers/bluetooth/btusb.c | 18
drivers/char/tpm/Kconfig | 1
drivers/char/tpm/tpm_ibmvtpm.c | 26 -
drivers/char/tpm/tpm_ibmvtpm.h | 2
drivers/clk/mvebu/kirkwood.c | 1
drivers/clocksource/sh_cmt.c | 30 -
drivers/counter/104-quad-8.c | 5
drivers/crypto/hisilicon/sec2/sec.h | 5
drivers/crypto/hisilicon/sec2/sec_main.c | 34 -
drivers/crypto/mxs-dcp.c | 45 +-
drivers/crypto/omap-aes.c | 8
drivers/crypto/omap-des.c | 8
drivers/crypto/omap-sham.c | 14
drivers/crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4
drivers/crypto/qat/qat_common/adf_common_drv.h | 8
drivers/crypto/qat/qat_common/adf_init.c | 5
drivers/crypto/qat/qat_common/adf_isr.c | 7
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7
drivers/crypto/qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4
drivers/edac/i10nm_base.c | 6
drivers/edac/mce_amd.c | 3
drivers/firmware/raspberrypi.c | 10
drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 54 +-
drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c | 286 ++++++++++---
drivers/gpu/drm/amd/pm/swsmu/smu_cmn.h | 3
drivers/gpu/drm/bridge/ite-it66121.c | 2
drivers/gpu/drm/drm_of.c | 6
drivers/gpu/drm/exynos/exynos_drm_g2d.c | 3
drivers/gpu/drm/gma500/oaktrail_lvds.c | 2
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 10
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 68 +--
drivers/gpu/drm/msm/dp/dp_display.c | 31 -
drivers/gpu/drm/msm/dsi/dsi.c | 6
drivers/gpu/drm/msm/msm_drv.c | 1
drivers/gpu/drm/mxsfb/mxsfb_drv.c | 3
drivers/gpu/drm/mxsfb/mxsfb_drv.h | 1
drivers/gpu/drm/mxsfb/mxsfb_kms.c | 40 +
drivers/gpu/drm/mxsfb/mxsfb_regs.h | 9
drivers/gpu/drm/panfrost/panfrost_device.c | 3
drivers/gpu/drm/rcar-du/rcar_du_drv.c | 2
drivers/hv/hv_snapshot.c | 1
drivers/hwmon/Makefile | 1
drivers/hwmon/pmbus/bpa-rs600.c | 25 -
drivers/i2c/busses/i2c-highlander.c | 2
drivers/i2c/busses/i2c-hix5hd2.c | 2
drivers/i2c/busses/i2c-iop3xx.c | 6
drivers/i2c/busses/i2c-mt65xx.c | 2
drivers/i2c/busses/i2c-s3c2410.c | 2
drivers/i2c/busses/i2c-synquacer.c | 2
drivers/i2c/busses/i2c-xlp9xx.c | 2
drivers/infiniband/hw/mlx5/mr.c | 2
drivers/irqchip/irq-apple-aic.c | 2
drivers/irqchip/irq-gic-v3.c | 23 +
drivers/irqchip/irq-loongson-pch-pic.c | 19
drivers/leds/blink/leds-lgm-sso.c | 23 -
drivers/leds/flash/leds-rt8515.c | 4
drivers/leds/leds-is31fl32xx.c | 1
drivers/leds/leds-lt3593.c | 5
drivers/leds/trigger/ledtrig-audio.c | 37 +
drivers/md/bcache/super.c | 16
drivers/md/raid1.c | 19
drivers/md/raid10.c | 14
drivers/media/i2c/tda1997x.c | 1
drivers/media/platform/atmel/atmel-sama5d2-isc.c | 17
drivers/media/platform/coda/coda-bit.c | 18
drivers/media/platform/omap3isp/isp.c | 4
drivers/media/platform/qcom/venus/helpers.c | 3
drivers/media/platform/qcom/venus/hfi_msgs.c | 2
drivers/media/platform/qcom/venus/venc.c | 2
drivers/media/platform/rcar-vin/rcar-v4l2.c | 4
drivers/media/platform/rockchip/rga/rga.c | 27 +
drivers/media/platform/vsp1/vsp1_entity.c | 4
drivers/media/spi/cxd2880-spi.c | 7
drivers/media/usb/dvb-usb/dvb-usb-i2c.c | 9
drivers/media/usb/dvb-usb/dvb-usb-init.c | 2
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6
drivers/media/usb/dvb-usb/vp702x.c | 12
drivers/media/usb/em28xx/em28xx-input.c | 1
drivers/media/usb/go7007/go7007-driver.c | 26 -
drivers/media/usb/go7007/go7007-usb.c | 2
drivers/misc/lkdtm/core.c | 2
drivers/misc/pvpanic/pvpanic.c | 2
drivers/mmc/host/dw_mmc.c | 1
drivers/mmc/host/moxart-mmc.c | 1
drivers/mmc/host/sdhci.c | 1
drivers/net/dsa/b53/b53_common.c | 10
drivers/net/dsa/b53/b53_priv.h | 2
drivers/net/dsa/bcm_sf2.c | 1
drivers/net/dsa/mt7530.c | 13
drivers/net/dsa/mv88e6xxx/chip.c | 18
drivers/net/ethernet/aquantia/atlantic/aq_pci_func.c | 3
drivers/net/ethernet/google/gve/gve_adminq.c | 6
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 23 -
drivers/net/ethernet/intel/ice/ice_main.c | 13
drivers/net/ethernet/intel/ice/ice_ptp.c | 55 ++
drivers/net/ethernet/marvell/octeontx2/af/common.h | 2
drivers/net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 35 +
drivers/net/ethernet/marvell/octeontx2/af/rvu_nix.c | 9
drivers/net/ethernet/marvell/octeontx2/af/rvu_npc.c | 22 -
drivers/net/ethernet/marvell/octeontx2/af/rvu_reg.h | 2
drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c | 16
drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.h | 3
drivers/net/ethernet/marvell/octeontx2/nic/otx2_flows.c | 1
drivers/net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 4
drivers/net/ethernet/mellanox/mlx5/core/dev.c | 2
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 1
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 6
drivers/net/ethernet/mellanox/mlx5/core/en/qos.c | 15
drivers/net/ethernet/mellanox/mlx5/core/en/qos.h | 4
drivers/net/ethernet/mellanox/mlx5/core/en/tc_tun_encap.c | 4
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 10
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 18
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 18
drivers/net/ethernet/mellanox/mlx5/core/esw/indir_table.c | 1
drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c | 5
drivers/net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 18
drivers/net/ethernet/mellanox/mlx5/core/lag.c | 1
drivers/net/ethernet/mellanox/mlx5/core/lag_mp.c | 8
drivers/net/ethernet/mellanox/mlx5/core/lag_mp.h | 2
drivers/net/ethernet/pensando/ionic/ionic_devlink.c | 14
drivers/net/ethernet/qualcomm/qca_spi.c | 2
drivers/net/ethernet/qualcomm/qca_uart.c | 2
drivers/net/ethernet/stmicro/stmmac/dwmac4_lib.c | 5
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 47 +-
drivers/net/ethernet/ti/am65-cpsw-nuss.h | 2
drivers/net/phy/marvell10g.c | 8
drivers/net/usb/asix_devices.c | 1
drivers/net/wireless/ath/ath6kl/wmi.c | 4
drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c | 2
drivers/net/wireless/intel/iwlwifi/fw/acpi.c | 14
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 1
drivers/net/wireless/rsi/rsi_91x_hal.c | 4
drivers/net/wireless/rsi/rsi_91x_usb.c | 1
drivers/nvme/host/rdma.c | 4
drivers/nvme/host/tcp.c | 4
drivers/nvme/target/fabrics-cmd.c | 9
drivers/pci/pci.c | 25 -
drivers/power/supply/axp288_fuel_gauge.c | 4
drivers/power/supply/cw2015_battery.c | 4
drivers/power/supply/max17042_battery.c | 2
drivers/power/supply/smb347-charger.c | 10
drivers/regulator/tps65910-regulator.c | 10
drivers/regulator/vctrl-regulator.c | 73 +--
drivers/s390/cio/css.c | 17
drivers/s390/crypto/ap_bus.c | 25 -
drivers/s390/crypto/ap_bus.h | 10
drivers/s390/crypto/ap_queue.c | 20
drivers/s390/crypto/zcrypt_ccamisc.c | 8
drivers/soc/mediatek/mt8183-mmsys.h | 21
drivers/soc/mediatek/mtk-mmsys.c | 7
drivers/soc/mediatek/mtk-mmsys.h | 133 ++++--
drivers/soc/qcom/rpmhpd.c | 5
drivers/soc/qcom/smsm.c | 11
drivers/soc/rockchip/Kconfig | 4
drivers/spi/spi-coldfire-qspi.c | 2
drivers/spi/spi-davinci.c | 8
drivers/spi/spi-fsl-dspi.c | 1
drivers/spi/spi-pic32.c | 1
drivers/spi/spi-sprd-adi.c | 2
drivers/spi/spi-zynq-qspi.c | 8
drivers/staging/clocking-wizard/Kconfig | 2
drivers/staging/media/atomisp/i2c/atomisp-mt9m114.c | 11
drivers/staging/media/tegra-video/vi.c | 4
drivers/tty/serial/fsl_lpuart.c | 2
drivers/tty/tty_io.c | 4
drivers/usb/dwc3/dwc3-meson-g12a.c | 2
drivers/usb/dwc3/dwc3-qcom.c | 4
drivers/usb/gadget/udc/at91_udc.c | 4
drivers/usb/gadget/udc/bdc/bdc_core.c | 30 -
drivers/usb/gadget/udc/mv_u3d_core.c | 19
drivers/usb/gadget/udc/renesas_usb3.c | 17
drivers/usb/gadget/udc/s3c2410_udc.c | 4
drivers/usb/host/ehci-orion.c | 8
drivers/usb/host/ohci-tmio.c | 3
drivers/usb/misc/brcmstb-usb-pinmap.c | 2
drivers/usb/phy/phy-fsl-usb.c | 2
drivers/usb/phy/phy-tahvo.c | 4
drivers/usb/phy/phy-twl6030-usb.c | 5
drivers/video/backlight/pwm_bl.c | 54 +-
drivers/video/fbdev/core/fbmem.c | 6
fs/cifs/cifs_unicode.c | 9
fs/cifs/fs_context.c | 11
fs/cifs/readdir.c | 23 +
fs/debugfs/file.c | 8
fs/f2fs/file.c | 5
fs/f2fs/super.c | 11
fs/fcntl.c | 18
fs/fuse/file.c | 30 +
fs/fuse/fuse_i.h | 19
fs/fuse/inode.c | 60 ++
fs/gfs2/ops_fstype.c | 43 +
fs/gfs2/super.c | 61 --
fs/io-wq.c | 105 +++-
fs/io_uring.c | 5
fs/iomap/swapfile.c | 6
fs/isofs/inode.c | 27 -
fs/isofs/isofs.h | 1
fs/isofs/joliet.c | 4
fs/lockd/svclock.c | 2
fs/nfsd/nfs4state.c | 4
fs/udf/misc.c | 13
fs/udf/super.c | 75 +--
fs/udf/udf_sb.h | 2
fs/udf/unicode.c | 4
include/linux/blkdev.h | 16
include/linux/energy_model.h | 16
include/linux/hrtimer.h | 5
include/linux/local_lock_internal.h | 42 +
include/linux/mlx5/mlx5_ifc.h | 3
include/linux/power/max17042_battery.h | 2
include/linux/sunrpc/svc.h | 1
include/linux/time64.h | 9
include/net/dsa.h | 2
include/net/pkt_cls.h | 3
include/trace/events/io_uring.h | 6
include/trace/events/sunrpc.h | 8
include/uapi/linux/bpf.h | 2
kernel/bpf/verifier.c | 31 -
kernel/cgroup/cpuset.c | 95 ++--
kernel/cpu_pm.c | 50 +-
kernel/irq/timings.c | 2
kernel/locking/mutex.c | 15
kernel/power/energy_model.c | 4
kernel/rcu/tree_stall.h | 26 +
kernel/sched/core.c | 25 -
kernel/sched/deadline.c | 8
kernel/sched/debug.c | 7
kernel/sched/fair.c | 2
kernel/sched/sched.h | 2
kernel/sched/topology.c | 65 ++
kernel/time/hrtimer.c | 92 +++-
kernel/time/posix-cpu-timers.c | 2
kernel/time/tick-internal.h | 3
lib/mpi/mpiutil.c | 2
lib/test_scanf.c | 4
net/6lowpan/debugfs.c | 3
net/bluetooth/cmtp/cmtp.h | 2
net/bluetooth/hci_core.c | 22 -
net/bluetooth/mgmt.c | 2
net/bluetooth/sco.c | 11
net/core/devlink.c | 36 +
net/dsa/Kconfig | 13
net/dsa/Makefile | 3
net/dsa/dsa_priv.h | 2
net/dsa/port.c | 21
net/dsa/slave.c | 6
net/dsa/tag_8021q.c | 2
net/ipv4/route.c | 48 +-
net/ipv4/tcp_ipv4.c | 5
net/ipv6/route.c | 5
net/mac80211/main.c | 2
net/mac80211/tx.c | 4
net/netlabel/netlabel_cipso_v4.c | 8
net/qrtr/qrtr.c | 8
net/sched/sch_cbq.c | 2
net/sched/sch_htb.c | 97 ++--
net/sunrpc/svc.c | 15
samples/bpf/xdp_redirect_cpu_user.c | 2
samples/pktgen/pktgen_sample04_many_flows.sh | 12
samples/pktgen/pktgen_sample05_flow_per_thread.sh | 12
security/integrity/ima/Kconfig | 1
security/integrity/ima/ima_mok.c | 2
sound/soc/codecs/rt5682-i2c.c | 15
sound/soc/codecs/tlv320aic32x4.c | 2
sound/soc/codecs/wcd9335.c | 23 -
sound/soc/codecs/wm_adsp.c | 2
sound/soc/fsl/fsl_rpmsg.c | 20
sound/soc/intel/boards/kbl_da7219_max98927.c | 55 --
sound/soc/intel/common/soc-acpi-intel-cml-match.c | 2
sound/soc/intel/common/soc-acpi-intel-kbl-match.c | 2
sound/soc/intel/skylake/skl-topology.c | 25 -
sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 43 +
sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 27 -
sound/usb/card.c | 4
sound/usb/pcm.c | 3
sound/usb/usbaudio.h | 1
tools/bootconfig/main.c | 4
tools/bpf/bpftool/prog.c | 5
tools/include/uapi/linux/bpf.h | 2
tools/lib/bpf/Makefile | 10
tools/lib/bpf/libbpf.c | 20
tools/perf/util/bpf-event.c | 4
tools/perf/util/bpf_counter.c | 3
tools/testing/selftests/bpf/prog_tests/btf.c | 1
tools/testing/selftests/bpf/progs/bpf_iter_tcp4.c | 2
tools/testing/selftests/bpf/progs/test_core_autosize.c | 20
tools/testing/selftests/bpf/test_maps.c | 4
364 files changed, 3226 insertions(+), 1743 deletions(-)
Abhishek Naik (1):
iwlwifi: skip first element in the WTAS ACPI table
Adrian Ratiu (1):
char: tpm: Kconfig: remove bad i2c cr50 select
Ahmad Fatoum (1):
brcmfmac: pcie: fix oops on failure to resume and reprobe
Alex Elder (1):
arm64: dts: qcom: sm8350: fix IPA interconnects
Alexander Antonov (1):
perf/x86/intel/uncore: Fix IIO cleanup mapping procedure for SNR/ICX
Alexander Gordeev (2):
s390/kasan: fix large PMD pages address alignment check
s390/smp: enable DAT before CPU restart callback is called
Amit Engel (1):
nvmet: pass back cntlid on successful completion
Anand Moon (3):
ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
Andrew Jeffery (1):
ARM: dts: everest: Add phase corrections for eMMC
Andrey Ignatov (1):
bpf: Fix possible out of bound write in narrow load handling
Andrii Nakryiko (1):
libbpf: Re-build libbpf.so when libbpf.map changes
Andy Duan (1):
tty: serial: fsl_lpuart: fix the wrong mapbase value
Andy Shevchenko (6):
lib/test_scanf: Handle n_bits == 0 in random tests
leds: lgm-sso: Put fwnode in any case during ->probe()
leds: lgm-sso: Don't spam logs when probe is deferred
leds: lt3593: Put fwnode in any case during ->probe()
leds: rt8515: Put fwnode in any case during ->probe()
leds: lgm-sso: Propagate error codes from callee to caller
Ard Biesheuvel (1):
crypto: x86/aes-ni - add missing error checks in XTS code
Aubrey Li (1):
ACPI: PRM: Find PRMT table before parsing it
Austin Kim (1):
IMA: remove -Wmissing-prototypes warning
Baokun Li (1):
nbd: add the check to prevent overflow in __nbd_ioctl()
Ben Hutchings (1):
crypto: omap - Fix inconsistent locking of device lists
Benjamin Coddington (1):
lockd: Fix invalid lockowner cast after vfs_test_lock
Biju Das (1):
arm64: dts: renesas: hihope-rzg2-ex: Add EtherAVB internal rx delay
Bjorn Andersson (1):
soc: qcom: rpmhpd: Use corner in power_off
Bob Peterson (1):
gfs2: init system threads before freeze lock
Borislav Petkov (1):
x86/mce: Defer processing of early errors
Brett Creeley (1):
ice: Only lock to update netdev dev_addr
CK Hu (1):
soc: mmsys: mediatek: add mask to mmsys routes
Cezary Rojewski (3):
ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373
ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
ASoC: Intel: Skylake: Fix module resource and format selection
Charles Keepax (1):
ASoC: wm_adsp: Put debugfs_remove_recursive back in
Chen-Yu Tsai (3):
irqchip/gic-v3: Fix priority comparison when non-secure priorities are used
regulator: vctrl: Use locked regulator_get_voltage in probe path
regulator: vctrl: Avoid lockdep warning in enable/disable ops
Chih-Kang Chang (1):
mac80211: Fix insufficient headroom issue for AMSDU
Chris Packham (1):
hwmon: (pmbus/bpa-rs600) Don't use rated limits as warn limits
Christoph Hellwig (1):
bcache: add proper error unwinding in bcache_device_init
Christophe JAILLET (9):
spi: coldfire-qspi: Use clk_disable_unprepare in the remove function
media: cxd2880-spi: Fix an error handling path
drm/msm/dsi: Fix some reference counted resource leaks
firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
usb: bdc: Fix a resource leak in the error handling path of 'bdc_probe()'
ASoC: wcd9335: Fix a double irq free in the remove function
ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function
ASoC: wcd9335: Disable irq on slave ports in the remove function
Chuck Lever (1):
SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency()
Chunguang Xu (1):
blk-throtl: optimize IOPS throttle for large IO scenarios
Chunyan Zhang (1):
spi: sprd: Fix the wrong WDG_LOAD_VAL
Claudiu Beznea (1):
ARM: dts: at91: add pinctrl-{names, 0} for all gpios
Colin Ian King (4):
gfs2: Fix memory leak of object lsi on error return path
6lowpan: iphc: Fix an off-by-one check of array index
media: venus: venc: Fix potential null pointer dereference on pointer fmt
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Curtis Malainey (1):
ASoC: Intel: Fix platform ID matching
Damien Le Moal (1):
libata: fix ata_host_start()
Dan Carpenter (9):
media: v4l2-subdev: fix some NULL vs IS_ERR() checks
media: rockchip/rga: fix error handling in probe
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
mac80211: remove unnecessary NULL check in ieee80211_register_hw()
rsi: fix error code in rsi_load_9116_firmware()
rsi: fix an error code in rsi_probe()
m68k: coldfire: return success for clk_enable(NULL)
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
net: qrtr: make checks in qrtr_endpoint_post() stricter
Daniel Thompson (1):
backlight: pwm_bl: Improve bootloader/kernel device handover
David Heidelberg (2):
drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision
drm/msm/mdp4: move HW revision detection to earlier phase
Desmond Cheong Zhi Xi (3):
fcntl: fix potential deadlocks for &fown_struct.lock
fcntl: fix potential deadlock for &fasync_struct.fa_lock
Bluetooth: fix repeated calls to sco_sock_kill
Dietmar Eggemann (1):
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
Dima Chumak (1):
net/mlx5: Lag, fix multipath lag activation
Dmitry Baryshkov (2):
arm64: dts: qcom: sm8250: fix usb2 qmp phy node
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
Dmitry Osipenko (2):
regulator: tps65910: Silence deferred probe error
power: supply: smb347-charger: Add missing pin control activation
Dmytro Linkin (1):
net/mlx5e: Use correct eswitch for stack devices with lag
Dongliang Mu (4):
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
media: dvb-usb: Fix error handling in dvb_usb_i2c_init
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Douglas Anderson (2):
ASoC: rt5682: Properly turn off regulators if wrong device ID
ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
Dylan Hung (1):
ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
Eric Biggers (1):
blk-crypto: fix check for too-large dun_bytes
Eric Dumazet (3):
ipv6: make exception cache less predictible
ipv4: make exception cache less predictible
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
Eugen Hristev (1):
media: atmel: atmel-sama5d2-isc: fix YUYV format
Evgeny Novikov (1):
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Frederic Weisbecker (1):
posix-cpu-timers: Force next expiration recalc after itimer reset
Geert Uytterhoeven (5):
m68k: Fix invalid RMW_INSNS on CPUs that lack CAS
m68k: Fix asm register constraints for atomic ops
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
Geetha sowjanya (2):
octeontx2-af: Check capability flag while freeing ipolicer memory
octeontx2-af: cn10k: Use FLIT0 register instead of FLIT1
Giovanni Cabiddu (4):
crypto: qat - do not ignore errors from enable_vf2pf_comms()
crypto: qat - handle both source of interrupt in VF ISR
crypto: qat - do not export adf_iov_putmsg()
crypto: qat - use proper type for vf_mask
Greg Kroah-Hartman (1):
Linux 5.14.4
Guoqing Jiang (1):
raid1: ensure write behind bio has less than BIO_MAX_VECS sectors
Haiyue Wang (1):
gve: fix the wrong AdminQ buffer overflow check
Halil Pasic (1):
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
Hans de Goede (2):
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
Harald Freudenberger (2):
s390/zcrypt: fix wrong offset index for APKA master key valid state
s390/ap: fix state machine hang after failure to enable irq
Harshvardhan Jha (1):
drm/gma500: Fix end of loop tests for list_for_each_entry
He Fengqing (1):
bpf: Fix potential memleak and UAF in the verifier.
Helge Deller (1):
parisc: Fix unaligned-access crash in bootloader
Hongbo Li (1):
lib/mpi: use kcalloc in mpi_resize
Hou Tao (1):
nbd: do del_gendisk() asynchronously for NBD_DESTROY_ON_DISCONNECT
Huacai Chen (1):
irqchip/loongson-pch-pic: Improve edge triggered interrupt support
Ilya Leoshkevich (1):
selftests/bpf: Fix test_core_autosize on big-endian machines
J. Bruce Fields (1):
nfsd4: Fix forced-expiry locking
Jacob Keller (3):
ice: fix Tx queue iteration for Tx timestamp enablement
ice: add lock around Tx timestamp tracker flush
ice: restart periodic outputs around time changes
Jaegeuk Kim (1):
f2fs: guarantee to write dirty data when enabling checkpoint back
Jan Kara (1):
udf: Check LVID earlier
Jens Axboe (4):
io-wq: remove GFP_ATOMIC allocation off schedule out path
io_uring: IORING_OP_WRITE needs hash_reg_file set
io_uring: io_uring_complete() trace should take an integer
io-wq: check max_worker limits if a worker transitions bound state
Jeongtae Park (1):
regmap: fix the offset of register error log
Jiapeng Chong (2):
leds: is31fl32xx: Fix missing error code in is31fl32xx_parse_dt()
net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set()
John Fastabend (1):
bpf, selftests: Fix test_maps now that sockmap supports UDP
Jose Blanquicet (1):
selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP
Judy Hsiao (1):
arm64: dts: qcom: sc7180: Set adau wakeup delay to 80 ms
Juhee Kang (1):
samples: pktgen: add missing IPv6 option to pktgen scripts
Julia Lawall (1):
drm/of: free the right object
Julio Faracco (1):
bootconfig: Fix missing return check of xbc_node_compose_key function
Jun Miao (1):
Bluetooth: btusb: Fix a unspported condition to set available debug features
Justin M. Forbes (1):
iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
Kai Ye (2):
crypto: hisilicon/sec - fix the abnormal exiting process
crypto: hisilicon/sec - modify the hardware endian configuration
Kai-Heng Feng (2):
drm/amdgpu/acp: Make PM domain really work
Bluetooth: Move shutdown callback before flushing tx and rx queue
Kevin Mitchell (1):
lkdtm: replace SCSI_DISPATCH_CMD with SCSI_QUEUE_RQ
Krzysztof Hałasa (1):
media: TDA1997x: enable EDID support
Krzysztof Kozlowski (1):
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Kuniyuki Iwashima (1):
bpf: Fix a typo of reuseport map in bpf.h.
Kuogee Hsieh (2):
drm/msm/dp: update is_connected status base on sink count at dp_pm_resume()
drm/msm/dp: replug event is converted into an unplug followed by an plug events
Lars Poeschel (1):
auxdisplay: hd44780: Fix oops on module unloading
Laurent Pinchart (1):
drm: rcar-du: Don't put reference to drm_device in rcar_du_remove()
Len Baker (1):
CIFS: Fix a potencially linear read overflow
Leon Romanovsky (5):
ionic: cleanly release devlink instance
net: ti: am65-cpsw-nuss: fix wrong devlink release order
devlink: Clear whole devlink_flash_notify struct
net/mlx5: Remove all auxiliary devices at the unregister event
devlink: Break parameter notification sequence to be before/after unload/load driver
Linus Walleij (1):
clk: kirkwood: Fix a clocking boot regression
Luben Tuikov (2):
drm/amd/pm: Fix a bug communicating with the SMU (v5)
drm/amd/pm: Fix a bug in semaphore double-lock
Lukas Bulwahn (2):
clk: staging: correct reference to config IOMEM to config HAS_IOMEM
hwmon: remove amd_energy driver in Makefile
Lukas Hannen (1):
time: Handle negative seconds correctly in timespec64_to_ns()
Lukasz Luba (1):
PM: EM: Increase energy calculation precision
Mansur Alisha Shaik (1):
media: venus: helper: do not set constrained parameters for UBWC
Maor Dickman (1):
net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group
Marc Zyngier (2):
KVM: arm64: Unregister HYP sections from kmemleak in protected mode
KVM: arm64: vgic: Resample HW pending state on deactivation
Marco Chiappero (2):
crypto: qat - fix reuse of completion variable
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marek Vasut (4):
ASoC: tlv320aic32x4: Fix TAS2505/TAS2521 channel count
drm: mxsfb: Enable recovery on underflow
drm: mxsfb: Increase number of outstanding requests on V4 and newer HW
drm: mxsfb: Clear FIFO_CLEAR bit
Martin Blumenstingl (1):
ARM: dts: meson8: Use a higher default GPU clock frequency
Martin KaFai Lau (1):
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Martynas Pumputis (1):
libbpf: Fix removal of inner map in bpf_object__create_map
Matija Glavinic Pecotic (1):
spi: davinci: invoke chipselect callback
Matthew Cover (1):
bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring
Maxim Levitsky (1):
KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
Maxim Mikityanskiy (3):
net/mlx5e: Prohibit inner indir TIRs in IPoIB
net/mlx5e: Block LRO if firmware asks for tunneled LRO
sch_htb: Fix inconsistency when leaf qdisc creation fails
Mian Yousaf Kaukab (1):
crypto: ecc - handle unaligned input buffer in ecc_swap_digits
Mihai Carabas (1):
misc/pvpanic: fix set driver data
Mika Penttilä (1):
sched/numa: Fix is_core_idle()
Miklos Szeredi (3):
fuse: truncate pagecache on atomic_o_trunc
fuse: flush extending writes
fuse: wait for writepages in syncfs
Ming Lei (1):
block: return ELEVATOR_DISCARD_MERGE if possible
Nadezda Lutovinova (1):
usb: gadget: mv_u3d: request_irq() after initializing UDC
Naveen Mamindlapalli (1):
octeontx2-pf: send correct vlan priority mask to npc_install_flow_req
Nguyen Dinh Phi (1):
tty: Fix data race between tiocsti() and flush_to_ldisc()
Niklas Schnelle (2):
s390/pci: fix misleading rc in clp_set_pci_fn()
RDMA/mlx5: Fix number of allocated XLT entries
Oleksij Rempel (1):
net: usb: asix: ax88772: add missing stop
Pali Rohár (3):
udf: Fix iocharset=utf8 mount option
isofs: joliet: Fix iocharset=utf8 mount option
arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
Paolo Bonzini (1):
KVM: x86: clamp host mapping level to max_level in kvm_mmu_max_mapping_level
Parav Pandit (1):
net/mlx5: Fix unpublish devlink parameters
Pavel Begunkov (3):
io_uring: limit fixed table size by RLIMIT_NOFILE
io_uring: fail links of cancelled timeouts
bio: fix page leak bio_add_hw_page failure
Pavel Skripkin (6):
m68k: emu: Fix invalid free in nfeth_cleanup()
block: nbd: add sanity check for first_minor
media: go7007: fix memory leak in go7007_usb_probe
media: go7007: remove redundant initialization
net: cipso: fix warnings in netlbl_cipsov4_add_std
Bluetooth: add timeout sanity check to hci_inquiry
Peter Oberparleiter (2):
s390/debug: keep debug data on resize
s390/debug: fix debug area life cycle
Peter Robinson (1):
power: supply: cw2015: use dev_err_probe to allow deferred probe
Peter Zijlstra (1):
locking/mutex: Fix HANDOFF condition
Philipp Zabel (1):
media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
Phong Hoang (1):
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Qiuxu Zhuo (1):
EDAC/i10nm: Fix NVDIMM detection
Quanyang Wang (1):
spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible
Quentin Monnet (2):
libbpf: Return non-null error on failures in libbpf_find_prog_btf_id()
tools: Free BTF objects at various locations
Quentin Perret (2):
sched/deadline: Fix reset_on_fork reporting of DL tasks
sched: Fix UCLAMP_FLAG_IDLE setting
Rafael J. Wysocki (2):
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
PCI: PM: Enable PME if it can be signaled from D3cold
Robert Foss (1):
drm: bridge: it66121: Check drm_bridge_attach retval
Roi Dayan (1):
net/mlx5e: Fix possible use-after-free deleting fdb rule
Ronnie Sahlberg (1):
cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED
Ruozhu Li (2):
nvme-tcp: don't update queue count when failing to set io queues
nvme-rdma: don't update queue count when failing to set io queues
Sean Anderson (1):
crypto: mxs-dcp - Check for DMA mapping errors
Sean Christopherson (3):
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
KVM: x86/mmu: Avoid collision with !PRESENT SPTEs in TDP MMU lpage stats
KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Sergey Senozhatsky (1):
rcu/tree: Handle VM stoppage in stall detection
Sergey Shtylyov (16):
i2c: highlander: add IRQ check
usb: dwc3: meson-g12a: add IRQ check
usb: dwc3: qcom: add IRQ check
usb: gadget: udc: at91: add IRQ check
usb: gadget: udc: s3c2410: add IRQ check
usb: misc: brcmstb-usb-pinmap: add IRQ check
usb: phy: fsl-usb: add IRQ check
usb: phy: twl6030: add IRQ checks
usb: host: ohci-tmio: add IRQ check
usb: phy: tahvo: add IRQ check
i2c: synquacer: fix deferred probing
i2c: iop3xx: fix deferred probing
i2c: s3c2410: fix IRQ check
i2c: hix5hd2: fix IRQ check
i2c: mt65xx: fix IRQ check
i2c: xlp9xx: fix main IRQ check
Shengjiu Wang (1):
ASoC: fsl_rpmsg: Check -EPROBE_DEFER for getting clocks
Shuyi Cheng (1):
libbpf: Fix the possible memory leak on error
Sibi Sankar (1):
arm64: dts: qcom: sc7280: Fixup the cpufreq node
Smita Koralahalli (1):
EDAC/mce_amd: Do not load edac_mce_amd module on guests
Stefan Assmann (1):
i40e: improve locking of mac_filter_hash
Stefan Berger (2):
certs: Trigger creation of RSA module signing key if it's not an RSA key
tpm: ibmvtpm: Avoid error message when process gets signal while waiting
Stefan Wahren (1):
net: qualcomm: fix QCA7000 checksum handling
Stephan Gerhold (1):
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Steve French (1):
smb3: fix posix extensions mount option
Steven Price (1):
drm/of: free the iterator object on failure
Stian Skjelstad (1):
udf_get_extendedattr() had no boundary checks.
Subbaraya Sundeep (4):
octeontx2-af: cn10k: Fix SDP base channel number
octeontx2-af: Fix loop in free and unmap counter
octeontx2-af: Fix mailbox errors in nix_rss_flowkey_cfg
octeontx2-af: Fix static code analyzer reported issues
Sudarsana Reddy Kalluru (1):
atlantic: Fix driver resume flow.
Sunil Goutham (3):
octeontx2-pf: Don't install VLAN offload rule if netdev is down
octeontx2-pf: Fix algorithm index in MCAM rules with RSS action
octeontx2-af: Set proper errorcode for IPv4 checksum errors
Sven Eckelmann (1):
debugfs: Return error during {full/open}_proxy_open() on rmmod
Sven Peter (1):
irqchip/apple-aic: Fix irq_disable from within irq handlers
THOBY Simon (1):
IMA: remove the dependency on CRYPTO_MD5
Takashi Iwai (1):
ALSA: usb-audio: Add lowlatency module option
Tedd Ho-Jeong An (1):
Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
Tetsuo Handa (1):
fbmem: don't allow too huge resolutions
Thomas Gleixner (3):
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
hrtimer: Ensure timerfd notification for HIGHRES=n
locking/local_lock: Add missing owner initialization
Tianjia Zhang (1):
crypto: tcrypt - Fix missing return value check
Tony Lindgren (6):
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
mmc: sdhci: Fix issue with uninitialized dma_slave_config
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
mmc: moxart: Fix issue with uninitialized dma_slave_config
Valentin Schneider (3):
sched/topology: Skip updating masks for non-online nodes
sched/debug: Don't update sched_domain debug directories before sched_debug_init()
PM: cpu: Make notifier chain use a raw_spinlock_t
Vignesh Raghavendra (1):
net: ti: am65-cpsw-nuss: fix RX IRQ state after .ndo_stop()
Vineeth Vijayan (1):
s390/cio: add dev_busid sysfs entry for each subchannel
Vitaly Kuznetsov (1):
hv_utils: Set the maximum packet size for VSS driver to the length of the receive buffer
Vladimir Oltean (6):
net: dsa: build tag_8021q.c as part of DSA core
net: dsa: tag_sja1105: optionally build as module when switch driver is module if PTP is enabled
net: dsa: stop syncing the bridge mcast_router attribute at join time
net: dsa: mt7530: remove the .port_set_mrouter implementation
net: dsa: don't disable multicast flooding to the CPU even without an IGMP querier
net: phy: marvell10g: fix broken PHY interrupts for anyone after us in the driver probe list
Voon Weifeng (1):
net: stmmac: fix INTR TBU status affecting irq count statistic
Waiman Long (3):
cgroup/cpuset: Fix a partition bug with hotplug
cgroup/cpuset: Miscellaneous code cleanup
cgroup/cpuset: Fix violation of cpuset locking rule
Wei Li (1):
drm/msm: Fix error return code in msm_drm_init()
Wei Yongjun (3):
drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init()
media: omap3isp: Fix missing unlock in isp_subdev_notifier_complete()
drm/exynos: g2d: fix missing unlock on error in g2d_runqueue_worker()
William Breathitt Gray (1):
counter: 104-quad-8: Return error when invalid mode during ceiling_write
Xiao Ni (1):
md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard
Xiyu Yang (1):
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
Xu Yu (1):
mm/swap: consider max pages in iomap_swapfile_add_extent
Yanfei Xu (2):
rcu: Fix to include first blocked task in stall warning
rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
Yang Yingliang (1):
octeontx2-pf: cn10k: Fix error return code in otx2_set_flowkey_cfg()
Yizhuo (1):
media: atomisp: fix the uninitialized use and rename "retvalue"
Zelin Deng (1):
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Zenghui Yu (1):
bcma: Fix memory leak for internally-handled cores
Zhang Qilong (2):
ASoC: mediatek: mt8192:Fix Unbalanced pm_runtime_enable in mt8192_afe_pcm_dev_probe
ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe
Zhen Lei (4):
genirq/timings: Fix error return code in irq_timings_test_irqs()
firmware: fix theoretical UAF race with firmware cache and resume
driver core: Fix error return code in really_probe()
media: venus: hfi: fix return value check in sys_get_prop_image_version()
^ permalink raw reply [relevance 2%]
* Linux 5.13.17
@ 2021-09-15 8:09 2% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-15 8:09 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 5.13.17 kernel.
All users of the 5.13 kernel series must upgrade.
The updated 5.13.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.13.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/fault-injection/provoke-crashes.rst | 2
Makefile | 2
arch/arm/boot/dts/aspeed-g6-pinctrl.dtsi | 4
arch/arm/boot/dts/at91-sam9x60ek.dts | 16 +
arch/arm/boot/dts/at91-sama5d3_xplained.dts | 29 ++
arch/arm/boot/dts/at91-sama5d4_xplained.dts | 19 +
arch/arm/boot/dts/meson8.dtsi | 5
arch/arm/boot/dts/meson8b-ec100.dts | 4
arch/arm/boot/dts/meson8b-mxq.dts | 4
arch/arm/boot/dts/meson8b-odroidc1.dts | 4
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2
arch/arm64/boot/dts/marvell/armada-3720-turris-mox.dts | 17 +
arch/arm64/boot/dts/marvell/armada-37xx.dtsi | 11
arch/arm64/boot/dts/qcom/sc7180-trogdor-coachz.dtsi | 2
arch/arm64/boot/dts/qcom/sm8250.dtsi | 2
arch/arm64/boot/dts/renesas/hihope-rzg2-ex.dtsi | 1
arch/arm64/boot/dts/renesas/r8a77995-draak.dts | 4
arch/arm64/kvm/arm.c | 7
arch/m68k/Kconfig.cpu | 8
arch/m68k/coldfire/clk.c | 2
arch/m68k/emu/nfeth.c | 4
arch/s390/include/asm/kvm_host.h | 1
arch/s390/kernel/debug.c | 176 ++++++++-----
arch/s390/kvm/interrupt.c | 12
arch/s390/kvm/kvm-s390.c | 2
arch/s390/kvm/kvm-s390.h | 2
arch/s390/mm/kasan_init.c | 41 +--
arch/s390/pci/pci.c | 7
arch/s390/pci/pci_clp.c | 33 +-
arch/x86/boot/compressed/efi_thunk_64.S | 30 +-
arch/x86/boot/compressed/head_64.S | 3
arch/x86/crypto/aesni-intel_glue.c | 5
arch/x86/events/amd/ibs.c | 1
arch/x86/include/asm/mce.h | 1
arch/x86/kernel/cpu/mce/core.c | 11
arch/x86/kernel/cpu/resctrl/monitor.c | 6
arch/x86/kvm/mmu/mmu.c | 19 -
arch/x86/kvm/mmu/tdp_mmu.c | 20 -
arch/x86/kvm/vmx/nested.c | 7
arch/x86/kvm/vmx/vmx.c | 3
arch/x86/kvm/x86.c | 4
block/bfq-iosched.c | 3
block/bio.c | 15 -
block/blk-crypto.c | 2
block/blk-merge.c | 18 -
block/blk-throttle.c | 32 ++
block/blk.h | 2
block/elevator.c | 3
block/mq-deadline.c | 2
certs/Makefile | 8
crypto/Makefile | 1
crypto/ecc.h | 5
crypto/tcrypt.c | 29 +-
drivers/ata/libata-core.c | 2
drivers/auxdisplay/hd44780.c | 2
drivers/base/dd.c | 16 -
drivers/base/firmware_loader/main.c | 20 -
drivers/base/regmap/regmap.c | 2
drivers/bcma/main.c | 6
drivers/block/nbd.c | 16 +
drivers/bluetooth/btusb.c | 18 -
drivers/char/tpm/Kconfig | 1
drivers/char/tpm/tpm_ibmvtpm.c | 26 +
drivers/char/tpm/tpm_ibmvtpm.h | 2
drivers/clk/mvebu/kirkwood.c | 1
drivers/clocksource/sh_cmt.c | 30 +-
drivers/counter/104-quad-8.c | 5
drivers/crypto/hisilicon/sec2/sec.h | 5
drivers/crypto/hisilicon/sec2/sec_main.c | 34 --
drivers/crypto/mxs-dcp.c | 45 ++-
drivers/crypto/omap-aes.c | 8
drivers/crypto/omap-des.c | 8
drivers/crypto/omap-sham.c | 14 -
drivers/crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4
drivers/crypto/qat/qat_common/adf_common_drv.h | 8
drivers/crypto/qat/qat_common/adf_init.c | 5
drivers/crypto/qat/qat_common/adf_isr.c | 7
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7
drivers/crypto/qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4
drivers/edac/i10nm_base.c | 6
drivers/edac/mce_amd.c | 3
drivers/firmware/raspberrypi.c | 10
drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 54 +--
drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c | 4
drivers/gpu/drm/drm_of.c | 6
drivers/gpu/drm/gma500/oaktrail_lvds.c | 2
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 10
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 68 ++---
drivers/gpu/drm/msm/dp/dp_display.c | 31 +-
drivers/gpu/drm/msm/dsi/dsi.c | 6
drivers/gpu/drm/mxsfb/mxsfb_drv.c | 3
drivers/gpu/drm/mxsfb/mxsfb_drv.h | 1
drivers/gpu/drm/mxsfb/mxsfb_kms.c | 40 ++
drivers/gpu/drm/mxsfb/mxsfb_regs.h | 9
drivers/gpu/drm/panfrost/panfrost_device.c | 3
drivers/gpu/drm/rcar-du/rcar_du_drv.c | 2
drivers/hwmon/Makefile | 1
drivers/hwmon/pmbus/bpa-rs600.c | 25 -
drivers/i2c/busses/i2c-highlander.c | 2
drivers/i2c/busses/i2c-hix5hd2.c | 2
drivers/i2c/busses/i2c-iop3xx.c | 6
drivers/i2c/busses/i2c-mt65xx.c | 2
drivers/i2c/busses/i2c-s3c2410.c | 2
drivers/i2c/busses/i2c-synquacer.c | 2
drivers/i2c/busses/i2c-xlp9xx.c | 2
drivers/infiniband/hw/mlx5/mr.c | 2
drivers/irqchip/irq-apple-aic.c | 2
drivers/irqchip/irq-gic-v3.c | 23 +
drivers/irqchip/irq-loongson-pch-pic.c | 19 +
drivers/leds/blink/leds-lgm-sso.c | 23 +
drivers/leds/flash/leds-rt8515.c | 4
drivers/leds/leds-is31fl32xx.c | 1
drivers/leds/leds-lt3593.c | 5
drivers/leds/trigger/ledtrig-audio.c | 37 ++
drivers/md/bcache/super.c | 16 -
drivers/md/raid1.c | 19 +
drivers/md/raid10.c | 14 -
drivers/media/i2c/tda1997x.c | 1
drivers/media/platform/coda/coda-bit.c | 18 -
drivers/media/platform/omap3isp/isp.c | 4
drivers/media/platform/qcom/venus/helpers.c | 3
drivers/media/platform/qcom/venus/hfi_msgs.c | 2
drivers/media/platform/qcom/venus/venc.c | 2
drivers/media/platform/rockchip/rga/rga-buf.c | 3
drivers/media/platform/rockchip/rga/rga.c | 29 +-
drivers/media/spi/cxd2880-spi.c | 7
drivers/media/usb/dvb-usb/dvb-usb-i2c.c | 9
drivers/media/usb/dvb-usb/dvb-usb-init.c | 2
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6
drivers/media/usb/dvb-usb/vp702x.c | 12
drivers/media/usb/em28xx/em28xx-input.c | 1
drivers/media/usb/go7007/go7007-driver.c | 26 -
drivers/media/usb/go7007/go7007-usb.c | 2
drivers/misc/lkdtm/core.c | 2
drivers/mmc/host/dw_mmc.c | 1
drivers/mmc/host/moxart-mmc.c | 1
drivers/mmc/host/sdhci.c | 1
drivers/net/dsa/b53/b53_common.c | 10
drivers/net/dsa/b53/b53_priv.h | 2
drivers/net/dsa/bcm_sf2.c | 1
drivers/net/dsa/mt7530.c | 13
drivers/net/dsa/mv88e6xxx/chip.c | 18 -
drivers/net/ethernet/aquantia/atlantic/aq_pci_func.c | 3
drivers/net/ethernet/google/gve/gve_adminq.c | 6
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 23 +
drivers/net/ethernet/intel/ice/ice_main.c | 13
drivers/net/ethernet/marvell/octeontx2/af/common.h | 2
drivers/net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 31 +-
drivers/net/ethernet/marvell/octeontx2/af/rvu_npc.c | 22 -
drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c | 16 +
drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.h | 3
drivers/net/ethernet/marvell/octeontx2/nic/otx2_flows.c | 1
drivers/net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 4
drivers/net/ethernet/mellanox/mlx5/core/dev.c | 2
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 1
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 6
drivers/net/ethernet/mellanox/mlx5/core/en/qos.c | 15 -
drivers/net/ethernet/mellanox/mlx5/core/en/qos.h | 4
drivers/net/ethernet/mellanox/mlx5/core/en/tc_tun_encap.c | 4
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 10
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 18 +
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 18 +
drivers/net/ethernet/mellanox/mlx5/core/esw/indir_table.c | 1
drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c | 5
drivers/net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 18 -
drivers/net/ethernet/pensando/ionic/ionic_devlink.c | 14 -
drivers/net/ethernet/qualcomm/qca_spi.c | 2
drivers/net/ethernet/qualcomm/qca_uart.c | 2
drivers/net/ethernet/stmicro/stmmac/dwmac4_lib.c | 5
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 47 ++-
drivers/net/ethernet/ti/am65-cpsw-nuss.h | 2
drivers/net/phy/marvell10g.c | 8
drivers/net/wireless/ath/ath6kl/wmi.c | 4
drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c | 2
drivers/net/wireless/intel/iwlwifi/fw/acpi.c | 14 -
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 1
drivers/net/wireless/rsi/rsi_91x_hal.c | 4
drivers/net/wireless/rsi/rsi_91x_usb.c | 1
drivers/nvme/host/rdma.c | 4
drivers/nvme/host/tcp.c | 4
drivers/nvme/target/fabrics-cmd.c | 9
drivers/pci/pci.c | 25 +
drivers/power/supply/axp288_fuel_gauge.c | 4
drivers/power/supply/cw2015_battery.c | 4
drivers/power/supply/max17042_battery.c | 2
drivers/power/supply/smb347-charger.c | 10
drivers/regulator/tps65910-regulator.c | 10
drivers/regulator/vctrl-regulator.c | 73 +++--
drivers/s390/cio/css.c | 17 +
drivers/s390/crypto/ap_bus.c | 25 -
drivers/s390/crypto/ap_bus.h | 10
drivers/s390/crypto/ap_queue.c | 20 -
drivers/s390/crypto/zcrypt_ccamisc.c | 8
drivers/soc/mediatek/mt8183-mmsys.h | 21 +
drivers/soc/mediatek/mtk-mmsys.c | 7
drivers/soc/mediatek/mtk-mmsys.h | 133 ++++++---
drivers/soc/qcom/rpmhpd.c | 5
drivers/soc/qcom/smsm.c | 11
drivers/soc/rockchip/Kconfig | 4
drivers/spi/spi-coldfire-qspi.c | 2
drivers/spi/spi-davinci.c | 8
drivers/spi/spi-fsl-dspi.c | 1
drivers/spi/spi-pic32.c | 1
drivers/spi/spi-sprd-adi.c | 2
drivers/spi/spi-zynq-qspi.c | 8
drivers/staging/clocking-wizard/Kconfig | 2
drivers/staging/media/atomisp/i2c/atomisp-mt9m114.c | 11
drivers/tty/serial/fsl_lpuart.c | 2
drivers/tty/tty_io.c | 4
drivers/usb/dwc3/dwc3-meson-g12a.c | 2
drivers/usb/dwc3/dwc3-qcom.c | 4
drivers/usb/gadget/udc/at91_udc.c | 4
drivers/usb/gadget/udc/bdc/bdc_core.c | 30 +-
drivers/usb/gadget/udc/mv_u3d_core.c | 19 -
drivers/usb/gadget/udc/renesas_usb3.c | 17 -
drivers/usb/gadget/udc/s3c2410_udc.c | 4
drivers/usb/host/ehci-orion.c | 8
drivers/usb/host/ohci-tmio.c | 3
drivers/usb/misc/brcmstb-usb-pinmap.c | 2
drivers/usb/phy/phy-fsl-usb.c | 2
drivers/usb/phy/phy-tahvo.c | 4
drivers/usb/phy/phy-twl6030-usb.c | 5
drivers/video/backlight/pwm_bl.c | 54 ++-
drivers/video/fbdev/core/fbmem.c | 6
fs/cifs/cifs_unicode.c | 9
fs/cifs/fs_context.c | 11
fs/cifs/readdir.c | 23 +
fs/debugfs/file.c | 8
fs/f2fs/file.c | 5
fs/f2fs/super.c | 11
fs/fcntl.c | 18 -
fs/fuse/file.c | 30 +-
fs/fuse/fuse_i.h | 19 +
fs/fuse/inode.c | 60 ++++
fs/gfs2/ops_fstype.c | 43 +++
fs/gfs2/super.c | 61 ----
fs/io-wq.c | 105 +++++--
fs/io_uring.c | 16 -
fs/iomap/swapfile.c | 6
fs/isofs/inode.c | 27 -
fs/isofs/isofs.h | 1
fs/isofs/joliet.c | 4
fs/lockd/svclock.c | 2
fs/nfsd/nfs4state.c | 4
fs/udf/misc.c | 13
fs/udf/super.c | 75 ++---
fs/udf/udf_sb.h | 2
fs/udf/unicode.c | 4
include/linux/blkdev.h | 16 +
include/linux/energy_model.h | 16 +
include/linux/hrtimer.h | 5
include/linux/local_lock_internal.h | 42 +--
include/linux/mlx5/mlx5_ifc.h | 3
include/linux/power/max17042_battery.h | 2
include/linux/sunrpc/svc.h | 1
include/linux/time64.h | 9
include/net/dsa.h | 2
include/net/pkt_cls.h | 3
include/trace/events/io_uring.h | 6
include/trace/events/sunrpc.h | 8
include/uapi/linux/bpf.h | 2
kernel/bpf/verifier.c | 31 +-
kernel/cgroup/cpuset.c | 95 ++++---
kernel/cpu_pm.c | 50 ++-
kernel/irq/timings.c | 2
kernel/locking/mutex.c | 15 -
kernel/power/energy_model.c | 4
kernel/rcu/tree_stall.h | 26 +
kernel/sched/core.c | 25 +
kernel/sched/deadline.c | 8
kernel/sched/debug.c | 7
kernel/sched/fair.c | 2
kernel/sched/sched.h | 2
kernel/sched/topology.c | 65 ++++
kernel/time/hrtimer.c | 92 +++++-
kernel/time/posix-cpu-timers.c | 2
kernel/time/tick-internal.h | 3
lib/mpi/mpiutil.c | 2
net/6lowpan/debugfs.c | 3
net/bluetooth/cmtp/cmtp.h | 2
net/bluetooth/hci_core.c | 14 +
net/bluetooth/mgmt.c | 2
net/bluetooth/sco.c | 11
net/core/devlink.c | 36 +-
net/dsa/dsa_priv.h | 2
net/dsa/port.c | 21 -
net/dsa/slave.c | 6
net/ipv4/route.c | 48 ++-
net/ipv4/tcp_ipv4.c | 5
net/ipv6/route.c | 5
net/mac80211/tx.c | 4
net/netlabel/netlabel_cipso_v4.c | 8
net/qrtr/qrtr.c | 8
net/sched/sch_cbq.c | 2
net/sched/sch_htb.c | 97 ++++---
net/sunrpc/svc.c | 15 +
samples/bpf/xdp_redirect_cpu_user.c | 2
samples/pktgen/pktgen_sample04_many_flows.sh | 12
samples/pktgen/pktgen_sample05_flow_per_thread.sh | 12
security/integrity/ima/Kconfig | 1
security/integrity/ima/ima_mok.c | 2
sound/soc/codecs/rt5682-i2c.c | 20 +
sound/soc/codecs/wcd9335.c | 23 +
sound/soc/fsl/fsl_rpmsg.c | 20 -
sound/soc/intel/boards/kbl_da7219_max98927.c | 55 ----
sound/soc/intel/common/soc-acpi-intel-cml-match.c | 2
sound/soc/intel/common/soc-acpi-intel-kbl-match.c | 2
sound/soc/intel/skylake/skl-topology.c | 25 -
sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 43 +--
sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 27 +
tools/bpf/bpftool/prog.c | 5
tools/include/uapi/linux/bpf.h | 2
tools/lib/bpf/Makefile | 10
tools/lib/bpf/libbpf.c | 16 -
tools/perf/util/bpf-event.c | 4
tools/perf/util/bpf_counter.c | 3
tools/testing/selftests/bpf/prog_tests/btf.c | 1
tools/testing/selftests/bpf/progs/bpf_iter_tcp4.c | 2
tools/testing/selftests/bpf/progs/test_core_autosize.c | 20 +
tools/testing/selftests/bpf/test_maps.c | 4
323 files changed, 2705 insertions(+), 1554 deletions(-)
Abhishek Naik (1):
iwlwifi: skip first element in the WTAS ACPI table
Adrian Ratiu (1):
char: tpm: Kconfig: remove bad i2c cr50 select
Ahmad Fatoum (1):
brcmfmac: pcie: fix oops on failure to resume and reprobe
Alexander Gordeev (1):
s390/kasan: fix large PMD pages address alignment check
Amit Engel (1):
nvmet: pass back cntlid on successful completion
Anand Moon (3):
ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
Andrey Ignatov (1):
bpf: Fix possible out of bound write in narrow load handling
Andrii Nakryiko (1):
libbpf: Re-build libbpf.so when libbpf.map changes
Andy Duan (1):
tty: serial: fsl_lpuart: fix the wrong mapbase value
Andy Shevchenko (5):
leds: lgm-sso: Put fwnode in any case during ->probe()
leds: lgm-sso: Don't spam logs when probe is deferred
leds: lt3593: Put fwnode in any case during ->probe()
leds: rt8515: Put fwnode in any case during ->probe()
leds: lgm-sso: Propagate error codes from callee to caller
Ard Biesheuvel (1):
crypto: x86/aes-ni - add missing error checks in XTS code
Austin Kim (1):
IMA: remove -Wmissing-prototypes warning
Babu Moger (1):
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
Baokun Li (1):
nbd: add the check to prevent overflow in __nbd_ioctl()
Ben Hutchings (1):
crypto: omap - Fix inconsistent locking of device lists
Benjamin Coddington (1):
lockd: Fix invalid lockowner cast after vfs_test_lock
Biju Das (1):
arm64: dts: renesas: hihope-rzg2-ex: Add EtherAVB internal rx delay
Bjorn Andersson (1):
soc: qcom: rpmhpd: Use corner in power_off
Bob Peterson (1):
gfs2: init system threads before freeze lock
Borislav Petkov (1):
x86/mce: Defer processing of early errors
Brett Creeley (1):
ice: Only lock to update netdev dev_addr
CK Hu (1):
soc: mmsys: mediatek: add mask to mmsys routes
Cezary Rojewski (3):
ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373
ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
ASoC: Intel: Skylake: Fix module resource and format selection
Chen-Yu Tsai (3):
irqchip/gic-v3: Fix priority comparison when non-secure priorities are used
regulator: vctrl: Use locked regulator_get_voltage in probe path
regulator: vctrl: Avoid lockdep warning in enable/disable ops
Chih-Kang Chang (1):
mac80211: Fix insufficient headroom issue for AMSDU
Chris Packham (1):
hwmon: (pmbus/bpa-rs600) Don't use rated limits as warn limits
Christoph Hellwig (1):
bcache: add proper error unwinding in bcache_device_init
Christophe JAILLET (9):
spi: coldfire-qspi: Use clk_disable_unprepare in the remove function
media: cxd2880-spi: Fix an error handling path
drm/msm/dsi: Fix some reference counted resource leaks
firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
usb: bdc: Fix a resource leak in the error handling path of 'bdc_probe()'
ASoC: wcd9335: Fix a double irq free in the remove function
ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function
ASoC: wcd9335: Disable irq on slave ports in the remove function
Chuck Lever (1):
SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency()
Chunguang Xu (1):
blk-throtl: optimize IOPS throttle for large IO scenarios
Chunyan Zhang (1):
spi: sprd: Fix the wrong WDG_LOAD_VAL
Claudiu Beznea (1):
ARM: dts: at91: add pinctrl-{names, 0} for all gpios
Colin Ian King (4):
gfs2: Fix memory leak of object lsi on error return path
6lowpan: iphc: Fix an off-by-one check of array index
media: venus: venc: Fix potential null pointer dereference on pointer fmt
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Curtis Malainey (1):
ASoC: Intel: Fix platform ID matching
Damien Le Moal (1):
libata: fix ata_host_start()
Dan Carpenter (7):
media: rockchip/rga: fix error handling in probe
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
rsi: fix error code in rsi_load_9116_firmware()
rsi: fix an error code in rsi_probe()
m68k: coldfire: return success for clk_enable(NULL)
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
net: qrtr: make checks in qrtr_endpoint_post() stricter
Daniel Thompson (1):
backlight: pwm_bl: Improve bootloader/kernel device handover
Darren Powell (1):
amdgpu/pm: add extra info to SMU msg pre-check failed message
David Heidelberg (2):
drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision
drm/msm/mdp4: move HW revision detection to earlier phase
Desmond Cheong Zhi Xi (3):
fcntl: fix potential deadlocks for &fown_struct.lock
fcntl: fix potential deadlock for &fasync_struct.fa_lock
Bluetooth: fix repeated calls to sco_sock_kill
Dietmar Eggemann (1):
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
Dmitry Baryshkov (2):
arm64: dts: qcom: sm8250: fix usb2 qmp phy node
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
Dmitry Osipenko (2):
regulator: tps65910: Silence deferred probe error
power: supply: smb347-charger: Add missing pin control activation
Dmytro Linkin (1):
net/mlx5e: Use correct eswitch for stack devices with lag
Dongliang Mu (4):
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
media: dvb-usb: Fix error handling in dvb_usb_i2c_init
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Douglas Anderson (2):
ASoC: rt5682: Properly turn off regulators if wrong device ID
ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
Dylan Hung (1):
ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
Eric Biggers (1):
blk-crypto: fix check for too-large dun_bytes
Eric Dumazet (3):
ipv6: make exception cache less predictible
ipv4: make exception cache less predictible
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
Evgeny Novikov (1):
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Frederic Weisbecker (1):
posix-cpu-timers: Force next expiration recalc after itimer reset
Geert Uytterhoeven (4):
m68k: Fix invalid RMW_INSNS on CPUs that lack CAS
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
Giovanni Cabiddu (4):
crypto: qat - do not ignore errors from enable_vf2pf_comms()
crypto: qat - handle both source of interrupt in VF ISR
crypto: qat - do not export adf_iov_putmsg()
crypto: qat - use proper type for vf_mask
Greg Kroah-Hartman (1):
Linux 5.13.17
Guoqing Jiang (1):
raid1: ensure write behind bio has less than BIO_MAX_VECS sectors
Haiyue Wang (1):
gve: fix the wrong AdminQ buffer overflow check
Halil Pasic (1):
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
Hans de Goede (2):
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
Harald Freudenberger (2):
s390/zcrypt: fix wrong offset index for APKA master key valid state
s390/ap: fix state machine hang after failure to enable irq
Harshvardhan Jha (1):
drm/gma500: Fix end of loop tests for list_for_each_entry
He Fengqing (1):
bpf: Fix potential memleak and UAF in the verifier.
Hongbo Li (1):
lib/mpi: use kcalloc in mpi_resize
Huacai Chen (1):
irqchip/loongson-pch-pic: Improve edge triggered interrupt support
Ilya Leoshkevich (1):
selftests/bpf: Fix test_core_autosize on big-endian machines
J. Bruce Fields (1):
nfsd4: Fix forced-expiry locking
Jaegeuk Kim (1):
f2fs: guarantee to write dirty data when enabling checkpoint back
Jan Kara (1):
udf: Check LVID earlier
Jens Axboe (4):
io-wq: remove GFP_ATOMIC allocation off schedule out path
io_uring: IORING_OP_WRITE needs hash_reg_file set
io_uring: io_uring_complete() trace should take an integer
io-wq: check max_worker limits if a worker transitions bound state
Jeongtae Park (1):
regmap: fix the offset of register error log
Jiapeng Chong (2):
leds: is31fl32xx: Fix missing error code in is31fl32xx_parse_dt()
net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set()
Joerg Roedel (1):
x86/efi: Restore Firmware IDT before calling ExitBootServices()
John Fastabend (1):
bpf, selftests: Fix test_maps now that sockmap supports UDP
Jose Blanquicet (1):
selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP
Judy Hsiao (1):
arm64: dts: qcom: sc7180: Set adau wakeup delay to 80 ms
Juhee Kang (1):
samples: pktgen: add missing IPv6 option to pktgen scripts
Julia Lawall (1):
drm/of: free the right object
Jun Miao (1):
Bluetooth: btusb: Fix a unspported condition to set available debug features
Justin M. Forbes (1):
iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
Kai Ye (2):
crypto: hisilicon/sec - fix the abnormal exiting process
crypto: hisilicon/sec - modify the hardware endian configuration
Kai-Heng Feng (2):
drm/amdgpu/acp: Make PM domain really work
Bluetooth: Move shutdown callback before flushing tx and rx queue
Kevin Mitchell (1):
lkdtm: replace SCSI_DISPATCH_CMD with SCSI_QUEUE_RQ
Kim Phillips (1):
perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
Krzysztof Hałasa (1):
media: TDA1997x: enable EDID support
Krzysztof Kozlowski (1):
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Kuniyuki Iwashima (1):
bpf: Fix a typo of reuseport map in bpf.h.
Kuogee Hsieh (2):
drm/msm/dp: update is_connected status base on sink count at dp_pm_resume()
drm/msm/dp: replug event is converted into an unplug followed by an plug events
Lars Poeschel (1):
auxdisplay: hd44780: Fix oops on module unloading
Laurent Pinchart (1):
drm: rcar-du: Don't put reference to drm_device in rcar_du_remove()
Len Baker (1):
CIFS: Fix a potencially linear read overflow
Leon Romanovsky (5):
ionic: cleanly release devlink instance
net: ti: am65-cpsw-nuss: fix wrong devlink release order
devlink: Break parameter notification sequence to be before/after unload/load driver
devlink: Clear whole devlink_flash_notify struct
net/mlx5: Remove all auxiliary devices at the unregister event
Linus Walleij (1):
clk: kirkwood: Fix a clocking boot regression
Lukas Bulwahn (3):
crypto: rmd320 - remove rmd320 in Makefile
clk: staging: correct reference to config IOMEM to config HAS_IOMEM
hwmon: remove amd_energy driver in Makefile
Lukas Hannen (1):
time: Handle negative seconds correctly in timespec64_to_ns()
Lukasz Luba (1):
PM: EM: Increase energy calculation precision
Mansur Alisha Shaik (1):
media: venus: helper: do not set constrained parameters for UBWC
Maor Dickman (1):
net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group
Marc Zyngier (1):
KVM: arm64: Unregister HYP sections from kmemleak in protected mode
Marco Chiappero (2):
crypto: qat - fix reuse of completion variable
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marek Vasut (3):
drm: mxsfb: Enable recovery on underflow
drm: mxsfb: Increase number of outstanding requests on V4 and newer HW
drm: mxsfb: Clear FIFO_CLEAR bit
Martin Blumenstingl (1):
ARM: dts: meson8: Use a higher default GPU clock frequency
Martin KaFai Lau (1):
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Martynas Pumputis (1):
libbpf: Fix removal of inner map in bpf_object__create_map
Matija Glavinic Pecotic (1):
spi: davinci: invoke chipselect callback
Matthew Cover (1):
bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring
Mauro Carvalho Chehab (1):
media: rockchip/rga: use pm_runtime_resume_and_get()
Maxim Levitsky (1):
KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
Maxim Mikityanskiy (3):
net/mlx5e: Prohibit inner indir TIRs in IPoIB
net/mlx5e: Block LRO if firmware asks for tunneled LRO
sch_htb: Fix inconsistency when leaf qdisc creation fails
Mian Yousaf Kaukab (1):
crypto: ecc - handle unaligned input buffer in ecc_swap_digits
Mika Penttilä (1):
sched/numa: Fix is_core_idle()
Miklos Szeredi (3):
fuse: truncate pagecache on atomic_o_trunc
fuse: flush extending writes
fuse: wait for writepages in syncfs
Ming Lei (1):
block: return ELEVATOR_DISCARD_MERGE if possible
Nadezda Lutovinova (1):
usb: gadget: mv_u3d: request_irq() after initializing UDC
Naveen Mamindlapalli (1):
octeontx2-pf: send correct vlan priority mask to npc_install_flow_req
Nguyen Dinh Phi (1):
tty: Fix data race between tiocsti() and flush_to_ldisc()
Niklas Schnelle (2):
s390/pci: fix misleading rc in clp_set_pci_fn()
RDMA/mlx5: Fix number of allocated XLT entries
Pali Rohár (3):
udf: Fix iocharset=utf8 mount option
isofs: joliet: Fix iocharset=utf8 mount option
arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
Paolo Bonzini (1):
KVM: x86: clamp host mapping level to max_level in kvm_mmu_max_mapping_level
Parav Pandit (1):
net/mlx5: Fix unpublish devlink parameters
Pavel Begunkov (3):
io_uring: refactor io_submit_flush_completions()
io_uring: limit fixed table size by RLIMIT_NOFILE
bio: fix page leak bio_add_hw_page failure
Pavel Skripkin (6):
m68k: emu: Fix invalid free in nfeth_cleanup()
block: nbd: add sanity check for first_minor
media: go7007: fix memory leak in go7007_usb_probe
media: go7007: remove redundant initialization
net: cipso: fix warnings in netlbl_cipsov4_add_std
Bluetooth: add timeout sanity check to hci_inquiry
Peter Oberparleiter (2):
s390/debug: keep debug data on resize
s390/debug: fix debug area life cycle
Peter Robinson (1):
power: supply: cw2015: use dev_err_probe to allow deferred probe
Peter Zijlstra (1):
locking/mutex: Fix HANDOFF condition
Philipp Zabel (1):
media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
Phong Hoang (1):
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Qiuxu Zhuo (1):
EDAC/i10nm: Fix NVDIMM detection
Quanyang Wang (1):
spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible
Quentin Monnet (1):
tools: Free BTF objects at various locations
Quentin Perret (2):
sched/deadline: Fix reset_on_fork reporting of DL tasks
sched: Fix UCLAMP_FLAG_IDLE setting
Rafael J. Wysocki (2):
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
PCI: PM: Enable PME if it can be signaled from D3cold
Roi Dayan (1):
net/mlx5e: Fix possible use-after-free deleting fdb rule
Ronnie Sahlberg (1):
cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED
Ruozhu Li (2):
nvme-tcp: don't update queue count when failing to set io queues
nvme-rdma: don't update queue count when failing to set io queues
Sean Anderson (1):
crypto: mxs-dcp - Check for DMA mapping errors
Sean Christopherson (3):
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
KVM: x86/mmu: Avoid collision with !PRESENT SPTEs in TDP MMU lpage stats
KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Sergey Senozhatsky (1):
rcu/tree: Handle VM stoppage in stall detection
Sergey Shtylyov (16):
i2c: highlander: add IRQ check
usb: dwc3: meson-g12a: add IRQ check
usb: dwc3: qcom: add IRQ check
usb: gadget: udc: at91: add IRQ check
usb: gadget: udc: s3c2410: add IRQ check
usb: misc: brcmstb-usb-pinmap: add IRQ check
usb: phy: fsl-usb: add IRQ check
usb: phy: twl6030: add IRQ checks
usb: host: ohci-tmio: add IRQ check
usb: phy: tahvo: add IRQ check
i2c: synquacer: fix deferred probing
i2c: iop3xx: fix deferred probing
i2c: s3c2410: fix IRQ check
i2c: hix5hd2: fix IRQ check
i2c: mt65xx: fix IRQ check
i2c: xlp9xx: fix main IRQ check
Shengjiu Wang (1):
ASoC: fsl_rpmsg: Check -EPROBE_DEFER for getting clocks
Shuyi Cheng (1):
libbpf: Fix the possible memory leak on error
Smita Koralahalli (1):
EDAC/mce_amd: Do not load edac_mce_amd module on guests
Stefan Assmann (1):
i40e: improve locking of mac_filter_hash
Stefan Berger (2):
certs: Trigger creation of RSA module signing key if it's not an RSA key
tpm: ibmvtpm: Avoid error message when process gets signal while waiting
Stefan Wahren (1):
net: qualcomm: fix QCA7000 checksum handling
Stephan Gerhold (1):
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Stephen Boyd (1):
ASoC: rt5682: Implement remove callback
Steve French (1):
smb3: fix posix extensions mount option
Steven Price (1):
drm/of: free the iterator object on failure
Stian Skjelstad (1):
udf_get_extendedattr() had no boundary checks.
Subbaraya Sundeep (4):
octeontx2-af: cn10k: Fix SDP base channel number
octeontx2-af: Fix loop in free and unmap counter
octeontx2-af: Fix mailbox errors in nix_rss_flowkey_cfg
octeontx2-af: Fix static code analyzer reported issues
Sudarsana Reddy Kalluru (1):
atlantic: Fix driver resume flow.
Sunil Goutham (3):
octeontx2-pf: Don't install VLAN offload rule if netdev is down
octeontx2-pf: Fix algorithm index in MCAM rules with RSS action
octeontx2-af: Set proper errorcode for IPv4 checksum errors
Sven Eckelmann (1):
debugfs: Return error during {full/open}_proxy_open() on rmmod
Sven Peter (1):
irqchip/apple-aic: Fix irq_disable from within irq handlers
THOBY Simon (1):
IMA: remove the dependency on CRYPTO_MD5
Tedd Ho-Jeong An (1):
Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
Tetsuo Handa (1):
fbmem: don't allow too huge resolutions
Thomas Gleixner (3):
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
hrtimer: Ensure timerfd notification for HIGHRES=n
locking/local_lock: Add missing owner initialization
Tianjia Zhang (1):
crypto: tcrypt - Fix missing return value check
Tony Lindgren (6):
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
mmc: sdhci: Fix issue with uninitialized dma_slave_config
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
mmc: moxart: Fix issue with uninitialized dma_slave_config
Valentin Schneider (3):
sched/topology: Skip updating masks for non-online nodes
sched/debug: Don't update sched_domain debug directories before sched_debug_init()
PM: cpu: Make notifier chain use a raw_spinlock_t
Vignesh Raghavendra (1):
net: ti: am65-cpsw-nuss: fix RX IRQ state after .ndo_stop()
Vineeth Vijayan (1):
s390/cio: add dev_busid sysfs entry for each subchannel
Vladimir Oltean (4):
net: dsa: stop syncing the bridge mcast_router attribute at join time
net: dsa: mt7530: remove the .port_set_mrouter implementation
net: dsa: don't disable multicast flooding to the CPU even without an IGMP querier
net: phy: marvell10g: fix broken PHY interrupts for anyone after us in the driver probe list
Voon Weifeng (1):
net: stmmac: fix INTR TBU status affecting irq count statistic
Waiman Long (3):
cgroup/cpuset: Fix a partition bug with hotplug
cgroup/cpuset: Miscellaneous code cleanup
cgroup/cpuset: Fix violation of cpuset locking rule
Wei Yongjun (2):
drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init()
media: omap3isp: Fix missing unlock in isp_subdev_notifier_complete()
William Breathitt Gray (1):
counter: 104-quad-8: Return error when invalid mode during ceiling_write
Xiao Ni (1):
md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard
Xiyu Yang (1):
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
Xu Yu (1):
mm/swap: consider max pages in iomap_swapfile_add_extent
Yanfei Xu (2):
rcu: Fix to include first blocked task in stall warning
rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
Yang Yingliang (1):
octeontx2-pf: cn10k: Fix error return code in otx2_set_flowkey_cfg()
Yizhuo (1):
media: atomisp: fix the uninitialized use and rename "retvalue"
Zelin Deng (1):
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Zenghui Yu (1):
bcma: Fix memory leak for internally-handled cores
Zhang Qilong (2):
ASoC: mediatek: mt8192:Fix Unbalanced pm_runtime_enable in mt8192_afe_pcm_dev_probe
ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe
Zhen Lei (4):
genirq/timings: Fix error return code in irq_timings_test_irqs()
firmware: fix theoretical UAF race with firmware cache and resume
driver core: Fix error return code in really_probe()
media: venus: hfi: fix return value check in sys_get_prop_image_version()
^ permalink raw reply [relevance 2%]
* Linux 5.10.65
@ 2021-09-15 8:09 2% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-15 8:09 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 5.10.65 kernel.
All users of the 5.10 kernel series must upgrade.
The updated 5.10.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/fault-injection/provoke-crashes.rst | 2
Makefile | 2
arch/arm/boot/dts/aspeed-g6-pinctrl.dtsi | 4
arch/arm/boot/dts/at91-sam9x60ek.dts | 16 +
arch/arm/boot/dts/at91-sama5d3_xplained.dts | 29 ++
arch/arm/boot/dts/at91-sama5d4_xplained.dts | 19 +
arch/arm/boot/dts/meson8.dtsi | 5
arch/arm/boot/dts/meson8b-ec100.dts | 4
arch/arm/boot/dts/meson8b-mxq.dts | 4
arch/arm/boot/dts/meson8b-odroidc1.dts | 4
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2
arch/arm64/boot/dts/marvell/armada-3720-turris-mox.dts | 17 +
arch/arm64/boot/dts/marvell/armada-37xx.dtsi | 11
arch/arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 3
arch/arm64/boot/dts/renesas/hihope-rzg2-ex.dtsi | 3
arch/arm64/boot/dts/renesas/r8a774a1.dtsi | 2
arch/arm64/boot/dts/renesas/r8a774b1.dtsi | 2
arch/arm64/boot/dts/renesas/r8a774c0.dtsi | 1
arch/arm64/boot/dts/renesas/r8a774e1.dtsi | 2
arch/arm64/boot/dts/renesas/r8a77995-draak.dts | 4
arch/m68k/Kconfig.cpu | 8
arch/m68k/emu/nfeth.c | 4
arch/s390/include/asm/kvm_host.h | 1
arch/s390/kernel/debug.c | 176 ++++++++-----
arch/s390/kvm/interrupt.c | 12
arch/s390/kvm/kvm-s390.c | 2
arch/s390/kvm/kvm-s390.h | 2
arch/s390/mm/kasan_init.c | 41 +--
arch/s390/pci/pci.c | 7
arch/s390/pci/pci_clp.c | 33 +-
arch/x86/events/amd/ibs.c | 1
arch/x86/include/asm/mce.h | 1
arch/x86/kernel/cpu/mce/core.c | 11
arch/x86/kernel/cpu/resctrl/monitor.c | 6
arch/x86/kvm/mmu/mmu.c | 6
arch/x86/kvm/vmx/nested.c | 7
arch/x86/kvm/vmx/vmx.c | 3
arch/x86/kvm/x86.c | 4
block/bfq-iosched.c | 3
block/bio.c | 15 -
block/blk-crypto.c | 2
block/blk-merge.c | 18 -
block/blk-throttle.c | 32 ++
block/blk.h | 2
block/elevator.c | 3
block/mq-deadline.c | 2
certs/Makefile | 8
drivers/ata/libata-core.c | 2
drivers/base/dd.c | 16 -
drivers/base/firmware_loader/main.c | 20 -
drivers/base/regmap/regmap.c | 2
drivers/bcma/main.c | 6
drivers/block/nbd.c | 10
drivers/char/tpm/tpm_ibmvtpm.c | 26 +
drivers/char/tpm/tpm_ibmvtpm.h | 2
drivers/clk/mvebu/kirkwood.c | 1
drivers/clocksource/sh_cmt.c | 30 +-
drivers/counter/104-quad-8.c | 5
drivers/crypto/mxs-dcp.c | 45 ++-
drivers/crypto/omap-aes.c | 8
drivers/crypto/omap-des.c | 8
drivers/crypto/omap-sham.c | 14 -
drivers/crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4
drivers/crypto/qat/qat_common/adf_common_drv.h | 8
drivers/crypto/qat/qat_common/adf_init.c | 5
drivers/crypto/qat/qat_common/adf_isr.c | 7
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7
drivers/crypto/qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4
drivers/edac/i10nm_base.c | 6
drivers/edac/mce_amd.c | 3
drivers/firmware/raspberrypi.c | 46 +++
drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 54 +--
drivers/gpu/drm/drm_of.c | 6
drivers/gpu/drm/gma500/oaktrail_lvds.c | 2
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 10
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 68 ++---
drivers/gpu/drm/msm/dsi/dsi.c | 6
drivers/gpu/drm/mxsfb/mxsfb_drv.c | 3
drivers/gpu/drm/mxsfb/mxsfb_drv.h | 1
drivers/gpu/drm/mxsfb/mxsfb_kms.c | 40 ++
drivers/gpu/drm/mxsfb/mxsfb_regs.h | 9
drivers/gpu/drm/panfrost/panfrost_device.c | 3
drivers/i2c/busses/i2c-highlander.c | 2
drivers/i2c/busses/i2c-hix5hd2.c | 4
drivers/i2c/busses/i2c-iop3xx.c | 6
drivers/i2c/busses/i2c-mt65xx.c | 2
drivers/i2c/busses/i2c-s3c2410.c | 2
drivers/i2c/busses/i2c-synquacer.c | 2
drivers/i2c/busses/i2c-xlp9xx.c | 2
drivers/irqchip/irq-gic-v3.c | 23 +
drivers/irqchip/irq-loongson-pch-pic.c | 19 +
drivers/leds/leds-is31fl32xx.c | 1
drivers/leds/leds-lt3593.c | 5
drivers/leds/trigger/ledtrig-audio.c | 37 ++
drivers/md/bcache/super.c | 16 -
drivers/media/i2c/tda1997x.c | 1
drivers/media/platform/coda/coda-bit.c | 18 -
drivers/media/platform/qcom/venus/venc.c | 2
drivers/media/platform/rockchip/rga/rga-buf.c | 3
drivers/media/platform/rockchip/rga/rga.c | 29 +-
drivers/media/spi/cxd2880-spi.c | 7
drivers/media/usb/dvb-usb/dvb-usb-i2c.c | 9
drivers/media/usb/dvb-usb/dvb-usb-init.c | 2
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6
drivers/media/usb/dvb-usb/vp702x.c | 12
drivers/media/usb/em28xx/em28xx-input.c | 1
drivers/media/usb/go7007/go7007-driver.c | 26 -
drivers/media/usb/go7007/go7007-usb.c | 2
drivers/misc/lkdtm/core.c | 2
drivers/mmc/host/dw_mmc.c | 1
drivers/mmc/host/moxart-mmc.c | 1
drivers/mmc/host/sdhci.c | 1
drivers/net/ethernet/aquantia/atlantic/aq_pci_func.c | 3
drivers/net/ethernet/google/gve/gve_adminq.c | 6
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 23 +
drivers/net/ethernet/intel/ice/ice_main.c | 13
drivers/net/ethernet/marvell/octeontx2/af/rvu_npc.c | 16 -
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 52 +++
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 6
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 10
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 15 +
drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c | 5
drivers/net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 18 -
drivers/net/ethernet/pensando/ionic/ionic_devlink.c | 14 -
drivers/net/ethernet/qualcomm/qca_spi.c | 2
drivers/net/ethernet/qualcomm/qca_uart.c | 2
drivers/net/wireless/ath/ath6kl/wmi.c | 4
drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c | 2
drivers/net/wireless/intel/iwlwifi/fw/acpi.c | 32 +-
drivers/net/wireless/intel/iwlwifi/fw/acpi.h | 10
drivers/net/wireless/intel/iwlwifi/fw/api/commands.h | 2
drivers/net/wireless/intel/iwlwifi/fw/api/nvm-reg.h | 8
drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 12
drivers/net/wireless/intel/iwlwifi/fw/file.h | 2
drivers/net/wireless/intel/iwlwifi/iwl-config.h | 2
drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 6
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 10
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 13
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 24 -
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 1
drivers/net/wireless/rsi/rsi_91x_hal.c | 4
drivers/net/wireless/rsi/rsi_91x_usb.c | 1
drivers/nvme/host/rdma.c | 4
drivers/nvme/host/tcp.c | 4
drivers/nvme/target/fabrics-cmd.c | 9
drivers/pci/pci.c | 25 +
drivers/power/supply/axp288_fuel_gauge.c | 4
drivers/power/supply/cw2015_battery.c | 4
drivers/power/supply/max17042_battery.c | 2
drivers/power/supply/smb347-charger.c | 10
drivers/regulator/tps65910-regulator.c | 10
drivers/regulator/vctrl-regulator.c | 73 +++--
drivers/s390/cio/css.c | 17 +
drivers/s390/crypto/ap_bus.c | 25 -
drivers/s390/crypto/ap_bus.h | 10
drivers/s390/crypto/ap_queue.c | 20 -
drivers/s390/crypto/zcrypt_ccamisc.c | 8
drivers/soc/qcom/rpmhpd.c | 5
drivers/soc/qcom/smsm.c | 11
drivers/soc/rockchip/Kconfig | 4
drivers/spi/spi-coldfire-qspi.c | 2
drivers/spi/spi-davinci.c | 8
drivers/spi/spi-fsl-dspi.c | 1
drivers/spi/spi-pic32.c | 1
drivers/spi/spi-sprd-adi.c | 2
drivers/spi/spi-zynq-qspi.c | 8
drivers/staging/clocking-wizard/Kconfig | 2
drivers/staging/media/atomisp/i2c/atomisp-mt9m114.c | 11
drivers/tty/serial/fsl_lpuart.c | 2
drivers/tty/tty_io.c | 4
drivers/usb/dwc3/dwc3-meson-g12a.c | 2
drivers/usb/dwc3/dwc3-qcom.c | 4
drivers/usb/gadget/udc/at91_udc.c | 4
drivers/usb/gadget/udc/bdc/bdc_core.c | 30 +-
drivers/usb/gadget/udc/mv_u3d_core.c | 19 -
drivers/usb/gadget/udc/renesas_usb3.c | 17 -
drivers/usb/gadget/udc/s3c2410_udc.c | 4
drivers/usb/host/ehci-orion.c | 8
drivers/usb/host/ohci-tmio.c | 3
drivers/usb/phy/phy-fsl-usb.c | 2
drivers/usb/phy/phy-tahvo.c | 4
drivers/usb/phy/phy-twl6030-usb.c | 5
drivers/video/backlight/pwm_bl.c | 54 ++-
drivers/video/fbdev/core/fbmem.c | 6
fs/cifs/cifs_unicode.c | 9
fs/debugfs/file.c | 8
fs/f2fs/file.c | 5
fs/f2fs/super.c | 11
fs/fcntl.c | 5
fs/fuse/file.c | 9
fs/gfs2/ops_fstype.c | 43 +++
fs/gfs2/super.c | 61 ----
fs/io_uring.c | 1
fs/iomap/swapfile.c | 6
fs/isofs/inode.c | 27 -
fs/isofs/isofs.h | 1
fs/isofs/joliet.c | 4
fs/lockd/svclock.c | 2
fs/nfsd/nfs4state.c | 4
fs/udf/misc.c | 13
fs/udf/super.c | 75 ++---
fs/udf/udf_sb.h | 2
fs/udf/unicode.c | 4
include/linux/blkdev.h | 16 +
include/linux/energy_model.h | 16 +
include/linux/hrtimer.h | 5
include/linux/local_lock_internal.h | 39 +-
include/linux/lockdep.h | 15 -
include/linux/lockdep_types.h | 18 +
include/linux/mlx5/mlx5_ifc.h | 3
include/linux/power/max17042_battery.h | 2
include/linux/time64.h | 9
include/soc/bcm2835/raspberrypi-firmware.h | 2
include/uapi/linux/bpf.h | 2
kernel/bpf/verifier.c | 31 +-
kernel/cgroup/cpuset.c | 95 ++++---
kernel/cpu_pm.c | 50 ++-
kernel/irq/timings.c | 2
kernel/locking/lockdep.c | 16 -
kernel/locking/mutex.c | 15 -
kernel/power/energy_model.c | 4
kernel/rcu/tree.c | 4
kernel/rcu/tree_plugin.h | 1
kernel/rcu/tree_stall.h | 34 ++
kernel/sched/core.c | 25 +
kernel/sched/deadline.c | 8
kernel/sched/fair.c | 2
kernel/sched/sched.h | 2
kernel/time/hrtimer.c | 92 +++++-
kernel/time/posix-cpu-timers.c | 2
kernel/time/tick-internal.h | 3
lib/mpi/mpiutil.c | 2
net/6lowpan/debugfs.c | 3
net/bluetooth/cmtp/cmtp.h | 2
net/bluetooth/hci_core.c | 14 +
net/bluetooth/mgmt.c | 2
net/bluetooth/sco.c | 11
net/core/devlink.c | 36 +-
net/ipv4/route.c | 48 ++-
net/ipv4/tcp_ipv4.c | 5
net/ipv6/route.c | 5
net/mac80211/tx.c | 4
net/netlabel/netlabel_cipso_v4.c | 8
net/sched/sch_cbq.c | 2
samples/bpf/xdp_redirect_cpu_user.c | 2
samples/pktgen/pktgen_sample04_many_flows.sh | 12
samples/pktgen/pktgen_sample05_flow_per_thread.sh | 12
security/integrity/ima/Kconfig | 1
security/integrity/ima/ima_mok.c | 2
sound/soc/codecs/rt5682-i2c.c | 20 +
sound/soc/codecs/wcd9335.c | 23 +
sound/soc/intel/boards/kbl_da7219_max98927.c | 55 ----
sound/soc/intel/common/soc-acpi-intel-cml-match.c | 2
sound/soc/intel/common/soc-acpi-intel-kbl-match.c | 2
sound/soc/intel/skylake/skl-topology.c | 25 -
sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 43 +--
tools/include/uapi/linux/bpf.h | 2
tools/lib/bpf/Makefile | 10
tools/lib/bpf/libbpf.c | 16 -
tools/testing/selftests/bpf/progs/bpf_iter_tcp4.c | 2
tools/testing/selftests/bpf/progs/test_core_autosize.c | 20 +
264 files changed, 2073 insertions(+), 1183 deletions(-)
Abhishek Naik (1):
iwlwifi: skip first element in the WTAS ACPI table
Ahmad Fatoum (1):
brcmfmac: pcie: fix oops on failure to resume and reprobe
Alexander Gordeev (1):
s390/kasan: fix large PMD pages address alignment check
Amit Engel (1):
nvmet: pass back cntlid on successful completion
Anand Moon (3):
ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
Andrey Ignatov (1):
bpf: Fix possible out of bound write in narrow load handling
Andrii Nakryiko (1):
libbpf: Re-build libbpf.so when libbpf.map changes
Andy Duan (1):
tty: serial: fsl_lpuart: fix the wrong mapbase value
Andy Shevchenko (1):
leds: lt3593: Put fwnode in any case during ->probe()
Austin Kim (1):
IMA: remove -Wmissing-prototypes warning
Aya Levin (1):
net/mlx5: Register to devlink ingress VLAN filter trap
Babu Moger (1):
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
Ben Hutchings (1):
crypto: omap - Fix inconsistent locking of device lists
Benjamin Coddington (1):
lockd: Fix invalid lockowner cast after vfs_test_lock
Biju Das (1):
arm64: dts: renesas: hihope-rzg2-ex: Add EtherAVB internal rx delay
Bjorn Andersson (1):
soc: qcom: rpmhpd: Use corner in power_off
Bob Peterson (1):
gfs2: init system threads before freeze lock
Borislav Petkov (1):
x86/mce: Defer processing of early errors
Brett Creeley (1):
ice: Only lock to update netdev dev_addr
Cezary Rojewski (3):
ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373
ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
ASoC: Intel: Skylake: Fix module resource and format selection
Chen-Yu Tsai (3):
irqchip/gic-v3: Fix priority comparison when non-secure priorities are used
regulator: vctrl: Use locked regulator_get_voltage in probe path
regulator: vctrl: Avoid lockdep warning in enable/disable ops
Chih-Kang Chang (1):
mac80211: Fix insufficient headroom issue for AMSDU
Christoph Hellwig (1):
bcache: add proper error unwinding in bcache_device_init
Christophe JAILLET (9):
spi: coldfire-qspi: Use clk_disable_unprepare in the remove function
media: cxd2880-spi: Fix an error handling path
drm/msm/dsi: Fix some reference counted resource leaks
firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
usb: bdc: Fix a resource leak in the error handling path of 'bdc_probe()'
ASoC: wcd9335: Fix a double irq free in the remove function
ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function
ASoC: wcd9335: Disable irq on slave ports in the remove function
Chunguang Xu (1):
blk-throtl: optimize IOPS throttle for large IO scenarios
Chunyan Zhang (1):
spi: sprd: Fix the wrong WDG_LOAD_VAL
Claudiu Beznea (1):
ARM: dts: at91: add pinctrl-{names, 0} for all gpios
Colin Ian King (4):
gfs2: Fix memory leak of object lsi on error return path
6lowpan: iphc: Fix an off-by-one check of array index
media: venus: venc: Fix potential null pointer dereference on pointer fmt
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Curtis Malainey (1):
ASoC: Intel: Fix platform ID matching
Damien Le Moal (1):
libata: fix ata_host_start()
Dan Carpenter (5):
media: rockchip/rga: fix error handling in probe
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
rsi: fix error code in rsi_load_9116_firmware()
rsi: fix an error code in rsi_probe()
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
Daniel Thompson (1):
backlight: pwm_bl: Improve bootloader/kernel device handover
David Heidelberg (2):
drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision
drm/msm/mdp4: move HW revision detection to earlier phase
Desmond Cheong Zhi Xi (2):
fcntl: fix potential deadlock for &fasync_struct.fa_lock
Bluetooth: fix repeated calls to sco_sock_kill
Dietmar Eggemann (1):
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
Dmitry Baryshkov (1):
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
Dmitry Osipenko (2):
regulator: tps65910: Silence deferred probe error
power: supply: smb347-charger: Add missing pin control activation
Dongliang Mu (4):
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
media: dvb-usb: Fix error handling in dvb_usb_i2c_init
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Douglas Anderson (2):
ASoC: rt5682: Properly turn off regulators if wrong device ID
ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
Dylan Hung (1):
ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
Emmanuel Grumbach (1):
iwlwifi: follow the new inclusive terminology
Eric Biggers (1):
blk-crypto: fix check for too-large dun_bytes
Eric Dumazet (3):
ipv6: make exception cache less predictible
ipv4: make exception cache less predictible
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
Evgeny Novikov (1):
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Frederic Weisbecker (1):
posix-cpu-timers: Force next expiration recalc after itimer reset
Geert Uytterhoeven (5):
m68k: Fix invalid RMW_INSNS on CPUs that lack CAS
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
arm64: dts: renesas: rzg2: Convert EtherAVB to explicit delay handling
usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
Giovanni Cabiddu (4):
crypto: qat - do not ignore errors from enable_vf2pf_comms()
crypto: qat - handle both source of interrupt in VF ISR
crypto: qat - do not export adf_iov_putmsg()
crypto: qat - use proper type for vf_mask
Greg Kroah-Hartman (1):
Linux 5.10.65
Haiyue Wang (1):
gve: fix the wrong AdminQ buffer overflow check
Halil Pasic (1):
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
Hans de Goede (2):
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
Harald Freudenberger (2):
s390/zcrypt: fix wrong offset index for APKA master key valid state
s390/ap: fix state machine hang after failure to enable irq
Harshvardhan Jha (1):
drm/gma500: Fix end of loop tests for list_for_each_entry
He Fengqing (1):
bpf: Fix potential memleak and UAF in the verifier.
Hongbo Li (1):
lib/mpi: use kcalloc in mpi_resize
Huacai Chen (1):
irqchip/loongson-pch-pic: Improve edge triggered interrupt support
Ilya Leoshkevich (1):
selftests/bpf: Fix test_core_autosize on big-endian machines
J. Bruce Fields (1):
nfsd4: Fix forced-expiry locking
Jaegeuk Kim (1):
f2fs: guarantee to write dirty data when enabling checkpoint back
Jan Kara (1):
udf: Check LVID earlier
Jens Axboe (1):
io_uring: IORING_OP_WRITE needs hash_reg_file set
Jeongtae Park (1):
regmap: fix the offset of register error log
Jiapeng Chong (2):
leds: is31fl32xx: Fix missing error code in is31fl32xx_parse_dt()
net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set()
Jose Blanquicet (1):
selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP
Juhee Kang (1):
samples: pktgen: add missing IPv6 option to pktgen scripts
Julia Lawall (1):
drm/of: free the right object
Justin M. Forbes (1):
iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
Kai-Heng Feng (2):
drm/amdgpu/acp: Make PM domain really work
Bluetooth: Move shutdown callback before flushing tx and rx queue
Kevin Mitchell (1):
lkdtm: replace SCSI_DISPATCH_CMD with SCSI_QUEUE_RQ
Kim Phillips (1):
perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
Krzysztof Hałasa (1):
media: TDA1997x: enable EDID support
Krzysztof Kozlowski (1):
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Kuniyuki Iwashima (1):
bpf: Fix a typo of reuseport map in bpf.h.
Len Baker (1):
CIFS: Fix a potencially linear read overflow
Leon Romanovsky (3):
ionic: cleanly release devlink instance
devlink: Break parameter notification sequence to be before/after unload/load driver
devlink: Clear whole devlink_flash_notify struct
Linus Walleij (1):
clk: kirkwood: Fix a clocking boot regression
Lukas Bulwahn (1):
clk: staging: correct reference to config IOMEM to config HAS_IOMEM
Lukas Hannen (1):
time: Handle negative seconds correctly in timespec64_to_ns()
Lukasz Luba (1):
PM: EM: Increase energy calculation precision
Marco Chiappero (2):
crypto: qat - fix reuse of completion variable
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marek Vasut (3):
drm: mxsfb: Enable recovery on underflow
drm: mxsfb: Increase number of outstanding requests on V4 and newer HW
drm: mxsfb: Clear FIFO_CLEAR bit
Martin Blumenstingl (1):
ARM: dts: meson8: Use a higher default GPU clock frequency
Martin KaFai Lau (1):
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Martynas Pumputis (1):
libbpf: Fix removal of inner map in bpf_object__create_map
Matija Glavinic Pecotic (1):
spi: davinci: invoke chipselect callback
Matthew Cover (1):
bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring
Mauro Carvalho Chehab (1):
media: rockchip/rga: use pm_runtime_resume_and_get()
Maxim Levitsky (1):
KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
Maxim Mikityanskiy (2):
net/mlx5e: Prohibit inner indir TIRs in IPoIB
net/mlx5e: Block LRO if firmware asks for tunneled LRO
Mika Penttilä (1):
sched/numa: Fix is_core_idle()
Miklos Szeredi (2):
fuse: truncate pagecache on atomic_o_trunc
fuse: flush extending writes
Ming Lei (1):
block: return ELEVATOR_DISCARD_MERGE if possible
Nadezda Lutovinova (1):
usb: gadget: mv_u3d: request_irq() after initializing UDC
Nguyen Dinh Phi (1):
tty: Fix data race between tiocsti() and flush_to_ldisc()
Nicolas Saenz Julienne (1):
firmware: raspberrypi: Keep count of all consumers
Niklas Schnelle (1):
s390/pci: fix misleading rc in clp_set_pci_fn()
Pali Rohár (3):
udf: Fix iocharset=utf8 mount option
isofs: joliet: Fix iocharset=utf8 mount option
arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
Parav Pandit (1):
net/mlx5: Fix unpublish devlink parameters
Paul E. McKenney (1):
rcu: Add lockdep_assert_irqs_disabled() to rcu_sched_clock_irq() and callees
Pavel Begunkov (1):
bio: fix page leak bio_add_hw_page failure
Pavel Skripkin (6):
m68k: emu: Fix invalid free in nfeth_cleanup()
block: nbd: add sanity check for first_minor
media: go7007: fix memory leak in go7007_usb_probe
media: go7007: remove redundant initialization
net: cipso: fix warnings in netlbl_cipsov4_add_std
Bluetooth: add timeout sanity check to hci_inquiry
Peter Oberparleiter (2):
s390/debug: keep debug data on resize
s390/debug: fix debug area life cycle
Peter Robinson (1):
power: supply: cw2015: use dev_err_probe to allow deferred probe
Peter Zijlstra (2):
locking/mutex: Fix HANDOFF condition
locking/lockdep: Mark local_lock_t
Philipp Zabel (1):
media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
Phong Hoang (1):
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Qiuxu Zhuo (1):
EDAC/i10nm: Fix NVDIMM detection
Quanyang Wang (1):
spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible
Quentin Perret (2):
sched/deadline: Fix reset_on_fork reporting of DL tasks
sched: Fix UCLAMP_FLAG_IDLE setting
Rafael J. Wysocki (2):
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
PCI: PM: Enable PME if it can be signaled from D3cold
Ruozhu Li (2):
nvme-tcp: don't update queue count when failing to set io queues
nvme-rdma: don't update queue count when failing to set io queues
Sean Anderson (1):
crypto: mxs-dcp - Check for DMA mapping errors
Sean Christopherson (2):
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Sergey Senozhatsky (1):
rcu/tree: Handle VM stoppage in stall detection
Sergey Shtylyov (15):
i2c: highlander: add IRQ check
usb: dwc3: meson-g12a: add IRQ check
usb: dwc3: qcom: add IRQ check
usb: gadget: udc: at91: add IRQ check
usb: gadget: udc: s3c2410: add IRQ check
usb: phy: fsl-usb: add IRQ check
usb: phy: twl6030: add IRQ checks
usb: host: ohci-tmio: add IRQ check
usb: phy: tahvo: add IRQ check
i2c: synquacer: fix deferred probing
i2c: iop3xx: fix deferred probing
i2c: s3c2410: fix IRQ check
i2c: hix5hd2: fix IRQ check
i2c: mt65xx: fix IRQ check
i2c: xlp9xx: fix main IRQ check
Shuyi Cheng (1):
libbpf: Fix the possible memory leak on error
Smita Koralahalli (1):
EDAC/mce_amd: Do not load edac_mce_amd module on guests
Stefan Assmann (1):
i40e: improve locking of mac_filter_hash
Stefan Berger (2):
certs: Trigger creation of RSA module signing key if it's not an RSA key
tpm: ibmvtpm: Avoid error message when process gets signal while waiting
Stefan Wahren (1):
net: qualcomm: fix QCA7000 checksum handling
Stephan Gerhold (1):
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Stephen Boyd (1):
ASoC: rt5682: Implement remove callback
Steven Price (1):
drm/of: free the iterator object on failure
Stian Skjelstad (1):
udf_get_extendedattr() had no boundary checks.
Subbaraya Sundeep (2):
octeontx2-af: Fix loop in free and unmap counter
octeontx2-af: Fix static code analyzer reported issues
Sudarsana Reddy Kalluru (1):
atlantic: Fix driver resume flow.
Sunil Goutham (1):
octeontx2-af: Set proper errorcode for IPv4 checksum errors
Sven Eckelmann (1):
debugfs: Return error during {full/open}_proxy_open() on rmmod
THOBY Simon (1):
IMA: remove the dependency on CRYPTO_MD5
Tedd Ho-Jeong An (1):
Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
Tetsuo Handa (1):
fbmem: don't allow too huge resolutions
Thomas Gleixner (3):
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
hrtimer: Ensure timerfd notification for HIGHRES=n
locking/local_lock: Add missing owner initialization
Tian Tao (1):
i2c: fix platform_get_irq.cocci warnings
Tony Lindgren (6):
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
mmc: sdhci: Fix issue with uninitialized dma_slave_config
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
mmc: moxart: Fix issue with uninitialized dma_slave_config
Valentin Schneider (1):
PM: cpu: Make notifier chain use a raw_spinlock_t
Vineeth Vijayan (1):
s390/cio: add dev_busid sysfs entry for each subchannel
Waiman Long (3):
cgroup/cpuset: Fix a partition bug with hotplug
cgroup/cpuset: Miscellaneous code cleanup
cgroup/cpuset: Fix violation of cpuset locking rule
Wei Yongjun (1):
drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init()
William Breathitt Gray (1):
counter: 104-quad-8: Return error when invalid mode during ceiling_write
Xiyu Yang (1):
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
Xu Yu (1):
mm/swap: consider max pages in iomap_swapfile_add_extent
Yanfei Xu (2):
rcu: Fix to include first blocked task in stall warning
rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
Yizhuo (1):
media: atomisp: fix the uninitialized use and rename "retvalue"
Zelin Deng (1):
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Zenghui Yu (1):
bcma: Fix memory leak for internally-handled cores
Zhang Qilong (1):
ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe
Zhen Lei (3):
genirq/timings: Fix error return code in irq_timings_test_irqs()
firmware: fix theoretical UAF race with firmware cache and resume
driver core: Fix error return code in really_probe()
^ permalink raw reply [relevance 2%]
* Linux 5.4.146
@ 2021-09-15 8:07 3% Greg Kroah-Hartman
0 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-15 8:07 UTC (permalink / raw)
To: linux-kernel, akpm, torvalds, stable; +Cc: lwn, jslaby, Greg Kroah-Hartman
I'm announcing the release of the 5.4.146 kernel.
All users of the 5.4 kernel series must upgrade.
The updated 5.4.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 2
arch/arm/boot/dts/aspeed-g6-pinctrl.dtsi | 4
arch/arm/boot/dts/meson8.dtsi | 5
arch/arm/boot/dts/meson8b-ec100.dts | 4
arch/arm/boot/dts/meson8b-mxq.dts | 4
arch/arm/boot/dts/meson8b-odroidc1.dts | 4
arch/arm/net/bpf_jit_32.c | 3
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2
arch/arm64/boot/dts/renesas/r8a77995-draak.dts | 4
arch/arm64/net/bpf_jit_comp.c | 13
arch/m68k/emu/nfeth.c | 4
arch/mips/net/ebpf_jit.c | 3
arch/powerpc/net/bpf_jit_comp64.c | 6
arch/riscv/net/bpf_jit_comp.c | 4
arch/s390/include/asm/kvm_host.h | 1
arch/s390/kernel/debug.c | 102 +++----
arch/s390/kvm/interrupt.c | 12
arch/s390/kvm/kvm-s390.c | 2
arch/s390/kvm/kvm-s390.h | 2
arch/s390/mm/kasan_init.c | 41 +-
arch/s390/net/bpf_jit_comp.c | 5
arch/sparc/net/bpf_jit_comp_64.c | 3
arch/x86/events/amd/ibs.c | 1
arch/x86/kernel/cpu/resctrl/monitor.c | 6
arch/x86/kvm/vmx/nested.c | 7
arch/x86/kvm/x86.c | 4
arch/x86/net/bpf_jit_comp.c | 7
arch/x86/net/bpf_jit_comp32.c | 6
certs/Makefile | 8
drivers/ata/libata-core.c | 2
drivers/base/regmap/regmap.c | 2
drivers/bcma/main.c | 6
drivers/block/nbd.c | 10
drivers/clk/mvebu/kirkwood.c | 1
drivers/clocksource/sh_cmt.c | 30 +-
drivers/counter/104-quad-8.c | 5
drivers/crypto/mxs-dcp.c | 45 ++-
drivers/crypto/omap-sham.c | 2
drivers/crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4
drivers/crypto/qat/qat_common/adf_common_drv.h | 8
drivers/crypto/qat/qat_common/adf_init.c | 5
drivers/crypto/qat/qat_common/adf_isr.c | 7
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7
drivers/crypto/qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4
drivers/edac/i10nm_base.c | 6
drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 54 +--
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 10
drivers/gpu/drm/msm/dsi/dsi.c | 6
drivers/gpu/drm/panfrost/panfrost_device.c | 3
drivers/i2c/busses/i2c-highlander.c | 2
drivers/i2c/busses/i2c-iop3xx.c | 6
drivers/i2c/busses/i2c-mt65xx.c | 2
drivers/i2c/busses/i2c-s3c2410.c | 2
drivers/leds/leds-lt3593.c | 5
drivers/leds/trigger/ledtrig-audio.c | 37 ++
drivers/md/bcache/super.c | 16 -
drivers/media/i2c/tda1997x.c | 1
drivers/media/platform/coda/coda-bit.c | 18 -
drivers/media/platform/qcom/venus/venc.c | 2
drivers/media/spi/cxd2880-spi.c | 7
drivers/media/usb/dvb-usb/dvb-usb-i2c.c | 9
drivers/media/usb/dvb-usb/dvb-usb-init.c | 2
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6
drivers/media/usb/dvb-usb/vp702x.c | 12
drivers/media/usb/em28xx/em28xx-input.c | 1
drivers/media/usb/go7007/go7007-driver.c | 26 -
drivers/mmc/host/dw_mmc.c | 1
drivers/mmc/host/moxart-mmc.c | 1
drivers/net/ethernet/marvell/octeontx2/af/rvu_npc.c | 3
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 6
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 10
drivers/net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 18 -
drivers/net/ethernet/qualcomm/qca_spi.c | 2
drivers/net/ethernet/qualcomm/qca_uart.c | 2
drivers/net/wireless/ath/ath6kl/wmi.c | 4
drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c | 2
drivers/net/wireless/rsi/rsi_91x_hal.c | 4
drivers/net/wireless/rsi/rsi_91x_usb.c | 1
drivers/nvme/host/rdma.c | 4
drivers/nvme/host/tcp.c | 4
drivers/nvme/target/fabrics-cmd.c | 9
drivers/pci/pci.c | 25 +
drivers/power/supply/axp288_fuel_gauge.c | 4
drivers/power/supply/max17042_battery.c | 2
drivers/regulator/vctrl-regulator.c | 73 +++--
drivers/s390/cio/css.c | 17 +
drivers/soc/qcom/rpmhpd.c | 5
drivers/soc/qcom/smsm.c | 11
drivers/soc/rockchip/Kconfig | 4
drivers/spi/spi-fsl-dspi.c | 1
drivers/spi/spi-pic32.c | 1
drivers/spi/spi-sprd-adi.c | 2
drivers/spi/spi-zynq-qspi.c | 8
drivers/tty/serial/fsl_lpuart.c | 2
drivers/tty/tty_io.c | 4
drivers/usb/gadget/udc/at91_udc.c | 4
drivers/usb/gadget/udc/bdc/bdc_core.c | 3
drivers/usb/gadget/udc/mv_u3d_core.c | 19 -
drivers/usb/gadget/udc/renesas_usb3.c | 17 -
drivers/usb/host/ehci-orion.c | 8
drivers/usb/host/ohci-tmio.c | 3
drivers/usb/phy/phy-fsl-usb.c | 2
drivers/usb/phy/phy-tahvo.c | 4
drivers/usb/phy/phy-twl6030-usb.c | 5
drivers/video/backlight/pwm_bl.c | 54 +--
drivers/video/fbdev/core/fbmem.c | 6
fs/cifs/cifs_unicode.c | 9
fs/debugfs/file.c | 8
fs/fcntl.c | 5
fs/fuse/file.c | 9
fs/iomap/swapfile.c | 6
fs/isofs/inode.c | 27 -
fs/isofs/isofs.h | 1
fs/isofs/joliet.c | 4
fs/lockd/svclock.c | 2
fs/nfsd/nfs4state.c | 4
fs/udf/misc.c | 13
fs/udf/super.c | 75 ++---
fs/udf/udf_sb.h | 2
fs/udf/unicode.c | 4
include/linux/bpf_verifier.h | 11
include/linux/energy_model.h | 16 +
include/linux/filter.h | 15 +
include/linux/hrtimer.h | 5
include/linux/power/max17042_battery.h | 2
include/linux/time64.h | 9
include/uapi/linux/bpf.h | 2
kernel/bpf/core.c | 18 +
kernel/bpf/disasm.c | 16 -
kernel/bpf/verifier.c | 183 +++++--------
kernel/cgroup/cpuset.c | 7
kernel/irq/timings.c | 2
kernel/locking/mutex.c | 15 -
kernel/power/energy_model.c | 4
kernel/rcu/tree_stall.h | 18 +
kernel/sched/core.c | 25 +
kernel/sched/deadline.c | 8
kernel/sched/sched.h | 2
kernel/time/hrtimer.c | 92 ++++--
kernel/time/posix-cpu-timers.c | 2
kernel/time/tick-internal.h | 3
lib/mpi/mpiutil.c | 2
net/6lowpan/debugfs.c | 3
net/bluetooth/cmtp/cmtp.h | 2
net/bluetooth/hci_core.c | 14
net/bluetooth/sco.c | 11
net/core/net_namespace.c | 28 -
net/ipv4/route.c | 48 ++-
net/ipv4/tcp_ipv4.c | 5
net/ipv6/route.c | 5
net/mac80211/tx.c | 4
net/netlabel/netlabel_cipso_v4.c | 8
net/sched/sch_cbq.c | 2
security/integrity/ima/Kconfig | 1
security/integrity/ima/ima_mok.c | 2
sound/soc/codecs/wcd9335.c | 23 +
sound/soc/intel/skylake/skl-topology.c | 25 -
tools/include/uapi/linux/bpf.h | 2
161 files changed, 1104 insertions(+), 719 deletions(-)
Ahmad Fatoum (1):
brcmfmac: pcie: fix oops on failure to resume and reprobe
Alexander Gordeev (1):
s390/kasan: fix large PMD pages address alignment check
Amit Engel (1):
nvmet: pass back cntlid on successful completion
Anand Moon (3):
ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
Andrey Ignatov (1):
bpf: Fix possible out of bound write in narrow load handling
Andy Duan (1):
tty: serial: fsl_lpuart: fix the wrong mapbase value
Andy Shevchenko (1):
leds: lt3593: Put fwnode in any case during ->probe()
Austin Kim (1):
IMA: remove -Wmissing-prototypes warning
Babu Moger (1):
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
Benjamin Coddington (1):
lockd: Fix invalid lockowner cast after vfs_test_lock
Bjorn Andersson (1):
soc: qcom: rpmhpd: Use corner in power_off
Cezary Rojewski (2):
ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
ASoC: Intel: Skylake: Fix module resource and format selection
Chen-Yu Tsai (2):
regulator: vctrl: Use locked regulator_get_voltage in probe path
regulator: vctrl: Avoid lockdep warning in enable/disable ops
Chih-Kang Chang (1):
mac80211: Fix insufficient headroom issue for AMSDU
Christoph Hellwig (1):
bcache: add proper error unwinding in bcache_device_init
Christophe JAILLET (6):
media: cxd2880-spi: Fix an error handling path
drm/msm/dsi: Fix some reference counted resource leaks
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
ASoC: wcd9335: Fix a double irq free in the remove function
ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function
ASoC: wcd9335: Disable irq on slave ports in the remove function
Chunyan Zhang (1):
spi: sprd: Fix the wrong WDG_LOAD_VAL
Colin Ian King (3):
6lowpan: iphc: Fix an off-by-one check of array index
media: venus: venc: Fix potential null pointer dereference on pointer fmt
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Damien Le Moal (1):
libata: fix ata_host_start()
Dan Carpenter (4):
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
rsi: fix error code in rsi_load_9116_firmware()
rsi: fix an error code in rsi_probe()
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
Daniel Borkmann (3):
bpf: Introduce BPF nospec instruction for mitigating Spectre v4
bpf: Fix leakage due to insufficient speculative store bypass mitigation
bpf: Fix pointer arithmetic mask tightening under state pruning
Daniel Thompson (1):
backlight: pwm_bl: Improve bootloader/kernel device handover
Desmond Cheong Zhi Xi (2):
fcntl: fix potential deadlock for &fasync_struct.fa_lock
Bluetooth: fix repeated calls to sco_sock_kill
Dietmar Eggemann (1):
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
Dmitry Baryshkov (1):
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
Dongliang Mu (4):
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
media: dvb-usb: Fix error handling in dvb_usb_i2c_init
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Dylan Hung (1):
ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
Eric Dumazet (3):
ipv6: make exception cache less predictible
ipv4: make exception cache less predictible
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
Evgeny Novikov (1):
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Frederic Weisbecker (1):
posix-cpu-timers: Force next expiration recalc after itimer reset
Geert Uytterhoeven (3):
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
Giovanni Cabiddu (4):
crypto: qat - do not ignore errors from enable_vf2pf_comms()
crypto: qat - handle both source of interrupt in VF ISR
crypto: qat - do not export adf_iov_putmsg()
crypto: qat - use proper type for vf_mask
Greg Kroah-Hartman (1):
Linux 5.4.146
Guillaume Nault (1):
netns: protect netns ID lookups with RCU
Halil Pasic (1):
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
Hans de Goede (2):
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
He Fengqing (1):
bpf: Fix potential memleak and UAF in the verifier.
Hongbo Li (1):
lib/mpi: use kcalloc in mpi_resize
J. Bruce Fields (1):
nfsd4: Fix forced-expiry locking
Jan Kara (1):
udf: Check LVID earlier
Jeongtae Park (1):
regmap: fix the offset of register error log
Kai-Heng Feng (2):
drm/amdgpu/acp: Make PM domain really work
Bluetooth: Move shutdown callback before flushing tx and rx queue
Kim Phillips (1):
perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
Krzysztof Hałasa (1):
media: TDA1997x: enable EDID support
Krzysztof Kozlowski (1):
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Kuniyuki Iwashima (1):
bpf: Fix a typo of reuseport map in bpf.h.
Len Baker (1):
CIFS: Fix a potencially linear read overflow
Linus Walleij (1):
clk: kirkwood: Fix a clocking boot regression
Lorenz Bauer (1):
bpf: verifier: Allocate idmap scratch in verifier env
Lukas Hannen (1):
time: Handle negative seconds correctly in timespec64_to_ns()
Lukasz Luba (1):
PM: EM: Increase energy calculation precision
Marco Chiappero (2):
crypto: qat - fix reuse of completion variable
crypto: qat - fix naming for init/shutdown VF to PF notifications
Martin Blumenstingl (1):
ARM: dts: meson8: Use a higher default GPU clock frequency
Martin KaFai Lau (1):
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Maxim Mikityanskiy (1):
net/mlx5e: Prohibit inner indir TIRs in IPoIB
Miklos Szeredi (2):
fuse: truncate pagecache on atomic_o_trunc
fuse: flush extending writes
Nadezda Lutovinova (1):
usb: gadget: mv_u3d: request_irq() after initializing UDC
Nguyen Dinh Phi (1):
tty: Fix data race between tiocsti() and flush_to_ldisc()
Pali Rohár (2):
udf: Fix iocharset=utf8 mount option
isofs: joliet: Fix iocharset=utf8 mount option
Pavel Skripkin (5):
m68k: emu: Fix invalid free in nfeth_cleanup()
block: nbd: add sanity check for first_minor
media: go7007: remove redundant initialization
net: cipso: fix warnings in netlbl_cipsov4_add_std
Bluetooth: add timeout sanity check to hci_inquiry
Peter Oberparleiter (1):
s390/debug: fix debug area life cycle
Peter Zijlstra (1):
locking/mutex: Fix HANDOFF condition
Philipp Zabel (1):
media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
Phong Hoang (1):
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Qiuxu Zhuo (1):
EDAC/i10nm: Fix NVDIMM detection
Quanyang Wang (1):
spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible
Quentin Perret (2):
sched/deadline: Fix reset_on_fork reporting of DL tasks
sched: Fix UCLAMP_FLAG_IDLE setting
Rafael J. Wysocki (2):
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
PCI: PM: Enable PME if it can be signaled from D3cold
Ruozhu Li (2):
nvme-tcp: don't update queue count when failing to set io queues
nvme-rdma: don't update queue count when failing to set io queues
Sean Anderson (1):
crypto: mxs-dcp - Check for DMA mapping errors
Sean Christopherson (1):
KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Sergey Senozhatsky (1):
rcu/tree: Handle VM stoppage in stall detection
Sergey Shtylyov (9):
i2c: highlander: add IRQ check
usb: gadget: udc: at91: add IRQ check
usb: phy: fsl-usb: add IRQ check
usb: phy: twl6030: add IRQ checks
usb: host: ohci-tmio: add IRQ check
usb: phy: tahvo: add IRQ check
i2c: iop3xx: fix deferred probing
i2c: s3c2410: fix IRQ check
i2c: mt65xx: fix IRQ check
Stefan Berger (1):
certs: Trigger creation of RSA module signing key if it's not an RSA key
Stefan Wahren (1):
net: qualcomm: fix QCA7000 checksum handling
Stephan Gerhold (1):
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Stian Skjelstad (1):
udf_get_extendedattr() had no boundary checks.
Subbaraya Sundeep (1):
octeontx2-af: Fix loop in free and unmap counter
Sven Eckelmann (1):
debugfs: Return error during {full/open}_proxy_open() on rmmod
THOBY Simon (1):
IMA: remove the dependency on CRYPTO_MD5
Tetsuo Handa (1):
fbmem: don't allow too huge resolutions
Thomas Gleixner (2):
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
hrtimer: Ensure timerfd notification for HIGHRES=n
Tony Lindgren (5):
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
mmc: moxart: Fix issue with uninitialized dma_slave_config
Vineeth Vijayan (1):
s390/cio: add dev_busid sysfs entry for each subchannel
Waiman Long (1):
cgroup/cpuset: Fix a partition bug with hotplug
Wei Yongjun (1):
drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init()
William Breathitt Gray (1):
counter: 104-quad-8: Return error when invalid mode during ceiling_write
Xiyu Yang (1):
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
Xu Yu (1):
mm/swap: consider max pages in iomap_swapfile_add_extent
Zelin Deng (1):
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Zenghui Yu (1):
bcma: Fix memory leak for internally-handled cores
Zhen Lei (1):
genirq/timings: Fix error return code in irq_timings_test_irqs()
^ permalink raw reply [relevance 3%]
* [PATCH 5.14 193/334] Bluetooth: fix repeated calls to sco_sock_kill
2021-09-13 13:10 4% [PATCH 5.14 000/334] 5.14.4-rc1 review Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.14 038/334] fcntl: fix potential deadlocks for &fown_struct.lock Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.14 039/334] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
@ 2021-09-13 13:14 11% ` Greg Kroah-Hartman
2 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:14 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit e1dee2c1de2b4dd00eb44004a4bda6326ed07b59 ]
In commit 4e1a720d0312 ("Bluetooth: avoid killing an already killed
socket"), a check was added to sco_sock_kill to skip killing a socket
if the SOCK_DEAD flag was set.
This was done after a trace for a use-after-free bug showed that the
same sock pointer was being killed twice.
Unfortunately, this check prevents sco_sock_kill from running on any
socket. sco_sock_kill kills a socket only if it's zapped and orphaned,
however sock_orphan announces that the socket is dead before detaching
it. i.e., orphaned sockets have the SOCK_DEAD flag set.
To fix this, we remove the check for SOCK_DEAD, and avoid repeated
calls to sco_sock_kill by removing incorrect calls in:
1. sco_sock_timeout. The socket should not be killed on timeout as
further processing is expected to be done. For example,
sco_sock_connect sets the timer then waits for the socket to be
connected or for an error to be returned.
2. sco_conn_del. This function should clean up resources for the
connection, but the socket itself should be cleaned up in
sco_sock_release.
3. sco_sock_close. Calls to sco_sock_close in sco_sock_cleanup_listen
and sco_sock_release are followed by sco_sock_kill. Hence the
duplicated call should be removed.
Fixes: 4e1a720d0312 ("Bluetooth: avoid killing an already killed socket")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 6 +-----
1 file changed, 1 insertion(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index ffa2a77a3e4c..b5ab842c7c4a 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -85,7 +85,6 @@ static void sco_sock_timeout(struct timer_list *t)
sk->sk_state_change(sk);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -177,7 +176,6 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_sock_clear_timer(sk);
sco_chan_del(sk, err);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -394,8 +392,7 @@ static void sco_sock_cleanup_listen(struct sock *parent)
*/
static void sco_sock_kill(struct sock *sk)
{
- if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket ||
- sock_flag(sk, SOCK_DEAD))
+ if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
return;
BT_DBG("sk %p state %d", sk, sk->sk_state);
@@ -447,7 +444,6 @@ static void sco_sock_close(struct sock *sk)
lock_sock(sk);
__sco_sock_close(sk);
release_sock(sk);
- sco_sock_kill(sk);
}
static void sco_skb_put_cmsg(struct sk_buff *skb, struct msghdr *msg,
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.14 039/334] fcntl: fix potential deadlock for &fasync_struct.fa_lock
2021-09-13 13:10 4% [PATCH 5.14 000/334] 5.14.4-rc1 review Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.14 038/334] fcntl: fix potential deadlocks for &fown_struct.lock Greg Kroah-Hartman
@ 2021-09-13 13:11 11% ` Greg Kroah-Hartman
2021-09-13 13:14 11% ` [PATCH 5.14 193/334] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:11 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Jeff Layton,
Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2f488f698fda820f8e6fa0407630154eceb145d6 ]
There is an existing lock hierarchy of
&dev->event_lock --> &fasync_struct.fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
&dev->event_lock is HARDIRQ-safe, so interrupts have to be disabled
while grabbing &fasync_struct.fa_lock, otherwise we invert the lock
hierarchy. However, since kill_fasync which calls kill_fasync_rcu is
an exported symbol, it may not necessarily be called with interrupts
disabled.
As kill_fasync_rcu may be called with interrupts disabled (for
example, in the call chain above), we replace calls to
read_lock/read_unlock on &fasync_struct.fa_lock in kill_fasync_rcu
with read_lock_irqsave/read_unlock_irqrestore.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index 932ec1e9f5bf..68added37c15 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -1004,13 +1004,14 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
{
while (fa) {
struct fown_struct *fown;
+ unsigned long flags;
if (fa->magic != FASYNC_MAGIC) {
printk(KERN_ERR "kill_fasync: bad magic number in "
"fasync_struct!\n");
return;
}
- read_lock(&fa->fa_lock);
+ read_lock_irqsave(&fa->fa_lock, flags);
if (fa->fa_file) {
fown = &fa->fa_file->f_owner;
/* Don't send SIGURG to processes which have not set a
@@ -1019,7 +1020,7 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
if (!(sig == SIGURG && fown->signum == 0))
send_sigio(fown, fa->fa_fd, band);
}
- read_unlock(&fa->fa_lock);
+ read_unlock_irqrestore(&fa->fa_lock, flags);
fa = rcu_dereference(fa->fa_next);
}
}
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.14 038/334] fcntl: fix potential deadlocks for &fown_struct.lock
2021-09-13 13:10 4% [PATCH 5.14 000/334] 5.14.4-rc1 review Greg Kroah-Hartman
@ 2021-09-13 13:11 11% ` Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.14 039/334] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
2021-09-13 13:14 11% ` [PATCH 5.14 193/334] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:11 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Jeff Layton,
Sasha Levin, syzbot+e6d5398a02c516ce5e70
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit f671a691e299f58835d4660d642582bf0e8f6fda ]
Syzbot reports a potential deadlock in do_fcntl:
========================================================
WARNING: possible irq lock inversion dependency detected
5.12.0-syzkaller #0 Not tainted
--------------------------------------------------------
syz-executor132/8391 just changed the state of lock:
ffff888015967bf8 (&f->f_owner.lock){.+..}-{2:2}, at: f_getown_ex fs/fcntl.c:211 [inline]
ffff888015967bf8 (&f->f_owner.lock){.+..}-{2:2}, at: do_fcntl+0x8b4/0x1200 fs/fcntl.c:395
but this lock was taken by another, HARDIRQ-safe lock in the past:
(&dev->event_lock){-...}-{2:2}
and interrupts could create inverse lock ordering between them.
other info that might help us debug this:
Chain exists of:
&dev->event_lock --> &new->fa_lock --> &f->f_owner.lock
Possible interrupt unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&f->f_owner.lock);
local_irq_disable();
lock(&dev->event_lock);
lock(&new->fa_lock);
<Interrupt>
lock(&dev->event_lock);
*** DEADLOCK ***
This happens because there is a lock hierarchy of
&dev->event_lock --> &new->fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
However, since &dev->event_lock is HARDIRQ-safe, interrupts have to be
disabled while grabbing &f->f_owner.lock, otherwise we invert the lock
hierarchy.
Hence, we replace calls to read_lock/read_unlock on &f->f_owner.lock,
with read_lock_irq/read_unlock_irq.
Reported-and-tested-by: syzbot+e6d5398a02c516ce5e70@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 13 +++++++------
1 file changed, 7 insertions(+), 6 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index f946bec8f1f1..932ec1e9f5bf 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -150,7 +150,8 @@ void f_delown(struct file *filp)
pid_t f_getown(struct file *filp)
{
pid_t pid = 0;
- read_lock(&filp->f_owner.lock);
+
+ read_lock_irq(&filp->f_owner.lock);
rcu_read_lock();
if (pid_task(filp->f_owner.pid, filp->f_owner.pid_type)) {
pid = pid_vnr(filp->f_owner.pid);
@@ -158,7 +159,7 @@ pid_t f_getown(struct file *filp)
pid = -pid;
}
rcu_read_unlock();
- read_unlock(&filp->f_owner.lock);
+ read_unlock_irq(&filp->f_owner.lock);
return pid;
}
@@ -208,7 +209,7 @@ static int f_getown_ex(struct file *filp, unsigned long arg)
struct f_owner_ex owner = {};
int ret = 0;
- read_lock(&filp->f_owner.lock);
+ read_lock_irq(&filp->f_owner.lock);
rcu_read_lock();
if (pid_task(filp->f_owner.pid, filp->f_owner.pid_type))
owner.pid = pid_vnr(filp->f_owner.pid);
@@ -231,7 +232,7 @@ static int f_getown_ex(struct file *filp, unsigned long arg)
ret = -EINVAL;
break;
}
- read_unlock(&filp->f_owner.lock);
+ read_unlock_irq(&filp->f_owner.lock);
if (!ret) {
ret = copy_to_user(owner_p, &owner, sizeof(owner));
@@ -249,10 +250,10 @@ static int f_getowner_uids(struct file *filp, unsigned long arg)
uid_t src[2];
int err;
- read_lock(&filp->f_owner.lock);
+ read_lock_irq(&filp->f_owner.lock);
src[0] = from_kuid(user_ns, filp->f_owner.uid);
src[1] = from_kuid(user_ns, filp->f_owner.euid);
- read_unlock(&filp->f_owner.lock);
+ read_unlock_irq(&filp->f_owner.lock);
err = put_user(src[0], &dst[0]);
err |= put_user(src[1], &dst[1]);
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.14 000/334] 5.14.4-rc1 review
@ 2021-09-13 13:10 4% Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.14 038/334] fcntl: fix potential deadlocks for &fown_struct.lock Greg Kroah-Hartman
` (2 more replies)
0 siblings, 3 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:10 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.14.4 release.
There are 334 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 15 Sep 2021 13:10:21 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.14.4-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.14.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.14.4-rc1
Linus Walleij <linus.walleij@linaro.org>
clk: kirkwood: Fix a clocking boot regression
Helge Deller <deller@gmx.de>
parisc: Fix unaligned-access crash in bootloader
Daniel Thompson <daniel.thompson@linaro.org>
backlight: pwm_bl: Improve bootloader/kernel device handover
Julio Faracco <jcfaracco@gmail.com>
bootconfig: Fix missing return check of xbc_node_compose_key function
Niklas Schnelle <schnelle@linux.ibm.com>
RDMA/mlx5: Fix number of allocated XLT entries
Aubrey Li <aubrey.li@intel.com>
ACPI: PRM: Find PRMT table before parsing it
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
fbmem: don't allow too huge resolutions
THOBY Simon <Simon.THOBY@viveris.fr>
IMA: remove the dependency on CRYPTO_MD5
Austin Kim <austin.kim@lge.com>
IMA: remove -Wmissing-prototypes warning
Miklos Szeredi <mszeredi@redhat.com>
fuse: wait for writepages in syncfs
Miklos Szeredi <mszeredi@redhat.com>
fuse: flush extending writes
Miklos Szeredi <mszeredi@redhat.com>
fuse: truncate pagecache on atomic_o_trunc
Adrian Ratiu <adrian.ratiu@collabora.com>
char: tpm: Kconfig: remove bad i2c cr50 select
Xiao Ni <xni@redhat.com>
md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard
Jens Axboe <axboe@kernel.dk>
io-wq: check max_worker limits if a worker transitions bound state
Claudiu Beznea <claudiu.beznea@microchip.com>
ARM: dts: at91: add pinctrl-{names, 0} for all gpios
Marc Zyngier <maz@kernel.org>
KVM: arm64: vgic: Resample HW pending state on deactivation
Marc Zyngier <maz@kernel.org>
KVM: arm64: Unregister HYP sections from kmemleak in protected mode
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
Maxim Levitsky <mlevitsk@redhat.com>
KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
Sean Christopherson <seanjc@google.com>
KVM: x86/mmu: Avoid collision with !PRESENT SPTEs in TDP MMU lpage stats
Paolo Bonzini <pbonzini@redhat.com>
KVM: x86: clamp host mapping level to max_level in kvm_mmu_max_mapping_level
Zelin Deng <zelin.deng@linux.alibaba.com>
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Halil Pasic <pasic@linux.ibm.com>
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
Sean Christopherson <seanjc@google.com>
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
Alexander Antonov <alexander.antonov@linux.intel.com>
perf/x86/intel/uncore: Fix IIO cleanup mapping procedure for SNR/ICX
Nguyen Dinh Phi <phind.uet@gmail.com>
tty: Fix data race between tiocsti() and flush_to_ldisc()
Steve French <stfrench@microsoft.com>
smb3: fix posix extensions mount option
Ronnie Sahlberg <lsahlber@redhat.com>
cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED
Guoqing Jiang <jiangguoqing@kylinos.cn>
raid1: ensure write behind bio has less than BIO_MAX_VECS sectors
Pavel Begunkov <asml.silence@gmail.com>
bio: fix page leak bio_add_hw_page failure
Pavel Begunkov <asml.silence@gmail.com>
io_uring: fail links of cancelled timeouts
Jens Axboe <axboe@kernel.dk>
io_uring: io_uring_complete() trace should take an integer
Jens Axboe <axboe@kernel.dk>
io_uring: IORING_OP_WRITE needs hash_reg_file set
Pavel Begunkov <asml.silence@gmail.com>
io_uring: limit fixed table size by RLIMIT_NOFILE
Lars Poeschel <poeschel@lemonage.de>
auxdisplay: hd44780: Fix oops on module unloading
Lukas Hannen <lukas.hannen@opensource.tttech-industrial.com>
time: Handle negative seconds correctly in timespec64_to_ns()
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: guarantee to write dirty data when enabling checkpoint back
Justin M. Forbes <jforbes@fedoraproject.org>
iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
Douglas Anderson <dianders@chromium.org>
ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
Eric Dumazet <edumazet@google.com>
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
Sunil Goutham <sgoutham@marvell.com>
octeontx2-af: Set proper errorcode for IPv4 checksum errors
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-af: Fix static code analyzer reported issues
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-af: Fix mailbox errors in nix_rss_flowkey_cfg
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-af: Fix loop in free and unmap counter
Stefan Wahren <stefan.wahren@i2se.com>
net: qualcomm: fix QCA7000 checksum handling
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
Maxim Mikityanskiy <maximmi@nvidia.com>
sch_htb: Fix inconsistency when leaf qdisc creation fails
Dan Carpenter <dan.carpenter@oracle.com>
net: qrtr: make checks in qrtr_endpoint_post() stricter
Eric Dumazet <edumazet@google.com>
ipv4: make exception cache less predictible
Eric Dumazet <edumazet@google.com>
ipv6: make exception cache less predictible
Ahmad Fatoum <a.fatoum@pengutronix.de>
brcmfmac: pcie: fix oops on failure to resume and reprobe
Zenghui Yu <yuzenghui@huawei.com>
bcma: Fix memory leak for internally-handled cores
Sudarsana Reddy Kalluru <skalluru@marvell.com>
atlantic: Fix driver resume flow.
Takashi Iwai <tiwai@suse.de>
ALSA: usb-audio: Add lowlatency module option
Dan Carpenter <dan.carpenter@oracle.com>
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
Vladimir Oltean <vladimir.oltean@nxp.com>
net: phy: marvell10g: fix broken PHY interrupts for anyone after us in the driver probe list
Brett Creeley <brett.creeley@intel.com>
ice: Only lock to update netdev dev_addr
Jacob Keller <jacob.e.keller@intel.com>
ice: restart periodic outputs around time changes
Jacob Keller <jacob.e.keller@intel.com>
ice: add lock around Tx timestamp tracker flush
Jacob Keller <jacob.e.keller@intel.com>
ice: fix Tx queue iteration for Tx timestamp enablement
Mihai Carabas <mihai.carabas@oracle.com>
misc/pvpanic: fix set driver data
Dmytro Linkin <dlinkin@nvidia.com>
net/mlx5e: Use correct eswitch for stack devices with lag
Maor Dickman <maord@nvidia.com>
net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group
Roi Dayan <roid@nvidia.com>
net/mlx5e: Fix possible use-after-free deleting fdb rule
Leon Romanovsky <leon@kernel.org>
net/mlx5: Remove all auxiliary devices at the unregister event
Dima Chumak <dchumak@nvidia.com>
net/mlx5: Lag, fix multipath lag activation
Abhishek Naik <abhishek.naik@intel.com>
iwlwifi: skip first element in the WTAS ACPI table
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: wcd9335: Disable irq on slave ports in the remove function
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: wcd9335: Fix a double irq free in the remove function
Andy Duan <fugang.duan@nxp.com>
tty: serial: fsl_lpuart: fix the wrong mapbase value
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
usb: bdc: Fix a resource leak in the error handling path of 'bdc_probe()'
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
Evgeny Novikov <novikov@ispras.ru>
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Yang Yingliang <yangyingliang@huawei.com>
octeontx2-pf: cn10k: Fix error return code in otx2_set_flowkey_cfg()
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: xlp9xx: fix main IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: mt65xx: fix IRQ check
Len Baker <len.baker@gmx.com>
CIFS: Fix a potencially linear read overflow
Vitaly Kuznetsov <vkuznets@redhat.com>
hv_utils: Set the maximum packet size for VSS driver to the length of the receive buffer
Andrey Ignatov <rdna@fb.com>
bpf: Fix possible out of bound write in narrow load handling
Charles Keepax <ckeepax@opensource.cirrus.com>
ASoC: wm_adsp: Put debugfs_remove_recursive back in
Tony Lindgren <tony@atomide.com>
mmc: moxart: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
mmc: sdhci: Fix issue with uninitialized dma_slave_config
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: Skylake: Fix module resource and format selection
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373
Dan Carpenter <dan.carpenter@oracle.com>
m68k: coldfire: return success for clk_enable(NULL)
Geetha sowjanya <gakula@marvell.com>
octeontx2-af: cn10k: Use FLIT0 register instead of FLIT1
Sunil Goutham <sgoutham@marvell.com>
octeontx2-pf: Fix algorithm index in MCAM rules with RSS action
Sunil Goutham <sgoutham@marvell.com>
octeontx2-pf: Don't install VLAN offload rule if netdev is down
Geetha sowjanya <gakula@marvell.com>
octeontx2-af: Check capability flag while freeing ipolicer memory
Naveen Mamindlapalli <naveenm@marvell.com>
octeontx2-pf: send correct vlan priority mask to npc_install_flow_req
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-af: cn10k: Fix SDP base channel number
Dan Carpenter <dan.carpenter@oracle.com>
rsi: fix an error code in rsi_probe()
Dan Carpenter <dan.carpenter@oracle.com>
rsi: fix error code in rsi_load_9116_firmware()
Wei Yongjun <weiyongjun1@huawei.com>
drm/exynos: g2d: fix missing unlock on error in g2d_runqueue_worker()
Bob Peterson <rpeterso@redhat.com>
gfs2: init system threads before freeze lock
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: hix5hd2: fix IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: s3c2410: fix IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: iop3xx: fix deferred probing
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: add timeout sanity check to hci_inquiry
Kevin Mitchell <kevmitch@arista.com>
lkdtm: replace SCSI_DISPATCH_CMD with SCSI_QUEUE_RQ
Xu Yu <xuyu@linux.alibaba.com>
mm/swap: consider max pages in iomap_swapfile_add_extent
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: gadget: mv_u3d: request_irq() after initializing UDC
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
Shengjiu Wang <shengjiu.wang@nxp.com>
ASoC: fsl_rpmsg: Check -EPROBE_DEFER for getting clocks
Lukas Bulwahn <lukas.bulwahn@gmail.com>
hwmon: remove amd_energy driver in Makefile
Chris Packham <chris.packham@alliedtelesis.co.nz>
hwmon: (pmbus/bpa-rs600) Don't use rated limits as warn limits
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: synquacer: fix deferred probing
Lukas Bulwahn <lukas.bulwahn@gmail.com>
clk: staging: correct reference to config IOMEM to config HAS_IOMEM
Pali Rohár <pali@kernel.org>
arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
J. Bruce Fields <bfields@redhat.com>
nfsd4: Fix forced-expiry locking
Chuck Lever <chuck.lever@oracle.com>
SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency()
Benjamin Coddington <bcodding@redhat.com>
lockd: Fix invalid lockowner cast after vfs_test_lock
Thomas Gleixner <tglx@linutronix.de>
locking/local_lock: Add missing owner initialization
Chih-Kang Chang <gary.chang@realtek.com>
mac80211: Fix insufficient headroom issue for AMSDU
Andrii Nakryiko <andrii@kernel.org>
libbpf: Re-build libbpf.so when libbpf.map changes
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: tahvo: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: host: ohci-tmio: add IRQ check
Valentin Schneider <valentin.schneider@arm.com>
PM: cpu: Make notifier chain use a raw_spinlock_t
Kai-Heng Feng <kai.heng.feng@canonical.com>
Bluetooth: Move shutdown callback before flushing tx and rx queue
Voon Weifeng <weifeng.voon@intel.com>
net: stmmac: fix INTR TBU status affecting irq count statistic
Juhee Kang <claudiajkang@gmail.com>
samples: pktgen: add missing IPv6 option to pktgen scripts
Leon Romanovsky <leon@kernel.org>
devlink: Clear whole devlink_flash_notify struct
Ilya Leoshkevich <iii@linux.ibm.com>
selftests/bpf: Fix test_core_autosize on big-endian machines
Geert Uytterhoeven <geert+renesas@glider.be>
usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: twl6030: add IRQ checks
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: fsl-usb: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: misc: brcmstb-usb-pinmap: add IRQ check
Dan Carpenter <dan.carpenter@oracle.com>
mac80211: remove unnecessary NULL check in ieee80211_register_hw()
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: gadget: udc: s3c2410: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: gadget: udc: at91: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: dwc3: qcom: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: dwc3: meson-g12a: add IRQ check
Rob Clark <robdclark@chromium.org>
drm/bridge: ti-sn65dsi86: Avoid creating multiple connectors
Douglas Anderson <dianders@chromium.org>
ASoC: rt5682: Properly turn off regulators if wrong device ID
Parav Pandit <parav@nvidia.com>
net/mlx5: Fix unpublish devlink parameters
Kuogee Hsieh <khsieh@codeaurora.org>
drm/msm/dp: replug event is converted into an unplug followed by an plug events
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
drm/msm/dsi: Fix some reference counted resource leaks
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix repeated calls to sco_sock_kill
Curtis Malainey <cujomalainey@chromium.org>
ASoC: Intel: Fix platform ID matching
Waiman Long <longman@redhat.com>
cgroup/cpuset: Fix violation of cpuset locking rule
Waiman Long <longman@redhat.com>
cgroup/cpuset: Miscellaneous code cleanup
William Breathitt Gray <vilhelm.gray@gmail.com>
counter: 104-quad-8: Return error when invalid mode during ceiling_write
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
Kuogee Hsieh <khsieh@codeaurora.org>
drm/msm/dp: update is_connected status base on sink count at dp_pm_resume()
David Heidelberg <david@ixit.cz>
drm/msm/mdp4: move HW revision detection to earlier phase
David Heidelberg <david@ixit.cz>
drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision
Wei Li <liwei391@huawei.com>
drm/msm: Fix error return code in msm_drm_init()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
leds: lgm-sso: Propagate error codes from callee to caller
Jose Blanquicet <josebl@microsoft.com>
selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP
Lukasz Luba <lukasz.luba@arm.com>
PM: EM: Increase energy calculation precision
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: don't disable multicast flooding to the CPU even without an IGMP querier
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: mt7530: remove the .port_set_mrouter implementation
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: stop syncing the bridge mcast_router attribute at join time
Vignesh Raghavendra <vigneshr@ti.com>
net: ti: am65-cpsw-nuss: fix RX IRQ state after .ndo_stop()
Robert Foss <robert.foss@linaro.org>
drm: bridge: it66121: Check drm_bridge_attach retval
Alex Elder <elder@linaro.org>
arm64: dts: qcom: sm8350: fix IPA interconnects
Sibi Sankar <sibis@codeaurora.org>
arm64: dts: qcom: sc7280: Fixup the cpufreq node
Colin Ian King <colin.king@canonical.com>
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Sven Eckelmann <sven@narfation.org>
debugfs: Return error during {full/open}_proxy_open() on rmmod
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: tag_sja1105: optionally build as module when switch driver is module if PTP is enabled
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: build tag_8021q.c as part of DSA core
Stephan Gerhold <stephan@gerhold.net>
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Matthew Cover <werekraken@gmail.com>
bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Enable PME if it can be signaled from D3cold
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
CK Hu <ck.hu@mediatek.com>
soc: mmsys: mediatek: add mask to mmsys routes
Mansur Alisha Shaik <mansur@codeaurora.org>
media: venus: helper: do not set constrained parameters for UBWC
Colin Ian King <colin.king@canonical.com>
media: venus: venc: Fix potential null pointer dereference on pointer fmt
Zhen Lei <thunder.leizhen@huawei.com>
media: venus: hfi: fix return value check in sys_get_prop_image_version()
Wei Yongjun <weiyongjun1@huawei.com>
media: omap3isp: Fix missing unlock in isp_subdev_notifier_complete()
Dongliang Mu <mudongliangabcd@gmail.com>
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Hans de Goede <hdegoede@redhat.com>
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
Andy Shevchenko <andy.shevchenko@gmail.com>
leds: rt8515: Put fwnode in any case during ->probe()
Andy Shevchenko <andy.shevchenko@gmail.com>
leds: lt3593: Put fwnode in any case during ->probe()
Andy Shevchenko <andy.shevchenko@gmail.com>
leds: lgm-sso: Don't spam logs when probe is deferred
Andy Shevchenko <andy.shevchenko@gmail.com>
leds: lgm-sso: Put fwnode in any case during ->probe()
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: highlander: add IRQ check
Jiapeng Chong <jiapeng.chong@linux.alibaba.com>
net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set()
Douglas Anderson <dianders@chromium.org>
drm/bridge: ti-sn65dsi86: Add some 100 us delays
Douglas Anderson <dianders@chromium.org>
drm/bridge: ti-sn65dsi86: Fix power off sequence
Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
drm/bridge: ti-sn65dsi86: Wrap panel with panel-bridge
Douglas Anderson <dianders@chromium.org>
drm/bridge: ti-sn65dsi86: Improve probe errors with dev_err_probe()
Douglas Anderson <dianders@chromium.org>
drm/bridge: ti-sn65dsi86: Don't read EDID blob over DDC
Leon Romanovsky <leon@kernel.org>
devlink: Break parameter notification sequence to be before/after unload/load driver
Biju Das <biju.das.jz@bp.renesas.com>
arm64: dts: renesas: hihope-rzg2-ex: Add EtherAVB internal rx delay
Quentin Monnet <quentin@isovalent.com>
tools: Free BTF objects at various locations
Quentin Monnet <quentin@isovalent.com>
libbpf: Return non-null error on failures in libbpf_find_prog_btf_id()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
lib/test_scanf: Handle n_bits == 0 in random tests
Luben Tuikov <luben.tuikov@amd.com>
drm/amd/pm: Fix a bug in semaphore double-lock
Tedd Ho-Jeong An <tedd.an@intel.com>
Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
drm: rcar-du: Don't put reference to drm_device in rcar_du_remove()
Leon Romanovsky <leon@kernel.org>
net: ti: am65-cpsw-nuss: fix wrong devlink release order
Pavel Skripkin <paskripkin@gmail.com>
net: cipso: fix warnings in netlbl_cipsov4_add_std
Marek Vasut <marex@denx.de>
drm: mxsfb: Clear FIFO_CLEAR bit
Marek Vasut <marex@denx.de>
drm: mxsfb: Increase number of outstanding requests on V4 and newer HW
Marek Vasut <marex@denx.de>
drm: mxsfb: Enable recovery on underflow
Waiman Long <longman@redhat.com>
cgroup/cpuset: Fix a partition bug with hotplug
Maxim Mikityanskiy <maximmi@nvidia.com>
net/mlx5e: Block LRO if firmware asks for tunneled LRO
Maxim Mikityanskiy <maximmi@nvidia.com>
net/mlx5e: Prohibit inner indir TIRs in IPoIB
Anand Moon <linux.amoon@gmail.com>
ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
Martin Blumenstingl <martin.blumenstingl@googlemail.com>
ARM: dts: meson8: Use a higher default GPU clock frequency
Martin KaFai Lau <kafai@fb.com>
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Luben Tuikov <luben.tuikov@amd.com>
drm/amd/pm: Fix a bug communicating with the SMU (v5)
Kai-Heng Feng <kai.heng.feng@canonical.com>
drm/amdgpu/acp: Make PM domain really work
Colin Ian King <colin.king@canonical.com>
6lowpan: iphc: Fix an off-by-one check of array index
Jun Miao <jun.miao@windriver.com>
Bluetooth: btusb: Fix a unspported condition to set available debug features
Dan Carpenter <dan.carpenter@oracle.com>
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
Yizhuo <yzhai003@ucr.edu>
media: atomisp: fix the uninitialized use and rename "retvalue"
Philipp Zabel <p.zabel@pengutronix.de>
media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
Dan Carpenter <dan.carpenter@oracle.com>
media: rockchip/rga: fix error handling in probe
Dan Carpenter <dan.carpenter@oracle.com>
media: v4l2-subdev: fix some NULL vs IS_ERR() checks
Pavel Skripkin <paskripkin@gmail.com>
media: go7007: remove redundant initialization
Pavel Skripkin <paskripkin@gmail.com>
media: go7007: fix memory leak in go7007_usb_probe
Oleksij Rempel <linux@rempel-privat.de>
net: usb: asix: ax88772: add missing stop
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: Fix error handling in dvb_usb_i2c_init
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
Leon Romanovsky <leon@kernel.org>
ionic: cleanly release devlink instance
Zhen Lei <thunder.leizhen@huawei.com>
driver core: Fix error return code in really_probe()
Zhen Lei <thunder.leizhen@huawei.com>
firmware: fix theoretical UAF race with firmware cache and resume
John Fastabend <john.fastabend@gmail.com>
bpf, selftests: Fix test_maps now that sockmap supports UDP
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
arm64: dts: qcom: sm8250: fix usb2 qmp phy node
Colin Ian King <colin.king@canonical.com>
gfs2: Fix memory leak of object lsi on error return path
Martynas Pumputis <m@lambda.lt>
libbpf: Fix removal of inner map in bpf_object__create_map
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Use corner in power_off
Judy Hsiao <judyhsiao@chromium.org>
arm64: dts: qcom: sc7180: Set adau wakeup delay to 80 ms
Stefan Assmann <sassmann@kpanic.de>
i40e: improve locking of mac_filter_hash
Geert Uytterhoeven <geert@linux-m68k.org>
arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
Andrew Jeffery <andrew@aj.id.au>
ARM: dts: everest: Add phase corrections for eMMC
Dylan Hung <dylan_hung@aspeedtech.com>
ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
Shuyi Cheng <chengshuyi@linux.alibaba.com>
libbpf: Fix the possible memory leak on error
Haiyue Wang <haiyue.wang@intel.com>
gve: fix the wrong AdminQ buffer overflow check
Steven Price <steven.price@arm.com>
drm/of: free the iterator object on failure
He Fengqing <hefengqing@huawei.com>
bpf: Fix potential memleak and UAF in the verifier.
Kuniyuki Iwashima <kuniyu@amazon.co.jp>
bpf: Fix a typo of reuseport map in bpf.h.
Julia Lawall <Julia.Lawall@inria.fr>
drm/of: free the right object
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: cxd2880-spi: Fix an error handling path
Geert Uytterhoeven <geert+renesas@glider.be>
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
Jiapeng Chong <jiapeng.chong@linux.alibaba.com>
leds: is31fl32xx: Fix missing error code in is31fl32xx_parse_dt()
Krzysztof Hałasa <khalasa@piap.pl>
media: TDA1997x: enable EDID support
Eugen Hristev <eugen.hristev@microchip.com>
media: atmel: atmel-sama5d2-isc: fix YUYV format
Marek Vasut <marex@denx.de>
ASoC: tlv320aic32x4: Fix TAS2505/TAS2521 channel count
Zhang Qilong <zhangqilong3@huawei.com>
ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe
Zhang Qilong <zhangqilong3@huawei.com>
ASoC: mediatek: mt8192:Fix Unbalanced pm_runtime_enable in mt8192_afe_pcm_dev_probe
Harshvardhan Jha <harshvardhan.jha@oracle.com>
drm/gma500: Fix end of loop tests for list_for_each_entry
Wei Yongjun <weiyongjun1@huawei.com>
drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init()
Quanyang Wang <quanyang.wang@windriver.com>
spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible
Chunyan Zhang <chunyan.zhang@unisoc.com>
spi: sprd: Fix the wrong WDG_LOAD_VAL
Chen-Yu Tsai <wenst@chromium.org>
regulator: vctrl: Avoid lockdep warning in enable/disable ops
Chen-Yu Tsai <wenst@chromium.org>
regulator: vctrl: Use locked regulator_get_voltage in probe path
Eric Biggers <ebiggers@google.com>
blk-crypto: fix check for too-large dun_bytes
Matija Glavinic Pecotic <matija.glavinic-pecotic.ext@nokia.com>
spi: davinci: invoke chipselect callback
Borislav Petkov <bp@alien8.de>
x86/mce: Defer processing of early errors
Qiuxu Zhuo <qiuxu.zhuo@intel.com>
EDAC/i10nm: Fix NVDIMM detection
Stefan Berger <stefanb@linux.ibm.com>
tpm: ibmvtpm: Avoid error message when process gets signal while waiting
Stefan Berger <stefanb@linux.ibm.com>
certs: Trigger creation of RSA module signing key if it's not an RSA key
Geert Uytterhoeven <geert@linux-m68k.org>
m68k: Fix asm register constraints for atomic ops
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - use proper type for vf_mask
Chen-Yu Tsai <wenst@chromium.org>
irqchip/gic-v3: Fix priority comparison when non-secure priorities are used
Sven Peter <sven@svenpeter.dev>
irqchip/apple-aic: Fix irq_disable from within irq handlers
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
spi: coldfire-qspi: Use clk_disable_unprepare in the remove function
Pavel Skripkin <paskripkin@gmail.com>
block: nbd: add sanity check for first_minor
Hou Tao <houtao1@huawei.com>
nbd: do del_gendisk() asynchronously for NBD_DESTROY_ON_DISCONNECT
Phong Hoang <phong.hoang.wz@renesas.com>
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Hongbo Li <herberthbli@tencent.com>
lib/mpi: use kcalloc in mpi_resize
Huacai Chen <chenhuacai@kernel.org>
irqchip/loongson-pch-pic: Improve edge triggered interrupt support
Zhen Lei <thunder.leizhen@huawei.com>
genirq/timings: Fix error return code in irq_timings_test_irqs()
Tony Lindgren <tony@atomide.com>
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
Ming Lei <ming.lei@redhat.com>
block: return ELEVATOR_DISCARD_MERGE if possible
Geert Uytterhoeven <geert@linux-m68k.org>
m68k: Fix invalid RMW_INSNS on CPUs that lack CAS
Yanfei Xu <yanfei.xu@windriver.com>
rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
Yanfei Xu <yanfei.xu@windriver.com>
rcu: Fix to include first blocked task in stall warning
Quentin Perret <qperret@google.com>
sched: Fix UCLAMP_FLAG_IDLE setting
Mika Penttilä <mika.penttila@gmail.com>
sched/numa: Fix is_core_idle()
Mian Yousaf Kaukab <ykaukab@suse.de>
crypto: ecc - handle unaligned input buffer in ecc_swap_digits
Ard Biesheuvel <ardb@kernel.org>
crypto: x86/aes-ni - add missing error checks in XTS code
Pavel Skripkin <paskripkin@gmail.com>
m68k: emu: Fix invalid free in nfeth_cleanup()
Peter Robinson <pbrobinson@gmail.com>
power: supply: cw2015: use dev_err_probe to allow deferred probe
Valentin Schneider <valentin.schneider@arm.com>
sched/debug: Don't update sched_domain debug directories before sched_debug_init()
Alexander Gordeev <agordeev@linux.ibm.com>
s390/smp: enable DAT before CPU restart callback is called
Harald Freudenberger <freude@linux.ibm.com>
s390/ap: fix state machine hang after failure to enable irq
Peter Oberparleiter <oberpar@linux.ibm.com>
s390/debug: fix debug area life cycle
Peter Oberparleiter <oberpar@linux.ibm.com>
s390/debug: keep debug data on resize
Niklas Schnelle <schnelle@linux.ibm.com>
s390/pci: fix misleading rc in clp_set_pci_fn()
Alexander Gordeev <agordeev@linux.ibm.com>
s390/kasan: fix large PMD pages address alignment check
Jens Axboe <axboe@kernel.dk>
io-wq: remove GFP_ATOMIC allocation off schedule out path
Stian Skjelstad <stian.skjelstad@gmail.com>
udf_get_extendedattr() had no boundary checks.
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
fcntl: fix potential deadlock for &fasync_struct.fa_lock
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
fcntl: fix potential deadlocks for &fown_struct.lock
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
crypto: tcrypt - Fix missing return value check
Kai Ye <yekai13@huawei.com>
crypto: hisilicon/sec - modify the hardware endian configuration
Kai Ye <yekai13@huawei.com>
crypto: hisilicon/sec - fix the abnormal exiting process
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not export adf_iov_putmsg()
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix reuse of completion variable
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - handle both source of interrupt in VF ISR
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not ignore errors from enable_vf2pf_comms()
Ben Hutchings <ben.hutchings@mind.be>
crypto: omap - Fix inconsistent locking of device lists
Valentin Schneider <valentin.schneider@arm.com>
sched/topology: Skip updating masks for non-online nodes
Damien Le Moal <damien.lemoal@wdc.com>
libata: fix ata_host_start()
Harald Freudenberger <freude@linux.ibm.com>
s390/zcrypt: fix wrong offset index for APKA master key valid state
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: add dev_busid sysfs entry for each subchannel
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Dmitry Osipenko <digetx@gmail.com>
power: supply: smb347-charger: Add missing pin control activation
Amit Engel <amit.engel@dell.com>
nvmet: pass back cntlid on successful completion
Ruozhu Li <liruozhu@huawei.com>
nvme-rdma: don't update queue count when failing to set io queues
Ruozhu Li <liruozhu@huawei.com>
nvme-tcp: don't update queue count when failing to set io queues
Chunguang Xu <brookxu@tencent.com>
blk-throtl: optimize IOPS throttle for large IO scenarios
Baokun Li <libaokun1@huawei.com>
nbd: add the check to prevent overflow in __nbd_ioctl()
Christoph Hellwig <hch@lst.de>
bcache: add proper error unwinding in bcache_device_init
Pali Rohár <pali@kernel.org>
isofs: joliet: Fix iocharset=utf8 mount option
Pali Rohár <pali@kernel.org>
udf: Fix iocharset=utf8 mount option
Jan Kara <jack@suse.cz>
udf: Check LVID earlier
Thomas Gleixner <tglx@linutronix.de>
hrtimer: Ensure timerfd notification for HIGHRES=n
Thomas Gleixner <tglx@linutronix.de>
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
Frederic Weisbecker <frederic@kernel.org>
posix-cpu-timers: Force next expiration recalc after itimer reset
Smita Koralahalli <Smita.KoralahalliChannabasappa@amd.com>
EDAC/mce_amd: Do not load edac_mce_amd module on guests
Sergey Senozhatsky <senozhatsky@chromium.org>
rcu/tree: Handle VM stoppage in stall detection
Dietmar Eggemann <dietmar.eggemann@arm.com>
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
Tony Lindgren <tony@atomide.com>
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
Hans de Goede <hdegoede@redhat.com>
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
Quentin Perret <qperret@google.com>
sched/deadline: Fix reset_on_fork reporting of DL tasks
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Check for DMA mapping errors
Dmitry Osipenko <digetx@gmail.com>
regulator: tps65910: Silence deferred probe error
Jeongtae Park <jeongtae.park@gmail.com>
regmap: fix the offset of register error log
Peter Zijlstra <peterz@infradead.org>
locking/mutex: Fix HANDOFF condition
-------------
Diffstat:
Documentation/fault-injection/provoke-crashes.rst | 2 +-
Makefile | 4 +-
arch/arm/boot/dts/aspeed-bmc-ibm-everest.dts | 2 +-
arch/arm/boot/dts/aspeed-g6-pinctrl.dtsi | 4 +-
arch/arm/boot/dts/at91-sam9x60ek.dts | 16 +-
arch/arm/boot/dts/at91-sama5d3_xplained.dts | 29 +++
arch/arm/boot/dts/at91-sama5d4_xplained.dts | 19 ++
arch/arm/boot/dts/meson8.dtsi | 5 +
arch/arm/boot/dts/meson8b-ec100.dts | 4 +-
arch/arm/boot/dts/meson8b-mxq.dts | 4 +-
arch/arm/boot/dts/meson8b-odroidc1.dts | 4 +-
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2 +-
.../boot/dts/marvell/armada-3720-turris-mox.dts | 17 ++
arch/arm64/boot/dts/marvell/armada-37xx.dtsi | 11 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-coachz.dtsi | 2 +-
arch/arm64/boot/dts/qcom/sc7280.dtsi | 6 +-
arch/arm64/boot/dts/qcom/sm8250.dtsi | 2 +-
arch/arm64/boot/dts/qcom/sm8350.dtsi | 8 +-
arch/arm64/boot/dts/renesas/hihope-rzg2-ex.dtsi | 1 +
arch/arm64/boot/dts/renesas/r8a77995-draak.dts | 4 -
arch/arm64/kvm/arm.c | 7 +
arch/arm64/kvm/vgic/vgic-v2.c | 36 +--
arch/arm64/kvm/vgic/vgic-v3.c | 36 +--
arch/arm64/kvm/vgic/vgic.c | 38 +++
arch/arm64/kvm/vgic/vgic.h | 2 +
arch/m68k/Kconfig.cpu | 8 +-
arch/m68k/coldfire/clk.c | 2 +-
arch/m68k/emu/nfeth.c | 4 +-
arch/m68k/include/asm/atomic.h | 4 +-
arch/parisc/boot/compressed/misc.c | 2 +-
arch/s390/include/asm/kvm_host.h | 1 +
arch/s390/include/asm/lowcore.h | 3 +-
arch/s390/include/asm/processor.h | 2 +
arch/s390/kernel/asm-offsets.c | 1 +
arch/s390/kernel/debug.c | 176 ++++++++-----
arch/s390/kernel/entry.S | 11 +-
arch/s390/kernel/ipl.c | 3 -
arch/s390/kernel/machine_kexec.c | 1 -
arch/s390/kernel/setup.c | 9 +-
arch/s390/kernel/smp.c | 31 ++-
arch/s390/kvm/interrupt.c | 12 +-
arch/s390/kvm/kvm-s390.c | 2 +-
arch/s390/kvm/kvm-s390.h | 2 +-
arch/s390/mm/kasan_init.c | 41 ++-
arch/s390/pci/pci.c | 7 +-
arch/s390/pci/pci_clp.c | 33 ++-
arch/x86/crypto/aesni-intel_glue.c | 5 +
arch/x86/events/intel/uncore_snbep.c | 40 ++-
arch/x86/include/asm/mce.h | 1 +
arch/x86/kernel/cpu/mce/core.c | 11 +-
arch/x86/kvm/mmu/mmu.c | 19 +-
arch/x86/kvm/mmu/tdp_mmu.c | 20 +-
arch/x86/kvm/vmx/nested.c | 7 +-
arch/x86/kvm/vmx/vmx.c | 3 +
arch/x86/kvm/x86.c | 4 +
block/bfq-iosched.c | 3 +
block/bio.c | 15 +-
block/blk-crypto.c | 2 +-
block/blk-merge.c | 18 +-
block/blk-throttle.c | 32 +++
block/blk.h | 2 +
block/elevator.c | 3 +
block/mq-deadline.c | 2 +
certs/Makefile | 8 +
crypto/ecc.h | 5 +-
crypto/tcrypt.c | 29 ++-
drivers/acpi/prmt.c | 10 +-
drivers/ata/libata-core.c | 2 +-
drivers/auxdisplay/hd44780.c | 2 +-
drivers/base/dd.c | 16 +-
drivers/base/firmware_loader/main.c | 20 +-
drivers/base/regmap/regmap.c | 2 +-
drivers/bcma/main.c | 6 +-
drivers/block/nbd.c | 86 ++++++-
drivers/bluetooth/btusb.c | 18 +-
drivers/char/tpm/Kconfig | 1 -
drivers/char/tpm/tpm_ibmvtpm.c | 26 +-
drivers/char/tpm/tpm_ibmvtpm.h | 2 +-
drivers/clk/mvebu/kirkwood.c | 1 +
drivers/clocksource/sh_cmt.c | 30 ++-
drivers/counter/104-quad-8.c | 5 +-
drivers/crypto/hisilicon/sec2/sec.h | 5 -
drivers/crypto/hisilicon/sec2/sec_main.c | 34 +--
drivers/crypto/mxs-dcp.c | 45 +++-
drivers/crypto/omap-aes.c | 8 +-
drivers/crypto/omap-des.c | 8 +-
drivers/crypto/omap-sham.c | 14 +-
.../crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_common/adf_common_drv.h | 8 +-
drivers/crypto/qat/qat_common/adf_init.c | 5 +-
drivers/crypto/qat/qat_common/adf_isr.c | 7 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3 +-
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12 +-
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7 +-
.../qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4 +-
drivers/edac/i10nm_base.c | 6 +-
drivers/edac/mce_amd.c | 3 +
drivers/firmware/raspberrypi.c | 10 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 54 ++--
drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c | 286 +++++++++++++++++----
drivers/gpu/drm/amd/pm/swsmu/smu_cmn.h | 3 +-
drivers/gpu/drm/bridge/ite-it66121.c | 2 +
drivers/gpu/drm/bridge/ti-sn65dsi86.c | 97 ++++---
drivers/gpu/drm/drm_of.c | 6 +-
drivers/gpu/drm/exynos/exynos_drm_g2d.c | 3 +-
drivers/gpu/drm/gma500/oaktrail_lvds.c | 2 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 10 +-
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 68 ++---
drivers/gpu/drm/msm/dp/dp_display.c | 31 ++-
drivers/gpu/drm/msm/dsi/dsi.c | 6 +-
drivers/gpu/drm/msm/msm_drv.c | 1 +
drivers/gpu/drm/mxsfb/mxsfb_drv.c | 3 +
drivers/gpu/drm/mxsfb/mxsfb_drv.h | 1 +
drivers/gpu/drm/mxsfb/mxsfb_kms.c | 40 +++
drivers/gpu/drm/mxsfb/mxsfb_regs.h | 9 +
drivers/gpu/drm/panfrost/panfrost_device.c | 3 +-
drivers/gpu/drm/rcar-du/rcar_du_drv.c | 2 -
drivers/hv/hv_snapshot.c | 1 +
drivers/hwmon/Makefile | 1 -
drivers/hwmon/pmbus/bpa-rs600.c | 25 --
drivers/i2c/busses/i2c-highlander.c | 2 +-
drivers/i2c/busses/i2c-hix5hd2.c | 2 +-
drivers/i2c/busses/i2c-iop3xx.c | 6 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-s3c2410.c | 2 +-
drivers/i2c/busses/i2c-synquacer.c | 2 +-
drivers/i2c/busses/i2c-xlp9xx.c | 2 +-
drivers/infiniband/hw/mlx5/mr.c | 2 +-
drivers/irqchip/irq-apple-aic.c | 2 +-
drivers/irqchip/irq-gic-v3.c | 23 +-
drivers/irqchip/irq-loongson-pch-pic.c | 19 +-
drivers/leds/blink/leds-lgm-sso.c | 23 +-
drivers/leds/flash/leds-rt8515.c | 4 +-
drivers/leds/leds-is31fl32xx.c | 1 +
drivers/leds/leds-lt3593.c | 5 +-
drivers/leds/trigger/ledtrig-audio.c | 37 ++-
drivers/md/bcache/super.c | 16 +-
drivers/md/raid1.c | 19 ++
drivers/md/raid10.c | 14 +-
drivers/media/i2c/tda1997x.c | 1 +
drivers/media/platform/atmel/atmel-sama5d2-isc.c | 17 ++
drivers/media/platform/coda/coda-bit.c | 18 +-
drivers/media/platform/omap3isp/isp.c | 4 +-
drivers/media/platform/qcom/venus/helpers.c | 3 +
drivers/media/platform/qcom/venus/hfi_msgs.c | 2 +-
drivers/media/platform/qcom/venus/venc.c | 2 +
drivers/media/platform/rcar-vin/rcar-v4l2.c | 4 +-
drivers/media/platform/rockchip/rga/rga.c | 27 +-
drivers/media/platform/vsp1/vsp1_entity.c | 4 +-
drivers/media/spi/cxd2880-spi.c | 7 +-
drivers/media/usb/dvb-usb/dvb-usb-i2c.c | 9 +-
drivers/media/usb/dvb-usb/dvb-usb-init.c | 2 +-
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6 +-
drivers/media/usb/dvb-usb/vp702x.c | 12 +-
drivers/media/usb/em28xx/em28xx-input.c | 1 -
drivers/media/usb/go7007/go7007-driver.c | 26 --
drivers/media/usb/go7007/go7007-usb.c | 2 +-
drivers/misc/lkdtm/core.c | 2 +-
drivers/misc/pvpanic/pvpanic.c | 2 +
drivers/mmc/host/dw_mmc.c | 1 +
drivers/mmc/host/moxart-mmc.c | 1 +
drivers/mmc/host/sdhci.c | 1 +
drivers/net/dsa/b53/b53_common.c | 10 -
drivers/net/dsa/b53/b53_priv.h | 2 -
drivers/net/dsa/bcm_sf2.c | 1 -
drivers/net/dsa/mt7530.c | 13 -
drivers/net/dsa/mv88e6xxx/chip.c | 18 --
.../net/ethernet/aquantia/atlantic/aq_pci_func.c | 3 +
drivers/net/ethernet/google/gve/gve_adminq.c | 6 +-
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 23 +-
drivers/net/ethernet/intel/ice/ice_main.c | 13 +-
drivers/net/ethernet/intel/ice/ice_ptp.c | 55 +++-
drivers/net/ethernet/marvell/octeontx2/af/common.h | 2 -
.../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 35 ++-
.../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 9 +-
.../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 22 +-
.../net/ethernet/marvell/octeontx2/af/rvu_reg.h | 2 +-
.../ethernet/marvell/octeontx2/nic/otx2_common.c | 16 +-
.../ethernet/marvell/octeontx2/nic/otx2_common.h | 3 +
.../ethernet/marvell/octeontx2/nic/otx2_flows.c | 1 +
.../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/dev.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 1 +
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 6 -
drivers/net/ethernet/mellanox/mlx5/core/en/qos.c | 15 +-
drivers/net/ethernet/mellanox/mlx5/core/en/qos.h | 4 +-
.../ethernet/mellanox/mlx5/core/en/tc_tun_encap.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 10 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 18 +-
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 18 ++
.../ethernet/mellanox/mlx5/core/esw/indir_table.c | 1 +
.../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 5 +-
.../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 18 +-
drivers/net/ethernet/mellanox/mlx5/core/lag.c | 1 +
drivers/net/ethernet/mellanox/mlx5/core/lag_mp.c | 8 +
drivers/net/ethernet/mellanox/mlx5/core/lag_mp.h | 2 +
.../net/ethernet/pensando/ionic/ionic_devlink.c | 14 +-
drivers/net/ethernet/qualcomm/qca_spi.c | 2 +-
drivers/net/ethernet/qualcomm/qca_uart.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/dwmac4_lib.c | 5 +-
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 47 ++--
drivers/net/ethernet/ti/am65-cpsw-nuss.h | 2 +
drivers/net/phy/marvell10g.c | 8 +
drivers/net/usb/asix_devices.c | 1 +
drivers/net/wireless/ath/ath6kl/wmi.c | 4 +-
.../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 2 +-
drivers/net/wireless/intel/iwlwifi/fw/acpi.c | 14 +-
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 1 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 4 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 1 +
drivers/nvme/host/rdma.c | 4 +-
drivers/nvme/host/tcp.c | 4 +-
drivers/nvme/target/fabrics-cmd.c | 9 +-
drivers/pci/pci.c | 25 +-
drivers/power/supply/axp288_fuel_gauge.c | 4 +-
drivers/power/supply/cw2015_battery.c | 4 +-
drivers/power/supply/max17042_battery.c | 2 +-
drivers/power/supply/smb347-charger.c | 10 +
drivers/regulator/tps65910-regulator.c | 10 +-
drivers/regulator/vctrl-regulator.c | 73 +++---
drivers/s390/cio/css.c | 17 ++
drivers/s390/crypto/ap_bus.c | 25 +-
drivers/s390/crypto/ap_bus.h | 10 +-
drivers/s390/crypto/ap_queue.c | 20 +-
drivers/s390/crypto/zcrypt_ccamisc.c | 8 +-
drivers/soc/mediatek/mt8183-mmsys.h | 21 +-
drivers/soc/mediatek/mtk-mmsys.c | 7 +-
drivers/soc/mediatek/mtk-mmsys.h | 133 +++++++---
drivers/soc/qcom/rpmhpd.c | 5 +-
drivers/soc/qcom/smsm.c | 11 +-
drivers/soc/rockchip/Kconfig | 4 +-
drivers/spi/spi-coldfire-qspi.c | 2 +-
drivers/spi/spi-davinci.c | 8 +-
drivers/spi/spi-fsl-dspi.c | 1 +
drivers/spi/spi-pic32.c | 1 +
drivers/spi/spi-sprd-adi.c | 2 +-
drivers/spi/spi-zynq-qspi.c | 8 +-
drivers/staging/clocking-wizard/Kconfig | 2 +-
.../staging/media/atomisp/i2c/atomisp-mt9m114.c | 11 +-
drivers/staging/media/tegra-video/vi.c | 4 +-
drivers/tty/serial/fsl_lpuart.c | 2 +-
drivers/tty/tty_io.c | 4 +-
drivers/usb/dwc3/dwc3-meson-g12a.c | 2 +
drivers/usb/dwc3/dwc3-qcom.c | 4 +
drivers/usb/gadget/udc/at91_udc.c | 4 +-
drivers/usb/gadget/udc/bdc/bdc_core.c | 30 +--
drivers/usb/gadget/udc/mv_u3d_core.c | 19 +-
drivers/usb/gadget/udc/renesas_usb3.c | 17 +-
drivers/usb/gadget/udc/s3c2410_udc.c | 4 +
drivers/usb/host/ehci-orion.c | 8 +-
drivers/usb/host/ohci-tmio.c | 3 +
drivers/usb/misc/brcmstb-usb-pinmap.c | 2 +
drivers/usb/phy/phy-fsl-usb.c | 2 +
drivers/usb/phy/phy-tahvo.c | 4 +-
drivers/usb/phy/phy-twl6030-usb.c | 5 +
drivers/video/backlight/pwm_bl.c | 54 ++--
drivers/video/fbdev/core/fbmem.c | 6 +
fs/cifs/cifs_unicode.c | 9 +-
fs/cifs/fs_context.c | 11 +-
fs/cifs/readdir.c | 23 +-
fs/debugfs/file.c | 8 +-
fs/f2fs/file.c | 5 +-
fs/f2fs/super.c | 11 +-
fs/fcntl.c | 18 +-
fs/fuse/file.c | 30 ++-
fs/fuse/fuse_i.h | 19 ++
fs/fuse/inode.c | 60 +++++
fs/gfs2/ops_fstype.c | 43 ++++
fs/gfs2/super.c | 61 +----
fs/io-wq.c | 105 +++++---
fs/io_uring.c | 5 +
fs/iomap/swapfile.c | 6 +
fs/isofs/inode.c | 27 +-
fs/isofs/isofs.h | 1 -
fs/isofs/joliet.c | 4 +-
fs/lockd/svclock.c | 2 +-
fs/nfsd/nfs4state.c | 4 +-
fs/udf/misc.c | 13 +-
fs/udf/super.c | 75 +++---
fs/udf/udf_sb.h | 2 -
fs/udf/unicode.c | 4 +-
include/linux/blkdev.h | 16 ++
include/linux/energy_model.h | 16 ++
include/linux/hrtimer.h | 5 -
include/linux/local_lock_internal.h | 42 +--
include/linux/mlx5/mlx5_ifc.h | 3 +-
include/linux/power/max17042_battery.h | 2 +-
include/linux/sunrpc/svc.h | 1 +
include/linux/time64.h | 9 +-
include/net/dsa.h | 2 -
include/net/pkt_cls.h | 3 +-
include/trace/events/io_uring.h | 6 +-
include/trace/events/sunrpc.h | 8 +-
include/uapi/linux/bpf.h | 2 +-
kernel/bpf/verifier.c | 31 ++-
kernel/cgroup/cpuset.c | 95 ++++---
kernel/cpu_pm.c | 50 +++-
kernel/irq/timings.c | 2 +
kernel/locking/mutex.c | 15 +-
kernel/power/energy_model.c | 4 +-
kernel/rcu/tree_stall.h | 26 +-
kernel/sched/core.c | 25 +-
kernel/sched/deadline.c | 8 +-
kernel/sched/debug.c | 7 +
kernel/sched/fair.c | 2 +-
kernel/sched/sched.h | 2 +
kernel/sched/topology.c | 65 +++++
kernel/time/hrtimer.c | 92 +++++--
kernel/time/posix-cpu-timers.c | 2 -
kernel/time/tick-internal.h | 3 +
lib/mpi/mpiutil.c | 2 +-
lib/test_scanf.c | 4 +-
net/6lowpan/debugfs.c | 3 +-
net/bluetooth/cmtp/cmtp.h | 2 +-
net/bluetooth/hci_core.c | 22 +-
net/bluetooth/mgmt.c | 2 +-
net/bluetooth/sco.c | 11 +-
net/core/devlink.c | 36 ++-
net/dsa/Kconfig | 13 +-
net/dsa/Makefile | 3 +-
net/dsa/dsa_priv.h | 2 -
net/dsa/port.c | 21 --
net/dsa/slave.c | 6 -
net/dsa/tag_8021q.c | 2 -
net/ipv4/route.c | 48 ++--
net/ipv4/tcp_ipv4.c | 5 +-
net/ipv6/route.c | 5 +-
net/mac80211/main.c | 2 +-
net/mac80211/tx.c | 4 +-
net/netlabel/netlabel_cipso_v4.c | 8 +-
net/qrtr/qrtr.c | 8 +-
net/sched/sch_cbq.c | 2 +-
net/sched/sch_htb.c | 97 ++++---
net/sunrpc/svc.c | 15 ++
samples/bpf/xdp_redirect_cpu_user.c | 2 +-
samples/pktgen/pktgen_sample04_many_flows.sh | 12 +-
samples/pktgen/pktgen_sample05_flow_per_thread.sh | 12 +-
security/integrity/ima/Kconfig | 1 -
security/integrity/ima/ima_mok.c | 2 +-
sound/soc/codecs/rt5682-i2c.c | 15 +-
sound/soc/codecs/tlv320aic32x4.c | 2 +-
sound/soc/codecs/wcd9335.c | 23 +-
sound/soc/codecs/wm_adsp.c | 2 +
sound/soc/fsl/fsl_rpmsg.c | 20 +-
sound/soc/intel/boards/kbl_da7219_max98927.c | 55 +---
sound/soc/intel/common/soc-acpi-intel-cml-match.c | 2 +-
sound/soc/intel/common/soc-acpi-intel-kbl-match.c | 2 +-
sound/soc/intel/skylake/skl-topology.c | 25 +-
sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 43 ++--
sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 27 +-
sound/usb/card.c | 4 +
sound/usb/pcm.c | 3 +-
sound/usb/usbaudio.h | 1 +
tools/bootconfig/main.c | 4 +-
tools/bpf/bpftool/prog.c | 5 +-
tools/include/uapi/linux/bpf.h | 2 +-
tools/lib/bpf/Makefile | 10 +-
tools/lib/bpf/libbpf.c | 20 +-
tools/perf/util/bpf-event.c | 4 +-
tools/perf/util/bpf_counter.c | 3 +-
tools/testing/selftests/bpf/prog_tests/btf.c | 1 +
tools/testing/selftests/bpf/progs/bpf_iter_tcp4.c | 2 +-
.../selftests/bpf/progs/test_core_autosize.c | 20 +-
tools/testing/selftests/bpf/test_maps.c | 4 +-
365 files changed, 3272 insertions(+), 1796 deletions(-)
^ permalink raw reply [relevance 4%]
* [PATCH 5.13 173/300] Bluetooth: fix repeated calls to sco_sock_kill
2021-09-13 13:11 4% [PATCH 5.13 000/300] 5.13.17-rc1 review Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.13 038/300] fcntl: fix potential deadlocks for &fown_struct.lock Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.13 039/300] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
@ 2021-09-13 13:13 11% ` Greg Kroah-Hartman
2 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:13 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit e1dee2c1de2b4dd00eb44004a4bda6326ed07b59 ]
In commit 4e1a720d0312 ("Bluetooth: avoid killing an already killed
socket"), a check was added to sco_sock_kill to skip killing a socket
if the SOCK_DEAD flag was set.
This was done after a trace for a use-after-free bug showed that the
same sock pointer was being killed twice.
Unfortunately, this check prevents sco_sock_kill from running on any
socket. sco_sock_kill kills a socket only if it's zapped and orphaned,
however sock_orphan announces that the socket is dead before detaching
it. i.e., orphaned sockets have the SOCK_DEAD flag set.
To fix this, we remove the check for SOCK_DEAD, and avoid repeated
calls to sco_sock_kill by removing incorrect calls in:
1. sco_sock_timeout. The socket should not be killed on timeout as
further processing is expected to be done. For example,
sco_sock_connect sets the timer then waits for the socket to be
connected or for an error to be returned.
2. sco_conn_del. This function should clean up resources for the
connection, but the socket itself should be cleaned up in
sco_sock_release.
3. sco_sock_close. Calls to sco_sock_close in sco_sock_cleanup_listen
and sco_sock_release are followed by sco_sock_kill. Hence the
duplicated call should be removed.
Fixes: 4e1a720d0312 ("Bluetooth: avoid killing an already killed socket")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 6 +-----
1 file changed, 1 insertion(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index a7b4555f312f..9769a7ceb689 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -85,7 +85,6 @@ static void sco_sock_timeout(struct timer_list *t)
sk->sk_state_change(sk);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -177,7 +176,6 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_sock_clear_timer(sk);
sco_chan_del(sk, err);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -394,8 +392,7 @@ static void sco_sock_cleanup_listen(struct sock *parent)
*/
static void sco_sock_kill(struct sock *sk)
{
- if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket ||
- sock_flag(sk, SOCK_DEAD))
+ if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
return;
BT_DBG("sk %p state %d", sk, sk->sk_state);
@@ -447,7 +444,6 @@ static void sco_sock_close(struct sock *sk)
lock_sock(sk);
__sco_sock_close(sk);
release_sock(sk);
- sco_sock_kill(sk);
}
static void sco_skb_put_cmsg(struct sk_buff *skb, struct msghdr *msg,
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.13 038/300] fcntl: fix potential deadlocks for &fown_struct.lock
2021-09-13 13:11 4% [PATCH 5.13 000/300] 5.13.17-rc1 review Greg Kroah-Hartman
@ 2021-09-13 13:11 11% ` Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.13 039/300] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
2021-09-13 13:13 11% ` [PATCH 5.13 173/300] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:11 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Jeff Layton,
Sasha Levin, syzbot+e6d5398a02c516ce5e70
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit f671a691e299f58835d4660d642582bf0e8f6fda ]
Syzbot reports a potential deadlock in do_fcntl:
========================================================
WARNING: possible irq lock inversion dependency detected
5.12.0-syzkaller #0 Not tainted
--------------------------------------------------------
syz-executor132/8391 just changed the state of lock:
ffff888015967bf8 (&f->f_owner.lock){.+..}-{2:2}, at: f_getown_ex fs/fcntl.c:211 [inline]
ffff888015967bf8 (&f->f_owner.lock){.+..}-{2:2}, at: do_fcntl+0x8b4/0x1200 fs/fcntl.c:395
but this lock was taken by another, HARDIRQ-safe lock in the past:
(&dev->event_lock){-...}-{2:2}
and interrupts could create inverse lock ordering between them.
other info that might help us debug this:
Chain exists of:
&dev->event_lock --> &new->fa_lock --> &f->f_owner.lock
Possible interrupt unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&f->f_owner.lock);
local_irq_disable();
lock(&dev->event_lock);
lock(&new->fa_lock);
<Interrupt>
lock(&dev->event_lock);
*** DEADLOCK ***
This happens because there is a lock hierarchy of
&dev->event_lock --> &new->fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
However, since &dev->event_lock is HARDIRQ-safe, interrupts have to be
disabled while grabbing &f->f_owner.lock, otherwise we invert the lock
hierarchy.
Hence, we replace calls to read_lock/read_unlock on &f->f_owner.lock,
with read_lock_irq/read_unlock_irq.
Reported-and-tested-by: syzbot+e6d5398a02c516ce5e70@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 13 +++++++------
1 file changed, 7 insertions(+), 6 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index dfc72f15be7f..cf9e81dfa615 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -150,7 +150,8 @@ void f_delown(struct file *filp)
pid_t f_getown(struct file *filp)
{
pid_t pid = 0;
- read_lock(&filp->f_owner.lock);
+
+ read_lock_irq(&filp->f_owner.lock);
rcu_read_lock();
if (pid_task(filp->f_owner.pid, filp->f_owner.pid_type)) {
pid = pid_vnr(filp->f_owner.pid);
@@ -158,7 +159,7 @@ pid_t f_getown(struct file *filp)
pid = -pid;
}
rcu_read_unlock();
- read_unlock(&filp->f_owner.lock);
+ read_unlock_irq(&filp->f_owner.lock);
return pid;
}
@@ -208,7 +209,7 @@ static int f_getown_ex(struct file *filp, unsigned long arg)
struct f_owner_ex owner = {};
int ret = 0;
- read_lock(&filp->f_owner.lock);
+ read_lock_irq(&filp->f_owner.lock);
rcu_read_lock();
if (pid_task(filp->f_owner.pid, filp->f_owner.pid_type))
owner.pid = pid_vnr(filp->f_owner.pid);
@@ -231,7 +232,7 @@ static int f_getown_ex(struct file *filp, unsigned long arg)
ret = -EINVAL;
break;
}
- read_unlock(&filp->f_owner.lock);
+ read_unlock_irq(&filp->f_owner.lock);
if (!ret) {
ret = copy_to_user(owner_p, &owner, sizeof(owner));
@@ -249,10 +250,10 @@ static int f_getowner_uids(struct file *filp, unsigned long arg)
uid_t src[2];
int err;
- read_lock(&filp->f_owner.lock);
+ read_lock_irq(&filp->f_owner.lock);
src[0] = from_kuid(user_ns, filp->f_owner.uid);
src[1] = from_kuid(user_ns, filp->f_owner.euid);
- read_unlock(&filp->f_owner.lock);
+ read_unlock_irq(&filp->f_owner.lock);
err = put_user(src[0], &dst[0]);
err |= put_user(src[1], &dst[1]);
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.13 039/300] fcntl: fix potential deadlock for &fasync_struct.fa_lock
2021-09-13 13:11 4% [PATCH 5.13 000/300] 5.13.17-rc1 review Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.13 038/300] fcntl: fix potential deadlocks for &fown_struct.lock Greg Kroah-Hartman
@ 2021-09-13 13:11 11% ` Greg Kroah-Hartman
2021-09-13 13:13 11% ` [PATCH 5.13 173/300] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2 siblings, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:11 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Jeff Layton,
Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2f488f698fda820f8e6fa0407630154eceb145d6 ]
There is an existing lock hierarchy of
&dev->event_lock --> &fasync_struct.fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
&dev->event_lock is HARDIRQ-safe, so interrupts have to be disabled
while grabbing &fasync_struct.fa_lock, otherwise we invert the lock
hierarchy. However, since kill_fasync which calls kill_fasync_rcu is
an exported symbol, it may not necessarily be called with interrupts
disabled.
As kill_fasync_rcu may be called with interrupts disabled (for
example, in the call chain above), we replace calls to
read_lock/read_unlock on &fasync_struct.fa_lock in kill_fasync_rcu
with read_lock_irqsave/read_unlock_irqrestore.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index cf9e81dfa615..887db4918a89 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -1004,13 +1004,14 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
{
while (fa) {
struct fown_struct *fown;
+ unsigned long flags;
if (fa->magic != FASYNC_MAGIC) {
printk(KERN_ERR "kill_fasync: bad magic number in "
"fasync_struct!\n");
return;
}
- read_lock(&fa->fa_lock);
+ read_lock_irqsave(&fa->fa_lock, flags);
if (fa->fa_file) {
fown = &fa->fa_file->f_owner;
/* Don't send SIGURG to processes which have not set a
@@ -1019,7 +1020,7 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
if (!(sig == SIGURG && fown->signum == 0))
send_sigio(fown, fa->fa_fd, band);
}
- read_unlock(&fa->fa_lock);
+ read_unlock_irqrestore(&fa->fa_lock, flags);
fa = rcu_dereference(fa->fa_next);
}
}
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.13 000/300] 5.13.17-rc1 review
@ 2021-09-13 13:11 4% Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.13 038/300] fcntl: fix potential deadlocks for &fown_struct.lock Greg Kroah-Hartman
` (2 more replies)
0 siblings, 3 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:11 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.13.17 release.
There are 300 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 15 Sep 2021 13:10:21 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.13.17-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.13.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.13.17-rc1
Linus Walleij <linus.walleij@linaro.org>
clk: kirkwood: Fix a clocking boot regression
Daniel Thompson <daniel.thompson@linaro.org>
backlight: pwm_bl: Improve bootloader/kernel device handover
Niklas Schnelle <schnelle@linux.ibm.com>
RDMA/mlx5: Fix number of allocated XLT entries
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
fbmem: don't allow too huge resolutions
THOBY Simon <Simon.THOBY@viveris.fr>
IMA: remove the dependency on CRYPTO_MD5
Austin Kim <austin.kim@lge.com>
IMA: remove -Wmissing-prototypes warning
Miklos Szeredi <mszeredi@redhat.com>
fuse: wait for writepages in syncfs
Miklos Szeredi <mszeredi@redhat.com>
fuse: flush extending writes
Miklos Szeredi <mszeredi@redhat.com>
fuse: truncate pagecache on atomic_o_trunc
Adrian Ratiu <adrian.ratiu@collabora.com>
char: tpm: Kconfig: remove bad i2c cr50 select
Xiao Ni <xni@redhat.com>
md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard
Jens Axboe <axboe@kernel.dk>
io-wq: check max_worker limits if a worker transitions bound state
Claudiu Beznea <claudiu.beznea@microchip.com>
ARM: dts: at91: add pinctrl-{names, 0} for all gpios
Marc Zyngier <maz@kernel.org>
KVM: arm64: Unregister HYP sections from kmemleak in protected mode
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
Maxim Levitsky <mlevitsk@redhat.com>
KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
Sean Christopherson <seanjc@google.com>
KVM: x86/mmu: Avoid collision with !PRESENT SPTEs in TDP MMU lpage stats
Paolo Bonzini <pbonzini@redhat.com>
KVM: x86: clamp host mapping level to max_level in kvm_mmu_max_mapping_level
Zelin Deng <zelin.deng@linux.alibaba.com>
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Halil Pasic <pasic@linux.ibm.com>
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
Sean Christopherson <seanjc@google.com>
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
Babu Moger <babu.moger@amd.com>
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
Kim Phillips <kim.phillips@amd.com>
perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
Joerg Roedel <jroedel@suse.de>
x86/efi: Restore Firmware IDT before calling ExitBootServices()
Nguyen Dinh Phi <phind.uet@gmail.com>
tty: Fix data race between tiocsti() and flush_to_ldisc()
Steve French <stfrench@microsoft.com>
smb3: fix posix extensions mount option
Ronnie Sahlberg <lsahlber@redhat.com>
cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED
Guoqing Jiang <jiangguoqing@kylinos.cn>
raid1: ensure write behind bio has less than BIO_MAX_VECS sectors
Pavel Begunkov <asml.silence@gmail.com>
bio: fix page leak bio_add_hw_page failure
Jens Axboe <axboe@kernel.dk>
io_uring: io_uring_complete() trace should take an integer
Jens Axboe <axboe@kernel.dk>
io_uring: IORING_OP_WRITE needs hash_reg_file set
Pavel Begunkov <asml.silence@gmail.com>
io_uring: limit fixed table size by RLIMIT_NOFILE
Lars Poeschel <poeschel@lemonage.de>
auxdisplay: hd44780: Fix oops on module unloading
Lukas Hannen <lukas.hannen@opensource.tttech-industrial.com>
time: Handle negative seconds correctly in timespec64_to_ns()
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: guarantee to write dirty data when enabling checkpoint back
Justin M. Forbes <jforbes@fedoraproject.org>
iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
Douglas Anderson <dianders@chromium.org>
ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
Darren Powell <darren.powell@amd.com>
amdgpu/pm: add extra info to SMU msg pre-check failed message
Eric Dumazet <edumazet@google.com>
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
Sunil Goutham <sgoutham@marvell.com>
octeontx2-af: Set proper errorcode for IPv4 checksum errors
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-af: Fix static code analyzer reported issues
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-af: Fix mailbox errors in nix_rss_flowkey_cfg
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-af: Fix loop in free and unmap counter
Stefan Wahren <stefan.wahren@i2se.com>
net: qualcomm: fix QCA7000 checksum handling
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
Maxim Mikityanskiy <maximmi@nvidia.com>
sch_htb: Fix inconsistency when leaf qdisc creation fails
Dan Carpenter <dan.carpenter@oracle.com>
net: qrtr: make checks in qrtr_endpoint_post() stricter
Eric Dumazet <edumazet@google.com>
ipv4: make exception cache less predictible
Eric Dumazet <edumazet@google.com>
ipv6: make exception cache less predictible
Ahmad Fatoum <a.fatoum@pengutronix.de>
brcmfmac: pcie: fix oops on failure to resume and reprobe
Zenghui Yu <yuzenghui@huawei.com>
bcma: Fix memory leak for internally-handled cores
Sudarsana Reddy Kalluru <skalluru@marvell.com>
atlantic: Fix driver resume flow.
Dan Carpenter <dan.carpenter@oracle.com>
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
Vladimir Oltean <vladimir.oltean@nxp.com>
net: phy: marvell10g: fix broken PHY interrupts for anyone after us in the driver probe list
Brett Creeley <brett.creeley@intel.com>
ice: Only lock to update netdev dev_addr
Dmytro Linkin <dlinkin@nvidia.com>
net/mlx5e: Use correct eswitch for stack devices with lag
Maor Dickman <maord@nvidia.com>
net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group
Roi Dayan <roid@nvidia.com>
net/mlx5e: Fix possible use-after-free deleting fdb rule
Leon Romanovsky <leon@kernel.org>
net/mlx5: Remove all auxiliary devices at the unregister event
Abhishek Naik <abhishek.naik@intel.com>
iwlwifi: skip first element in the WTAS ACPI table
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: wcd9335: Disable irq on slave ports in the remove function
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: wcd9335: Fix a double irq free in the remove function
Andy Duan <fugang.duan@nxp.com>
tty: serial: fsl_lpuart: fix the wrong mapbase value
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
usb: bdc: Fix a resource leak in the error handling path of 'bdc_probe()'
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
Evgeny Novikov <novikov@ispras.ru>
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Yang Yingliang <yangyingliang@huawei.com>
octeontx2-pf: cn10k: Fix error return code in otx2_set_flowkey_cfg()
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: xlp9xx: fix main IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: mt65xx: fix IRQ check
Len Baker <len.baker@gmx.com>
CIFS: Fix a potencially linear read overflow
Andrey Ignatov <rdna@fb.com>
bpf: Fix possible out of bound write in narrow load handling
Tony Lindgren <tony@atomide.com>
mmc: moxart: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
mmc: sdhci: Fix issue with uninitialized dma_slave_config
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: Skylake: Fix module resource and format selection
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373
Dan Carpenter <dan.carpenter@oracle.com>
m68k: coldfire: return success for clk_enable(NULL)
Sunil Goutham <sgoutham@marvell.com>
octeontx2-pf: Fix algorithm index in MCAM rules with RSS action
Sunil Goutham <sgoutham@marvell.com>
octeontx2-pf: Don't install VLAN offload rule if netdev is down
Naveen Mamindlapalli <naveenm@marvell.com>
octeontx2-pf: send correct vlan priority mask to npc_install_flow_req
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-af: cn10k: Fix SDP base channel number
Dan Carpenter <dan.carpenter@oracle.com>
rsi: fix an error code in rsi_probe()
Dan Carpenter <dan.carpenter@oracle.com>
rsi: fix error code in rsi_load_9116_firmware()
Bob Peterson <rpeterso@redhat.com>
gfs2: init system threads before freeze lock
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: hix5hd2: fix IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: s3c2410: fix IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: iop3xx: fix deferred probing
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: add timeout sanity check to hci_inquiry
Kevin Mitchell <kevmitch@arista.com>
lkdtm: replace SCSI_DISPATCH_CMD with SCSI_QUEUE_RQ
Xu Yu <xuyu@linux.alibaba.com>
mm/swap: consider max pages in iomap_swapfile_add_extent
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: gadget: mv_u3d: request_irq() after initializing UDC
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
Shengjiu Wang <shengjiu.wang@nxp.com>
ASoC: fsl_rpmsg: Check -EPROBE_DEFER for getting clocks
Lukas Bulwahn <lukas.bulwahn@gmail.com>
hwmon: remove amd_energy driver in Makefile
Chris Packham <chris.packham@alliedtelesis.co.nz>
hwmon: (pmbus/bpa-rs600) Don't use rated limits as warn limits
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: synquacer: fix deferred probing
Lukas Bulwahn <lukas.bulwahn@gmail.com>
clk: staging: correct reference to config IOMEM to config HAS_IOMEM
Pali Rohár <pali@kernel.org>
arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
J. Bruce Fields <bfields@redhat.com>
nfsd4: Fix forced-expiry locking
Chuck Lever <chuck.lever@oracle.com>
SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency()
Benjamin Coddington <bcodding@redhat.com>
lockd: Fix invalid lockowner cast after vfs_test_lock
Thomas Gleixner <tglx@linutronix.de>
locking/local_lock: Add missing owner initialization
Chih-Kang Chang <gary.chang@realtek.com>
mac80211: Fix insufficient headroom issue for AMSDU
Andrii Nakryiko <andrii@kernel.org>
libbpf: Re-build libbpf.so when libbpf.map changes
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: tahvo: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: host: ohci-tmio: add IRQ check
Valentin Schneider <valentin.schneider@arm.com>
PM: cpu: Make notifier chain use a raw_spinlock_t
Kai-Heng Feng <kai.heng.feng@canonical.com>
Bluetooth: Move shutdown callback before flushing tx and rx queue
Voon Weifeng <weifeng.voon@intel.com>
net: stmmac: fix INTR TBU status affecting irq count statistic
Juhee Kang <claudiajkang@gmail.com>
samples: pktgen: add missing IPv6 option to pktgen scripts
Leon Romanovsky <leon@kernel.org>
devlink: Clear whole devlink_flash_notify struct
Ilya Leoshkevich <iii@linux.ibm.com>
selftests/bpf: Fix test_core_autosize on big-endian machines
Geert Uytterhoeven <geert+renesas@glider.be>
usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: twl6030: add IRQ checks
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: fsl-usb: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: misc: brcmstb-usb-pinmap: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: gadget: udc: s3c2410: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: gadget: udc: at91: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: dwc3: qcom: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: dwc3: meson-g12a: add IRQ check
Douglas Anderson <dianders@chromium.org>
ASoC: rt5682: Properly turn off regulators if wrong device ID
Stephen Boyd <swboyd@chromium.org>
ASoC: rt5682: Implement remove callback
Parav Pandit <parav@nvidia.com>
net/mlx5: Fix unpublish devlink parameters
Kuogee Hsieh <khsieh@codeaurora.org>
drm/msm/dp: replug event is converted into an unplug followed by an plug events
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
drm/msm/dsi: Fix some reference counted resource leaks
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix repeated calls to sco_sock_kill
Curtis Malainey <cujomalainey@chromium.org>
ASoC: Intel: Fix platform ID matching
Waiman Long <longman@redhat.com>
cgroup/cpuset: Fix violation of cpuset locking rule
Waiman Long <longman@redhat.com>
cgroup/cpuset: Miscellaneous code cleanup
William Breathitt Gray <vilhelm.gray@gmail.com>
counter: 104-quad-8: Return error when invalid mode during ceiling_write
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
Kuogee Hsieh <khsieh@codeaurora.org>
drm/msm/dp: update is_connected status base on sink count at dp_pm_resume()
David Heidelberg <david@ixit.cz>
drm/msm/mdp4: move HW revision detection to earlier phase
David Heidelberg <david@ixit.cz>
drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
leds: lgm-sso: Propagate error codes from callee to caller
Jose Blanquicet <josebl@microsoft.com>
selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP
Lukasz Luba <lukasz.luba@arm.com>
PM: EM: Increase energy calculation precision
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: don't disable multicast flooding to the CPU even without an IGMP querier
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: mt7530: remove the .port_set_mrouter implementation
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: stop syncing the bridge mcast_router attribute at join time
Vignesh Raghavendra <vigneshr@ti.com>
net: ti: am65-cpsw-nuss: fix RX IRQ state after .ndo_stop()
Colin Ian King <colin.king@canonical.com>
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Sven Eckelmann <sven@narfation.org>
debugfs: Return error during {full/open}_proxy_open() on rmmod
Stephan Gerhold <stephan@gerhold.net>
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Matthew Cover <werekraken@gmail.com>
bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Enable PME if it can be signaled from D3cold
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
CK Hu <ck.hu@mediatek.com>
soc: mmsys: mediatek: add mask to mmsys routes
Mansur Alisha Shaik <mansur@codeaurora.org>
media: venus: helper: do not set constrained parameters for UBWC
Colin Ian King <colin.king@canonical.com>
media: venus: venc: Fix potential null pointer dereference on pointer fmt
Zhen Lei <thunder.leizhen@huawei.com>
media: venus: hfi: fix return value check in sys_get_prop_image_version()
Wei Yongjun <weiyongjun1@huawei.com>
media: omap3isp: Fix missing unlock in isp_subdev_notifier_complete()
Dongliang Mu <mudongliangabcd@gmail.com>
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Hans de Goede <hdegoede@redhat.com>
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
Andy Shevchenko <andy.shevchenko@gmail.com>
leds: rt8515: Put fwnode in any case during ->probe()
Andy Shevchenko <andy.shevchenko@gmail.com>
leds: lt3593: Put fwnode in any case during ->probe()
Andy Shevchenko <andy.shevchenko@gmail.com>
leds: lgm-sso: Don't spam logs when probe is deferred
Andy Shevchenko <andy.shevchenko@gmail.com>
leds: lgm-sso: Put fwnode in any case during ->probe()
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: highlander: add IRQ check
Jiapeng Chong <jiapeng.chong@linux.alibaba.com>
net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set()
Leon Romanovsky <leon@kernel.org>
devlink: Break parameter notification sequence to be before/after unload/load driver
Biju Das <biju.das.jz@bp.renesas.com>
arm64: dts: renesas: hihope-rzg2-ex: Add EtherAVB internal rx delay
Quentin Monnet <quentin@isovalent.com>
tools: Free BTF objects at various locations
Tedd Ho-Jeong An <tedd.an@intel.com>
Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
drm: rcar-du: Don't put reference to drm_device in rcar_du_remove()
Leon Romanovsky <leon@kernel.org>
net: ti: am65-cpsw-nuss: fix wrong devlink release order
Pavel Skripkin <paskripkin@gmail.com>
net: cipso: fix warnings in netlbl_cipsov4_add_std
Marek Vasut <marex@denx.de>
drm: mxsfb: Clear FIFO_CLEAR bit
Marek Vasut <marex@denx.de>
drm: mxsfb: Increase number of outstanding requests on V4 and newer HW
Marek Vasut <marex@denx.de>
drm: mxsfb: Enable recovery on underflow
Waiman Long <longman@redhat.com>
cgroup/cpuset: Fix a partition bug with hotplug
Maxim Mikityanskiy <maximmi@nvidia.com>
net/mlx5e: Block LRO if firmware asks for tunneled LRO
Maxim Mikityanskiy <maximmi@nvidia.com>
net/mlx5e: Prohibit inner indir TIRs in IPoIB
Anand Moon <linux.amoon@gmail.com>
ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
Martin Blumenstingl <martin.blumenstingl@googlemail.com>
ARM: dts: meson8: Use a higher default GPU clock frequency
Martin KaFai Lau <kafai@fb.com>
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Kai-Heng Feng <kai.heng.feng@canonical.com>
drm/amdgpu/acp: Make PM domain really work
Colin Ian King <colin.king@canonical.com>
6lowpan: iphc: Fix an off-by-one check of array index
Jun Miao <jun.miao@windriver.com>
Bluetooth: btusb: Fix a unspported condition to set available debug features
Dan Carpenter <dan.carpenter@oracle.com>
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
Yizhuo <yzhai003@ucr.edu>
media: atomisp: fix the uninitialized use and rename "retvalue"
Philipp Zabel <p.zabel@pengutronix.de>
media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
Dan Carpenter <dan.carpenter@oracle.com>
media: rockchip/rga: fix error handling in probe
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: rockchip/rga: use pm_runtime_resume_and_get()
Pavel Skripkin <paskripkin@gmail.com>
media: go7007: remove redundant initialization
Pavel Skripkin <paskripkin@gmail.com>
media: go7007: fix memory leak in go7007_usb_probe
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: Fix error handling in dvb_usb_i2c_init
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
Leon Romanovsky <leon@kernel.org>
ionic: cleanly release devlink instance
Zhen Lei <thunder.leizhen@huawei.com>
driver core: Fix error return code in really_probe()
Zhen Lei <thunder.leizhen@huawei.com>
firmware: fix theoretical UAF race with firmware cache and resume
John Fastabend <john.fastabend@gmail.com>
bpf, selftests: Fix test_maps now that sockmap supports UDP
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
arm64: dts: qcom: sm8250: fix usb2 qmp phy node
Colin Ian King <colin.king@canonical.com>
gfs2: Fix memory leak of object lsi on error return path
Martynas Pumputis <m@lambda.lt>
libbpf: Fix removal of inner map in bpf_object__create_map
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Use corner in power_off
Judy Hsiao <judyhsiao@chromium.org>
arm64: dts: qcom: sc7180: Set adau wakeup delay to 80 ms
Stefan Assmann <sassmann@kpanic.de>
i40e: improve locking of mac_filter_hash
Geert Uytterhoeven <geert@linux-m68k.org>
arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
Dylan Hung <dylan_hung@aspeedtech.com>
ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
Shuyi Cheng <chengshuyi@linux.alibaba.com>
libbpf: Fix the possible memory leak on error
Haiyue Wang <haiyue.wang@intel.com>
gve: fix the wrong AdminQ buffer overflow check
Steven Price <steven.price@arm.com>
drm/of: free the iterator object on failure
He Fengqing <hefengqing@huawei.com>
bpf: Fix potential memleak and UAF in the verifier.
Kuniyuki Iwashima <kuniyu@amazon.co.jp>
bpf: Fix a typo of reuseport map in bpf.h.
Julia Lawall <Julia.Lawall@inria.fr>
drm/of: free the right object
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: cxd2880-spi: Fix an error handling path
Geert Uytterhoeven <geert+renesas@glider.be>
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
Jiapeng Chong <jiapeng.chong@linux.alibaba.com>
leds: is31fl32xx: Fix missing error code in is31fl32xx_parse_dt()
Krzysztof Hałasa <khalasa@piap.pl>
media: TDA1997x: enable EDID support
Zhang Qilong <zhangqilong3@huawei.com>
ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe
Zhang Qilong <zhangqilong3@huawei.com>
ASoC: mediatek: mt8192:Fix Unbalanced pm_runtime_enable in mt8192_afe_pcm_dev_probe
Harshvardhan Jha <harshvardhan.jha@oracle.com>
drm/gma500: Fix end of loop tests for list_for_each_entry
Wei Yongjun <weiyongjun1@huawei.com>
drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init()
Qiuxu Zhuo <qiuxu.zhuo@intel.com>
EDAC/i10nm: Fix NVDIMM detection
Lukas Bulwahn <lukas.bulwahn@gmail.com>
crypto: rmd320 - remove rmd320 in Makefile
Quanyang Wang <quanyang.wang@windriver.com>
spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible
Chunyan Zhang <chunyan.zhang@unisoc.com>
spi: sprd: Fix the wrong WDG_LOAD_VAL
Chen-Yu Tsai <wenst@chromium.org>
regulator: vctrl: Avoid lockdep warning in enable/disable ops
Chen-Yu Tsai <wenst@chromium.org>
regulator: vctrl: Use locked regulator_get_voltage in probe path
Eric Biggers <ebiggers@google.com>
blk-crypto: fix check for too-large dun_bytes
Matija Glavinic Pecotic <matija.glavinic-pecotic.ext@nokia.com>
spi: davinci: invoke chipselect callback
Borislav Petkov <bp@alien8.de>
x86/mce: Defer processing of early errors
Pavel Begunkov <asml.silence@gmail.com>
io_uring: refactor io_submit_flush_completions()
Stefan Berger <stefanb@linux.ibm.com>
tpm: ibmvtpm: Avoid error message when process gets signal while waiting
Stefan Berger <stefanb@linux.ibm.com>
certs: Trigger creation of RSA module signing key if it's not an RSA key
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - use proper type for vf_mask
Chen-Yu Tsai <wenst@chromium.org>
irqchip/gic-v3: Fix priority comparison when non-secure priorities are used
Sven Peter <sven@svenpeter.dev>
irqchip/apple-aic: Fix irq_disable from within irq handlers
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
spi: coldfire-qspi: Use clk_disable_unprepare in the remove function
Pavel Skripkin <paskripkin@gmail.com>
block: nbd: add sanity check for first_minor
Phong Hoang <phong.hoang.wz@renesas.com>
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Hongbo Li <herberthbli@tencent.com>
lib/mpi: use kcalloc in mpi_resize
Huacai Chen <chenhuacai@kernel.org>
irqchip/loongson-pch-pic: Improve edge triggered interrupt support
Zhen Lei <thunder.leizhen@huawei.com>
genirq/timings: Fix error return code in irq_timings_test_irqs()
Tony Lindgren <tony@atomide.com>
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
Ming Lei <ming.lei@redhat.com>
block: return ELEVATOR_DISCARD_MERGE if possible
Geert Uytterhoeven <geert@linux-m68k.org>
m68k: Fix invalid RMW_INSNS on CPUs that lack CAS
Yanfei Xu <yanfei.xu@windriver.com>
rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
Yanfei Xu <yanfei.xu@windriver.com>
rcu: Fix to include first blocked task in stall warning
Quentin Perret <qperret@google.com>
sched: Fix UCLAMP_FLAG_IDLE setting
Mika Penttilä <mika.penttila@gmail.com>
sched/numa: Fix is_core_idle()
Mian Yousaf Kaukab <ykaukab@suse.de>
crypto: ecc - handle unaligned input buffer in ecc_swap_digits
Ard Biesheuvel <ardb@kernel.org>
crypto: x86/aes-ni - add missing error checks in XTS code
Pavel Skripkin <paskripkin@gmail.com>
m68k: emu: Fix invalid free in nfeth_cleanup()
Peter Robinson <pbrobinson@gmail.com>
power: supply: cw2015: use dev_err_probe to allow deferred probe
Valentin Schneider <valentin.schneider@arm.com>
sched/debug: Don't update sched_domain debug directories before sched_debug_init()
Harald Freudenberger <freude@linux.ibm.com>
s390/ap: fix state machine hang after failure to enable irq
Peter Oberparleiter <oberpar@linux.ibm.com>
s390/debug: fix debug area life cycle
Peter Oberparleiter <oberpar@linux.ibm.com>
s390/debug: keep debug data on resize
Niklas Schnelle <schnelle@linux.ibm.com>
s390/pci: fix misleading rc in clp_set_pci_fn()
Alexander Gordeev <agordeev@linux.ibm.com>
s390/kasan: fix large PMD pages address alignment check
Jens Axboe <axboe@kernel.dk>
io-wq: remove GFP_ATOMIC allocation off schedule out path
Stian Skjelstad <stian.skjelstad@gmail.com>
udf_get_extendedattr() had no boundary checks.
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
fcntl: fix potential deadlock for &fasync_struct.fa_lock
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
fcntl: fix potential deadlocks for &fown_struct.lock
Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
crypto: tcrypt - Fix missing return value check
Kai Ye <yekai13@huawei.com>
crypto: hisilicon/sec - modify the hardware endian configuration
Kai Ye <yekai13@huawei.com>
crypto: hisilicon/sec - fix the abnormal exiting process
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not export adf_iov_putmsg()
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix reuse of completion variable
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - handle both source of interrupt in VF ISR
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not ignore errors from enable_vf2pf_comms()
Ben Hutchings <ben.hutchings@mind.be>
crypto: omap - Fix inconsistent locking of device lists
Valentin Schneider <valentin.schneider@arm.com>
sched/topology: Skip updating masks for non-online nodes
Damien Le Moal <damien.lemoal@wdc.com>
libata: fix ata_host_start()
Harald Freudenberger <freude@linux.ibm.com>
s390/zcrypt: fix wrong offset index for APKA master key valid state
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: add dev_busid sysfs entry for each subchannel
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Dmitry Osipenko <digetx@gmail.com>
power: supply: smb347-charger: Add missing pin control activation
Amit Engel <amit.engel@dell.com>
nvmet: pass back cntlid on successful completion
Ruozhu Li <liruozhu@huawei.com>
nvme-rdma: don't update queue count when failing to set io queues
Ruozhu Li <liruozhu@huawei.com>
nvme-tcp: don't update queue count when failing to set io queues
Chunguang Xu <brookxu@tencent.com>
blk-throtl: optimize IOPS throttle for large IO scenarios
Baokun Li <libaokun1@huawei.com>
nbd: add the check to prevent overflow in __nbd_ioctl()
Christoph Hellwig <hch@lst.de>
bcache: add proper error unwinding in bcache_device_init
Pali Rohár <pali@kernel.org>
isofs: joliet: Fix iocharset=utf8 mount option
Pali Rohár <pali@kernel.org>
udf: Fix iocharset=utf8 mount option
Jan Kara <jack@suse.cz>
udf: Check LVID earlier
Thomas Gleixner <tglx@linutronix.de>
hrtimer: Ensure timerfd notification for HIGHRES=n
Thomas Gleixner <tglx@linutronix.de>
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
Frederic Weisbecker <frederic@kernel.org>
posix-cpu-timers: Force next expiration recalc after itimer reset
Smita Koralahalli <Smita.KoralahalliChannabasappa@amd.com>
EDAC/mce_amd: Do not load edac_mce_amd module on guests
Sergey Senozhatsky <senozhatsky@chromium.org>
rcu/tree: Handle VM stoppage in stall detection
Dietmar Eggemann <dietmar.eggemann@arm.com>
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
Tony Lindgren <tony@atomide.com>
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
Hans de Goede <hdegoede@redhat.com>
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
Quentin Perret <qperret@google.com>
sched/deadline: Fix reset_on_fork reporting of DL tasks
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Check for DMA mapping errors
Dmitry Osipenko <digetx@gmail.com>
regulator: tps65910: Silence deferred probe error
Jeongtae Park <jeongtae.park@gmail.com>
regmap: fix the offset of register error log
Peter Zijlstra <peterz@infradead.org>
locking/mutex: Fix HANDOFF condition
-------------
Diffstat:
Documentation/fault-injection/provoke-crashes.rst | 2 +-
Makefile | 4 +-
arch/arm/boot/dts/aspeed-g6-pinctrl.dtsi | 4 +-
arch/arm/boot/dts/at91-sam9x60ek.dts | 16 +-
arch/arm/boot/dts/at91-sama5d3_xplained.dts | 29 ++++
arch/arm/boot/dts/at91-sama5d4_xplained.dts | 19 +++
arch/arm/boot/dts/meson8.dtsi | 5 +
arch/arm/boot/dts/meson8b-ec100.dts | 4 +-
arch/arm/boot/dts/meson8b-mxq.dts | 4 +-
arch/arm/boot/dts/meson8b-odroidc1.dts | 4 +-
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2 +-
.../boot/dts/marvell/armada-3720-turris-mox.dts | 17 ++
arch/arm64/boot/dts/marvell/armada-37xx.dtsi | 11 +-
.../arm64/boot/dts/qcom/sc7180-trogdor-coachz.dtsi | 2 +-
arch/arm64/boot/dts/qcom/sm8250.dtsi | 2 +-
arch/arm64/boot/dts/renesas/hihope-rzg2-ex.dtsi | 1 +
arch/arm64/boot/dts/renesas/r8a77995-draak.dts | 4 -
arch/arm64/kvm/arm.c | 7 +
arch/m68k/Kconfig.cpu | 8 +-
arch/m68k/coldfire/clk.c | 2 +-
arch/m68k/emu/nfeth.c | 4 +-
arch/s390/include/asm/kvm_host.h | 1 +
arch/s390/kernel/debug.c | 176 +++++++++++++--------
arch/s390/kvm/interrupt.c | 12 +-
arch/s390/kvm/kvm-s390.c | 2 +-
arch/s390/kvm/kvm-s390.h | 2 +-
arch/s390/mm/kasan_init.c | 41 +++--
arch/s390/pci/pci.c | 7 +-
arch/s390/pci/pci_clp.c | 33 ++--
arch/x86/boot/compressed/efi_thunk_64.S | 30 ++--
arch/x86/boot/compressed/head_64.S | 3 +
arch/x86/crypto/aesni-intel_glue.c | 5 +
arch/x86/events/amd/ibs.c | 1 +
arch/x86/include/asm/mce.h | 1 +
arch/x86/kernel/cpu/mce/core.c | 11 +-
arch/x86/kernel/cpu/resctrl/monitor.c | 6 +
arch/x86/kvm/mmu/mmu.c | 19 +--
arch/x86/kvm/mmu/tdp_mmu.c | 20 ++-
arch/x86/kvm/vmx/nested.c | 7 +-
arch/x86/kvm/vmx/vmx.c | 3 +
arch/x86/kvm/x86.c | 4 +
block/bfq-iosched.c | 3 +
block/bio.c | 15 +-
block/blk-crypto.c | 2 +-
block/blk-merge.c | 18 +--
block/blk-throttle.c | 32 ++++
block/blk.h | 2 +
block/elevator.c | 3 +
block/mq-deadline.c | 2 +
certs/Makefile | 8 +
crypto/Makefile | 1 -
crypto/ecc.h | 5 +-
crypto/tcrypt.c | 29 ++--
drivers/ata/libata-core.c | 2 +-
drivers/auxdisplay/hd44780.c | 2 +-
drivers/base/dd.c | 16 +-
drivers/base/firmware_loader/main.c | 20 +--
drivers/base/regmap/regmap.c | 2 +-
drivers/bcma/main.c | 6 +-
drivers/block/nbd.c | 16 +-
drivers/bluetooth/btusb.c | 18 ++-
drivers/char/tpm/Kconfig | 1 -
drivers/char/tpm/tpm_ibmvtpm.c | 26 +--
drivers/char/tpm/tpm_ibmvtpm.h | 2 +-
drivers/clk/mvebu/kirkwood.c | 1 +
drivers/clocksource/sh_cmt.c | 30 ++--
drivers/counter/104-quad-8.c | 5 +-
drivers/crypto/hisilicon/sec2/sec.h | 5 -
drivers/crypto/hisilicon/sec2/sec_main.c | 34 ++--
drivers/crypto/mxs-dcp.c | 45 ++++--
drivers/crypto/omap-aes.c | 8 +-
drivers/crypto/omap-des.c | 8 +-
drivers/crypto/omap-sham.c | 14 +-
.../crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_common/adf_common_drv.h | 8 +-
drivers/crypto/qat/qat_common/adf_init.c | 5 +-
drivers/crypto/qat/qat_common/adf_isr.c | 7 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3 +-
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12 +-
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7 +-
.../qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4 +-
drivers/edac/i10nm_base.c | 6 +-
drivers/edac/mce_amd.c | 3 +
drivers/firmware/raspberrypi.c | 10 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 54 +++----
drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c | 4 +-
drivers/gpu/drm/drm_of.c | 6 +-
drivers/gpu/drm/gma500/oaktrail_lvds.c | 2 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 10 +-
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 68 ++++----
drivers/gpu/drm/msm/dp/dp_display.c | 31 ++--
drivers/gpu/drm/msm/dsi/dsi.c | 6 +-
drivers/gpu/drm/mxsfb/mxsfb_drv.c | 3 +
drivers/gpu/drm/mxsfb/mxsfb_drv.h | 1 +
drivers/gpu/drm/mxsfb/mxsfb_kms.c | 40 +++++
drivers/gpu/drm/mxsfb/mxsfb_regs.h | 9 ++
drivers/gpu/drm/panfrost/panfrost_device.c | 3 +-
drivers/gpu/drm/rcar-du/rcar_du_drv.c | 2 -
drivers/hwmon/Makefile | 1 -
drivers/hwmon/pmbus/bpa-rs600.c | 25 ---
drivers/i2c/busses/i2c-highlander.c | 2 +-
drivers/i2c/busses/i2c-hix5hd2.c | 2 +-
drivers/i2c/busses/i2c-iop3xx.c | 6 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-s3c2410.c | 2 +-
drivers/i2c/busses/i2c-synquacer.c | 2 +-
drivers/i2c/busses/i2c-xlp9xx.c | 2 +-
drivers/infiniband/hw/mlx5/mr.c | 2 +-
drivers/irqchip/irq-apple-aic.c | 2 +-
drivers/irqchip/irq-gic-v3.c | 23 ++-
drivers/irqchip/irq-loongson-pch-pic.c | 19 ++-
drivers/leds/blink/leds-lgm-sso.c | 23 ++-
drivers/leds/flash/leds-rt8515.c | 4 +-
drivers/leds/leds-is31fl32xx.c | 1 +
drivers/leds/leds-lt3593.c | 5 +-
drivers/leds/trigger/ledtrig-audio.c | 37 ++++-
drivers/md/bcache/super.c | 16 +-
drivers/md/raid1.c | 19 +++
drivers/md/raid10.c | 14 +-
drivers/media/i2c/tda1997x.c | 1 +
drivers/media/platform/coda/coda-bit.c | 18 ++-
drivers/media/platform/omap3isp/isp.c | 4 +-
drivers/media/platform/qcom/venus/helpers.c | 3 +
drivers/media/platform/qcom/venus/hfi_msgs.c | 2 +-
drivers/media/platform/qcom/venus/venc.c | 2 +
drivers/media/platform/rockchip/rga/rga-buf.c | 3 +-
drivers/media/platform/rockchip/rga/rga.c | 29 +++-
drivers/media/spi/cxd2880-spi.c | 7 +-
drivers/media/usb/dvb-usb/dvb-usb-i2c.c | 9 +-
drivers/media/usb/dvb-usb/dvb-usb-init.c | 2 +-
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6 +-
drivers/media/usb/dvb-usb/vp702x.c | 12 +-
drivers/media/usb/em28xx/em28xx-input.c | 1 -
drivers/media/usb/go7007/go7007-driver.c | 26 ---
drivers/media/usb/go7007/go7007-usb.c | 2 +-
drivers/misc/lkdtm/core.c | 2 +-
drivers/mmc/host/dw_mmc.c | 1 +
drivers/mmc/host/moxart-mmc.c | 1 +
drivers/mmc/host/sdhci.c | 1 +
drivers/net/dsa/b53/b53_common.c | 10 --
drivers/net/dsa/b53/b53_priv.h | 2 -
drivers/net/dsa/bcm_sf2.c | 1 -
drivers/net/dsa/mt7530.c | 13 --
drivers/net/dsa/mv88e6xxx/chip.c | 18 ---
.../net/ethernet/aquantia/atlantic/aq_pci_func.c | 3 +
drivers/net/ethernet/google/gve/gve_adminq.c | 6 +-
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 23 ++-
drivers/net/ethernet/intel/ice/ice_main.c | 13 +-
drivers/net/ethernet/marvell/octeontx2/af/common.h | 2 -
.../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 31 ++--
.../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 22 +--
.../ethernet/marvell/octeontx2/nic/otx2_common.c | 16 +-
.../ethernet/marvell/octeontx2/nic/otx2_common.h | 3 +
.../ethernet/marvell/octeontx2/nic/otx2_flows.c | 1 +
.../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/dev.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 1 +
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 6 -
drivers/net/ethernet/mellanox/mlx5/core/en/qos.c | 15 +-
drivers/net/ethernet/mellanox/mlx5/core/en/qos.h | 4 +-
.../ethernet/mellanox/mlx5/core/en/tc_tun_encap.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 10 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 18 ++-
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 18 +++
.../ethernet/mellanox/mlx5/core/esw/indir_table.c | 1 +
.../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 5 +-
.../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 18 +--
.../net/ethernet/pensando/ionic/ionic_devlink.c | 14 +-
drivers/net/ethernet/qualcomm/qca_spi.c | 2 +-
drivers/net/ethernet/qualcomm/qca_uart.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/dwmac4_lib.c | 5 +-
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 47 +++---
drivers/net/ethernet/ti/am65-cpsw-nuss.h | 2 +
drivers/net/phy/marvell10g.c | 8 +
drivers/net/wireless/ath/ath6kl/wmi.c | 4 +-
.../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 2 +-
drivers/net/wireless/intel/iwlwifi/fw/acpi.c | 14 +-
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 1 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 4 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 1 +
drivers/nvme/host/rdma.c | 4 +-
drivers/nvme/host/tcp.c | 4 +-
drivers/nvme/target/fabrics-cmd.c | 9 +-
drivers/pci/pci.c | 25 ++-
drivers/power/supply/axp288_fuel_gauge.c | 4 +-
drivers/power/supply/cw2015_battery.c | 4 +-
drivers/power/supply/max17042_battery.c | 2 +-
drivers/power/supply/smb347-charger.c | 10 ++
drivers/regulator/tps65910-regulator.c | 10 +-
drivers/regulator/vctrl-regulator.c | 73 +++++----
drivers/s390/cio/css.c | 17 ++
drivers/s390/crypto/ap_bus.c | 25 +--
drivers/s390/crypto/ap_bus.h | 10 +-
drivers/s390/crypto/ap_queue.c | 20 +--
drivers/s390/crypto/zcrypt_ccamisc.c | 8 +-
drivers/soc/mediatek/mt8183-mmsys.h | 21 ++-
drivers/soc/mediatek/mtk-mmsys.c | 7 +-
drivers/soc/mediatek/mtk-mmsys.h | 133 +++++++++++-----
drivers/soc/qcom/rpmhpd.c | 5 +-
drivers/soc/qcom/smsm.c | 11 +-
drivers/soc/rockchip/Kconfig | 4 +-
drivers/spi/spi-coldfire-qspi.c | 2 +-
drivers/spi/spi-davinci.c | 8 +-
drivers/spi/spi-fsl-dspi.c | 1 +
drivers/spi/spi-pic32.c | 1 +
drivers/spi/spi-sprd-adi.c | 2 +-
drivers/spi/spi-zynq-qspi.c | 8 +-
drivers/staging/clocking-wizard/Kconfig | 2 +-
.../staging/media/atomisp/i2c/atomisp-mt9m114.c | 11 +-
drivers/tty/serial/fsl_lpuart.c | 2 +-
drivers/tty/tty_io.c | 4 +-
drivers/usb/dwc3/dwc3-meson-g12a.c | 2 +
drivers/usb/dwc3/dwc3-qcom.c | 4 +
drivers/usb/gadget/udc/at91_udc.c | 4 +-
drivers/usb/gadget/udc/bdc/bdc_core.c | 30 ++--
drivers/usb/gadget/udc/mv_u3d_core.c | 19 +--
drivers/usb/gadget/udc/renesas_usb3.c | 17 +-
drivers/usb/gadget/udc/s3c2410_udc.c | 4 +
drivers/usb/host/ehci-orion.c | 8 +-
drivers/usb/host/ohci-tmio.c | 3 +
drivers/usb/misc/brcmstb-usb-pinmap.c | 2 +
drivers/usb/phy/phy-fsl-usb.c | 2 +
drivers/usb/phy/phy-tahvo.c | 4 +-
drivers/usb/phy/phy-twl6030-usb.c | 5 +
drivers/video/backlight/pwm_bl.c | 54 ++++---
drivers/video/fbdev/core/fbmem.c | 6 +
fs/cifs/cifs_unicode.c | 9 +-
fs/cifs/fs_context.c | 11 +-
fs/cifs/readdir.c | 23 ++-
fs/debugfs/file.c | 8 +-
fs/f2fs/file.c | 5 +-
fs/f2fs/super.c | 11 +-
fs/fcntl.c | 18 ++-
fs/fuse/file.c | 30 +++-
fs/fuse/fuse_i.h | 19 +++
fs/fuse/inode.c | 60 +++++++
fs/gfs2/ops_fstype.c | 43 +++++
fs/gfs2/super.c | 61 +------
fs/io-wq.c | 105 ++++++++----
fs/io_uring.c | 16 +-
fs/iomap/swapfile.c | 6 +
fs/isofs/inode.c | 27 ++--
fs/isofs/isofs.h | 1 -
fs/isofs/joliet.c | 4 +-
fs/lockd/svclock.c | 2 +-
fs/nfsd/nfs4state.c | 4 +-
fs/udf/misc.c | 13 +-
fs/udf/super.c | 75 ++++-----
fs/udf/udf_sb.h | 2 -
fs/udf/unicode.c | 4 +-
include/linux/blkdev.h | 16 ++
include/linux/energy_model.h | 16 ++
include/linux/hrtimer.h | 5 -
include/linux/local_lock_internal.h | 42 ++---
include/linux/mlx5/mlx5_ifc.h | 3 +-
include/linux/power/max17042_battery.h | 2 +-
include/linux/sunrpc/svc.h | 1 +
include/linux/time64.h | 9 +-
include/net/dsa.h | 2 -
include/net/pkt_cls.h | 3 +-
include/trace/events/io_uring.h | 6 +-
include/trace/events/sunrpc.h | 8 +-
include/uapi/linux/bpf.h | 2 +-
kernel/bpf/verifier.c | 31 ++--
kernel/cgroup/cpuset.c | 95 ++++++-----
kernel/cpu_pm.c | 50 ++++--
kernel/irq/timings.c | 2 +
kernel/locking/mutex.c | 15 +-
kernel/power/energy_model.c | 4 +-
kernel/rcu/tree_stall.h | 26 ++-
kernel/sched/core.c | 25 ++-
kernel/sched/deadline.c | 8 +-
kernel/sched/debug.c | 7 +
kernel/sched/fair.c | 2 +-
kernel/sched/sched.h | 2 +
kernel/sched/topology.c | 65 ++++++++
kernel/time/hrtimer.c | 92 ++++++++---
kernel/time/posix-cpu-timers.c | 2 -
kernel/time/tick-internal.h | 3 +
lib/mpi/mpiutil.c | 2 +-
net/6lowpan/debugfs.c | 3 +-
net/bluetooth/cmtp/cmtp.h | 2 +-
net/bluetooth/hci_core.c | 14 ++
net/bluetooth/mgmt.c | 2 +-
net/bluetooth/sco.c | 11 +-
net/core/devlink.c | 36 +++--
net/dsa/dsa_priv.h | 2 -
net/dsa/port.c | 21 ---
net/dsa/slave.c | 6 -
net/ipv4/route.c | 48 ++++--
net/ipv4/tcp_ipv4.c | 5 +-
net/ipv6/route.c | 5 +-
net/mac80211/tx.c | 4 +-
net/netlabel/netlabel_cipso_v4.c | 8 +-
net/qrtr/qrtr.c | 8 +-
net/sched/sch_cbq.c | 2 +-
net/sched/sch_htb.c | 97 ++++++++----
net/sunrpc/svc.c | 15 ++
samples/bpf/xdp_redirect_cpu_user.c | 2 +-
samples/pktgen/pktgen_sample04_many_flows.sh | 12 +-
samples/pktgen/pktgen_sample05_flow_per_thread.sh | 12 +-
security/integrity/ima/Kconfig | 1 -
security/integrity/ima/ima_mok.c | 2 +-
sound/soc/codecs/rt5682-i2c.c | 20 +++
sound/soc/codecs/wcd9335.c | 23 ++-
sound/soc/fsl/fsl_rpmsg.c | 20 +--
sound/soc/intel/boards/kbl_da7219_max98927.c | 55 +------
sound/soc/intel/common/soc-acpi-intel-cml-match.c | 2 +-
sound/soc/intel/common/soc-acpi-intel-kbl-match.c | 2 +-
sound/soc/intel/skylake/skl-topology.c | 25 ++-
sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 43 +++--
sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 27 ++--
tools/bpf/bpftool/prog.c | 5 +-
tools/include/uapi/linux/bpf.h | 2 +-
tools/lib/bpf/Makefile | 10 +-
tools/lib/bpf/libbpf.c | 16 +-
tools/perf/util/bpf-event.c | 4 +-
tools/perf/util/bpf_counter.c | 3 +-
tools/testing/selftests/bpf/prog_tests/btf.c | 1 +
tools/testing/selftests/bpf/progs/bpf_iter_tcp4.c | 2 +-
.../selftests/bpf/progs/test_core_autosize.c | 20 ++-
tools/testing/selftests/bpf/test_maps.c | 4 +-
323 files changed, 2706 insertions(+), 1555 deletions(-)
^ permalink raw reply [relevance 4%]
* [PATCH 5.10 141/236] Bluetooth: fix repeated calls to sco_sock_kill
2021-09-13 13:11 4% [PATCH 5.10 000/236] 5.10.65-rc1 review Greg Kroah-Hartman
2021-09-13 13:12 11% ` [PATCH 5.10 033/236] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
@ 2021-09-13 13:14 11% ` Greg Kroah-Hartman
1 sibling, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:14 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit e1dee2c1de2b4dd00eb44004a4bda6326ed07b59 ]
In commit 4e1a720d0312 ("Bluetooth: avoid killing an already killed
socket"), a check was added to sco_sock_kill to skip killing a socket
if the SOCK_DEAD flag was set.
This was done after a trace for a use-after-free bug showed that the
same sock pointer was being killed twice.
Unfortunately, this check prevents sco_sock_kill from running on any
socket. sco_sock_kill kills a socket only if it's zapped and orphaned,
however sock_orphan announces that the socket is dead before detaching
it. i.e., orphaned sockets have the SOCK_DEAD flag set.
To fix this, we remove the check for SOCK_DEAD, and avoid repeated
calls to sco_sock_kill by removing incorrect calls in:
1. sco_sock_timeout. The socket should not be killed on timeout as
further processing is expected to be done. For example,
sco_sock_connect sets the timer then waits for the socket to be
connected or for an error to be returned.
2. sco_conn_del. This function should clean up resources for the
connection, but the socket itself should be cleaned up in
sco_sock_release.
3. sco_sock_close. Calls to sco_sock_close in sco_sock_cleanup_listen
and sco_sock_release are followed by sco_sock_kill. Hence the
duplicated call should be removed.
Fixes: 4e1a720d0312 ("Bluetooth: avoid killing an already killed socket")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 6 +-----
1 file changed, 1 insertion(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 8ae8af33ae91..600b1832e1dd 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -85,7 +85,6 @@ static void sco_sock_timeout(struct timer_list *t)
sk->sk_state_change(sk);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -177,7 +176,6 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_sock_clear_timer(sk);
sco_chan_del(sk, err);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -394,8 +392,7 @@ static void sco_sock_cleanup_listen(struct sock *parent)
*/
static void sco_sock_kill(struct sock *sk)
{
- if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket ||
- sock_flag(sk, SOCK_DEAD))
+ if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
return;
BT_DBG("sk %p state %d", sk, sk->sk_state);
@@ -447,7 +444,6 @@ static void sco_sock_close(struct sock *sk)
lock_sock(sk);
__sco_sock_close(sk);
release_sock(sk);
- sco_sock_kill(sk);
}
static void sco_skb_put_cmsg(struct sk_buff *skb, struct msghdr *msg,
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.10 000/236] 5.10.65-rc1 review
@ 2021-09-13 13:11 4% Greg Kroah-Hartman
2021-09-13 13:12 11% ` [PATCH 5.10 033/236] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
2021-09-13 13:14 11% ` [PATCH 5.10 141/236] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
0 siblings, 2 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:11 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.10.65 release.
There are 236 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 15 Sep 2021 13:10:21 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.65-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.10.65-rc1
Linus Walleij <linus.walleij@linaro.org>
clk: kirkwood: Fix a clocking boot regression
Daniel Thompson <daniel.thompson@linaro.org>
backlight: pwm_bl: Improve bootloader/kernel device handover
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
fbmem: don't allow too huge resolutions
THOBY Simon <Simon.THOBY@viveris.fr>
IMA: remove the dependency on CRYPTO_MD5
Austin Kim <austin.kim@lge.com>
IMA: remove -Wmissing-prototypes warning
Miklos Szeredi <mszeredi@redhat.com>
fuse: flush extending writes
Miklos Szeredi <mszeredi@redhat.com>
fuse: truncate pagecache on atomic_o_trunc
Claudiu Beznea <claudiu.beznea@microchip.com>
ARM: dts: at91: add pinctrl-{names, 0} for all gpios
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
Maxim Levitsky <mlevitsk@redhat.com>
KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
Zelin Deng <zelin.deng@linux.alibaba.com>
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Halil Pasic <pasic@linux.ibm.com>
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
Sean Christopherson <seanjc@google.com>
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
Babu Moger <babu.moger@amd.com>
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
Kim Phillips <kim.phillips@amd.com>
perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
Nguyen Dinh Phi <phind.uet@gmail.com>
tty: Fix data race between tiocsti() and flush_to_ldisc()
Pavel Begunkov <asml.silence@gmail.com>
bio: fix page leak bio_add_hw_page failure
Jens Axboe <axboe@kernel.dk>
io_uring: IORING_OP_WRITE needs hash_reg_file set
Lukas Hannen <lukas.hannen@opensource.tttech-industrial.com>
time: Handle negative seconds correctly in timespec64_to_ns()
Jaegeuk Kim <jaegeuk@kernel.org>
f2fs: guarantee to write dirty data when enabling checkpoint back
Justin M. Forbes <jforbes@fedoraproject.org>
iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
Douglas Anderson <dianders@chromium.org>
ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
Eric Dumazet <edumazet@google.com>
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
Sunil Goutham <sgoutham@marvell.com>
octeontx2-af: Set proper errorcode for IPv4 checksum errors
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-af: Fix static code analyzer reported issues
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-af: Fix loop in free and unmap counter
Stefan Wahren <stefan.wahren@i2se.com>
net: qualcomm: fix QCA7000 checksum handling
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
Eric Dumazet <edumazet@google.com>
ipv4: make exception cache less predictible
Eric Dumazet <edumazet@google.com>
ipv6: make exception cache less predictible
Ahmad Fatoum <a.fatoum@pengutronix.de>
brcmfmac: pcie: fix oops on failure to resume and reprobe
Zenghui Yu <yuzenghui@huawei.com>
bcma: Fix memory leak for internally-handled cores
Sudarsana Reddy Kalluru <skalluru@marvell.com>
atlantic: Fix driver resume flow.
Dan Carpenter <dan.carpenter@oracle.com>
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
Brett Creeley <brett.creeley@intel.com>
ice: Only lock to update netdev dev_addr
Abhishek Naik <abhishek.naik@intel.com>
iwlwifi: skip first element in the WTAS ACPI table
Emmanuel Grumbach <emmanuel.grumbach@intel.com>
iwlwifi: follow the new inclusive terminology
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: wcd9335: Disable irq on slave ports in the remove function
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: wcd9335: Fix a double irq free in the remove function
Andy Duan <fugang.duan@nxp.com>
tty: serial: fsl_lpuart: fix the wrong mapbase value
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
usb: bdc: Fix a resource leak in the error handling path of 'bdc_probe()'
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
Evgeny Novikov <novikov@ispras.ru>
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: xlp9xx: fix main IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: mt65xx: fix IRQ check
Len Baker <len.baker@gmx.com>
CIFS: Fix a potencially linear read overflow
Andrey Ignatov <rdna@fb.com>
bpf: Fix possible out of bound write in narrow load handling
Tony Lindgren <tony@atomide.com>
mmc: moxart: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
mmc: sdhci: Fix issue with uninitialized dma_slave_config
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: Skylake: Fix module resource and format selection
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373
Dan Carpenter <dan.carpenter@oracle.com>
rsi: fix an error code in rsi_probe()
Dan Carpenter <dan.carpenter@oracle.com>
rsi: fix error code in rsi_load_9116_firmware()
Bob Peterson <rpeterso@redhat.com>
gfs2: init system threads before freeze lock
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: hix5hd2: fix IRQ check
Tian Tao <tiantao6@hisilicon.com>
i2c: fix platform_get_irq.cocci warnings
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: s3c2410: fix IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: iop3xx: fix deferred probing
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: add timeout sanity check to hci_inquiry
Kevin Mitchell <kevmitch@arista.com>
lkdtm: replace SCSI_DISPATCH_CMD with SCSI_QUEUE_RQ
Xu Yu <xuyu@linux.alibaba.com>
mm/swap: consider max pages in iomap_swapfile_add_extent
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: gadget: mv_u3d: request_irq() after initializing UDC
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
Nicolas Saenz Julienne <nsaenzjulienne@suse.de>
firmware: raspberrypi: Keep count of all consumers
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: synquacer: fix deferred probing
Lukas Bulwahn <lukas.bulwahn@gmail.com>
clk: staging: correct reference to config IOMEM to config HAS_IOMEM
Pali Rohár <pali@kernel.org>
arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
J. Bruce Fields <bfields@redhat.com>
nfsd4: Fix forced-expiry locking
Benjamin Coddington <bcodding@redhat.com>
lockd: Fix invalid lockowner cast after vfs_test_lock
Thomas Gleixner <tglx@linutronix.de>
locking/local_lock: Add missing owner initialization
Peter Zijlstra <peterz@infradead.org>
locking/lockdep: Mark local_lock_t
Chih-Kang Chang <gary.chang@realtek.com>
mac80211: Fix insufficient headroom issue for AMSDU
Andrii Nakryiko <andrii@kernel.org>
libbpf: Re-build libbpf.so when libbpf.map changes
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: tahvo: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: host: ohci-tmio: add IRQ check
Valentin Schneider <valentin.schneider@arm.com>
PM: cpu: Make notifier chain use a raw_spinlock_t
Kai-Heng Feng <kai.heng.feng@canonical.com>
Bluetooth: Move shutdown callback before flushing tx and rx queue
Juhee Kang <claudiajkang@gmail.com>
samples: pktgen: add missing IPv6 option to pktgen scripts
Leon Romanovsky <leon@kernel.org>
devlink: Clear whole devlink_flash_notify struct
Ilya Leoshkevich <iii@linux.ibm.com>
selftests/bpf: Fix test_core_autosize on big-endian machines
Geert Uytterhoeven <geert+renesas@glider.be>
usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: twl6030: add IRQ checks
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: fsl-usb: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: gadget: udc: s3c2410: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: gadget: udc: at91: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: dwc3: qcom: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: dwc3: meson-g12a: add IRQ check
Douglas Anderson <dianders@chromium.org>
ASoC: rt5682: Properly turn off regulators if wrong device ID
Stephen Boyd <swboyd@chromium.org>
ASoC: rt5682: Implement remove callback
Parav Pandit <parav@nvidia.com>
net/mlx5: Fix unpublish devlink parameters
Aya Levin <ayal@nvidia.com>
net/mlx5: Register to devlink ingress VLAN filter trap
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
drm/msm/dsi: Fix some reference counted resource leaks
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix repeated calls to sco_sock_kill
Curtis Malainey <cujomalainey@chromium.org>
ASoC: Intel: Fix platform ID matching
Waiman Long <longman@redhat.com>
cgroup/cpuset: Fix violation of cpuset locking rule
Waiman Long <longman@redhat.com>
cgroup/cpuset: Miscellaneous code cleanup
William Breathitt Gray <vilhelm.gray@gmail.com>
counter: 104-quad-8: Return error when invalid mode during ceiling_write
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
David Heidelberg <david@ixit.cz>
drm/msm/mdp4: move HW revision detection to earlier phase
David Heidelberg <david@ixit.cz>
drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision
Jose Blanquicet <josebl@microsoft.com>
selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP
Lukasz Luba <lukasz.luba@arm.com>
PM: EM: Increase energy calculation precision
Colin Ian King <colin.king@canonical.com>
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Sven Eckelmann <sven@narfation.org>
debugfs: Return error during {full/open}_proxy_open() on rmmod
Stephan Gerhold <stephan@gerhold.net>
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Matthew Cover <werekraken@gmail.com>
bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Enable PME if it can be signaled from D3cold
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
Colin Ian King <colin.king@canonical.com>
media: venus: venc: Fix potential null pointer dereference on pointer fmt
Dongliang Mu <mudongliangabcd@gmail.com>
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Hans de Goede <hdegoede@redhat.com>
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
Andy Shevchenko <andy.shevchenko@gmail.com>
leds: lt3593: Put fwnode in any case during ->probe()
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: highlander: add IRQ check
Jiapeng Chong <jiapeng.chong@linux.alibaba.com>
net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set()
Leon Romanovsky <leon@kernel.org>
devlink: Break parameter notification sequence to be before/after unload/load driver
Biju Das <biju.das.jz@bp.renesas.com>
arm64: dts: renesas: hihope-rzg2-ex: Add EtherAVB internal rx delay
Geert Uytterhoeven <geert+renesas@glider.be>
arm64: dts: renesas: rzg2: Convert EtherAVB to explicit delay handling
Tedd Ho-Jeong An <tedd.an@intel.com>
Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
Pavel Skripkin <paskripkin@gmail.com>
net: cipso: fix warnings in netlbl_cipsov4_add_std
Marek Vasut <marex@denx.de>
drm: mxsfb: Clear FIFO_CLEAR bit
Marek Vasut <marex@denx.de>
drm: mxsfb: Increase number of outstanding requests on V4 and newer HW
Marek Vasut <marex@denx.de>
drm: mxsfb: Enable recovery on underflow
Waiman Long <longman@redhat.com>
cgroup/cpuset: Fix a partition bug with hotplug
Maxim Mikityanskiy <maximmi@nvidia.com>
net/mlx5e: Block LRO if firmware asks for tunneled LRO
Maxim Mikityanskiy <maximmi@nvidia.com>
net/mlx5e: Prohibit inner indir TIRs in IPoIB
Anand Moon <linux.amoon@gmail.com>
ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
Martin Blumenstingl <martin.blumenstingl@googlemail.com>
ARM: dts: meson8: Use a higher default GPU clock frequency
Martin KaFai Lau <kafai@fb.com>
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Kai-Heng Feng <kai.heng.feng@canonical.com>
drm/amdgpu/acp: Make PM domain really work
Colin Ian King <colin.king@canonical.com>
6lowpan: iphc: Fix an off-by-one check of array index
Dan Carpenter <dan.carpenter@oracle.com>
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
Yizhuo <yzhai003@ucr.edu>
media: atomisp: fix the uninitialized use and rename "retvalue"
Philipp Zabel <p.zabel@pengutronix.de>
media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
Dan Carpenter <dan.carpenter@oracle.com>
media: rockchip/rga: fix error handling in probe
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
media: rockchip/rga: use pm_runtime_resume_and_get()
Pavel Skripkin <paskripkin@gmail.com>
media: go7007: remove redundant initialization
Pavel Skripkin <paskripkin@gmail.com>
media: go7007: fix memory leak in go7007_usb_probe
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: Fix error handling in dvb_usb_i2c_init
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
Leon Romanovsky <leon@kernel.org>
ionic: cleanly release devlink instance
Zhen Lei <thunder.leizhen@huawei.com>
driver core: Fix error return code in really_probe()
Zhen Lei <thunder.leizhen@huawei.com>
firmware: fix theoretical UAF race with firmware cache and resume
Colin Ian King <colin.king@canonical.com>
gfs2: Fix memory leak of object lsi on error return path
Martynas Pumputis <m@lambda.lt>
libbpf: Fix removal of inner map in bpf_object__create_map
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Use corner in power_off
Stefan Assmann <sassmann@kpanic.de>
i40e: improve locking of mac_filter_hash
Geert Uytterhoeven <geert@linux-m68k.org>
arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
Dylan Hung <dylan_hung@aspeedtech.com>
ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
Shuyi Cheng <chengshuyi@linux.alibaba.com>
libbpf: Fix the possible memory leak on error
Haiyue Wang <haiyue.wang@intel.com>
gve: fix the wrong AdminQ buffer overflow check
Steven Price <steven.price@arm.com>
drm/of: free the iterator object on failure
He Fengqing <hefengqing@huawei.com>
bpf: Fix potential memleak and UAF in the verifier.
Kuniyuki Iwashima <kuniyu@amazon.co.jp>
bpf: Fix a typo of reuseport map in bpf.h.
Julia Lawall <Julia.Lawall@inria.fr>
drm/of: free the right object
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: cxd2880-spi: Fix an error handling path
Geert Uytterhoeven <geert+renesas@glider.be>
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
Jiapeng Chong <jiapeng.chong@linux.alibaba.com>
leds: is31fl32xx: Fix missing error code in is31fl32xx_parse_dt()
Krzysztof Hałasa <khalasa@piap.pl>
media: TDA1997x: enable EDID support
Zhang Qilong <zhangqilong3@huawei.com>
ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe
Harshvardhan Jha <harshvardhan.jha@oracle.com>
drm/gma500: Fix end of loop tests for list_for_each_entry
Wei Yongjun <weiyongjun1@huawei.com>
drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init()
Qiuxu Zhuo <qiuxu.zhuo@intel.com>
EDAC/i10nm: Fix NVDIMM detection
Quanyang Wang <quanyang.wang@windriver.com>
spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible
Chunyan Zhang <chunyan.zhang@unisoc.com>
spi: sprd: Fix the wrong WDG_LOAD_VAL
Chen-Yu Tsai <wenst@chromium.org>
regulator: vctrl: Avoid lockdep warning in enable/disable ops
Chen-Yu Tsai <wenst@chromium.org>
regulator: vctrl: Use locked regulator_get_voltage in probe path
Eric Biggers <ebiggers@google.com>
blk-crypto: fix check for too-large dun_bytes
Matija Glavinic Pecotic <matija.glavinic-pecotic.ext@nokia.com>
spi: davinci: invoke chipselect callback
Borislav Petkov <bp@alien8.de>
x86/mce: Defer processing of early errors
Stefan Berger <stefanb@linux.ibm.com>
tpm: ibmvtpm: Avoid error message when process gets signal while waiting
Stefan Berger <stefanb@linux.ibm.com>
certs: Trigger creation of RSA module signing key if it's not an RSA key
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - use proper type for vf_mask
Chen-Yu Tsai <wenst@chromium.org>
irqchip/gic-v3: Fix priority comparison when non-secure priorities are used
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
spi: coldfire-qspi: Use clk_disable_unprepare in the remove function
Pavel Skripkin <paskripkin@gmail.com>
block: nbd: add sanity check for first_minor
Phong Hoang <phong.hoang.wz@renesas.com>
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Hongbo Li <herberthbli@tencent.com>
lib/mpi: use kcalloc in mpi_resize
Huacai Chen <chenhuacai@loongson.cn>
irqchip/loongson-pch-pic: Improve edge triggered interrupt support
Zhen Lei <thunder.leizhen@huawei.com>
genirq/timings: Fix error return code in irq_timings_test_irqs()
Tony Lindgren <tony@atomide.com>
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
Ming Lei <ming.lei@redhat.com>
block: return ELEVATOR_DISCARD_MERGE if possible
Geert Uytterhoeven <geert@linux-m68k.org>
m68k: Fix invalid RMW_INSNS on CPUs that lack CAS
Yanfei Xu <yanfei.xu@windriver.com>
rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
Paul E. McKenney <paulmck@kernel.org>
rcu: Add lockdep_assert_irqs_disabled() to rcu_sched_clock_irq() and callees
Yanfei Xu <yanfei.xu@windriver.com>
rcu: Fix to include first blocked task in stall warning
Quentin Perret <qperret@google.com>
sched: Fix UCLAMP_FLAG_IDLE setting
Mika Penttilä <mika.penttila@gmail.com>
sched/numa: Fix is_core_idle()
Pavel Skripkin <paskripkin@gmail.com>
m68k: emu: Fix invalid free in nfeth_cleanup()
Peter Robinson <pbrobinson@gmail.com>
power: supply: cw2015: use dev_err_probe to allow deferred probe
Harald Freudenberger <freude@linux.ibm.com>
s390/ap: fix state machine hang after failure to enable irq
Peter Oberparleiter <oberpar@linux.ibm.com>
s390/debug: fix debug area life cycle
Peter Oberparleiter <oberpar@linux.ibm.com>
s390/debug: keep debug data on resize
Niklas Schnelle <schnelle@linux.ibm.com>
s390/pci: fix misleading rc in clp_set_pci_fn()
Alexander Gordeev <agordeev@linux.ibm.com>
s390/kasan: fix large PMD pages address alignment check
Stian Skjelstad <stian.skjelstad@gmail.com>
udf_get_extendedattr() had no boundary checks.
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
fcntl: fix potential deadlock for &fasync_struct.fa_lock
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not export adf_iov_putmsg()
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix reuse of completion variable
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - handle both source of interrupt in VF ISR
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not ignore errors from enable_vf2pf_comms()
Ben Hutchings <ben.hutchings@mind.be>
crypto: omap - Fix inconsistent locking of device lists
Damien Le Moal <damien.lemoal@wdc.com>
libata: fix ata_host_start()
Harald Freudenberger <freude@linux.ibm.com>
s390/zcrypt: fix wrong offset index for APKA master key valid state
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: add dev_busid sysfs entry for each subchannel
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Dmitry Osipenko <digetx@gmail.com>
power: supply: smb347-charger: Add missing pin control activation
Amit Engel <amit.engel@dell.com>
nvmet: pass back cntlid on successful completion
Ruozhu Li <liruozhu@huawei.com>
nvme-rdma: don't update queue count when failing to set io queues
Ruozhu Li <liruozhu@huawei.com>
nvme-tcp: don't update queue count when failing to set io queues
Chunguang Xu <brookxu@tencent.com>
blk-throtl: optimize IOPS throttle for large IO scenarios
Christoph Hellwig <hch@lst.de>
bcache: add proper error unwinding in bcache_device_init
Pali Rohár <pali@kernel.org>
isofs: joliet: Fix iocharset=utf8 mount option
Pali Rohár <pali@kernel.org>
udf: Fix iocharset=utf8 mount option
Jan Kara <jack@suse.cz>
udf: Check LVID earlier
Thomas Gleixner <tglx@linutronix.de>
hrtimer: Ensure timerfd notification for HIGHRES=n
Thomas Gleixner <tglx@linutronix.de>
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
Frederic Weisbecker <frederic@kernel.org>
posix-cpu-timers: Force next expiration recalc after itimer reset
Smita Koralahalli <Smita.KoralahalliChannabasappa@amd.com>
EDAC/mce_amd: Do not load edac_mce_amd module on guests
Sergey Senozhatsky <senozhatsky@chromium.org>
rcu/tree: Handle VM stoppage in stall detection
Dietmar Eggemann <dietmar.eggemann@arm.com>
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
Tony Lindgren <tony@atomide.com>
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
Hans de Goede <hdegoede@redhat.com>
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
Quentin Perret <qperret@google.com>
sched/deadline: Fix reset_on_fork reporting of DL tasks
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Check for DMA mapping errors
Dmitry Osipenko <digetx@gmail.com>
regulator: tps65910: Silence deferred probe error
Jeongtae Park <jeongtae.park@gmail.com>
regmap: fix the offset of register error log
Peter Zijlstra <peterz@infradead.org>
locking/mutex: Fix HANDOFF condition
-------------
Diffstat:
Documentation/fault-injection/provoke-crashes.rst | 2 +-
Makefile | 4 +-
arch/arm/boot/dts/aspeed-g6-pinctrl.dtsi | 4 +-
arch/arm/boot/dts/at91-sam9x60ek.dts | 16 +-
arch/arm/boot/dts/at91-sama5d3_xplained.dts | 29 ++++
arch/arm/boot/dts/at91-sama5d4_xplained.dts | 19 +++
arch/arm/boot/dts/meson8.dtsi | 5 +
arch/arm/boot/dts/meson8b-ec100.dts | 4 +-
arch/arm/boot/dts/meson8b-mxq.dts | 4 +-
arch/arm/boot/dts/meson8b-odroidc1.dts | 4 +-
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2 +-
.../boot/dts/marvell/armada-3720-turris-mox.dts | 17 ++
arch/arm64/boot/dts/marvell/armada-37xx.dtsi | 11 +-
.../arm64/boot/dts/renesas/beacon-renesom-som.dtsi | 3 +-
arch/arm64/boot/dts/renesas/hihope-rzg2-ex.dtsi | 3 +-
arch/arm64/boot/dts/renesas/r8a774a1.dtsi | 2 +
arch/arm64/boot/dts/renesas/r8a774b1.dtsi | 2 +
arch/arm64/boot/dts/renesas/r8a774c0.dtsi | 1 +
arch/arm64/boot/dts/renesas/r8a774e1.dtsi | 2 +
arch/arm64/boot/dts/renesas/r8a77995-draak.dts | 4 -
arch/m68k/Kconfig.cpu | 8 +-
arch/m68k/emu/nfeth.c | 4 +-
arch/s390/include/asm/kvm_host.h | 1 +
arch/s390/kernel/debug.c | 176 +++++++++++++--------
arch/s390/kvm/interrupt.c | 12 +-
arch/s390/kvm/kvm-s390.c | 2 +-
arch/s390/kvm/kvm-s390.h | 2 +-
arch/s390/mm/kasan_init.c | 41 +++--
arch/s390/pci/pci.c | 7 +-
arch/s390/pci/pci_clp.c | 33 ++--
arch/x86/events/amd/ibs.c | 1 +
arch/x86/include/asm/mce.h | 1 +
arch/x86/kernel/cpu/mce/core.c | 11 +-
arch/x86/kernel/cpu/resctrl/monitor.c | 6 +
arch/x86/kvm/mmu/mmu.c | 6 -
arch/x86/kvm/vmx/nested.c | 7 +-
arch/x86/kvm/vmx/vmx.c | 3 +
arch/x86/kvm/x86.c | 4 +
block/bfq-iosched.c | 3 +
block/bio.c | 15 +-
block/blk-crypto.c | 2 +-
block/blk-merge.c | 18 +--
block/blk-throttle.c | 32 ++++
block/blk.h | 2 +
block/elevator.c | 3 +
block/mq-deadline.c | 2 +
certs/Makefile | 8 +
drivers/ata/libata-core.c | 2 +-
drivers/base/dd.c | 16 +-
drivers/base/firmware_loader/main.c | 20 +--
drivers/base/regmap/regmap.c | 2 +-
drivers/bcma/main.c | 6 +-
drivers/block/nbd.c | 10 ++
drivers/char/tpm/tpm_ibmvtpm.c | 26 +--
drivers/char/tpm/tpm_ibmvtpm.h | 2 +-
drivers/clk/mvebu/kirkwood.c | 1 +
drivers/clocksource/sh_cmt.c | 30 ++--
drivers/counter/104-quad-8.c | 5 +-
drivers/crypto/mxs-dcp.c | 45 ++++--
drivers/crypto/omap-aes.c | 8 +-
drivers/crypto/omap-des.c | 8 +-
drivers/crypto/omap-sham.c | 14 +-
.../crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_common/adf_common_drv.h | 8 +-
drivers/crypto/qat/qat_common/adf_init.c | 5 +-
drivers/crypto/qat/qat_common/adf_isr.c | 7 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3 +-
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12 +-
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7 +-
.../qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4 +-
drivers/edac/i10nm_base.c | 6 +-
drivers/edac/mce_amd.c | 3 +
drivers/firmware/raspberrypi.c | 46 +++++-
drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 54 +++----
drivers/gpu/drm/drm_of.c | 6 +-
drivers/gpu/drm/gma500/oaktrail_lvds.c | 2 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 10 +-
drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 68 ++++----
drivers/gpu/drm/msm/dsi/dsi.c | 6 +-
drivers/gpu/drm/mxsfb/mxsfb_drv.c | 3 +
drivers/gpu/drm/mxsfb/mxsfb_drv.h | 1 +
drivers/gpu/drm/mxsfb/mxsfb_kms.c | 40 +++++
drivers/gpu/drm/mxsfb/mxsfb_regs.h | 9 ++
drivers/gpu/drm/panfrost/panfrost_device.c | 3 +-
drivers/i2c/busses/i2c-highlander.c | 2 +-
drivers/i2c/busses/i2c-hix5hd2.c | 4 +-
drivers/i2c/busses/i2c-iop3xx.c | 6 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-s3c2410.c | 2 +-
drivers/i2c/busses/i2c-synquacer.c | 2 +-
drivers/i2c/busses/i2c-xlp9xx.c | 2 +-
drivers/irqchip/irq-gic-v3.c | 23 ++-
drivers/irqchip/irq-loongson-pch-pic.c | 19 ++-
drivers/leds/leds-is31fl32xx.c | 1 +
drivers/leds/leds-lt3593.c | 5 +-
drivers/leds/trigger/ledtrig-audio.c | 37 ++++-
drivers/md/bcache/super.c | 16 +-
drivers/media/i2c/tda1997x.c | 1 +
drivers/media/platform/coda/coda-bit.c | 18 ++-
drivers/media/platform/qcom/venus/venc.c | 2 +
drivers/media/platform/rockchip/rga/rga-buf.c | 3 +-
drivers/media/platform/rockchip/rga/rga.c | 29 +++-
drivers/media/spi/cxd2880-spi.c | 7 +-
drivers/media/usb/dvb-usb/dvb-usb-i2c.c | 9 +-
drivers/media/usb/dvb-usb/dvb-usb-init.c | 2 +-
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6 +-
drivers/media/usb/dvb-usb/vp702x.c | 12 +-
drivers/media/usb/em28xx/em28xx-input.c | 1 -
drivers/media/usb/go7007/go7007-driver.c | 26 ---
drivers/media/usb/go7007/go7007-usb.c | 2 +-
drivers/misc/lkdtm/core.c | 2 +-
drivers/mmc/host/dw_mmc.c | 1 +
drivers/mmc/host/moxart-mmc.c | 1 +
drivers/mmc/host/sdhci.c | 1 +
.../net/ethernet/aquantia/atlantic/aq_pci_func.c | 3 +
drivers/net/ethernet/google/gve/gve_adminq.c | 6 +-
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 23 ++-
drivers/net/ethernet/intel/ice/ice_main.c | 13 +-
.../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 16 +-
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 52 ++++++
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 6 -
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 10 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 15 ++
.../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 5 +-
.../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 18 +--
.../net/ethernet/pensando/ionic/ionic_devlink.c | 14 +-
drivers/net/ethernet/qualcomm/qca_spi.c | 2 +-
drivers/net/ethernet/qualcomm/qca_uart.c | 2 +-
drivers/net/wireless/ath/ath6kl/wmi.c | 4 +-
.../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 2 +-
drivers/net/wireless/intel/iwlwifi/fw/acpi.c | 32 ++--
drivers/net/wireless/intel/iwlwifi/fw/acpi.h | 10 +-
.../net/wireless/intel/iwlwifi/fw/api/commands.h | 2 +-
.../net/wireless/intel/iwlwifi/fw/api/nvm-reg.h | 8 +-
drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 12 +-
drivers/net/wireless/intel/iwlwifi/fw/file.h | 2 +-
drivers/net/wireless/intel/iwlwifi/iwl-config.h | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 6 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 10 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 13 +-
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 24 +--
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 1 +
drivers/net/wireless/rsi/rsi_91x_hal.c | 4 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 1 +
drivers/nvme/host/rdma.c | 4 +-
drivers/nvme/host/tcp.c | 4 +-
drivers/nvme/target/fabrics-cmd.c | 9 +-
drivers/pci/pci.c | 25 ++-
drivers/power/supply/axp288_fuel_gauge.c | 4 +-
drivers/power/supply/cw2015_battery.c | 4 +-
drivers/power/supply/max17042_battery.c | 2 +-
drivers/power/supply/smb347-charger.c | 10 ++
drivers/regulator/tps65910-regulator.c | 10 +-
drivers/regulator/vctrl-regulator.c | 73 +++++----
drivers/s390/cio/css.c | 17 ++
drivers/s390/crypto/ap_bus.c | 25 +--
drivers/s390/crypto/ap_bus.h | 10 +-
drivers/s390/crypto/ap_queue.c | 20 +--
drivers/s390/crypto/zcrypt_ccamisc.c | 8 +-
drivers/soc/qcom/rpmhpd.c | 5 +-
drivers/soc/qcom/smsm.c | 11 +-
drivers/soc/rockchip/Kconfig | 4 +-
drivers/spi/spi-coldfire-qspi.c | 2 +-
drivers/spi/spi-davinci.c | 8 +-
drivers/spi/spi-fsl-dspi.c | 1 +
drivers/spi/spi-pic32.c | 1 +
drivers/spi/spi-sprd-adi.c | 2 +-
drivers/spi/spi-zynq-qspi.c | 8 +-
drivers/staging/clocking-wizard/Kconfig | 2 +-
.../staging/media/atomisp/i2c/atomisp-mt9m114.c | 11 +-
drivers/tty/serial/fsl_lpuart.c | 2 +-
drivers/tty/tty_io.c | 4 +-
drivers/usb/dwc3/dwc3-meson-g12a.c | 2 +
drivers/usb/dwc3/dwc3-qcom.c | 4 +
drivers/usb/gadget/udc/at91_udc.c | 4 +-
drivers/usb/gadget/udc/bdc/bdc_core.c | 30 ++--
drivers/usb/gadget/udc/mv_u3d_core.c | 19 +--
drivers/usb/gadget/udc/renesas_usb3.c | 17 +-
drivers/usb/gadget/udc/s3c2410_udc.c | 4 +
drivers/usb/host/ehci-orion.c | 8 +-
drivers/usb/host/ohci-tmio.c | 3 +
drivers/usb/phy/phy-fsl-usb.c | 2 +
drivers/usb/phy/phy-tahvo.c | 4 +-
drivers/usb/phy/phy-twl6030-usb.c | 5 +
drivers/video/backlight/pwm_bl.c | 54 ++++---
drivers/video/fbdev/core/fbmem.c | 6 +
fs/cifs/cifs_unicode.c | 9 +-
fs/debugfs/file.c | 8 +-
fs/f2fs/file.c | 5 +-
fs/f2fs/super.c | 11 +-
fs/fcntl.c | 5 +-
fs/fuse/file.c | 9 +-
fs/gfs2/ops_fstype.c | 43 +++++
fs/gfs2/super.c | 61 +------
fs/io_uring.c | 1 +
fs/iomap/swapfile.c | 6 +
fs/isofs/inode.c | 27 ++--
fs/isofs/isofs.h | 1 -
fs/isofs/joliet.c | 4 +-
fs/lockd/svclock.c | 2 +-
fs/nfsd/nfs4state.c | 4 +-
fs/udf/misc.c | 13 +-
fs/udf/super.c | 75 ++++-----
fs/udf/udf_sb.h | 2 -
fs/udf/unicode.c | 4 +-
include/linux/blkdev.h | 16 ++
include/linux/energy_model.h | 16 ++
include/linux/hrtimer.h | 5 -
include/linux/local_lock_internal.h | 39 +++--
include/linux/lockdep.h | 15 +-
include/linux/lockdep_types.h | 18 ++-
include/linux/mlx5/mlx5_ifc.h | 3 +-
include/linux/power/max17042_battery.h | 2 +-
include/linux/time64.h | 9 +-
include/soc/bcm2835/raspberrypi-firmware.h | 2 +
include/uapi/linux/bpf.h | 2 +-
kernel/bpf/verifier.c | 31 ++--
kernel/cgroup/cpuset.c | 95 ++++++-----
kernel/cpu_pm.c | 50 ++++--
kernel/irq/timings.c | 2 +
kernel/locking/lockdep.c | 16 +-
kernel/locking/mutex.c | 15 +-
kernel/power/energy_model.c | 4 +-
kernel/rcu/tree.c | 4 +
kernel/rcu/tree_plugin.h | 1 +
kernel/rcu/tree_stall.h | 34 +++-
kernel/sched/core.c | 25 ++-
kernel/sched/deadline.c | 8 +-
kernel/sched/fair.c | 2 +-
kernel/sched/sched.h | 2 +
kernel/time/hrtimer.c | 92 ++++++++---
kernel/time/posix-cpu-timers.c | 2 -
kernel/time/tick-internal.h | 3 +
lib/mpi/mpiutil.c | 2 +-
net/6lowpan/debugfs.c | 3 +-
net/bluetooth/cmtp/cmtp.h | 2 +-
net/bluetooth/hci_core.c | 14 ++
net/bluetooth/mgmt.c | 2 +-
net/bluetooth/sco.c | 11 +-
net/core/devlink.c | 36 +++--
net/ipv4/route.c | 48 ++++--
net/ipv4/tcp_ipv4.c | 5 +-
net/ipv6/route.c | 5 +-
net/mac80211/tx.c | 4 +-
net/netlabel/netlabel_cipso_v4.c | 8 +-
net/sched/sch_cbq.c | 2 +-
samples/bpf/xdp_redirect_cpu_user.c | 2 +-
samples/pktgen/pktgen_sample04_many_flows.sh | 12 +-
samples/pktgen/pktgen_sample05_flow_per_thread.sh | 12 +-
security/integrity/ima/Kconfig | 1 -
security/integrity/ima/ima_mok.c | 2 +-
sound/soc/codecs/rt5682-i2c.c | 20 +++
sound/soc/codecs/wcd9335.c | 23 ++-
sound/soc/intel/boards/kbl_da7219_max98927.c | 55 +------
sound/soc/intel/common/soc-acpi-intel-cml-match.c | 2 +-
sound/soc/intel/common/soc-acpi-intel-kbl-match.c | 2 +-
sound/soc/intel/skylake/skl-topology.c | 25 ++-
sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 43 +++--
tools/include/uapi/linux/bpf.h | 2 +-
tools/lib/bpf/Makefile | 10 +-
tools/lib/bpf/libbpf.c | 16 +-
tools/testing/selftests/bpf/progs/bpf_iter_tcp4.c | 2 +-
.../selftests/bpf/progs/test_core_autosize.c | 20 ++-
264 files changed, 2074 insertions(+), 1184 deletions(-)
^ permalink raw reply [relevance 4%]
* [PATCH 5.10 033/236] fcntl: fix potential deadlock for &fasync_struct.fa_lock
2021-09-13 13:11 4% [PATCH 5.10 000/236] 5.10.65-rc1 review Greg Kroah-Hartman
@ 2021-09-13 13:12 11% ` Greg Kroah-Hartman
2021-09-13 13:14 11% ` [PATCH 5.10 141/236] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
1 sibling, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:12 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Jeff Layton,
Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2f488f698fda820f8e6fa0407630154eceb145d6 ]
There is an existing lock hierarchy of
&dev->event_lock --> &fasync_struct.fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
&dev->event_lock is HARDIRQ-safe, so interrupts have to be disabled
while grabbing &fasync_struct.fa_lock, otherwise we invert the lock
hierarchy. However, since kill_fasync which calls kill_fasync_rcu is
an exported symbol, it may not necessarily be called with interrupts
disabled.
As kill_fasync_rcu may be called with interrupts disabled (for
example, in the call chain above), we replace calls to
read_lock/read_unlock on &fasync_struct.fa_lock in kill_fasync_rcu
with read_lock_irqsave/read_unlock_irqrestore.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index 05b36b28f2e8..71b43538fa44 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -995,13 +995,14 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
{
while (fa) {
struct fown_struct *fown;
+ unsigned long flags;
if (fa->magic != FASYNC_MAGIC) {
printk(KERN_ERR "kill_fasync: bad magic number in "
"fasync_struct!\n");
return;
}
- read_lock(&fa->fa_lock);
+ read_lock_irqsave(&fa->fa_lock, flags);
if (fa->fa_file) {
fown = &fa->fa_file->f_owner;
/* Don't send SIGURG to processes which have not set a
@@ -1010,7 +1011,7 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
if (!(sig == SIGURG && fown->signum == 0))
send_sigio(fown, fa->fa_fd, band);
}
- read_unlock(&fa->fa_lock);
+ read_unlock_irqrestore(&fa->fa_lock, flags);
fa = rcu_dereference(fa->fa_next);
}
}
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.4 086/144] Bluetooth: fix repeated calls to sco_sock_kill
2021-09-13 13:13 5% [PATCH 5.4 000/144] 5.4.146-rc1 review Greg Kroah-Hartman
2021-09-13 13:13 11% ` [PATCH 5.4 027/144] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
@ 2021-09-13 13:14 11% ` Greg Kroah-Hartman
1 sibling, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:14 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi,
Luiz Augusto von Dentz, Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit e1dee2c1de2b4dd00eb44004a4bda6326ed07b59 ]
In commit 4e1a720d0312 ("Bluetooth: avoid killing an already killed
socket"), a check was added to sco_sock_kill to skip killing a socket
if the SOCK_DEAD flag was set.
This was done after a trace for a use-after-free bug showed that the
same sock pointer was being killed twice.
Unfortunately, this check prevents sco_sock_kill from running on any
socket. sco_sock_kill kills a socket only if it's zapped and orphaned,
however sock_orphan announces that the socket is dead before detaching
it. i.e., orphaned sockets have the SOCK_DEAD flag set.
To fix this, we remove the check for SOCK_DEAD, and avoid repeated
calls to sco_sock_kill by removing incorrect calls in:
1. sco_sock_timeout. The socket should not be killed on timeout as
further processing is expected to be done. For example,
sco_sock_connect sets the timer then waits for the socket to be
connected or for an error to be returned.
2. sco_conn_del. This function should clean up resources for the
connection, but the socket itself should be cleaned up in
sco_sock_release.
3. sco_sock_close. Calls to sco_sock_close in sco_sock_cleanup_listen
and sco_sock_release are followed by sco_sock_kill. Hence the
duplicated call should be removed.
Fixes: 4e1a720d0312 ("Bluetooth: avoid killing an already killed socket")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 6 +-----
1 file changed, 1 insertion(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 335264706aae..1b7540cb8e5c 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -84,7 +84,6 @@ static void sco_sock_timeout(struct timer_list *t)
sk->sk_state_change(sk);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -176,7 +175,6 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_sock_clear_timer(sk);
sco_chan_del(sk, err);
bh_unlock_sock(sk);
- sco_sock_kill(sk);
sock_put(sk);
}
@@ -393,8 +391,7 @@ static void sco_sock_cleanup_listen(struct sock *parent)
*/
static void sco_sock_kill(struct sock *sk)
{
- if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket ||
- sock_flag(sk, SOCK_DEAD))
+ if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
return;
BT_DBG("sk %p state %d", sk, sk->sk_state);
@@ -446,7 +443,6 @@ static void sco_sock_close(struct sock *sk)
lock_sock(sk);
__sco_sock_close(sk);
release_sock(sk);
- sco_sock_kill(sk);
}
static void sco_sock_init(struct sock *sk, struct sock *parent)
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.4 027/144] fcntl: fix potential deadlock for &fasync_struct.fa_lock
2021-09-13 13:13 5% [PATCH 5.4 000/144] 5.4.146-rc1 review Greg Kroah-Hartman
@ 2021-09-13 13:13 11% ` Greg Kroah-Hartman
2021-09-13 13:14 11% ` [PATCH 5.4 086/144] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
1 sibling, 0 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:13 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, stable, Desmond Cheong Zhi Xi, Jeff Layton,
Sasha Levin
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2f488f698fda820f8e6fa0407630154eceb145d6 ]
There is an existing lock hierarchy of
&dev->event_lock --> &fasync_struct.fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
&dev->event_lock is HARDIRQ-safe, so interrupts have to be disabled
while grabbing &fasync_struct.fa_lock, otherwise we invert the lock
hierarchy. However, since kill_fasync which calls kill_fasync_rcu is
an exported symbol, it may not necessarily be called with interrupts
disabled.
As kill_fasync_rcu may be called with interrupts disabled (for
example, in the call chain above), we replace calls to
read_lock/read_unlock on &fasync_struct.fa_lock in kill_fasync_rcu
with read_lock_irqsave/read_unlock_irqrestore.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index 3dc90e5293e6..fa0fdd829613 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -993,13 +993,14 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
{
while (fa) {
struct fown_struct *fown;
+ unsigned long flags;
if (fa->magic != FASYNC_MAGIC) {
printk(KERN_ERR "kill_fasync: bad magic number in "
"fasync_struct!\n");
return;
}
- read_lock(&fa->fa_lock);
+ read_lock_irqsave(&fa->fa_lock, flags);
if (fa->fa_file) {
fown = &fa->fa_file->f_owner;
/* Don't send SIGURG to processes which have not set a
@@ -1008,7 +1009,7 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
if (!(sig == SIGURG && fown->signum == 0))
send_sigio(fown, fa->fa_fd, band);
}
- read_unlock(&fa->fa_lock);
+ read_unlock_irqrestore(&fa->fa_lock, flags);
fa = rcu_dereference(fa->fa_next);
}
}
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH 5.4 000/144] 5.4.146-rc1 review
@ 2021-09-13 13:13 5% Greg Kroah-Hartman
2021-09-13 13:13 11% ` [PATCH 5.4 027/144] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
2021-09-13 13:14 11% ` [PATCH 5.4 086/144] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
0 siblings, 2 replies; 200+ results
From: Greg Kroah-Hartman @ 2021-09-13 13:13 UTC (permalink / raw)
To: linux-kernel
Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, stable
This is the start of the stable review cycle for the 5.4.146 release.
There are 144 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 15 Sep 2021 13:10:21 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.146-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 5.4.146-rc1
Linus Walleij <linus.walleij@linaro.org>
clk: kirkwood: Fix a clocking boot regression
Daniel Thompson <daniel.thompson@linaro.org>
backlight: pwm_bl: Improve bootloader/kernel device handover
Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
fbmem: don't allow too huge resolutions
THOBY Simon <Simon.THOBY@viveris.fr>
IMA: remove the dependency on CRYPTO_MD5
Austin Kim <austin.kim@lge.com>
IMA: remove -Wmissing-prototypes warning
Miklos Szeredi <mszeredi@redhat.com>
fuse: flush extending writes
Miklos Szeredi <mszeredi@redhat.com>
fuse: truncate pagecache on atomic_o_trunc
Sean Christopherson <seanjc@google.com>
KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
Zelin Deng <zelin.deng@linux.alibaba.com>
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
Halil Pasic <pasic@linux.ibm.com>
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
Babu Moger <babu.moger@amd.com>
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
Kim Phillips <kim.phillips@amd.com>
perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
Nguyen Dinh Phi <phind.uet@gmail.com>
tty: Fix data race between tiocsti() and flush_to_ldisc()
Lukas Hannen <lukas.hannen@opensource.tttech-industrial.com>
time: Handle negative seconds correctly in timespec64_to_ns()
Daniel Borkmann <daniel@iogearbox.net>
bpf: Fix pointer arithmetic mask tightening under state pruning
Lorenz Bauer <lmb@cloudflare.com>
bpf: verifier: Allocate idmap scratch in verifier env
Daniel Borkmann <daniel@iogearbox.net>
bpf: Fix leakage due to insufficient speculative store bypass mitigation
Daniel Borkmann <daniel@iogearbox.net>
bpf: Introduce BPF nospec instruction for mitigating Spectre v4
Eric Dumazet <edumazet@google.com>
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-af: Fix loop in free and unmap counter
Stefan Wahren <stefan.wahren@i2se.com>
net: qualcomm: fix QCA7000 checksum handling
Xiyu Yang <xiyuyang19@fudan.edu.cn>
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
Eric Dumazet <edumazet@google.com>
ipv4: make exception cache less predictible
Eric Dumazet <edumazet@google.com>
ipv6: make exception cache less predictible
Ahmad Fatoum <a.fatoum@pengutronix.de>
brcmfmac: pcie: fix oops on failure to resume and reprobe
Zenghui Yu <yuzenghui@huawei.com>
bcma: Fix memory leak for internally-handled cores
Dan Carpenter <dan.carpenter@oracle.com>
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: wcd9335: Disable irq on slave ports in the remove function
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
ASoC: wcd9335: Fix a double irq free in the remove function
Andy Duan <fugang.duan@nxp.com>
tty: serial: fsl_lpuart: fix the wrong mapbase value
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
Evgeny Novikov <novikov@ispras.ru>
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: mt65xx: fix IRQ check
Len Baker <len.baker@gmx.com>
CIFS: Fix a potencially linear read overflow
Andrey Ignatov <rdna@fb.com>
bpf: Fix possible out of bound write in narrow load handling
Tony Lindgren <tony@atomide.com>
mmc: moxart: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: Skylake: Fix module resource and format selection
Cezary Rojewski <cezary.rojewski@intel.com>
ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
Dan Carpenter <dan.carpenter@oracle.com>
rsi: fix an error code in rsi_probe()
Dan Carpenter <dan.carpenter@oracle.com>
rsi: fix error code in rsi_load_9116_firmware()
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: s3c2410: fix IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: iop3xx: fix deferred probing
Pavel Skripkin <paskripkin@gmail.com>
Bluetooth: add timeout sanity check to hci_inquiry
Xu Yu <xuyu@linux.alibaba.com>
mm/swap: consider max pages in iomap_swapfile_add_extent
Nadezda Lutovinova <lutovinova@ispras.ru>
usb: gadget: mv_u3d: request_irq() after initializing UDC
J. Bruce Fields <bfields@redhat.com>
nfsd4: Fix forced-expiry locking
Benjamin Coddington <bcodding@redhat.com>
lockd: Fix invalid lockowner cast after vfs_test_lock
Chih-Kang Chang <gary.chang@realtek.com>
mac80211: Fix insufficient headroom issue for AMSDU
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: tahvo: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: host: ohci-tmio: add IRQ check
Kai-Heng Feng <kai.heng.feng@canonical.com>
Bluetooth: Move shutdown callback before flushing tx and rx queue
Geert Uytterhoeven <geert+renesas@glider.be>
usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: twl6030: add IRQ checks
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: phy: fsl-usb: add IRQ check
Sergey Shtylyov <s.shtylyov@omp.ru>
usb: gadget: udc: at91: add IRQ check
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
drm/msm/dsi: Fix some reference counted resource leaks
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Bluetooth: fix repeated calls to sco_sock_kill
William Breathitt Gray <vilhelm.gray@gmail.com>
counter: 104-quad-8: Return error when invalid mode during ceiling_write
Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
Lukasz Luba <lukasz.luba@arm.com>
PM: EM: Increase energy calculation precision
Colin Ian King <colin.king@canonical.com>
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
Sven Eckelmann <sven@narfation.org>
debugfs: Return error during {full/open}_proxy_open() on rmmod
Stephan Gerhold <stephan@gerhold.net>
soc: qcom: smsm: Fix missed interrupts if state changes while masked
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Enable PME if it can be signaled from D3cold
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
Colin Ian King <colin.king@canonical.com>
media: venus: venc: Fix potential null pointer dereference on pointer fmt
Dongliang Mu <mudongliangabcd@gmail.com>
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
Hans de Goede <hdegoede@redhat.com>
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
Andy Shevchenko <andy.shevchenko@gmail.com>
leds: lt3593: Put fwnode in any case during ->probe()
Sergey Shtylyov <s.shtylyov@omp.ru>
i2c: highlander: add IRQ check
Pavel Skripkin <paskripkin@gmail.com>
net: cipso: fix warnings in netlbl_cipsov4_add_std
Waiman Long <longman@redhat.com>
cgroup/cpuset: Fix a partition bug with hotplug
Maxim Mikityanskiy <maximmi@nvidia.com>
net/mlx5e: Prohibit inner indir TIRs in IPoIB
Anand Moon <linux.amoon@gmail.com>
ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
Anand Moon <linux.amoon@gmail.com>
ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
Martin Blumenstingl <martin.blumenstingl@googlemail.com>
ARM: dts: meson8: Use a higher default GPU clock frequency
Martin KaFai Lau <kafai@fb.com>
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
Kai-Heng Feng <kai.heng.feng@canonical.com>
drm/amdgpu/acp: Make PM domain really work
Guillaume Nault <gnault@redhat.com>
netns: protect netns ID lookups with RCU
Colin Ian King <colin.king@canonical.com>
6lowpan: iphc: Fix an off-by-one check of array index
Dan Carpenter <dan.carpenter@oracle.com>
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
Philipp Zabel <p.zabel@pengutronix.de>
media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
Pavel Skripkin <paskripkin@gmail.com>
media: go7007: remove redundant initialization
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: Fix error handling in dvb_usb_i2c_init
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
Dongliang Mu <mudongliangabcd@gmail.com>
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
Bjorn Andersson <bjorn.andersson@linaro.org>
soc: qcom: rpmhpd: Use corner in power_off
Geert Uytterhoeven <geert@linux-m68k.org>
arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
Dylan Hung <dylan_hung@aspeedtech.com>
ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
He Fengqing <hefengqing@huawei.com>
bpf: Fix potential memleak and UAF in the verifier.
Kuniyuki Iwashima <kuniyu@amazon.co.jp>
bpf: Fix a typo of reuseport map in bpf.h.
Christophe JAILLET <christophe.jaillet@wanadoo.fr>
media: cxd2880-spi: Fix an error handling path
Geert Uytterhoeven <geert+renesas@glider.be>
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
Krzysztof Hałasa <khalasa@piap.pl>
media: TDA1997x: enable EDID support
Wei Yongjun <weiyongjun1@huawei.com>
drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init()
Qiuxu Zhuo <qiuxu.zhuo@intel.com>
EDAC/i10nm: Fix NVDIMM detection
Quanyang Wang <quanyang.wang@windriver.com>
spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible
Chunyan Zhang <chunyan.zhang@unisoc.com>
spi: sprd: Fix the wrong WDG_LOAD_VAL
Chen-Yu Tsai <wenst@chromium.org>
regulator: vctrl: Avoid lockdep warning in enable/disable ops
Chen-Yu Tsai <wenst@chromium.org>
regulator: vctrl: Use locked regulator_get_voltage in probe path
Stefan Berger <stefanb@linux.ibm.com>
certs: Trigger creation of RSA module signing key if it's not an RSA key
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - use proper type for vf_mask
Pavel Skripkin <paskripkin@gmail.com>
block: nbd: add sanity check for first_minor
Phong Hoang <phong.hoang.wz@renesas.com>
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
Hongbo Li <herberthbli@tencent.com>
lib/mpi: use kcalloc in mpi_resize
Zhen Lei <thunder.leizhen@huawei.com>
genirq/timings: Fix error return code in irq_timings_test_irqs()
Tony Lindgren <tony@atomide.com>
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
Tony Lindgren <tony@atomide.com>
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
Quentin Perret <qperret@google.com>
sched: Fix UCLAMP_FLAG_IDLE setting
Pavel Skripkin <paskripkin@gmail.com>
m68k: emu: Fix invalid free in nfeth_cleanup()
Peter Oberparleiter <oberpar@linux.ibm.com>
s390/debug: fix debug area life cycle
Alexander Gordeev <agordeev@linux.ibm.com>
s390/kasan: fix large PMD pages address alignment check
Stian Skjelstad <stian.skjelstad@gmail.com>
udf_get_extendedattr() had no boundary checks.
Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
fcntl: fix potential deadlock for &fasync_struct.fa_lock
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not export adf_iov_putmsg()
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix naming for init/shutdown VF to PF notifications
Marco Chiappero <marco.chiappero@intel.com>
crypto: qat - fix reuse of completion variable
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - handle both source of interrupt in VF ISR
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - do not ignore errors from enable_vf2pf_comms()
Damien Le Moal <damien.lemoal@wdc.com>
libata: fix ata_host_start()
Vineeth Vijayan <vneethv@linux.ibm.com>
s390/cio: add dev_busid sysfs entry for each subchannel
Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
power: supply: max17042_battery: fix typo in MAx17042_TOFF
Amit Engel <amit.engel@dell.com>
nvmet: pass back cntlid on successful completion
Ruozhu Li <liruozhu@huawei.com>
nvme-rdma: don't update queue count when failing to set io queues
Ruozhu Li <liruozhu@huawei.com>
nvme-tcp: don't update queue count when failing to set io queues
Christoph Hellwig <hch@lst.de>
bcache: add proper error unwinding in bcache_device_init
Pali Rohár <pali@kernel.org>
isofs: joliet: Fix iocharset=utf8 mount option
Pali Rohár <pali@kernel.org>
udf: Fix iocharset=utf8 mount option
Jan Kara <jack@suse.cz>
udf: Check LVID earlier
Thomas Gleixner <tglx@linutronix.de>
hrtimer: Ensure timerfd notification for HIGHRES=n
Thomas Gleixner <tglx@linutronix.de>
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
Frederic Weisbecker <frederic@kernel.org>
posix-cpu-timers: Force next expiration recalc after itimer reset
Sergey Senozhatsky <senozhatsky@chromium.org>
rcu/tree: Handle VM stoppage in stall detection
Dietmar Eggemann <dietmar.eggemann@arm.com>
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
Tony Lindgren <tony@atomide.com>
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
Hans de Goede <hdegoede@redhat.com>
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
Quentin Perret <qperret@google.com>
sched/deadline: Fix reset_on_fork reporting of DL tasks
Sean Anderson <sean.anderson@seco.com>
crypto: mxs-dcp - Check for DMA mapping errors
Jeongtae Park <jeongtae.park@gmail.com>
regmap: fix the offset of register error log
Peter Zijlstra <peterz@infradead.org>
locking/mutex: Fix HANDOFF condition
-------------
Diffstat:
Makefile | 4 +-
arch/arm/boot/dts/aspeed-g6-pinctrl.dtsi | 4 +-
arch/arm/boot/dts/meson8.dtsi | 5 +
arch/arm/boot/dts/meson8b-ec100.dts | 4 +-
arch/arm/boot/dts/meson8b-mxq.dts | 4 +-
arch/arm/boot/dts/meson8b-odroidc1.dts | 4 +-
arch/arm/net/bpf_jit_32.c | 3 +
arch/arm64/boot/dts/exynos/exynos7.dtsi | 2 +-
arch/arm64/boot/dts/renesas/r8a77995-draak.dts | 4 -
arch/arm64/net/bpf_jit_comp.c | 13 ++
arch/m68k/emu/nfeth.c | 4 +-
arch/mips/net/ebpf_jit.c | 3 +
arch/powerpc/net/bpf_jit_comp64.c | 6 +
arch/riscv/net/bpf_jit_comp.c | 4 +
arch/s390/include/asm/kvm_host.h | 1 +
arch/s390/kernel/debug.c | 102 ++++++------
arch/s390/kvm/interrupt.c | 12 +-
arch/s390/kvm/kvm-s390.c | 2 +-
arch/s390/kvm/kvm-s390.h | 2 +-
arch/s390/mm/kasan_init.c | 41 +++--
arch/s390/net/bpf_jit_comp.c | 5 +
arch/sparc/net/bpf_jit_comp_64.c | 3 +
arch/x86/events/amd/ibs.c | 1 +
arch/x86/kernel/cpu/resctrl/monitor.c | 6 +
arch/x86/kvm/vmx/nested.c | 7 +-
arch/x86/kvm/x86.c | 4 +
arch/x86/net/bpf_jit_comp.c | 7 +
arch/x86/net/bpf_jit_comp32.c | 6 +
certs/Makefile | 8 +
drivers/ata/libata-core.c | 2 +-
drivers/base/regmap/regmap.c | 2 +-
drivers/bcma/main.c | 6 +-
drivers/block/nbd.c | 10 ++
drivers/clk/mvebu/kirkwood.c | 1 +
drivers/clocksource/sh_cmt.c | 30 ++--
drivers/counter/104-quad-8.c | 5 +-
drivers/crypto/mxs-dcp.c | 45 +++--
drivers/crypto/omap-sham.c | 2 +-
.../crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c | 4 +-
drivers/crypto/qat/qat_common/adf_common_drv.h | 8 +-
drivers/crypto/qat/qat_common/adf_init.c | 5 +-
drivers/crypto/qat/qat_common/adf_isr.c | 7 +-
drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 3 +-
drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 12 +-
drivers/crypto/qat/qat_common/adf_vf_isr.c | 7 +-
.../qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c | 4 +-
drivers/edac/i10nm_base.c | 6 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 54 +++---
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 10 +-
drivers/gpu/drm/msm/dsi/dsi.c | 6 +-
drivers/gpu/drm/panfrost/panfrost_device.c | 3 +-
drivers/i2c/busses/i2c-highlander.c | 2 +-
drivers/i2c/busses/i2c-iop3xx.c | 6 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-s3c2410.c | 2 +-
drivers/leds/leds-lt3593.c | 5 +-
drivers/leds/trigger/ledtrig-audio.c | 37 ++++-
drivers/md/bcache/super.c | 16 +-
drivers/media/i2c/tda1997x.c | 1 +
drivers/media/platform/coda/coda-bit.c | 18 +-
drivers/media/platform/qcom/venus/venc.c | 2 +
drivers/media/spi/cxd2880-spi.c | 7 +-
drivers/media/usb/dvb-usb/dvb-usb-i2c.c | 9 +-
drivers/media/usb/dvb-usb/dvb-usb-init.c | 2 +-
drivers/media/usb/dvb-usb/nova-t-usb2.c | 6 +-
drivers/media/usb/dvb-usb/vp702x.c | 12 +-
drivers/media/usb/em28xx/em28xx-input.c | 1 -
drivers/media/usb/go7007/go7007-driver.c | 26 ---
drivers/mmc/host/dw_mmc.c | 1 +
drivers/mmc/host/moxart-mmc.c | 1 +
.../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 3 +-
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 6 -
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 10 +-
.../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 18 +-
drivers/net/ethernet/qualcomm/qca_spi.c | 2 +-
drivers/net/ethernet/qualcomm/qca_uart.c | 2 +-
drivers/net/wireless/ath/ath6kl/wmi.c | 4 +-
.../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 2 +-
drivers/net/wireless/rsi/rsi_91x_hal.c | 4 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 1 +
drivers/nvme/host/rdma.c | 4 +-
drivers/nvme/host/tcp.c | 4 +-
drivers/nvme/target/fabrics-cmd.c | 9 +-
drivers/pci/pci.c | 25 ++-
drivers/power/supply/axp288_fuel_gauge.c | 4 +-
drivers/power/supply/max17042_battery.c | 2 +-
drivers/regulator/vctrl-regulator.c | 73 ++++----
drivers/s390/cio/css.c | 17 ++
drivers/soc/qcom/rpmhpd.c | 5 +-
drivers/soc/qcom/smsm.c | 11 +-
drivers/soc/rockchip/Kconfig | 4 +-
drivers/spi/spi-fsl-dspi.c | 1 +
drivers/spi/spi-pic32.c | 1 +
drivers/spi/spi-sprd-adi.c | 2 +-
drivers/spi/spi-zynq-qspi.c | 8 +-
drivers/tty/serial/fsl_lpuart.c | 2 +-
drivers/tty/tty_io.c | 4 +-
drivers/usb/gadget/udc/at91_udc.c | 4 +-
drivers/usb/gadget/udc/bdc/bdc_core.c | 3 +-
drivers/usb/gadget/udc/mv_u3d_core.c | 19 ++-
drivers/usb/gadget/udc/renesas_usb3.c | 17 +-
drivers/usb/host/ehci-orion.c | 8 +-
drivers/usb/host/ohci-tmio.c | 3 +
drivers/usb/phy/phy-fsl-usb.c | 2 +
drivers/usb/phy/phy-tahvo.c | 4 +-
drivers/usb/phy/phy-twl6030-usb.c | 5 +
drivers/video/backlight/pwm_bl.c | 54 +++---
drivers/video/fbdev/core/fbmem.c | 6 +
fs/cifs/cifs_unicode.c | 9 +-
fs/debugfs/file.c | 8 +-
fs/fcntl.c | 5 +-
fs/fuse/file.c | 9 +-
fs/iomap/swapfile.c | 6 +
fs/isofs/inode.c | 27 ++-
fs/isofs/isofs.h | 1 -
fs/isofs/joliet.c | 4 +-
fs/lockd/svclock.c | 2 +-
fs/nfsd/nfs4state.c | 4 +-
fs/udf/misc.c | 13 +-
fs/udf/super.c | 75 ++++-----
fs/udf/udf_sb.h | 2 -
fs/udf/unicode.c | 4 +-
include/linux/bpf_verifier.h | 11 +-
include/linux/energy_model.h | 16 ++
include/linux/filter.h | 15 ++
include/linux/hrtimer.h | 5 -
include/linux/power/max17042_battery.h | 2 +-
include/linux/time64.h | 9 +-
include/uapi/linux/bpf.h | 2 +-
kernel/bpf/core.c | 18 +-
kernel/bpf/disasm.c | 16 +-
kernel/bpf/verifier.c | 183 +++++++++------------
kernel/cgroup/cpuset.c | 7 +
kernel/irq/timings.c | 2 +
kernel/locking/mutex.c | 15 +-
kernel/power/energy_model.c | 4 +-
kernel/rcu/tree_stall.h | 18 ++
kernel/sched/core.c | 25 ++-
kernel/sched/deadline.c | 8 +-
kernel/sched/sched.h | 2 +
kernel/time/hrtimer.c | 92 ++++++++---
kernel/time/posix-cpu-timers.c | 2 -
kernel/time/tick-internal.h | 3 +
lib/mpi/mpiutil.c | 2 +-
net/6lowpan/debugfs.c | 3 +-
net/bluetooth/cmtp/cmtp.h | 2 +-
net/bluetooth/hci_core.c | 14 ++
net/bluetooth/sco.c | 11 +-
net/core/net_namespace.c | 28 ++--
net/ipv4/route.c | 48 ++++--
net/ipv4/tcp_ipv4.c | 5 +-
net/ipv6/route.c | 5 +-
net/mac80211/tx.c | 4 +-
net/netlabel/netlabel_cipso_v4.c | 8 +-
net/sched/sch_cbq.c | 2 +-
security/integrity/ima/Kconfig | 1 -
security/integrity/ima/ima_mok.c | 2 +-
sound/soc/codecs/wcd9335.c | 23 ++-
sound/soc/intel/skylake/skl-topology.c | 25 ++-
tools/include/uapi/linux/bpf.h | 2 +-
161 files changed, 1105 insertions(+), 720 deletions(-)
^ permalink raw reply [relevance 5%]
* Re: [PATCH 1/2] Bluetooth: call sock_hold earlier in sco_conn_del
2021-09-03 3:13 20% ` [PATCH 1/2] Bluetooth: call sock_hold earlier in sco_conn_del Desmond Cheong Zhi Xi
@ 2021-09-10 7:36 4% ` Marcel Holtmann
2021-10-04 18:12 15% ` Desmond Cheong Zhi Xi
0 siblings, 1 reply; 200+ results
From: Marcel Holtmann @ 2021-09-10 7:36 UTC (permalink / raw)
To: Desmond Cheong Zhi Xi
Cc: Johan Hedberg, Luiz Augusto von Dentz, David S. Miller,
Jakub Kicinski, linux-bluetooth, open list:NETWORKING [GENERAL],
open list, eric.dumazet
Hi Desmond,
> In sco_conn_del, conn->sk is read while holding on to the
> sco_conn.lock to avoid races with a socket that could be released
> concurrently.
>
> However, in between unlocking sco_conn.lock and calling sock_hold,
> it's possible for the socket to be freed, which would cause a
> use-after-free write when sock_hold is finally called.
>
> To fix this, the reference count of the socket should be increased
> while the sco_conn.lock is still held.
>
> Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
> ---
> net/bluetooth/sco.c | 3 ++-
> 1 file changed, 2 insertions(+), 1 deletion(-)
>
> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
> index b62c91c627e2..4a057f99b60a 100644
> --- a/net/bluetooth/sco.c
> +++ b/net/bluetooth/sco.c
> @@ -187,10 +187,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
> /* Kill socket */
> sco_conn_lock(conn);
> sk = conn->sk;
please add a comment here on why we are doing it.
> + if (sk)
> + sock_hold(sk);
> sco_conn_unlock(conn);
>
> if (sk) {
> - sock_hold(sk);
> lock_sock(sk);
> sco_sock_clear_timer(sk);
> sco_chan_del(sk, err);
Regards
Marcel
^ permalink raw reply [relevance 4%]
* [PATCH AUTOSEL 5.4 060/109] Bluetooth: avoid circular locks in sco_sock_connect
` (2 preceding siblings ...)
2021-09-09 11:54 10% ` [PATCH AUTOSEL 5.4 059/109] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
@ 2021-09-09 11:54 9% ` Sasha Levin
3 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:54 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Sasha Levin,
linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index b74d4dec465a..67c9259fbac5 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -236,44 +236,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -281,7 +269,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -291,9 +279,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -577,6 +562,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -591,12 +577,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH AUTOSEL 5.4 059/109] Bluetooth: schedule SCO timeouts with delayed_work
2021-09-09 11:53 11% ` [PATCH AUTOSEL 5.4 014/109] drm: avoid blocking in drm_clients_info's rcu section Sasha Levin
2021-09-09 11:54 11% ` [PATCH AUTOSEL 5.4 043/109] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
@ 2021-09-09 11:54 10% ` Sasha Levin
2021-09-09 11:54 9% ` [PATCH AUTOSEL 5.4 060/109] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
3 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:54 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+2f6d7c28bb4bf7e82060,
Luiz Augusto von Dentz, Sasha Levin, linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit ba316be1b6a00db7126ed9a39f9bee434a508043 ]
struct sock.sk_timer should be used as a sock cleanup timer. However,
SCO uses it to implement sock timeouts.
This causes issues because struct sock.sk_timer's callback is run in
an IRQ context, and the timer callback function sco_sock_timeout takes
a spin lock on the socket. However, other functions such as
sco_conn_del and sco_conn_ready take the spin lock with interrupts
enabled.
This inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} lock usage could
lead to deadlocks as reported by Syzbot [1]:
CPU0
----
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
<Interrupt>
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
To fix this, we use delayed work to implement SCO sock timouts
instead. This allows us to avoid taking the spin lock on the socket in
an IRQ context, and corrects the misuse of struct sock.sk_timer.
As a note, cancel_delayed_work is used instead of
cancel_delayed_work_sync in sco_sock_set_timer and
sco_sock_clear_timer to avoid a deadlock. In the future, the call to
bh_lock_sock inside sco_sock_timeout should be changed to lock_sock to
synchronize with other functions using lock_sock. However, since
sco_sock_set_timer and sco_sock_clear_timer are sometimes called under
the locked socket (in sco_connect and __sco_sock_close),
cancel_delayed_work_sync might cause them to sleep until an
sco_sock_timeout that has started finishes running. But
sco_sock_timeout would also sleep until it can grab the lock_sock.
Using cancel_delayed_work is fine because sco_sock_timeout does not
change from run to run, hence there is no functional difference
between:
1. waiting for a timeout to finish running before scheduling another
timeout
2. scheduling another timeout while a timeout is running.
Link: https://syzkaller.appspot.com/bug?id=9089d89de0502e120f234ca0fc8a703f7368b31e [1]
Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Tested-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 35 +++++++++++++++++++++++++++++------
1 file changed, 29 insertions(+), 6 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index b91d6b440fdf..b74d4dec465a 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -48,6 +48,8 @@ struct sco_conn {
spinlock_t lock;
struct sock *sk;
+ struct delayed_work timeout_work;
+
unsigned int mtu;
};
@@ -73,9 +75,20 @@ struct sco_pinfo {
#define SCO_CONN_TIMEOUT (HZ * 40)
#define SCO_DISCONN_TIMEOUT (HZ * 2)
-static void sco_sock_timeout(struct timer_list *t)
+static void sco_sock_timeout(struct work_struct *work)
{
- struct sock *sk = from_timer(sk, t, sk_timer);
+ struct sco_conn *conn = container_of(work, struct sco_conn,
+ timeout_work.work);
+ struct sock *sk;
+
+ sco_conn_lock(conn);
+ sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
+ sco_conn_unlock(conn);
+
+ if (!sk)
+ return;
BT_DBG("sock %p state %d", sk, sk->sk_state);
@@ -90,14 +103,21 @@ static void sco_sock_timeout(struct timer_list *t)
static void sco_sock_set_timer(struct sock *sk, long timeout)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d timeout %ld", sk, sk->sk_state, timeout);
- sk_reset_timer(sk, &sk->sk_timer, jiffies + timeout);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
+ schedule_delayed_work(&sco_pi(sk)->conn->timeout_work, timeout);
}
static void sco_sock_clear_timer(struct sock *sk)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d", sk, sk->sk_state);
- sk_stop_timer(sk, &sk->sk_timer);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
}
/* ---- SCO connections ---- */
@@ -178,6 +198,9 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
bh_unlock_sock(sk);
sco_sock_kill(sk);
sock_put(sk);
+
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
}
hcon->sco_data = NULL;
@@ -192,6 +215,8 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
+
if (parent)
bt_accept_enqueue(parent, sk, true);
}
@@ -488,8 +513,6 @@ static struct sock *sco_sock_alloc(struct net *net, struct socket *sock,
sco_pi(sk)->setting = BT_VOICE_CVSD_16BIT;
- timer_setup(&sk->sk_timer, sco_sock_timeout, 0);
-
bt_sock_link(&sco_sk_list, sk);
return sk;
}
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH AUTOSEL 4.19 32/74] Bluetooth: skip invalid hci_sync_conn_complete_evt
@ 2021-09-09 11:56 11% ` Sasha Levin
2021-09-09 11:56 10% ` [PATCH AUTOSEL 4.19 44/74] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
2021-09-09 11:56 9% ` [PATCH AUTOSEL 4.19 45/74] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
2 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:56 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+66264bf2fd0476be7e6c,
Marcel Holtmann, Sasha Levin, linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index 45cc864cf2b3..714a45355610 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -4083,6 +4083,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 4.19 45/74] Bluetooth: avoid circular locks in sco_sock_connect
2021-09-09 11:56 11% ` [PATCH AUTOSEL 4.19 32/74] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
2021-09-09 11:56 10% ` [PATCH AUTOSEL 4.19 44/74] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
@ 2021-09-09 11:56 9% ` Sasha Levin
2 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:56 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Sasha Levin,
linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index e30151e81566..8345d17e98be 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -236,44 +236,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -281,7 +269,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -291,9 +279,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -577,6 +562,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -591,12 +577,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH AUTOSEL 4.19 44/74] Bluetooth: schedule SCO timeouts with delayed_work
2021-09-09 11:56 11% ` [PATCH AUTOSEL 4.19 32/74] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
@ 2021-09-09 11:56 10% ` Sasha Levin
2021-09-09 11:56 9% ` [PATCH AUTOSEL 4.19 45/74] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
2 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:56 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+2f6d7c28bb4bf7e82060,
Luiz Augusto von Dentz, Sasha Levin, linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit ba316be1b6a00db7126ed9a39f9bee434a508043 ]
struct sock.sk_timer should be used as a sock cleanup timer. However,
SCO uses it to implement sock timeouts.
This causes issues because struct sock.sk_timer's callback is run in
an IRQ context, and the timer callback function sco_sock_timeout takes
a spin lock on the socket. However, other functions such as
sco_conn_del and sco_conn_ready take the spin lock with interrupts
enabled.
This inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} lock usage could
lead to deadlocks as reported by Syzbot [1]:
CPU0
----
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
<Interrupt>
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
To fix this, we use delayed work to implement SCO sock timouts
instead. This allows us to avoid taking the spin lock on the socket in
an IRQ context, and corrects the misuse of struct sock.sk_timer.
As a note, cancel_delayed_work is used instead of
cancel_delayed_work_sync in sco_sock_set_timer and
sco_sock_clear_timer to avoid a deadlock. In the future, the call to
bh_lock_sock inside sco_sock_timeout should be changed to lock_sock to
synchronize with other functions using lock_sock. However, since
sco_sock_set_timer and sco_sock_clear_timer are sometimes called under
the locked socket (in sco_connect and __sco_sock_close),
cancel_delayed_work_sync might cause them to sleep until an
sco_sock_timeout that has started finishes running. But
sco_sock_timeout would also sleep until it can grab the lock_sock.
Using cancel_delayed_work is fine because sco_sock_timeout does not
change from run to run, hence there is no functional difference
between:
1. waiting for a timeout to finish running before scheduling another
timeout
2. scheduling another timeout while a timeout is running.
Link: https://syzkaller.appspot.com/bug?id=9089d89de0502e120f234ca0fc8a703f7368b31e [1]
Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Tested-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 35 +++++++++++++++++++++++++++++------
1 file changed, 29 insertions(+), 6 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index a4ca55df7390..e30151e81566 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -48,6 +48,8 @@ struct sco_conn {
spinlock_t lock;
struct sock *sk;
+ struct delayed_work timeout_work;
+
unsigned int mtu;
};
@@ -73,9 +75,20 @@ struct sco_pinfo {
#define SCO_CONN_TIMEOUT (HZ * 40)
#define SCO_DISCONN_TIMEOUT (HZ * 2)
-static void sco_sock_timeout(struct timer_list *t)
+static void sco_sock_timeout(struct work_struct *work)
{
- struct sock *sk = from_timer(sk, t, sk_timer);
+ struct sco_conn *conn = container_of(work, struct sco_conn,
+ timeout_work.work);
+ struct sock *sk;
+
+ sco_conn_lock(conn);
+ sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
+ sco_conn_unlock(conn);
+
+ if (!sk)
+ return;
BT_DBG("sock %p state %d", sk, sk->sk_state);
@@ -90,14 +103,21 @@ static void sco_sock_timeout(struct timer_list *t)
static void sco_sock_set_timer(struct sock *sk, long timeout)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d timeout %ld", sk, sk->sk_state, timeout);
- sk_reset_timer(sk, &sk->sk_timer, jiffies + timeout);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
+ schedule_delayed_work(&sco_pi(sk)->conn->timeout_work, timeout);
}
static void sco_sock_clear_timer(struct sock *sk)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d", sk, sk->sk_state);
- sk_stop_timer(sk, &sk->sk_timer);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
}
/* ---- SCO connections ---- */
@@ -178,6 +198,9 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
bh_unlock_sock(sk);
sco_sock_kill(sk);
sock_put(sk);
+
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
}
hcon->sco_data = NULL;
@@ -192,6 +215,8 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
+
if (parent)
bt_accept_enqueue(parent, sk, true);
}
@@ -488,8 +513,6 @@ static struct sock *sco_sock_alloc(struct net *net, struct socket *sock,
sco_pi(sk)->setting = BT_VOICE_CVSD_16BIT;
- timer_setup(&sk->sk_timer, sco_sock_timeout, 0);
-
bt_sock_link(&sco_sk_list, sk);
return sk;
}
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH AUTOSEL 4.4 21/35] Bluetooth: skip invalid hci_sync_conn_complete_evt
@ 2021-09-09 12:01 11% ` Sasha Levin
0 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 12:01 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+66264bf2fd0476be7e6c,
Marcel Holtmann, Sasha Levin, linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index 7ed3c7df271a..6528ecc3a3bc 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -3747,6 +3747,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 4.9 31/48] Bluetooth: avoid circular locks in sco_sock_connect
2021-09-09 11:59 11% ` [PATCH AUTOSEL 4.9 27/48] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
@ 2021-09-09 11:59 9% ` Sasha Levin
1 sibling, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:59 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Sasha Levin,
linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 95fd7a837dc5..5993a3843c61 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -210,44 +210,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -255,7 +243,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -265,9 +253,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -555,6 +540,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -569,12 +555,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH AUTOSEL 4.9 27/48] Bluetooth: skip invalid hci_sync_conn_complete_evt
@ 2021-09-09 11:59 11% ` Sasha Levin
2021-09-09 11:59 9% ` [PATCH AUTOSEL 4.9 31/48] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
1 sibling, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:59 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+66264bf2fd0476be7e6c,
Marcel Holtmann, Sasha Levin, linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index 44eeb27e341a..f9484755a9ba 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -3761,6 +3761,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 4.14 35/59] Bluetooth: avoid circular locks in sco_sock_connect
2021-09-09 11:58 11% ` [PATCH AUTOSEL 4.14 29/59] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
@ 2021-09-09 11:58 9% ` Sasha Levin
1 sibling, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:58 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Sasha Levin,
linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 2d23b29ce00d..3c3837e0016e 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -211,44 +211,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -256,7 +244,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -266,9 +254,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -554,6 +539,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -568,12 +554,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH AUTOSEL 4.14 29/59] Bluetooth: skip invalid hci_sync_conn_complete_evt
@ 2021-09-09 11:58 11% ` Sasha Levin
2021-09-09 11:58 9% ` [PATCH AUTOSEL 4.14 35/59] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
1 sibling, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:58 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+66264bf2fd0476be7e6c,
Marcel Holtmann, Sasha Levin, linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index b3253f2e11af..5186f199d892 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -3761,6 +3761,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.4 043/109] Bluetooth: skip invalid hci_sync_conn_complete_evt
2021-09-09 11:53 11% ` [PATCH AUTOSEL 5.4 014/109] drm: avoid blocking in drm_clients_info's rcu section Sasha Levin
@ 2021-09-09 11:54 11% ` Sasha Levin
2021-09-09 11:54 10% ` [PATCH AUTOSEL 5.4 059/109] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
2021-09-09 11:54 9% ` [PATCH AUTOSEL 5.4 060/109] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
3 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:54 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+66264bf2fd0476be7e6c,
Marcel Holtmann, Sasha Levin, linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index e8e7f108b016..82e42d8e2ea0 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -4202,6 +4202,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.4 014/109] drm: avoid blocking in drm_clients_info's rcu section
@ 2021-09-09 11:53 11% ` Sasha Levin
2021-09-09 11:54 11% ` [PATCH AUTOSEL 5.4 043/109] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
` (2 subsequent siblings)
3 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:53 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Daniel Vetter, Sasha Levin, dri-devel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 5eff9585de220cdd131237f5665db5e6c6bdf590 ]
Inside drm_clients_info, the rcu_read_lock is held to lock
pid_task()->comm. However, within this protected section, a call to
drm_is_current_master is made, which involves a mutex lock in a future
patch. However, this is illegal because the mutex lock might block
while in the RCU read-side critical section.
Since drm_is_current_master isn't protected by rcu_read_lock, we avoid
this by moving it out of the RCU critical section.
The following report came from intel-gfx ci's
igt@debugfs_test@read_all_entries testcase:
=============================
[ BUG: Invalid wait context ]
5.13.0-CI-Patchwork_20515+ #1 Tainted: G W
-----------------------------
debugfs_test/1101 is trying to lock:
ffff888132d901a8 (&dev->master_mutex){+.+.}-{3:3}, at:
drm_is_current_master+0x1e/0x50
other info that might help us debug this:
context-{4:4}
3 locks held by debugfs_test/1101:
#0: ffff88810fdffc90 (&p->lock){+.+.}-{3:3}, at:
seq_read_iter+0x53/0x3b0
#1: ffff888132d90240 (&dev->filelist_mutex){+.+.}-{3:3}, at:
drm_clients_info+0x63/0x2a0
#2: ffffffff82734220 (rcu_read_lock){....}-{1:2}, at:
drm_clients_info+0x1b1/0x2a0
stack backtrace:
CPU: 8 PID: 1101 Comm: debugfs_test Tainted: G W
5.13.0-CI-Patchwork_20515+ #1
Hardware name: Intel Corporation CometLake Client Platform/CometLake S
UDIMM (ERB/CRB), BIOS CMLSFWR1.R00.1263.D00.1906260926 06/26/2019
Call Trace:
dump_stack+0x7f/0xad
__lock_acquire.cold.78+0x2af/0x2ca
lock_acquire+0xd3/0x300
? drm_is_current_master+0x1e/0x50
? __mutex_lock+0x76/0x970
? lockdep_hardirqs_on+0xbf/0x130
__mutex_lock+0xab/0x970
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
drm_is_current_master+0x1e/0x50
drm_clients_info+0x107/0x2a0
seq_read_iter+0x178/0x3b0
seq_read+0x104/0x150
full_proxy_read+0x4e/0x80
vfs_read+0xa5/0x1b0
ksys_read+0x5a/0xd0
do_syscall_64+0x39/0xb0
entry_SYSCALL_64_after_hwframe+0x44/0xae
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-3-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_debugfs.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/gpu/drm/drm_debugfs.c b/drivers/gpu/drm/drm_debugfs.c
index 00debd02c322..0ba92428ef56 100644
--- a/drivers/gpu/drm/drm_debugfs.c
+++ b/drivers/gpu/drm/drm_debugfs.c
@@ -91,6 +91,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
mutex_lock(&dev->filelist_mutex);
list_for_each_entry_reverse(priv, &dev->filelist, lhead) {
struct task_struct *task;
+ bool is_current_master = drm_is_current_master(priv);
rcu_read_lock(); /* locks pid_task()->comm */
task = pid_task(priv->pid, PIDTYPE_PID);
@@ -99,7 +100,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
task ? task->comm : "<unknown>",
pid_vnr(priv->pid),
priv->minor->index,
- drm_is_current_master(priv) ? 'y' : 'n',
+ is_current_master ? 'y' : 'n',
priv->authenticated ? 'y' : 'n',
from_kuid_munged(seq_user_ns(m), uid),
priv->magic);
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.10 102/176] Bluetooth: avoid circular locks in sco_sock_connect
` (5 preceding siblings ...)
2021-09-09 11:50 10% ` [PATCH AUTOSEL 5.10 101/176] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
@ 2021-09-09 11:50 9% ` Sasha Levin
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:50 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Sasha Levin,
linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 8f4389370d33..21bd4ed98311 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -237,44 +237,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -282,7 +270,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -292,9 +280,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -589,6 +574,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -603,12 +589,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH AUTOSEL 5.10 100/176] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
` (3 preceding siblings ...)
2021-09-09 11:49 11% ` [PATCH AUTOSEL 5.10 062/176] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
@ 2021-09-09 11:50 12% ` Sasha Levin
2021-09-09 11:50 10% ` [PATCH AUTOSEL 5.10 101/176] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
2021-09-09 11:50 9% ` [PATCH AUTOSEL 5.10 102/176] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:50 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Daniel Vetter, Zack Rusin, Sasha Levin, dri-devel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2bc5da528dd570c5ecabc107e6fbdbc55974276f ]
drm_file.master should be protected by either drm_device.master_mutex
or drm_file.master_lookup_lock when being dereferenced. However,
drm_master_get is called on unprotected file_priv->master pointers in
vmw_surface_define_ioctl and vmw_gb_surface_define_internal.
This is fixed by replacing drm_master_get with drm_file_get_master.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Reviewed-by: Zack Rusin <zackr@vmware.com>
Signed-off-by: Zack Rusin <zackr@vmware.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20210724111824.59266-4-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
index f493b20c7a38..f1a51371de5b 100644
--- a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
+++ b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
@@ -866,7 +866,7 @@ int vmw_surface_define_ioctl(struct drm_device *dev, void *data,
user_srf->prime.base.shareable = false;
user_srf->prime.base.tfile = NULL;
if (drm_is_primary_client(file_priv))
- user_srf->master = drm_master_get(file_priv->master);
+ user_srf->master = drm_file_get_master(file_priv);
/**
* From this point, the generic resource management functions
@@ -1537,7 +1537,7 @@ vmw_gb_surface_define_internal(struct drm_device *dev,
user_srf = container_of(srf, struct vmw_user_surface, srf);
if (drm_is_primary_client(file_priv))
- user_srf->master = drm_master_get(file_priv->master);
+ user_srf->master = drm_file_get_master(file_priv);
ret = ttm_read_lock(&dev_priv->reservation_sem, true);
if (unlikely(ret != 0))
--
2.30.2
^ permalink raw reply related [relevance 12%]
* [PATCH AUTOSEL 5.10 101/176] Bluetooth: schedule SCO timeouts with delayed_work
` (4 preceding siblings ...)
2021-09-09 11:50 12% ` [PATCH AUTOSEL 5.10 100/176] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Sasha Levin
@ 2021-09-09 11:50 10% ` Sasha Levin
2021-09-09 11:50 9% ` [PATCH AUTOSEL 5.10 102/176] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:50 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+2f6d7c28bb4bf7e82060,
Luiz Augusto von Dentz, Sasha Levin, linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit ba316be1b6a00db7126ed9a39f9bee434a508043 ]
struct sock.sk_timer should be used as a sock cleanup timer. However,
SCO uses it to implement sock timeouts.
This causes issues because struct sock.sk_timer's callback is run in
an IRQ context, and the timer callback function sco_sock_timeout takes
a spin lock on the socket. However, other functions such as
sco_conn_del and sco_conn_ready take the spin lock with interrupts
enabled.
This inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} lock usage could
lead to deadlocks as reported by Syzbot [1]:
CPU0
----
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
<Interrupt>
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
To fix this, we use delayed work to implement SCO sock timouts
instead. This allows us to avoid taking the spin lock on the socket in
an IRQ context, and corrects the misuse of struct sock.sk_timer.
As a note, cancel_delayed_work is used instead of
cancel_delayed_work_sync in sco_sock_set_timer and
sco_sock_clear_timer to avoid a deadlock. In the future, the call to
bh_lock_sock inside sco_sock_timeout should be changed to lock_sock to
synchronize with other functions using lock_sock. However, since
sco_sock_set_timer and sco_sock_clear_timer are sometimes called under
the locked socket (in sco_connect and __sco_sock_close),
cancel_delayed_work_sync might cause them to sleep until an
sco_sock_timeout that has started finishes running. But
sco_sock_timeout would also sleep until it can grab the lock_sock.
Using cancel_delayed_work is fine because sco_sock_timeout does not
change from run to run, hence there is no functional difference
between:
1. waiting for a timeout to finish running before scheduling another
timeout
2. scheduling another timeout while a timeout is running.
Link: https://syzkaller.appspot.com/bug?id=9089d89de0502e120f234ca0fc8a703f7368b31e [1]
Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Tested-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 35 +++++++++++++++++++++++++++++------
1 file changed, 29 insertions(+), 6 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 22a110f37abc..8f4389370d33 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -48,6 +48,8 @@ struct sco_conn {
spinlock_t lock;
struct sock *sk;
+ struct delayed_work timeout_work;
+
unsigned int mtu;
};
@@ -74,9 +76,20 @@ struct sco_pinfo {
#define SCO_CONN_TIMEOUT (HZ * 40)
#define SCO_DISCONN_TIMEOUT (HZ * 2)
-static void sco_sock_timeout(struct timer_list *t)
+static void sco_sock_timeout(struct work_struct *work)
{
- struct sock *sk = from_timer(sk, t, sk_timer);
+ struct sco_conn *conn = container_of(work, struct sco_conn,
+ timeout_work.work);
+ struct sock *sk;
+
+ sco_conn_lock(conn);
+ sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
+ sco_conn_unlock(conn);
+
+ if (!sk)
+ return;
BT_DBG("sock %p state %d", sk, sk->sk_state);
@@ -91,14 +104,21 @@ static void sco_sock_timeout(struct timer_list *t)
static void sco_sock_set_timer(struct sock *sk, long timeout)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d timeout %ld", sk, sk->sk_state, timeout);
- sk_reset_timer(sk, &sk->sk_timer, jiffies + timeout);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
+ schedule_delayed_work(&sco_pi(sk)->conn->timeout_work, timeout);
}
static void sco_sock_clear_timer(struct sock *sk)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d", sk, sk->sk_state);
- sk_stop_timer(sk, &sk->sk_timer);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
}
/* ---- SCO connections ---- */
@@ -179,6 +199,9 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
bh_unlock_sock(sk);
sco_sock_kill(sk);
sock_put(sk);
+
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
}
hcon->sco_data = NULL;
@@ -193,6 +216,8 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
+
if (parent)
bt_accept_enqueue(parent, sk, true);
}
@@ -500,8 +525,6 @@ static struct sock *sco_sock_alloc(struct net *net, struct socket *sock,
sco_pi(sk)->setting = BT_VOICE_CVSD_16BIT;
- timer_setup(&sk->sk_timer, sco_sock_timeout, 0);
-
bt_sock_link(&sco_sk_list, sk);
return sk;
}
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH AUTOSEL 5.10 062/176] Bluetooth: skip invalid hci_sync_conn_complete_evt
` (2 preceding siblings ...)
2021-09-09 11:48 8% ` [PATCH AUTOSEL 5.10 020/176] drm: protect drm_master pointers in drm_lease.c Sasha Levin
@ 2021-09-09 11:49 11% ` Sasha Levin
2021-09-09 11:50 12% ` [PATCH AUTOSEL 5.10 100/176] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Sasha Levin
` (2 subsequent siblings)
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:49 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+66264bf2fd0476be7e6c,
Marcel Holtmann, Sasha Levin, linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index e59ae24a8f17..45de2d8b9a9d 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -4329,6 +4329,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.10 018/176] drm: avoid blocking in drm_clients_info's rcu section
@ 2021-09-09 11:48 11% ` Sasha Levin
2021-09-09 11:48 10% ` [PATCH AUTOSEL 5.10 019/176] drm: serialize drm_file.master with a new spinlock Sasha Levin
` (5 subsequent siblings)
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:48 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Daniel Vetter, Sasha Levin, dri-devel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 5eff9585de220cdd131237f5665db5e6c6bdf590 ]
Inside drm_clients_info, the rcu_read_lock is held to lock
pid_task()->comm. However, within this protected section, a call to
drm_is_current_master is made, which involves a mutex lock in a future
patch. However, this is illegal because the mutex lock might block
while in the RCU read-side critical section.
Since drm_is_current_master isn't protected by rcu_read_lock, we avoid
this by moving it out of the RCU critical section.
The following report came from intel-gfx ci's
igt@debugfs_test@read_all_entries testcase:
=============================
[ BUG: Invalid wait context ]
5.13.0-CI-Patchwork_20515+ #1 Tainted: G W
-----------------------------
debugfs_test/1101 is trying to lock:
ffff888132d901a8 (&dev->master_mutex){+.+.}-{3:3}, at:
drm_is_current_master+0x1e/0x50
other info that might help us debug this:
context-{4:4}
3 locks held by debugfs_test/1101:
#0: ffff88810fdffc90 (&p->lock){+.+.}-{3:3}, at:
seq_read_iter+0x53/0x3b0
#1: ffff888132d90240 (&dev->filelist_mutex){+.+.}-{3:3}, at:
drm_clients_info+0x63/0x2a0
#2: ffffffff82734220 (rcu_read_lock){....}-{1:2}, at:
drm_clients_info+0x1b1/0x2a0
stack backtrace:
CPU: 8 PID: 1101 Comm: debugfs_test Tainted: G W
5.13.0-CI-Patchwork_20515+ #1
Hardware name: Intel Corporation CometLake Client Platform/CometLake S
UDIMM (ERB/CRB), BIOS CMLSFWR1.R00.1263.D00.1906260926 06/26/2019
Call Trace:
dump_stack+0x7f/0xad
__lock_acquire.cold.78+0x2af/0x2ca
lock_acquire+0xd3/0x300
? drm_is_current_master+0x1e/0x50
? __mutex_lock+0x76/0x970
? lockdep_hardirqs_on+0xbf/0x130
__mutex_lock+0xab/0x970
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
drm_is_current_master+0x1e/0x50
drm_clients_info+0x107/0x2a0
seq_read_iter+0x178/0x3b0
seq_read+0x104/0x150
full_proxy_read+0x4e/0x80
vfs_read+0xa5/0x1b0
ksys_read+0x5a/0xd0
do_syscall_64+0x39/0xb0
entry_SYSCALL_64_after_hwframe+0x44/0xae
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-3-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_debugfs.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/gpu/drm/drm_debugfs.c b/drivers/gpu/drm/drm_debugfs.c
index 3d7182001004..b0a826489488 100644
--- a/drivers/gpu/drm/drm_debugfs.c
+++ b/drivers/gpu/drm/drm_debugfs.c
@@ -91,6 +91,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
mutex_lock(&dev->filelist_mutex);
list_for_each_entry_reverse(priv, &dev->filelist, lhead) {
struct task_struct *task;
+ bool is_current_master = drm_is_current_master(priv);
rcu_read_lock(); /* locks pid_task()->comm */
task = pid_task(priv->pid, PIDTYPE_PID);
@@ -99,7 +100,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
task ? task->comm : "<unknown>",
pid_vnr(priv->pid),
priv->minor->index,
- drm_is_current_master(priv) ? 'y' : 'n',
+ is_current_master ? 'y' : 'n',
priv->authenticated ? 'y' : 'n',
from_kuid_munged(seq_user_ns(m), uid),
priv->magic);
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.10 019/176] drm: serialize drm_file.master with a new spinlock
2021-09-09 11:48 11% ` [PATCH AUTOSEL 5.10 018/176] drm: avoid blocking in drm_clients_info's rcu section Sasha Levin
@ 2021-09-09 11:48 10% ` Sasha Levin
2021-09-09 11:48 8% ` [PATCH AUTOSEL 5.10 020/176] drm: protect drm_master pointers in drm_lease.c Sasha Levin
` (4 subsequent siblings)
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:48 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Daniel Vetter, Sasha Levin, dri-devel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 0b0860a3cf5eccf183760b1177a1dcdb821b0b66 ]
Currently, drm_file.master pointers should be protected by
drm_device.master_mutex when being dereferenced. This is because
drm_file.master is not invariant for the lifetime of drm_file. If
drm_file is not the creator of master, then drm_file.is_master is
false, and a call to drm_setmaster_ioctl will invoke
drm_new_set_master, which then allocates a new master for drm_file and
puts the old master.
Thus, without holding drm_device.master_mutex, the old value of
drm_file.master could be freed while it is being used by another
concurrent process.
However, it is not always possible to lock drm_device.master_mutex to
dereference drm_file.master. Through the fbdev emulation code, this
might occur in a deep nest of other locks. But drm_device.master_mutex
is also the outermost lock in the nesting hierarchy, so this leads to
potential deadlocks.
To address this, we introduce a new spin lock at the bottom of the
lock hierarchy that only serializes drm_file.master. With this change,
the value of drm_file.master changes only when both
drm_device.master_mutex and drm_file.master_lookup_lock are
held. Hence, any process holding either of those locks can ensure that
the value of drm_file.master will not change concurrently.
Since no lock depends on the new drm_file.master_lookup_lock, when
drm_file.master is dereferenced, but drm_device.master_mutex cannot be
held, we can safely protect the master pointer with
drm_file.master_lookup_lock.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-5-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_auth.c | 17 +++++++++++------
drivers/gpu/drm/drm_file.c | 1 +
include/drm/drm_file.h | 12 +++++++++---
3 files changed, 21 insertions(+), 9 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index 232abbba3686..0024ad93d24b 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -135,16 +135,18 @@ static void drm_set_master(struct drm_device *dev, struct drm_file *fpriv,
static int drm_new_set_master(struct drm_device *dev, struct drm_file *fpriv)
{
struct drm_master *old_master;
+ struct drm_master *new_master;
lockdep_assert_held_once(&dev->master_mutex);
WARN_ON(fpriv->is_master);
old_master = fpriv->master;
- fpriv->master = drm_master_create(dev);
- if (!fpriv->master) {
- fpriv->master = old_master;
+ new_master = drm_master_create(dev);
+ if (!new_master)
return -ENOMEM;
- }
+ spin_lock(&fpriv->master_lookup_lock);
+ fpriv->master = new_master;
+ spin_unlock(&fpriv->master_lookup_lock);
fpriv->is_master = 1;
fpriv->authenticated = 1;
@@ -302,10 +304,13 @@ int drm_master_open(struct drm_file *file_priv)
/* if there is no current master make this fd it, but do not create
* any master object for render clients */
mutex_lock(&dev->master_mutex);
- if (!dev->master)
+ if (!dev->master) {
ret = drm_new_set_master(dev, file_priv);
- else
+ } else {
+ spin_lock(&file_priv->master_lookup_lock);
file_priv->master = drm_master_get(dev->master);
+ spin_unlock(&file_priv->master_lookup_lock);
+ }
mutex_unlock(&dev->master_mutex);
return ret;
diff --git a/drivers/gpu/drm/drm_file.c b/drivers/gpu/drm/drm_file.c
index 0ac4566ae3f4..537e7de8e9c3 100644
--- a/drivers/gpu/drm/drm_file.c
+++ b/drivers/gpu/drm/drm_file.c
@@ -177,6 +177,7 @@ struct drm_file *drm_file_alloc(struct drm_minor *minor)
init_waitqueue_head(&file->event_wait);
file->event_space = 4096; /* set aside 4k for event buffer */
+ spin_lock_init(&file->master_lookup_lock);
mutex_init(&file->event_read_lock);
if (drm_core_check_feature(dev, DRIVER_GEM))
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index 716990bace10..ca659ece3ee8 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -226,15 +226,21 @@ struct drm_file {
/**
* @master:
*
- * Master this node is currently associated with. Only relevant if
- * drm_is_primary_client() returns true. Note that this only
- * matches &drm_device.master if the master is the currently active one.
+ * Master this node is currently associated with. Protected by struct
+ * &drm_device.master_mutex, and serialized by @master_lookup_lock.
+ *
+ * Only relevant if drm_is_primary_client() returns true. Note that
+ * this only matches &drm_device.master if the master is the currently
+ * active one.
*
* See also @authentication and @is_master and the :ref:`section on
* primary nodes and authentication <drm_primary_node>`.
*/
struct drm_master *master;
+ /** @master_lock: Serializes @master. */
+ spinlock_t master_lookup_lock;
+
/** @pid: Process that opened this file. */
struct pid *pid;
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH AUTOSEL 5.10 020/176] drm: protect drm_master pointers in drm_lease.c
2021-09-09 11:48 11% ` [PATCH AUTOSEL 5.10 018/176] drm: avoid blocking in drm_clients_info's rcu section Sasha Levin
2021-09-09 11:48 10% ` [PATCH AUTOSEL 5.10 019/176] drm: serialize drm_file.master with a new spinlock Sasha Levin
@ 2021-09-09 11:48 8% ` Sasha Levin
2021-09-09 11:49 11% ` [PATCH AUTOSEL 5.10 062/176] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
` (3 subsequent siblings)
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:48 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Daniel Vetter, Emil Velikov, Sasha Levin,
dri-devel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 56f0729a510f92151682ff6c89f69724d5595d6e ]
drm_file->master pointers should be protected by
drm_device.master_mutex or drm_file.master_lookup_lock when being
dereferenced.
However, in drm_lease.c, there are multiple instances where
drm_file->master is accessed and dereferenced while neither lock is
held. This makes drm_lease.c vulnerable to use-after-free bugs.
We address this issue in 2 ways:
1. Add a new drm_file_get_master() function that calls drm_master_get
on drm_file->master while holding on to
drm_file.master_lookup_lock. Since drm_master_get increments the
reference count of master, this prevents master from being freed until
we unreference it with drm_master_put.
2. In each case where drm_file->master is directly accessed and
eventually dereferenced in drm_lease.c, we wrap the access in a call
to the new drm_file_get_master function, then unreference the master
pointer once we are done using it.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Emil Velikov <emil.l.velikov@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-6-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_auth.c | 25 ++++++++++++
drivers/gpu/drm/drm_lease.c | 81 ++++++++++++++++++++++++++++---------
include/drm/drm_auth.h | 1 +
include/drm/drm_file.h | 6 +++
4 files changed, 93 insertions(+), 20 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index 0024ad93d24b..c7adbeaf10b1 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -376,6 +376,31 @@ struct drm_master *drm_master_get(struct drm_master *master)
}
EXPORT_SYMBOL(drm_master_get);
+/**
+ * drm_file_get_master - reference &drm_file.master of @file_priv
+ * @file_priv: DRM file private
+ *
+ * Increments the reference count of @file_priv's &drm_file.master and returns
+ * the &drm_file.master. If @file_priv has no &drm_file.master, returns NULL.
+ *
+ * Master pointers returned from this function should be unreferenced using
+ * drm_master_put().
+ */
+struct drm_master *drm_file_get_master(struct drm_file *file_priv)
+{
+ struct drm_master *master = NULL;
+
+ spin_lock(&file_priv->master_lookup_lock);
+ if (!file_priv->master)
+ goto unlock;
+ master = drm_master_get(file_priv->master);
+
+unlock:
+ spin_unlock(&file_priv->master_lookup_lock);
+ return master;
+}
+EXPORT_SYMBOL(drm_file_get_master);
+
static void drm_master_destroy(struct kref *kref)
{
struct drm_master *master = container_of(kref, struct drm_master, refcount);
diff --git a/drivers/gpu/drm/drm_lease.c b/drivers/gpu/drm/drm_lease.c
index da4f085fc09e..aef22634005e 100644
--- a/drivers/gpu/drm/drm_lease.c
+++ b/drivers/gpu/drm/drm_lease.c
@@ -107,10 +107,19 @@ static bool _drm_has_leased(struct drm_master *master, int id)
*/
bool _drm_lease_held(struct drm_file *file_priv, int id)
{
- if (!file_priv || !file_priv->master)
+ bool ret;
+ struct drm_master *master;
+
+ if (!file_priv)
return true;
- return _drm_lease_held_master(file_priv->master, id);
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return true;
+ ret = _drm_lease_held_master(master, id);
+ drm_master_put(&master);
+
+ return ret;
}
/**
@@ -129,13 +138,22 @@ bool drm_lease_held(struct drm_file *file_priv, int id)
struct drm_master *master;
bool ret;
- if (!file_priv || !file_priv->master || !file_priv->master->lessor)
+ if (!file_priv)
return true;
- master = file_priv->master;
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return true;
+ if (!master->lessor) {
+ ret = true;
+ goto out;
+ }
mutex_lock(&master->dev->mode_config.idr_mutex);
ret = _drm_lease_held_master(master, id);
mutex_unlock(&master->dev->mode_config.idr_mutex);
+
+out:
+ drm_master_put(&master);
return ret;
}
@@ -155,10 +173,16 @@ uint32_t drm_lease_filter_crtcs(struct drm_file *file_priv, uint32_t crtcs_in)
int count_in, count_out;
uint32_t crtcs_out = 0;
- if (!file_priv || !file_priv->master || !file_priv->master->lessor)
+ if (!file_priv)
return crtcs_in;
- master = file_priv->master;
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return crtcs_in;
+ if (!master->lessor) {
+ crtcs_out = crtcs_in;
+ goto out;
+ }
dev = master->dev;
count_in = count_out = 0;
@@ -177,6 +201,9 @@ uint32_t drm_lease_filter_crtcs(struct drm_file *file_priv, uint32_t crtcs_in)
count_in++;
}
mutex_unlock(&master->dev->mode_config.idr_mutex);
+
+out:
+ drm_master_put(&master);
return crtcs_out;
}
@@ -490,7 +517,7 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
size_t object_count;
int ret = 0;
struct idr leases;
- struct drm_master *lessor = lessor_priv->master;
+ struct drm_master *lessor;
struct drm_master *lessee = NULL;
struct file *lessee_file = NULL;
struct file *lessor_file = lessor_priv->filp;
@@ -502,12 +529,6 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
- /* Do not allow sub-leases */
- if (lessor->lessor) {
- DRM_DEBUG_LEASE("recursive leasing not allowed\n");
- return -EINVAL;
- }
-
/* need some objects */
if (cl->object_count == 0) {
DRM_DEBUG_LEASE("no objects in lease\n");
@@ -519,12 +540,22 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
return -EINVAL;
}
+ lessor = drm_file_get_master(lessor_priv);
+ /* Do not allow sub-leases */
+ if (lessor->lessor) {
+ DRM_DEBUG_LEASE("recursive leasing not allowed\n");
+ ret = -EINVAL;
+ goto out_lessor;
+ }
+
object_count = cl->object_count;
object_ids = memdup_user(u64_to_user_ptr(cl->object_ids),
array_size(object_count, sizeof(__u32)));
- if (IS_ERR(object_ids))
- return PTR_ERR(object_ids);
+ if (IS_ERR(object_ids)) {
+ ret = PTR_ERR(object_ids);
+ goto out_lessor;
+ }
idr_init(&leases);
@@ -535,14 +566,15 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
if (ret) {
DRM_DEBUG_LEASE("lease object lookup failed: %i\n", ret);
idr_destroy(&leases);
- return ret;
+ goto out_lessor;
}
/* Allocate a file descriptor for the lease */
fd = get_unused_fd_flags(cl->flags & (O_CLOEXEC | O_NONBLOCK));
if (fd < 0) {
idr_destroy(&leases);
- return fd;
+ ret = fd;
+ goto out_lessor;
}
DRM_DEBUG_LEASE("Creating lease\n");
@@ -578,6 +610,7 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
/* Hook up the fd */
fd_install(fd, lessee_file);
+ drm_master_put(&lessor);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl succeeded\n");
return 0;
@@ -587,6 +620,8 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
out_leases:
put_unused_fd(fd);
+out_lessor:
+ drm_master_put(&lessor);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl failed: %d\n", ret);
return ret;
}
@@ -609,7 +644,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
struct drm_mode_list_lessees *arg = data;
__u32 __user *lessee_ids = (__u32 __user *) (uintptr_t) (arg->lessees_ptr);
__u32 count_lessees = arg->count_lessees;
- struct drm_master *lessor = lessor_priv->master, *lessee;
+ struct drm_master *lessor, *lessee;
int count;
int ret = 0;
@@ -620,6 +655,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessor = drm_file_get_master(lessor_priv);
DRM_DEBUG_LEASE("List lessees for %d\n", lessor->lessee_id);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -643,6 +679,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
arg->count_lessees = count;
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessor);
return ret;
}
@@ -662,7 +699,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
struct drm_mode_get_lease *arg = data;
__u32 __user *object_ids = (__u32 __user *) (uintptr_t) (arg->objects_ptr);
__u32 count_objects = arg->count_objects;
- struct drm_master *lessee = lessee_priv->master;
+ struct drm_master *lessee;
struct idr *object_idr;
int count;
void *entry;
@@ -676,6 +713,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessee = drm_file_get_master(lessee_priv);
DRM_DEBUG_LEASE("get lease for %d\n", lessee->lessee_id);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -703,6 +741,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
arg->count_objects = count;
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessee);
return ret;
}
@@ -721,7 +760,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
void *data, struct drm_file *lessor_priv)
{
struct drm_mode_revoke_lease *arg = data;
- struct drm_master *lessor = lessor_priv->master;
+ struct drm_master *lessor;
struct drm_master *lessee;
int ret = 0;
@@ -731,6 +770,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessor = drm_file_get_master(lessor_priv);
mutex_lock(&dev->mode_config.idr_mutex);
lessee = _drm_find_lessee(lessor, arg->lessee_id);
@@ -751,6 +791,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
fail:
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessor);
return ret;
}
diff --git a/include/drm/drm_auth.h b/include/drm/drm_auth.h
index 6bf8b2b78991..f99d3417f304 100644
--- a/include/drm/drm_auth.h
+++ b/include/drm/drm_auth.h
@@ -107,6 +107,7 @@ struct drm_master {
};
struct drm_master *drm_master_get(struct drm_master *master);
+struct drm_master *drm_file_get_master(struct drm_file *file_priv);
void drm_master_put(struct drm_master **master);
bool drm_is_current_master(struct drm_file *fpriv);
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index ca659ece3ee8..42d04607d091 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -233,6 +233,12 @@ struct drm_file {
* this only matches &drm_device.master if the master is the currently
* active one.
*
+ * When dereferencing this pointer, either hold struct
+ * &drm_device.master_mutex for the duration of the pointer's use, or
+ * use drm_file_get_master() if struct &drm_device.master_mutex is not
+ * currently held and there is no other need to hold it. This prevents
+ * @master from being freed during use.
+ *
* See also @authentication and @is_master and the :ref:`section on
* primary nodes and authentication <drm_primary_node>`.
*/
--
2.30.2
^ permalink raw reply related [relevance 8%]
* [PATCH AUTOSEL 5.13 121/219] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
` (3 preceding siblings ...)
2021-09-09 11:44 11% ` [PATCH AUTOSEL 5.13 077/219] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
@ 2021-09-09 11:44 12% ` Sasha Levin
2021-09-09 11:44 10% ` [PATCH AUTOSEL 5.13 123/219] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
2021-09-09 11:45 9% ` [PATCH AUTOSEL 5.13 124/219] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:44 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Daniel Vetter, Zack Rusin, Sasha Levin, dri-devel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2bc5da528dd570c5ecabc107e6fbdbc55974276f ]
drm_file.master should be protected by either drm_device.master_mutex
or drm_file.master_lookup_lock when being dereferenced. However,
drm_master_get is called on unprotected file_priv->master pointers in
vmw_surface_define_ioctl and vmw_gb_surface_define_internal.
This is fixed by replacing drm_master_get with drm_file_get_master.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Reviewed-by: Zack Rusin <zackr@vmware.com>
Signed-off-by: Zack Rusin <zackr@vmware.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20210724111824.59266-4-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
index 5ff88f8c2382..0c62cd400b64 100644
--- a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
+++ b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
@@ -869,7 +869,7 @@ int vmw_surface_define_ioctl(struct drm_device *dev, void *data,
user_srf->prime.base.shareable = false;
user_srf->prime.base.tfile = NULL;
if (drm_is_primary_client(file_priv))
- user_srf->master = drm_master_get(file_priv->master);
+ user_srf->master = drm_file_get_master(file_priv);
/**
* From this point, the generic resource management functions
@@ -1540,7 +1540,7 @@ vmw_gb_surface_define_internal(struct drm_device *dev,
user_srf = container_of(srf, struct vmw_user_surface, srf);
if (drm_is_primary_client(file_priv))
- user_srf->master = drm_master_get(file_priv->master);
+ user_srf->master = drm_file_get_master(file_priv);
ret = ttm_read_lock(&dev_priv->reservation_sem, true);
if (unlikely(ret != 0))
--
2.30.2
^ permalink raw reply related [relevance 12%]
* [PATCH AUTOSEL 5.13 124/219] Bluetooth: avoid circular locks in sco_sock_connect
` (5 preceding siblings ...)
2021-09-09 11:44 10% ` [PATCH AUTOSEL 5.13 123/219] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
@ 2021-09-09 11:45 9% ` Sasha Levin
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:45 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Sasha Levin,
linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index f909577932ca..2640325fbe0d 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -237,44 +237,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -282,7 +270,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -292,9 +280,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -589,6 +574,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -603,12 +589,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH AUTOSEL 5.13 123/219] Bluetooth: schedule SCO timeouts with delayed_work
` (4 preceding siblings ...)
2021-09-09 11:44 12% ` [PATCH AUTOSEL 5.13 121/219] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Sasha Levin
@ 2021-09-09 11:44 10% ` Sasha Levin
2021-09-09 11:45 9% ` [PATCH AUTOSEL 5.13 124/219] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:44 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+2f6d7c28bb4bf7e82060,
Luiz Augusto von Dentz, Sasha Levin, linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit ba316be1b6a00db7126ed9a39f9bee434a508043 ]
struct sock.sk_timer should be used as a sock cleanup timer. However,
SCO uses it to implement sock timeouts.
This causes issues because struct sock.sk_timer's callback is run in
an IRQ context, and the timer callback function sco_sock_timeout takes
a spin lock on the socket. However, other functions such as
sco_conn_del and sco_conn_ready take the spin lock with interrupts
enabled.
This inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} lock usage could
lead to deadlocks as reported by Syzbot [1]:
CPU0
----
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
<Interrupt>
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
To fix this, we use delayed work to implement SCO sock timouts
instead. This allows us to avoid taking the spin lock on the socket in
an IRQ context, and corrects the misuse of struct sock.sk_timer.
As a note, cancel_delayed_work is used instead of
cancel_delayed_work_sync in sco_sock_set_timer and
sco_sock_clear_timer to avoid a deadlock. In the future, the call to
bh_lock_sock inside sco_sock_timeout should be changed to lock_sock to
synchronize with other functions using lock_sock. However, since
sco_sock_set_timer and sco_sock_clear_timer are sometimes called under
the locked socket (in sco_connect and __sco_sock_close),
cancel_delayed_work_sync might cause them to sleep until an
sco_sock_timeout that has started finishes running. But
sco_sock_timeout would also sleep until it can grab the lock_sock.
Using cancel_delayed_work is fine because sco_sock_timeout does not
change from run to run, hence there is no functional difference
between:
1. waiting for a timeout to finish running before scheduling another
timeout
2. scheduling another timeout while a timeout is running.
Link: https://syzkaller.appspot.com/bug?id=9089d89de0502e120f234ca0fc8a703f7368b31e [1]
Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Tested-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 35 +++++++++++++++++++++++++++++------
1 file changed, 29 insertions(+), 6 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 3bd41563f118..f909577932ca 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -48,6 +48,8 @@ struct sco_conn {
spinlock_t lock;
struct sock *sk;
+ struct delayed_work timeout_work;
+
unsigned int mtu;
};
@@ -74,9 +76,20 @@ struct sco_pinfo {
#define SCO_CONN_TIMEOUT (HZ * 40)
#define SCO_DISCONN_TIMEOUT (HZ * 2)
-static void sco_sock_timeout(struct timer_list *t)
+static void sco_sock_timeout(struct work_struct *work)
{
- struct sock *sk = from_timer(sk, t, sk_timer);
+ struct sco_conn *conn = container_of(work, struct sco_conn,
+ timeout_work.work);
+ struct sock *sk;
+
+ sco_conn_lock(conn);
+ sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
+ sco_conn_unlock(conn);
+
+ if (!sk)
+ return;
BT_DBG("sock %p state %d", sk, sk->sk_state);
@@ -91,14 +104,21 @@ static void sco_sock_timeout(struct timer_list *t)
static void sco_sock_set_timer(struct sock *sk, long timeout)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d timeout %ld", sk, sk->sk_state, timeout);
- sk_reset_timer(sk, &sk->sk_timer, jiffies + timeout);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
+ schedule_delayed_work(&sco_pi(sk)->conn->timeout_work, timeout);
}
static void sco_sock_clear_timer(struct sock *sk)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d", sk, sk->sk_state);
- sk_stop_timer(sk, &sk->sk_timer);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
}
/* ---- SCO connections ---- */
@@ -179,6 +199,9 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
bh_unlock_sock(sk);
sco_sock_kill(sk);
sock_put(sk);
+
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
}
hcon->sco_data = NULL;
@@ -193,6 +216,8 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
+
if (parent)
bt_accept_enqueue(parent, sk, true);
}
@@ -500,8 +525,6 @@ static struct sock *sco_sock_alloc(struct net *net, struct socket *sock,
sco_pi(sk)->setting = BT_VOICE_CVSD_16BIT;
- timer_setup(&sk->sk_timer, sco_sock_timeout, 0);
-
bt_sock_link(&sco_sk_list, sk);
return sk;
}
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH AUTOSEL 5.13 077/219] Bluetooth: skip invalid hci_sync_conn_complete_evt
` (2 preceding siblings ...)
2021-09-09 11:43 8% ` [PATCH AUTOSEL 5.13 029/219] drm: protect drm_master pointers in drm_lease.c Sasha Levin
@ 2021-09-09 11:44 11% ` Sasha Levin
2021-09-09 11:44 12% ` [PATCH AUTOSEL 5.13 121/219] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Sasha Levin
` (2 subsequent siblings)
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:44 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+66264bf2fd0476be7e6c,
Marcel Holtmann, Sasha Levin, linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index 62c99e015609..c5de24372971 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -4373,6 +4373,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.13 028/219] drm: serialize drm_file.master with a new spinlock
2021-09-09 11:43 11% ` [PATCH AUTOSEL 5.13 027/219] drm: avoid blocking in drm_clients_info's rcu section Sasha Levin
@ 2021-09-09 11:43 10% ` Sasha Levin
2021-09-09 11:43 8% ` [PATCH AUTOSEL 5.13 029/219] drm: protect drm_master pointers in drm_lease.c Sasha Levin
` (4 subsequent siblings)
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:43 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Daniel Vetter, Sasha Levin, dri-devel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 0b0860a3cf5eccf183760b1177a1dcdb821b0b66 ]
Currently, drm_file.master pointers should be protected by
drm_device.master_mutex when being dereferenced. This is because
drm_file.master is not invariant for the lifetime of drm_file. If
drm_file is not the creator of master, then drm_file.is_master is
false, and a call to drm_setmaster_ioctl will invoke
drm_new_set_master, which then allocates a new master for drm_file and
puts the old master.
Thus, without holding drm_device.master_mutex, the old value of
drm_file.master could be freed while it is being used by another
concurrent process.
However, it is not always possible to lock drm_device.master_mutex to
dereference drm_file.master. Through the fbdev emulation code, this
might occur in a deep nest of other locks. But drm_device.master_mutex
is also the outermost lock in the nesting hierarchy, so this leads to
potential deadlocks.
To address this, we introduce a new spin lock at the bottom of the
lock hierarchy that only serializes drm_file.master. With this change,
the value of drm_file.master changes only when both
drm_device.master_mutex and drm_file.master_lookup_lock are
held. Hence, any process holding either of those locks can ensure that
the value of drm_file.master will not change concurrently.
Since no lock depends on the new drm_file.master_lookup_lock, when
drm_file.master is dereferenced, but drm_device.master_mutex cannot be
held, we can safely protect the master pointer with
drm_file.master_lookup_lock.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-5-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_auth.c | 17 +++++++++++------
drivers/gpu/drm/drm_file.c | 1 +
include/drm/drm_file.h | 12 +++++++++---
3 files changed, 21 insertions(+), 9 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index 232abbba3686..0024ad93d24b 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -135,16 +135,18 @@ static void drm_set_master(struct drm_device *dev, struct drm_file *fpriv,
static int drm_new_set_master(struct drm_device *dev, struct drm_file *fpriv)
{
struct drm_master *old_master;
+ struct drm_master *new_master;
lockdep_assert_held_once(&dev->master_mutex);
WARN_ON(fpriv->is_master);
old_master = fpriv->master;
- fpriv->master = drm_master_create(dev);
- if (!fpriv->master) {
- fpriv->master = old_master;
+ new_master = drm_master_create(dev);
+ if (!new_master)
return -ENOMEM;
- }
+ spin_lock(&fpriv->master_lookup_lock);
+ fpriv->master = new_master;
+ spin_unlock(&fpriv->master_lookup_lock);
fpriv->is_master = 1;
fpriv->authenticated = 1;
@@ -302,10 +304,13 @@ int drm_master_open(struct drm_file *file_priv)
/* if there is no current master make this fd it, but do not create
* any master object for render clients */
mutex_lock(&dev->master_mutex);
- if (!dev->master)
+ if (!dev->master) {
ret = drm_new_set_master(dev, file_priv);
- else
+ } else {
+ spin_lock(&file_priv->master_lookup_lock);
file_priv->master = drm_master_get(dev->master);
+ spin_unlock(&file_priv->master_lookup_lock);
+ }
mutex_unlock(&dev->master_mutex);
return ret;
diff --git a/drivers/gpu/drm/drm_file.c b/drivers/gpu/drm/drm_file.c
index 7efbccffc2ea..c6feeb5651b0 100644
--- a/drivers/gpu/drm/drm_file.c
+++ b/drivers/gpu/drm/drm_file.c
@@ -176,6 +176,7 @@ struct drm_file *drm_file_alloc(struct drm_minor *minor)
init_waitqueue_head(&file->event_wait);
file->event_space = 4096; /* set aside 4k for event buffer */
+ spin_lock_init(&file->master_lookup_lock);
mutex_init(&file->event_read_lock);
if (drm_core_check_feature(dev, DRIVER_GEM))
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index b81b3bfb08c8..9b82988e3427 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -226,15 +226,21 @@ struct drm_file {
/**
* @master:
*
- * Master this node is currently associated with. Only relevant if
- * drm_is_primary_client() returns true. Note that this only
- * matches &drm_device.master if the master is the currently active one.
+ * Master this node is currently associated with. Protected by struct
+ * &drm_device.master_mutex, and serialized by @master_lookup_lock.
+ *
+ * Only relevant if drm_is_primary_client() returns true. Note that
+ * this only matches &drm_device.master if the master is the currently
+ * active one.
*
* See also @authentication and @is_master and the :ref:`section on
* primary nodes and authentication <drm_primary_node>`.
*/
struct drm_master *master;
+ /** @master_lock: Serializes @master. */
+ spinlock_t master_lookup_lock;
+
/** @pid: Process that opened this file. */
struct pid *pid;
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH AUTOSEL 5.13 029/219] drm: protect drm_master pointers in drm_lease.c
2021-09-09 11:43 11% ` [PATCH AUTOSEL 5.13 027/219] drm: avoid blocking in drm_clients_info's rcu section Sasha Levin
2021-09-09 11:43 10% ` [PATCH AUTOSEL 5.13 028/219] drm: serialize drm_file.master with a new spinlock Sasha Levin
@ 2021-09-09 11:43 8% ` Sasha Levin
2021-09-09 11:44 11% ` [PATCH AUTOSEL 5.13 077/219] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
` (3 subsequent siblings)
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:43 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Daniel Vetter, Emil Velikov, Sasha Levin,
dri-devel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 56f0729a510f92151682ff6c89f69724d5595d6e ]
drm_file->master pointers should be protected by
drm_device.master_mutex or drm_file.master_lookup_lock when being
dereferenced.
However, in drm_lease.c, there are multiple instances where
drm_file->master is accessed and dereferenced while neither lock is
held. This makes drm_lease.c vulnerable to use-after-free bugs.
We address this issue in 2 ways:
1. Add a new drm_file_get_master() function that calls drm_master_get
on drm_file->master while holding on to
drm_file.master_lookup_lock. Since drm_master_get increments the
reference count of master, this prevents master from being freed until
we unreference it with drm_master_put.
2. In each case where drm_file->master is directly accessed and
eventually dereferenced in drm_lease.c, we wrap the access in a call
to the new drm_file_get_master function, then unreference the master
pointer once we are done using it.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Emil Velikov <emil.l.velikov@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-6-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_auth.c | 25 ++++++++++++
drivers/gpu/drm/drm_lease.c | 81 ++++++++++++++++++++++++++++---------
include/drm/drm_auth.h | 1 +
include/drm/drm_file.h | 6 +++
4 files changed, 93 insertions(+), 20 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index 0024ad93d24b..c7adbeaf10b1 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -376,6 +376,31 @@ struct drm_master *drm_master_get(struct drm_master *master)
}
EXPORT_SYMBOL(drm_master_get);
+/**
+ * drm_file_get_master - reference &drm_file.master of @file_priv
+ * @file_priv: DRM file private
+ *
+ * Increments the reference count of @file_priv's &drm_file.master and returns
+ * the &drm_file.master. If @file_priv has no &drm_file.master, returns NULL.
+ *
+ * Master pointers returned from this function should be unreferenced using
+ * drm_master_put().
+ */
+struct drm_master *drm_file_get_master(struct drm_file *file_priv)
+{
+ struct drm_master *master = NULL;
+
+ spin_lock(&file_priv->master_lookup_lock);
+ if (!file_priv->master)
+ goto unlock;
+ master = drm_master_get(file_priv->master);
+
+unlock:
+ spin_unlock(&file_priv->master_lookup_lock);
+ return master;
+}
+EXPORT_SYMBOL(drm_file_get_master);
+
static void drm_master_destroy(struct kref *kref)
{
struct drm_master *master = container_of(kref, struct drm_master, refcount);
diff --git a/drivers/gpu/drm/drm_lease.c b/drivers/gpu/drm/drm_lease.c
index da4f085fc09e..aef22634005e 100644
--- a/drivers/gpu/drm/drm_lease.c
+++ b/drivers/gpu/drm/drm_lease.c
@@ -107,10 +107,19 @@ static bool _drm_has_leased(struct drm_master *master, int id)
*/
bool _drm_lease_held(struct drm_file *file_priv, int id)
{
- if (!file_priv || !file_priv->master)
+ bool ret;
+ struct drm_master *master;
+
+ if (!file_priv)
return true;
- return _drm_lease_held_master(file_priv->master, id);
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return true;
+ ret = _drm_lease_held_master(master, id);
+ drm_master_put(&master);
+
+ return ret;
}
/**
@@ -129,13 +138,22 @@ bool drm_lease_held(struct drm_file *file_priv, int id)
struct drm_master *master;
bool ret;
- if (!file_priv || !file_priv->master || !file_priv->master->lessor)
+ if (!file_priv)
return true;
- master = file_priv->master;
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return true;
+ if (!master->lessor) {
+ ret = true;
+ goto out;
+ }
mutex_lock(&master->dev->mode_config.idr_mutex);
ret = _drm_lease_held_master(master, id);
mutex_unlock(&master->dev->mode_config.idr_mutex);
+
+out:
+ drm_master_put(&master);
return ret;
}
@@ -155,10 +173,16 @@ uint32_t drm_lease_filter_crtcs(struct drm_file *file_priv, uint32_t crtcs_in)
int count_in, count_out;
uint32_t crtcs_out = 0;
- if (!file_priv || !file_priv->master || !file_priv->master->lessor)
+ if (!file_priv)
return crtcs_in;
- master = file_priv->master;
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return crtcs_in;
+ if (!master->lessor) {
+ crtcs_out = crtcs_in;
+ goto out;
+ }
dev = master->dev;
count_in = count_out = 0;
@@ -177,6 +201,9 @@ uint32_t drm_lease_filter_crtcs(struct drm_file *file_priv, uint32_t crtcs_in)
count_in++;
}
mutex_unlock(&master->dev->mode_config.idr_mutex);
+
+out:
+ drm_master_put(&master);
return crtcs_out;
}
@@ -490,7 +517,7 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
size_t object_count;
int ret = 0;
struct idr leases;
- struct drm_master *lessor = lessor_priv->master;
+ struct drm_master *lessor;
struct drm_master *lessee = NULL;
struct file *lessee_file = NULL;
struct file *lessor_file = lessor_priv->filp;
@@ -502,12 +529,6 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
- /* Do not allow sub-leases */
- if (lessor->lessor) {
- DRM_DEBUG_LEASE("recursive leasing not allowed\n");
- return -EINVAL;
- }
-
/* need some objects */
if (cl->object_count == 0) {
DRM_DEBUG_LEASE("no objects in lease\n");
@@ -519,12 +540,22 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
return -EINVAL;
}
+ lessor = drm_file_get_master(lessor_priv);
+ /* Do not allow sub-leases */
+ if (lessor->lessor) {
+ DRM_DEBUG_LEASE("recursive leasing not allowed\n");
+ ret = -EINVAL;
+ goto out_lessor;
+ }
+
object_count = cl->object_count;
object_ids = memdup_user(u64_to_user_ptr(cl->object_ids),
array_size(object_count, sizeof(__u32)));
- if (IS_ERR(object_ids))
- return PTR_ERR(object_ids);
+ if (IS_ERR(object_ids)) {
+ ret = PTR_ERR(object_ids);
+ goto out_lessor;
+ }
idr_init(&leases);
@@ -535,14 +566,15 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
if (ret) {
DRM_DEBUG_LEASE("lease object lookup failed: %i\n", ret);
idr_destroy(&leases);
- return ret;
+ goto out_lessor;
}
/* Allocate a file descriptor for the lease */
fd = get_unused_fd_flags(cl->flags & (O_CLOEXEC | O_NONBLOCK));
if (fd < 0) {
idr_destroy(&leases);
- return fd;
+ ret = fd;
+ goto out_lessor;
}
DRM_DEBUG_LEASE("Creating lease\n");
@@ -578,6 +610,7 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
/* Hook up the fd */
fd_install(fd, lessee_file);
+ drm_master_put(&lessor);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl succeeded\n");
return 0;
@@ -587,6 +620,8 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
out_leases:
put_unused_fd(fd);
+out_lessor:
+ drm_master_put(&lessor);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl failed: %d\n", ret);
return ret;
}
@@ -609,7 +644,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
struct drm_mode_list_lessees *arg = data;
__u32 __user *lessee_ids = (__u32 __user *) (uintptr_t) (arg->lessees_ptr);
__u32 count_lessees = arg->count_lessees;
- struct drm_master *lessor = lessor_priv->master, *lessee;
+ struct drm_master *lessor, *lessee;
int count;
int ret = 0;
@@ -620,6 +655,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessor = drm_file_get_master(lessor_priv);
DRM_DEBUG_LEASE("List lessees for %d\n", lessor->lessee_id);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -643,6 +679,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
arg->count_lessees = count;
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessor);
return ret;
}
@@ -662,7 +699,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
struct drm_mode_get_lease *arg = data;
__u32 __user *object_ids = (__u32 __user *) (uintptr_t) (arg->objects_ptr);
__u32 count_objects = arg->count_objects;
- struct drm_master *lessee = lessee_priv->master;
+ struct drm_master *lessee;
struct idr *object_idr;
int count;
void *entry;
@@ -676,6 +713,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessee = drm_file_get_master(lessee_priv);
DRM_DEBUG_LEASE("get lease for %d\n", lessee->lessee_id);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -703,6 +741,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
arg->count_objects = count;
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessee);
return ret;
}
@@ -721,7 +760,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
void *data, struct drm_file *lessor_priv)
{
struct drm_mode_revoke_lease *arg = data;
- struct drm_master *lessor = lessor_priv->master;
+ struct drm_master *lessor;
struct drm_master *lessee;
int ret = 0;
@@ -731,6 +770,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessor = drm_file_get_master(lessor_priv);
mutex_lock(&dev->mode_config.idr_mutex);
lessee = _drm_find_lessee(lessor, arg->lessee_id);
@@ -751,6 +791,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
fail:
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessor);
return ret;
}
diff --git a/include/drm/drm_auth.h b/include/drm/drm_auth.h
index 6bf8b2b78991..f99d3417f304 100644
--- a/include/drm/drm_auth.h
+++ b/include/drm/drm_auth.h
@@ -107,6 +107,7 @@ struct drm_master {
};
struct drm_master *drm_master_get(struct drm_master *master);
+struct drm_master *drm_file_get_master(struct drm_file *file_priv);
void drm_master_put(struct drm_master **master);
bool drm_is_current_master(struct drm_file *fpriv);
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index 9b82988e3427..726cfe0ff5f5 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -233,6 +233,12 @@ struct drm_file {
* this only matches &drm_device.master if the master is the currently
* active one.
*
+ * When dereferencing this pointer, either hold struct
+ * &drm_device.master_mutex for the duration of the pointer's use, or
+ * use drm_file_get_master() if struct &drm_device.master_mutex is not
+ * currently held and there is no other need to hold it. This prevents
+ * @master from being freed during use.
+ *
* See also @authentication and @is_master and the :ref:`section on
* primary nodes and authentication <drm_primary_node>`.
*/
--
2.30.2
^ permalink raw reply related [relevance 8%]
* [PATCH AUTOSEL 5.13 027/219] drm: avoid blocking in drm_clients_info's rcu section
@ 2021-09-09 11:43 11% ` Sasha Levin
2021-09-09 11:43 10% ` [PATCH AUTOSEL 5.13 028/219] drm: serialize drm_file.master with a new spinlock Sasha Levin
` (5 subsequent siblings)
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:43 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Daniel Vetter, Sasha Levin, dri-devel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 5eff9585de220cdd131237f5665db5e6c6bdf590 ]
Inside drm_clients_info, the rcu_read_lock is held to lock
pid_task()->comm. However, within this protected section, a call to
drm_is_current_master is made, which involves a mutex lock in a future
patch. However, this is illegal because the mutex lock might block
while in the RCU read-side critical section.
Since drm_is_current_master isn't protected by rcu_read_lock, we avoid
this by moving it out of the RCU critical section.
The following report came from intel-gfx ci's
igt@debugfs_test@read_all_entries testcase:
=============================
[ BUG: Invalid wait context ]
5.13.0-CI-Patchwork_20515+ #1 Tainted: G W
-----------------------------
debugfs_test/1101 is trying to lock:
ffff888132d901a8 (&dev->master_mutex){+.+.}-{3:3}, at:
drm_is_current_master+0x1e/0x50
other info that might help us debug this:
context-{4:4}
3 locks held by debugfs_test/1101:
#0: ffff88810fdffc90 (&p->lock){+.+.}-{3:3}, at:
seq_read_iter+0x53/0x3b0
#1: ffff888132d90240 (&dev->filelist_mutex){+.+.}-{3:3}, at:
drm_clients_info+0x63/0x2a0
#2: ffffffff82734220 (rcu_read_lock){....}-{1:2}, at:
drm_clients_info+0x1b1/0x2a0
stack backtrace:
CPU: 8 PID: 1101 Comm: debugfs_test Tainted: G W
5.13.0-CI-Patchwork_20515+ #1
Hardware name: Intel Corporation CometLake Client Platform/CometLake S
UDIMM (ERB/CRB), BIOS CMLSFWR1.R00.1263.D00.1906260926 06/26/2019
Call Trace:
dump_stack+0x7f/0xad
__lock_acquire.cold.78+0x2af/0x2ca
lock_acquire+0xd3/0x300
? drm_is_current_master+0x1e/0x50
? __mutex_lock+0x76/0x970
? lockdep_hardirqs_on+0xbf/0x130
__mutex_lock+0xab/0x970
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
drm_is_current_master+0x1e/0x50
drm_clients_info+0x107/0x2a0
seq_read_iter+0x178/0x3b0
seq_read+0x104/0x150
full_proxy_read+0x4e/0x80
vfs_read+0xa5/0x1b0
ksys_read+0x5a/0xd0
do_syscall_64+0x39/0xb0
entry_SYSCALL_64_after_hwframe+0x44/0xae
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-3-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_debugfs.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/gpu/drm/drm_debugfs.c b/drivers/gpu/drm/drm_debugfs.c
index 3d7182001004..b0a826489488 100644
--- a/drivers/gpu/drm/drm_debugfs.c
+++ b/drivers/gpu/drm/drm_debugfs.c
@@ -91,6 +91,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
mutex_lock(&dev->filelist_mutex);
list_for_each_entry_reverse(priv, &dev->filelist, lhead) {
struct task_struct *task;
+ bool is_current_master = drm_is_current_master(priv);
rcu_read_lock(); /* locks pid_task()->comm */
task = pid_task(priv->pid, PIDTYPE_PID);
@@ -99,7 +100,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
task ? task->comm : "<unknown>",
pid_vnr(priv->pid),
priv->minor->index,
- drm_is_current_master(priv) ? 'y' : 'n',
+ is_current_master ? 'y' : 'n',
priv->authenticated ? 'y' : 'n',
from_kuid_munged(seq_user_ns(m), uid),
priv->magic);
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.14 140/252] Bluetooth: schedule SCO timeouts with delayed_work
` (4 preceding siblings ...)
2021-09-09 11:39 12% ` [PATCH AUTOSEL 5.14 138/252] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Sasha Levin
@ 2021-09-09 11:39 10% ` Sasha Levin
2021-09-09 11:39 9% ` [PATCH AUTOSEL 5.14 141/252] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:39 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+2f6d7c28bb4bf7e82060,
Luiz Augusto von Dentz, Sasha Levin, linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit ba316be1b6a00db7126ed9a39f9bee434a508043 ]
struct sock.sk_timer should be used as a sock cleanup timer. However,
SCO uses it to implement sock timeouts.
This causes issues because struct sock.sk_timer's callback is run in
an IRQ context, and the timer callback function sco_sock_timeout takes
a spin lock on the socket. However, other functions such as
sco_conn_del and sco_conn_ready take the spin lock with interrupts
enabled.
This inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} lock usage could
lead to deadlocks as reported by Syzbot [1]:
CPU0
----
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
<Interrupt>
lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
To fix this, we use delayed work to implement SCO sock timouts
instead. This allows us to avoid taking the spin lock on the socket in
an IRQ context, and corrects the misuse of struct sock.sk_timer.
As a note, cancel_delayed_work is used instead of
cancel_delayed_work_sync in sco_sock_set_timer and
sco_sock_clear_timer to avoid a deadlock. In the future, the call to
bh_lock_sock inside sco_sock_timeout should be changed to lock_sock to
synchronize with other functions using lock_sock. However, since
sco_sock_set_timer and sco_sock_clear_timer are sometimes called under
the locked socket (in sco_connect and __sco_sock_close),
cancel_delayed_work_sync might cause them to sleep until an
sco_sock_timeout that has started finishes running. But
sco_sock_timeout would also sleep until it can grab the lock_sock.
Using cancel_delayed_work is fine because sco_sock_timeout does not
change from run to run, hence there is no functional difference
between:
1. waiting for a timeout to finish running before scheduling another
timeout
2. scheduling another timeout while a timeout is running.
Link: https://syzkaller.appspot.com/bug?id=9089d89de0502e120f234ca0fc8a703f7368b31e [1]
Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Tested-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 35 +++++++++++++++++++++++++++++------
1 file changed, 29 insertions(+), 6 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index d9a4e88dacbb..706254af952e 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -48,6 +48,8 @@ struct sco_conn {
spinlock_t lock;
struct sock *sk;
+ struct delayed_work timeout_work;
+
unsigned int mtu;
};
@@ -74,9 +76,20 @@ struct sco_pinfo {
#define SCO_CONN_TIMEOUT (HZ * 40)
#define SCO_DISCONN_TIMEOUT (HZ * 2)
-static void sco_sock_timeout(struct timer_list *t)
+static void sco_sock_timeout(struct work_struct *work)
{
- struct sock *sk = from_timer(sk, t, sk_timer);
+ struct sco_conn *conn = container_of(work, struct sco_conn,
+ timeout_work.work);
+ struct sock *sk;
+
+ sco_conn_lock(conn);
+ sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
+ sco_conn_unlock(conn);
+
+ if (!sk)
+ return;
BT_DBG("sock %p state %d", sk, sk->sk_state);
@@ -91,14 +104,21 @@ static void sco_sock_timeout(struct timer_list *t)
static void sco_sock_set_timer(struct sock *sk, long timeout)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d timeout %ld", sk, sk->sk_state, timeout);
- sk_reset_timer(sk, &sk->sk_timer, jiffies + timeout);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
+ schedule_delayed_work(&sco_pi(sk)->conn->timeout_work, timeout);
}
static void sco_sock_clear_timer(struct sock *sk)
{
+ if (!sco_pi(sk)->conn)
+ return;
+
BT_DBG("sock %p state %d", sk, sk->sk_state);
- sk_stop_timer(sk, &sk->sk_timer);
+ cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
}
/* ---- SCO connections ---- */
@@ -179,6 +199,9 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
bh_unlock_sock(sk);
sco_sock_kill(sk);
sock_put(sk);
+
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
}
hcon->sco_data = NULL;
@@ -193,6 +216,8 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
+
if (parent)
bt_accept_enqueue(parent, sk, true);
}
@@ -500,8 +525,6 @@ static struct sock *sco_sock_alloc(struct net *net, struct socket *sock,
sco_pi(sk)->setting = BT_VOICE_CVSD_16BIT;
- timer_setup(&sk->sk_timer, sco_sock_timeout, 0);
-
bt_sock_link(&sco_sk_list, sk);
return sk;
}
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH AUTOSEL 5.14 141/252] Bluetooth: avoid circular locks in sco_sock_connect
` (5 preceding siblings ...)
2021-09-09 11:39 10% ` [PATCH AUTOSEL 5.14 140/252] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
@ 2021-09-09 11:39 9% ` Sasha Levin
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:39 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Luiz Augusto von Dentz, Sasha Levin,
linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 734bc5ff783115aa3164f4e9dd5967ae78e0a8ab ]
In a future patch, calls to bh_lock_sock in sco.c should be replaced
by lock_sock now that none of the functions are run in IRQ context.
However, doing so results in a circular locking dependency:
======================================================
WARNING: possible circular locking dependency detected
5.14.0-rc4-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.2/14867 is trying to acquire lock:
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
lock_sock include/net/sock.h:1613 [inline]
ffff88803e3c1120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at:
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
but task is already holding lock:
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_disconn_cfm include/net/bluetooth/hci_core.h:1497 [inline]
ffffffff8d2dc7c8 (hci_cb_list_lock){+.+.}-{3:3}, at:
hci_conn_hash_flush+0xda/0x260 net/bluetooth/hci_conn.c:1608
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (hci_cb_list_lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
hci_connect_cfm include/net/bluetooth/hci_core.h:1482 [inline]
hci_remote_features_evt net/bluetooth/hci_event.c:3263 [inline]
hci_event_packet+0x2f4d/0x7c50 net/bluetooth/hci_event.c:6240
hci_rx_work+0x4f8/0xd30 net/bluetooth/hci_core.c:5122
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
-> #1 (&hdev->lock){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:959 [inline]
__mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104
sco_connect net/bluetooth/sco.c:245 [inline]
sco_sock_connect+0x227/0xa10 net/bluetooth/sco.c:601
__sys_connect_file+0x155/0x1a0 net/socket.c:1879
__sys_connect+0x161/0x190 net/socket.c:1896
__do_sys_connect net/socket.c:1906 [inline]
__se_sys_connect net/socket.c:1903 [inline]
__x64_sys_connect+0x6f/0xb0 net/socket.c:1903
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
-> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3051 [inline]
check_prevs_add kernel/locking/lockdep.c:3174 [inline]
validate_chain kernel/locking/lockdep.c:3789 [inline]
__lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
lock_sock_nested+0xca/0x120 net/core/sock.c:3170
lock_sock include/net/sock.h:1613 [inline]
sco_conn_del+0x12a/0x2a0 net/bluetooth/sco.c:191
sco_disconn_cfm+0x71/0xb0 net/bluetooth/sco.c:1202
hci_disconn_cfm include/net/bluetooth/hci_core.h:1500 [inline]
hci_conn_hash_flush+0x127/0x260 net/bluetooth/hci_conn.c:1608
hci_dev_do_close+0x528/0x1130 net/bluetooth/hci_core.c:1778
hci_unregister_dev+0x1c0/0x5a0 net/bluetooth/hci_core.c:4015
vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2160 kernel/signal.c:2808
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
ret_from_fork+0x15/0x30 arch/x86/entry/entry_64.S:288
other info that might help us debug this:
Chain exists of:
sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hci_cb_list_lock);
lock(&hdev->lock);
lock(hci_cb_list_lock);
lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
*** DEADLOCK ***
The issue is that the lock hierarchy should go from &hdev->lock -->
hci_cb_list_lock --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO. For example,
one such call trace is:
hci_dev_do_close():
hci_dev_lock();
hci_conn_hash_flush():
hci_disconn_cfm():
mutex_lock(&hci_cb_list_lock);
sco_disconn_cfm():
sco_conn_del():
lock_sock(sk);
However, in sco_sock_connect, we call lock_sock before calling
hci_dev_lock inside sco_connect, thus inverting the lock hierarchy.
We fix this by pulling the call to hci_dev_lock out from sco_connect.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/sco.c | 39 ++++++++++++++++-----------------------
1 file changed, 16 insertions(+), 23 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 706254af952e..cd25d54142bc 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -237,44 +237,32 @@ static int sco_chan_add(struct sco_conn *conn, struct sock *sk,
return err;
}
-static int sco_connect(struct sock *sk)
+static int sco_connect(struct hci_dev *hdev, struct sock *sk)
{
struct sco_conn *conn;
struct hci_conn *hcon;
- struct hci_dev *hdev;
int err, type;
BT_DBG("%pMR -> %pMR", &sco_pi(sk)->src, &sco_pi(sk)->dst);
- hdev = hci_get_route(&sco_pi(sk)->dst, &sco_pi(sk)->src, BDADDR_BREDR);
- if (!hdev)
- return -EHOSTUNREACH;
-
- hci_dev_lock(hdev);
-
if (lmp_esco_capable(hdev) && !disable_esco)
type = ESCO_LINK;
else
type = SCO_LINK;
if (sco_pi(sk)->setting == BT_VOICE_TRANSPARENT &&
- (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev))) {
- err = -EOPNOTSUPP;
- goto done;
- }
+ (!lmp_transp_capable(hdev) || !lmp_esco_capable(hdev)))
+ return -EOPNOTSUPP;
hcon = hci_connect_sco(hdev, type, &sco_pi(sk)->dst,
sco_pi(sk)->setting);
- if (IS_ERR(hcon)) {
- err = PTR_ERR(hcon);
- goto done;
- }
+ if (IS_ERR(hcon))
+ return PTR_ERR(hcon);
conn = sco_conn_add(hcon);
if (!conn) {
hci_conn_drop(hcon);
- err = -ENOMEM;
- goto done;
+ return -ENOMEM;
}
/* Update source addr of the socket */
@@ -282,7 +270,7 @@ static int sco_connect(struct sock *sk)
err = sco_chan_add(conn, sk, NULL);
if (err)
- goto done;
+ return err;
if (hcon->state == BT_CONNECTED) {
sco_sock_clear_timer(sk);
@@ -292,9 +280,6 @@ static int sco_connect(struct sock *sk)
sco_sock_set_timer(sk, sk->sk_sndtimeo);
}
-done:
- hci_dev_unlock(hdev);
- hci_dev_put(hdev);
return err;
}
@@ -589,6 +574,7 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
{
struct sockaddr_sco *sa = (struct sockaddr_sco *) addr;
struct sock *sk = sock->sk;
+ struct hci_dev *hdev;
int err;
BT_DBG("sk %p", sk);
@@ -603,12 +589,19 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
+ hdev = hci_get_route(&sa->sco_bdaddr, &sco_pi(sk)->src, BDADDR_BREDR);
+ if (!hdev)
+ return -EHOSTUNREACH;
+ hci_dev_lock(hdev);
+
lock_sock(sk);
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
- err = sco_connect(sk);
+ err = sco_connect(hdev, sk);
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
if (err)
goto done;
--
2.30.2
^ permalink raw reply related [relevance 9%]
* [PATCH AUTOSEL 5.14 138/252] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
` (3 preceding siblings ...)
2021-09-09 11:38 11% ` [PATCH AUTOSEL 5.14 090/252] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
@ 2021-09-09 11:39 12% ` Sasha Levin
2021-09-09 11:39 10% ` [PATCH AUTOSEL 5.14 140/252] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
2021-09-09 11:39 9% ` [PATCH AUTOSEL 5.14 141/252] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:39 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Daniel Vetter, Zack Rusin, Sasha Levin, dri-devel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2bc5da528dd570c5ecabc107e6fbdbc55974276f ]
drm_file.master should be protected by either drm_device.master_mutex
or drm_file.master_lookup_lock when being dereferenced. However,
drm_master_get is called on unprotected file_priv->master pointers in
vmw_surface_define_ioctl and vmw_gb_surface_define_internal.
This is fixed by replacing drm_master_get with drm_file_get_master.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Reviewed-by: Zack Rusin <zackr@vmware.com>
Signed-off-by: Zack Rusin <zackr@vmware.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20210724111824.59266-4-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
index 47c03a276515..a04ad7812960 100644
--- a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
+++ b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
@@ -865,7 +865,7 @@ int vmw_surface_define_ioctl(struct drm_device *dev, void *data,
user_srf->prime.base.shareable = false;
user_srf->prime.base.tfile = NULL;
if (drm_is_primary_client(file_priv))
- user_srf->master = drm_master_get(file_priv->master);
+ user_srf->master = drm_file_get_master(file_priv);
/**
* From this point, the generic resource management functions
@@ -1534,7 +1534,7 @@ vmw_gb_surface_define_internal(struct drm_device *dev,
user_srf = container_of(srf, struct vmw_user_surface, srf);
if (drm_is_primary_client(file_priv))
- user_srf->master = drm_master_get(file_priv->master);
+ user_srf->master = drm_file_get_master(file_priv);
res = &user_srf->srf.res;
--
2.30.2
^ permalink raw reply related [relevance 12%]
* [PATCH AUTOSEL 5.14 090/252] Bluetooth: skip invalid hci_sync_conn_complete_evt
` (2 preceding siblings ...)
2021-09-09 11:37 8% ` [PATCH AUTOSEL 5.14 036/252] drm: protect drm_master pointers in drm_lease.c Sasha Levin
@ 2021-09-09 11:38 11% ` Sasha Levin
2021-09-09 11:39 12% ` [PATCH AUTOSEL 5.14 138/252] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Sasha Levin
` (2 subsequent siblings)
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:38 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+66264bf2fd0476be7e6c,
Marcel Holtmann, Sasha Levin, linux-bluetooth, netdev
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 92fe24a7db751b80925214ede43f8d2be792ea7b ]
Syzbot reported a corrupted list in kobject_add_internal [1]. This
happens when multiple HCI_EV_SYNC_CONN_COMPLETE event packets with
status 0 are sent for the same HCI connection. This causes us to
register the device more than once which corrupts the kset list.
As this is forbidden behavior, we add a check for whether we're
trying to process the same HCI_EV_SYNC_CONN_COMPLETE event multiple
times for one connection. If that's the case, the event is invalid, so
we report an error that the device is misbehaving, and ignore the
packet.
Link: https://syzkaller.appspot.com/bug?extid=66264bf2fd0476be7e6c [1]
Reported-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Tested-by: syzbot+66264bf2fd0476be7e6c@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/hci_event.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c
index 1c3018202564..ea7fc09478be 100644
--- a/net/bluetooth/hci_event.c
+++ b/net/bluetooth/hci_event.c
@@ -4382,6 +4382,21 @@ static void hci_sync_conn_complete_evt(struct hci_dev *hdev,
switch (ev->status) {
case 0x00:
+ /* The synchronous connection complete event should only be
+ * sent once per new connection. Receiving a successful
+ * complete event when the connection status is already
+ * BT_CONNECTED means that the device is misbehaving and sent
+ * multiple complete event packets for the same new connection.
+ *
+ * Registering the device more than once can corrupt kernel
+ * memory, hence upon detecting this invalid event, we report
+ * an error and ignore the packet.
+ */
+ if (conn->state == BT_CONNECTED) {
+ bt_dev_err(hdev, "Ignoring connect complete event for existing connection");
+ goto unlock;
+ }
+
conn->handle = __le16_to_cpu(ev->handle);
conn->state = BT_CONNECTED;
conn->type = ev->link_type;
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.14 034/252] drm: avoid blocking in drm_clients_info's rcu section
@ 2021-09-09 11:37 11% ` Sasha Levin
2021-09-09 11:37 10% ` [PATCH AUTOSEL 5.14 035/252] drm: serialize drm_file.master with a new spinlock Sasha Levin
` (5 subsequent siblings)
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:37 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Daniel Vetter, Sasha Levin, dri-devel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 5eff9585de220cdd131237f5665db5e6c6bdf590 ]
Inside drm_clients_info, the rcu_read_lock is held to lock
pid_task()->comm. However, within this protected section, a call to
drm_is_current_master is made, which involves a mutex lock in a future
patch. However, this is illegal because the mutex lock might block
while in the RCU read-side critical section.
Since drm_is_current_master isn't protected by rcu_read_lock, we avoid
this by moving it out of the RCU critical section.
The following report came from intel-gfx ci's
igt@debugfs_test@read_all_entries testcase:
=============================
[ BUG: Invalid wait context ]
5.13.0-CI-Patchwork_20515+ #1 Tainted: G W
-----------------------------
debugfs_test/1101 is trying to lock:
ffff888132d901a8 (&dev->master_mutex){+.+.}-{3:3}, at:
drm_is_current_master+0x1e/0x50
other info that might help us debug this:
context-{4:4}
3 locks held by debugfs_test/1101:
#0: ffff88810fdffc90 (&p->lock){+.+.}-{3:3}, at:
seq_read_iter+0x53/0x3b0
#1: ffff888132d90240 (&dev->filelist_mutex){+.+.}-{3:3}, at:
drm_clients_info+0x63/0x2a0
#2: ffffffff82734220 (rcu_read_lock){....}-{1:2}, at:
drm_clients_info+0x1b1/0x2a0
stack backtrace:
CPU: 8 PID: 1101 Comm: debugfs_test Tainted: G W
5.13.0-CI-Patchwork_20515+ #1
Hardware name: Intel Corporation CometLake Client Platform/CometLake S
UDIMM (ERB/CRB), BIOS CMLSFWR1.R00.1263.D00.1906260926 06/26/2019
Call Trace:
dump_stack+0x7f/0xad
__lock_acquire.cold.78+0x2af/0x2ca
lock_acquire+0xd3/0x300
? drm_is_current_master+0x1e/0x50
? __mutex_lock+0x76/0x970
? lockdep_hardirqs_on+0xbf/0x130
__mutex_lock+0xab/0x970
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
? drm_is_current_master+0x1e/0x50
drm_is_current_master+0x1e/0x50
drm_clients_info+0x107/0x2a0
seq_read_iter+0x178/0x3b0
seq_read+0x104/0x150
full_proxy_read+0x4e/0x80
vfs_read+0xa5/0x1b0
ksys_read+0x5a/0xd0
do_syscall_64+0x39/0xb0
entry_SYSCALL_64_after_hwframe+0x44/0xae
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-3-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_debugfs.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/gpu/drm/drm_debugfs.c b/drivers/gpu/drm/drm_debugfs.c
index 3d7182001004..b0a826489488 100644
--- a/drivers/gpu/drm/drm_debugfs.c
+++ b/drivers/gpu/drm/drm_debugfs.c
@@ -91,6 +91,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
mutex_lock(&dev->filelist_mutex);
list_for_each_entry_reverse(priv, &dev->filelist, lhead) {
struct task_struct *task;
+ bool is_current_master = drm_is_current_master(priv);
rcu_read_lock(); /* locks pid_task()->comm */
task = pid_task(priv->pid, PIDTYPE_PID);
@@ -99,7 +100,7 @@ static int drm_clients_info(struct seq_file *m, void *data)
task ? task->comm : "<unknown>",
pid_vnr(priv->pid),
priv->minor->index,
- drm_is_current_master(priv) ? 'y' : 'n',
+ is_current_master ? 'y' : 'n',
priv->authenticated ? 'y' : 'n',
from_kuid_munged(seq_user_ns(m), uid),
priv->magic);
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.14 035/252] drm: serialize drm_file.master with a new spinlock
2021-09-09 11:37 11% ` [PATCH AUTOSEL 5.14 034/252] drm: avoid blocking in drm_clients_info's rcu section Sasha Levin
@ 2021-09-09 11:37 10% ` Sasha Levin
2021-09-09 11:37 8% ` [PATCH AUTOSEL 5.14 036/252] drm: protect drm_master pointers in drm_lease.c Sasha Levin
` (4 subsequent siblings)
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:37 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Daniel Vetter, Sasha Levin, dri-devel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 0b0860a3cf5eccf183760b1177a1dcdb821b0b66 ]
Currently, drm_file.master pointers should be protected by
drm_device.master_mutex when being dereferenced. This is because
drm_file.master is not invariant for the lifetime of drm_file. If
drm_file is not the creator of master, then drm_file.is_master is
false, and a call to drm_setmaster_ioctl will invoke
drm_new_set_master, which then allocates a new master for drm_file and
puts the old master.
Thus, without holding drm_device.master_mutex, the old value of
drm_file.master could be freed while it is being used by another
concurrent process.
However, it is not always possible to lock drm_device.master_mutex to
dereference drm_file.master. Through the fbdev emulation code, this
might occur in a deep nest of other locks. But drm_device.master_mutex
is also the outermost lock in the nesting hierarchy, so this leads to
potential deadlocks.
To address this, we introduce a new spin lock at the bottom of the
lock hierarchy that only serializes drm_file.master. With this change,
the value of drm_file.master changes only when both
drm_device.master_mutex and drm_file.master_lookup_lock are
held. Hence, any process holding either of those locks can ensure that
the value of drm_file.master will not change concurrently.
Since no lock depends on the new drm_file.master_lookup_lock, when
drm_file.master is dereferenced, but drm_device.master_mutex cannot be
held, we can safely protect the master pointer with
drm_file.master_lookup_lock.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-5-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_auth.c | 17 +++++++++++------
drivers/gpu/drm/drm_file.c | 1 +
include/drm/drm_file.h | 12 +++++++++---
3 files changed, 21 insertions(+), 9 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index b59b26a71ad5..cbb896b91d94 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -135,16 +135,18 @@ static void drm_set_master(struct drm_device *dev, struct drm_file *fpriv,
static int drm_new_set_master(struct drm_device *dev, struct drm_file *fpriv)
{
struct drm_master *old_master;
+ struct drm_master *new_master;
lockdep_assert_held_once(&dev->master_mutex);
WARN_ON(fpriv->is_master);
old_master = fpriv->master;
- fpriv->master = drm_master_create(dev);
- if (!fpriv->master) {
- fpriv->master = old_master;
+ new_master = drm_master_create(dev);
+ if (!new_master)
return -ENOMEM;
- }
+ spin_lock(&fpriv->master_lookup_lock);
+ fpriv->master = new_master;
+ spin_unlock(&fpriv->master_lookup_lock);
fpriv->is_master = 1;
fpriv->authenticated = 1;
@@ -303,10 +305,13 @@ int drm_master_open(struct drm_file *file_priv)
* any master object for render clients
*/
mutex_lock(&dev->master_mutex);
- if (!dev->master)
+ if (!dev->master) {
ret = drm_new_set_master(dev, file_priv);
- else
+ } else {
+ spin_lock(&file_priv->master_lookup_lock);
file_priv->master = drm_master_get(dev->master);
+ spin_unlock(&file_priv->master_lookup_lock);
+ }
mutex_unlock(&dev->master_mutex);
return ret;
diff --git a/drivers/gpu/drm/drm_file.c b/drivers/gpu/drm/drm_file.c
index d4f0bac6f8f8..ceb1a9723855 100644
--- a/drivers/gpu/drm/drm_file.c
+++ b/drivers/gpu/drm/drm_file.c
@@ -176,6 +176,7 @@ struct drm_file *drm_file_alloc(struct drm_minor *minor)
init_waitqueue_head(&file->event_wait);
file->event_space = 4096; /* set aside 4k for event buffer */
+ spin_lock_init(&file->master_lookup_lock);
mutex_init(&file->event_read_lock);
if (drm_core_check_feature(dev, DRIVER_GEM))
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index b81b3bfb08c8..9b82988e3427 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -226,15 +226,21 @@ struct drm_file {
/**
* @master:
*
- * Master this node is currently associated with. Only relevant if
- * drm_is_primary_client() returns true. Note that this only
- * matches &drm_device.master if the master is the currently active one.
+ * Master this node is currently associated with. Protected by struct
+ * &drm_device.master_mutex, and serialized by @master_lookup_lock.
+ *
+ * Only relevant if drm_is_primary_client() returns true. Note that
+ * this only matches &drm_device.master if the master is the currently
+ * active one.
*
* See also @authentication and @is_master and the :ref:`section on
* primary nodes and authentication <drm_primary_node>`.
*/
struct drm_master *master;
+ /** @master_lock: Serializes @master. */
+ spinlock_t master_lookup_lock;
+
/** @pid: Process that opened this file. */
struct pid *pid;
--
2.30.2
^ permalink raw reply related [relevance 10%]
* [PATCH AUTOSEL 5.14 036/252] drm: protect drm_master pointers in drm_lease.c
2021-09-09 11:37 11% ` [PATCH AUTOSEL 5.14 034/252] drm: avoid blocking in drm_clients_info's rcu section Sasha Levin
2021-09-09 11:37 10% ` [PATCH AUTOSEL 5.14 035/252] drm: serialize drm_file.master with a new spinlock Sasha Levin
@ 2021-09-09 11:37 8% ` Sasha Levin
2021-09-09 11:38 11% ` [PATCH AUTOSEL 5.14 090/252] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
` (3 subsequent siblings)
6 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-09 11:37 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Daniel Vetter, Emil Velikov, Sasha Levin,
dri-devel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 56f0729a510f92151682ff6c89f69724d5595d6e ]
drm_file->master pointers should be protected by
drm_device.master_mutex or drm_file.master_lookup_lock when being
dereferenced.
However, in drm_lease.c, there are multiple instances where
drm_file->master is accessed and dereferenced while neither lock is
held. This makes drm_lease.c vulnerable to use-after-free bugs.
We address this issue in 2 ways:
1. Add a new drm_file_get_master() function that calls drm_master_get
on drm_file->master while holding on to
drm_file.master_lookup_lock. Since drm_master_get increments the
reference count of master, this prevents master from being freed until
we unreference it with drm_master_put.
2. In each case where drm_file->master is directly accessed and
eventually dereferenced in drm_lease.c, we wrap the access in a call
to the new drm_file_get_master function, then unreference the master
pointer once we are done using it.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Emil Velikov <emil.l.velikov@gmail.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20210712043508.11584-6-desmondcheongzx@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/gpu/drm/drm_auth.c | 25 ++++++++++++
drivers/gpu/drm/drm_lease.c | 81 ++++++++++++++++++++++++++++---------
include/drm/drm_auth.h | 1 +
include/drm/drm_file.h | 6 +++
4 files changed, 93 insertions(+), 20 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index cbb896b91d94..3a298df00901 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -377,6 +377,31 @@ struct drm_master *drm_master_get(struct drm_master *master)
}
EXPORT_SYMBOL(drm_master_get);
+/**
+ * drm_file_get_master - reference &drm_file.master of @file_priv
+ * @file_priv: DRM file private
+ *
+ * Increments the reference count of @file_priv's &drm_file.master and returns
+ * the &drm_file.master. If @file_priv has no &drm_file.master, returns NULL.
+ *
+ * Master pointers returned from this function should be unreferenced using
+ * drm_master_put().
+ */
+struct drm_master *drm_file_get_master(struct drm_file *file_priv)
+{
+ struct drm_master *master = NULL;
+
+ spin_lock(&file_priv->master_lookup_lock);
+ if (!file_priv->master)
+ goto unlock;
+ master = drm_master_get(file_priv->master);
+
+unlock:
+ spin_unlock(&file_priv->master_lookup_lock);
+ return master;
+}
+EXPORT_SYMBOL(drm_file_get_master);
+
static void drm_master_destroy(struct kref *kref)
{
struct drm_master *master = container_of(kref, struct drm_master, refcount);
diff --git a/drivers/gpu/drm/drm_lease.c b/drivers/gpu/drm/drm_lease.c
index 00fb433bcef1..92eac73d9001 100644
--- a/drivers/gpu/drm/drm_lease.c
+++ b/drivers/gpu/drm/drm_lease.c
@@ -106,10 +106,19 @@ static bool _drm_has_leased(struct drm_master *master, int id)
*/
bool _drm_lease_held(struct drm_file *file_priv, int id)
{
- if (!file_priv || !file_priv->master)
+ bool ret;
+ struct drm_master *master;
+
+ if (!file_priv)
return true;
- return _drm_lease_held_master(file_priv->master, id);
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return true;
+ ret = _drm_lease_held_master(master, id);
+ drm_master_put(&master);
+
+ return ret;
}
/**
@@ -128,13 +137,22 @@ bool drm_lease_held(struct drm_file *file_priv, int id)
struct drm_master *master;
bool ret;
- if (!file_priv || !file_priv->master || !file_priv->master->lessor)
+ if (!file_priv)
return true;
- master = file_priv->master;
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return true;
+ if (!master->lessor) {
+ ret = true;
+ goto out;
+ }
mutex_lock(&master->dev->mode_config.idr_mutex);
ret = _drm_lease_held_master(master, id);
mutex_unlock(&master->dev->mode_config.idr_mutex);
+
+out:
+ drm_master_put(&master);
return ret;
}
@@ -154,10 +172,16 @@ uint32_t drm_lease_filter_crtcs(struct drm_file *file_priv, uint32_t crtcs_in)
int count_in, count_out;
uint32_t crtcs_out = 0;
- if (!file_priv || !file_priv->master || !file_priv->master->lessor)
+ if (!file_priv)
return crtcs_in;
- master = file_priv->master;
+ master = drm_file_get_master(file_priv);
+ if (!master)
+ return crtcs_in;
+ if (!master->lessor) {
+ crtcs_out = crtcs_in;
+ goto out;
+ }
dev = master->dev;
count_in = count_out = 0;
@@ -176,6 +200,9 @@ uint32_t drm_lease_filter_crtcs(struct drm_file *file_priv, uint32_t crtcs_in)
count_in++;
}
mutex_unlock(&master->dev->mode_config.idr_mutex);
+
+out:
+ drm_master_put(&master);
return crtcs_out;
}
@@ -489,7 +516,7 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
size_t object_count;
int ret = 0;
struct idr leases;
- struct drm_master *lessor = lessor_priv->master;
+ struct drm_master *lessor;
struct drm_master *lessee = NULL;
struct file *lessee_file = NULL;
struct file *lessor_file = lessor_priv->filp;
@@ -501,12 +528,6 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
- /* Do not allow sub-leases */
- if (lessor->lessor) {
- DRM_DEBUG_LEASE("recursive leasing not allowed\n");
- return -EINVAL;
- }
-
/* need some objects */
if (cl->object_count == 0) {
DRM_DEBUG_LEASE("no objects in lease\n");
@@ -518,12 +539,22 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
return -EINVAL;
}
+ lessor = drm_file_get_master(lessor_priv);
+ /* Do not allow sub-leases */
+ if (lessor->lessor) {
+ DRM_DEBUG_LEASE("recursive leasing not allowed\n");
+ ret = -EINVAL;
+ goto out_lessor;
+ }
+
object_count = cl->object_count;
object_ids = memdup_user(u64_to_user_ptr(cl->object_ids),
array_size(object_count, sizeof(__u32)));
- if (IS_ERR(object_ids))
- return PTR_ERR(object_ids);
+ if (IS_ERR(object_ids)) {
+ ret = PTR_ERR(object_ids);
+ goto out_lessor;
+ }
idr_init(&leases);
@@ -534,14 +565,15 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
if (ret) {
DRM_DEBUG_LEASE("lease object lookup failed: %i\n", ret);
idr_destroy(&leases);
- return ret;
+ goto out_lessor;
}
/* Allocate a file descriptor for the lease */
fd = get_unused_fd_flags(cl->flags & (O_CLOEXEC | O_NONBLOCK));
if (fd < 0) {
idr_destroy(&leases);
- return fd;
+ ret = fd;
+ goto out_lessor;
}
DRM_DEBUG_LEASE("Creating lease\n");
@@ -577,6 +609,7 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
/* Hook up the fd */
fd_install(fd, lessee_file);
+ drm_master_put(&lessor);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl succeeded\n");
return 0;
@@ -586,6 +619,8 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
out_leases:
put_unused_fd(fd);
+out_lessor:
+ drm_master_put(&lessor);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl failed: %d\n", ret);
return ret;
}
@@ -608,7 +643,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
struct drm_mode_list_lessees *arg = data;
__u32 __user *lessee_ids = (__u32 __user *) (uintptr_t) (arg->lessees_ptr);
__u32 count_lessees = arg->count_lessees;
- struct drm_master *lessor = lessor_priv->master, *lessee;
+ struct drm_master *lessor, *lessee;
int count;
int ret = 0;
@@ -619,6 +654,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessor = drm_file_get_master(lessor_priv);
DRM_DEBUG_LEASE("List lessees for %d\n", lessor->lessee_id);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -642,6 +678,7 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
arg->count_lessees = count;
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessor);
return ret;
}
@@ -661,7 +698,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
struct drm_mode_get_lease *arg = data;
__u32 __user *object_ids = (__u32 __user *) (uintptr_t) (arg->objects_ptr);
__u32 count_objects = arg->count_objects;
- struct drm_master *lessee = lessee_priv->master;
+ struct drm_master *lessee;
struct idr *object_idr;
int count;
void *entry;
@@ -675,6 +712,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessee = drm_file_get_master(lessee_priv);
DRM_DEBUG_LEASE("get lease for %d\n", lessee->lessee_id);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -702,6 +740,7 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
arg->count_objects = count;
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessee);
return ret;
}
@@ -720,7 +759,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
void *data, struct drm_file *lessor_priv)
{
struct drm_mode_revoke_lease *arg = data;
- struct drm_master *lessor = lessor_priv->master;
+ struct drm_master *lessor;
struct drm_master *lessee;
int ret = 0;
@@ -730,6 +769,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ lessor = drm_file_get_master(lessor_priv);
mutex_lock(&dev->mode_config.idr_mutex);
lessee = _drm_find_lessee(lessor, arg->lessee_id);
@@ -750,6 +790,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
fail:
mutex_unlock(&dev->mode_config.idr_mutex);
+ drm_master_put(&lessor);
return ret;
}
diff --git a/include/drm/drm_auth.h b/include/drm/drm_auth.h
index 6bf8b2b78991..f99d3417f304 100644
--- a/include/drm/drm_auth.h
+++ b/include/drm/drm_auth.h
@@ -107,6 +107,7 @@ struct drm_master {
};
struct drm_master *drm_master_get(struct drm_master *master);
+struct drm_master *drm_file_get_master(struct drm_file *file_priv);
void drm_master_put(struct drm_master **master);
bool drm_is_current_master(struct drm_file *fpriv);
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index 9b82988e3427..726cfe0ff5f5 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -233,6 +233,12 @@ struct drm_file {
* this only matches &drm_device.master if the master is the currently
* active one.
*
+ * When dereferencing this pointer, either hold struct
+ * &drm_device.master_mutex for the duration of the pointer's use, or
+ * use drm_file_get_master() if struct &drm_device.master_mutex is not
+ * currently held and there is no other need to hold it. This prevents
+ * @master from being freed during use.
+ *
* See also @authentication and @is_master and the :ref:`section on
* primary nodes and authentication <drm_primary_node>`.
*/
--
2.30.2
^ permalink raw reply related [relevance 8%]
* Re: [PATCH v10 0/4] drm: update locking for modesetting
2021-08-31 7:24 17% [PATCH v10 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
` (3 preceding siblings ...)
2021-08-31 7:25 13% ` [PATCH v10 4/4] drm: avoid races with modesetting rights Desmond Cheong Zhi Xi
@ 2021-09-07 19:50 21% ` Desmond Cheong Zhi Xi
4 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-09-07 19:50 UTC (permalink / raw)
To: daniel
Cc: dri-devel, linux-kernel, intel-gfx, skhan, gregkh, tzimmermann,
linux-kernel-mentees, linux-media, linaro-mm-sig, sumit.semwal,
maarten.lankhorst, mripard, airlied, christian.koenig
On 31/8/21 3:24 am, Desmond Cheong Zhi Xi wrote:
> Sorry for the noise, rebasing on top of drm-misc-next. Please ignore the
> v9 series.
>
> Hi,
>
> I updated the patch set with some suggestions by Daniel Vetter, and
> dropped the patches after patch 4 so that we can stick the landing for
> avoiding races with modesetting rights before dealing with the tricky
> spinlock.
>
> Overall, this series fixes races with modesetting rights, and converts
> drm_device.master_mutex into master_rwsem.
>
> - Patch 1: Fix a potential null ptr dereference in drm_master_release
>
> - Patch 2: Convert master_mutex into rwsem (avoids creating a new lock)
>
> - Patch 3: Update global mutex locking in the ioctl handler (avoids
> deadlock when grabbing read lock on master_rwsem in drm_ioctl_kernel)
>
> - Patch 4: Plug races with drm modesetting rights
>
> v9 -> v10:
> - Rebase on top of drm-misc-next, caught by Intel-gfx CI
>
> v8 -> v9 (suggested by Daniel Vetter):
> - Drop patches 5-7 to handle it in another series
> - Add the appropriate Fixes: tag for the null ptr dereference fix
> (patch 1)
> - Create a locked_ioctl bool to clarify locking/unlocking patterns in
> the ioctl handler (patch 3)
> - Clarify the kernel doc for master_rwsem (patch 4)
>
> v7 -> v8:
> - Avoid calling drm_lease_held in drm_mode_setcrtc and
> drm_wait_vblank_ioctl, caught by Intel-gfx CI
>
> v6 -> v7:
> - Export __drm_mode_object_find for loadable modules, caught by the
> Intel-gfx CI
>
> v5 -> v6:
> - Fix recursive locking on master_rwsem, caught by the Intel-gfx CI
>
> v4 -> v5:
> - Avoid calling drm_file_get_master while holding on to the modeset
> mutex, caught by the Intel-gfx CI
>
> v3 -> v4 (suggested by Daniel Vetter):
> - Drop a patch that added an unnecessary master_lookup_lock in
> drm_master_release
> - Drop a patch that addressed a non-existent race in
> drm_is_current_master_locked
> - Remove fixes for non-existent null ptr dereferences
> - Protect drm_master.magic_map,unique{_len} with master_rwsem instead of
> master_lookup_lock
> - Drop the patch that moved master_lookup_lock into struct drm_device
> - Drop a patch to export task_work_add
> - Revert the check for the global mutex in the ioctl handler to use
> drm_core_check_feature instead of drm_dev_needs_global_mutex
> - Push down master_rwsem locking for selected ioctls to avoid lock
> hierarchy inversions, and to allow us to hold write locks on
> master_rwsem instead of flushing readers
> - Remove master_lookup_lock by replacing it with master_rwsem
>
> v2 -> v3:
> - Unexport drm_master_flush, as suggested by Daniel Vetter.
> - Merge master_mutex and master_rwsem, as suggested by Daniel Vetter.
> - Export task_work_add, reported by kernel test robot.
> - Make master_flush static, reported by kernel test robot.
> - Move master_lookup_lock into struct drm_device.
> - Add a missing lock on master_lookup_lock in drm_master_release.
> - Fix a potential race in drm_is_current_master_locked.
> - Fix potential null ptr dereferences in drm_{auth, ioctl}.
> - Protect magic_map,unique{_len} with master_lookup_lock.
> - Convert master_mutex into a rwsem.
> - Update global mutex locking in the ioctl handler.
>
> v1 -> v2 (suggested by Daniel Vetter):
> - Address an additional race when drm_open runs.
> - Switch from SRCU to rwsem to synchronise readers and writers.
> - Implement drm_master_flush with task_work so that flushes can be
> queued to run before returning to userspace without creating a new
> DRM_MASTER_FLUSH ioctl flag.
>
> Best wishes,
> Desmond
>
> Desmond Cheong Zhi Xi (4):
> drm: fix null ptr dereference in drm_master_release
> drm: convert drm_device.master_mutex into a rwsem
> drm: lock drm_global_mutex earlier in the ioctl handler
> drm: avoid races with modesetting rights
>
> drivers/gpu/drm/drm_auth.c | 39 ++++++++++++++++------------
> drivers/gpu/drm/drm_debugfs.c | 4 +--
> drivers/gpu/drm/drm_drv.c | 3 +--
> drivers/gpu/drm/drm_file.c | 6 ++---
> drivers/gpu/drm/drm_ioctl.c | 49 ++++++++++++++++++++++-------------
> drivers/gpu/drm/drm_lease.c | 35 +++++++++++++++++--------
> include/drm/drm_auth.h | 6 ++---
> include/drm/drm_device.h | 16 +++++++++---
> include/drm/drm_file.h | 12 ++++-----
> 9 files changed, 104 insertions(+), 66 deletions(-)
>
Hi Daniel,
Just pinging so this doesn't get buried, though I guess it's also a busy
merge window. Any thoughts on the series as it is? Tests seemed to have
passed with the Intel-gfx CI [1].
Not sure if I can set up the CI to do otherwise, but I think this series
has to go in before I can test new patches to remove the
drm_file.master_lookup_lock spinlock.
As always, thank you for your time.
Link: https://patchwork.freedesktop.org/series/93864/ [1]
Best wishes,
Desmond
^ permalink raw reply [relevance 21%]
* [PATCH AUTOSEL 4.19 22/23] fcntl: fix potential deadlock for &fasync_struct.fa_lock
@ 2021-09-06 1:23 11% ` Sasha Levin
0 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-06 1:23 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Jeff Layton, Sasha Levin, linux-fsdevel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2f488f698fda820f8e6fa0407630154eceb145d6 ]
There is an existing lock hierarchy of
&dev->event_lock --> &fasync_struct.fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
&dev->event_lock is HARDIRQ-safe, so interrupts have to be disabled
while grabbing &fasync_struct.fa_lock, otherwise we invert the lock
hierarchy. However, since kill_fasync which calls kill_fasync_rcu is
an exported symbol, it may not necessarily be called with interrupts
disabled.
As kill_fasync_rcu may be called with interrupts disabled (for
example, in the call chain above), we replace calls to
read_lock/read_unlock on &fasync_struct.fa_lock in kill_fasync_rcu
with read_lock_irqsave/read_unlock_irqrestore.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index e039af1872ab..dffb5245ae72 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -993,13 +993,14 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
{
while (fa) {
struct fown_struct *fown;
+ unsigned long flags;
if (fa->magic != FASYNC_MAGIC) {
printk(KERN_ERR "kill_fasync: bad magic number in "
"fasync_struct!\n");
return;
}
- read_lock(&fa->fa_lock);
+ read_lock_irqsave(&fa->fa_lock, flags);
if (fa->fa_file) {
fown = &fa->fa_file->f_owner;
/* Don't send SIGURG to processes which have not set a
@@ -1008,7 +1009,7 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
if (!(sig == SIGURG && fown->signum == 0))
send_sigio(fown, fa->fa_fd, band);
}
- read_unlock(&fa->fa_lock);
+ read_unlock_irqrestore(&fa->fa_lock, flags);
fa = rcu_dereference(fa->fa_next);
}
}
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.4 27/30] fcntl: fix potential deadlock for &fasync_struct.fa_lock
@ 2021-09-06 1:22 11% ` Sasha Levin
0 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-06 1:22 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Jeff Layton, Sasha Levin, linux-fsdevel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2f488f698fda820f8e6fa0407630154eceb145d6 ]
There is an existing lock hierarchy of
&dev->event_lock --> &fasync_struct.fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
&dev->event_lock is HARDIRQ-safe, so interrupts have to be disabled
while grabbing &fasync_struct.fa_lock, otherwise we invert the lock
hierarchy. However, since kill_fasync which calls kill_fasync_rcu is
an exported symbol, it may not necessarily be called with interrupts
disabled.
As kill_fasync_rcu may be called with interrupts disabled (for
example, in the call chain above), we replace calls to
read_lock/read_unlock on &fasync_struct.fa_lock in kill_fasync_rcu
with read_lock_irqsave/read_unlock_irqrestore.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index 3dc90e5293e6..fa0fdd829613 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -993,13 +993,14 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
{
while (fa) {
struct fown_struct *fown;
+ unsigned long flags;
if (fa->magic != FASYNC_MAGIC) {
printk(KERN_ERR "kill_fasync: bad magic number in "
"fasync_struct!\n");
return;
}
- read_lock(&fa->fa_lock);
+ read_lock_irqsave(&fa->fa_lock, flags);
if (fa->fa_file) {
fown = &fa->fa_file->f_owner;
/* Don't send SIGURG to processes which have not set a
@@ -1008,7 +1009,7 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
if (!(sig == SIGURG && fown->signum == 0))
send_sigio(fown, fa->fa_fd, band);
}
- read_unlock(&fa->fa_lock);
+ read_unlock_irqrestore(&fa->fa_lock, flags);
fa = rcu_dereference(fa->fa_next);
}
}
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.10 33/39] fcntl: fix potential deadlock for &fasync_struct.fa_lock
@ 2021-09-06 1:21 11% ` Sasha Levin
0 siblings, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-06 1:21 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Jeff Layton, Sasha Levin, linux-fsdevel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2f488f698fda820f8e6fa0407630154eceb145d6 ]
There is an existing lock hierarchy of
&dev->event_lock --> &fasync_struct.fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
&dev->event_lock is HARDIRQ-safe, so interrupts have to be disabled
while grabbing &fasync_struct.fa_lock, otherwise we invert the lock
hierarchy. However, since kill_fasync which calls kill_fasync_rcu is
an exported symbol, it may not necessarily be called with interrupts
disabled.
As kill_fasync_rcu may be called with interrupts disabled (for
example, in the call chain above), we replace calls to
read_lock/read_unlock on &fasync_struct.fa_lock in kill_fasync_rcu
with read_lock_irqsave/read_unlock_irqrestore.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index 05b36b28f2e8..71b43538fa44 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -995,13 +995,14 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
{
while (fa) {
struct fown_struct *fown;
+ unsigned long flags;
if (fa->magic != FASYNC_MAGIC) {
printk(KERN_ERR "kill_fasync: bad magic number in "
"fasync_struct!\n");
return;
}
- read_lock(&fa->fa_lock);
+ read_lock_irqsave(&fa->fa_lock, flags);
if (fa->fa_file) {
fown = &fa->fa_file->f_owner;
/* Don't send SIGURG to processes which have not set a
@@ -1010,7 +1011,7 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
if (!(sig == SIGURG && fown->signum == 0))
send_sigio(fown, fa->fa_fd, band);
}
- read_unlock(&fa->fa_lock);
+ read_unlock_irqrestore(&fa->fa_lock, flags);
fa = rcu_dereference(fa->fa_next);
}
}
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.13 38/46] fcntl: fix potential deadlocks for &fown_struct.lock
@ 2021-09-06 1:20 11% ` Sasha Levin
2021-09-06 1:20 11% ` [PATCH AUTOSEL 5.13 39/46] fcntl: fix potential deadlock for &fasync_struct.fa_lock Sasha Levin
1 sibling, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-06 1:20 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+e6d5398a02c516ce5e70, Jeff Layton,
Sasha Levin, linux-fsdevel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit f671a691e299f58835d4660d642582bf0e8f6fda ]
Syzbot reports a potential deadlock in do_fcntl:
========================================================
WARNING: possible irq lock inversion dependency detected
5.12.0-syzkaller #0 Not tainted
--------------------------------------------------------
syz-executor132/8391 just changed the state of lock:
ffff888015967bf8 (&f->f_owner.lock){.+..}-{2:2}, at: f_getown_ex fs/fcntl.c:211 [inline]
ffff888015967bf8 (&f->f_owner.lock){.+..}-{2:2}, at: do_fcntl+0x8b4/0x1200 fs/fcntl.c:395
but this lock was taken by another, HARDIRQ-safe lock in the past:
(&dev->event_lock){-...}-{2:2}
and interrupts could create inverse lock ordering between them.
other info that might help us debug this:
Chain exists of:
&dev->event_lock --> &new->fa_lock --> &f->f_owner.lock
Possible interrupt unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&f->f_owner.lock);
local_irq_disable();
lock(&dev->event_lock);
lock(&new->fa_lock);
<Interrupt>
lock(&dev->event_lock);
*** DEADLOCK ***
This happens because there is a lock hierarchy of
&dev->event_lock --> &new->fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
However, since &dev->event_lock is HARDIRQ-safe, interrupts have to be
disabled while grabbing &f->f_owner.lock, otherwise we invert the lock
hierarchy.
Hence, we replace calls to read_lock/read_unlock on &f->f_owner.lock,
with read_lock_irq/read_unlock_irq.
Reported-and-tested-by: syzbot+e6d5398a02c516ce5e70@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 13 +++++++------
1 file changed, 7 insertions(+), 6 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index dfc72f15be7f..cf9e81dfa615 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -150,7 +150,8 @@ void f_delown(struct file *filp)
pid_t f_getown(struct file *filp)
{
pid_t pid = 0;
- read_lock(&filp->f_owner.lock);
+
+ read_lock_irq(&filp->f_owner.lock);
rcu_read_lock();
if (pid_task(filp->f_owner.pid, filp->f_owner.pid_type)) {
pid = pid_vnr(filp->f_owner.pid);
@@ -158,7 +159,7 @@ pid_t f_getown(struct file *filp)
pid = -pid;
}
rcu_read_unlock();
- read_unlock(&filp->f_owner.lock);
+ read_unlock_irq(&filp->f_owner.lock);
return pid;
}
@@ -208,7 +209,7 @@ static int f_getown_ex(struct file *filp, unsigned long arg)
struct f_owner_ex owner = {};
int ret = 0;
- read_lock(&filp->f_owner.lock);
+ read_lock_irq(&filp->f_owner.lock);
rcu_read_lock();
if (pid_task(filp->f_owner.pid, filp->f_owner.pid_type))
owner.pid = pid_vnr(filp->f_owner.pid);
@@ -231,7 +232,7 @@ static int f_getown_ex(struct file *filp, unsigned long arg)
ret = -EINVAL;
break;
}
- read_unlock(&filp->f_owner.lock);
+ read_unlock_irq(&filp->f_owner.lock);
if (!ret) {
ret = copy_to_user(owner_p, &owner, sizeof(owner));
@@ -249,10 +250,10 @@ static int f_getowner_uids(struct file *filp, unsigned long arg)
uid_t src[2];
int err;
- read_lock(&filp->f_owner.lock);
+ read_lock_irq(&filp->f_owner.lock);
src[0] = from_kuid(user_ns, filp->f_owner.uid);
src[1] = from_kuid(user_ns, filp->f_owner.euid);
- read_unlock(&filp->f_owner.lock);
+ read_unlock_irq(&filp->f_owner.lock);
err = put_user(src[0], &dst[0]);
err |= put_user(src[1], &dst[1]);
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.13 39/46] fcntl: fix potential deadlock for &fasync_struct.fa_lock
2021-09-06 1:20 11% ` [PATCH AUTOSEL 5.13 38/46] fcntl: fix potential deadlocks for &fown_struct.lock Sasha Levin
@ 2021-09-06 1:20 11% ` Sasha Levin
1 sibling, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-06 1:20 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Jeff Layton, Sasha Levin, linux-fsdevel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2f488f698fda820f8e6fa0407630154eceb145d6 ]
There is an existing lock hierarchy of
&dev->event_lock --> &fasync_struct.fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
&dev->event_lock is HARDIRQ-safe, so interrupts have to be disabled
while grabbing &fasync_struct.fa_lock, otherwise we invert the lock
hierarchy. However, since kill_fasync which calls kill_fasync_rcu is
an exported symbol, it may not necessarily be called with interrupts
disabled.
As kill_fasync_rcu may be called with interrupts disabled (for
example, in the call chain above), we replace calls to
read_lock/read_unlock on &fasync_struct.fa_lock in kill_fasync_rcu
with read_lock_irqsave/read_unlock_irqrestore.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index cf9e81dfa615..887db4918a89 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -1004,13 +1004,14 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
{
while (fa) {
struct fown_struct *fown;
+ unsigned long flags;
if (fa->magic != FASYNC_MAGIC) {
printk(KERN_ERR "kill_fasync: bad magic number in "
"fasync_struct!\n");
return;
}
- read_lock(&fa->fa_lock);
+ read_lock_irqsave(&fa->fa_lock, flags);
if (fa->fa_file) {
fown = &fa->fa_file->f_owner;
/* Don't send SIGURG to processes which have not set a
@@ -1019,7 +1020,7 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
if (!(sig == SIGURG && fown->signum == 0))
send_sigio(fown, fa->fa_fd, band);
}
- read_unlock(&fa->fa_lock);
+ read_unlock_irqrestore(&fa->fa_lock, flags);
fa = rcu_dereference(fa->fa_next);
}
}
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.14 39/47] fcntl: fix potential deadlock for &fasync_struct.fa_lock
2021-09-06 1:19 11% ` [PATCH AUTOSEL 5.14 38/47] fcntl: fix potential deadlocks for &fown_struct.lock Sasha Levin
@ 2021-09-06 1:19 11% ` Sasha Levin
1 sibling, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-06 1:19 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, Jeff Layton, Sasha Levin, linux-fsdevel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit 2f488f698fda820f8e6fa0407630154eceb145d6 ]
There is an existing lock hierarchy of
&dev->event_lock --> &fasync_struct.fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
&dev->event_lock is HARDIRQ-safe, so interrupts have to be disabled
while grabbing &fasync_struct.fa_lock, otherwise we invert the lock
hierarchy. However, since kill_fasync which calls kill_fasync_rcu is
an exported symbol, it may not necessarily be called with interrupts
disabled.
As kill_fasync_rcu may be called with interrupts disabled (for
example, in the call chain above), we replace calls to
read_lock/read_unlock on &fasync_struct.fa_lock in kill_fasync_rcu
with read_lock_irqsave/read_unlock_irqrestore.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index 932ec1e9f5bf..68added37c15 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -1004,13 +1004,14 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
{
while (fa) {
struct fown_struct *fown;
+ unsigned long flags;
if (fa->magic != FASYNC_MAGIC) {
printk(KERN_ERR "kill_fasync: bad magic number in "
"fasync_struct!\n");
return;
}
- read_lock(&fa->fa_lock);
+ read_lock_irqsave(&fa->fa_lock, flags);
if (fa->fa_file) {
fown = &fa->fa_file->f_owner;
/* Don't send SIGURG to processes which have not set a
@@ -1019,7 +1020,7 @@ static void kill_fasync_rcu(struct fasync_struct *fa, int sig, int band)
if (!(sig == SIGURG && fown->signum == 0))
send_sigio(fown, fa->fa_fd, band);
}
- read_unlock(&fa->fa_lock);
+ read_unlock_irqrestore(&fa->fa_lock, flags);
fa = rcu_dereference(fa->fa_next);
}
}
--
2.30.2
^ permalink raw reply related [relevance 11%]
* [PATCH AUTOSEL 5.14 38/47] fcntl: fix potential deadlocks for &fown_struct.lock
@ 2021-09-06 1:19 11% ` Sasha Levin
2021-09-06 1:19 11% ` [PATCH AUTOSEL 5.14 39/47] fcntl: fix potential deadlock for &fasync_struct.fa_lock Sasha Levin
1 sibling, 0 replies; 200+ results
From: Sasha Levin @ 2021-09-06 1:19 UTC (permalink / raw)
To: linux-kernel, stable
Cc: Desmond Cheong Zhi Xi, syzbot+e6d5398a02c516ce5e70, Jeff Layton,
Sasha Levin, linux-fsdevel
From: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
[ Upstream commit f671a691e299f58835d4660d642582bf0e8f6fda ]
Syzbot reports a potential deadlock in do_fcntl:
========================================================
WARNING: possible irq lock inversion dependency detected
5.12.0-syzkaller #0 Not tainted
--------------------------------------------------------
syz-executor132/8391 just changed the state of lock:
ffff888015967bf8 (&f->f_owner.lock){.+..}-{2:2}, at: f_getown_ex fs/fcntl.c:211 [inline]
ffff888015967bf8 (&f->f_owner.lock){.+..}-{2:2}, at: do_fcntl+0x8b4/0x1200 fs/fcntl.c:395
but this lock was taken by another, HARDIRQ-safe lock in the past:
(&dev->event_lock){-...}-{2:2}
and interrupts could create inverse lock ordering between them.
other info that might help us debug this:
Chain exists of:
&dev->event_lock --> &new->fa_lock --> &f->f_owner.lock
Possible interrupt unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&f->f_owner.lock);
local_irq_disable();
lock(&dev->event_lock);
lock(&new->fa_lock);
<Interrupt>
lock(&dev->event_lock);
*** DEADLOCK ***
This happens because there is a lock hierarchy of
&dev->event_lock --> &new->fa_lock --> &f->f_owner.lock
from the following call chain:
input_inject_event():
spin_lock_irqsave(&dev->event_lock,...);
input_handle_event():
input_pass_values():
input_to_handler():
evdev_events():
evdev_pass_values():
spin_lock(&client->buffer_lock);
__pass_event():
kill_fasync():
kill_fasync_rcu():
read_lock(&fa->fa_lock);
send_sigio():
read_lock_irqsave(&fown->lock,...);
However, since &dev->event_lock is HARDIRQ-safe, interrupts have to be
disabled while grabbing &f->f_owner.lock, otherwise we invert the lock
hierarchy.
Hence, we replace calls to read_lock/read_unlock on &f->f_owner.lock,
with read_lock_irq/read_unlock_irq.
Reported-and-tested-by: syzbot+e6d5398a02c516ce5e70@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
fs/fcntl.c | 13 +++++++------
1 file changed, 7 insertions(+), 6 deletions(-)
diff --git a/fs/fcntl.c b/fs/fcntl.c
index f946bec8f1f1..932ec1e9f5bf 100644
--- a/fs/fcntl.c
+++ b/fs/fcntl.c
@@ -150,7 +150,8 @@ void f_delown(struct file *filp)
pid_t f_getown(struct file *filp)
{
pid_t pid = 0;
- read_lock(&filp->f_owner.lock);
+
+ read_lock_irq(&filp->f_owner.lock);
rcu_read_lock();
if (pid_task(filp->f_owner.pid, filp->f_owner.pid_type)) {
pid = pid_vnr(filp->f_owner.pid);
@@ -158,7 +159,7 @@ pid_t f_getown(struct file *filp)
pid = -pid;
}
rcu_read_unlock();
- read_unlock(&filp->f_owner.lock);
+ read_unlock_irq(&filp->f_owner.lock);
return pid;
}
@@ -208,7 +209,7 @@ static int f_getown_ex(struct file *filp, unsigned long arg)
struct f_owner_ex owner = {};
int ret = 0;
- read_lock(&filp->f_owner.lock);
+ read_lock_irq(&filp->f_owner.lock);
rcu_read_lock();
if (pid_task(filp->f_owner.pid, filp->f_owner.pid_type))
owner.pid = pid_vnr(filp->f_owner.pid);
@@ -231,7 +232,7 @@ static int f_getown_ex(struct file *filp, unsigned long arg)
ret = -EINVAL;
break;
}
- read_unlock(&filp->f_owner.lock);
+ read_unlock_irq(&filp->f_owner.lock);
if (!ret) {
ret = copy_to_user(owner_p, &owner, sizeof(owner));
@@ -249,10 +250,10 @@ static int f_getowner_uids(struct file *filp, unsigned long arg)
uid_t src[2];
int err;
- read_lock(&filp->f_owner.lock);
+ read_lock_irq(&filp->f_owner.lock);
src[0] = from_kuid(user_ns, filp->f_owner.uid);
src[1] = from_kuid(user_ns, filp->f_owner.euid);
- read_unlock(&filp->f_owner.lock);
+ read_unlock_irq(&filp->f_owner.lock);
err = put_user(src[0], &dst[0]);
err |= put_user(src[1], &dst[1]);
--
2.30.2
^ permalink raw reply related [relevance 11%]
* Re: [PATCH 0/2] Bluetooth: various SCO fixes
2021-09-03 3:13 21% [PATCH 0/2] Bluetooth: various SCO fixes Desmond Cheong Zhi Xi
2021-09-03 3:13 20% ` [PATCH 1/2] Bluetooth: call sock_hold earlier in sco_conn_del Desmond Cheong Zhi Xi
2021-09-03 3:13 19% ` [PATCH 2/2] Bluetooth: fix init and cleanup of sco_conn.timeout_work Desmond Cheong Zhi Xi
@ 2021-09-03 23:37 11% ` Luiz Augusto von Dentz
2 siblings, 0 replies; 200+ results
From: Luiz Augusto von Dentz @ 2021-09-03 23:37 UTC (permalink / raw)
To: Desmond Cheong Zhi Xi
Cc: Marcel Holtmann, Johan Hedberg, David Miller, Jakub Kicinski,
linux-bluetooth, open list:NETWORKING [GENERAL],
Linux Kernel Mailing List, Eric Dumazet
Hi Desmond,
On Thu, Sep 2, 2021 at 8:23 PM Desmond Cheong Zhi Xi
<desmondcheongzx@gmail.com> wrote:
>
>
> Hi,
>
> This patch set contains some of the fixes for SCO following our
> discussion on commit ba316be1b6a0 ("Bluetooth: schedule SCO timeouts
> with delayed_work") [1].
>
> I believe these patches should go in together with [2] to address the
> UAF errors that have been reported by Syzbot following
> commit ba316be1b6a0.
>
> Link: https://lore.kernel.org/lkml/20210810041410.142035-2-desmondcheongzx@gmail.com/ [1]
> Link: https://lore.kernel.org/lkml/20210831065601.101185-1-desmondcheongzx@gmail.com/ [2]
>
> Best wishes,
> Desmond
>
> Desmond Cheong Zhi Xi (2):
> Bluetooth: call sock_hold earlier in sco_conn_del
> Bluetooth: fix init and cleanup of sco_conn.timeout_work
>
> net/bluetooth/sco.c | 12 ++++++------
> 1 file changed, 6 insertions(+), 6 deletions(-)
>
> --
> 2.25.1
Applied, thanks.
--
Luiz Augusto von Dentz
^ permalink raw reply [relevance 11%]
* [ANNOUNCE] 4.19.206-rt87
@ 2021-09-03 15:27 2% Clark Williams
0 siblings, 0 replies; 200+ results
From: Clark Williams @ 2021-09-03 15:27 UTC (permalink / raw)
To: LKML, linux-rt-users, Steven Rostedt, Thomas Gleixner,
Carsten Emde, John Kacur, Sebastian Andrzej Siewior,
Daniel Wagner, Tom Zanussi, Clark Williams, Pavel Machek
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 34518 bytes --]
Hello RT-list!
I'm pleased to announce the 4.19.206-rt87 stable release.
You can get this release via the git tree at:
git://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git
branch: v4.19-rt
Head SHA1: e4215cf649dc8c5b424cc8a72dc0da8c4d54fe35
Or to build 4.19.206-rt87 directly, the following patches should be applied:
https://www.kernel.org/pub/linux/kernel/v4.x/linux-4.19.tar.xz
https://www.kernel.org/pub/linux/kernel/v4.x/patch-4.19.206.xz
https://www.kernel.org/pub/linux/kernel/projects/rt/4.19/patch-4.19.206-rt87.patch.xz
You can also build from 4.19.199-rt86 by applying the incremental patch:
https://www.kernel.org/pub/linux/kernel/projects/rt/4.19/incr/patch-4.19.199-rt86-rt87.patch.xz
Enjoy!
Clark
Changes from v4.19.199-rt86:
---
Adrian Larumbe (1):
dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers
Alex Xu (Hello71) (1):
pipe: increase minimum default pipe size to 2 pages
Alexander Tsoy (1):
ALSA: usb-audio: Add registration quirk for JBL Quantum 600
Andy Shevchenko (1):
ptp_pch: Restore dependency on PCI
Anirudh Rayabharam (2):
firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback
firmware_loader: fix use-after-free in firmware_fallback_sysfs
Anson Huang (1):
ARM: imx: add mmdc ipg clock operation for mmdc
Antoine Tenart (1):
net: ipv6: fix returned variable type in ip6_skb_dst_mtu
Arkadiusz Kubalewski (1):
i40e: Fix logic of disabling queues
Arnaldo Carvalho de Melo (1):
Revert "perf map: Fix dso->nsinfo refcounting"
Axel Lin (1):
regulator: rt5033: Fix n_voltages settings for BUCK and LDO
Babu Moger (1):
x86/resctrl: Fix default monitoring groups reporting
Ben Skeggs (1):
drm/nouveau/disp: power down unused DP links during init
Bixuan Cui (1):
genirq/msi: Ensure deactivation on teardown
Chris Lesiak (1):
iio: humidity: hdc100x: Add margin to the conversion time
Christoph Hellwig (3):
bdi: move bdi_dev_name out of line
bdi: add a ->dev_name field to struct backing_dev_info
libata: fix ata_pio_sector for CONFIG_HIGHMEM
Christophe JAILLET (1):
xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()'
Clark Williams (5):
Merge tag 'v4.19.201' into v4.19-rt
Merge tag 'v4.19.204' into v4.19-rt
Merge tag 'v4.19.205' into v4.19-rt
Merge tag 'v4.19.206' into v4.19-rt
Linux 4.19.206-rt87
Colin Ian King (1):
iio: adc: Fix incorrect exit of for-loop
Cristian Marussi (1):
firmware: arm_scmi: Fix range check for the maximum number of pending messages
DENG Qingfang (1):
net: dsa: mt7530: add the missing RxUnicast MIB counter
Dan Carpenter (2):
can: hi311x: fix a signedness bug in hi3110_cmd()
bnx2x: fix an error code in bnx2x_nic_load()
Dan Williams (1):
ACPI: NFIT: Fix support for virtual SPA ranges
Daniel Borkmann (7):
bpf: Inherit expanded/patched seen count from old aux data
bpf: Do not mark insn as seen under speculative path verification
bpf: Fix leakage under speculation on mispredicted branches
bpf, selftests: Adjust few selftest outcomes wrt unreachable code
bpf: Do not use ax register in interpreter on div/mod
bpf: Fix 32 bit src register truncation on div/mod
bpf: Fix truncation handling for mod32 dst reg wrt zero
Daniel Jordan (2):
padata: validate cpumask without removed CPU during offline
padata: add separate cpuhp node for CPUHP_PADATA_DEAD
Daniele Palmas (1):
USB: serial: option: add Telit FD980 composition 0x1056
Dario Binacchi (1):
clk: stm32f4: fix post divisor setup for I2S/SAI PLLs
Dave Gerlach (1):
ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218
David Bauer (1):
USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2
Denis Efremov (1):
Revert "floppy: reintroduce O_NDELAY fix"
Desmond Cheong Zhi Xi (4):
hfs: add missing clean-up in hfs_fill_super
hfs: fix high memory mapping in hfs_bnode_read
hfs: add lock nesting notation to hfs_find_init
btrfs: fix rw device counting in __btrfs_free_extra_devids
Dinghao Liu (1):
net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32
Dmitry Osipenko (1):
usb: otg-fsm: Fix hrtimer list corruption
Dongliang Mu (5):
spi: meson-spicc: fix memory leak in meson_spicc_remove
ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi
ieee802154: hwsim: fix GPF in hwsim_new_edge_nl
ipack: tpci200: fix many double free issues in tpci200_pci_probe
ipack: tpci200: fix memory leak in the tpci200_register
Eric Dumazet (5):
net: annotate data race around sk_ll_usec
virtio_net: Do not pull payload in skb->head
gro: ensure frag0 meets IP header alignment
net: igmp: fix data-race in igmp_ifc_timer_expire()
net: igmp: increase size of mr_ifc_count
Fei Qin (1):
nfp: update ethtool reporting of pauseframe control
Florian Westphal (2):
netfilter: conntrack: adjust stop timestamp to real expiry value
netfilter: conntrack: collect all entries in one cycle
George Kennedy (1):
fbmem: add margin check to fb_check_caps()
Gerd Rausch (1):
net/rds: dma_map_sg is entitled to merge entries
Goldwyn Rodrigues (1):
btrfs: mark compressed range uptodate only if all bio succeed
Greg Kroah-Hartman (10):
selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c
Linux 4.19.200
Linux 4.19.201
Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled"
Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout"
Linux 4.19.202
Linux 4.19.203
Linux 4.19.204
i2c: dev: zero out array used for i2c reads from userspace
Linux 4.19.206
Guangbin Huang (1):
net: hns3: fix get wrong pfc_en when query PFC configuration
Guenter Roeck (2):
spi: mediatek: Fix fifo transfer
ARC: Fix CONFIG_STACKDEPOT
H. Nikolaus Schaller (2):
omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator
mips: Fix non-POSIX regexp
Hans Verkuil (1):
media: videobuf2-core: dequeue if start_streaming fails
Harshvardhan Jha (1):
scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry()
Hoang Le (1):
tipc: fix sleeping in tipc accept routine
Hui Su (1):
scripts/tracing: fix the bug that can't parse raw_trace_func
Hyunchul Lee (1):
cifs: fix the out of range assignment to bit fields in parse_server_interfaces
Ivan T. Ivanov (1):
net: usb: lan78xx: don't modify phy_device state concurrently
Jakub Kicinski (2):
bnxt: don't lock the tx queue from napi poll
bnxt: disable napi before canceling DIM
Jan Kiszka (1):
x86/asm: Ensure asm/proto.h can be included stand-alone
Jani Nikula (1):
drm/i915: Ensure intel_engine_init_execlist() builds with Clang
Jaroslav Kysela (1):
ALSA: hda - fix the 'Capture Switch' value change notifications
Jedrzej Jagielski (1):
i40e: Fix log TC creation failure when max num of queues is exceeded
Jeff Layton (2):
locks: print a warning when mount fails due to lack of "mand" support
fs: warn about impending deprecation of mandatory locks
Jens Axboe (1):
net: split out functions related to registering inflight socket files
Jerome Brunet (1):
usb: gadget: u_audio: fix race condition on endpoint stop
Jia He (1):
qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union()
Jiapeng Chong (1):
mlx4: Fix missing error code in mlx4_load_one()
Johan Hovold (2):
media: rtl28xxu: fix zero-length control request
Revert "USB: serial: ch341: fix character loss at high transfer rates"
Johannes Berg (1):
mac80211: drop data frames without key on encrypted links
Jouni Malinen (5):
ath: Use safer key clearing with key cache entries
ath9k: Clear key cache explicitly on disabling hardware
ath: Export ath_hw_keysetmac()
ath: Modify ath_key_delete() to not need full key entry
ath9k: Postpone key cache entry deletion for TXQ frames reference it
Juergen Gross (1):
x86/kvm: fix vcpu-id indexed array sizes
Junxiao Bi (2):
ocfs2: fix zero out valid data
ocfs2: issue zeroout to EOF blocks
Kefeng Wang (1):
once: Fix panic when module unload
Krzysztof Kozlowski (1):
nfc: nfcsim: fix use after free during module unload
Kyle Russell (1):
ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits
Lai Jiangshan (1):
KVM: X86: MMU: Use the correct inherited permissions to get shadow page
Letu Ren (1):
net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset
Li Manyi (1):
scsi: sr: Return correct event when media event code is 3
Like Xu (1):
perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest
Linus Torvalds (1):
vt_kdsetmode: extend console locking
Longfang Liu (1):
USB:ehci:fix Kunpeng920 ehci hardware problem
Longpeng(Mike) (1):
vsock/virtio: avoid potential deadlock when vsock device remove
Lukasz Cieplicki (1):
i40e: Add additional info to PHY type error
Maciej W. Rozycki (2):
serial: 8250: Mask out floating 16/32-bit bus bits
MIPS: Malta: Do not byte-swap accesses to the CBUS UART
Maor Gottlieb (1):
net/mlx5: Fix flow table chaining
Marcelo Ricardo Leitner (1):
sctp: fix return value check in __sctp_rcv_asconf_lookup
Marcin Bachry (1):
PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI
Marek Behún (1):
cpufreq: armada-37xx: forbid cpufreq for 1.2 GHz variant
Mark Yacoub (1):
drm: Copy drm_wait_vblank to user before returning
Masami Hiramatsu (1):
tracing: Reject string operand in the histogram expression
Maxim Devaev (2):
usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers
usb: gadget: f_hid: idle uses the highest byte for duration
Maxim Kiselev (1):
net: marvell: fix MVNETA_TX_IN_PRGRS bit number
Maxim Levitsky (3):
KVM: x86: determine if an exception has an error code only when injecting it.
KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656)
KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653)
Maximilian Heyne (1):
xen/events: Fix race in set_evtchn_to_irq
Michał Mirosław (1):
opp: remove WARN when no valid OPPs remain
Miklos Szeredi (2):
af_unix: fix garbage collect vs MSG_PEEK
ovl: prevent private clone if bind mount is not allowed
Nathan Chancellor (1):
vmlinux.lds.h: Handle clang's module.{c,d}tor sections
Neal Cardwell (1):
tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets
Neeraj Upadhyay (1):
vringh: Use wiov->used to check for read/write desc order
NeilBrown (1):
btrfs: prevent rename2 from exchanging a subvol with a directory from different parents
Nguyen Dinh Phi (1):
cfg80211: Fix possible memory leak in function cfg80211_bss_update
Ole Bjørn Midtbø (1):
Bluetooth: hidp: use correct wait queue when removing ctrl_wait
Oleksandr Suvorov (1):
ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz
Pablo Neira Ayuso (1):
netfilter: nft_nat: allow to specify layer 4 protocol NAT only
Pali Rohár (2):
ppp: Fix generating ppp unit id when ifname is not specified
ppp: Fix generating ifname when empty IFLA_IFNAME is specified
Paolo Bonzini (1):
KVM: x86: accept userspace interrupt only if no event is injected
Parav Pandit (2):
virtio: Improve vq->broken access to avoid any compiler optimization
virtio_pci: Support surprise removal of virtio pci device
Paul Jakma (1):
NIU: fix incorrect error return, missed in previous revert
Pavel Skripkin (9):
can: mcba_usb_start(): add missing urb->transfer_dma initialization
can: usb_8dev: fix memory leak
can: ems_usb: fix memory leak
can: esd_usb2: fix memory leak
net: llc: fix skb_over_panic
net: pegasus: fix uninit-value in get_interrupt_interval
net: fec: fix use-after-free in fec_drv_remove
net: vxge: fix use-after-free in vxge_device_unregister
net: 6pack: fix slab-out-of-bounds in decode_data
Peter Collingbourne (1):
net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
Peter Ujfalusi (1):
dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available
Phil Elwell (1):
usb: gadget: f_hid: fixed NULL pointer dereference
Prarit Bhargava (1):
alpha: Send stop IPI to send to online CPUs
Pravin B Shelar (1):
net: Fix zero-copy head len calculation.
Pu Lehui (1):
powerpc/kprobes: Fix kprobe Oops happens in booke
Qiang.zhang (1):
USB: usbtmc: Fix RCU stall warning
Rafael J. Wysocki (1):
Revert "ACPICA: Fix memory leak caused by _CID repair function"
Randy Dunlap (2):
x86/tools: Fix objdump version check again
dccp: add do-while-0 stubs for dccp_pr_debug macros
Reinhard Speyerer (1):
qmi_wwan: add network device usage statistics for qmimux devices
Richard Fitzgerald (5):
ASoC: cs42l42: Correct definition of ADC Volume control
ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J
ASoC: cs42l42: Fix inversion of ADC Notch Switch control
ASoC: cs42l42: Remove duplicate control for WNF filter frequency
ASoC: cs42l42: Fix LRCLK frame start edge
Roi Dayan (1):
psample: Add a fwd declaration for skbuff
Ruslan Babayev (1):
iio: dac: ds4422/ds4424 drop of_node check
Saeed Mirzamohammadi (1):
iommu/vt-d: Fix agaw for a supported 48 bit guest address width
Saravana Kannan (2):
net: mdio-mux: Don't ignore memory allocation errors
net: mdio-mux: Handle -EPROBE_DEFER correctly
Sasha Levin (1):
Linux 4.19.205
Sasha Neftin (1):
e1000e: Fix the max snoop/no-snoop latency for 10M
Sean Christopherson (3):
KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds
KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB
KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs
Sergey Marinkevich (1):
netfilter: nft_exthdr: fix endianness of tcp option cast
Shai Malin (2):
qed: qed ll2 race condition fixes
qed: Fix null-pointer dereference in qed_rdma_create_qp()
Shreyansh Chouhan (2):
reiserfs: check directory items on read from disk
ip_gre: add validation for csum_start
Sreekanth Reddy (1):
scsi: core: Avoid printing an error if target_alloc() returns -ENXIO
Srikar Dronamraju (1):
powerpc/pseries: Fix regression while building external modules
Srinivas Kandagatla (3):
slimbus: messaging: start transaction ids from 1 instead of zero
slimbus: messaging: check for valid transaction id
slimbus: ngd: reset dma setup during runtime pm
Stefan Mätje (1):
can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters
Steven Rostedt (VMware) (3):
tracing / histogram: Give calculation hist_fields a size
tracing/histogram: Rename "cpu" to "common_cpu"
tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name
Sudeep Holla (4):
firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow
ARM: dts: versatile: Fix up interrupt controller node names
firmware: arm_scmi: Ensure drivers provide a probe function
ARM: dts: nomadik: Fix up interrupt controller node names
Takashi Iwai (4):
r8152: Fix potential PM refcount imbalance
ALSA: seq: Fix racy deletion of subscriber
ASoC: intel: atom: Fix reference to PCM buffer address
ASoC: intel: atom: Fix breakage for PCM buffer address setup
Takeshi Misawa (1):
net: Fix memory leak in ieee802154_raw_deliver
Tetsuo Handa (1):
Bluetooth: defer cleanup of resources in hci_unregister_dev()
Theodore Ts'o (1):
ext4: fix potential htree corruption when growing large_dir directories
Thinh Nguyen (1):
usb: dwc3: gadget: Fix dwc3_calc_trbs_left()
Thomas Gleixner (12):
genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP
x86/msi: Force affinity setup before startup
x86/ioapic: Force affinity setup before startup
PCI/MSI: Enable and mask MSI-X early
PCI/MSI: Do not set invalid bits in MSI mask
PCI/MSI: Correct misleading comments
PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown()
PCI/MSI: Protect msi_desc::masked for multi-MSI
PCI/MSI: Mask all unused MSI-X entries
PCI/MSI: Enforce that MSI-X table entry is masked for update
PCI/MSI: Enforce MSI[X] entry updates to be visible
x86/fpu: Make init_fpstate correct with optimized XSAVE
Tuo Li (1):
IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs()
Tyler Hicks (1):
optee: Clear stale cache entries during initialization
Vincent Whitchurch (1):
mmc: dw_mmc: Fix hang on data CRC error
Vladimir Oltean (1):
net: dsa: lan9303: fix broken backpressure in .port_fdb_dump
Wang Hai (3):
tulip: windbond-840: Fix missing pci_disable_device() in probe and remove
sis900: Fix missing pci_disable_device() in probe and remove
net: natsemi: Fix missing pci_disable_device() in probe and remove
Wesley Cheng (1):
usb: dwc3: gadget: Stop EP0 transfers during pullup disable
Willy Tarreau (1):
USB: serial: ch341: fix character loss at high transfer rates
Xiangyang Zhang (1):
staging: rtl8723bs: Fix a resource leak in sd_int_dpc
Xiaolong Huang (1):
net: qrtr: fix another OOB Read in qrtr_endpoint_post
Xie Yongji (1):
vhost: Fix the calculation in vhost_overflow()
Xin Long (2):
sctp: move 198 addresses from unusable to private scope
sctp: move the active_key update after sh_keys is added
Yang Yingliang (5):
workqueue: fix UAF in pwq_unbound_release_workfn()
net/802/mrp: fix memleak in mrp_request_join()
net/802/garp: fix memleak in garp_request_join()
ARM: imx: add missing iounmap()
net: bridge: fix memleak in br_add_if()
Ye Bin (1):
scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach()
Yu Kuai (3):
blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit()
reiserfs: add check for root_inode in reiserfs_fill_super
dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe()
YueHaibing (1):
net: xilinx_emaclite: Do not print real IOMEM pointer
Yufen Yu (1):
bdi: use bdi_dev_name() to get device name
Zhengjun Zhang (1):
USB: serial: option: add new VID/PID to support Fibocom FG150
Zheyu Ma (1):
pcmcia: i82092: fix a null pointer dereference bug
Ziyang Xuan (1):
can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF
chihhao.chen (1):
ALSA: usb-audio: fix incorrect clock source setting
---
Documentation/filesystems/mandatory-locking.txt | 10 ++
Documentation/trace/histogram.rst | 2 +-
Documentation/virtual/kvm/mmu.txt | 4 +-
Makefile | 2 +-
arch/alpha/kernel/smp.c | 2 +-
arch/arc/kernel/vmlinux.lds.S | 2 +
arch/arm/boot/dts/am43x-epos-evm.dts | 2 +-
arch/arm/boot/dts/imx6ull-colibri-wifi.dtsi | 1 +
arch/arm/boot/dts/omap5-board-common.dtsi | 9 +-
arch/arm/boot/dts/ste-nomadik-stn8815.dtsi | 4 +-
arch/arm/boot/dts/versatile-ab.dts | 5 +-
arch/arm/boot/dts/versatile-pb.dts | 2 +-
arch/arm/mach-imx/mmdc.c | 21 ++-
arch/mips/Makefile | 2 +-
arch/mips/mti-malta/malta-platform.c | 3 +-
arch/powerpc/kernel/kprobes.c | 3 +-
arch/powerpc/platforms/pseries/setup.c | 2 +-
arch/x86/events/perf_event.h | 3 +-
arch/x86/include/asm/fpu/internal.h | 30 ++---
arch/x86/include/asm/proto.h | 2 +
arch/x86/include/asm/svm.h | 2 +
arch/x86/kernel/apic/io_apic.c | 6 +-
arch/x86/kernel/apic/msi.c | 13 +-
arch/x86/kernel/cpu/intel_rdt_monitor.c | 27 ++--
arch/x86/kernel/fpu/xstate.c | 38 +++++-
arch/x86/kvm/ioapic.c | 2 +-
arch/x86/kvm/ioapic.h | 4 +-
arch/x86/kvm/mmu.c | 13 +-
arch/x86/kvm/paging_tmpl.h | 14 +-
arch/x86/kvm/svm.c | 20 +--
arch/x86/kvm/x86.c | 26 +++-
arch/x86/tools/chkobjdump.awk | 1 +
block/bfq-iosched.c | 6 +-
block/blk-cgroup.c | 2 +-
block/blk-iolatency.c | 6 +-
drivers/acpi/acpica/nsrepair2.c | 7 -
drivers/acpi/nfit/core.c | 3 +
drivers/ata/libata-sff.c | 35 +++--
drivers/base/core.c | 1 +
drivers/base/firmware_loader/fallback.c | 14 +-
drivers/base/firmware_loader/firmware.h | 10 +-
drivers/base/firmware_loader/main.c | 2 +
drivers/block/floppy.c | 27 ++--
drivers/clk/clk-stm32f4.c | 10 +-
drivers/cpufreq/armada-37xx-cpufreq.c | 6 +-
drivers/dma/of-dma.c | 9 +-
drivers/dma/sh/usb-dmac.c | 2 +-
drivers/dma/xilinx/xilinx_dma.c | 12 ++
drivers/firmware/arm_scmi/bus.c | 3 +
drivers/firmware/arm_scmi/driver.c | 12 +-
drivers/gpu/drm/drm_ioc32.c | 4 +-
drivers/gpu/drm/i915/intel_engine_cs.c | 2 +-
drivers/gpu/drm/nouveau/nvkm/engine/disp/dp.c | 2 +-
drivers/gpu/drm/nouveau/nvkm/engine/disp/dp.h | 1 +
drivers/gpu/drm/nouveau/nvkm/engine/disp/outp.c | 9 ++
drivers/i2c/i2c-dev.c | 5 +-
drivers/iio/adc/palmas_gpadc.c | 4 +-
drivers/iio/dac/ds4424.c | 6 -
drivers/iio/humidity/hdc100x.c | 6 +-
drivers/infiniband/hw/hfi1/sdma.c | 9 +-
drivers/iommu/intel-iommu.c | 7 +-
drivers/ipack/carriers/tpci200.c | 60 +++++----
drivers/media/common/videobuf2/videobuf2-core.c | 13 +-
drivers/media/usb/dvb-usb-v2/rtl28xxu.c | 11 +-
drivers/mmc/host/dw_mmc.c | 6 +-
drivers/net/can/spi/hi311x.c | 2 +-
drivers/net/can/usb/ems_usb.c | 14 +-
drivers/net/can/usb/esd_usb2.c | 20 ++-
drivers/net/can/usb/mcba_usb.c | 2 +
drivers/net/can/usb/usb_8dev.c | 15 ++-
drivers/net/dsa/lan9303-core.c | 34 ++---
drivers/net/dsa/mt7530.c | 1 +
drivers/net/ethernet/apm/xgene-v2/main.c | 4 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 57 ++++----
drivers/net/ethernet/dec/tulip/winbond-840.c | 7 +-
drivers/net/ethernet/freescale/fec_main.c | 2 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 13 +-
drivers/net/ethernet/intel/e1000e/ich8lan.c | 14 +-
drivers/net/ethernet/intel/e1000e/ich8lan.h | 3 +
drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 2 +-
drivers/net/ethernet/intel/i40e/i40e_main.c | 60 +++++----
drivers/net/ethernet/marvell/mvneta.c | 2 +-
drivers/net/ethernet/mellanox/mlx4/main.c | 1 +
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 10 +-
drivers/net/ethernet/natsemi/natsemi.c | 8 +-
drivers/net/ethernet/neterion/vxge/vxge-main.c | 6 +-
.../net/ethernet/netronome/nfp/nfp_net_ethtool.c | 2 +
drivers/net/ethernet/qlogic/qed/qed_ll2.c | 20 +++
drivers/net/ethernet/qlogic/qed/qed_mcp.c | 23 +++-
drivers/net/ethernet/qlogic/qed/qed_rdma.c | 3 +-
drivers/net/ethernet/qlogic/qla3xxx.c | 6 +-
.../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c | 4 +-
drivers/net/ethernet/sis/sis900.c | 7 +-
drivers/net/ethernet/sun/niu.c | 3 +-
drivers/net/ethernet/xilinx/xilinx_emaclite.c | 5 +-
drivers/net/hamradio/6pack.c | 6 +
drivers/net/ieee802154/mac802154_hwsim.c | 6 +-
drivers/net/phy/mdio-mux.c | 36 +++--
drivers/net/ppp/ppp_generic.c | 21 ++-
drivers/net/usb/lan78xx.c | 16 ++-
drivers/net/usb/pegasus.c | 14 +-
drivers/net/usb/qmi_wwan.c | 76 ++++++++++-
drivers/net/usb/r8152.c | 3 +-
drivers/net/virtio_net.c | 10 +-
drivers/net/wireless/ath/ath.h | 3 +-
drivers/net/wireless/ath/ath5k/mac80211-ops.c | 2 +-
drivers/net/wireless/ath/ath9k/htc_drv_main.c | 2 +-
drivers/net/wireless/ath/ath9k/hw.h | 1 +
drivers/net/wireless/ath/ath9k/main.c | 95 ++++++++++++-
drivers/net/wireless/ath/key.c | 41 +++---
drivers/nfc/nfcsim.c | 3 +-
drivers/opp/of.c | 5 +-
drivers/pci/msi.c | 120 +++++++++++------
drivers/pci/quirks.c | 1 +
drivers/pcmcia/i82092.c | 1 +
drivers/ptp/Kconfig | 3 +-
drivers/scsi/device_handler/scsi_dh_rdac.c | 4 +-
drivers/scsi/megaraid/megaraid_mm.c | 21 ++-
drivers/scsi/scsi_scan.c | 3 +-
drivers/scsi/sr.c | 2 +-
drivers/slimbus/messaging.c | 7 +-
drivers/slimbus/qcom-ngd-ctrl.c | 5 +-
drivers/spi/spi-meson-spicc.c | 2 +
drivers/spi/spi-mt65xx.c | 19 +--
drivers/staging/rtl8723bs/hal/sdio_ops.c | 2 +
drivers/tee/optee/call.c | 36 ++++-
drivers/tee/optee/core.c | 9 ++
drivers/tee/optee/optee_private.h | 1 +
drivers/tty/serial/8250/8250_port.c | 12 +-
drivers/tty/vt/vt_ioctl.c | 11 +-
drivers/usb/class/usbtmc.c | 9 +-
drivers/usb/common/usb-otg-fsm.c | 6 +-
drivers/usb/dwc3/gadget.c | 23 ++--
drivers/usb/gadget/function/f_hid.c | 44 +++++-
drivers/usb/gadget/function/u_audio.c | 5 +-
drivers/usb/host/ehci-pci.c | 3 +
drivers/usb/serial/ftdi_sio.c | 1 +
drivers/usb/serial/ftdi_sio_ids.h | 3 +
drivers/usb/serial/option.c | 4 +
drivers/vhost/vhost.c | 10 +-
drivers/vhost/vringh.c | 2 +-
drivers/video/fbdev/core/fbmem.c | 4 +
drivers/virtio/virtio_pci_common.c | 7 +
drivers/virtio/virtio_ring.c | 6 +-
drivers/watchdog/iTCO_wdt.c | 12 +-
drivers/xen/events/events_base.c | 20 ++-
fs/btrfs/compression.c | 3 +-
fs/btrfs/inode.c | 10 +-
fs/btrfs/volumes.c | 1 +
fs/ceph/debugfs.c | 2 +-
fs/cifs/smb2ops.c | 4 +-
fs/ext4/namei.c | 2 +-
fs/hfs/bfind.c | 14 +-
fs/hfs/bnode.c | 25 +++-
fs/hfs/btree.h | 7 +
fs/hfs/super.c | 10 +-
fs/namespace.c | 57 +++++---
fs/ocfs2/file.c | 103 ++++++++------
fs/pipe.c | 19 ++-
fs/reiserfs/stree.c | 31 ++++-
fs/reiserfs/super.c | 8 ++
include/asm-generic/vmlinux.lds.h | 1 +
include/linux/backing-dev-defs.h | 1 +
include/linux/backing-dev.h | 9 +-
include/linux/cpuhotplug.h | 1 +
include/linux/device.h | 1 +
include/linux/filter.h | 24 ++++
include/linux/inetdevice.h | 2 +-
include/linux/irq.h | 2 +
include/linux/mfd/rt5033-private.h | 4 +-
include/linux/msi.h | 2 +-
include/linux/netdevice.h | 4 +
include/linux/once.h | 4 +-
include/linux/padata.h | 6 +-
include/linux/skbuff.h | 9 ++
include/linux/usb/otg-fsm.h | 1 +
include/linux/virtio_net.h | 14 +-
include/net/af_unix.h | 1 +
include/net/bluetooth/hci_core.h | 1 +
include/net/busy_poll.h | 2 +-
include/net/ip6_route.h | 2 +-
include/net/llc_pdu.h | 31 +++--
include/net/psample.h | 2 +
include/net/sctp/constants.h | 4 +-
include/trace/events/wbt.h | 8 +-
kernel/bpf/core.c | 32 +++--
kernel/bpf/verifier.c | 95 ++++++++++---
kernel/irq/chip.c | 5 +-
kernel/irq/msi.c | 13 +-
kernel/padata.c | 28 ++--
kernel/trace/trace.c | 4 +
kernel/trace/trace_events_hist.c | 41 +++++-
kernel/workqueue.c | 20 ++-
lib/once.c | 11 +-
localversion-rt | 2 +-
mm/backing-dev.c | 13 +-
net/802/garp.c | 14 ++
net/802/mrp.c | 14 ++
net/Makefile | 2 +-
net/bluetooth/hci_core.c | 32 ++---
net/bluetooth/hci_sock.c | 49 ++++---
net/bluetooth/hci_sysfs.c | 3 +
net/bluetooth/hidp/core.c | 2 +-
net/bridge/br_if.c | 2 +
net/can/raw.c | 20 ++-
net/core/dev.c | 3 +-
net/core/skbuff.c | 5 +-
net/core/sock.c | 2 +-
net/dccp/dccp.h | 6 +-
net/ieee802154/socket.c | 7 +-
net/ipv4/igmp.c | 21 ++-
net/ipv4/ip_gre.c | 2 +
net/ipv4/tcp_bbr.c | 2 +-
net/llc/af_llc.c | 10 +-
net/llc/llc_s_ac.c | 2 +-
net/mac80211/debugfs_sta.c | 1 +
net/mac80211/key.c | 1 +
net/mac80211/sta_info.h | 1 +
net/mac80211/tx.c | 12 +-
net/netfilter/nf_conntrack_core.c | 78 ++++-------
net/netfilter/nft_exthdr.c | 8 +-
net/netfilter/nft_nat.c | 4 +-
net/qrtr/qrtr.c | 2 +-
net/rds/ib_frmr.c | 4 +-
net/sctp/auth.c | 14 +-
net/sctp/input.c | 2 +-
net/sctp/protocol.c | 3 +-
net/socket.c | 6 +-
net/tipc/socket.c | 9 +-
net/unix/Kconfig | 5 +
net/unix/Makefile | 2 +
net/unix/af_unix.c | 102 +++++++-------
net/unix/garbage.c | 68 +---------
net/unix/scm.c | 148 +++++++++++++++++++++
net/unix/scm.h | 10 ++
net/vmw_vsock/virtio_transport.c | 7 +-
net/wireless/scan.c | 6 +-
scripts/tracing/draw_functrace.py | 6 +-
sound/core/seq/seq_ports.c | 39 ++++--
sound/pci/hda/hda_generic.c | 10 +-
sound/soc/codecs/cs42l42.c | 39 +++---
sound/soc/codecs/tlv320aic31xx.h | 4 +-
sound/soc/intel/atom/sst-mfld-platform-pcm.c | 3 +-
sound/usb/clock.c | 6 +
sound/usb/quirks.c | 1 +
tools/perf/util/map.c | 2 -
tools/testing/selftests/bpf/test_verifier.c | 2 +
tools/testing/selftests/vm/userfaultfd.c | 2 +-
249 files changed, 2176 insertions(+), 1025 deletions(-)
---
^ permalink raw reply [relevance 2%]
* [PATCH 2/2] Bluetooth: fix init and cleanup of sco_conn.timeout_work
2021-09-03 3:13 21% [PATCH 0/2] Bluetooth: various SCO fixes Desmond Cheong Zhi Xi
2021-09-03 3:13 20% ` [PATCH 1/2] Bluetooth: call sock_hold earlier in sco_conn_del Desmond Cheong Zhi Xi
@ 2021-09-03 3:13 19% ` Desmond Cheong Zhi Xi
2021-09-03 23:37 11% ` [PATCH 0/2] Bluetooth: various SCO fixes Luiz Augusto von Dentz
2 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-09-03 3:13 UTC (permalink / raw)
To: marcel, johan.hedberg, luiz.dentz, davem, kuba
Cc: Desmond Cheong Zhi Xi, linux-bluetooth, netdev, linux-kernel,
eric.dumazet
Before freeing struct sco_conn, all delayed timeout work should be
cancelled. Otherwise, sco_sock_timeout could potentially use the
sco_conn after it has been freed.
Additionally, sco_conn.timeout_work should be initialized when the
connection is allocated, not when the channel is added. This is
because an sco_conn can create channels with multiple sockets over its
lifetime, which happens if sockets are released but the connection
isn't deleted.
Fixes: ba316be1b6a0 ("Bluetooth: schedule SCO timeouts with delayed_work")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
---
net/bluetooth/sco.c | 9 ++++-----
1 file changed, 4 insertions(+), 5 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 4a057f99b60a..6e047e178c0a 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -133,6 +133,7 @@ static struct sco_conn *sco_conn_add(struct hci_conn *hcon)
return NULL;
spin_lock_init(&conn->lock);
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
hcon->sco_data = conn;
conn->hcon = hcon;
@@ -197,11 +198,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_chan_del(sk, err);
release_sock(sk);
sock_put(sk);
-
- /* Ensure no more work items will run before freeing conn. */
- cancel_delayed_work_sync(&conn->timeout_work);
}
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
+
hcon->sco_data = NULL;
kfree(conn);
}
@@ -214,8 +215,6 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
- INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
-
if (parent)
bt_accept_enqueue(parent, sk, true);
}
--
2.25.1
^ permalink raw reply related [relevance 19%]
* [PATCH 1/2] Bluetooth: call sock_hold earlier in sco_conn_del
2021-09-03 3:13 21% [PATCH 0/2] Bluetooth: various SCO fixes Desmond Cheong Zhi Xi
@ 2021-09-03 3:13 20% ` Desmond Cheong Zhi Xi
2021-09-10 7:36 4% ` Marcel Holtmann
2021-09-03 3:13 19% ` [PATCH 2/2] Bluetooth: fix init and cleanup of sco_conn.timeout_work Desmond Cheong Zhi Xi
2021-09-03 23:37 11% ` [PATCH 0/2] Bluetooth: various SCO fixes Luiz Augusto von Dentz
2 siblings, 1 reply; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-09-03 3:13 UTC (permalink / raw)
To: marcel, johan.hedberg, luiz.dentz, davem, kuba
Cc: Desmond Cheong Zhi Xi, linux-bluetooth, netdev, linux-kernel,
eric.dumazet
In sco_conn_del, conn->sk is read while holding on to the
sco_conn.lock to avoid races with a socket that could be released
concurrently.
However, in between unlocking sco_conn.lock and calling sock_hold,
it's possible for the socket to be freed, which would cause a
use-after-free write when sock_hold is finally called.
To fix this, the reference count of the socket should be increased
while the sco_conn.lock is still held.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
---
net/bluetooth/sco.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index b62c91c627e2..4a057f99b60a 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -187,10 +187,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
/* Kill socket */
sco_conn_lock(conn);
sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
sco_conn_unlock(conn);
if (sk) {
- sock_hold(sk);
lock_sock(sk);
sco_sock_clear_timer(sk);
sco_chan_del(sk, err);
--
2.25.1
^ permalink raw reply related [relevance 20%]
* [PATCH 0/2] Bluetooth: various SCO fixes
@ 2021-09-03 3:13 21% Desmond Cheong Zhi Xi
2021-09-03 3:13 20% ` [PATCH 1/2] Bluetooth: call sock_hold earlier in sco_conn_del Desmond Cheong Zhi Xi
` (2 more replies)
0 siblings, 3 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-09-03 3:13 UTC (permalink / raw)
To: marcel, johan.hedberg, luiz.dentz, davem, kuba
Cc: Desmond Cheong Zhi Xi, linux-bluetooth, netdev, linux-kernel,
eric.dumazet
Hi,
This patch set contains some of the fixes for SCO following our
discussion on commit ba316be1b6a0 ("Bluetooth: schedule SCO timeouts
with delayed_work") [1].
I believe these patches should go in together with [2] to address the
UAF errors that have been reported by Syzbot following
commit ba316be1b6a0.
Link: https://lore.kernel.org/lkml/20210810041410.142035-2-desmondcheongzx@gmail.com/ [1]
Link: https://lore.kernel.org/lkml/20210831065601.101185-1-desmondcheongzx@gmail.com/ [2]
Best wishes,
Desmond
Desmond Cheong Zhi Xi (2):
Bluetooth: call sock_hold earlier in sco_conn_del
Bluetooth: fix init and cleanup of sco_conn.timeout_work
net/bluetooth/sco.c | 12 ++++++------
1 file changed, 6 insertions(+), 6 deletions(-)
--
2.25.1
^ permalink raw reply [relevance 21%]
* Re: [PATCH v6 1/6] Bluetooth: schedule SCO timeouts with delayed_work
2021-09-02 23:42 11% ` Luiz Augusto von Dentz
@ 2021-09-03 3:17 10% ` Desmond Cheong Zhi Xi
0 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-09-03 3:17 UTC (permalink / raw)
To: Luiz Augusto von Dentz
Cc: Eric Dumazet, Marcel Holtmann, Johan Hedberg, David Miller,
Jakub Kicinski, sudipm.mukherjee, linux-bluetooth,
open list:NETWORKING [GENERAL],
Linux Kernel Mailing List, skhan, Greg Kroah-Hartman,
linux-kernel-mentees, syzbot+2f6d7c28bb4bf7e82060
Hi Luiz,
On 2/9/21 7:42 pm, Luiz Augusto von Dentz wrote:
> Hi Desmond,
>
> On Thu, Sep 2, 2021 at 4:05 PM Desmond Cheong Zhi Xi
> <desmondcheongzx@gmail.com> wrote:
>>
>> On 2/9/21 6:53 pm, Desmond Cheong Zhi Xi wrote:
>>> On 2/9/21 5:41 pm, Eric Dumazet wrote:
>>>>
>>>>
>>>> On 9/2/21 12:32 PM, Desmond Cheong Zhi Xi wrote:
>>>>>
>>>>> Hi Eric,
>>>>>
>>>>> This actually seems to be a pre-existing error in sco_sock_connect
>>>>> that we now hit in sco_sock_timeout.
>>>>>
>>>>> Any thoughts on the following patch to address the problem?
>>>>>
>>>>> Link:
>>>>> https://lore.kernel.org/lkml/20210831065601.101185-1-desmondcheongzx@gmail.com/
>>>>>
>>>>
>>>>
>>>> syzbot is still working on finding a repro, this is obviously not
>>>> trivial,
>>>> because this is a race window.
>>>>
>>>> I think this can happen even with a single SCO connection.
>>>>
>>>> This might be triggered more easily forcing a delay in sco_sock_timeout()
>>>>
>>>> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
>>>> index
>>>> 98a88158651281c9f75c4e0371044251e976e7ef..71ebe0243fab106c676c308724fe3a3f92a62cbd
>>>> 100644
>>>> --- a/net/bluetooth/sco.c
>>>> +++ b/net/bluetooth/sco.c
>>>> @@ -84,8 +84,14 @@ static void sco_sock_timeout(struct work_struct *work)
>>>> sco_conn_lock(conn);
>>>> sk = conn->sk;
>>>> - if (sk)
>>>> + if (sk) {
>>>> + // lets pretend cpu has been busy (in interrupts) for
>>>> 100ms
>>>> + int i;
>>>> + for (i=0;i<100000;i++)
>>>> + udelay(1);
>>>> +
>>>> sock_hold(sk);
>>>> + }> sco_conn_unlock(conn);
>>>> if (!sk)
>>>>
>>>>
>>>> Stack trace tells us that sco_sock_timeout() is running after last
>>>> reference
>>>> on socket has been released.
>>>>
>>>> __refcount_add include/linux/refcount.h:199 [inline]
>>>> __refcount_inc include/linux/refcount.h:250 [inline]
>>>> refcount_inc include/linux/refcount.h:267 [inline]
>>>> sock_hold include/net/sock.h:702 [inline]
>>>> sco_sock_timeout+0x216/0x290 net/bluetooth/sco.c:88
>>>> process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
>>>> worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
>>>> kthread+0x3e5/0x4d0 kernel/kthread.c:319
>>>> ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
>>>>
>>>> This is why I suggested to delay sock_put() to make sure this can not
>>>> happen.
>>>>
>>>> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
>>>> index
>>>> 98a88158651281c9f75c4e0371044251e976e7ef..bd0222e3f05a6bcb40cffe8405c9dfff98d7afde
>>>> 100644
>>>> --- a/net/bluetooth/sco.c
>>>> +++ b/net/bluetooth/sco.c
>>>> @@ -195,10 +195,11 @@ static void sco_conn_del(struct hci_conn *hcon,
>>>> int err)
>>>> sco_sock_clear_timer(sk);
>>>> sco_chan_del(sk, err);
>>>> release_sock(sk);
>>>> - sock_put(sk);
>>>> /* Ensure no more work items will run before freeing
>>>> conn. */
>>>> cancel_delayed_work_sync(&conn->timeout_work);
>>>> +
>>>> + sock_put(sk);
>>>> }
>>>> hcon->sco_data = NULL;
>>>>
>>>
>>> I see where you're going with this, but once sco_chan_del returns, any
>>> instance of sco_sock_timeout that hasn't yet called sock_hold will
>>> simply return, because conn->sk is NULL. Adding a delay to the
>>> sco_conn_lock critical section in sco_sock_timeout would not affect this
>>> because sco_chan_del clears conn->sk while holding onto the lock.
>>>
>>> The main reason that cancel_delayed_work_sync is run there is to make
>>> sure that we don't have a UAF on the SCO connection itself after we free
>>> conn.
>>>
>>
>> Now that I think about this, the init and cleanup isn't quite right
>> either. The delayed work should be initialized when the connection is
>> allocated, and we should always cancel all work before freeing:
>>
>> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
>> index ea18e5b56343..bba5cdb4cb4a 100644
>> --- a/net/bluetooth/sco.c
>> +++ b/net/bluetooth/sco.c
>> @@ -133,6 +133,7 @@ static struct sco_conn *sco_conn_add(struct hci_conn *hcon)
>> return NULL;
>>
>> spin_lock_init(&conn->lock);
>> + INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
>>
>> hcon->sco_data = conn;
>> conn->hcon = hcon;
>> @@ -197,11 +198,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
>> sco_chan_del(sk, err);
>> release_sock(sk);
>> sock_put(sk);
>> -
>> - /* Ensure no more work items will run before freeing conn. */
>> - cancel_delayed_work_sync(&conn->timeout_work);
>> }
>>
>> + /* Ensure no more work items will run before freeing conn. */
>> + cancel_delayed_work_sync(&conn->timeout_work);
>> +
>> hcon->sco_data = NULL;
>> kfree(conn);
>> }
>> @@ -214,8 +215,6 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
>> sco_pi(sk)->conn = conn;
>> conn->sk = sk;
>>
>> - INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
>> -
>> if (parent)
>> bt_accept_enqueue(parent, sk, true);
>> }
>
> I have come to something similar, do you care to send a proper patch
> so we can get this merged.
>
Sounds good. Just finished running some tests locally, I'll send out the
patches now.
>>> For a single SCO connection with well-formed channel, I think there
>>> can't be a race. Here's the reasoning:
>>>
>>> - For the timeout to be scheduled, a socket must have a channel with a
>>> connection.
>>>
>>> - When a channel between a socket and connection is established, the
>>> socket transitions from BT_OPEN to BT_CONNECTED, BT_CONNECT, or
>>> BT_CONNECT2.
>>>
>>> - For a socket to be released, it has to be zapped. For sockets that
>>> have a state of BT_CONNECTED, BT_CONNECT, or BT_CONNECT2, they are
>>> zapped only when the channel is deleted.
>>>
>>> - If the channel is deleted (which is protected by sco_conn_lock), then
>>> conn->sk is NULL, and sco_sock_timeout simply exits. If we had entered
>>> the critical section in sco_sock_timeout before the channel was deleted,
>>> then we increased the reference count on the socket, so it won't be
>>> freed until sco_sock_timeout is done.
>>>
>>> Hence, sco_sock_timeout doesn't race with the release of a socket that
>>> has a well-formed channel with a connection.
>>>
>>> But if multiple connections are allocated and overwritten in
>>> sco_sock_connect, then none of the above assumptions hold because the
>>> SCO connection can't be cleaned up (i.e. conn->sk cannot be set to NULL)
>>> when the associated socket is released. This scenario happens in the
>>> syzbot reproducer for the crash here:
>>> https://syzkaller.appspot.com/bug?id=bcc246d137428d00ed14b476c2068579515fe2bc
>>>
>>>
>>> That aside, upon taking a closer look, I think there is indeed a race
>>> lurking in sco_conn_del, but it's not the one that syzbot is hitting.
>>> Our sock_hold simply comes too late, and by the time it's called we
>>> might have already have freed the socket.
>>>
>>> So probably something like this needs to happen:
>>>
>>> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
>>> index fa25b07120c9..ea18e5b56343 100644
>>> --- a/net/bluetooth/sco.c
>>> +++ b/net/bluetooth/sco.c
>>> @@ -187,10 +187,11 @@ static void sco_conn_del(struct hci_conn *hcon,
>>> int err)
>>> /* Kill socket */
>>> sco_conn_lock(conn);
>>> sk = conn->sk;
>>> + if (sk)
>>> + sock_hold(sk);
>>> sco_conn_unlock(conn);
>>>
>>> if (sk) {
>>> - sock_hold(sk);
>>> lock_sock(sk);
>>> sco_sock_clear_timer(sk);
>>> sco_chan_del(sk, err);
>>
>
>
^ permalink raw reply [relevance 10%]
* Re: [PATCH v6 1/6] Bluetooth: schedule SCO timeouts with delayed_work
2021-09-02 23:05 19% ` Desmond Cheong Zhi Xi
@ 2021-09-02 23:42 11% ` Luiz Augusto von Dentz
2021-09-03 3:17 10% ` Desmond Cheong Zhi Xi
0 siblings, 1 reply; 200+ results
From: Luiz Augusto von Dentz @ 2021-09-02 23:42 UTC (permalink / raw)
To: Desmond Cheong Zhi Xi
Cc: Eric Dumazet, Marcel Holtmann, Johan Hedberg, David Miller,
Jakub Kicinski, sudipm.mukherjee, linux-bluetooth,
open list:NETWORKING [GENERAL],
Linux Kernel Mailing List, skhan, Greg Kroah-Hartman,
linux-kernel-mentees, syzbot+2f6d7c28bb4bf7e82060
Hi Desmond,
On Thu, Sep 2, 2021 at 4:05 PM Desmond Cheong Zhi Xi
<desmondcheongzx@gmail.com> wrote:
>
> On 2/9/21 6:53 pm, Desmond Cheong Zhi Xi wrote:
> > On 2/9/21 5:41 pm, Eric Dumazet wrote:
> >>
> >>
> >> On 9/2/21 12:32 PM, Desmond Cheong Zhi Xi wrote:
> >>>
> >>> Hi Eric,
> >>>
> >>> This actually seems to be a pre-existing error in sco_sock_connect
> >>> that we now hit in sco_sock_timeout.
> >>>
> >>> Any thoughts on the following patch to address the problem?
> >>>
> >>> Link:
> >>> https://lore.kernel.org/lkml/20210831065601.101185-1-desmondcheongzx@gmail.com/
> >>>
> >>
> >>
> >> syzbot is still working on finding a repro, this is obviously not
> >> trivial,
> >> because this is a race window.
> >>
> >> I think this can happen even with a single SCO connection.
> >>
> >> This might be triggered more easily forcing a delay in sco_sock_timeout()
> >>
> >> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
> >> index
> >> 98a88158651281c9f75c4e0371044251e976e7ef..71ebe0243fab106c676c308724fe3a3f92a62cbd
> >> 100644
> >> --- a/net/bluetooth/sco.c
> >> +++ b/net/bluetooth/sco.c
> >> @@ -84,8 +84,14 @@ static void sco_sock_timeout(struct work_struct *work)
> >> sco_conn_lock(conn);
> >> sk = conn->sk;
> >> - if (sk)
> >> + if (sk) {
> >> + // lets pretend cpu has been busy (in interrupts) for
> >> 100ms
> >> + int i;
> >> + for (i=0;i<100000;i++)
> >> + udelay(1);
> >> +
> >> sock_hold(sk);
> >> + }> sco_conn_unlock(conn);
> >> if (!sk)
> >>
> >>
> >> Stack trace tells us that sco_sock_timeout() is running after last
> >> reference
> >> on socket has been released.
> >>
> >> __refcount_add include/linux/refcount.h:199 [inline]
> >> __refcount_inc include/linux/refcount.h:250 [inline]
> >> refcount_inc include/linux/refcount.h:267 [inline]
> >> sock_hold include/net/sock.h:702 [inline]
> >> sco_sock_timeout+0x216/0x290 net/bluetooth/sco.c:88
> >> process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
> >> worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
> >> kthread+0x3e5/0x4d0 kernel/kthread.c:319
> >> ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
> >>
> >> This is why I suggested to delay sock_put() to make sure this can not
> >> happen.
> >>
> >> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
> >> index
> >> 98a88158651281c9f75c4e0371044251e976e7ef..bd0222e3f05a6bcb40cffe8405c9dfff98d7afde
> >> 100644
> >> --- a/net/bluetooth/sco.c
> >> +++ b/net/bluetooth/sco.c
> >> @@ -195,10 +195,11 @@ static void sco_conn_del(struct hci_conn *hcon,
> >> int err)
> >> sco_sock_clear_timer(sk);
> >> sco_chan_del(sk, err);
> >> release_sock(sk);
> >> - sock_put(sk);
> >> /* Ensure no more work items will run before freeing
> >> conn. */
> >> cancel_delayed_work_sync(&conn->timeout_work);
> >> +
> >> + sock_put(sk);
> >> }
> >> hcon->sco_data = NULL;
> >>
> >
> > I see where you're going with this, but once sco_chan_del returns, any
> > instance of sco_sock_timeout that hasn't yet called sock_hold will
> > simply return, because conn->sk is NULL. Adding a delay to the
> > sco_conn_lock critical section in sco_sock_timeout would not affect this
> > because sco_chan_del clears conn->sk while holding onto the lock.
> >
> > The main reason that cancel_delayed_work_sync is run there is to make
> > sure that we don't have a UAF on the SCO connection itself after we free
> > conn.
> >
>
> Now that I think about this, the init and cleanup isn't quite right
> either. The delayed work should be initialized when the connection is
> allocated, and we should always cancel all work before freeing:
>
> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
> index ea18e5b56343..bba5cdb4cb4a 100644
> --- a/net/bluetooth/sco.c
> +++ b/net/bluetooth/sco.c
> @@ -133,6 +133,7 @@ static struct sco_conn *sco_conn_add(struct hci_conn *hcon)
> return NULL;
>
> spin_lock_init(&conn->lock);
> + INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
>
> hcon->sco_data = conn;
> conn->hcon = hcon;
> @@ -197,11 +198,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
> sco_chan_del(sk, err);
> release_sock(sk);
> sock_put(sk);
> -
> - /* Ensure no more work items will run before freeing conn. */
> - cancel_delayed_work_sync(&conn->timeout_work);
> }
>
> + /* Ensure no more work items will run before freeing conn. */
> + cancel_delayed_work_sync(&conn->timeout_work);
> +
> hcon->sco_data = NULL;
> kfree(conn);
> }
> @@ -214,8 +215,6 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
> sco_pi(sk)->conn = conn;
> conn->sk = sk;
>
> - INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
> -
> if (parent)
> bt_accept_enqueue(parent, sk, true);
> }
I have come to something similar, do you care to send a proper patch
so we can get this merged.
> > For a single SCO connection with well-formed channel, I think there
> > can't be a race. Here's the reasoning:
> >
> > - For the timeout to be scheduled, a socket must have a channel with a
> > connection.
> >
> > - When a channel between a socket and connection is established, the
> > socket transitions from BT_OPEN to BT_CONNECTED, BT_CONNECT, or
> > BT_CONNECT2.
> >
> > - For a socket to be released, it has to be zapped. For sockets that
> > have a state of BT_CONNECTED, BT_CONNECT, or BT_CONNECT2, they are
> > zapped only when the channel is deleted.
> >
> > - If the channel is deleted (which is protected by sco_conn_lock), then
> > conn->sk is NULL, and sco_sock_timeout simply exits. If we had entered
> > the critical section in sco_sock_timeout before the channel was deleted,
> > then we increased the reference count on the socket, so it won't be
> > freed until sco_sock_timeout is done.
> >
> > Hence, sco_sock_timeout doesn't race with the release of a socket that
> > has a well-formed channel with a connection.
> >
> > But if multiple connections are allocated and overwritten in
> > sco_sock_connect, then none of the above assumptions hold because the
> > SCO connection can't be cleaned up (i.e. conn->sk cannot be set to NULL)
> > when the associated socket is released. This scenario happens in the
> > syzbot reproducer for the crash here:
> > https://syzkaller.appspot.com/bug?id=bcc246d137428d00ed14b476c2068579515fe2bc
> >
> >
> > That aside, upon taking a closer look, I think there is indeed a race
> > lurking in sco_conn_del, but it's not the one that syzbot is hitting.
> > Our sock_hold simply comes too late, and by the time it's called we
> > might have already have freed the socket.
> >
> > So probably something like this needs to happen:
> >
> > diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
> > index fa25b07120c9..ea18e5b56343 100644
> > --- a/net/bluetooth/sco.c
> > +++ b/net/bluetooth/sco.c
> > @@ -187,10 +187,11 @@ static void sco_conn_del(struct hci_conn *hcon,
> > int err)
> > /* Kill socket */
> > sco_conn_lock(conn);
> > sk = conn->sk;
> > + if (sk)
> > + sock_hold(sk);
> > sco_conn_unlock(conn);
> >
> > if (sk) {
> > - sock_hold(sk);
> > lock_sock(sk);
> > sco_sock_clear_timer(sk);
> > sco_chan_del(sk, err);
>
--
Luiz Augusto von Dentz
^ permalink raw reply [relevance 11%]
* Re: [PATCH v6 1/6] Bluetooth: schedule SCO timeouts with delayed_work
2021-09-02 22:53 8% ` Desmond Cheong Zhi Xi
@ 2021-09-02 23:05 19% ` Desmond Cheong Zhi Xi
2021-09-02 23:42 11% ` Luiz Augusto von Dentz
0 siblings, 1 reply; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-09-02 23:05 UTC (permalink / raw)
To: Eric Dumazet, marcel, johan.hedberg, luiz.dentz, davem, kuba,
sudipm.mukherjee
Cc: linux-bluetooth, netdev, linux-kernel, skhan, gregkh,
linux-kernel-mentees, syzbot+2f6d7c28bb4bf7e82060
On 2/9/21 6:53 pm, Desmond Cheong Zhi Xi wrote:
> On 2/9/21 5:41 pm, Eric Dumazet wrote:
>>
>>
>> On 9/2/21 12:32 PM, Desmond Cheong Zhi Xi wrote:
>>>
>>> Hi Eric,
>>>
>>> This actually seems to be a pre-existing error in sco_sock_connect
>>> that we now hit in sco_sock_timeout.
>>>
>>> Any thoughts on the following patch to address the problem?
>>>
>>> Link:
>>> https://lore.kernel.org/lkml/20210831065601.101185-1-desmondcheongzx@gmail.com/
>>>
>>
>>
>> syzbot is still working on finding a repro, this is obviously not
>> trivial,
>> because this is a race window.
>>
>> I think this can happen even with a single SCO connection.
>>
>> This might be triggered more easily forcing a delay in sco_sock_timeout()
>>
>> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
>> index
>> 98a88158651281c9f75c4e0371044251e976e7ef..71ebe0243fab106c676c308724fe3a3f92a62cbd
>> 100644
>> --- a/net/bluetooth/sco.c
>> +++ b/net/bluetooth/sco.c
>> @@ -84,8 +84,14 @@ static void sco_sock_timeout(struct work_struct *work)
>> sco_conn_lock(conn);
>> sk = conn->sk;
>> - if (sk)
>> + if (sk) {
>> + // lets pretend cpu has been busy (in interrupts) for
>> 100ms
>> + int i;
>> + for (i=0;i<100000;i++)
>> + udelay(1);
>> +
>> sock_hold(sk);
>> + }> sco_conn_unlock(conn);
>> if (!sk)
>>
>>
>> Stack trace tells us that sco_sock_timeout() is running after last
>> reference
>> on socket has been released.
>>
>> __refcount_add include/linux/refcount.h:199 [inline]
>> __refcount_inc include/linux/refcount.h:250 [inline]
>> refcount_inc include/linux/refcount.h:267 [inline]
>> sock_hold include/net/sock.h:702 [inline]
>> sco_sock_timeout+0x216/0x290 net/bluetooth/sco.c:88
>> process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
>> worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
>> kthread+0x3e5/0x4d0 kernel/kthread.c:319
>> ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
>>
>> This is why I suggested to delay sock_put() to make sure this can not
>> happen.
>>
>> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
>> index
>> 98a88158651281c9f75c4e0371044251e976e7ef..bd0222e3f05a6bcb40cffe8405c9dfff98d7afde
>> 100644
>> --- a/net/bluetooth/sco.c
>> +++ b/net/bluetooth/sco.c
>> @@ -195,10 +195,11 @@ static void sco_conn_del(struct hci_conn *hcon,
>> int err)
>> sco_sock_clear_timer(sk);
>> sco_chan_del(sk, err);
>> release_sock(sk);
>> - sock_put(sk);
>> /* Ensure no more work items will run before freeing
>> conn. */
>> cancel_delayed_work_sync(&conn->timeout_work);
>> +
>> + sock_put(sk);
>> }
>> hcon->sco_data = NULL;
>>
>
> I see where you're going with this, but once sco_chan_del returns, any
> instance of sco_sock_timeout that hasn't yet called sock_hold will
> simply return, because conn->sk is NULL. Adding a delay to the
> sco_conn_lock critical section in sco_sock_timeout would not affect this
> because sco_chan_del clears conn->sk while holding onto the lock.
>
> The main reason that cancel_delayed_work_sync is run there is to make
> sure that we don't have a UAF on the SCO connection itself after we free
> conn.
>
Now that I think about this, the init and cleanup isn't quite right
either. The delayed work should be initialized when the connection is
allocated, and we should always cancel all work before freeing:
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index ea18e5b56343..bba5cdb4cb4a 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -133,6 +133,7 @@ static struct sco_conn *sco_conn_add(struct hci_conn *hcon)
return NULL;
spin_lock_init(&conn->lock);
+ INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
hcon->sco_data = conn;
conn->hcon = hcon;
@@ -197,11 +198,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_chan_del(sk, err);
release_sock(sk);
sock_put(sk);
-
- /* Ensure no more work items will run before freeing conn. */
- cancel_delayed_work_sync(&conn->timeout_work);
}
+ /* Ensure no more work items will run before freeing conn. */
+ cancel_delayed_work_sync(&conn->timeout_work);
+
hcon->sco_data = NULL;
kfree(conn);
}
@@ -214,8 +215,6 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
sco_pi(sk)->conn = conn;
conn->sk = sk;
- INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
-
if (parent)
bt_accept_enqueue(parent, sk, true);
}
> For a single SCO connection with well-formed channel, I think there
> can't be a race. Here's the reasoning:
>
> - For the timeout to be scheduled, a socket must have a channel with a
> connection.
>
> - When a channel between a socket and connection is established, the
> socket transitions from BT_OPEN to BT_CONNECTED, BT_CONNECT, or
> BT_CONNECT2.
>
> - For a socket to be released, it has to be zapped. For sockets that
> have a state of BT_CONNECTED, BT_CONNECT, or BT_CONNECT2, they are
> zapped only when the channel is deleted.
>
> - If the channel is deleted (which is protected by sco_conn_lock), then
> conn->sk is NULL, and sco_sock_timeout simply exits. If we had entered
> the critical section in sco_sock_timeout before the channel was deleted,
> then we increased the reference count on the socket, so it won't be
> freed until sco_sock_timeout is done.
>
> Hence, sco_sock_timeout doesn't race with the release of a socket that
> has a well-formed channel with a connection.
>
> But if multiple connections are allocated and overwritten in
> sco_sock_connect, then none of the above assumptions hold because the
> SCO connection can't be cleaned up (i.e. conn->sk cannot be set to NULL)
> when the associated socket is released. This scenario happens in the
> syzbot reproducer for the crash here:
> https://syzkaller.appspot.com/bug?id=bcc246d137428d00ed14b476c2068579515fe2bc
>
>
> That aside, upon taking a closer look, I think there is indeed a race
> lurking in sco_conn_del, but it's not the one that syzbot is hitting.
> Our sock_hold simply comes too late, and by the time it's called we
> might have already have freed the socket.
>
> So probably something like this needs to happen:
>
> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
> index fa25b07120c9..ea18e5b56343 100644
> --- a/net/bluetooth/sco.c
> +++ b/net/bluetooth/sco.c
> @@ -187,10 +187,11 @@ static void sco_conn_del(struct hci_conn *hcon,
> int err)
> /* Kill socket */
> sco_conn_lock(conn);
> sk = conn->sk;
> + if (sk)
> + sock_hold(sk);
> sco_conn_unlock(conn);
>
> if (sk) {
> - sock_hold(sk);
> lock_sock(sk);
> sco_sock_clear_timer(sk);
> sco_chan_del(sk, err);
^ permalink raw reply related [relevance 19%]
* Re: [PATCH v6 1/6] Bluetooth: schedule SCO timeouts with delayed_work
2021-09-02 21:41 8% ` Eric Dumazet
@ 2021-09-02 22:53 8% ` Desmond Cheong Zhi Xi
2021-09-02 23:05 19% ` Desmond Cheong Zhi Xi
0 siblings, 1 reply; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-09-02 22:53 UTC (permalink / raw)
To: Eric Dumazet, marcel, johan.hedberg, luiz.dentz, davem, kuba,
sudipm.mukherjee
Cc: linux-bluetooth, netdev, linux-kernel, skhan, gregkh,
linux-kernel-mentees, syzbot+2f6d7c28bb4bf7e82060
On 2/9/21 5:41 pm, Eric Dumazet wrote:
>
>
> On 9/2/21 12:32 PM, Desmond Cheong Zhi Xi wrote:
>>
>> Hi Eric,
>>
>> This actually seems to be a pre-existing error in sco_sock_connect that we now hit in sco_sock_timeout.
>>
>> Any thoughts on the following patch to address the problem?
>>
>> Link: https://lore.kernel.org/lkml/20210831065601.101185-1-desmondcheongzx@gmail.com/
>
>
> syzbot is still working on finding a repro, this is obviously not trivial,
> because this is a race window.
>
> I think this can happen even with a single SCO connection.
>
> This might be triggered more easily forcing a delay in sco_sock_timeout()
>
> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
> index 98a88158651281c9f75c4e0371044251e976e7ef..71ebe0243fab106c676c308724fe3a3f92a62cbd 100644
> --- a/net/bluetooth/sco.c
> +++ b/net/bluetooth/sco.c
> @@ -84,8 +84,14 @@ static void sco_sock_timeout(struct work_struct *work)
>
> sco_conn_lock(conn);
> sk = conn->sk;
> - if (sk)
> + if (sk) {
> + // lets pretend cpu has been busy (in interrupts) for 100ms
> + int i;
> + for (i=0;i<100000;i++)
> + udelay(1);
> +
> sock_hold(sk);
> + }> sco_conn_unlock(conn);
>
> if (!sk)
>
>
> Stack trace tells us that sco_sock_timeout() is running after last reference
> on socket has been released.
>
> __refcount_add include/linux/refcount.h:199 [inline]
> __refcount_inc include/linux/refcount.h:250 [inline]
> refcount_inc include/linux/refcount.h:267 [inline]
> sock_hold include/net/sock.h:702 [inline]
> sco_sock_timeout+0x216/0x290 net/bluetooth/sco.c:88
> process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
> worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
> kthread+0x3e5/0x4d0 kernel/kthread.c:319
> ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
>
> This is why I suggested to delay sock_put() to make sure this can not happen.
>
> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
> index 98a88158651281c9f75c4e0371044251e976e7ef..bd0222e3f05a6bcb40cffe8405c9dfff98d7afde 100644
> --- a/net/bluetooth/sco.c
> +++ b/net/bluetooth/sco.c
> @@ -195,10 +195,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
> sco_sock_clear_timer(sk);
> sco_chan_del(sk, err);
> release_sock(sk);
> - sock_put(sk);
>
> /* Ensure no more work items will run before freeing conn. */
> cancel_delayed_work_sync(&conn->timeout_work);
> +
> + sock_put(sk);
> }
>
> hcon->sco_data = NULL;
>
I see where you're going with this, but once sco_chan_del returns, any
instance of sco_sock_timeout that hasn't yet called sock_hold will
simply return, because conn->sk is NULL. Adding a delay to the
sco_conn_lock critical section in sco_sock_timeout would not affect this
because sco_chan_del clears conn->sk while holding onto the lock.
The main reason that cancel_delayed_work_sync is run there is to make
sure that we don't have a UAF on the SCO connection itself after we free
conn.
For a single SCO connection with well-formed channel, I think there
can't be a race. Here's the reasoning:
- For the timeout to be scheduled, a socket must have a channel with a
connection.
- When a channel between a socket and connection is established, the
socket transitions from BT_OPEN to BT_CONNECTED, BT_CONNECT, or
BT_CONNECT2.
- For a socket to be released, it has to be zapped. For sockets that
have a state of BT_CONNECTED, BT_CONNECT, or BT_CONNECT2, they are
zapped only when the channel is deleted.
- If the channel is deleted (which is protected by sco_conn_lock), then
conn->sk is NULL, and sco_sock_timeout simply exits. If we had entered
the critical section in sco_sock_timeout before the channel was deleted,
then we increased the reference count on the socket, so it won't be
freed until sco_sock_timeout is done.
Hence, sco_sock_timeout doesn't race with the release of a socket that
has a well-formed channel with a connection.
But if multiple connections are allocated and overwritten in
sco_sock_connect, then none of the above assumptions hold because the
SCO connection can't be cleaned up (i.e. conn->sk cannot be set to NULL)
when the associated socket is released. This scenario happens in the
syzbot reproducer for the crash here:
https://syzkaller.appspot.com/bug?id=bcc246d137428d00ed14b476c2068579515fe2bc
That aside, upon taking a closer look, I think there is indeed a race
lurking in sco_conn_del, but it's not the one that syzbot is hitting.
Our sock_hold simply comes too late, and by the time it's called we
might have already have freed the socket.
So probably something like this needs to happen:
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index fa25b07120c9..ea18e5b56343 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -187,10 +187,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
/* Kill socket */
sco_conn_lock(conn);
sk = conn->sk;
+ if (sk)
+ sock_hold(sk);
sco_conn_unlock(conn);
if (sk) {
- sock_hold(sk);
lock_sock(sk);
sco_sock_clear_timer(sk);
sco_chan_del(sk, err);
^ permalink raw reply related [relevance 8%]
* Re: [PATCH v6 1/6] Bluetooth: schedule SCO timeouts with delayed_work
2021-09-02 19:32 10% ` Desmond Cheong Zhi Xi
@ 2021-09-02 21:41 8% ` Eric Dumazet
2021-09-02 22:53 8% ` Desmond Cheong Zhi Xi
0 siblings, 1 reply; 200+ results
From: Eric Dumazet @ 2021-09-02 21:41 UTC (permalink / raw)
To: Desmond Cheong Zhi Xi, Eric Dumazet, marcel, johan.hedberg,
luiz.dentz, davem, kuba, sudipm.mukherjee
Cc: linux-bluetooth, netdev, linux-kernel, skhan, gregkh,
linux-kernel-mentees, syzbot+2f6d7c28bb4bf7e82060
On 9/2/21 12:32 PM, Desmond Cheong Zhi Xi wrote:
>
> Hi Eric,
>
> This actually seems to be a pre-existing error in sco_sock_connect that we now hit in sco_sock_timeout.
>
> Any thoughts on the following patch to address the problem?
>
> Link: https://lore.kernel.org/lkml/20210831065601.101185-1-desmondcheongzx@gmail.com/
syzbot is still working on finding a repro, this is obviously not trivial,
because this is a race window.
I think this can happen even with a single SCO connection.
This might be triggered more easily forcing a delay in sco_sock_timeout()
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 98a88158651281c9f75c4e0371044251e976e7ef..71ebe0243fab106c676c308724fe3a3f92a62cbd 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -84,8 +84,14 @@ static void sco_sock_timeout(struct work_struct *work)
sco_conn_lock(conn);
sk = conn->sk;
- if (sk)
+ if (sk) {
+ // lets pretend cpu has been busy (in interrupts) for 100ms
+ int i;
+ for (i=0;i<100000;i++)
+ udelay(1);
+
sock_hold(sk);
+ }
sco_conn_unlock(conn);
if (!sk)
Stack trace tells us that sco_sock_timeout() is running after last reference
on socket has been released.
__refcount_add include/linux/refcount.h:199 [inline]
__refcount_inc include/linux/refcount.h:250 [inline]
refcount_inc include/linux/refcount.h:267 [inline]
sock_hold include/net/sock.h:702 [inline]
sco_sock_timeout+0x216/0x290 net/bluetooth/sco.c:88
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
This is why I suggested to delay sock_put() to make sure this can not happen.
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 98a88158651281c9f75c4e0371044251e976e7ef..bd0222e3f05a6bcb40cffe8405c9dfff98d7afde 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -195,10 +195,11 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
sco_sock_clear_timer(sk);
sco_chan_del(sk, err);
release_sock(sk);
- sock_put(sk);
/* Ensure no more work items will run before freeing conn. */
cancel_delayed_work_sync(&conn->timeout_work);
+
+ sock_put(sk);
}
hcon->sco_data = NULL;
^ permalink raw reply related [relevance 8%]
* Re: [syzbot] INFO: task can't die in __lock_sock
[not found] ` <20210902031752.2502-1-hdanton@sina.com>
@ 2021-09-02 19:54 10% ` Desmond Cheong Zhi Xi
0 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-09-02 19:54 UTC (permalink / raw)
To: Hillf Danton, syzbot
Cc: Eric Dumazet, linux-bluetooth, linux-kernel, luiz.dentz, netdev,
syzkaller-bugs
On 1/9/21 11:17 pm, Hillf Danton wrote:
> On Wed, 01 Sep 2021 10:34:21 -0700
>> syzbot has found a reproducer for the following issue on:
>>
>> HEAD commit: c1b13fe76e95 Add linux-next specific files for 20210901
>> git tree: linux-next
>> console output: https://syzkaller.appspot.com/x/log.txt?x=12c6034d300000
>> kernel config: https://syzkaller.appspot.com/x/.config?x=e2afff7bc32736e5
>> dashboard link: https://syzkaller.appspot.com/bug?extid=7d51f807c81b190a127d
>> compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.1
>> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=14d42469300000
>> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1107d815300000
>>
>> IMPORTANT: if you fix the issue, please add the following tag to the commit:
>> Reported-by: syzbot+7d51f807c81b190a127d@syzkaller.appspotmail.com
>>
>> INFO: task syz-executor157:6562 blocked for more than 143 seconds.
>> Not tainted 5.14.0-next-20210901-syzkaller #0
>> "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
>> task:syz-executor157 state:D stack:26880 pid: 6562 ppid: 6530 flags:0x00004006
>> Call Trace:
>> context_switch kernel/sched/core.c:4955 [inline]
>> __schedule+0x940/0x26f0 kernel/sched/core.c:6302
>> schedule+0xd3/0x270 kernel/sched/core.c:6381
>> __lock_sock+0x13d/0x260 net/core/sock.c:2644
>> lock_sock_nested+0xf6/0x120 net/core/sock.c:3185
>> lock_sock include/net/sock.h:1612 [inline]
>
> This is due to b7ce436a5d79 ("Bluetooth: switch to lock_sock in RFCOMM").
>
>> rfcomm_sk_state_change+0xb4/0x390 net/bluetooth/rfcomm/sock.c:73
>> __rfcomm_dlc_close+0x1b6/0x8a0 net/bluetooth/rfcomm/core.c:489
>> rfcomm_dlc_close+0x1ea/0x240 net/bluetooth/rfcomm/core.c:520
>> __rfcomm_sock_close+0xac/0x260 net/bluetooth/rfcomm/sock.c:220
>> rfcomm_sock_shutdown+0xe9/0x210 net/bluetooth/rfcomm/sock.c:931
>> rfcomm_sock_release+0x5f/0x140 net/bluetooth/rfcomm/sock.c:951
>> __sock_release+0xcd/0x280 net/socket.c:649
>> sock_close+0x18/0x20 net/socket.c:1314
>> __fput+0x288/0x9f0 fs/file_table.c:280
>> task_work_run+0xdd/0x1a0 kernel/task_work.c:164
>> exit_task_work include/linux/task_work.h:32 [inline]
>> do_exit+0xbae/0x2a30 kernel/exit.c:825
>> do_group_exit+0x125/0x310 kernel/exit.c:922
>> get_signal+0x47f/0x2160 kernel/signal.c:2868
>> arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865
>> handle_signal_work kernel/entry/common.c:148 [inline]
>> exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
>> exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
>> __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
>> syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
>> do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
>> entry_SYSCALL_64_after_hwframe+0x44/0xae
>> RIP: 0033:0x445fe9
>> RSP: 002b:00007fff85049fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
>> RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 0000000000445fe9
>> RDX: 0000000000000080 RSI: 0000000020000000 RDI: 0000000000000004
>> RBP: 0000000000000003 R08: 000000ff00000001 R09: 000000ff00000001
>> R10: 0000000000000000 R11: 0000000000000246 R12: 00000000014112b8
>> R13: 0000000000000072 R14: 00007fff8504a040 R15: 0000000000000003
>>
>> Showing all locks held in the system:
>> 1 lock held by khungtaskd/26:
>> #0: ffffffff8b97fbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6446
>> 1 lock held by krfcommd/2876:
>> #0: ffffffff8d31ede8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_process_sessions net/bluetooth/rfcomm/core.c:1979 [inline]
>> #0: ffffffff8d31ede8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_run+0x2ed/0x4a20 net/bluetooth/rfcomm/core.c:2086
>> 1 lock held by in:imklog/6232:
>> 4 locks held by syz-executor157/6562:
>> #0: ffff888145e26210 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:786 [inline]
>> #0: ffff888145e26210 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: __sock_release+0x86/0x280 net/socket.c:648
>> #1: ffff88801d622120 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1612 [inline]
>> #1: ffff88801d622120 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_shutdown+0x54/0x210 net/bluetooth/rfcomm/sock.c:928
>
> But sk is already locked before b7ce436a5d79.
>
> What is wierd here is lock_sock() fails to complain about recursive locking
> like this one if syzbot turned lockdep on. Any light on this, Eric?
>
> Thanks
> Hillf
>
Sorry, this one was my bad. The patch swapped out spin_lock_bh for
lock_sock, to provide synchronization with other functions that use
lock_sock.
Problem is that in one of the call traces, we hit the following deadlock:
rfcomm_sock_close():
lock_sock();
__rfcomm_sock_close():
rfcomm_dlc_close():
__rfcomm_dlc_close():
rfcomm_sk_state_change():
lock_sock();
But we don't always hold onto the socket lock before calling
rfcomm_sk_state_change.
I'm still working and testing a fix, but I think one possibility is to
schedule rfcomm_sk_state_change on a workqueue. This seems to fit with
the rest of the code, since in rfcomm_sock_shutdown we call
rfcomm_sock_close then wait for the sk state to change to BT_CLOSED.
>> #2: ffffffff8d31ede8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x34/0x240 net/bluetooth/rfcomm/core.c:507
>> #3: ffff88807edd9928 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x162/0x8a0 net/bluetooth/rfcomm/core.c:487
>>
>> =============================================
>>
>> NMI backtrace for cpu 1
>> CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.14.0-next-20210901-syzkaller #0
>> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
>> Call Trace:
>> __dump_stack lib/dump_stack.c:88 [inline]
>> dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
>> nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:105
>> nmi_trigger_cpumask_backtrace+0x1ae/0x220 lib/nmi_backtrace.c:62
>> trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
>> check_hung_uninterruptible_tasks kernel/hung_task.c:254 [inline]
>> watchdog+0xcb7/0xed0 kernel/hung_task.c:339
>> kthread+0x3e5/0x4d0 kernel/kthread.c:319
>> ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
>> Sending NMI from CPU 1 to CPUs 0:
>> NMI backtrace for cpu 0
>> CPU: 0 PID: 2958 Comm: systemd-journal Not tainted 5.14.0-next-20210901-syzkaller #0
>> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
>> RIP: 0010:check_kcov_mode kernel/kcov.c:163 [inline]
>> RIP: 0010:__sanitizer_cov_trace_pc+0x7/0x60 kernel/kcov.c:197
>> Code: fd ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 00 65 8b 05 39 e6 8b 7e <89> c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 40 f0 01 00 a9
>> RSP: 0018:ffffc900014dfde0 EFLAGS: 00000282
>> RAX: 0000000080000000 RBX: ffffc900014dff58 RCX: 1ffff9200029bfc7
>> RDX: dffffc0000000000 RSI: 1ffff9200029bfcd RDI: ffffc900014dfe38
>> RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8176c71a
>> R10: ffffffff81765c97 R11: 0000000000000002 R12: 0000000000000053
>> R13: 0000000000000002 R14: 0000000000000000 R15: ffffc900014dfe30
>> FS: 00007f43756768c0(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
>> CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
>> CR2: 00007f4372a49000 CR3: 000000001a5d4000 CR4: 00000000001506f0
>> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
>> DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
>> Call Trace:
>> get_current arch/x86/include/asm/current.h:15 [inline]
>> seccomp_run_filters kernel/seccomp.c:402 [inline]
>> __seccomp_filter+0x88/0x1040 kernel/seccomp.c:1180
>> __secure_computing+0xfc/0x360 kernel/seccomp.c:1311
>> syscall_trace_enter.constprop.0+0x94/0x270 kernel/entry/common.c:68
>> do_syscall_64+0x16/0xb0 arch/x86/entry/common.c:76
>> entry_SYSCALL_64_after_hwframe+0x44/0xae
>> RIP: 0033:0x7f4374931687
>> Code: 00 b8 ff ff ff ff c3 0f 1f 40 00 48 8b 05 09 d8 2b 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 d7 2b 00 f7 d8 64 89 01 48
>> RSP: 002b:00007ffc79978938 EFLAGS: 00000293 ORIG_RAX: 0000000000000053
>> RAX: ffffffffffffffda RBX: 00007ffc7997b850 RCX: 00007f4374931687
>> RDX: 00007f43753a2a00 RSI: 00000000000001ed RDI: 00005646c59898a0
>> RBP: 00007ffc79978970 R08: 0000000000000000 R09: 0000000000000000
>> R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000
>> R13: 0000000000000000 R14: 00007ffc7997b850 R15: 00007ffc79978e60
>> ----------------
>> Code disassembly (best guess), 3 bytes skipped:
>> 0: b9 ff ff ff ff mov $0xffffffff,%ecx
>> 5: ba 08 00 00 00 mov $0x8,%edx
>> a: 4d 8b 03 mov (%r11),%r8
>> d: 48 0f bd ca bsr %rdx,%rcx
>> 11: 49 8b 45 00 mov 0x0(%r13),%rax
>> 15: 48 63 c9 movslq %ecx,%rcx
>> 18: e9 64 ff ff ff jmpq 0xffffff81
>> 1d: 0f 1f 00 nopl (%rax)
>> 20: 65 8b 05 39 e6 8b 7e mov %gs:0x7e8be639(%rip),%eax # 0x7e8be660
>> * 27: 89 c1 mov %eax,%ecx <-- trapping instruction
>> 29: 48 8b 34 24 mov (%rsp),%rsi
>> 2d: 81 e1 00 01 00 00 and $0x100,%ecx
>> 33: 65 48 8b 14 25 40 f0 mov %gs:0x1f040,%rdx
>> 3a: 01 00
>> 3c: a9 .byte 0xa9
>>
>>
^ permalink raw reply [relevance 10%]
* Re: [PATCH v6 1/6] Bluetooth: schedule SCO timeouts with delayed_work
2021-09-02 19:17 9% ` Eric Dumazet
@ 2021-09-02 19:32 10% ` Desmond Cheong Zhi Xi
2021-09-02 21:41 8% ` Eric Dumazet
0 siblings, 1 reply; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-09-02 19:32 UTC (permalink / raw)
To: Eric Dumazet, marcel, johan.hedberg, luiz.dentz, davem, kuba,
sudipm.mukherjee
Cc: linux-bluetooth, netdev, linux-kernel, skhan, gregkh,
linux-kernel-mentees, syzbot+2f6d7c28bb4bf7e82060
On 2/9/21 3:17 pm, Eric Dumazet wrote:
>
>
> On 8/9/21 9:14 PM, Desmond Cheong Zhi Xi wrote:
>> struct sock.sk_timer should be used as a sock cleanup timer. However,
>> SCO uses it to implement sock timeouts.
>>
>> This causes issues because struct sock.sk_timer's callback is run in
>> an IRQ context, and the timer callback function sco_sock_timeout takes
>> a spin lock on the socket. However, other functions such as
>> sco_conn_del and sco_conn_ready take the spin lock with interrupts
>> enabled.
>>
>> This inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} lock usage could
>> lead to deadlocks as reported by Syzbot [1]:
>> CPU0
>> ----
>> lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
>> <Interrupt>
>> lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
>>
>> To fix this, we use delayed work to implement SCO sock timouts
>> instead. This allows us to avoid taking the spin lock on the socket in
>> an IRQ context, and corrects the misuse of struct sock.sk_timer.
>>
>> As a note, cancel_delayed_work is used instead of
>> cancel_delayed_work_sync in sco_sock_set_timer and
>> sco_sock_clear_timer to avoid a deadlock. In the future, the call to
>> bh_lock_sock inside sco_sock_timeout should be changed to lock_sock to
>> synchronize with other functions using lock_sock. However, since
>> sco_sock_set_timer and sco_sock_clear_timer are sometimes called under
>> the locked socket (in sco_connect and __sco_sock_close),
>> cancel_delayed_work_sync might cause them to sleep until an
>> sco_sock_timeout that has started finishes running. But
>> sco_sock_timeout would also sleep until it can grab the lock_sock.
>>
>> Using cancel_delayed_work is fine because sco_sock_timeout does not
>> change from run to run, hence there is no functional difference
>> between:
>> 1. waiting for a timeout to finish running before scheduling another
>> timeout
>> 2. scheduling another timeout while a timeout is running.
>>
>> Link: https://syzkaller.appspot.com/bug?id=9089d89de0502e120f234ca0fc8a703f7368b31e [1]
>> Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
>> Tested-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
>> Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
>> ---
>> net/bluetooth/sco.c | 35 +++++++++++++++++++++++++++++------
>> 1 file changed, 29 insertions(+), 6 deletions(-)
>>
>> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
>> index ffa2a77a3e4c..62e638f971a9 100644
>> --- a/net/bluetooth/sco.c
>> +++ b/net/bluetooth/sco.c
>> @@ -48,6 +48,8 @@ struct sco_conn {
>> spinlock_t lock;
>> struct sock *sk;
>>
>> + struct delayed_work timeout_work;
>> +
>> unsigned int mtu;
>> };
>>
>> @@ -74,9 +76,20 @@ struct sco_pinfo {
>> #define SCO_CONN_TIMEOUT (HZ * 40)
>> #define SCO_DISCONN_TIMEOUT (HZ * 2)
>>
>> -static void sco_sock_timeout(struct timer_list *t)
>> +static void sco_sock_timeout(struct work_struct *work)
>> {
>> - struct sock *sk = from_timer(sk, t, sk_timer);
>> + struct sco_conn *conn = container_of(work, struct sco_conn,
>> + timeout_work.work);
>> + struct sock *sk;
>> +
>> + sco_conn_lock(conn);
>> + sk = conn->sk;
>> + if (sk)
>> + sock_hold(sk);
>
> syzbot complains here that sk refcount can be zero at this time.
>
> refcount_t: addition on 0; use-after-free.
> WARNING: CPU: 0 PID: 10451 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0 lib/refcount.c:25
> Modules linked in:
> CPU: 0 PID: 10451 Comm: kworker/0:8 Not tainted 5.14.0-rc7-syzkaller #0
> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
> Workqueue: events sco_sock_timeout
> RIP: 0010:refcount_warn_saturate+0x169/0x1e0 lib/refcount.c:25
> Code: 09 31 ff 89 de e8 d7 c9 9e fd 84 db 0f 85 36 ff ff ff e8 8a c3 9e fd 48 c7 c7 20 8f e3 89 c6 05 e8 7f 81 09 01 e8 f0 98 16 05 <0f> 0b e9 17 ff ff ff e8 6b c3 9e fd 0f b6 1d cd 7f 81 09 31 ff 89
> RSP: 0018:ffffc9001766fce8 EFLAGS: 00010282
> RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
> RDX: ffff88802cea3880 RSI: ffffffff815d87a5 RDI: fffff52002ecdf8f
> RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
> R10: ffffffff815d25de R11: 0000000000000000 R12: ffff88806d23ce08
> R13: ffff8880712c8080 R14: ffff88802edf4500 R15: ffff8880b9c51240
> FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
> CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> CR2: 00007f3748c20000 CR3: 0000000017644000 CR4: 00000000001506f0
> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> Call Trace:
> __refcount_add include/linux/refcount.h:199 [inline]
> __refcount_inc include/linux/refcount.h:250 [inline]
> refcount_inc include/linux/refcount.h:267 [inline]
> sock_hold include/net/sock.h:702 [inline]
> sco_sock_timeout+0x216/0x290 net/bluetooth/sco.c:88
> process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
> worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
> kthread+0x3e5/0x4d0 kernel/kthread.c:319
>
>
>> + sco_conn_unlock(conn);
>> +
>> + if (!sk)
>> + return;
>>
>> BT_DBG("sock %p state %d", sk, sk->sk_state);
>>
>> @@ -91,14 +104,21 @@ static void sco_sock_timeout(struct timer_list *t)
>>
>> static void sco_sock_set_timer(struct sock *sk, long timeout)
>> {
>> + if (!sco_pi(sk)->conn)
>> + return;
>> +
>> BT_DBG("sock %p state %d timeout %ld", sk, sk->sk_state, timeout);
>> - sk_reset_timer(sk, &sk->sk_timer, jiffies + timeout);
>> + cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
>> + schedule_delayed_work(&sco_pi(sk)->conn->timeout_work, timeout);
>
>> }
>>
>> static void sco_sock_clear_timer(struct sock *sk)
>> {
>> + if (!sco_pi(sk)->conn)
>> + return;
>> +
>> BT_DBG("sock %p state %d", sk, sk->sk_state);
>> - sk_stop_timer(sk, &sk->sk_timer);
>> + cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
>
>
>> }
>>
>> /* ---- SCO connections ---- */
>> @@ -179,6 +199,9 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
>> bh_unlock_sock(sk);
>> sco_sock_kill(sk);
>> sock_put(sk);
>> +
>> + /* Ensure no more work items will run before freeing conn. */
>
> Maybe you should have done this cancel_delayed_work_sync() before the prior sock_put(sk) ?
>
>> + cancel_delayed_work_sync(&conn->timeout_work);
>> }
>>
>> hcon->sco_data = NULL;
>> @@ -193,6 +216,8 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
>> sco_pi(sk)->conn = conn;
>> conn->sk = sk;
>>
>> + INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
>> +
>> if (parent)
>> bt_accept_enqueue(parent, sk, true);
>> }
>> @@ -500,8 +525,6 @@ static struct sock *sco_sock_alloc(struct net *net, struct socket *sock,
>>
>> sco_pi(sk)->setting = BT_VOICE_CVSD_16BIT;
>>
>> - timer_setup(&sk->sk_timer, sco_sock_timeout, 0);
>> -
>> bt_sock_link(&sco_sk_list, sk);
>> return sk;
>> }
>>
Hi Eric,
This actually seems to be a pre-existing error in sco_sock_connect that
we now hit in sco_sock_timeout.
Any thoughts on the following patch to address the problem?
Link:
https://lore.kernel.org/lkml/20210831065601.101185-1-desmondcheongzx@gmail.com/
^ permalink raw reply [relevance 10%]
* Re: [PATCH v6 1/6] Bluetooth: schedule SCO timeouts with delayed_work
@ 2021-09-02 19:17 9% ` Eric Dumazet
2021-09-02 19:32 10% ` Desmond Cheong Zhi Xi
0 siblings, 1 reply; 200+ results
From: Eric Dumazet @ 2021-09-02 19:17 UTC (permalink / raw)
To: Desmond Cheong Zhi Xi, marcel, johan.hedberg, luiz.dentz, davem,
kuba, sudipm.mukherjee
Cc: linux-bluetooth, netdev, linux-kernel, skhan, gregkh,
linux-kernel-mentees, syzbot+2f6d7c28bb4bf7e82060
On 8/9/21 9:14 PM, Desmond Cheong Zhi Xi wrote:
> struct sock.sk_timer should be used as a sock cleanup timer. However,
> SCO uses it to implement sock timeouts.
>
> This causes issues because struct sock.sk_timer's callback is run in
> an IRQ context, and the timer callback function sco_sock_timeout takes
> a spin lock on the socket. However, other functions such as
> sco_conn_del and sco_conn_ready take the spin lock with interrupts
> enabled.
>
> This inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} lock usage could
> lead to deadlocks as reported by Syzbot [1]:
> CPU0
> ----
> lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
> <Interrupt>
> lock(slock-AF_BLUETOOTH-BTPROTO_SCO);
>
> To fix this, we use delayed work to implement SCO sock timouts
> instead. This allows us to avoid taking the spin lock on the socket in
> an IRQ context, and corrects the misuse of struct sock.sk_timer.
>
> As a note, cancel_delayed_work is used instead of
> cancel_delayed_work_sync in sco_sock_set_timer and
> sco_sock_clear_timer to avoid a deadlock. In the future, the call to
> bh_lock_sock inside sco_sock_timeout should be changed to lock_sock to
> synchronize with other functions using lock_sock. However, since
> sco_sock_set_timer and sco_sock_clear_timer are sometimes called under
> the locked socket (in sco_connect and __sco_sock_close),
> cancel_delayed_work_sync might cause them to sleep until an
> sco_sock_timeout that has started finishes running. But
> sco_sock_timeout would also sleep until it can grab the lock_sock.
>
> Using cancel_delayed_work is fine because sco_sock_timeout does not
> change from run to run, hence there is no functional difference
> between:
> 1. waiting for a timeout to finish running before scheduling another
> timeout
> 2. scheduling another timeout while a timeout is running.
>
> Link: https://syzkaller.appspot.com/bug?id=9089d89de0502e120f234ca0fc8a703f7368b31e [1]
> Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
> Tested-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
> Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
> ---
> net/bluetooth/sco.c | 35 +++++++++++++++++++++++++++++------
> 1 file changed, 29 insertions(+), 6 deletions(-)
>
> diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
> index ffa2a77a3e4c..62e638f971a9 100644
> --- a/net/bluetooth/sco.c
> +++ b/net/bluetooth/sco.c
> @@ -48,6 +48,8 @@ struct sco_conn {
> spinlock_t lock;
> struct sock *sk;
>
> + struct delayed_work timeout_work;
> +
> unsigned int mtu;
> };
>
> @@ -74,9 +76,20 @@ struct sco_pinfo {
> #define SCO_CONN_TIMEOUT (HZ * 40)
> #define SCO_DISCONN_TIMEOUT (HZ * 2)
>
> -static void sco_sock_timeout(struct timer_list *t)
> +static void sco_sock_timeout(struct work_struct *work)
> {
> - struct sock *sk = from_timer(sk, t, sk_timer);
> + struct sco_conn *conn = container_of(work, struct sco_conn,
> + timeout_work.work);
> + struct sock *sk;
> +
> + sco_conn_lock(conn);
> + sk = conn->sk;
> + if (sk)
> + sock_hold(sk);
syzbot complains here that sk refcount can be zero at this time.
refcount_t: addition on 0; use-after-free.
WARNING: CPU: 0 PID: 10451 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0 lib/refcount.c:25
Modules linked in:
CPU: 0 PID: 10451 Comm: kworker/0:8 Not tainted 5.14.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events sco_sock_timeout
RIP: 0010:refcount_warn_saturate+0x169/0x1e0 lib/refcount.c:25
Code: 09 31 ff 89 de e8 d7 c9 9e fd 84 db 0f 85 36 ff ff ff e8 8a c3 9e fd 48 c7 c7 20 8f e3 89 c6 05 e8 7f 81 09 01 e8 f0 98 16 05 <0f> 0b e9 17 ff ff ff e8 6b c3 9e fd 0f b6 1d cd 7f 81 09 31 ff 89
RSP: 0018:ffffc9001766fce8 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88802cea3880 RSI: ffffffff815d87a5 RDI: fffff52002ecdf8f
RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff815d25de R11: 0000000000000000 R12: ffff88806d23ce08
R13: ffff8880712c8080 R14: ffff88802edf4500 R15: ffff8880b9c51240
FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3748c20000 CR3: 0000000017644000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__refcount_add include/linux/refcount.h:199 [inline]
__refcount_inc include/linux/refcount.h:250 [inline]
refcount_inc include/linux/refcount.h:267 [inline]
sock_hold include/net/sock.h:702 [inline]
sco_sock_timeout+0x216/0x290 net/bluetooth/sco.c:88
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
> + sco_conn_unlock(conn);
> +
> + if (!sk)
> + return;
>
> BT_DBG("sock %p state %d", sk, sk->sk_state);
>
> @@ -91,14 +104,21 @@ static void sco_sock_timeout(struct timer_list *t)
>
> static void sco_sock_set_timer(struct sock *sk, long timeout)
> {
> + if (!sco_pi(sk)->conn)
> + return;
> +
> BT_DBG("sock %p state %d timeout %ld", sk, sk->sk_state, timeout);
> - sk_reset_timer(sk, &sk->sk_timer, jiffies + timeout);
> + cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
> + schedule_delayed_work(&sco_pi(sk)->conn->timeout_work, timeout);
> }
>
> static void sco_sock_clear_timer(struct sock *sk)
> {
> + if (!sco_pi(sk)->conn)
> + return;
> +
> BT_DBG("sock %p state %d", sk, sk->sk_state);
> - sk_stop_timer(sk, &sk->sk_timer);
> + cancel_delayed_work(&sco_pi(sk)->conn->timeout_work);
> }
>
> /* ---- SCO connections ---- */
> @@ -179,6 +199,9 @@ static void sco_conn_del(struct hci_conn *hcon, int err)
> bh_unlock_sock(sk);
> sco_sock_kill(sk);
> sock_put(sk);
> +
> + /* Ensure no more work items will run before freeing conn. */
Maybe you should have done this cancel_delayed_work_sync() before the prior sock_put(sk) ?
> + cancel_delayed_work_sync(&conn->timeout_work);
> }
>
> hcon->sco_data = NULL;
> @@ -193,6 +216,8 @@ static void __sco_chan_add(struct sco_conn *conn, struct sock *sk,
> sco_pi(sk)->conn = conn;
> conn->sk = sk;
>
> + INIT_DELAYED_WORK(&conn->timeout_work, sco_sock_timeout);
> +
> if (parent)
> bt_accept_enqueue(parent, sk, true);
> }
> @@ -500,8 +525,6 @@ static struct sock *sco_sock_alloc(struct net *net, struct socket *sock,
>
> sco_pi(sk)->setting = BT_VOICE_CVSD_16BIT;
>
> - timer_setup(&sk->sk_timer, sco_sock_timeout, 0);
> -
> bt_sock_link(&sco_sk_list, sk);
> return sk;
> }
>
^ permalink raw reply [relevance 9%]
* Re: [syzbot] INFO: task can't die in __lock_sock
@ 2021-09-02 1:34 9% ` syzbot
[not found] ` <20210902031752.2502-1-hdanton@sina.com>
1 sibling, 0 replies; 200+ results
From: syzbot @ 2021-09-02 1:34 UTC (permalink / raw)
To: davem, desmondcheongzx, johan.hedberg, kuba, linux-bluetooth,
linux-kernel, luiz.dentz, luiz.von.dentz, marcel, netdev,
syzkaller-bugs
syzbot has bisected this issue to:
commit b7ce436a5d798bc59e71797952566608a4b4626b
Author: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Date: Tue Aug 10 04:14:09 2021 +0000
Bluetooth: switch to lock_sock in RFCOMM
bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=16f90ffe300000
start commit: 29ce8f970107 Merge git://git.kernel.org/pub/scm/linux/kern..
git tree: net-next
final oops: https://syzkaller.appspot.com/x/report.txt?x=15f90ffe300000
console output: https://syzkaller.appspot.com/x/log.txt?x=11f90ffe300000
kernel config: https://syzkaller.appspot.com/x/.config?x=d2f9d4c9ff8c5ae7
dashboard link: https://syzkaller.appspot.com/bug?extid=7d51f807c81b190a127d
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1630a66d300000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=16d07c6d300000
Reported-by: syzbot+7d51f807c81b190a127d@syzkaller.appspotmail.com
Fixes: b7ce436a5d79 ("Bluetooth: switch to lock_sock in RFCOMM")
For information about bisection process see: https://goo.gl/tpsmEJ#bisection
^ permalink raw reply [relevance 9%]
* [GIT PULL] Networking for v5.15
@ 2021-08-31 20:37 1% Jakub Kicinski
0 siblings, 0 replies; 200+ results
From: Jakub Kicinski @ 2021-08-31 20:37 UTC (permalink / raw)
To: torvalds; +Cc: kuba, davem, netdev, linux-kernel, gregkh
Hi Linus!
No conflicts at the time of writing. There were conflicts with
char-misc but I believe Greg dropped the commits in question.
The following changes since commit 73367f05b25dbd064061aee780638564d15b01d1:
Merge tag 'nfsd-5.14-1' of git://linux-nfs.org/~bfields/linux (2021-08-26 13:26:40 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git tags/net-next-5.15
for you to fetch changes up to 29ce8f9701072fc221d9c38ad952de1a9578f95c:
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net (2021-08-31 09:06:04 -0700)
----------------------------------------------------------------
Core:
- Enable memcg accounting for various networking objects.
BPF:
- Introduce bpf timers.
- Add perf link and opaque bpf_cookie which the program can read
out again, to be used in libbpf-based USDT library.
- Add bpf_task_pt_regs() helper to access user space pt_regs
in kprobes, to help user space stack unwinding.
- Add support for UNIX sockets for BPF sockmap.
- Extend BPF iterator support for UNIX domain sockets.
- Allow BPF TCP congestion control progs and bpf iterators to call
bpf_setsockopt(), e.g. to switch to another congestion control
algorithm.
Protocols:
- Support IOAM Pre-allocated Trace with IPv6.
- Support Management Component Transport Protocol.
- bridge: multicast: add vlan support.
- netfilter: add hooks for the SRv6 lightweight tunnel driver.
- tcp:
- enable mid-stream window clamping (by user space or BPF)
- allow data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
- more accurate DSACK processing for RACK-TLP
- mptcp:
- add full mesh path manager option
- add partial support for MP_FAIL
- improve use of backup subflows
- optimize option processing
- af_unix: add OOB notification support.
- ipv6: add IFLA_INET6_RA_MTU to expose MTU value advertised by
the router.
- mac80211: Target Wake Time support in AP mode.
- can: j1939: extend UAPI to notify about RX status.
Driver APIs:
- Add page frag support in page pool API.
- Many improvements to the DSA (distributed switch) APIs.
- ethtool: extend IRQ coalesce uAPI with timer reset modes.
- devlink: control which auxiliary devices are created.
- Support CAN PHYs via the generic PHY subsystem.
- Proper cross-chip support for tag_8021q.
- Allow TX forwarding for the software bridge data path to be
offloaded to capable devices.
Drivers:
- veth: more flexible channels number configuration.
- openvswitch: introduce per-cpu upcall dispatch.
- Add internet mix (IMIX) mode to pktgen.
- Transparently handle XDP operations in the bonding driver.
- Add LiteETH network driver.
- Renesas (ravb):
- support Gigabit Ethernet IP
- NXP Ethernet switch (sja1105)
- fast aging support
- support for "H" switch topologies
- traffic termination for ports under VLAN-aware bridge
- Intel 1G Ethernet
- support getcrosststamp() with PCIe PTM (Precision Time
Measurement) for better time sync
- support Credit-Based Shaper (CBS) offload, enabling HW traffic
prioritization and bandwidth reservation
- Broadcom Ethernet (bnxt)
- support pulse-per-second output
- support larger Rx rings
- Mellanox Ethernet (mlx5)
- support ethtool RSS contexts and MQPRIO channel mode
- support LAG offload with bridging
- support devlink rate limit API
- support packet sampling on tunnels
- Huawei Ethernet (hns3):
- basic devlink support
- add extended IRQ coalescing support
- report extended link state
- Netronome Ethernet (nfp):
- add conntrack offload support
- Broadcom WiFi (brcmfmac):
- add WPA3 Personal with FT to supported cipher suites
- support 43752 SDIO device
- Intel WiFi (iwlwifi):
- support scanning hidden 6GHz networks
- support for a new hardware family (Bz)
- Xen pv driver:
- harden netfront against malicious backends
- Qualcomm mobile
- ipa: refactor power management and enable automatic suspend
- mhi: move MBIM to WWAN subsystem interfaces
Refactor:
- Ambient BPF run context and cgroup storage cleanup.
- Compat rework for ndo_ioctl.
Old code removal:
- prism54 remove the obsoleted driver, deprecated by the p54 driver.
- wan: remove sbni/granch driver.
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
----------------------------------------------------------------
Aaron Ma (1):
Bluetooth: btusb: Add support for Foxconn Mediatek Chip
Abhishek Naik (1):
iwlwifi: skip first element in the WTAS ACPI table
Ahmad Fatoum (1):
brcmfmac: pcie: fix oops on failure to resume and reprobe
Alan Maguire (10):
libbpf: Allow specification of "kprobe/function+offset"
libbpf: BTF dumper support for typed data
selftests/bpf: Add ASSERT_STRNEQ() variant for test_progs
selftests/bpf: Add dump type data tests to btf dump tests
libbpf: Clarify/fix unaligned data issues for btf typed dump
libbpf: Fix compilation errors on ppc64le for btf dump typed data
libbpf: Btf typed dump does not need to allocate dump data
libbpf: Avoid use of __int128 in typed dump display
selftests/bpf: Add __int128-specific tests for typed data dump
libbpf: Propagate errors when retrieving enum value for typed data display
Alex Elder (61):
net: ipa: fix IPA v4.11 interconnect data
dt-bindings: net: qcom,ipa: make imem interconnect optional
arm64: dts: qcom: sc7280: add IPA information
arm64: dts: qcom: sc7180: define ipa_fw_mem node
net: ipa: fix ipa_cmd_table_valid()
net: ipa: always validate filter and route tables
net: ipa: kill the remaining conditional validation code
net: ipa: use WARN_ON() rather than assertions
net: ipa: enable inline checksum offload for IPA v4.5+
net: ipa: kill ipa_modem_setup()
net: ipa: configure memory regions early
net: ipa: set up IPA interrupts earlier
net: ipa: set up the microcontroller earlier
net: ipa: introduce ipa_uc_clock()
net: ipa: make IPA interrupt handler threaded only
net: ipa: clear disabled IPA interrupt conditions
net: ipa: get rid of some unneeded IPA interrupt code
net: ipa: kill ipa_interrupt_process_all()
net: ipa: get clock in ipa_probe()
net: ipa: get another clock for ipa_setup()
net: ipa: add clock reference for remoteproc SSR
net: ipa: add a clock reference for netdev operations
net: ipa: don't suspend endpoints if setup not complete
Revert "Merge branch 'qcom-dts-updates'"
net: ipa: use gsi->version for channel suspend/resume
net: ipa: move version check for channel suspend/resume
net: ipa: move some GSI setup functions
net: ipa: have gsi_irq_setup() return an error code
net: ipa: move gsi_irq_init() code into setup
net: ipa: disable GSI interrupts while suspended
net: ipa: fix IPA v4.9 interconnects
net: ipa: don't suspend/resume modem if not up
net: ipa: reorder netdev pointer assignments
net: ipa: improve IPA clock error messages
net: ipa: move IPA power operations to ipa_clock.c
net: ipa: move ipa_suspend_handler()
net: ipa: move IPA flags field
net: ipa: have ipa_clock_get() return a value
net: ipa: disable clock in suspend
net: ipa: resume in ipa_clock_get()
net: ipa: use runtime PM core
net: ipa: get rid of extra clock reference
net: ipa: kill IPA clock reference count
net: ipa: kill ipa_clock_get_additional()
net: ipa: always inline ipa_aggr_granularity_val()
dt-bindings: net: qcom,ipa: make imem interconnect optional
net: ipa: enable wakeup in ipa_power_setup()
net: ipa: distinguish system from runtime suspend
net: ipa: re-enable transmit in PM WQ context
net: ipa: ensure hardware has power in ipa_start_xmit()
net: ipa: don't stop TX on suspend
net: ipa: don't hold clock reference while netdev open
net: ipa: fix TX queue race
net: ipa: don't use ipa_clock_get() in "ipa_main.c"
net: ipa: don't use ipa_clock_get() in "ipa_smp2p.c"
net: ipa: don't use ipa_clock_get() in "ipa_uc.c"
net: ipa: don't use ipa_clock_get() in "ipa_modem.c"
net: ipa: kill ipa_clock_get()
net: ipa: use autosuspend
net: ipa: rename ipa_clock_* symbols
net: ipa: rename "ipa_clock.c"
Alexandra Winter (3):
s390/qeth: Register switchdev event handler
s390/qeth: Switchdev event handler
s390/qeth: Update MACs of LEARNING_SYNC device
Alexei Starovoitov (27):
Merge branch 'bpf: support input xdp_md context in BPF_PROG_TEST_RUN'
Merge branch 'Generic XDP improvements'
bpf: Sync tools/include/uapi/linux/bpf.h
bpf: Prepare bpf_prog_put() to be called from irq context.
bpf: Factor out bpf_spin_lock into helpers.
bpf: Introduce bpf timers.
bpf: Add map side support for bpf timers.
bpf: Prevent pointer mismatch in bpf_timer_init.
bpf: Remember BTF of inner maps.
bpf: Relax verifier recursion check.
bpf: Implement verifier support for validation of async callbacks.
bpf: Teach stack depth check about async callbacks.
selftests/bpf: Add bpf_timer test.
selftests/bpf: Add a test with bpf_timer in inner map.
Merge branch 'Add bpf_get_func_ip helper'
Merge branch 'sockmap: add sockmap support for unix datagram socket'
libbpf: Cleanup the layering between CORE and bpf_program.
libbpf: Split bpf_core_apply_relo() into bpf_program independent helper.
libbpf: Move CO-RE types into relo_core.h.
libbpf: Split CO-RE logic into relo_core.c.
Merge branch 'Refactor cgroup_bpf internals to use more specific attach_type'
Merge branch 'selftests/bpf: minor fixups'
Merge branch 'bpf: Allow bpf_get_netns_cookie in BPF_PROG_TYPE_SK_MSG'
Merge branch 'Improve XDP samples usability and output'
Merge branch 'bpf: Add bpf_task_pt_regs() helper'
Merge branch 'selftests: xsk: various simplifications'
Merge branch 'bpf: tcp: Allow bpf-tcp-cc to call bpf_(get|set)sockopt'
Alok Prasad (1):
qed: Enable automatic recovery on error condition.
Amit Cohen (4):
mlxsw: spectrum: Add infrastructure for parsing configuration
mlxsw: Convert existing consumers to use new API for parsing configuration
mlxsw: Remove old parsing depth infrastructure
mlxsw: spectrum_router: Increase parsing depth for multipath hash
Andrey Ignatov (1):
bpf: Fix possible out of bound write in narrow load handling
Andrii Nakryiko (33):
bpf: Add ambient BPF runtime context stored in current
Merge branch 'Add btf_custom_path in bpf_obj_open_opts'
Merge branch 'libbpf: BTF dumper support for typed data'
Merge branch 'libbpf: BTF typed dump cleanups'
Merge branch 'libbpf: btf typed data dumping fixes (__int128 usage, error propagation)'
Merge branch 'bpf: Allow bpf tcp iter to do bpf_(get|set)sockopt'
Merge branch 'libbpf: Move CO-RE logic into separate file.'
Merge branch 'libbpf: rename btf__get_from_id() and btf__load() APIs, support split BTF'
Merge branch 'tools: bpftool: update, synchronise and validate types and options'
bpf: Fix bpf_prog_test_run_xdp logic after incorrect merge resolution
selftests/bpf: Rename reference_tracking BPF programs
Merge branch 'samples/bpf: xdpsock: Minor enhancements'
Merge branch 'bpf: Allow bpf_get_netns_cookie in BPF_PROG_TYPE_CGROUP_SOCKOPT'
Merge branch 'BPF iterator for UNIX domain socket.'
bpf: Refactor BPF_PROG_RUN into a function
bpf: Refactor BPF_PROG_RUN_ARRAY family of macros into functions
bpf: Refactor perf_event_set_bpf_prog() to use struct bpf_prog input
bpf: Implement minimal BPF perf link
bpf: Allow to specify user-provided bpf_cookie for BPF perf links
bpf: Add bpf_get_attach_cookie() BPF helper to access bpf_cookie value
libbpf: Re-build libbpf.so when libbpf.map changes
libbpf: Remove unused bpf_link's destroy operation, but add dealloc
libbpf: Use BPF perf link when supported by kernel
libbpf: Add bpf_cookie support to bpf_link_create() API
libbpf: Add bpf_cookie to perf_event, kprobe, uprobe, and tp attach APIs
selftests/bpf: Test low-level perf BPF link API
selftests/bpf: Extract uprobe-related helpers into trace_helpers.{c,h}
selftests/bpf: Add bpf_cookie selftests for high-level APIs
libbpf: Add uprobe ref counter offset support for USDT semaphores
selftests/bpf: Add ref_ctr_offset selftests
Merge branch 'sockmap: add sockmap support for unix stream socket'
Merge branch 'selftests/bpf: Improve the usability of test_progs'
Merge branch 'selftests/bpf: fix flaky send_signal test'
Andy Shevchenko (6):
net: wwan: iosm: Switch to use module_pci_driver() macro
can: mcp251xfd: mcp251xfd_probe(): try to get crystal clock rate from property
can: mcp251xfd: Fix header block to clarify independence from OF
Bluetooth: hci_bcm: Fix kernel doc comments
wwan: core: Unshadow error code returned by ida_alloc_range()
ray_cs: use %*ph to print small buffer
Angelo Dureghello (3):
can: flexcan: add platform data header
can: flexcan: add mcf5441x support
can: flexcan: update Kconfig to enable coldfire
Angus Ainslie (2):
Bluetooth: btbcm: add patch ram for bluetooth
brcmfmac: add 43752 SDIO ids and initialization
Antoine Tenart (1):
bonding: improve nl error msg when device can't be enslaved because of IFF_MASTER
Aravindhan Gunasekaran (1):
igc: Add support for CBS offloading
Archie Pusaka (4):
Bluetooth: btrtl: Set MSFT opcode for RTL8852
Bluetooth: hci_h5: add WAKEUP_DISABLE flag
Bluetooth: hci_h5: btrtl: Maintain flow control if wakeup is enabled
Bluetooth: hci_h5: Add runtime suspend
Arend van Spriel (4):
brcmfmac: use different error value for invalid ram base address
brcmfmac: increase core revision column aligning core list
brcmfmac: add xtlv support to firmware interface layer
brcmfmac: support chipsets with different core enumeration space
Ariel Levkovich (1):
net/mlx5: E-Switch, set flow source for send to uplink rule
Arnd Bergmann (53):
bpf: Fix pointer cast warning
compat: make linux/compat.h available everywhere
ethtool: improve compat ioctl handling
net: socket: rework SIOC?IFMAP ioctls
net: socket: remove register_gifconf
net: socket: simplify dev_ifconf handling
net: socket: rework compat_ifreq_ioctl()
net: split out SIOCDEVPRIVATE handling from dev_ioctl
staging: rtlwifi: use siocdevprivate
staging: wlan-ng: use siocdevprivate
hostap: use ndo_siocdevprivate
bridge: use ndo_siocdevprivate
phonet: use siocdevprivate
tulip: use ndo_siocdevprivate
bonding: use siocdevprivate
appletalk: use ndo_siocdevprivate
hamachi: use ndo_siocdevprivate
tehuti: use ndo_siocdevprivate
eql: use ndo_siocdevprivate
fddi: use ndo_siocdevprivate
net: usb: use ndo_siocdevprivate
slip/plip: use ndo_siocdevprivate
qeth: use ndo_siocdevprivate
cxgb3: use ndo_siocdevprivate
hamradio: use ndo_siocdevprivate
airo: use ndo_siocdevprivate
ip_tunnel: use ndo_siocdevprivate
hippi: use ndo_siocdevprivate
sb1000: use ndo_siocdevprivate
ppp: use ndo_siocdevprivate
wan: use ndo_siocdevprivate
wan: cosa: remove dead cosa_net_ioctl() function
dev_ioctl: pass SIOCDEVPRIVATE data separately
dev_ioctl: split out ndo_eth_ioctl
net: split out ndo_siowandev ioctl
net: socket: return changed ifreq from SIOCDEVPRIVATE
net: bridge: move bridge ioctls out of .ndo_do_ioctl
net: bonding: move ioctl handling to private ndo operation
bcmgenet: remove call to netdev_boot_setup_check
natsemi: sonic: stop calling netdev_boot_setup_check
appletalk: ltpc: remove static probing
3c509: stop calling netdev_boot_setup_check
cs89x0: rework driver configuration
m68k: remove legacy probing
move netdev_boot_setup into Space.c
make legacy ISA probe optional
wan: remove stale Kconfig entries
wan: remove sbni/granch driver
wan: hostess_sv11: use module_init/module_exit helpers
ethernet: isa: convert to module_init/module_exit
ethernet: fix PTP_1588_CLOCK dependencies
ixp4xx_eth: make ptp support a platform driver
ixp4xx_eth: fix compile-testing
Aswath Govindraju (1):
dt-bindings: net: can: Document power-domains property
Avraham Stern (4):
iwlwifi: mvm: silently drop encrypted frames for unknown station
iwlwifi: mvm: don't schedule the roc_done_wk if it is already running
iwlwifi: mvm: add support for range request command version 13
iwlwifi: mvm: add support for responder config command version 9
Benjamin Poirier (1):
doc: Document unexpected tcp_l3mdev_accept=1 behavior
Biju Das (22):
ravb: Use unsigned int for num_tx_desc variable in struct ravb_private
ravb: Add struct ravb_hw_info to driver data
ravb: Add aligned_tx to struct ravb_hw_info
ravb: Add max_rx_len to struct ravb_hw_info
ravb: Add stats_len to struct ravb_hw_info
ravb: Add gstrings_stats and gstrings_size to struct ravb_hw_info
ravb: Add net_features and net_hw_features to struct ravb_hw_info
ravb: Add internal delay hw feature to struct ravb_hw_info
ravb: Add tx_counters to struct ravb_hw_info
ravb: Remove the macros NUM_TX_DESC_GEN[23]
ravb: Add multi_irq to struct ravb_hw_info
ravb: Add no_ptp_cfg_active to struct ravb_hw_info
ravb: Add ptp_cfg_active to struct ravb_hw_info
ravb: Factorise ravb_ring_free function
ravb: Factorise ravb_ring_format function
ravb: Factorise ravb_ring_init function
ravb: Factorise ravb_rx function
ravb: Factorise ravb_adjust_link function
ravb: Factorise ravb_set_features
ravb: Factorise ravb_dmac_init function
ravb: Factorise ravb_emac_init function
ravb: Add reset support
Bill Wendling (1):
bnx2x: remove unused variable 'cur_data_offset'
Bjorn Andersson (1):
wcn36xx: Allow firmware name to be overridden by DT
Bodong Wang (1):
net/mlx5: DR, Reduce print level for FT chaining level check
Bongsu Jeon (8):
nfc: virtual_ncidev: Use wait queue instead of polling
selftests: nci: Remove the polling code to read a NCI frame
selftests: nci: Fix the typo
selftests: nci: Fix the code for next nlattr offset
selftests: nci: Fix the wrong condition
selftests: nci: Add the flags parameter for the send_cmd_mt_nla
selftests: nci: Extract the start/stop discovery function
selftests: nci: Add the NCI testcase reading T4T Tag
Brett Creeley (1):
ice: Only lock to update netdev dev_addr
Cai Huoqing (10):
net: bonding: bond_alb: Remove the dependency on ipx network layer
net/mlx5: Fix typo in comments
net/mlx5e: Make use of netdev_warn()
net: Remove net/ipx.h and uapi/linux/ipx.h header files
MAINTAINERS: Remove the ipx network layer info
can: rcar: Kconfig: Add helper dependency on COMPILE_TEST
net: ethernet: actions: Add helper dependency on COMPILE_TEST
net: mdio-ipq4019: Make use of devm_platform_ioremap_resource()
net: mdio: mscc-miim: Make use of the helper function devm_platform_ioremap_resource()
net/mlxbf_gige: Make use of devm_platform_ioremap_resourcexxx()
Changbin Du (2):
net: in_irq() cleanup
s390/net: replace in_irq() with in_hardirq()
Chengfeng Ye (1):
selftests/bpf: Fix potential unreleased lock
Chethan T N (1):
Bluetooth: btusb: Enable MSFT extension for Intel next generation controllers
Chih-Kang Chang (1):
mac80211: Fix insufficient headroom issue for AMSDU
Chin-Yen Lee (6):
rtw88: adjust the log level for failure of tx report
rtw88: 8822ce: set CLKREQ# signal to low during suspend
rtw88: use read_poll_timeout instead of fixed sleep
rtw88: refine the setting of rsvd pages for different firmware
rtw88: wow: report wow reason through mac80211 api
rtw88: wow: fix size access error of probe request
Chris Chiu (2):
rtl8xxxu: disable interrupt_in transfer for 8188cu and 8192cu
rtl8xxxu: Fix the handling of TX A-MPDU aggregation
Chris Mi (8):
net/mlx5e: Move esw/sample to en/tc/sample
net/mlx5e: Move sample attribute to flow attribute
net/mlx5e: CT, Use xarray to manage fte ids
net/mlx5e: Introduce post action infrastructure
net/mlx5e: Refactor ct to use post action infrastructure
net/mlx5e: TC, Remove CONFIG_NET_TC_SKB_EXT dependency when restoring tunnel
net/mlx5e: TC, Restore tunnel info for sample offload
net/mlx5e: TC, Support sample offload action for tunneled traffic
Christophe JAILLET (24):
ath: switch from 'pci_' to 'dma_' API
ath11k: Remove some duplicate code
net: switchdev: Simplify 'mlxsw_sp_mc_write_mdb_entry()'
cavium: switch from 'pci_' to 'dma_' API
net: wwan: iosm: switch from 'pci_' to 'dma_' API
net: atlantic: switch from 'pci_' to 'dma_' API
net: broadcom: switch from 'pci_' to 'dma_' API
net: chelsio: switch from 'pci_' to 'dma_' API
net: ec_bhf: switch from 'pci_' to 'dma_' API
net: jme: switch from 'pci_' to 'dma_' API
forcedeth: switch from 'pci_' to 'dma_' API
qtnfmac: switch from 'pci_' to 'dma_' API
net: sunhme: Remove unused macros
myri10ge: switch from 'pci_' to 'dma_' API
vmxnet3: switch from 'pci_' to 'dma_' API
net: 8139cp: switch from 'pci_' to 'dma_' API
net/mellanox: switch from 'pci_' to 'dma_' API
qlcnic: switch from 'pci_' to 'dma_' API
hinic: switch from 'pci_' to 'dma_' API
net: spider_net: switch from 'pci_' to 'dma_' API
fddi: switch from 'pci_' to 'dma_' API
niu: switch from 'pci_' to 'dma_' API
intel: switch from 'pci_' to 'dma_' API
net: pasemi: Remove usage of the deprecated "pci-dma-compat.h" API
Claudiu Beznea (3):
wilc1000: use goto labels on error path
wilc1000: dispose irq on failure path
wilc1000: use devm_clk_get_optional()
Coco Li (2):
selftests/net: GRO coalesce test
selftests/net: toeplitz test
Colin Ian King (29):
atm: idt77252: clean up trigraph warning on ??) string
net: marvell: clean up trigraph warning on ??! string
6lowpan: iphc: Fix an off-by-one check of array index
bpf: Remove redundant intiialization of variable stype
net: dsa: sja1105: remove redundant re-assignment of pointer table
netdevsim: make array res_ids static const, makes object smaller
net: phy: mscc: make some arrays static const, makes object smaller
cxgb4: make the array match_all_mac static, makes object smaller
net: marvell: make the array name static, makes object smaller
qlcnic: make the array random_data static const, makes object smaller
dpaa2-eth: make the array faf_bits static const, makes object smaller
net: 3c509: make the array if_names static const, makes object smaller
net/mlx4: make the array states static const, makes object smaller
octeontx2-af: Fix spelling mistake "Makesure" -> "Make sure"
mctp: remove duplicated assignment of pointer hdr
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
tulip: Remove deadcode on startup true condition
bpf, tests: Fix spelling mistake "shoft" -> "shift"
i40e: Fix spelling mistake "dissable" -> "disable"
bpf: Remove redundant initialization of variable allow
hinic: make array speeds static const, makes object smaller
net: hns3: make array spec_opcode static const, makes object smaller
net: ethernet: ti: cpsw: make array stpa static const, makes object smaller
octeontx2-af: remove redudant second error check on variable err
rtlwifi: rtl8192de: Remove redundant variable initializations
rtlwifi: rtl8192de: make arrays static const, makes object smaller
mwifiex: make arrays static const, makes object smaller
brcmsmac: make array addr static const, makes object smaller
rsi: make array fsm_state static const, makes object smaller
Cong Wang (14):
sock_map: Relax config dependency to CONFIG_NET
sock_map: Lift socket state restriction for datagram sockets
af_unix: Implement ->read_sock() for sockmap
af_unix: Set TCP_ESTABLISHED for datagram sockets too
af_unix: Add a dummy ->close() for sockmap
af_unix: Implement ->psock_update_sk_prot()
af_unix: Implement unix_dgram_bpf_recvmsg()
selftests/bpf: Factor out udp_socketpair()
selftests/bpf: Factor out add_to_sockmap()
selftests/bpf: Add a test case for unix sockmap
selftests/bpf: Add test cases for redirection between udp and unix
unix_bpf: Fix a potential deadlock in unix_dgram_bpf_recvmsg()
net_sched: refactor TC action init API
bpf, unix: Check socket type in unix_bpf_update_proto()
Corey Minyard (1):
ipsec: Remove unneeded extra variable in esp4 esp_ssg_unref()
DENG Qingfang (7):
net: dsa: mt7530: enable assisted learning on CPU port
net: dsa: mt7530: use independent VLAN learning on VLAN-unaware bridges
net: dsa: mt7530: set STP state on filter ID 1
net: dsa: mt7530: always install FDB entries with IVL and FID 1
net: dsa: mt7530: drop untagged frames on VLAN-aware ports without PVID
net: dsa: mt7530: fix VLAN traffic leaks again
net: dsa: mt7530: manually set up VLAN ID 0
Dan Carpenter (7):
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
vrf: fix NULL dereference in vrf_finish_output()
mac80211: remove unnecessary NULL check in ieee80211_register_hw()
rsi: fix error code in rsi_load_9116_firmware()
rsi: fix an error code in rsi_probe()
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
net: qrtr: make checks in qrtr_endpoint_post() stricter
Daniel Borkmann (3):
Merge branch 'bpf-timers'
Merge branch 'bpf-perf-link'
bpf: Undo off-by-one in interpreter tail call count limit
Daniel Xu (6):
bpf: Add BTF_ID_LIST_GLOBAL_SINGLE macro
bpf: Consolidate task_struct BTF_ID declarations
bpf: Extend bpf_base_func_proto helpers with bpf_get_current_task_btf()
bpf: Add bpf_task_pt_regs() helper
bpf: selftests: Add bpf_task_pt_regs() selftest
bpf: Fix bpf-next builds without CONFIG_BPF_EVENTS
Dario Binacchi (5):
dt-bindings: net: can: c_can: convert to json-schema
can: c_can: remove struct c_can_priv::priv field
can: c_can: exit c_can_do_tx() early if no frames have been sent
can: c_can: support tx ring algorithm
can: c_can: cache frames to operate as a true FIFO
Dave Marchevsky (1):
bpf: Migrate cgroup_bpf to internal cgroup_bpf_attach_type enum
David Ahern (1):
ipv4: Fix refcount warning for new fib_info
David Mosberger-Tang (1):
wilc1000: Convert module-global "isinit" to device-specific variable
David S. Miller (149):
Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
Merge branch '1GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/t nguy/next-queue
Merge branch 'vmxnet3-version-6'
Merge branch 'bridge-vlan-multicast'
Merge branch 'veth-flexible-channel-numbers'
Merge branch '40GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
Merge branch 'bridge-vlan-multicast'
Merge branch 'veth-flexible-channel-numbers'
Merge branch 's390-next'
Merge branch 'tag_8021q-cross-chip'
Merge branch 'fdb-fanout'
Merge branch 'qcom-dts-updates'
Merge branch '1GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
Merge branch 'ipv6-ioam'
Merge branch 'bridge-port-offload'
Merge branch 'nfp-flower-ct-offload'
Merge branch 'net-remove-compat-alloc-user-space'
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
Merge branch 'bridge-tx-fwd'
Merge branch '1GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
Merge branch 'nfc-const'
Merge branch 'hns3-devlink'
Merge tag 'linux-can-next-for-5.15-20210725' of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next
Merge tag 'mlx5-updates-2021-07-24' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'sja1105-bridge-port-traffic-termination'
Merge branch 'ipa-kill-validation'
Merge branch 'ipa-clock'
Merge branch 'ovs-upcall-issues'
Merge branch 'tcp-rack'
Merge branch 'ndo_ioctl-rework'
Merge branch 'ionic-next'
Merge branch 'ipa-interrupts'
Merge branch 'ipa-clock-refs'
Merge branch 'devlink-register'
Merge branch 'fec-next'
Merge branch 'bnxt_en-ptp'
Merge branch 'switchdev-notifiers'
Merge branch 'skb-gro-optimize'
Merge branch 'nfc-const'
Merge branch 'mctp'
Merge branch 'sja110-vlan-fixes'
Merge branch 'dpaa2-switch-add-mirroring-support'
Merge branch 'octeon-drr-config'
Merge tag 'mlx5-updates-2021-08-02' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'skb_expand_head'
Merge branch 'bnxt_en-rx-ring'
Merge branch 'ethtool-runtime-pm'
Merge branch 'Space-cleanup'
Merge branch 'dpaa2-switch-next'
Merge branch 'queues'
Merge branch 'mhi-mbim'
Merge branch 'ipa-pm-irqs'
Merge branch 'm7530-sw-fallback'
Merge tag 'linux-can-next-for-5.15-20210804' of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next
Merge branch 'sja1105-H'
Merge branch 'ipa-runtime-pm'
Merge branch 'bridge-ioctl-fixes'
wwan: mhi: Fix build.
Merge branch 'GRO-Toeplitz-selftests'
Revert "wwan: mhi: Fix build."
Merge branch 'cpsw-emac-skb_put_padto'
Merge branch 'ptp-ocp-fixes'
Merge branch 'dsa-cpu-flood'
Merge branch 's390-qeth'
Merge branch 'sja1105-fast-ageing'
Merge branch 'dsa-fast-ageing'
Merge branch 'iucv-next'
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next
Merge branch 'ipa-runtime-pm'
Merge branch 'bridge-global-mcast'
Merge branch 'devlink-aux-devices'
Merge branch 'dsa-tagger-helpers'
Merge branch 'pktgen-imix'
Merge branch 'dsa-cross-chip-notifiers'
Merge tag 'mlx5-updates-2021-08-11' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'mptcp-improve-backup-subflows'
Merge branch 'devlink-cleanup-for-delay-event'
Merge branch 'bridgge-mcast'
Merge branch 'iupa-last-things-before-pm-conversion'
Merge branch 'ipq-mdio'
Merge branch 'pktgen-samples'
Merge branch 'ocelot-phylink'
Merge branch 'stmmac-per-queue-stats'
Merge branch 'bridge-mcast-fixes'
Merge tag 'mlx5-updates-2021-08-16' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'octeonx2-mcam-management-rework'
Merge branch 'bridge-vlan-fixes'
Merge branch 'mptcp-mesh-path-manager'
Merge branch 'nci-ext'
Merge branch 'ravb-gbit'
Merge branch 'indirect-qdisc-order'
Merge tag 'batadv-next-pullrequest-20210819' of git://git.open-mesh.org/linux-merge
Merge tag 'for-net-next-2021-08-19' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next
Merge tag 'mlx5-updates-2021-08-19' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge tag 'batadv-next-pullrequest-20210820' of git://git.open-mesh.org/linux-merge
Merge branch 'sparx5-dma'
Merge branch 'gmii2rgmii-loopback'
Merge branch 'dpaa2-switch-phylikn-fixes'
Merge branch 'ocelot-phylink-fixes'
Merge branch 'ocelot-vlan'
Merge branch 'ipa-kill-off-ipa_clock_get'
Merge branch 'bridge-vlan'
Merge branch 'ipa-autosuspend'
Merge branch 'dsa-docs'
Merge branch 'octeontx2-misc-fixes'
Merge branch 'mlxsw-refactor-parser'
Revert "cxgb4: Search VPD with pci_vpd_find_ro_info_keyword()"
Revert "bnxt: Search VPD with pci_vpd_find_ro_info_keyword()"
Revert "bnxt: Read VPD with pci_vpd_alloc()"
Revert "bnx2x: Search VPD with pci_vpd_find_ro_info_keyword()"
Revert "bnxt: Search VPD with pci_vpd_find_ro_info_keyword()"
Revert "bnx2: Search VPD with pci_vpd_find_ro_info_keyword()"
Revert "Revert "cxgb4: Search VPD with pci_vpd_find_ro_info_keyword()""
Revert "bnx2x: Read VPD with pci_vpd_alloc()"
Revert "cxgb4: Validate VPD checksum with pci_vpd_check_csum()"
Revert "sfc: falcon: Search VPD with pci_vpd_find_ro_info_keyword()"
Revert "sfc: falcon: Read VPD with pci_vpd_alloc()"
Merge tag 'wireless-drivers-next-2021-08-22' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next
Merge branch 'mptcp-refactor'
Merge branch 'dsa-sw-bridging'
Merge branch 'xen-harden-netfront'
Merge branch 'lan7800-improvements'
Merge branch '1GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
Merge branch 'mptcp-next'
Merge branch 'mana-EQ-sharing'
Merge branch 'dsa-sja1105-vlan-tags'
Merge branch 'ravb-gbit-refactor'
Merge tag 'linux-can-next-for-5.15-20210825' of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next
Merge branch 'octeontx2-traffic-shaping'
Merge branch 'pktgen-samples-next'
Merge branch 'ionic-next'
Merge tag 'mac80211-next-for-net-next-2021-08-26' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next
Merge branch 'LiteETH-driver'
Merge tag 'mlx5-fixes-2021-08-26' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'mptcp-Optimize-received-options-handling'
Merge tag 'mlx5-updates-2021-08-26' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ ipsec-next
Merge branch 'hns3-cleanups'
Merge branch 'hns3-next'
Merge branch 'ionic-queue-mgmt'
Merge branch '100GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/net-queue
Merge branch '1GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next- queue
Merge tag 'wireless-drivers-next-2021-08-29' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next
Merge branch 'bnxt_en-fw-messages'
Merge branch 'hns3-cleanups'
Merge branch 'IXP46x-PTP-Timer'
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next
Merge branch 'inet-exceptions-less-predictable'
Merge branch 'octeon-npc-fixes'
Davide Caratti (1):
net/sched: store the last executed chain also for clsact egress
Desmond Cheong Zhi Xi (7):
Bluetooth: skip invalid hci_sync_conn_complete_evt
Bluetooth: schedule SCO timeouts with delayed_work
Bluetooth: avoid circular locks in sco_sock_connect
Bluetooth: switch to lock_sock in SCO
Bluetooth: serialize calls to sco_sock_{set,clear}_timer
Bluetooth: switch to lock_sock in RFCOMM
Bluetooth: fix repeated calls to sco_sock_kill
Di Zhu (1):
ipvlan: Add handling of NETDEV_UP events
Dima Chumak (1):
net/mlx5: Lag, fix multipath lag activation
Dmytro Linkin (7):
net/mlx5: E-switch, Move QoS related code to dedicated file
net/mlx5: E-switch, Enable devlink port tx_{share|max} rate control
net/mlx5: E-switch, Introduce rate limiting groups API
net/mlx5: E-switch, Allow setting share/max tx rate limits of rate groups
net/mlx5: E-switch, Allow to add vports to rate groups
net/mlx5: E-switch, Add QoS tracepoints
net/mlx5e: Use correct eswitch for stack devices with lag
Dongliang Mu (2):
usb: hso: fix error handling code of hso_create_net_device
usb: hso: remove the bailout parameter
Dror Moshe (1):
iwlwifi: move get pnvm file name to a separate function
Dust Li (1):
selftests/net: remove min gso test in packet_snd
Edwin Peer (11):
bnxt_en: remove DMA mapping for KONG response
bnxt_en: Refactor the HWRM_VER_GET firmware calls
bnxt_en: move HWRM API implementation into separate file
bnxt_en: introduce new firmware message API based on DMA pools
bnxt_en: discard out of sequence HWRM responses
bnxt_en: add HWRM request assignment API
bnxt_en: add support for HWRM request slices
bnxt_en: use link_lock instead of hwrm_cmd_lock to protect link_info
bnxt_en: update all firmware calls to use the new APIs
bnxt_en: remove legacy HWRM interface
bnxt_en: support multiple HWRM commands in flight
Eli Cohen (2):
net/core: Remove unused field from struct flow_indr_dev
net: Fix offloading indirect devices dependency on qdisc order creation
Emmanuel Grumbach (1):
nl80211: vendor-cmd: add Intel vendor commands for iwlmei usage
Eran Ben Elisha (1):
net/mlx5: Fix variable type to match 64bit
Eric Dumazet (9):
net/tcp_fastopen: remove tcp_fastopen_ctx_lock
tcp: avoid indirect call in tcp_new_space()
tcp: tweak len/truesize ratio for coalesce candidates
ipv6: exthdrs: get rid of indirect calls in ip6_parse_tlv()
ipv6: make exception cache less predictible
ipv4: make exception cache less predictible
af_unix: fix potential NULL deref in unix_dgram_connect()
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
fou: remove sparse errors
Evgeniy Litvinenko (2):
libbpf: Add bpf_map__pin_path function
selftests/bpf: Document vmtest.sh dependencies
Fabio Estevam (1):
dt-bindings: net: fec: Fix indentation
Faiz Abbas (2):
dt-bindings: net: can: Document transceiver implementation as phy
can: m_can: Add support for transceiver as phy
Florian Westphal (13):
netfilter: ipt_CLUSTERIP: only add arp mangle hook when required
netfilter: ipt_CLUSTERIP: use clusterip_net to store pernet warning
netfilter: remove xt pernet data
netfilter: ebtables: do not hook tables by default
netfilter: ctnetlink: add and use a helper for mark parsing
netfilter: ctnetlink: allow to filter dump by status bits
netfilter: x_tables: never register tables by default
netfilter: nf_queue: move hookfn registration out of struct net
netfilter: ecache: remove one indent level
netfilter: ecache: remove another indent level
netfilter: ecache: add common helper for nf_conntrack_eventmask_report
netfilter: ecache: prepare for event notifier merge
netfilter: ecache: remove nf_exp_event_notifier structure
Forest Crossman (1):
Bluetooth: btusb: Add support for LG LGSBWAC92/TWCM-K505D
Fugang Duan (3):
net: fec: add imx8mq and imx8qm new versions support
net: fec: add eee mode tx lpi support
net: fec: add MAC internal delayed clock feature support
Geert Uytterhoeven (1):
ravb: Remove checks for unsupported internal delay modes
Geetha sowjanya (6):
octeontx2-af: Handle return value in block reset.
octeontx2-af: Use DMA_ATTR_FORCE_CONTIGUOUS attribute in DMA alloc
octeontx2-af: Check capability flag while freeing ipolicer memory
octeontx2-af: cn10k: Use FLIT0 register instead of FLIT1
octeontx2-af: cn10k: Set cache lines for NPA batch alloc
octeontx2-af: Use NDC TX for transmit packet data
Geliang Tang (11):
mptcp: drop flags and ifindex arguments
mptcp: remote addresses fullmesh
mptcp: local addresses fullmesh
selftests: mptcp: set and print the fullmesh flag
selftests: mptcp: add fullmesh testcases
selftests: mptcp: delete uncontinuous removing ids
mptcp: MP_FAIL suboption sending
mptcp: MP_FAIL suboption receiving
mptcp: send out MP_FAIL when data checksum fails
mptcp: add the mibs for MP_FAIL
selftests: mptcp: add MP_FAIL mibs check
George Cherian (1):
octeontx2-af: Add free rsrc count mbox msg
Gerhard Engleder (3):
net: phy: Support set_loopback override
net: phy: Uniform PHY driver access
net: phy: gmii2rgmii: Support PHY loopback
Gilad Naaman (1):
net-next: When a bond have a massive amount of VLANs with IPv6 addresses, performance of changing link state, attaching a VRF, changing an IPv6 address, etc. go down dramtically.
Grant Seltzer (1):
libbpf: Rename libbpf documentation index file
Gregory Greenman (2):
iwlwifi: mvm: support version 11 of wowlan statuses notification
iwlwifi: mvm: introduce iwl_stored_beacon_notif_v3
Grygorii Strashko (5):
net: ethernet: ti: cpsw: switch to use skb_put_padto()
net: ethernet: ti: davinci_emac: switch to use skb_put_padto()
net: ethernet: ti: davinci_cpdma: drop frame padding
net: ethernet: ti: am65-cpsw: use napi_complete_done() in TX completion
net: ethernet: ti: davinci_cpdma: revert "drop frame padding"
Grzegorz Siwik (1):
igb: Add counter to i21x doublecheck
Guangbin Huang (11):
docs: ethtool: Add two link extended substates of bad signal integrity
ethtool: add two link extended substates of bad signal integrity
net: hns3: add header file hns3_ethtoo.h
net: hns3: add support ethtool extended link state
net: hns3: add macros for mac speeds of firmware command
net: hns3: refactor function hclge_parse_capability()
net: hns3: refactor function hclgevf_parse_capability()
net: hns3: add new function hclge_get_speed_bit()
net: hns3: don't config TM DWRR twice when set ETS
net: hns3: reconstruct function hclge_ets_validate()
net: hns3: refine function hclge_dbg_dump_tm_pri()
Guojia Liao (1):
net: hns3: clean up a type mismatch warning
Gustavo A. R. Silva (8):
ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
flow_dissector: Fix out-of-bounds warnings
net/ipv4: Replace one-element array with flexible-array member
net/ipv4: Revert use of struct_size() helper
net/ipv4/ipv6: Replace one-element arraya with flexible-array members
net/ipv4/igmp: Use struct_size() helper
net/ipv6/mcast: Use struct_size() helper
mwifiex: usb: Replace one-element array with flexible-array member
Haimin Zhang (1):
fix array-index-out-of-bounds in taprio_change
Haiyang Zhang (3):
net: mana: Move NAPI from EQ to CQ
net: mana: Add support for EQ sharing
net: mana: Add WARN_ON_ONCE in case of CQE read overflow
Haiyue Wang (1):
gve: fix the wrong AdminQ buffer overflow check
Hangbin Liu (1):
bonding: add new option lacp_active
Hans de Goede (1):
Bluetooth: hci_h5: Disable the hci_suspend_notifier for btrtl devices
Hao Chen (11):
devlink: add documentation for hns3 driver
net: hns3: add devlink reload support for PF
net: hns3: add devlink reload support for VF
net: hns3: uniform type of function parameter cmd
net: hns3: remove unnecessary "static" of local variables in function
net: hns3: add required space in comment
net: hns3: modify a print format of hns3_dbg_queue_map()
net: hnss3: use max() to simplify code
net: hns3: uniform parameter name of hclge_ptp_clean_tx_hwts()
net: hns3: add some required spaces
net: hns3: remove unnecessary spaces
Hao Luo (1):
libbpf: Support weak typed ksyms.
Hari Prasath (2):
net: macb: Add PTP support for SAMA5D29
dt-bindings: net: macb: add documentation for sama5d29 ethernet interface
Hariprasad Kelam (2):
octeontx2-af: cn10K: Get NPC counters value
octeontx2-pf: Don't mask out supported link modes
Harman Kalra (2):
octeontx2-af: nix and lbk in loop mode in 98xx
octeontx2-af: cn10K: support for sched lmtst and other features
He Fengqing (1):
bpf: Fix potential memleak and UAF in the verifier.
Heiko Carstens (1):
net/iucv: get rid of register asm usage
Heiner Kallweit (20):
ethtool: runtime-resume netdev parent before ethtool ioctl ops
ethtool: move implementation of ethnl_ops_begin/complete to netlink.c
ethtool: move netif_device_present check from ethnl_parse_header_dev_get to ethnl_ops_begin
ethtool: runtime-resume netdev parent in ethnl_ops_begin
ethtool: return error from ethnl_ops_begin if dev is NULL
r8169: rename rtl_csi_access_enable to rtl_set_aspm_entry_latency
sfc: falcon: Read VPD with pci_vpd_alloc()
sfc: falcon: Search VPD with pci_vpd_find_ro_info_keyword()
bnx2: Search VPD with pci_vpd_find_ro_info_keyword()
bnx2: Replace open-coded version with swab32s()
bnx2x: Read VPD with pci_vpd_alloc()
bnx2x: Search VPD with pci_vpd_find_ro_info_keyword()
bnxt: Read VPD with pci_vpd_alloc()
bnxt: Search VPD with pci_vpd_find_ro_info_keyword()
cxgb4: Validate VPD checksum with pci_vpd_check_csum()
cxgb4: Remove unused vpd_param member ec
cxgb4: Search VPD with pci_vpd_find_ro_info_keyword()
cxgb4: improve printing NIC information
r8169: enable ASPM L0s state
r8169: add rtl_enable_exit_l1
Hengqi Chen (3):
tools/resolve_btfids: Emit warnings and patch zero id for missing symbols
libbpf: Add btf__load_vmlinux_btf/btf__load_module_btf
selftests/bpf: Test btf__load_vmlinux_btf/btf__load_module_btf APIs
Horatiu Vultur (1):
net: mscc: ocelot: be able to reuse a devlink_port after teardown
Hu Haowen (1):
Documentation: networking: add ioam6-sysctl into index
Huazhong Tan (1):
net: hns3: add hns3_state_init() to do state initialization
Ian Mackinnon (1):
Bluetooth: btusb: Load Broadcom firmware for Dell device 413c:8197
Ilan Peer (5):
iwlwifi: mvm: Do not use full SSIDs in 6GHz scan
iwlwifi: mvm: Add support for hidden network scan on 6GHz band
iwlwifi: mvm: Fix umac scan request probe parameters
iwlwifi: mvm: Refactor setting of SSIDs for 6GHz scan
iwlwifi: mvm: Fix scan channel flags settings
Ilya Leoshkevich (1):
selftests/bpf: Fix test_core_autosize on big-endian machines
Ioana Ciornei (18):
docs: networking: dpaa2: add documentation for the switch driver
dpaa2-switch: rename dpaa2_switch_tc_parse_action to specify the ACL
dpaa2-switch: rename dpaa2_switch_acl_tbl into filter_block
dpaa2-switch: reorganize dpaa2_switch_cls_flower_replace
dpaa2-switch: reorganize dpaa2_switch_cls_matchall_replace
dpaa2-switch: add API for setting up mirroring
dpaa2-switch: add support for port mirroring
dpaa2-switch: add VLAN based mirroring
dpaa2-switch: offload shared block mirror filters when binding to a port
docs: networking: dpaa2: document mirroring support on the switch
dpaa2-switch: request all interrupts sources on the DPSW
dpaa2-switch: use the port index in the IRQ handler
dpaa2-switch: do not enable the DPSW at probe time
dpaa2-switch: no need to check link state right after ndo_open
bus: fsl-mc: extend fsl_mc_get_endpoint() to pass interface ID
dpaa2-switch: integrate the MAC endpoint support
dpaa2-switch: add a prefix to HW ethtool stats
dpaa2-switch: export MAC statistics in ethtool
Ismael Ferreras Morezuelas (1):
Bluetooth: btusb: Make the CSR clone chip force-suspend workaround more generic
Ivan Bornyakov (1):
net: phy: marvell: add SFP support for 88E1510
Jacob Keller (4):
ice: fix Tx queue iteration for Tx timestamp enablement
ice: remove dead code for allocating pin_config
ice: add lock around Tx timestamp tracker flush
ice: restart periodic outputs around time changes
Jakub Kicinski (28):
Merge branch 'nfc-constify-pointed-data-missed-part'
Merge branch 'clean-devlink-net-namespace-operations'
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
virtio-net: realign page_to_skb() after merges
net: add netif_set_real_num_queues() for device reconfig
nfp: use netif_set_real_num_queues()
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
Merge branch 'add-frag-page-support-in-page-pool'
Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
Merge branch 'mlx5-next' of git://git.kernel.org/pub/scm/linux/kernel/git/mellanox/linux
Merge branch 'bonding-cleanup-header-file-and-error-msgs'
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
Merge branch 'kconfig-symbol-clean-up-on-net'
Merge branch 'net-hns3-add-support-ethtool-extended-link-state'
Merge branch 'ptp-ocp-minor-updates-and-fixes'
Merge branch '40GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
Merge tag 'linux-can-next-for-5.15-20210819' of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
Merge tag 'mac80211-next-for-net-next-2021-08-20' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next
netdevice: move xdp_rxq within netdev_rx_queue
Merge branch 'ethtool-extend-coalesce-uapi'
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
bnxt: count packets discarded because of netpoll
bnxt: count discards due to memory allocation errors
Merge branch 'bnxt-add-rx-discards-stats-for-oom-and-netpool'
Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
Jason Wang (5):
net: ixp4xx_hss: use dma_pool_zalloc
net: qed: remove unneeded return variables
libbpf: Fix comment typo
net/mlx4: Use ARRAY_SIZE to get an array's size
dpaa2-eth: Replace strlcpy with strscpy
Jeremy Kerr (11):
mctp: Add MCTP base
mctp: Add base socket/protocol definitions
mctp: Add base packet definitions
mctp: Add sockaddr_mctp to uapi
mctp: Add initial driver infrastructure
mctp: Add device handling and netlink interface
mctp: Add initial routing framework
mctp: Populate socket implementation
mctp: Implement message fragmentation & reassembly
mctp: Add MCTP overview document
mctp: Specify route types, require rtm_type in RTM_*ROUTE messages
Jerin Jacob (2):
octeontx2-af: Enhance mailbox trace entry
octeontx2-af: Allow to configure flow tag LSB byte as RSS adder
Jesper Dangaard Brouer (1):
samples/bpf: xdp_redirect_cpu_user: Cpumap qsize set larger default
Jian Shen (1):
net: hns3: refine function hns3_set_default_feature()
Jiang Wang (6):
af_unix: Add read_sock for stream socket types
af_unix: Add unix_stream_proto for sockmap
selftest/bpf: Add tests for sockmap with unix stream type.
selftest/bpf: Change udp to inet in some function names
selftest/bpf: Add new tests in sockmap for unix stream to tcp.
af_unix: Fix NULL pointer bug in unix_shutdown
Jiapeng Chong (1):
net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set()
Jiaran Zhang (1):
net: hns3: initialize each member of structure array on a separate line
Jing Yangyang (1):
ssb: fix boolreturn.cocci warning
Jiri Olsa (10):
bpf, x86: Store caller's ip in trampoline stack
bpf: Enable BPF_TRAMP_F_IP_ARG for trampolines with call_get_func_ip
bpf: Add bpf_get_func_ip helper for tracing programs
bpf: Add bpf_get_func_ip helper for kprobe programs
selftests/bpf: Add test for bpf_get_func_ip helper
libbpf: Add bpf_program__attach_kprobe_opts function
selftests/bpf: Add test for bpf_get_func_ip in kprobe+offset probe
libbpf: Fix func leak in attach_kprobe
libbpf: Allow decimal offset for kprobes
libbpf: Export bpf_program__attach_kprobe_opts function
Joakim Zhang (15):
dt-bindings: net: fec: convert fsl,*fec bindings to yaml
ARM: dts: imx35: correct node name for FEC
ARM: dts: imx7-mba7: remove un-used "phy-reset-delay" property
dt-bindings: net: snps,dwmac: add missing DWMAC IP version
dt-bindings: net: imx-dwmac: convert imx-dwmac bindings to yaml
arm64: dts: imx8mp: change interrupt order per dt-binding
dt-bindings: net: fsl,fec: improve the binding a bit
ARM: dts: imx6qdl: move phy properties into phy device node
dt-bindings: net: fsl,fec: update compatible items
dt-bindings: net: fsl,fec: add RGMII internal clock delay
arm64: dts: imx8m: add "fsl,imx8mq-fec" compatible string for FEC
arm64: dts: imx8qxp: add "fsl,imx8qm-fec" compatible string for FEC
net: fec: fix MAC internal delay doesn't work
net: fec: fix build error for ARCH m68k
net: fec: add WoL support for i.MX8MQ
Joel Stanley (2):
dt-bindings: net: Add bindings for LiteETH
net: Add driver for LiteX's LiteETH network interface
Johan Almbladh (18):
bpf/tests: Fix copy-and-paste error in double word test
bpf/tests: Do not PASS tests without actually testing the result
bpf: Fix off-by-one in tail call count limiting
bpf, tests: Add BPF_JMP32 test cases
bpf, tests: Add BPF_MOV tests for zero and sign extension
bpf, tests: Fix typos in test case descriptions
bpf, tests: Add more tests of ALU32 and ALU64 bitwise operations
bpf, tests: Add more ALU32 tests for BPF_LSH/RSH/ARSH
bpf, tests: Add more BPF_LSH/RSH/ARSH tests for ALU64
bpf, tests: Add more ALU64 BPF_MUL tests
bpf, tests: Add tests for ALU operations implemented with function calls
bpf, tests: Add word-order tests for load/store of double words
bpf, tests: Add branch conversion JIT test
bpf, tests: Add test for 32-bit context pointer argument passing
bpf, tests: Add tests for atomic operations
bpf, tests: Add tests for BPF_CMPXCHG
bpf, tests: Add tail call test suite
mac80211: Fix monitor MTU limit so that A-MSDUs get through
Johannes Berg (36):
mac80211: include <linux/rbtree.h>
cfg80211: fix BSS color notify trace enum confusion
iwlwifi: nvm: enable IEEE80211_HE_PHY_CAP10_HE_MU_M1RU_MAX_LTF
iwlwifi: mvm: avoid FW restart while shutting down
iwlwifi: pcie: optimise struct iwl_rx_mem_buffer layout
iwlwifi: pcie: free RBs during configure
iwlwifi: prepare for synchronous error dumps
iwlwifi: pcie: dump error on FW reset handshake failures
iwlwifi: mvm: set replay counter on key install
iwlwifi: mvm: restrict FW SMPS request
iwlwifi: mvm: avoid static queue number aliasing
iwlwifi: mvm: clean up number of HW queues
iwlwifi: mvm: treat MMPDUs in iwl_mvm_mac_tx() as bcast
iwlwifi: split off Bz devices into their own family
iwlwifi: give Bz devices their own name
iwlwifi: read MAC address from correct place on Bz
iwlwifi: pcie: implement Bz device startup
iwlwifi: implement Bz NMI behaviour
iwlwifi: pcie: implement Bz reset flow
iwlwifi: mvm: support new station key API
iwlwifi: mvm: simplify __iwl_mvm_set_sta_key()
iwlwifi: mvm: d3: separate TKIP data from key iteration
iwlwifi: mvm: d3: remove fixed cmd_flags argument
iwlwifi: mvm: d3: refactor TSC/RSC configuration
iwlwifi: mvm: d3: add separate key iteration for GTK type
iwlwifi: mvm: d3: make key reprogramming iteration optional
iwlwifi: mvm: d3: implement RSC command version 5
iwlwifi: mvm: fix access to BSS elements
iwlwifi: fw: correctly limit to monitor dump
iwlwifi: pcie: avoid dma unmap/remap in crash dump
iwlwifi: fix __percpu annotation
iwlwifi: api: remove datamember from struct
iwlwifi: fw: fix debug dump data declarations
iwlwifi: allow debug init in RF-kill
iwlwifi: mvm: don't use FW key ID in beacon protection
um: vector: adjust to coalesce API changes
John Crispin (2):
nl80211: add support for BSS coloring
mac80211: add support for BSS color change
John Efstathiades (10):
lan78xx: Fix white space and style issues
lan78xx: Remove unused timer
lan78xx: Set flow control threshold to prevent packet loss
lan78xx: Remove unused pause frame queue
lan78xx: Add missing return code checks
lan78xx: Fix exception on link speed change
lan78xx: Fix partial packet errors on suspend/resume
lan78xx: Fix race conditions in suspend/resume handling
lan78xx: Fix race condition in disconnect handling
lan78xx: Limit number of driver warning messages
John Fastabend (1):
bpf, selftests: Fix test_maps now that sockmap supports UDP
Jonas Dreßler (1):
mwifiex: pcie: add DMI-based quirk implementation for Surface devices
Jonathan Lemon (12):
ptp: ocp: Expose various resources on the timecard.
ptp: ocp: Fix the error handling path for the class device.
ptp: ocp: Add the mapping for the external PPS registers.
ptp: ocp: Remove devlink health and unused parameters.
ptp: ocp: Use 'gnss' naming instead of 'gps'
ptp: ocp: Rename version string shown by devlink.
ptp: ocp: Remove pending_image indicator from devlink
ptp: ocp: Fix uninitialized variable warning spotted by clang.
ptp: ocp: Fix error path for pci_ocp_device_init()
ptp: ocp: Have Kconfig select NET_DEVLINK
MAINTAINERS: Update for ptp_ocp driver.
ptp: ocp: Simplify Kconfig.
Jonathan Toppins (2):
bonding: remove extraneous definitions from bonding.h
bonding: combine netlink and console error messages
Jose Blanquicet (1):
selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP
Joseph Gates (1):
wcn36xx: Ensure finish scan is not requested before start scan
Juergen Gross (4):
xen/netfront: read response from backend only once
xen/netfront: don't read data from request on the ring page
xen/netfront: disentangle tx_skb_freelist
xen/netfront: don't trust the backend response data blindly
Juhee Kang (7):
samples: bpf: Fix tracex7 error raised on the missing argument
samples: bpf: Add the omitted xdp samples to .gitignore
samples: pktgen: pass the environment variable of normal user to sudo
samples: pktgen: add missing IPv6 option to pktgen scripts
samples: pktgen: fix to print when terminated normally
samples: pktgen: add trap SIGINT for printing execution result
pktgen: document the latest pktgen usage options
Julian Wiedmann (6):
s390/qeth: remove OSN support
s390/qeth: clean up QETH_PROT_* naming
s390/qeth: clean up device_type management
net/af_iucv: support drop monitoring
net/af_iucv: clean up a try_then_request_module()
net/af_iucv: remove wrappers around iucv (de-)registration
Jun Miao (2):
Bluetooth: btusb: Fix a unspported condition to set available debug features
atm: horizon: Fix spelling mistakes in TX comment
Jussi Maki (10):
selftests/bpf: Use ping6 only if available in tc_redirect
net, bonding: Refactor bond_xmit_hash for use with xdp_buff
net, core: Add support for XDP redirection to slave device
net, bonding: Add XDP support to the bonding driver
bpf, devmap: Exclude XDP broadcast to master device
net, core: Allow netdev_lower_get_next_private_rcu in bh context
selftests/bpf: Fix xdp_tx.c prog section name
selftests/bpf: Add tests for XDP bonding
net, bonding: Disallow vlan+srcmac with XDP
selftests/bpf: Fix running of XDP bonding tests
Justin Iurman (7):
uapi: IPv6 IOAM headers definition
ipv6: ioam: Data plane support for Pre-allocated Trace
ipv6: ioam: IOAM Generic Netlink API
ipv6: ioam: Support for IOAM injection with lwtunnels
ipv6: ioam: Documentation for new IOAM sysctls
selftests: net: Test for the IOAM insertion with IPv6
selftests: net: improved IOAM tests
Kai-Heng Feng (1):
Bluetooth: Move shutdown callback before flushing tx and rx queue
Kalle Valo (3):
Merge ath-next from git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/ath.git
Merge ath-next from git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/ath.git
Merge commit 'e257d969f36503b8eb1240f32653a1afb3109f86' of git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next
Kangmin Park (3):
mpls: defer ttl decrement in mpls_forward()
Bluetooth: Fix return value in hci_dev_do_close()
net: bridge: change return type of br_handle_ingress_vlan_tunnel
Kees Cook (7):
igb: Avoid memcpy() over-reading of ETH_SS_STATS
e100: Avoid memcpy() over-reading of ETH_SS_STATS
mac80211: radiotap: Use BIT() instead of shifts
mac80211: Use flex-array for radiotap header bitmap
Bluetooth: mgmt: Pessimize compile-time bounds-check
ipw2x00: Avoid field-overflowing memcpy()
ray_cs: Split memcpy() to avoid bounds check warning
Kiran K (1):
Bluetooth: Fix race condition in handling NOP command
Krzysztof Kozlowski (39):
nfc: port100: constify protocol list array
nfc: constify payload argument in nci_send_cmd()
nfc: constify nci_ops
nfc: s3fwrn5: constify nci_ops
nfc: constify nci_driver_ops (prop_ops and core_ops)
nfc: constify nfc_phy_ops
nfc: st21nfca: constify file-scope arrays
nfc: constify pointer to nfc_vendor_cmd
nfc: constify nfc_hci_gate
nfc: constify nfc_ops
nfc: constify nfc_hci_ops
nfc: constify nfc_llc_ops
nfc: constify nfc_digital_ops
nfc: constify passed nfc_dev
nfc: mei_phy: constify buffer passed to mei_nfc_send()
nfc: port100: constify several pointers
nfc: trf7970a: constify several pointers
nfc: virtual_ncidev: constify pointer to nfc_dev
nfc: nfcsim: constify drvdata (struct nfcsim)
nfc: fdp: drop unneeded cast for printing firmware size in dev_dbg()
nfc: fdp: use unsigned int as loop iterator
nfc: fdp: constify several pointers
nfc: microread: constify several pointers
nfc: mrvl: constify several pointers
nfc: mrvl: constify static nfcmrvl_if_ops
nfc: mrvl: correct nfcmrvl_spi_parse_dt() device_node argument
nfc: annotate af_nfc_exit() as __exit
nfc: hci: annotate nfc_llc_init() as __init
nfc: constify several pointers to u8, char and sk_buff
nfc: constify local pointer variables
nfc: nci: constify several pointers to u8, sk_buff and other structs
nfc: hci: cleanup unneeded spaces
nfc: hci: pass callback data param as pointer in nci_request()
nfc: microread: remove unused header includes
nfc: mrvl: remove unused header includes
nfc: pn544: remove unused header includes
nfc: st-nci: remove unused header includes
nfc: st21nfca: remove unused header includes
nfc: st95hf: remove unused header includes
Kumar Kartikeya Dwivedi (28):
net: core: Split out code to run generic XDP prog
bitops: Add non-atomic bitops for pointers
bpf: cpumap: Implement generic cpumap
bpf: devmap: Implement devmap prog execution for generic XDP
bpf: Tidy xdp attach selftests
samples: bpf: Fix a couple of warnings
tools: include: Add ethtool_drvinfo definition to UAPI header
samples: bpf: Add basic infrastructure for XDP samples
samples: bpf: Add BPF support for redirect tracepoint
samples: bpf: Add redirect tracepoint statistics support
samples: bpf: Add BPF support for xdp_exception tracepoint
samples: bpf: Add xdp_exception tracepoint statistics support
samples: bpf: Add BPF support for cpumap tracepoints
samples: bpf: Add cpumap tracepoint statistics support
samples: bpf: Add BPF support for devmap_xmit tracepoint
samples: bpf: Add devmap_xmit tracepoint statistics support
samples: bpf: Add vmlinux.h generation support
samples: bpf: Convert xdp_monitor_kern.o to XDP samples helper
samples: bpf: Convert xdp_monitor to XDP samples helper
samples: bpf: Convert xdp_redirect_kern.o to XDP samples helper
samples: bpf: Convert xdp_redirect to XDP samples helper
samples: bpf: Convert xdp_redirect_cpu_kern.o to XDP samples helper
samples: bpf: Convert xdp_redirect_cpu to XDP samples helper
samples: bpf: Convert xdp_redirect_map_kern.o to XDP samples helper
samples: bpf: Convert xdp_redirect_map to XDP samples helper
samples: bpf: Convert xdp_redirect_map_multi_kern.o to XDP samples helper
samples: bpf: Convert xdp_redirect_map_multi to XDP samples helper
samples: bpf: Fix uninitialized variable in xdp_redirect_cpu
Kuniyuki Iwashima (5):
bpf: Fix a typo of reuseport map in bpf.h.
bpf: af_unix: Implement BPF iterator for UNIX domain socket.
bpf: Support "%c" in bpf_bprintf_prepare().
selftest/bpf: Implement sample UNIX domain socket iterator program.
selftest/bpf: Extend the bpf_snprintf() test for "%c".
Kurt Kanzenbach (5):
igc: Add possibility to add flex filter
igc: Integrate flex filter into ethtool ops
igc: Make flex filter more flexible
igc: Export LEDs
Revert "igc: Export LEDs"
Lad Prabhakar (3):
dt-bindings: net: can: renesas,rcar-canfd: Document RZ/G2L SoC
can: rcar_canfd: Add support for RZ/G2L family
can: rcar_canfd: rcar_canfd_handle_channel_tx(): fix redundant assignment
Lahav Schlesinger (2):
net: Support filtering interfaces on no master
selftests: vrf: Add test for SNAT over VRF
Larry Finger (1):
Bluetooth: Add additional Bluetooth part for Realtek 8852AE
Len Baker (4):
Bluetooth: btmrvl_sdio: Remove all strcpy() uses
drivers/net/usb: Remove all strcpy() uses
ipw2x00: Use struct_size helper instead of open-coded arithmetic
rtw88: Remove unnecessary check code
Leon Romanovsky (20):
ionic: drop useless check of PCI driver data validity
ionic: cleanly release devlink instance
net: ti: am65-cpsw-nuss: fix wrong devlink release order
net/mlx5: Don't rely on always true registered field
devlink: Remove duplicated registration check
devlink: Break parameter notification sequence to be before/after unload/load driver
devlink: Allocate devlink directly in requested net namespace
netdevsim: Forbid devlink reload when adding or deleting ports
netdevsim: Protect both reload_down and reload_up paths
devlink: Simplify devlink port API calls
devlink: Set device as early as possible
devlink: Fix port_type_set function pointer check
net/mlx5: Delete impossible dev->state checks
devlink: Simplify devlink_pernet_pre_exit call
devlink: Remove check of always valid devlink pointer
devlink: Count struct devlink consumers
devlink: Use xarray to store devlink instances
devlink: Clear whole devlink_flash_notify struct
net: hns3: remove always exist devlink pointer check
net/mlx5: Remove all auxiliary devices at the unregister event
Li RongQing (1):
virtio_net: reduce raw_smp_processor_id() calling in virtnet_xdp_get_sq
Li Zhijian (5):
selftests/bpf: Enlarge select() timeout for test_maps
selftests/bpf: Make test_doc_build.sh work from script directory
selftests/bpf: Add default bpftool built by selftests to PATH
selftests/bpf: Add missing files required by test_bpftool.sh for installing
selftests/bpf: Exit with KSFT_SKIP if no Makefile found
Linus Lüssing (2):
batman-adv: bcast: remove remaining skb-copy calls
batman-adv: bcast: remove remaining skb-copy calls
Linus Walleij (6):
brcmfmac: firmware: Allow per-board firmware binaries
brcmfmac: firmware: Fix firmware loading
ssb: Drop legacy header include
ixp4xx_eth: Stop referring to GPIOs
ixp4xx_eth: Add devicetree bindings
ixp4xx_eth: Probe the PTP module from the device tree
Lior Nahmanson (1):
net/mlx5: Add DCS caps & fields support
Liu Jian (1):
igmp: Add ip_mc_list lock in ip_check_mc_rcu
Loic Poulain (4):
wwan: core: Fix missing RTM_NEWLINK event for default link
net: wwan: Add MHI MBIM network driver
net: mhi: Remove MBIM protocol
wcn36xx: Fix missing frame timestamp for beacon/probe-resp
Lorenzo Bianconi (2):
ieee80211: add TWT element definitions
mac80211: introduce individual TWT support in AP mode
Louis Peens (8):
nfp: flower: refactor match functions to take flow_rule as input
nfp: flower: refactor action offload code slightly
nfp: flower-ct: calculate required key_layers
nfp: flower-ct: compile match sections of flow_payload
nfp: flower-ct: add actions into flow_pay for offload
nfp: flower-ct: add flow_pay to the offload table
nfp: flower-ct: add offload calls to the nfp
nfp: flower-tc: add flow stats updates for ct
Luca Coelho (15):
iwlwifi: print PNVM complete notification status in hexadecimal
iwlwifi: pcie: remove spaces from queue names
iwlwifi: mvm: remove check for vif in iwl_mvm_vif_from_mac80211()
iwlwifi: rename ACPI_SAR_NUM_CHAIN_LIMITS to ACPI_SAR_NUM_CHAINS
iwlwifi: convert flat SAR profile table to a struct version
iwlwifi: remove ACPI_SAR_NUM_TABLES definition
iwlwifi: pass number of chains and sub-bands to iwl_sar_set_profile()
iwlwifi: acpi: support reading and storing WRDS revision 1 and 2
iwlwifi: support reading and storing EWRD revisions 1 and 2
iwlwifi: remove unused ACPI_WGDS_TABLE_SIZE definition
iwlwifi: convert flat GEO profile table to a struct version
iwlwifi: acpi: support reading and storing WGDS revision 2
iwlwifi: bump FW API to 65 for AX devices
iwlwifi: acpi: fill in WGDS table with defaults
iwlwifi: acpi: fill in SAR tables with defaults
Luiz Augusto von Dentz (4):
Bluetooth: HCI: Add proper tracking for enable status of adv instances
Bluetooth: Fix not generating RPA when required
Bluetooth: Fix handling of LE Enhanced Connection Complete
Bluetooth: Store advertising handle so it can be re-enabled
Lukas Bulwahn (5):
intersil: remove obsolete prism54 wireless driver
net: Kconfig: remove obsolete reference to config MICROBLAZE_64K_PAGES
net: 802: remove dead leftover after ipx driver removal
net: dpaa_eth: remove dead select in menuconfig FSL_DPAA_ETH
netfilter: x_tables: handle xt_register_template() returning an error value
Luke Hsiao (1):
tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
Luo Jie (3):
net: mdio: Add the reset function for IPQ MDIO driver
MDIO: Kconfig: Specify more IPQ chipset supported
dt-bindings: net: Add the properties for ipq4019 MDIO
Lv Ruyi (2):
ipv6: remove duplicated 'net/lwtunnel.h' include
ipv6: seg6: remove duplicated include
Magnus Karlsson (16):
selftests: xsk: Remove color mode
selftests: xsk: Remove the num_tx_packets option
selftests: xsk: Remove unused variables
selftests: xsk: Return correct error codes
selftests: xsk: Simplify the retry code
selftests: xsk: Remove end-of-test packet
selftests: xsk: Disassociate umem size with packets sent
selftests: xsk: Rename worker_* functions that are not thread entry points
selftests: xsk: Simplify packet validation in xsk tests
selftests: xsk: Validate tx stats on tx thread
selftests: xsk: Decrease sending speed
selftests: xsk: Simplify cleanup of ifobjects
selftests: xsk: Generate packet directly in umem
selftests: xsk: Generate packets from specification
selftests: xsk: Make enums lower case
selftests: xsk: Preface options with opt
Maor Dickman (1):
net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group
Maor Gottlieb (6):
net/mlx5e: Rename traffic type enums
net/mlx5e: Rename some related TTC args and functions
net/mlx5e: Decouple TTC logic from mlx5e
net/mlx5: Move TTC logic to fs_ttc
net/mlx5: Embed mlx5_ttc_table
net/mlx5: Fix inner TTC table creation
Marc Kleine-Budde (21):
can: j1939: fix checkpatch warnings
can: j1939: replace fall through comment by fallthrough pseudo-keyword
can: j1939: j1939_session_completed(): use consistent name se_skb for the session skb
can: j1939: j1939_session_tx_dat(): use consistent name se_skcb for session skb control buffer
can: j1939: j1939_xtp_rx_dat_one(): use separate pointer for session skb control buffer
can: rx-offload: add skb queue for use during ISR
can: rx-offload: can_rx_offload_irq_finish(): directly call napi_schedule()
can: rx-offload: can_rx_offload_threaded_irq_finish(): add new function to be called from threaded interrupt
can: bittiming: fix documentation for struct can_tdc
can: m_can: remove support for custom bit timing
can: mcp251xfd: mcp251xfd_open(): request IRQ as shared
can: peak_pci: convert comments to network style comments
can: peak_pci: fix checkpatch warnings
can: j1939: j1939_session_tx_dat(): fix typo
can: flexcan: flexcan_clks_enable(): add missing variable initialization
mailmap: update email address of Matthias Fuchs and Thomas Körper
can: mcp251xfd: mark some instances of struct mcp251xfd_priv as const
can: tcan4x5x: cdev_to_priv(): remove stray empty line
can: m_can: fix block comment style
can: c_can: c_can_do_tx(): fix typo in comment
can: c_can: rename IF_RX -> IF_NAPI
Marek Vasut (1):
net: phy: Fix data type in DP83822 dp8382x_disable_wol()
Mark Bloch (12):
net/mlx5: Return mdev from eswitch
net/mlx5: Lag, add initial logic for shared FDB
RDMA/mlx5: Fill port info based on the relevant eswitch
{net, RDMA}/mlx5: Extend send to vport rules
RDMA/mlx5: Add shared FDB support
net/mlx5: E-Switch, Add event callback for representors
net/mlx5: Add send to vport rules on paired device
net/mlx5: Lag, properly lock eswitch if needed
net/mlx5: Lag, move lag destruction to a workqueue
net/mlx5: E-Switch, add logic to enable shared FDB
net/mlx5: Lag, Create shared FDB when in switchdev mode
net/sched: cls_api, reset flags on replay
Mark Brown (1):
net: mscc: Fix non-GPL export of regmap APIs
Mark Gray (4):
openvswitch: Introduce per-cpu upcall dispatch
openvswitch: update kdoc OVS_DP_ATTR_PER_CPU_PIDS
openvswitch: fix alignment issues
openvswitch: fix sparse warning incorrect type
Martin KaFai Lau (12):
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
tcp: seq_file: Refactor net and family matching
bpf: tcp: seq_file: Remove bpf_seq_afinfo from tcp_iter_state
tcp: seq_file: Add listening_get_first()
tcp: seq_file: Replace listening_hash with lhash2
bpf: tcp: Bpf iter batching and lock_sock
bpf: tcp: Support bpf_(get|set)sockopt in bpf tcp iter
bpf: selftest: Test batching and bpf_(get|set)sockopt in bpf tcp iter
bpf: tcp: Allow bpf-tcp-cc to call bpf_(get|set)sockopt
bpf: selftests: Add sk_state to bpf_tcp_helpers.h
bpf: selftests: Add connect_to_fd_opts to network_helpers
bpf: selftests: Add dctcp fallback test
Martin Kaiser (1):
niu: read property length only if we use it
Martin Schiller (1):
net: phy: intel-xway: Add RGMII internal delay configuration
Martynas Pumputis (5):
libbpf: Fix reuse of pinned map on older kernel
libbpf: Fix removal of inner map in bpf_object__create_map
selftests/bpf: Check inner map deletion
selftests/bpf: Mute expected invalid map creation error msg
libbpf: Fix race when pinning maps in parallel
Matt Johnston (5):
mctp: Add netlink route management
mctp: Add neighbour implementation
mctp: Add neighbour netlink interface
mctp: Add dest neighbour lladdr to route output
mctp: Allow per-netns default networks
Matt Kline (3):
can: m_can: Disable IRQs on FIFO bus errors
can: m_can: Batch FIFO reads during CAN receive
can: m_can: Batch FIFO writes during CAN transmit
Matthew Cover (1):
bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring
Matthieu Baerts (1):
ipv6: fix "'ioam6_if_id_max' defined but not used" warn
Max Chou (1):
Bluetooth: btusb: Remove WAKEUP_DISABLE and add WAKEUP_AUTOSUSPEND for Realtek devices
Maxim Mikityanskiy (21):
net/mlx5e: Prohibit inner indir TIRs in IPoIB
net/mlx5e: Block LRO if firmware asks for tunneled LRO
net/mlx5: Take TIR destruction out of the TIR list lock
net/mlx5e: Check if inner FT is supported outside of create/destroy functions
net/mlx5e: Convert RQT to a dedicated object
net/mlx5e: Move mlx5e_build_rss_params() call to init_rx
net/mlx5e: Move RX resources to a separate struct
net/mlx5e: Take RQT out of TIR and group RX resources
net/mlx5e: Use mlx5e_rqt_get_rqtn to access RQT hardware id
net/mlx5e: Remove mlx5e_priv usage from mlx5e_build_*tir_ctx*()
net/mlx5e: Remove lro_param from mlx5e_build_indir_tir_ctx_common()
net/mlx5e: Remove mdev from mlx5e_build_indir_tir_ctx_common()
net/mlx5e: Create struct mlx5e_rss_params_hash
net/mlx5e: Convert TIR to a dedicated object
net/mlx5e: Move management of indir traffic types to rx_res
net/mlx5e: Use the new TIR API for kTLS
net/mlx5e: Use a new initializer to build uniform indir table
net/mlx5e: Introduce mlx5e_channels API to get RQNs
net/mlx5e: Hide all implementation details of mlx5e_rx_res
net/mlx5e: Allocate the array of channels according to the real max_nch
sch_htb: Fix inconsistency when leaf qdisc creation fails
Miaoqing Pan (1):
ath9k: fix sleeping in atomic context
Michael Chan (4):
bnxt_en: Move bnxt_ptp_init() from bnxt_open() back to bnxt_init_one()
bnxt_en: Do not read the PTP PHC during chip reset
bnxt_en: Don't use static arrays for completion ring pages
bnxt_en: Increase maximum RX ring size if jumbo ring is not used
Michael Schmitz (2):
ax88796: export ax_NS8390_init() hook
xsurf100: drop include of lib8390.c
Michael Sun (2):
Bluetooth: btusb: Add valid le states quirk
Bluetooth: btusb: Enable MSFT extension for WCN6855 controller
MichelleJin (1):
net: bridge: use mld2r_ngrec instead of icmpv6_dataun
Mikhail Rudenko (1):
brcmfmac: use separate firmware for 43430 revision 2
Miri Korenblit (2):
iwlwifi: mvm: Read the PPAG and SAR tables at INIT stage
iwlwifi: mvm: load regdomain at INIT stage
Mordechay Goodstein (3):
iwlwifi: iwl-nvm-parse: set STBC flags for HE phy capabilities
iwlwifi: iwl-dbg-tlv: add info about loading external dbg bin
iwlwifi: mvm: remove trigger EAPOL time event
Muhammad Falak R Wani (2):
samples, bpf: Add an explict comment to handle nested vlan tagging.
samples/bpf: Define MAX_ENTRIES instead of a magic number in offwaketime
Muhammad Husaini Zulkifli (2):
igc: Set QBVCYCLET_S to 0 for TSN Basic Scheduling
igc: Increase timeout value for Speed 100/1000/2500
Mukesh Sisodiya (2):
iwlwifi: yoyo: cleanup internal buffer allocation in D3
iwlwifi: yoyo: support for new DBGI_SRAM region
Nathan Chancellor (3):
net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
cxgb4: Properly revert VPD changes
rtlwifi: rtl8192de: Fix initialization of place in _rtl92c_phy_get_rightchnlplace()
Naveen Mamindlapalli (2):
octeontx2-af: add proper return codes for AF mailbox handlers
octeontx2-pf: send correct vlan priority mask to npc_install_flow_req
Neal Cardwell (1):
tcp: more accurately check DSACKs to grow RACK reordering window
Neil Spring (1):
tcp: enable mid stream window clamp
Nick Richardson (5):
pktgen: Remove redundant clone_skb override
pktgen: Parse internet mix (imix) input
pktgen: Add imix distribution bins
pktgen: Add output for imix results
pktgen: Remove fill_imix_distribution() CONFIG_XFRM dependency
Niklas Söderlund (3):
nfp: fix return statement in nfp_net_parse_meta()
samples/bpf: xdpsock: Make the sample more useful outside the tree
samples/bpf: xdpsock: Remove forward declaration of ip_fast_csum()
Nikolay Aleksandrov (52):
net: bridge: multicast: factor out port multicast context
net: bridge: multicast: factor out bridge multicast context
net: bridge: multicast: use multicast contexts instead of bridge or port
net: bridge: vlan: add global and per-port multicast context
net: bridge: multicast: add vlan state initialization and control
net: bridge: add vlan mcast snooping knob
net: bridge: multicast: add helper to get port mcast context from port group
net: bridge: multicast: use the port group to port context helper
net: bridge: multicast: check if should use vlan mcast ctx
net: bridge: multicast: add vlan querier and query support
net: bridge: multicast: include router port vlan id in notifications
net: bridge: vlan: add support for global options
net: bridge: vlan: add support for dumping global vlan options
net: bridge: vlan: notify when global options change
net: bridge: vlan: add mcast snooping control
net: bridge: multicast: fix igmp/mld port context null pointer dereferences
net: bridge: multicast: add mdb context support
net: bridge: multicast: add context support for host-joined groups
net: bridge: fix ioctl locking
net: bridge: fix ioctl old_deviceless bridge argument
net: core: don't call SIOCBRADD/DELIF for non-bridge devices
net: bridge: vlan: add support for mcast igmp/mld version global options
net: bridge: vlan: add support for mcast last member count global option
net: bridge: vlan: add support for mcast startup query count global option
net: bridge: vlan: add support for mcast last member interval global option
net: bridge: vlan: add support for mcast membership interval global option
net: bridge: vlan: add support for mcast querier interval global option
net: bridge: vlan: add support for mcast query interval global option
net: bridge: vlan: add support for mcast query response interval global option
net: bridge: vlan: add support for mcast startup query interval global option
net: bridge: mcast: move querier state to the multicast context
net: bridge: mcast: querier and query state affect only current context type
net: bridge: vlan: add support for mcast querier global option
net: bridge: vlan: add support for mcast router global option
net: bridge: mcast: use the proper multicast context when dumping router ports
net: bridge: vlan: use br_rports_fill_info() to export mcast router ports
net: bridge: vlan: fix global vlan option range dumping
net: bridge: mcast: record querier port device ifindex instead of pointer
net: bridge: mcast: make sure querier port/address updates are consistent
net: bridge: mcast: consolidate querier selection for ipv4 and ipv6
net: bridge: mcast: dump ipv4 querier state
net: bridge: mcast: dump ipv6 querier state
net: bridge: vlan: dump mcast ctx querier state
net: bridge: mcast: don't dump querier state if snooping is disabled
net: bridge: mcast: drop sizeof for nest attribute's zero size
net: bridge: mcast: account for ipv6 size when dumping querier state
net: bridge: vlan: enable mcast snooping for existing master vlans
net: bridge: vlan: account for router port lists when notifying
net: bridge: mcast: use the correct vlan group helper
net: bridge: mcast: toggle also host vlan state in br_multicast_toggle_vlan
net: bridge: mcast: br_multicast_set_port_router takes multicast context as argument
net: bridge: vlan: convert mcast router global option to per-vlan entry
Nithin Dabilpuram (3):
octeontx2-af: Change the order of queue work and interrupt disable
octeontx2-af: Wait for TX link idle for credits change
octeontx2-af: enable tx shaping feature for 96xx C0
Oleksij Rempel (9):
net: usb: asix: ax88772: do not poll for PHY before registering it
net: usb: asix: ax88772: add missing stop
net: selftests: add MTU test
can: j1939: rename J1939_ERRQUEUE_* to J1939_ERRQUEUE_TX_*
can: j1939: extend UAPI to notify about RX status
net: phy: nxp-tja11xx: log critical health state
dt-bindings: can-controller: add support for termination-gpios
dt-bindings: can: fsl,flexcan: enable termination-* bindings
can: dev: provide optional GPIO based termination support
Pablo Neira Ayuso (3):
netfilter: nft_compat: use nfnetlink_unicast()
netfilter: flowtable: remove nf_ct_l4proto_find() call
netfilter: ctnetlink: missing counters and timestamp in nfnetlink_{log,queue}
Pali Rohár (3):
phy: marvell: phy-mvebu-cp110-comphy: Rename HS-SGMMI to 2500Base-X
phy: marvell: phy-mvebu-a3700-comphy: Rename HS-SGMMI to 2500Base-X
phy: marvell: phy-mvebu-a3700-comphy: Remove unsupported modes
Paolo Abeni (29):
veth: always report zero combined channels
veth: factor out initialization helper
veth: implement support for set_channel ethtool op
veth: create by default nr_possible_cpus queues
selftests: net: veth: add tests for set_channel
sk_buff: introduce 'slow_gro' flags
sk_buff: track dst status in slow_gro
sk_buff: track extension status in slow_gro
net: optimize GRO for the common case.
skbuff: allow 'slow_gro' for skb carring sock reference
veth: use skb_prepare_for_gro()
sk_buff: avoid potentially clearing 'slow_gro' field
net: fix GRO skb truesize update
mptcp: more accurate timeout
mptcp: less aggressive retransmission strategy
mptcp: handle pending data on closed subflow
mptcp: cleanup sysctl data and helpers
mptcp: faster active backup recovery
mptcp: add mibs for stale subflows processing
mptcp: backup flag from incoming MPJ ack option
selftests: mptcp: add testcase for active-back
mptcp: optimize out option generation
mptcp: shrink mptcp_out_options struct
selftests/net: allow GRO coalesce test on veth
mptcp: do not set unconditionally csum_reqd on incoming opt
mptcp: better binary layout for mptcp_options_received
mptcp: consolidate in_opt sub-options fields in a bitmask
mptcp: optimize the input options processing
mptcp: make the locking tx schema more readable
Parav Pandit (14):
devlink: Add new "enable_eth" generic device param
devlink: Add new "enable_rdma" generic device param
devlink: Add new "enable_vnet" generic device param
devlink: Create a helper function for one parameter registration
devlink: Add API to register and unregister single parameter
devlink: Add APIs to publish, unpublish individual parameter
net/mlx5: Fix unpublish devlink parameters
net/mlx5: Support enable_eth devlink dev param
net/mlx5: Support enable_rdma devlink dev param
net/mlx5: Support enable_vnet devlink dev param
net/mlx5: SF, use recent sysfs api
net/mlx5: Reorganize current and maximal capabilities to be per-type
net/mlx5: Allocate individual capability
net/mlx5: Initialize numa node for all core devices
Pauli Virtanen (1):
Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS
Pavan Chebbi (4):
bnxt_en: 1PPS support for 5750X family chips
bnxt_en: 1PPS functions to configure TSIO pins
bnxt_en: Event handler for PPS events
bnxt_en: Log if an invalid signal detected on TSIO pin
Pavel Skripkin (6):
net: cipso: fix warnings in netlbl_cipsov4_add_std
net: xfrm: fix shift-out-of-bounce
net: hso: drop unused function argument
net: pch_gbe: remove mii_ethtool_gset() error handling
net: mii: make mii_ethtool_gset() return void
Bluetooth: add timeout sanity check to hci_inquiry
Pavel Tikhomirov (1):
sock: allow reading and changing sk_userlocks with setsockopt
Paweł Drewniak (1):
brcmfmac: Add WPA3 Personal with FT to supported cipher suites
Peilin Ye (4):
netdevsim: Add multi-queue support
net/sched: act_skbmod: Add SKBMOD_F_ECN option support
tc-testing: Add control-plane selftest for skbmod SKBMOD_F_ECN option
tc-testing: Add control-plane selftests for sch_mq
Peng Li (14):
net: at91_can: remove redundant blank lines
net: at91_can: add blank line after declarations
net: at91_can: fix the code style issue about macro
net: at91_can: use BIT macro
net: at91_can: fix the alignment issue
net: at91_can: add braces {} to all arms of the statement
net: at91_can: remove redundant space
net: at91_can: fix the comments style issue
net: hns3: remove redundant param mbx_event_pending
net: hns3: use memcpy to simplify code
net: hns3: remove redundant param to simplify code
net: hns3: package new functions to simplify hclgevf_mbx_handler code
net: hns3: merge some repetitive macros
net: hns3: reconstruct function hns3_self_test
Peter Collingbourne (1):
net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
Ping-Ke Shih (1):
rtw88: wow: build wow function only if CONFIG_PM is on
Piotr Kwapulinski (1):
i40e: add support for PTP external synchronization clock
Po-Hao Huang (2):
rtw88: 8822c: add tx stbc support under HT mode
rtw88: change beacon filter default mode
Po-Hsu Lin (1):
selftests/net: Use kselftest skip code for skipped tests
Prankur Gupta (2):
bpf: Add support for {set|get} socket options from setsockopt BPF
selftests/bpf: Add tests for {set|get} socket option from setsockopt BPF
Quentin Monnet (14):
libbpf: Return non-null error on failures in libbpf_find_prog_btf_id()
libbpf: Rename btf__load() as btf__load_into_kernel()
libbpf: Rename btf__get_from_id() as btf__load_from_kernel_by_id()
tools: Free BTF objects at various locations
tools: Replace btf__get_from_id() with btf__load_from_kernel_by_id()
libbpf: Add split BTF support for btf__load_from_kernel_by_id()
tools: bpftool: Support dumping split BTF by id
tools: bpftool: Slightly ease bash completion updates
selftests/bpf: Check consistency between bpftool source, doc, completion
tools: bpftool: Complete and synchronise attach or map types
tools: bpftool: Update and synchronise option list in doc and help msg
selftests/bpf: Update bpftool's consistency script for checking options
tools: bpftool: Document and add bash completion for -L, -B options
tools: bpftool: Complete metrics list in "bpftool prog profile" doc
Radha Mohan Chintakuntla (1):
octeontx2-af: Add SDP interface support
Rafał Miłecki (1):
dt-bindings: net: brcm,unimac-mdio: convert to the json-schema
Rakesh Babu (1):
octeontx2-pf: Ntuple filters support for VF netdev
Randy Dunlap (3):
Bluetooth: btrsi: use non-kernel-doc comment for copyright
ptp: ocp: don't allow on S390
net: RxRPC: make dependent Kconfig symbols be shown indented
Rao Shoaib (3):
af_unix: Add OOB support
af_unix: fix holding spinlock in oob handling
af_unix: check socket state when queuing OOB
Richard Laing (2):
bus: mhi: pci-generic: configurable network interface MRU
net: mhi: Improve MBIM packet counting
Rocco Yue (3):
ipv6: remove unnecessary local variable
net: add extack arg for link ops
ipv6: add IFLA_INET6_RA_MTU to expose mtu value
Roi Dayan (9):
net/mlx5e: Remove redundant tc act includes
net/mlx5e: Remove redundant filter_dev arg from parse_tc_fdb_actions()
net/mlx5e: Remove redundant cap check for flow counter
net/mlx5e: Remove redundant parse_attr arg
net/mlx5e: Remove redundant assignment of counter to null
net/mlx5e: Return -EOPNOTSUPP if more relevant when parsing tc actions
net/mlx5e: Add an option to create a shared mapping
net/mlx5e: Use shared mappings for restoring from metadata
net/mlx5e: Fix possible use-after-free deleting fdb rule
Ronak Doshi (7):
vmxnet3: prepare for version 6 changes
vmxnet3: add support for 32 Tx/Rx queues
vmxnet3: remove power of 2 limitation on the queues
vmxnet3: add support for ESP IPv6 RSS
vmxnet3: set correct hash type based on rss information
vmxnet3: increase maximum configurable mtu to 9190
vmxnet3: update to version 6
Roy, UjjaL (1):
bpf, doc: Add heading and example for extensions in cbpf
Russell King (1):
net: phy: at803x: simplify custom phy id matching
Russell King (Oracle) (4):
net: mvneta: deny disabling autoneg for 802.3z modes
net: mvpp2: deny disabling autoneg for 802.3z modes
net: phylink: add phy change pause mode debug
net: phylink: cleanup ksettings_set
Ryoga Saito (1):
netfilter: add netfilter hooks to SRv6 data plane
Saeed Mahameed (2):
ethtool: Fix rxnfc copy to user buffer overflow
net/mlx5e: Remove mlx5e dependency from E-Switch sample
Sandipan Das (1):
MAINTAINERS: Remove self from powerpc BPF JIT
Sasha Neftin (9):
e1000e: Add handshake with the CSME to support S0ix
e1000e: Add polling mechanism to indicate CSME DPG exit
e1000e: Additional PHY power saving in S0ix
e1000e: Add support for Lunar Lake
e1000e: Add support for the next LOM generation
e1000e: Add space to the debug print
igc: Check if num of q_vectors is smaller than max before array access
igc: Remove _I_PHY_ID checking
igc: Remove phy->type checking
Sean Anderson (1):
brcmfmac: Set SDIO workqueue as WQ_HIGHPRI
Sebastian Andrzej Siewior (3):
virtio_net: Replace deprecated CPU-hotplug functions.
net: Replace deprecated CPU-hotplug functions.
net/iucv: Replace deprecated CPU-hotplug functions.
Shai Malin (5):
qed: Remove the qed module version
qede: Remove the qede module version
qed: Avoid db_recovery during recovery
qed: Skip DORQ attention handling during recovery
qed: Remove redundant prints from the iWARP SYN handling
Shannon Nelson (21):
ionic: minimize resources when under kdump
ionic: monitor fw status generation
ionic: print firmware version on identify
ionic: init reconfig err to 0
ionic: use fewer inits on the buf_info struct
ionic: increment num-vfs before configure
ionic: remove unneeded comp union fields
ionic: block some ethtool operations when fw in reset
ionic: enable rxhash only with multiple queues
ionic: add function tag to debug string
ionic: remove old work task types
ionic: flatten calls to set-rx-mode
ionic: sync the filters in the work task
ionic: refactor ionic_lif_addr to remove a layer
ionic: handle mac filter overflow
ionic: fire watchdog again after fw_down
ionic: squelch unnecessary fw halted message
ionic: fill mac addr earlier in add_addr
ionic: add queue lock around open and stop
ionic: pull hwstamp queue_lock up a level
ionic: recreate hwstamp queues on ifup
Shaokun Zhang (2):
netxen_nic: Remove the repeated declaration
mctp: Remove the repeated declaration
Shaul Triebitz (4):
iwlwifi: mvm: set BROADCAST_TWT_SUPPORTED in MAC policy
iwlwifi: mvm: trigger WRT when no beacon heard
iwlwifi: add 'Rx control frame to MBSSID' HE capability
iwlwifi: mvm: support broadcast TWT alone
Shay Drory (3):
net/mlx5: Align mlx5_irq structure
net/mlx5: Change SF missing dedicated MSI-X err message to dbg
net/mlx5: Refcount mlx5_irq with integer
Shuyi Cheng (3):
libbpf: Introduce 'btf_custom_path' to 'bpf_obj_open_opts'
libbpf: Fix the possible memory leak on error
selftests/bpf: Switch existing selftests to using open_opts for custom BTF
Simon Wunderlich (1):
batman-adv: Start new development cycle
Slark Xiao (1):
net: Add depends on OF_NET for LiteX's LiteETH
Song Yoong Siang (1):
net: phy: marvell: Add WAKE_PHY support to WOL event
Sriram R (1):
cfg80211: use wiphy DFS domain if it is self-managed
Stanislav Fomichev (6):
bpf: Increase supported cgroup storage value size
selftests/bpf: Move netcnt test under test_progs
bpf: Allow bpf_get_netns_cookie in BPF_PROG_TYPE_CGROUP_SOCKOPT
selftests/bpf: Verify bpf_get_netns_cookie in BPF_PROG_TYPE_CGROUP_SOCKOPT
bpf: Use kvmalloc for map values in syscall
bpf: Use kvmalloc for map keys in syscalls
Steen Hegelund (2):
net: sparx5: switchdev: adding frame DMA functionality
arm64: dts: sparx5: Add the Sparx5 switch frame DMA support
Stefan Assmann (4):
i40e: improve locking of mac_filter_hash
iavf: do not override the adapter state in the watchdog task
iavf: fix locking of critical sections
iavf: use mutexes for locking of critical sections
Stefan Raspl (1):
net/smc: Allow SMC-D 1MB DMB allocations
Stefan Wahren (1):
net: qualcomm: fix QCA7000 checksum handling
Steffen Klassert (1):
xfrm: Add possibility to set the default to block if we have no policy
Stephane Grosjean (5):
can: peak_pci: Add name and FW version of the card in kernel buffer
can: peak_usb: pcan_usb_get_device_id(): read value only in case of success
can: peak_usb: PCAN-USB: add support of loopback and one-shot mode
can: peak_usb: pcan_usb_encode_msg(): add information
can: peak_usb: pcan_usb_decode_error(): upgrade handling of bus state changes
Subbaraya Sundeep (11):
octeontx2-af: Modify install flow error codes
octeontx2-af: Allocate low priority entries for PF
octeontx2-pf: Allow VLAN priority also in ntuple filters
octeontx2-pf: Fix NIX1_RX interface backpressure
octeontx2-af: cn10k: Fix SDP base channel number
octeontx2-pf: cleanup transmit link deriving logic
octeontx2-af: Add PTP device id for CN10K and 95O silcons
octeontx2-pf: Add vlan-etype to ntuple filters
octeontx2-af: Fix loop in free and unmap counter
octeontx2-af: Fix mailbox errors in nix_rss_flowkey_cfg
octeontx2-af: Fix static code analyzer reported issues
Sudarsana Reddy Kalluru (1):
atlantic: Fix driver resume flow.
Sunil Goutham (15):
octeontx2-af: cn10k: DWRR MTU configuration
octeontx2-pf: cn10k: Config DWRR weight based on MTU
octeontx2-af: Add debug messages for failures
octeontx2-pf: Enable NETIF_F_RXALL support for VF driver
octeontx2-pf: Sort the allocated MCAM entry indices
octeontx2-pf: Unify flow management variables
octeontx2-pf: devlink params support to set mcam entry count
octeontx2-pf: Add check for non zero mcam flows
octeontx2-pf: Don't install VLAN offload rule if netdev is down
octeontx2-pf: Fix algorithm index in MCAM rules with RSS action
octeontx2-af: Remove channel verification while installing MCAM rules
octeontx2-af: Add mbox to retrieve bandwidth profile free count
octeontx2-pf: Fix inconsistent license text
octeontx2-af: Fix inconsistent license text
octeontx2-af: Set proper errorcode for IPv4 checksum errors
Sven Eckelmann (8):
batman-adv: Move IRC channel to hackint.org
batman-adv: Switch to kstrtox.h for kstrtou64
batman-adv: Check ptr for NULL before reducing its refcnt
batman-adv: Drop NULL check before dropping references
batman-adv: Move IRC channel to hackint.org
batman-adv: Switch to kstrtox.h for kstrtou64
batman-adv: Check ptr for NULL before reducing its refcnt
batman-adv: Drop NULL check before dropping references
Tal Gilboa (1):
IB/mlx5: Rename is_apu_thread_cq function to is_apu_cq
Tang Bin (5):
bcm63xx_enet: delete a redundant assignment
via-rhine: Use of_device_get_match_data to simplify code
via-velocity: Use of_device_get_match_data to simplify code
can: mscan: mpc5xxx_can: mpc5xxx_can_probe(): use of_device_get_match_data to simplify code
can: mscan: mpc5xxx_can: mpc5xxx_can_probe(): remove useless BUG_ON()
Tariq Toukan (11):
net/mlx5e: Do not try enable RSS when resetting indir table
net/mlx5e: Introduce TIR create/destroy API in rx_res
net/mlx5e: Introduce abstraction of RSS context
net/mlx5e: Convert RSS to a dedicated object
net/mlx5e: Dynamically allocate TIRs in RSS contexts
net/mlx5e: Support multiple RSS contexts
net/mlx5e: Support flow classification into RSS contexts
net/mlx5e: Abstract MQPRIO params
net/mlx5e: Maintain MQPRIO mode parameter
net/mlx5e: Handle errors of netdev_set_num_tc()
net/mlx5e: Support MQPRIO channel mode
Tedd Ho-Jeong An (13):
Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
Bluetooth: Add support hdev to allocate private data
Bluetooth: btintel: Add combined setup and shutdown functions
Bluetooth: btintel: Refactoring setup routine for legacy ROM sku
Bluetooth: btintel: Add btintel data struct
Bluetooth: btintel: Fix the first HCI command not work with ROM device
Bluetooth: btintel: Fix the LED is not turning off immediately
Bluetooth: btintel: Add combined set_diag functions
Bluetooth: btintel: Refactoring setup routine for bootloader devices
Bluetooth: btintel: Move hci quirks to setup routine
Bluetooth: btintel: Clean the exported function to static
Bluetooth: btintel: Fix the legacy bootloader returns tlv based version
Bluetooth: btintel: Combine setting up MSFT extension
Tetsuo Handa (1):
Bluetooth: defer cleanup of resources in hci_unregister_dev()
Tobias Klauser (1):
selftests/bpf: Remove unused variable in tc_tunnel prog
Tobias Waldekranz (4):
net: bridge: disambiguate offload_fwd_mark
net: bridge: switchdev: recycle unused hwdoms
net: bridge: switchdev: allow the TX data plane forwarding to be offloaded
net: dsa: tag_dsa: offload the bridge forwarding process
Tom Rix (1):
iwlwifi: remove trailing semicolon in macro definition
Tonghao Zhang (1):
qdisc: add new field for qdisc_enqueue tracepoint
Tree Davies (1):
net/e1000e: Fix spelling mistake "The" -> "This"
Tsuchiya Yuto (1):
mwifiex: pcie: add reset_d3cold quirk for Surface gen4+ devices
Tuo Li (1):
mwifiex: drop redundant null-pointer check in mwifiex_dnld_cmd_to_fw()
Ugo Rémery (1):
rtw88: add quirk to disable pci caps on HP Pavilion 14-ce0xxx
Vadim Fedorenko (2):
net: ipv6: introduce ip6_dst_mtu_maybe_forward
net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward
Vasily Averin (13):
memcg: enable accounting for net_device and Tx/Rx queues
memcg: enable accounting for IP address and routing-related objects
memcg: enable accounting for inet_bin_bucket cache
memcg: enable accounting for VLAN group array
memcg: ipv6/sit: account and don't WARN on ip_tunnel_prl structs allocation
memcg: enable accounting for scm_fp_list objects
skbuff: introduce skb_expand_head()
ipv6: use skb_expand_head in ip6_finish_output2
ipv6: use skb_expand_head in ip6_xmit
ipv4: use skb_expand_head in ip_finish_output2
vrf: use skb_expand_head in vrf_finish_output
ax25: use skb_expand_head
bpf: use skb_expand_head in bpf_out_neigh_v4/6
Vidya (1):
octeontx2-af: configure npc for cn10k to allow packets from cpt
Vignesh Raghavendra (1):
net: ti: am65-cpsw-nuss: fix RX IRQ state after .ndo_stop()
Vijayakannan Ayyathurai (2):
net: stmmac: add ethtool per-queue statistic framework
net: stmmac: add ethtool per-queue irq statistic support
Vincent Li (1):
selftests, bpf: test_tc_tunnel.sh nc: Cannot use -p and -l
Vincent Mailhol (11):
can: netlink: clear data_bittiming if FD is turned off
can: netlink: remove redundant check in can_validate()
can: etas_es58x: fix three typos in author name and documentation
can: etas_es58x: use error pointer during device probing
can: etas_es58x: use devm_kzalloc() to allocate device resources
can: etas_es58x: add es58x_free_netdevs() to factorize code
can: etas_es58x: use sizeof and sizeof_field macros instead of constant values
can: etas_es58x: rewrite the message cast in es58{1,_fd}_tx_can_msg to increase readability
can: netlink: allow user to turn off unsupported features
MAINTAINERS: add Vincent MAILHOL as maintainer for the ETAS ES58X CAN/USB driver
can: etas_es58x: clean-up documentation of struct es58x_fd_tx_conf_msg
Vinicius Costa Gomes (7):
igc: Allow for Flex Filters to be installed
Revert "PCI: Make pci_enable_ptm() private"
PCI: Add pcie_ptm_enabled()
igc: Enable PCIe PTM
igc: Add support for PTP getcrosststamp()
igc: Use default cycle 'start' and 'end' values for queues
igc: Simplify TSN flags handling
Vlad Buslov (6):
net/mlx5: Bridge, release bridge in same function where it is taken
net/mlx5: Bridge, obtain core device from eswitch instead of priv
net/mlx5: Bridge, identify port by vport_num+esw_owner_vhca_id pair
net/mlx5: Bridge, extract FDB delete notification to function
net/mlx5: Bridge, allow merged eswitch connectivity
net/mlx5: Bridge, support LAG
Vladimir Oltean (99):
net: dsa: sja1105: delete the best_effort_vlan_filtering mode
net: dsa: tag_8021q: use "err" consistently instead of "rc"
net: dsa: tag_8021q: use symbolic error names
net: dsa: tag_8021q: remove struct packet_type declaration
net: dsa: tag_8021q: create dsa_tag_8021q_{register,unregister} helpers
net: dsa: build tag_8021q.c as part of DSA core
net: dsa: let the core manage the tag_8021q context
net: dsa: make tag_8021q operations part of the core
net: dsa: tag_8021q: absorb dsa_8021q_setup into dsa_tag_8021q_{,un}register
net: dsa: tag_8021q: manage RX VLANs dynamically at bridge join/leave time
net: dsa: tag_8021q: add proper cross-chip notifier support
net: switchdev: introduce helper for checking dynamically learned FDB entries
net: switchdev: introduce a fanout helper for SWITCHDEV_FDB_{ADD,DEL}_TO_DEVICE
net: dsa: use switchdev_handle_fdb_{add,del}_to_device
net: phy: at803x: finish the phy id checking simplification
net: switchdev: remove stray semicolon in switchdev_handle_fdb_del_to_device shim
net: switchdev: recurse into __switchdev_handle_fdb_del_to_device
net: dpaa2-switch: use extack in dpaa2_switch_port_bridge_join
net: dpaa2-switch: refactor prechangeupper sanity checks
net: bridge: switchdev: let drivers inform which bridge ports are offloaded
net: bridge: guard the switchdev replay helpers against a NULL notifier block
net: bridge: move the switchdev object replay helpers to "push" mode
net: switchdev: fix FDB entries towards foreign ports not getting propagated to us
net: dsa: track the number of switches in a tree
net: dsa: add support for bridge TX forwarding offload
net: dsa: mv88e6xxx: map virtual bridges with forwarding offload in the PVT
net: bridge: fix build when setting skb->offload_fwd_mark with CONFIG_NET_SWITCHDEV=n
net: bridge: update BROPT_VLAN_ENABLED before notifying switchdev in br_vlan_filter_toggle
net: bridge: add a helper for retrieving port VLANs from the data path
net: dsa: sja1105: delete vlan delta save/restore logic
net: dsa: sja1105: deny 8021q uppers on ports
net: dsa: sja1105: deny more than one VLAN-aware bridge
net: dsa: sja1105: add support for imprecise RX
net: dsa: sja1105: add bridge TX data plane offload based on tag_8021q
Revert "net: dsa: Allow drivers to filter packets they can decode source port from"
net: build all switchdev drivers as modules when the bridge is a module
net: bridge: switchdev: replay the entire FDB for each port
net: bridge: switchdev: treat local FDBs the same as entries towards the bridge
net: dsa: sja1105: be stateless when installing FDB entries
net: dsa: sja1105: reset the port pvid when leaving a VLAN-aware bridge
net: dsa: sja1105: make sure untagged packets are dropped on ingress ports with no pvid
net: dsa: tag_sja1105: fix control packets on SJA1110 being received on an imprecise port
net: dsa: don't set skb->offload_fwd_mark when not offloading the bridge
net: dsa: mt7530: drop paranoid checks in .get_tag_protocol()
net: dsa: remove the struct packet_type argument from dsa_device_ops::rcv()
net: bridge: switchdev: fix incorrect use of FDB flags when picking the dst device
net: dsa: tag_sja1105: consistently fail with arbitrary input
net: make switchdev_bridge_port_{,unoffload} loosely coupled with the bridge
Revert "net: build all switchdev drivers as modules when the bridge is a module"
net: dsa: rename teardown_default_cpu to teardown_cpu_ports
net: dsa: give preference to local CPU ports
net: dsa: sja1105: configure the cascade ports based on topology
net: dsa: sja1105: manage the forwarding domain towards DSA ports
net: dsa: sja1105: manage VLANs on cascade ports
net: dsa: sja1105: increase MTU to account for VLAN header on DSA ports
net: dsa: sja1105: suppress TX packets from looping back in "H" topologies
net: dsa: sja1105: enable address learning on cascade ports
net: dsa: tag_sja1105: optionally build as module when switch driver is module if PTP is enabled
net: dsa: stop syncing the bridge mcast_router attribute at join time
net: dsa: mt7530: remove the .port_set_mrouter implementation
net: dsa: don't disable multicast flooding to the CPU even without an IGMP querier
net: dsa: don't fast age standalone ports
net: dsa: centralize fast ageing when address learning is turned off
net: dsa: don't fast age bridge ports with learning turned off
net: dsa: flush the dynamic FDB of the software bridge when fast ageing a port
net: dsa: sja1105: rely on DSA core tracking of port learning state
net: dsa: sja1105: add FDB fast ageing support
net: dsa: still fast-age ports joining a bridge if they can't configure learning
net: dsa: avoid fast ageing twice when port leaves a bridge
net: dsa: create a helper that strips EtherType DSA headers on RX
net: dsa: create a helper which allocates space for EtherType DSA headers
net: dsa: create a helper for locating EtherType DSA headers on RX
net: dsa: create a helper for locating EtherType DSA headers on TX
net: dsa: print more information when a cross-chip notifier fails
net: dsa: tag_8021q: don't broadcast during setup/teardown
net: dsa: tag_8021q: fix notifiers broadcast when they shouldn't, and vice versa
net: dsa: felix: stop calling ocelot_port_{enable,disable}
net: mscc: ocelot: convert to phylink
net: dsa: sja1105: reorganize probe, remove, setup and teardown ordering
net: dsa: tag_sja1105: be dsa_loop-safe
net: dpaa2-switch: phylink_disconnect_phy needs rtnl_lock
net: dpaa2-switch: call dpaa2_switch_port_disconnect_mac on probe error path
net: mscc: ocelot: allow probing to continue with ports that fail to register
net: mscc: ocelot: transmit the "native VLAN" error via extack
net: mscc: ocelot: transmit the VLAN filtering restrictions via extack
net: mscc: ocelot: use helpers for port VLAN membership
docs: devlink: remove the references to sja1105
docs: net: dsa: sja1105: update list of limitations
docs: net: dsa: remove references to struct dsa_device_ops::filter
docs: net: dsa: document the new methods for bridge TX forwarding offload
net: dsa: track unique bridge numbers across all DSA switch trees
net: dsa: don't call switchdev_bridge_port_unoffload for unoffloaded bridge ports
net: dsa: properly fall back to software bridging
net: dsa: don't advertise 'rx-vlan-filter' when not needed
net: dsa: let drivers state that they need VLAN filtering while standalone
net: dsa: sja1105: prevent tag_8021q VLANs from being received on user ports
net: dsa: sja1105: drop untagged packets on the CPU and DSA ports
net: dsa: tag_sja1105: stop asking the sja1105 driver in sja1105_xmit_tpid
net: phy: marvell10g: fix broken PHY interrupts for anyone after us in the driver probe list
Voon Weifeng (2):
net: phy: marvell10g: enable WoL for 88X3310 and 88E2110
net: stmmac: fix INTR TBU status affecting irq count statistic
Wai Paulo Valerio Wang (1):
Bluetooth: btusb: Add support for IMC Networks Mediatek Chip
Wei Wang (1):
net-memcg: pass in gfp_t mask to mem_cgroup_charge_skmem()
Wei Yongjun (2):
wwan: mhi: Fix missing spin_lock_init() in mhi_mbim_probe()
iwlwifi: mvm: fix old-style static const declaration
Wen Gong (3):
ieee80211: add definition of regulatory info in 6 GHz operation information
ieee80211: add definition for transmit power envelope element
mac80211: parse transmit power envelope element
Wentao_Liang (1):
net/mlx5: DR, fix a potential use-after-free bug
Wong Vee Khee (1):
net: pcs: xpcs: Add Pause Mode support for SGMII and 2500BaseX
Xin Long (2):
tipc: keep the skb in rcv queue until the whole data is read
tipc: fix an use-after-free issue in tipc_recvmsg
Xiyu Yang (1):
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
Xu Liang (2):
net: phy: add API to read 802.3-c45 IDs
net: phy: add Maxlinear GPY115/21x/24x driver
Xu Liu (4):
bpf: Allow bpf_get_netns_cookie in BPF_PROG_TYPE_SOCK_OPS
selftests/bpf: Test for get_netns_cookie
bpf: Allow bpf_get_netns_cookie in BPF_PROG_TYPE_SK_MSG
selftests/bpf: Test for get_netns_cookie
Yajun Deng (14):
rtnetlink: use nlmsg_notify() in rtnetlink_send()
net/sched: Remove unnecessary if statement
netlink: Deal with ESRCH error in nlmsg_notify()
net: netlink: add the case when nlh is NULL
net: convert fib_treeref from int to refcount_t
net: netlink: Remove unused function
net: Keep vertical alignment
net: decnet: Fix refcount warning for new dn_fib_info
net: Remove redundant if statements
netdevice: add the case if dev is NULL
net: procfs: add seq_puts() statement for dev_mcast
net: net_namespace: Optimize the code
net: ipv4: Move ip_options_fragment() out of loop
net: ipv4: Fix the warning for dereference
Yang Yang (1):
net: ipv4: add capability check for net administration
Yang Yingliang (4):
can: m_can: use devm_platform_ioremap_resource_byname
nfp: flower-ct: fix error return code in nfp_fl_ct_add_offload()
octeontx2-pf: cn10k: Fix error return code in otx2_set_flowkey_cfg()
net: w5100: check return value after calling platform_get_resource()
Yevgeny Kliteynik (16):
net/mlx5: DR, Added support for REMOVE_HEADER packet reformat
net/mlx5: DR, Split modify VLAN state to separate pop/push states
net/mlx5: DR, Enable VLAN pop on TX and VLAN push on RX
net/mlx5: DR, Enable QP retransmission
net/mlx5: DR, Improve error flow in actions_build_ste_arr
net/mlx5: DR, Warn and ignore SW steering rule insertion on QP err
net/mlx5: DR, Support IPv6 matching on flow label for STEv0
net/mlx5: DR, replace uintN_t with kernel-style types
net/mlx5: DR, Use FW API when updating FW-owned flow table
net/mlx5: DR, Add ignore_flow_level support for multi-dest flow tables
net/mlx5: DR, Skip source port matching on FDB RX domain
net/mlx5: DR, Merge DR_STE_SIZE enums
net/mlx5: DR, Remove HW specific STE type from nic domain
net/mlx5: DR, Remove rehash ctrl struct from dr_htbl
net/mlx5: DR, Improve rule tracking memory consumption
net/mlx5: DR, Add support for update FTE
Yinjun Zhang (2):
nfp: flower: make the match compilation functions reusable
nfp: add support for coalesce adaptive feature
Yonghong Song (4):
bpf: Emit better log message if bpf_iter ctx arg btf_id == 0
selftests/bpf: Replace CHECK with ASSERT_* macros in send_signal.c
selftests/bpf: Fix flaky send_signal test
bpf: Fix NULL event->prog pointer access in bpf_overflow_handler
Yonglong Li (6):
mptcp: move drop_other_suboptions check under pm lock
mptcp: make MPTCP_ADD_ADDR_SIGNAL and MPTCP_ADD_ADDR_ECHO separate
mptcp: fix ADD_ADDR and RM_ADDR maybe flush addr_signal each other
mptcp: build ADD_ADDR/echo-ADD_ADDR option according pm.add_signal
mptcp: remove MPTCP_ADD_ADDR_IPV6 and MPTCP_ADD_ADDR_PORT
selftests: mptcp: add_addr and echo race test
Yuchung Cheng (1):
tcp: more accurately detect spurious TLP probes
Yucong Sun (9):
selftests/bpf: Add exponential backoff to map_update_retriable in test_maps
selftests/bpf: Add exponential backoff to map_delete_retriable in test_maps
selftests/bpf: Skip loading bpf_testmod when using -l to list tests.
selftests/bpf: Correctly display subtest skip status
selftests/bpf: Also print test name in subtest status message
selftests/bpf: Support glob matching for test selector.
selftests/bpf: Adding delay in socketmap_listen to reduce flakyness
selftests/bpf: Reduce flakyness in timer_mim
selftests/bpf: Reduce more flakyness in sockmap_listen
YueHaibing (1):
mac80211: Reject zero MAC address in sta_info_insert_check()
Yufeng Mo (11):
net: hns3: add support for registering devlink for PF
net: hns3: add support for registering devlink for VF
net: hns3: add support for devlink get info for PF
net: hns3: add support for devlink get info for VF
bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
net: hns3: add support for triggering reset by ethtool
ethtool: add two coalesce attributes for CQE mode
ethtool: extend coalesce setting uAPI with CQE mode
net: hns3: add support for EQE/CQE mode configuration
net: hns3: add ethtool support for CQE/EQE mode configuration
net: hns3: add trace event in hclge_gen_resp_to_vf()
Yunsheng Lin (6):
page_pool: keep pp info as long as page pool owns the page
page_pool: add interface to manipulate frag count in page pool
page_pool: add frag page recycling support in page pool
net: hns3: support skb's frag page recycling based on page pool
page_pool: use relaxed atomic for release side accounting
sock: remove one redundant SKB_FRAG_PAGE_ORDER macro
Zekun Shen (1):
ath9k: fix OOB read ar9300_eeprom_restore_internal
Zenghui Yu (2):
bcma: Fix memory leak for internally-handled cores
bcma: Drop the unused parameter of bcma_scan_read32()
Zhang Qilong (1):
iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
Zhen Lei (3):
can: esd_usb2: use DEVICE_ATTR_RO() helper macro
can: janz-ican3: use DEVICE_ATTR_RO/RW() helper macro
can: at91_can: use DEVICE_ATTR_RW() helper macro
Zheng Yongjun (1):
iwlwifi: use DEFINE_MUTEX() for mutex lock
Zvi Effron (4):
bpf: Add function for XDP meta data length check
bpf: Support input xdp_md context in BPF_PROG_TEST_RUN
bpf: Support specifying ingress via xdp_md context in BPF_PROG_TEST_RUN
selftests/bpf: Add test for xdp_md context in BPF_PROG_TEST_RUN
chongjiapeng (1):
net: phy: Remove unused including <linux/version.h>
dingsenjie (2):
libertas: Remove unnecessary label of lbs_ethtool_get_eeprom
mac80211: Remove unnecessary variable and label
grantseltzer (1):
bpf: Reconfigure libbpf docs to remove unversioned API
gushengxian (1):
can: j1939: j1939_sk_sock_destruct(): correct a grammatical error
jing yangyang (1):
tools/net: Use bitwise instead of arithmetic operator for flags
mark-yw.chen (4):
Bluetooth: btusb: Enable MSFT extension for Mediatek Chip (MT7921)
Bluetooth: btusb: Record debug log for Mediatek Chip.
Bluetooth: btusb: Support Bluetooth Reset for Mediatek Chip(MT7921)
Bluetooth: btusb: Fix fall-through warnings
wengjianfeng (2):
nfc: s3fwrn5: remove unnecessary label
wilc1000: remove redundant code
zhouchuangao (1):
qed: Remove duplicated include of kernel.h
王贇 (1):
net: fix NULL pointer reference in cipso_v4_doi_free
.mailmap | 2 +
Documentation/admin-guide/kernel-parameters.txt | 2 -
Documentation/bpf/index.rst | 10 +-
Documentation/bpf/libbpf/{libbpf.rst => index.rst} | 8 +
Documentation/bpf/libbpf/libbpf_api.rst | 27 -
.../bpf/libbpf/libbpf_naming_convention.rst | 2 +-
.../devicetree/bindings/net/brcm,unimac-mdio.txt | 43 -
.../devicetree/bindings/net/brcm,unimac-mdio.yaml | 84 +
.../devicetree/bindings/net/can/bosch,c_can.yaml | 119 +
.../devicetree/bindings/net/can/bosch,m_can.yaml | 9 +
.../devicetree/bindings/net/can/c_can.txt | 65 -
.../bindings/net/can/can-controller.yaml | 9 +
.../devicetree/bindings/net/can/fsl,flexcan.yaml | 17 +
.../bindings/net/can/renesas,rcar-canfd.yaml | 69 +-
Documentation/devicetree/bindings/net/fsl,fec.yaml | 244 ++
Documentation/devicetree/bindings/net/fsl-fec.txt | 95 -
.../bindings/net/intel,ixp46x-ptp-timer.yaml | 54 +
.../devicetree/bindings/net/litex,liteeth.yaml | 98 +
Documentation/devicetree/bindings/net/macb.txt | 1 +
.../devicetree/bindings/net/qcom,ipa.yaml | 24 +-
.../devicetree/bindings/net/qcom,ipq4019-mdio.yaml | 15 +-
Documentation/driver-api/nfc/nfc-hci.rst | 2 +-
Documentation/networking/batman-adv.rst | 2 +-
Documentation/networking/bonding.rst | 12 +
.../ethernet/freescale/dpaa2/index.rst | 1 +
.../ethernet/freescale/dpaa2/switch-driver.rst | 217 ++
.../device_drivers/ethernet/mellanox/mlx5.rst | 44 +
.../networking/devlink/devlink-params.rst | 12 +
Documentation/networking/devlink/hns3.rst | 25 +
Documentation/networking/devlink/index.rst | 2 +-
Documentation/networking/devlink/sja1105.rst | 49 -
Documentation/networking/dsa/dsa.rst | 29 +-
Documentation/networking/dsa/sja1105.rst | 218 +-
Documentation/networking/ethtool-netlink.rst | 23 +
Documentation/networking/filter.rst | 27 +-
Documentation/networking/index.rst | 2 +
Documentation/networking/ioam6-sysctl.rst | 26 +
Documentation/networking/ip-sysctl.rst | 17 +
Documentation/networking/mctp.rst | 213 ++
Documentation/networking/mptcp-sysctl.rst | 12 +
Documentation/networking/netdevices.rst | 29 +
Documentation/networking/nf_conntrack-sysctl.rst | 7 +
Documentation/networking/pktgen.rst | 18 +-
Documentation/networking/timestamping.rst | 6 +-
Documentation/networking/vrf.rst | 13 +
MAINTAINERS | 47 +-
arch/alpha/include/uapi/asm/socket.h | 2 +
arch/arm/boot/dts/imx35.dtsi | 2 +-
arch/arm/boot/dts/imx6q-novena.dts | 34 +-
arch/arm/boot/dts/imx6qdl-aristainetos2.dtsi | 18 +-
arch/arm/boot/dts/imx6qdl-nit6xlite.dtsi | 34 +-
arch/arm/boot/dts/imx6qdl-nitrogen6_max.dtsi | 34 +-
arch/arm/boot/dts/imx6qdl-nitrogen6x.dtsi | 34 +-
arch/arm/boot/dts/imx6qdl-sabrelite.dtsi | 34 +-
arch/arm/boot/dts/imx7-mba7.dtsi | 1 -
arch/arm/boot/dts/imx7d-mba7.dts | 1 -
arch/arm/mach-ixp4xx/common.c | 14 +
arch/arm64/boot/dts/freescale/imx8mm.dtsi | 2 +-
arch/arm64/boot/dts/freescale/imx8mn.dtsi | 2 +-
arch/arm64/boot/dts/freescale/imx8qxp-ss-conn.dtsi | 4 +-
arch/arm64/boot/dts/microchip/sparx5.dtsi | 5 +-
arch/arm64/include/asm/compat.h | 14 +-
arch/mips/include/asm/compat.h | 24 +-
arch/mips/include/uapi/asm/socket.h | 2 +
arch/parisc/include/asm/compat.h | 14 +-
arch/parisc/include/uapi/asm/socket.h | 2 +
arch/powerpc/include/asm/compat.h | 11 -
arch/s390/include/asm/ccwgroup.h | 2 -
arch/s390/include/asm/compat.h | 14 +-
arch/sparc/include/asm/compat.h | 14 +-
arch/sparc/include/uapi/asm/socket.h | 2 +
arch/um/drivers/vector_kern.c | 8 +-
arch/x86/include/asm/compat.h | 14 +-
arch/x86/include/asm/signal.h | 1 +
arch/x86/net/bpf_jit_comp.c | 19 +
drivers/atm/horizon.c | 6 +-
drivers/atm/idt77252.c | 2 +-
drivers/bcma/main.c | 6 +-
drivers/bcma/scan.c | 7 +-
drivers/bluetooth/btbcm.c | 1 +
drivers/bluetooth/btintel.c | 1314 ++++++++-
drivers/bluetooth/btintel.h | 119 +-
drivers/bluetooth/btmrvl_sdio.c | 29 +-
drivers/bluetooth/btrsi.c | 2 +-
drivers/bluetooth/btrtl.c | 10 +-
drivers/bluetooth/btusb.c | 1510 +++-------
drivers/bluetooth/hci_bcm.c | 6 +
drivers/bluetooth/hci_h5.c | 116 +-
drivers/bluetooth/hci_serdev.c | 3 +
drivers/bluetooth/hci_uart.h | 7 +-
drivers/bus/fsl-mc/fsl-mc-bus.c | 4 +-
drivers/bus/mhi/pci_generic.c | 4 +
drivers/char/pcmcia/synclink_cs.c | 23 +-
drivers/infiniband/hw/mlx5/cq.c | 2 +-
drivers/infiniband/hw/mlx5/devx.c | 7 +-
drivers/infiniband/hw/mlx5/ib_rep.c | 77 +-
drivers/infiniband/hw/mlx5/main.c | 44 +-
drivers/infiniband/hw/mlx5/std_types.c | 10 +-
drivers/infiniband/ulp/ipoib/ipoib_ethtool.c | 8 +-
drivers/infiniband/ulp/ipoib/ipoib_main.c | 8 +-
drivers/media/rc/bpf-lirc.c | 6 +-
drivers/net/Kconfig | 17 +-
drivers/net/Makefile | 6 +-
drivers/net/Space.c | 178 +-
drivers/net/appletalk/Kconfig | 4 +-
drivers/net/appletalk/ipddp.c | 16 +-
drivers/net/appletalk/ltpc.c | 7 +-
drivers/net/bonding/bond_3ad.c | 11 +-
drivers/net/bonding/bond_alb.c | 32 -
drivers/net/bonding/bond_main.c | 591 +++-
drivers/net/bonding/bond_netlink.c | 16 +
drivers/net/bonding/bond_options.c | 27 +
drivers/net/bonding/bond_procfs.c | 2 +
drivers/net/bonding/bond_sysfs.c | 25 +-
drivers/net/can/Kconfig | 3 +-
drivers/net/can/at91_can.c | 137 +-
drivers/net/can/c_can/c_can.h | 25 +-
drivers/net/can/c_can/c_can_main.c | 123 +-
drivers/net/can/c_can/c_can_platform.c | 1 -
drivers/net/can/dev/dev.c | 66 +
drivers/net/can/dev/netlink.c | 11 +-
drivers/net/can/dev/rx-offload.c | 90 +-
drivers/net/can/flexcan.c | 129 +-
drivers/net/can/janz-ican3.c | 23 +-
drivers/net/can/m_can/m_can.c | 266 +-
drivers/net/can/m_can/m_can.h | 11 +-
drivers/net/can/m_can/m_can_pci.c | 11 +-
drivers/net/can/m_can/m_can_platform.c | 31 +-
drivers/net/can/m_can/tcan4x5x-core.c | 17 +-
drivers/net/can/mscan/mpc5xxx_can.c | 7 +-
drivers/net/can/rcar/Kconfig | 4 +-
drivers/net/can/rcar/rcar_canfd.c | 338 ++-
drivers/net/can/sja1000/peak_pci.c | 119 +-
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 30 +-
.../net/can/spi/mcp251xfd/mcp251xfd-timestamp.c | 4 +-
drivers/net/can/spi/mcp251xfd/mcp251xfd.h | 2 +-
drivers/net/can/ti_hecc.c | 2 +
drivers/net/can/usb/esd_usb2.c | 12 +-
drivers/net/can/usb/etas_es58x/es581_4.c | 5 +-
drivers/net/can/usb/etas_es58x/es58x_core.c | 82 +-
drivers/net/can/usb/etas_es58x/es58x_core.h | 2 +-
drivers/net/can/usb/etas_es58x/es58x_fd.c | 19 +-
drivers/net/can/usb/etas_es58x/es58x_fd.h | 23 +-
drivers/net/can/usb/peak_usb/pcan_usb.c | 228 +-
drivers/net/dsa/b53/b53_common.c | 10 -
drivers/net/dsa/b53/b53_priv.h | 2 -
drivers/net/dsa/bcm_sf2.c | 1 -
drivers/net/dsa/hirschmann/hellcreek.c | 1 +
drivers/net/dsa/mt7530.c | 173 +-
drivers/net/dsa/mt7530.h | 23 +-
drivers/net/dsa/mv88e6xxx/Kconfig | 1 +
drivers/net/dsa/mv88e6xxx/chip.c | 103 +-
drivers/net/dsa/ocelot/Kconfig | 2 +
drivers/net/dsa/ocelot/felix.c | 153 +-
drivers/net/dsa/ocelot/felix.h | 2 +-
drivers/net/dsa/sja1105/Kconfig | 1 +
drivers/net/dsa/sja1105/sja1105.h | 33 +-
drivers/net/dsa/sja1105/sja1105_devlink.c | 114 +-
drivers/net/dsa/sja1105/sja1105_dynamic_config.c | 6 +-
drivers/net/dsa/sja1105/sja1105_main.c | 1960 +++++--------
drivers/net/dsa/sja1105/sja1105_spi.c | 10 -
drivers/net/dsa/sja1105/sja1105_vl.c | 14 +-
drivers/net/eql.c | 24 +-
drivers/net/ethernet/3com/3c509.c | 7 +-
drivers/net/ethernet/3com/3c515.c | 3 +-
drivers/net/ethernet/3com/3c574_cs.c | 2 +-
drivers/net/ethernet/3com/3c59x.c | 4 +-
drivers/net/ethernet/3com/Kconfig | 1 +
drivers/net/ethernet/8390/Kconfig | 3 +
drivers/net/ethernet/8390/apne.c | 11 +-
drivers/net/ethernet/8390/ax88796.c | 9 +-
drivers/net/ethernet/8390/axnet_cs.c | 2 +-
drivers/net/ethernet/8390/ne.c | 5 +-
drivers/net/ethernet/8390/pcnet_cs.c | 2 +-
drivers/net/ethernet/8390/smc-ultra.c | 9 +-
drivers/net/ethernet/8390/wd.c | 7 +-
drivers/net/ethernet/8390/xsurf100.c | 9 +-
drivers/net/ethernet/Kconfig | 1 +
drivers/net/ethernet/Makefile | 1 +
drivers/net/ethernet/actions/Kconfig | 4 +-
drivers/net/ethernet/actions/owl-emac.c | 6 +-
drivers/net/ethernet/adaptec/starfire.c | 2 +-
drivers/net/ethernet/agere/et131x.c | 2 +-
drivers/net/ethernet/allwinner/sun4i-emac.c | 2 +-
drivers/net/ethernet/amazon/ena/ena_ethtool.c | 8 +-
drivers/net/ethernet/amd/Kconfig | 4 +-
drivers/net/ethernet/amd/amd8111e.c | 2 +-
drivers/net/ethernet/amd/atarilance.c | 11 +-
drivers/net/ethernet/amd/au1000_eth.c | 2 +-
drivers/net/ethernet/amd/lance.c | 6 +-
drivers/net/ethernet/amd/mvme147.c | 16 +-
drivers/net/ethernet/amd/ni65.c | 6 +-
drivers/net/ethernet/amd/pcnet32.c | 2 +-
drivers/net/ethernet/amd/sun3lance.c | 19 +-
drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 8 +-
.../net/ethernet/aquantia/atlantic/aq_ethtool.c | 8 +-
drivers/net/ethernet/aquantia/atlantic/aq_main.c | 2 +-
.../net/ethernet/aquantia/atlantic/aq_pci_func.c | 15 +-
drivers/net/ethernet/arc/emac_main.c | 2 +-
drivers/net/ethernet/atheros/ag71xx.c | 2 +-
drivers/net/ethernet/atheros/alx/main.c | 2 +-
drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 2 +-
drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 2 +-
drivers/net/ethernet/atheros/atlx/atl1.c | 2 +-
drivers/net/ethernet/atheros/atlx/atl2.c | 2 +-
drivers/net/ethernet/broadcom/Kconfig | 6 +-
drivers/net/ethernet/broadcom/b44.c | 2 +-
drivers/net/ethernet/broadcom/bcm63xx_enet.c | 5 +-
drivers/net/ethernet/broadcom/bcmsysport.c | 8 +-
drivers/net/ethernet/broadcom/bgmac.c | 2 +-
drivers/net/ethernet/broadcom/bnx2.c | 70 +-
.../net/ethernet/broadcom/bnx2x/bnx2x_ethtool.c | 8 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 2 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 6 -
drivers/net/ethernet/broadcom/bnxt/Makefile | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2312 ++++++++--------
drivers/net/ethernet/broadcom/bnxt/bnxt.h | 135 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 185 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c | 90 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 573 ++--
drivers/net/ethernet/broadcom/bnxt/bnxt_hwrm.c | 763 +++++
drivers/net/ethernet/broadcom/bnxt/bnxt_hwrm.h | 145 +
drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c | 391 ++-
drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.h | 53 +
drivers/net/ethernet/broadcom/bnxt/bnxt_sriov.c | 455 +--
drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c | 264 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.c | 31 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_vfr.c | 62 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +-
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 12 +-
drivers/net/ethernet/broadcom/sb1250-mac.c | 2 +-
drivers/net/ethernet/broadcom/tg3.c | 81 +-
drivers/net/ethernet/brocade/bna/bnad_ethtool.c | 12 +-
drivers/net/ethernet/cadence/Kconfig | 1 +
drivers/net/ethernet/cadence/macb_main.c | 13 +-
drivers/net/ethernet/cavium/Kconfig | 4 +-
drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 8 +-
drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
drivers/net/ethernet/cavium/liquidio/lio_vf_main.c | 6 +-
drivers/net/ethernet/cavium/octeon/octeon_mgmt.c | 2 +-
drivers/net/ethernet/cavium/thunder/nic_main.c | 8 +-
.../net/ethernet/cavium/thunder/nicvf_ethtool.c | 4 +-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 10 +-
drivers/net/ethernet/chelsio/Kconfig | 1 +
drivers/net/ethernet/chelsio/cxgb/cxgb2.c | 10 +-
drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 32 +-
drivers/net/ethernet/chelsio/cxgb3/sge.c | 101 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 8 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_filter.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 17 +-
drivers/net/ethernet/chelsio/cxgb4/sge.c | 8 +-
.../net/ethernet/chelsio/cxgb4vf/cxgb4vf_main.c | 20 +-
drivers/net/ethernet/chelsio/cxgb4vf/sge.c | 8 +-
drivers/net/ethernet/cirrus/Kconfig | 27 +-
drivers/net/ethernet/cirrus/cs89x0.c | 31 +-
drivers/net/ethernet/cirrus/ep93xx_eth.c | 2 +-
drivers/net/ethernet/cisco/enic/enic_ethtool.c | 8 +-
drivers/net/ethernet/cortina/gemini.c | 8 +-
drivers/net/ethernet/davicom/dm9000.c | 2 +-
drivers/net/ethernet/dec/tulip/de4x5.c | 11 +-
drivers/net/ethernet/dec/tulip/media.c | 2 +-
drivers/net/ethernet/dec/tulip/tulip_core.c | 2 +-
drivers/net/ethernet/dec/tulip/winbond-840.c | 2 +-
drivers/net/ethernet/dlink/dl2k.c | 2 +-
drivers/net/ethernet/dlink/sundance.c | 2 +-
drivers/net/ethernet/dnet.c | 2 +-
drivers/net/ethernet/ec_bhf.c | 10 +-
drivers/net/ethernet/emulex/benet/be_ethtool.c | 8 +-
drivers/net/ethernet/ethoc.c | 2 +-
drivers/net/ethernet/faraday/ftgmac100.c | 2 +-
drivers/net/ethernet/faraday/ftmac100.c | 2 +-
drivers/net/ethernet/fealnx.c | 2 +-
drivers/net/ethernet/freescale/Kconfig | 2 +-
drivers/net/ethernet/freescale/dpaa/Kconfig | 1 -
drivers/net/ethernet/freescale/dpaa/dpaa_eth.c | 2 +-
drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 8 +-
drivers/net/ethernet/freescale/dpaa2/Makefile | 2 +-
.../ethernet/freescale/dpaa2/dpaa2-eth-devlink.c | 7 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 4 +-
.../net/ethernet/freescale/dpaa2/dpaa2-ethtool.c | 8 +-
.../freescale/dpaa2/dpaa2-switch-ethtool.c | 56 +-
.../ethernet/freescale/dpaa2/dpaa2-switch-flower.c | 530 +++-
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 384 ++-
.../net/ethernet/freescale/dpaa2/dpaa2-switch.h | 62 +-
drivers/net/ethernet/freescale/dpaa2/dpsw-cmd.h | 19 +
drivers/net/ethernet/freescale/dpaa2/dpsw.c | 80 +
drivers/net/ethernet/freescale/dpaa2/dpsw.h | 36 +
.../net/ethernet/freescale/enetc/enetc_ethtool.c | 8 +-
drivers/net/ethernet/freescale/enetc/enetc_pf.c | 2 +-
drivers/net/ethernet/freescale/enetc/enetc_vf.c | 2 +-
drivers/net/ethernet/freescale/fec.h | 31 +
drivers/net/ethernet/freescale/fec_main.c | 212 +-
drivers/net/ethernet/freescale/fec_mpc52xx.c | 2 +-
.../net/ethernet/freescale/fs_enet/fs_enet-main.c | 2 +-
drivers/net/ethernet/freescale/gianfar.c | 2 +-
drivers/net/ethernet/freescale/gianfar_ethtool.c | 8 +-
drivers/net/ethernet/freescale/ucc_geth.c | 2 +-
drivers/net/ethernet/google/gve/gve_adminq.c | 6 +-
drivers/net/ethernet/hisilicon/Kconfig | 4 +-
drivers/net/ethernet/hisilicon/hip04_eth.c | 8 +-
drivers/net/ethernet/hisilicon/hisi_femac.c | 2 +-
drivers/net/ethernet/hisilicon/hns/hns_enet.c | 2 +-
drivers/net/ethernet/hisilicon/hns/hns_ethtool.c | 12 +-
drivers/net/ethernet/hisilicon/hns3/hclge_mbx.h | 2 +-
drivers/net/ethernet/hisilicon/hns3/hnae3.h | 5 +-
drivers/net/ethernet/hisilicon/hns3/hns3_debugfs.c | 17 +-
drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 228 +-
drivers/net/ethernet/hisilicon/hns3/hns3_enet.h | 37 +-
drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.c | 265 +-
drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.h | 31 +
.../net/ethernet/hisilicon/hns3/hns3pf/Makefile | 2 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.c | 75 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.h | 34 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 51 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_debugfs.c | 70 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_devlink.c | 148 +
.../ethernet/hisilicon/hns3/hns3pf/hclge_devlink.h | 15 +
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_err.c | 1665 +++++++----
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 186 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 30 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 11 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_ptp.h | 2 +-
.../net/ethernet/hisilicon/hns3/hns3vf/Makefile | 2 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_cmd.c | 29 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_cmd.h | 16 +-
.../hisilicon/hns3/hns3vf/hclgevf_devlink.c | 150 +
.../hisilicon/hns3/hns3vf/hclgevf_devlink.h | 15 +
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 31 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 25 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_mbx.c | 122 +-
drivers/net/ethernet/huawei/hinic/hinic_devlink.c | 8 +-
drivers/net/ethernet/huawei/hinic/hinic_devlink.h | 4 +-
drivers/net/ethernet/huawei/hinic/hinic_ethtool.c | 8 +-
drivers/net/ethernet/huawei/hinic/hinic_hw_dev.c | 2 +-
drivers/net/ethernet/huawei/hinic/hinic_main.c | 19 +-
drivers/net/ethernet/huawei/hinic/hinic_sriov.c | 6 +-
drivers/net/ethernet/i825xx/82596.c | 24 +-
drivers/net/ethernet/i825xx/sun3_82586.c | 17 +-
drivers/net/ethernet/ibm/emac/core.c | 4 +-
drivers/net/ethernet/ibm/ibmveth.c | 2 +-
drivers/net/ethernet/intel/Kconfig | 12 +-
drivers/net/ethernet/intel/e100.c | 6 +-
drivers/net/ethernet/intel/e1000/e1000_ethtool.c | 8 +-
drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +-
drivers/net/ethernet/intel/e1000e/ethtool.c | 10 +-
drivers/net/ethernet/intel/e1000e/hw.h | 9 +
drivers/net/ethernet/intel/e1000e/ich8lan.c | 13 +-
drivers/net/ethernet/intel/e1000e/ich8lan.h | 3 +
drivers/net/ethernet/intel/e1000e/netdev.c | 372 +--
drivers/net/ethernet/intel/e1000e/ptp.c | 1 +
drivers/net/ethernet/intel/e1000e/regs.h | 1 +
drivers/net/ethernet/intel/fm10k/fm10k_ethtool.c | 8 +-
drivers/net/ethernet/intel/i40e/i40e.h | 78 +
drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 12 +-
drivers/net/ethernet/intel/i40e/i40e_main.c | 32 +-
drivers/net/ethernet/intel/i40e/i40e_ptp.c | 756 ++++-
drivers/net/ethernet/intel/i40e/i40e_register.h | 29 +
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 23 +-
drivers/net/ethernet/intel/iavf/iavf.h | 9 +-
drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 22 +-
drivers/net/ethernet/intel/iavf/iavf_main.c | 122 +-
drivers/net/ethernet/intel/ice/ice_devlink.c | 4 +-
drivers/net/ethernet/intel/ice/ice_ethtool.c | 12 +-
drivers/net/ethernet/intel/ice/ice_main.c | 19 +-
drivers/net/ethernet/intel/ice/ice_ptp.c | 66 +-
drivers/net/ethernet/intel/igb/e1000_mac.c | 6 +-
drivers/net/ethernet/intel/igb/igb_ethtool.c | 11 +-
drivers/net/ethernet/intel/igb/igb_main.c | 2 +-
drivers/net/ethernet/intel/igbvf/ethtool.c | 8 +-
drivers/net/ethernet/intel/igbvf/netdev.c | 2 +-
drivers/net/ethernet/intel/igc/igc.h | 50 +-
drivers/net/ethernet/intel/igc/igc_base.c | 10 +-
drivers/net/ethernet/intel/igc/igc_defines.h | 91 +-
drivers/net/ethernet/intel/igc/igc_ethtool.c | 49 +-
drivers/net/ethernet/intel/igc/igc_main.c | 465 +++-
drivers/net/ethernet/intel/igc/igc_phy.c | 6 +-
drivers/net/ethernet/intel/igc/igc_ptp.c | 179 ++
drivers/net/ethernet/intel/igc/igc_regs.h | 43 +
drivers/net/ethernet/intel/igc/igc_tsn.c | 176 +-
drivers/net/ethernet/intel/igc/igc_tsn.h | 1 +
drivers/net/ethernet/intel/ixgbe/ixgbe_ethtool.c | 8 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 2 +-
drivers/net/ethernet/intel/ixgbevf/ethtool.c | 8 +-
drivers/net/ethernet/jme.c | 84 +-
drivers/net/ethernet/korina.c | 2 +-
drivers/net/ethernet/lantiq_etop.c | 2 +-
drivers/net/ethernet/litex/Kconfig | 28 +
drivers/net/ethernet/litex/Makefile | 5 +
drivers/net/ethernet/litex/litex_liteeth.c | 314 +++
drivers/net/ethernet/marvell/mv643xx_eth.c | 14 +-
drivers/net/ethernet/marvell/mvneta.c | 44 +-
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 27 +-
drivers/net/ethernet/marvell/octeontx2/Kconfig | 4 +-
drivers/net/ethernet/marvell/octeontx2/af/Makefile | 5 +-
drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 5 +-
drivers/net/ethernet/marvell/octeontx2/af/cgx.h | 7 +-
.../net/ethernet/marvell/octeontx2/af/cgx_fw_if.h | 7 +-
drivers/net/ethernet/marvell/octeontx2/af/common.h | 31 +-
.../ethernet/marvell/octeontx2/af/lmac_common.h | 3 +-
drivers/net/ethernet/marvell/octeontx2/af/mbox.c | 9 +-
drivers/net/ethernet/marvell/octeontx2/af/mbox.h | 114 +-
drivers/net/ethernet/marvell/octeontx2/af/npc.h | 9 +-
.../ethernet/marvell/octeontx2/af/npc_profile.h | 7 +-
drivers/net/ethernet/marvell/octeontx2/af/ptp.c | 46 +-
drivers/net/ethernet/marvell/octeontx2/af/ptp.h | 3 +-
drivers/net/ethernet/marvell/octeontx2/af/rpm.c | 2 +-
drivers/net/ethernet/marvell/octeontx2/af/rpm.h | 2 +-
drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 226 +-
drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 65 +-
.../net/ethernet/marvell/octeontx2/af/rvu_cgx.c | 19 +-
.../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 127 +-
.../net/ethernet/marvell/octeontx2/af/rvu_cpt.c | 6 +-
.../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 7 +-
.../ethernet/marvell/octeontx2/af/rvu_devlink.c | 117 +-
.../ethernet/marvell/octeontx2/af/rvu_devlink.h | 2 +-
.../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 706 ++++-
.../net/ethernet/marvell/octeontx2/af/rvu_npa.c | 18 +-
.../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 135 +-
.../net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 76 +-
.../net/ethernet/marvell/octeontx2/af/rvu_reg.c | 11 +-
.../net/ethernet/marvell/octeontx2/af/rvu_reg.h | 16 +-
.../net/ethernet/marvell/octeontx2/af/rvu_sdp.c | 108 +
.../net/ethernet/marvell/octeontx2/af/rvu_struct.h | 7 +-
.../net/ethernet/marvell/octeontx2/af/rvu_switch.c | 3 +-
.../net/ethernet/marvell/octeontx2/af/rvu_trace.c | 5 +-
.../net/ethernet/marvell/octeontx2/af/rvu_trace.h | 15 +-
.../net/ethernet/marvell/octeontx2/nic/Makefile | 7 +-
drivers/net/ethernet/marvell/octeontx2/nic/cn10k.c | 8 +-
drivers/net/ethernet/marvell/octeontx2/nic/cn10k.h | 21 +-
.../ethernet/marvell/octeontx2/nic/otx2_common.c | 84 +-
.../ethernet/marvell/octeontx2/nic/otx2_common.h | 46 +-
.../ethernet/marvell/octeontx2/nic/otx2_devlink.c | 156 ++
.../ethernet/marvell/octeontx2/nic/otx2_devlink.h | 20 +
.../ethernet/marvell/octeontx2/nic/otx2_dmac_flt.c | 3 +-
.../ethernet/marvell/octeontx2/nic/otx2_ethtool.c | 72 +-
.../ethernet/marvell/octeontx2/nic/otx2_flows.c | 154 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 69 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_ptp.c | 5 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_ptp.h | 6 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_reg.h | 7 +-
.../ethernet/marvell/octeontx2/nic/otx2_struct.h | 7 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 58 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 7 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_txrx.h | 7 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_vf.c | 42 +-
.../ethernet/marvell/prestera/prestera_devlink.c | 7 +-
.../ethernet/marvell/prestera/prestera_devlink.h | 2 +-
.../net/ethernet/marvell/prestera/prestera_main.c | 5 +-
.../ethernet/marvell/prestera/prestera_switchdev.c | 12 +-
.../ethernet/marvell/prestera/prestera_switchdev.h | 3 +-
drivers/net/ethernet/marvell/pxa168_eth.c | 2 +-
drivers/net/ethernet/marvell/skge.c | 10 +-
drivers/net/ethernet/marvell/sky2.c | 14 +-
drivers/net/ethernet/mediatek/mtk_eth_soc.c | 2 +-
drivers/net/ethernet/mediatek/mtk_star_emac.c | 2 +-
drivers/net/ethernet/mellanox/mlx4/Kconfig | 2 +-
drivers/net/ethernet/mellanox/mlx4/en_ethtool.c | 8 +-
drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 2 +-
drivers/net/ethernet/mellanox/mlx4/en_rx.c | 4 +-
drivers/net/ethernet/mellanox/mlx4/en_tx.c | 14 +-
drivers/net/ethernet/mellanox/mlx4/main.c | 17 +-
drivers/net/ethernet/mellanox/mlx4/qp.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/Kconfig | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/Makefile | 18 +-
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 8 +-
drivers/net/ethernet/mellanox/mlx5/core/cq.c | 3 +-
drivers/net/ethernet/mellanox/mlx5/core/dev.c | 76 +-
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 176 +-
drivers/net/ethernet/mellanox/mlx5/core/devlink.h | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/en.h | 84 +-
.../net/ethernet/mellanox/mlx5/core/en/channels.c | 46 +
.../net/ethernet/mellanox/mlx5/core/en/channels.h | 16 +
.../net/ethernet/mellanox/mlx5/core/en/devlink.c | 10 +-
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 99 +-
.../mellanox/mlx5/core/en/fs_tt_redirect.c | 30 +-
.../mellanox/mlx5/core/en/fs_tt_redirect.h | 2 +-
.../net/ethernet/mellanox/mlx5/core/en/mapping.c | 45 +
.../net/ethernet/mellanox/mlx5/core/en/mapping.h | 5 +
.../net/ethernet/mellanox/mlx5/core/en/params.c | 12 +
.../net/ethernet/mellanox/mlx5/core/en/params.h | 6 +
drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c | 24 +-
drivers/net/ethernet/mellanox/mlx5/core/en/qos.c | 17 +-
drivers/net/ethernet/mellanox/mlx5/core/en/qos.h | 4 +-
.../ethernet/mellanox/mlx5/core/en/rep/bridge.c | 329 ++-
.../net/ethernet/mellanox/mlx5/core/en/rep/tc.c | 48 +-
.../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 8 +-
drivers/net/ethernet/mellanox/mlx5/core/en/rqt.c | 170 ++
drivers/net/ethernet/mellanox/mlx5/core/en/rqt.h | 42 +
drivers/net/ethernet/mellanox/mlx5/core/en/rss.c | 588 ++++
drivers/net/ethernet/mellanox/mlx5/core/en/rss.h | 49 +
.../net/ethernet/mellanox/mlx5/core/en/rx_res.c | 690 +++++
.../net/ethernet/mellanox/mlx5/core/en/rx_res.h | 71 +
.../ethernet/mellanox/mlx5/core/en/tc/post_act.c | 164 ++
.../ethernet/mellanox/mlx5/core/en/tc/post_act.h | 35 +
.../mellanox/mlx5/core/{esw => en/tc}/sample.c | 474 ++--
.../net/ethernet/mellanox/mlx5/core/en/tc/sample.h | 41 +
drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c | 163 +-
drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.h | 6 +-
.../net/ethernet/mellanox/mlx5/core/en/tc_tun.c | 2 +-
.../ethernet/mellanox/mlx5/core/en/tc_tun_encap.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/en/tir.c | 200 ++
drivers/net/ethernet/mellanox/mlx5/core/en/tir.h | 58 +
drivers/net/ethernet/mellanox/mlx5/core/en/trap.c | 27 +-
.../net/ethernet/mellanox/mlx5/core/en/xsk/pool.c | 4 +-
.../net/ethernet/mellanox/mlx5/core/en/xsk/setup.c | 72 +-
.../net/ethernet/mellanox/mlx5/core/en/xsk/setup.h | 4 -
.../ethernet/mellanox/mlx5/core/en_accel/fs_tcp.c | 12 +-
.../mellanox/mlx5/core/en_accel/ipsec_fs.c | 13 +-
.../ethernet/mellanox/mlx5/core/en_accel/ktls_rx.c | 53 +-
drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c | 25 +-
.../net/ethernet/mellanox/mlx5/core/en_common.c | 29 +-
.../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 140 +-
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 671 +----
.../ethernet/mellanox/mlx5/core/en_fs_ethtool.c | 156 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 871 ++----
drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 172 +-
drivers/net/ethernet/mellanox/mlx5/core/en_rep.h | 8 +-
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 323 ++-
drivers/net/ethernet/mellanox/mlx5/core/en_tc.h | 1 +
.../mellanox/mlx5/core/esw/acl/egress_ofld.c | 16 +
.../net/ethernet/mellanox/mlx5/core/esw/bridge.c | 359 ++-
.../net/ethernet/mellanox/mlx5/core/esw/bridge.h | 46 +-
.../ethernet/mellanox/mlx5/core/esw/bridge_priv.h | 9 +
.../ethernet/mellanox/mlx5/core/esw/devlink_port.c | 26 +
.../mlx5/core/esw/diag/bridge_tracepoint.h | 9 +-
.../mellanox/mlx5/core/esw/diag/qos_tracepoint.h | 123 +
.../ethernet/mellanox/mlx5/core/esw/indir_table.c | 1 +
.../net/ethernet/mellanox/mlx5/core/esw/legacy.c | 20 +
drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 869 ++++++
drivers/net/ethernet/mellanox/mlx5/core/esw/qos.h | 41 +
.../net/ethernet/mellanox/mlx5/core/esw/sample.h | 42 -
drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 358 +--
drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 68 +-
.../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 399 ++-
drivers/net/ethernet/mellanox/mlx5/core/events.c | 2 +-
.../net/ethernet/mellanox/mlx5/core/fpga/conn.c | 2 +-
.../net/ethernet/mellanox/mlx5/core/fpga/ipsec.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/fs_cmd.c | 58 +-
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 6 +-
drivers/net/ethernet/mellanox/mlx5/core/fs_core.h | 2 +
drivers/net/ethernet/mellanox/mlx5/core/health.c | 6 +-
.../ethernet/mellanox/mlx5/core/ipoib/ethtool.c | 8 +-
.../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 76 +-
.../ethernet/mellanox/mlx5/core/ipoib/ipoib_vlan.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/lag.c | 268 +-
drivers/net/ethernet/mellanox/mlx5/core/lag.h | 5 +-
drivers/net/ethernet/mellanox/mlx5/core/lag_mp.c | 10 +-
drivers/net/ethernet/mellanox/mlx5/core/lag_mp.h | 2 +
.../net/ethernet/mellanox/mlx5/core/lib/clock.c | 2 +-
.../net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c | 602 ++++
.../net/ethernet/mellanox/mlx5/core/lib/fs_ttc.h | 70 +
.../net/ethernet/mellanox/mlx5/core/lib/vxlan.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/main.c | 105 +-
.../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 7 +
drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c | 75 +-
.../net/ethernet/mellanox/mlx5/core/sf/dev/dev.c | 2 +-
.../ethernet/mellanox/mlx5/core/sf/dev/driver.c | 2 +-
.../net/ethernet/mellanox/mlx5/core/sf/devlink.c | 10 +-
drivers/net/ethernet/mellanox/mlx5/core/sf/sf.h | 4 +-
.../mellanox/mlx5/core/steering/dr_action.c | 271 +-
.../ethernet/mellanox/mlx5/core/steering/dr_cmd.c | 1 +
.../mellanox/mlx5/core/steering/dr_domain.c | 8 +-
.../ethernet/mellanox/mlx5/core/steering/dr_fw.c | 4 +-
.../mellanox/mlx5/core/steering/dr_matcher.c | 16 +-
.../ethernet/mellanox/mlx5/core/steering/dr_rule.c | 152 +-
.../ethernet/mellanox/mlx5/core/steering/dr_send.c | 19 +-
.../ethernet/mellanox/mlx5/core/steering/dr_ste.c | 36 +-
.../ethernet/mellanox/mlx5/core/steering/dr_ste.h | 2 +-
.../mellanox/mlx5/core/steering/dr_ste_v0.c | 57 +-
.../mellanox/mlx5/core/steering/dr_ste_v1.c | 101 +-
.../mellanox/mlx5/core/steering/dr_types.h | 68 +-
.../ethernet/mellanox/mlx5/core/steering/fs_dr.c | 51 +-
.../mellanox/mlx5/core/steering/mlx5_ifc_dr.h | 6 -
.../ethernet/mellanox/mlx5/core/steering/mlx5dr.h | 4 +-
.../ethernet/mellanox/mlxbf_gige/mlxbf_gige_main.c | 25 +-
.../ethernet/mellanox/mlxbf_gige/mlxbf_gige_mdio.c | 7 +-
drivers/net/ethernet/mellanox/mlxsw/Kconfig | 2 +-
drivers/net/ethernet/mellanox/mlxsw/core.c | 5 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 84 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum.h | 12 +
drivers/net/ethernet/mellanox/mlxsw/spectrum_nve.h | 1 -
.../ethernet/mellanox/mlxsw/spectrum_nve_vxlan.c | 94 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum_ptp.c | 4 +-
.../net/ethernet/mellanox/mlxsw/spectrum_router.c | 44 +-
.../net/ethernet/mellanox/mlxsw/spectrum_router.h | 1 +
.../ethernet/mellanox/mlxsw/spectrum_switchdev.c | 32 +-
drivers/net/ethernet/micrel/ks8851_common.c | 2 +-
drivers/net/ethernet/micrel/ksz884x.c | 2 +-
drivers/net/ethernet/microchip/Kconfig | 1 +
drivers/net/ethernet/microchip/lan743x_main.c | 2 +-
drivers/net/ethernet/microchip/sparx5/Makefile | 2 +-
.../net/ethernet/microchip/sparx5/sparx5_fdma.c | 593 ++++
.../net/ethernet/microchip/sparx5/sparx5_main.c | 23 +-
.../net/ethernet/microchip/sparx5/sparx5_main.h | 69 +
.../net/ethernet/microchip/sparx5/sparx5_packet.c | 13 +-
.../net/ethernet/microchip/sparx5/sparx5_port.c | 2 +-
.../net/ethernet/microchip/sparx5/sparx5_port.h | 1 +
.../ethernet/microchip/sparx5/sparx5_switchdev.c | 24 +-
drivers/net/ethernet/microsoft/mana/gdma.h | 32 +-
drivers/net/ethernet/microsoft/mana/gdma_main.c | 88 +-
drivers/net/ethernet/microsoft/mana/hw_channel.c | 2 +-
drivers/net/ethernet/microsoft/mana/mana.h | 29 +-
drivers/net/ethernet/microsoft/mana/mana_en.c | 162 +-
drivers/net/ethernet/mscc/Kconfig | 3 +-
drivers/net/ethernet/mscc/ocelot.c | 246 +-
drivers/net/ethernet/mscc/ocelot.h | 11 +-
drivers/net/ethernet/mscc/ocelot_net.c | 397 ++-
drivers/net/ethernet/mscc/ocelot_vsc7514.c | 71 +-
drivers/net/ethernet/myricom/myri10ge/myri10ge.c | 71 +-
drivers/net/ethernet/natsemi/jazzsonic.c | 2 -
drivers/net/ethernet/natsemi/natsemi.c | 2 +-
drivers/net/ethernet/natsemi/xtsonic.c | 1 -
drivers/net/ethernet/neterion/s2io.c | 2 +-
drivers/net/ethernet/neterion/vxge/vxge-main.c | 2 +-
drivers/net/ethernet/netronome/Kconfig | 1 +
drivers/net/ethernet/netronome/nfp/flower/action.c | 35 +-
.../net/ethernet/netronome/nfp/flower/conntrack.c | 620 ++++-
.../net/ethernet/netronome/nfp/flower/conntrack.h | 26 +
drivers/net/ethernet/netronome/nfp/flower/main.h | 79 +-
drivers/net/ethernet/netronome/nfp/flower/match.c | 333 ++-
.../net/ethernet/netronome/nfp/flower/metadata.c | 7 +-
.../net/ethernet/netronome/nfp/flower/offload.c | 51 +-
drivers/net/ethernet/netronome/nfp/nfp_main.c | 2 +-
drivers/net/ethernet/netronome/nfp/nfp_net.h | 20 +
.../net/ethernet/netronome/nfp/nfp_net_common.c | 144 +-
.../net/ethernet/netronome/nfp/nfp_net_ethtool.c | 29 +-
drivers/net/ethernet/netronome/nfp/nfp_net_main.c | 2 +-
drivers/net/ethernet/ni/nixge.c | 24 +-
drivers/net/ethernet/nvidia/forcedeth.c | 6 +-
drivers/net/ethernet/nxp/lpc_eth.c | 2 +-
drivers/net/ethernet/oki-semi/pch_gbe/Kconfig | 1 +
.../net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c | 10 +-
.../net/ethernet/oki-semi/pch_gbe/pch_gbe_phy.c | 4 +-
drivers/net/ethernet/packetengines/hamachi.c | 63 +-
drivers/net/ethernet/packetengines/yellowfin.c | 2 +-
drivers/net/ethernet/pasemi/pasemi_mac.c | 32 +-
drivers/net/ethernet/pensando/Kconfig | 2 +-
.../net/ethernet/pensando/ionic/ionic_bus_pci.c | 5 +-
drivers/net/ethernet/pensando/ionic/ionic_dev.c | 41 +-
drivers/net/ethernet/pensando/ionic/ionic_dev.h | 3 +-
.../net/ethernet/pensando/ionic/ionic_devlink.c | 18 +-
.../net/ethernet/pensando/ionic/ionic_ethtool.c | 29 +-
drivers/net/ethernet/pensando/ionic/ionic_if.h | 5 +-
drivers/net/ethernet/pensando/ionic/ionic_lif.c | 303 +-
drivers/net/ethernet/pensando/ionic/ionic_lif.h | 10 +-
drivers/net/ethernet/pensando/ionic/ionic_main.c | 6 +-
drivers/net/ethernet/pensando/ionic/ionic_phc.c | 32 +-
.../net/ethernet/pensando/ionic/ionic_rx_filter.c | 143 +-
.../net/ethernet/pensando/ionic/ionic_rx_filter.h | 14 +-
drivers/net/ethernet/pensando/ionic/ionic_txrx.c | 27 +-
drivers/net/ethernet/qlogic/Kconfig | 2 +-
drivers/net/ethernet/qlogic/netxen/netxen_nic.h | 1 -
.../ethernet/qlogic/netxen/netxen_nic_ethtool.c | 8 +-
drivers/net/ethernet/qlogic/qed/qed.h | 15 -
drivers/net/ethernet/qlogic/qed/qed_dcbx.c | 6 +-
drivers/net/ethernet/qlogic/qed/qed_devlink.c | 7 +-
drivers/net/ethernet/qlogic/qed/qed_int.c | 22 +-
drivers/net/ethernet/qlogic/qed/qed_iwarp.c | 2 -
drivers/net/ethernet/qlogic/qed/qed_main.c | 8 +-
drivers/net/ethernet/qlogic/qed/qed_mcp.c | 1 -
.../net/ethernet/qlogic/qed/qed_nvmetcp_fw_funcs.c | 1 -
drivers/net/ethernet/qlogic/qed/qed_reg_addr.h | 8 +
drivers/net/ethernet/qlogic/qede/qede.h | 13 +-
drivers/net/ethernet/qlogic/qede/qede_ethtool.c | 14 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 33 +-
.../net/ethernet/qlogic/qlcnic/qlcnic_ethtool.c | 10 +-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c | 16 +-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_io.c | 32 +-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_main.c | 6 +-
drivers/net/ethernet/qualcomm/emac/emac.c | 2 +-
drivers/net/ethernet/qualcomm/qca_spi.c | 2 +-
drivers/net/ethernet/qualcomm/qca_uart.c | 2 +-
drivers/net/ethernet/rdc/r6040.c | 2 +-
drivers/net/ethernet/realtek/8139cp.c | 33 +-
drivers/net/ethernet/realtek/8139too.c | 2 +-
drivers/net/ethernet/realtek/r8169_main.c | 69 +-
drivers/net/ethernet/renesas/Kconfig | 2 +-
drivers/net/ethernet/renesas/ravb.h | 36 +-
drivers/net/ethernet/renesas/ravb_main.c | 379 ++-
drivers/net/ethernet/renesas/ravb_ptp.c | 8 +-
drivers/net/ethernet/renesas/sh_eth.c | 4 +-
drivers/net/ethernet/rocker/rocker.h | 3 +-
drivers/net/ethernet/rocker/rocker_main.c | 9 +-
drivers/net/ethernet/rocker/rocker_ofdpa.c | 19 +-
drivers/net/ethernet/samsung/Kconfig | 2 +-
drivers/net/ethernet/samsung/sxgbe/sxgbe_ethtool.c | 8 +-
drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 2 +-
drivers/net/ethernet/sfc/Kconfig | 2 +-
drivers/net/ethernet/sfc/efx.c | 2 +-
drivers/net/ethernet/sfc/ethtool.c | 8 +-
drivers/net/ethernet/sfc/falcon/efx.c | 2 +-
drivers/net/ethernet/sfc/falcon/ethtool.c | 8 +-
drivers/net/ethernet/sgi/ioc3-eth.c | 2 +-
drivers/net/ethernet/sgi/meth.c | 2 +-
drivers/net/ethernet/sis/sis190.c | 2 +-
drivers/net/ethernet/sis/sis900.c | 2 +-
drivers/net/ethernet/smsc/Kconfig | 1 +
drivers/net/ethernet/smsc/epic100.c | 2 +-
drivers/net/ethernet/smsc/smc9194.c | 6 +-
drivers/net/ethernet/smsc/smc91c92_cs.c | 2 +-
drivers/net/ethernet/smsc/smsc911x.c | 2 +-
drivers/net/ethernet/smsc/smsc9420.c | 2 +-
drivers/net/ethernet/socionext/netsec.c | 12 +-
drivers/net/ethernet/socionext/sni_ave.c | 2 +-
drivers/net/ethernet/stmicro/stmmac/Kconfig | 2 +-
drivers/net/ethernet/stmicro/stmmac/common.h | 13 +
.../net/ethernet/stmicro/stmmac/dwmac-ipq806x.c | 18 +-
drivers/net/ethernet/stmicro/stmmac/dwmac4_lib.c | 7 +-
.../net/ethernet/stmicro/stmmac/stmmac_ethtool.c | 75 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 7 +-
drivers/net/ethernet/sun/cassini.c | 2 +-
drivers/net/ethernet/sun/niu.c | 22 +-
drivers/net/ethernet/sun/sungem.c | 2 +-
drivers/net/ethernet/sun/sunhme.c | 24 -
drivers/net/ethernet/synopsys/dwc-xlgmac-ethtool.c | 14 +-
drivers/net/ethernet/synopsys/dwc-xlgmac-net.c | 2 +-
drivers/net/ethernet/tehuti/tehuti.c | 30 +-
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 81 +-
drivers/net/ethernet/ti/am65-cpsw-nuss.h | 2 +
drivers/net/ethernet/ti/cpmac.c | 2 +-
drivers/net/ethernet/ti/cpsw.c | 8 +-
drivers/net/ethernet/ti/cpsw_ethtool.c | 8 +-
drivers/net/ethernet/ti/cpsw_new.c | 28 +-
drivers/net/ethernet/ti/cpsw_priv.h | 8 +-
drivers/net/ethernet/ti/davinci_emac.c | 18 +-
drivers/net/ethernet/ti/netcp_core.c | 2 +-
drivers/net/ethernet/ti/tlan.c | 2 +-
drivers/net/ethernet/toshiba/spider_net.c | 29 +-
drivers/net/ethernet/toshiba/tc35815.c | 2 +-
drivers/net/ethernet/tundra/tsi108_eth.c | 2 +-
drivers/net/ethernet/via/via-rhine.c | 11 +-
drivers/net/ethernet/via/via-velocity.c | 16 +-
drivers/net/ethernet/wiznet/w5100.c | 2 +
drivers/net/ethernet/xilinx/ll_temac_main.c | 16 +-
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 20 +-
drivers/net/ethernet/xilinx/xilinx_emaclite.c | 2 +-
drivers/net/ethernet/xircom/xirc2ps_cs.c | 2 +-
drivers/net/ethernet/xscale/Kconfig | 4 +-
drivers/net/ethernet/xscale/Makefile | 6 +-
drivers/net/ethernet/xscale/ixp46x_ts.h | 13 +-
drivers/net/ethernet/xscale/ixp4xx_eth.c | 37 +-
drivers/net/ethernet/xscale/ptp_ixp46x.c | 122 +-
drivers/net/fddi/skfp/skfddi.c | 60 +-
drivers/net/hamradio/baycom_epp.c | 9 +-
drivers/net/hamradio/baycom_par.c | 12 +-
drivers/net/hamradio/baycom_ser_fdx.c | 12 +-
drivers/net/hamradio/baycom_ser_hdx.c | 12 +-
drivers/net/hamradio/bpqether.c | 9 +-
drivers/net/hamradio/dmascc.c | 18 +-
drivers/net/hamradio/hdlcdrv.c | 20 +-
drivers/net/hamradio/scc.c | 13 +-
drivers/net/hamradio/yam.c | 19 +-
drivers/net/hippi/rrunner.c | 11 +-
drivers/net/hippi/rrunner.h | 3 +-
drivers/net/ipa/Makefile | 5 +-
drivers/net/ipa/gsi.c | 241 +-
drivers/net/ipa/gsi.h | 31 +-
drivers/net/ipa/gsi_trans.c | 34 +-
drivers/net/ipa/ipa.h | 30 +-
drivers/net/ipa/ipa_clock.c | 331 ---
drivers/net/ipa/ipa_clock.h | 64 -
drivers/net/ipa/ipa_cmd.c | 51 +-
drivers/net/ipa/ipa_cmd.h | 22 +-
drivers/net/ipa/ipa_data-v3.1.c | 4 +-
drivers/net/ipa/ipa_data-v3.5.1.c | 4 +-
drivers/net/ipa/ipa_data-v4.11.c | 19 +-
drivers/net/ipa/ipa_data-v4.2.c | 4 +-
drivers/net/ipa/ipa_data-v4.5.c | 6 +-
drivers/net/ipa/ipa_data-v4.9.c | 15 +-
drivers/net/ipa/ipa_data.h | 10 +-
drivers/net/ipa/ipa_endpoint.c | 44 +-
drivers/net/ipa/ipa_interrupt.c | 83 +-
drivers/net/ipa/ipa_interrupt.h | 8 +-
drivers/net/ipa/ipa_main.c | 222 +-
drivers/net/ipa/ipa_modem.c | 140 +-
drivers/net/ipa/ipa_modem.h | 4 -
drivers/net/ipa/ipa_power.c | 473 ++++
drivers/net/ipa/ipa_power.h | 73 +
drivers/net/ipa/ipa_qmi.c | 6 +-
drivers/net/ipa/ipa_qmi.h | 19 +
drivers/net/ipa/ipa_reg.h | 12 +-
drivers/net/ipa/ipa_resource.c | 3 +-
drivers/net/ipa/ipa_smp2p.c | 93 +-
drivers/net/ipa/ipa_smp2p.h | 2 +-
drivers/net/ipa/ipa_table.c | 40 +-
drivers/net/ipa/ipa_table.h | 16 -
drivers/net/ipa/ipa_uc.c | 70 +-
drivers/net/ipa/ipa_uc.h | 22 +-
drivers/net/ipvlan/ipvlan_main.c | 1 +
drivers/net/macvlan.c | 8 +-
drivers/net/mctp/Kconfig | 8 +
drivers/net/mctp/Makefile | 0
drivers/net/mdio/Kconfig | 3 +-
drivers/net/mdio/mdio-ipq4019.c | 41 +
drivers/net/mdio/mdio-mscc-miim.c | 12 +-
drivers/net/mhi/Makefile | 3 -
drivers/net/mhi/mhi.h | 41 -
drivers/net/mhi/proto_mbim.c | 304 --
drivers/net/{mhi/net.c => mhi_net.c} | 166 +-
drivers/net/mii.c | 6 +-
drivers/net/netdevsim/bus.c | 43 +-
drivers/net/netdevsim/dev.c | 25 +-
drivers/net/netdevsim/ethtool.c | 8 +-
drivers/net/netdevsim/fib.c | 2 +-
drivers/net/netdevsim/netdev.c | 6 +-
drivers/net/netdevsim/netdevsim.h | 2 +
drivers/net/pcs/pcs-xpcs.c | 4 +
drivers/net/phy/Kconfig | 8 +
drivers/net/phy/Makefile | 1 +
drivers/net/phy/at803x.c | 18 +-
drivers/net/phy/dp83822.c | 8 +-
drivers/net/phy/intel-xway.c | 76 +
drivers/net/phy/marvell.c | 144 +-
drivers/net/phy/marvell10g.c | 97 +
drivers/net/phy/mscc/mscc_ptp.c | 8 +-
drivers/net/phy/mxl-gpy.c | 727 +++++
drivers/net/phy/nxp-tja11xx.c | 13 +-
drivers/net/phy/phy.c | 4 +-
drivers/net/phy/phy_device.c | 27 +-
drivers/net/phy/phylink.c | 21 +-
drivers/net/phy/xilinx_gmii2rgmii.c | 46 +-
drivers/net/plip/plip.c | 12 +-
drivers/net/ppp/ppp_generic.c | 14 +-
drivers/net/sb1000.c | 20 +-
drivers/net/slip/slip.c | 13 +-
drivers/net/team/team_mode_loadbalance.c | 2 +-
drivers/net/tun.c | 8 +-
drivers/net/usb/asix_devices.c | 12 +-
drivers/net/usb/ax88172a.c | 2 +-
drivers/net/usb/ax88179_178a.c | 2 +-
drivers/net/usb/cdc-phonet.c | 5 +-
drivers/net/usb/dm9601.c | 2 +-
drivers/net/usb/hso.c | 13 +-
drivers/net/usb/ipheth.c | 2 +-
drivers/net/usb/lan78xx.c | 1062 +++++--
drivers/net/usb/mcs7830.c | 2 +-
drivers/net/usb/pegasus.c | 5 +-
drivers/net/usb/r8152.c | 10 +-
drivers/net/usb/rtl8150.c | 5 +-
drivers/net/usb/smsc75xx.c | 2 +-
drivers/net/usb/smsc95xx.c | 2 +-
drivers/net/usb/sr9700.c | 2 +-
drivers/net/usb/sr9800.c | 2 +-
drivers/net/usb/usbnet.c | 8 +-
drivers/net/veth.c | 307 ++-
drivers/net/virtio_net.c | 52 +-
drivers/net/vmxnet3/Makefile | 2 +-
drivers/net/vmxnet3/upt1_defs.h | 2 +-
drivers/net/vmxnet3/vmxnet3_defs.h | 50 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 268 +-
drivers/net/vmxnet3/vmxnet3_ethtool.c | 32 +-
drivers/net/vmxnet3/vmxnet3_int.h | 22 +-
drivers/net/vrf.c | 21 +-
drivers/net/wan/Kconfig | 51 -
drivers/net/wan/Makefile | 1 -
drivers/net/wan/c101.c | 33 +-
drivers/net/wan/cosa.c | 15 +-
drivers/net/wan/farsync.c | 123 +-
drivers/net/wan/fsl_ucc_hdlc.c | 19 +-
drivers/net/wan/hdlc.c | 9 +-
drivers/net/wan/hdlc_cisco.c | 14 +-
drivers/net/wan/hdlc_fr.c | 40 +-
drivers/net/wan/hdlc_ppp.c | 8 +-
drivers/net/wan/hdlc_raw.c | 14 +-
drivers/net/wan/hdlc_raw_eth.c | 14 +-
drivers/net/wan/hdlc_x25.c | 16 +-
drivers/net/wan/hostess_sv11.c | 13 +-
drivers/net/wan/ixp4xx_hss.c | 22 +-
drivers/net/wan/lmc/lmc.h | 2 +-
drivers/net/wan/lmc/lmc_main.c | 33 +-
drivers/net/wan/lmc/lmc_proto.c | 7 -
drivers/net/wan/lmc/lmc_proto.h | 1 -
drivers/net/wan/n2.c | 32 +-
drivers/net/wan/pc300too.c | 44 +-
drivers/net/wan/pci200syn.c | 32 +-
drivers/net/wan/sbni.c | 1638 -----------
drivers/net/wan/sbni.h | 147 -
drivers/net/wan/sealevel.c | 10 +-
drivers/net/wan/wanxl.c | 21 +-
drivers/net/wireless/ath/ath10k/pci.c | 9 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 5 -
drivers/net/wireless/ath/ath11k/pci.c | 10 +-
drivers/net/wireless/ath/ath5k/pci.c | 2 +-
drivers/net/wireless/ath/ath6kl/wmi.c | 4 +-
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 3 +-
drivers/net/wireless/ath/ath9k/hw.c | 12 +-
drivers/net/wireless/ath/ath9k/pci.c | 8 +-
drivers/net/wireless/ath/wcn36xx/main.c | 12 +-
drivers/net/wireless/ath/wcn36xx/smd.c | 4 +-
drivers/net/wireless/ath/wcn36xx/txrx.c | 4 +
drivers/net/wireless/ath/wcn36xx/wcn36xx.h | 2 +
drivers/net/wireless/ath/wil6210/ethtool.c | 14 +-
.../wireless/broadcom/brcm80211/brcmfmac/Makefile | 3 +-
.../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c | 4 +-
.../broadcom/brcm80211/brcmfmac/cfg80211.c | 8 +
.../wireless/broadcom/brcm80211/brcmfmac/chip.c | 29 +-
.../wireless/broadcom/brcm80211/brcmfmac/chip.h | 5 +-
.../broadcom/brcm80211/brcmfmac/firmware.c | 69 +-
.../wireless/broadcom/brcm80211/brcmfmac/fwil.c | 126 +-
.../wireless/broadcom/brcm80211/brcmfmac/fwil.h | 8 +
.../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 5 +-
.../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 30 +-
.../wireless/broadcom/brcm80211/brcmfmac/xtlv.c | 82 +
.../wireless/broadcom/brcm80211/brcmfmac/xtlv.h | 31 +
.../wireless/broadcom/brcm80211/brcmsmac/main.c | 2 +-
.../broadcom/brcm80211/include/brcm_hw_ids.h | 1 +
.../net/wireless/broadcom/brcm80211/include/soc.h | 2 +-
drivers/net/wireless/cisco/airo.c | 15 +-
drivers/net/wireless/intel/ipw2x00/libipw_rx.c | 56 +-
drivers/net/wireless/intel/ipw2x00/libipw_tx.c | 4 +-
drivers/net/wireless/intel/iwlegacy/3945-mac.c | 52 +-
drivers/net/wireless/intel/iwlegacy/3945.c | 10 +-
drivers/net/wireless/intel/iwlegacy/4965-mac.c | 78 +-
drivers/net/wireless/intel/iwlegacy/common.c | 19 +-
drivers/net/wireless/intel/iwlwifi/cfg/22000.c | 76 +-
drivers/net/wireless/intel/iwlwifi/cfg/9000.c | 2 +-
drivers/net/wireless/intel/iwlwifi/dvm/main.c | 4 +-
drivers/net/wireless/intel/iwlwifi/dvm/rx.c | 2 +-
drivers/net/wireless/intel/iwlwifi/fw/acpi.c | 304 +-
drivers/net/wireless/intel/iwlwifi/fw/acpi.h | 66 +-
drivers/net/wireless/intel/iwlwifi/fw/api/coex.h | 2 +-
.../net/wireless/intel/iwlwifi/fw/api/commands.h | 3 +-
drivers/net/wireless/intel/iwlwifi/fw/api/d3.h | 22 +-
.../net/wireless/intel/iwlwifi/fw/api/dbg-tlv.h | 8 +-
.../net/wireless/intel/iwlwifi/fw/api/location.h | 189 +-
drivers/net/wireless/intel/iwlwifi/fw/api/mac.h | 4 +-
.../net/wireless/intel/iwlwifi/fw/api/offload.h | 31 +-
drivers/net/wireless/intel/iwlwifi/fw/api/scan.h | 6 +-
drivers/net/wireless/intel/iwlwifi/fw/api/sta.h | 8 +-
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 144 +-
drivers/net/wireless/intel/iwlwifi/fw/dbg.h | 7 +-
drivers/net/wireless/intel/iwlwifi/fw/error-dump.h | 22 +-
drivers/net/wireless/intel/iwlwifi/fw/file.h | 1 +
drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 15 +-
drivers/net/wireless/intel/iwlwifi/fw/pnvm.h | 20 +
drivers/net/wireless/intel/iwlwifi/iwl-config.h | 8 +-
drivers/net/wireless/intel/iwlwifi/iwl-csr.h | 22 +-
drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 34 +-
drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.h | 24 +-
drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 4 +-
drivers/net/wireless/intel/iwlwifi/iwl-io.c | 26 +-
drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c | 40 +-
drivers/net/wireless/intel/iwlwifi/iwl-op-mode.h | 8 +-
drivers/net/wireless/intel/iwlwifi/iwl-prph.h | 7 +
drivers/net/wireless/intel/iwlwifi/iwl-trans.h | 6 +-
drivers/net/wireless/intel/iwlwifi/mvm/constants.h | 5 +-
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 580 ++--
drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c | 11 +-
.../net/wireless/intel/iwlwifi/mvm/ftm-initiator.c | 85 +-
.../net/wireless/intel/iwlwifi/mvm/ftm-responder.c | 27 +-
drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 108 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 44 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 35 +-
drivers/net/wireless/intel/iwlwifi/mvm/mvm.h | 3 +-
drivers/net/wireless/intel/iwlwifi/mvm/nvm.c | 4 +-
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 74 +-
drivers/net/wireless/intel/iwlwifi/mvm/rfi.c | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/rxmq.c | 45 +-
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 93 +-
drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 120 +-
.../net/wireless/intel/iwlwifi/mvm/time-event.c | 41 +-
drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 8 +-
drivers/net/wireless/intel/iwlwifi/pcie/internal.h | 24 +-
drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 17 +-
.../net/wireless/intel/iwlwifi/pcie/trans-gen2.c | 53 +-
drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 59 +-
drivers/net/wireless/intersil/Kconfig | 20 -
drivers/net/wireless/intersil/Makefile | 1 -
drivers/net/wireless/intersil/hostap/hostap.h | 3 +-
.../net/wireless/intersil/hostap/hostap_ioctl.c | 30 +-
drivers/net/wireless/intersil/hostap/hostap_main.c | 3 +
drivers/net/wireless/intersil/prism54/Makefile | 9 -
drivers/net/wireless/intersil/prism54/isl_38xx.c | 245 --
drivers/net/wireless/intersil/prism54/isl_38xx.h | 158 --
drivers/net/wireless/intersil/prism54/isl_ioctl.c | 2909 --------------------
drivers/net/wireless/intersil/prism54/isl_ioctl.h | 35 -
drivers/net/wireless/intersil/prism54/isl_oid.h | 492 ----
drivers/net/wireless/intersil/prism54/islpci_dev.c | 951 -------
drivers/net/wireless/intersil/prism54/islpci_dev.h | 204 --
drivers/net/wireless/intersil/prism54/islpci_eth.c | 489 ----
drivers/net/wireless/intersil/prism54/islpci_eth.h | 59 -
.../net/wireless/intersil/prism54/islpci_hotplug.c | 316 ---
drivers/net/wireless/intersil/prism54/islpci_mgt.c | 491 ----
drivers/net/wireless/intersil/prism54/islpci_mgt.h | 126 -
drivers/net/wireless/intersil/prism54/oid_mgt.c | 889 ------
drivers/net/wireless/intersil/prism54/oid_mgt.h | 46 -
.../net/wireless/intersil/prism54/prismcompat.h | 30 -
drivers/net/wireless/marvell/libertas/ethtool.c | 9 +-
drivers/net/wireless/marvell/mwifiex/Makefile | 1 +
drivers/net/wireless/marvell/mwifiex/cmdevt.c | 2 +-
drivers/net/wireless/marvell/mwifiex/pcie.c | 11 +
drivers/net/wireless/marvell/mwifiex/pcie.h | 1 +
drivers/net/wireless/marvell/mwifiex/pcie_quirks.c | 161 ++
drivers/net/wireless/marvell/mwifiex/pcie_quirks.h | 23 +
drivers/net/wireless/marvell/mwifiex/sta_ioctl.c | 4 +-
drivers/net/wireless/marvell/mwifiex/usb.h | 2 +-
drivers/net/wireless/microchip/wilc1000/sdio.c | 29 +-
drivers/net/wireless/microchip/wilc1000/spi.c | 44 +-
drivers/net/wireless/microchip/wilc1000/wlan.c | 38 +-
.../wireless/quantenna/qtnfmac/pcie/pearl_pcie.c | 28 +-
.../wireless/quantenna/qtnfmac/pcie/topaz_pcie.c | 28 +-
drivers/net/wireless/ray_cs.c | 8 +-
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu.h | 2 +
.../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 37 +-
.../net/wireless/realtek/rtlwifi/rtl8192de/phy.c | 52 +-
drivers/net/wireless/realtek/rtw88/Makefile | 2 +-
drivers/net/wireless/realtek/rtw88/fw.c | 8 +-
drivers/net/wireless/realtek/rtw88/fw.h | 3 +-
drivers/net/wireless/realtek/rtw88/main.c | 2 +
drivers/net/wireless/realtek/rtw88/main.h | 6 +
drivers/net/wireless/realtek/rtw88/pci.c | 47 +-
drivers/net/wireless/realtek/rtw88/pci.h | 1 +
drivers/net/wireless/realtek/rtw88/rtw8822c.c | 1 +
drivers/net/wireless/realtek/rtw88/tx.c | 2 +-
drivers/net/wireless/realtek/rtw88/wow.c | 107 +-
drivers/net/wireless/rsi/rsi_91x_debugfs.c | 2 +-
drivers/net/wireless/rsi/rsi_91x_hal.c | 4 +-
drivers/net/wireless/rsi/rsi_91x_usb.c | 1 +
drivers/net/wwan/Kconfig | 12 +
drivers/net/wwan/Makefile | 1 +
drivers/net/wwan/iosm/iosm_ipc_pcie.c | 19 +-
drivers/net/wwan/iosm/iosm_ipc_protocol.c | 10 +-
drivers/net/wwan/iosm/iosm_ipc_protocol_ops.c | 13 +-
drivers/net/wwan/mhi_wwan_mbim.c | 658 +++++
drivers/net/wwan/wwan_core.c | 7 +-
drivers/net/xen-netfront.c | 272 +-
drivers/nfc/fdp/fdp.c | 38 +-
drivers/nfc/fdp/fdp.h | 4 +-
drivers/nfc/fdp/i2c.c | 8 +-
drivers/nfc/mei_phy.c | 4 +-
drivers/nfc/mei_phy.h | 2 +-
drivers/nfc/microread/i2c.c | 4 +-
drivers/nfc/microread/mei.c | 1 -
drivers/nfc/microread/microread.c | 15 +-
drivers/nfc/microread/microread.h | 6 +-
drivers/nfc/nfcmrvl/fw_dnld.c | 16 +-
drivers/nfc/nfcmrvl/i2c.c | 7 +-
drivers/nfc/nfcmrvl/main.c | 6 +-
drivers/nfc/nfcmrvl/nfcmrvl.h | 6 +-
drivers/nfc/nfcmrvl/spi.c | 7 +-
drivers/nfc/nfcmrvl/uart.c | 4 +-
drivers/nfc/nfcmrvl/usb.c | 2 +-
drivers/nfc/nfcsim.c | 4 +-
drivers/nfc/nxp-nci/core.c | 2 +-
drivers/nfc/pn533/pn533.c | 2 +-
drivers/nfc/pn544/i2c.c | 2 +-
drivers/nfc/pn544/pn544.c | 18 +-
drivers/nfc/pn544/pn544.h | 7 +-
drivers/nfc/port100.c | 47 +-
drivers/nfc/s3fwrn5/core.c | 7 +-
drivers/nfc/s3fwrn5/firmware.c | 12 +-
drivers/nfc/s3fwrn5/nci.c | 8 +-
drivers/nfc/s3fwrn5/nci.h | 2 +-
drivers/nfc/st-nci/core.c | 7 +-
drivers/nfc/st-nci/i2c.c | 2 +-
drivers/nfc/st-nci/ndlc.c | 6 +-
drivers/nfc/st-nci/ndlc.h | 8 +-
drivers/nfc/st-nci/spi.c | 2 +-
drivers/nfc/st-nci/vendor_cmds.c | 2 +-
drivers/nfc/st21nfca/core.c | 7 +-
drivers/nfc/st21nfca/i2c.c | 8 +-
drivers/nfc/st21nfca/st21nfca.h | 4 +-
drivers/nfc/st21nfca/vendor_cmds.c | 2 +-
drivers/nfc/st95hf/core.c | 3 +-
drivers/nfc/trf7970a.c | 19 +-
drivers/nfc/virtual_ncidev.c | 13 +-
drivers/pci/pci.h | 3 -
drivers/pci/pcie/ptm.c | 9 +
drivers/phy/marvell/phy-mvebu-a3700-comphy.c | 16 +-
drivers/phy/marvell/phy-mvebu-cp110-comphy.c | 16 +-
drivers/ptp/Kconfig | 20 +-
drivers/ptp/ptp_ocp.c | 1283 ++++++++-
drivers/ptp/ptp_vclock.c | 2 +
drivers/s390/cio/ccwgroup.c | 22 -
drivers/s390/net/Kconfig | 10 +-
drivers/s390/net/ctcm_fsms.c | 2 +-
drivers/s390/net/ctcm_mpc.c | 2 +-
drivers/s390/net/qeth_core.h | 51 +-
drivers/s390/net/qeth_core_main.c | 189 +-
drivers/s390/net/qeth_core_mpc.c | 3 -
drivers/s390/net/qeth_core_mpc.h | 23 +-
drivers/s390/net/qeth_core_sys.c | 5 -
drivers/s390/net/qeth_ethtool.c | 11 +-
drivers/s390/net/qeth_l2_main.c | 414 +--
drivers/s390/net/qeth_l3_main.c | 19 +-
drivers/scsi/cxgbi/cxgb4i/Kconfig | 1 +
drivers/staging/octeon/ethernet.c | 12 +-
drivers/staging/qlge/qlge_ethtool.c | 10 +-
drivers/staging/qlge/qlge_main.c | 5 +-
drivers/staging/rtl8188eu/include/osdep_intf.h | 2 +
drivers/staging/rtl8188eu/include/rtw_android.h | 3 +-
drivers/staging/rtl8188eu/os_dep/ioctl_linux.c | 3 -
drivers/staging/rtl8188eu/os_dep/os_intfs.c | 1 +
drivers/staging/rtl8188eu/os_dep/rtw_android.c | 14 +-
drivers/staging/rtl8723bs/include/osdep_intf.h | 2 +
drivers/staging/rtl8723bs/os_dep/ioctl_linux.c | 18 +-
drivers/staging/rtl8723bs/os_dep/os_intfs.c | 1 +
drivers/staging/wlan-ng/p80211netdev.c | 76 +-
drivers/tty/synclink_gt.c | 19 +-
drivers/vdpa/mlx5/net/mlx5_vnet.c | 2 +-
drivers/vhost/net.c | 2 -
include/asm-generic/compat.h | 17 +
include/linux/bitops.h | 50 +
include/linux/bpf-cgroup.h | 230 +-
include/linux/bpf.h | 306 +-
include/linux/bpf_types.h | 3 +
include/linux/bpf_verifier.h | 19 +-
include/linux/bpfptr.h | 12 +-
include/linux/btf.h | 1 +
include/linux/btf_ids.h | 9 +-
include/linux/can/bittiming.h | 4 +-
include/linux/can/dev.h | 8 +
include/linux/can/platform/flexcan.h | 23 +
include/linux/can/rx-offload.h | 8 +-
include/linux/compat.h | 32 +-
include/linux/dsa/8021q.h | 44 +-
include/linux/dsa/sja1105.h | 22 +-
include/linux/ethtool.h | 26 +-
include/linux/filter.h | 80 +-
include/linux/fsl/mc.h | 3 +-
include/linux/genetlink.h | 23 -
include/linux/hdlc.h | 4 +-
include/linux/hdlcdrv.h | 2 +-
include/linux/ieee80211.h | 106 +-
include/linux/if_bridge.h | 40 +-
include/linux/igmp.h | 3 -
include/linux/inetdevice.h | 9 +
include/linux/ioam6.h | 13 +
include/linux/ioam6_genl.h | 13 +
include/linux/ioam6_iptunnel.h | 13 +
include/linux/ipv6.h | 3 +
include/linux/memcontrol.h | 3 +-
include/linux/mhi.h | 2 +
include/linux/mii.h | 2 +-
include/linux/mlx5/device.h | 71 +-
include/linux/mlx5/driver.h | 18 +-
include/linux/mlx5/eswitch.h | 16 +
include/linux/mlx5/fs.h | 2 +
include/linux/mlx5/mlx5_ifc.h | 25 +-
include/linux/mm_types.h | 18 +-
include/linux/mmc/sdio_ids.h | 1 +
include/linux/netdevice.h | 92 +-
include/linux/netfilter/x_tables.h | 6 +-
include/linux/netfilter_bridge/ebtables.h | 2 +
include/linux/pci.h | 10 +
include/linux/perf_event.h | 1 +
include/linux/phy.h | 1 +
include/linux/ptp_clock_kernel.h | 48 +-
include/linux/sched.h | 3 +
include/linux/skbuff.h | 21 +-
include/linux/socket.h | 6 +-
include/linux/ssb/ssb.h | 2 +-
include/linux/ssb/ssb_driver_extif.h | 2 +-
include/linux/trace_events.h | 7 +-
include/linux/typecheck.h | 9 +
include/net/Space.h | 10 -
include/net/act_api.h | 22 +-
include/net/af_unix.h | 19 +
include/net/ax88796.h | 3 +
include/net/bluetooth/hci_core.h | 21 +-
include/net/bond_3ad.h | 1 +
include/net/bond_options.h | 1 +
include/net/bonding.h | 14 +-
include/net/cfg80211.h | 92 +
include/net/compat.h | 27 +-
include/net/devlink.h | 58 +-
include/net/dn_fib.h | 2 +-
include/net/dsa.h | 72 +-
include/net/dst.h | 2 +
include/net/flow_offload.h | 1 +
include/net/ieee80211_radiotap.h | 5 +
include/net/if_inet6.h | 5 +-
include/net/inet_hashtables.h | 6 +
include/net/ioam6.h | 67 +
include/net/ip.h | 22 +-
include/net/ip6_route.h | 5 +-
include/net/ip_fib.h | 2 +-
include/net/ip_tunnels.h | 3 +-
include/net/ipx.h | 171 --
include/net/lwtunnel.h | 3 +
include/net/mac80211.h | 41 +
include/net/mctp.h | 232 ++
include/net/mctpdevice.h | 35 +
include/net/mptcp.h | 29 +-
include/net/net_namespace.h | 6 +-
include/net/netfilter/nf_conntrack_ecache.h | 32 +-
include/net/netfilter/nf_hooks_lwtunnel.h | 7 +
include/net/netfilter/nf_queue.h | 4 +-
include/net/netlink.h | 2 +-
include/net/netns/conntrack.h | 1 -
include/net/netns/ipv4.h | 1 -
include/net/netns/ipv6.h | 3 +
include/net/netns/mctp.h | 36 +
include/net/netns/netfilter.h | 1 -
include/net/netns/x_tables.h | 12 -
include/net/netns/xfrm.h | 7 +
include/net/nfc/digital.h | 4 +-
include/net/nfc/hci.h | 6 +-
include/net/nfc/nci_core.h | 30 +-
include/net/nfc/nfc.h | 16 +-
include/net/page_pool.h | 68 +-
include/net/pkt_cls.h | 27 +-
include/net/rtnetlink.h | 3 +-
include/net/sch_generic.h | 2 +-
include/net/sock.h | 18 +-
include/net/switchdev.h | 108 +
include/net/tcp.h | 1 -
include/net/xdp.h | 5 +
include/net/xfrm.h | 36 +-
include/soc/mscc/ocelot.h | 26 +-
include/trace/events/qdisc.h | 2 +
include/uapi/asm-generic/socket.h | 2 +
include/uapi/linux/bpf.h | 119 +-
include/uapi/linux/can/j1939.h | 9 +
include/uapi/linux/ethtool.h | 2 +
include/uapi/linux/ethtool_netlink.h | 2 +
include/uapi/linux/if_arp.h | 1 +
include/uapi/linux/if_bridge.h | 46 +
include/uapi/linux/if_ether.h | 3 +
include/uapi/linux/if_link.h | 13 +
include/uapi/linux/in.h | 42 +-
include/uapi/linux/in6.h | 1 +
include/uapi/linux/ioam6.h | 133 +
include/uapi/linux/ioam6_genl.h | 52 +
include/uapi/linux/ioam6_iptunnel.h | 20 +
include/uapi/linux/ipv6.h | 3 +
include/uapi/linux/ipx.h | 87 -
include/uapi/linux/lwtunnel.h | 1 +
include/uapi/linux/mctp.h | 36 +
include/uapi/linux/mptcp.h | 1 +
include/uapi/linux/netfilter/nfnetlink_conntrack.h | 1 +
include/uapi/linux/nl80211-vnd-intel.h | 77 +
include/uapi/linux/nl80211.h | 43 +
include/uapi/linux/openvswitch.h | 8 +
include/uapi/linux/pkt_cls.h | 1 +
include/uapi/linux/socket.h | 5 +
include/uapi/linux/tc_act/tc_skbmod.h | 1 +
include/uapi/linux/xfrm.h | 11 +
init/main.c | 6 +-
kernel/bpf/Kconfig | 2 +-
kernel/bpf/arraymap.c | 21 +
kernel/bpf/bpf_iter.c | 24 +-
kernel/bpf/bpf_struct_ops.c | 22 +-
kernel/bpf/bpf_task_storage.c | 6 +-
kernel/bpf/btf.c | 84 +-
kernel/bpf/cgroup.c | 198 +-
kernel/bpf/core.c | 31 +-
kernel/bpf/cpumap.c | 116 +-
kernel/bpf/devmap.c | 118 +-
kernel/bpf/hashtab.c | 105 +-
kernel/bpf/helpers.c | 376 ++-
kernel/bpf/local_storage.c | 20 +-
kernel/bpf/map_in_map.c | 8 +
kernel/bpf/stackmap.c | 4 +-
kernel/bpf/syscall.c | 220 +-
kernel/bpf/task_iter.c | 11 +-
kernel/bpf/trampoline.c | 14 +-
kernel/bpf/verifier.c | 385 ++-
kernel/events/core.c | 77 +-
kernel/fork.c | 1 +
kernel/trace/bpf_trace.c | 112 +-
lib/test_bpf.c | 2754 ++++++++++++++++--
mm/memcontrol.c | 26 +-
net/6lowpan/debugfs.c | 3 +-
net/802/Makefile | 1 -
net/802/p8023.c | 60 -
net/8021q/vlan.c | 2 +-
net/8021q/vlan_dev.c | 6 +-
net/Kconfig | 1 +
net/Makefile | 1 +
net/appletalk/ddp.c | 4 +-
net/ax25/ax25_ip.c | 4 +-
net/ax25/ax25_out.c | 13 +-
net/ax25/ax25_route.c | 13 +-
net/batman-adv/bat_iv_ogm.c | 75 +-
net/batman-adv/bat_v.c | 30 +-
net/batman-adv/bat_v_elp.c | 9 +-
net/batman-adv/bat_v_ogm.c | 39 +-
net/batman-adv/bridge_loop_avoidance.c | 39 +-
net/batman-adv/distributed-arp-table.c | 27 +-
net/batman-adv/fragmentation.c | 6 +-
net/batman-adv/gateway_client.c | 60 +-
net/batman-adv/gateway_client.h | 16 +-
net/batman-adv/gateway_common.c | 2 +-
net/batman-adv/hard-interface.c | 21 +-
net/batman-adv/hard-interface.h | 3 +
net/batman-adv/main.h | 2 +-
net/batman-adv/multicast.c | 11 +-
net/batman-adv/netlink.c | 6 +-
net/batman-adv/network-coding.c | 24 +-
net/batman-adv/originator.c | 114 +-
net/batman-adv/originator.h | 96 +-
net/batman-adv/routing.c | 39 +-
net/batman-adv/send.c | 33 +-
net/batman-adv/soft-interface.c | 27 +-
net/batman-adv/soft-interface.h | 16 +-
net/batman-adv/tp_meter.c | 27 +-
net/batman-adv/translation-table.c | 109 +-
net/batman-adv/translation-table.h | 18 +-
net/batman-adv/tvlv.c | 9 +-
net/bluetooth/cmtp/cmtp.h | 2 +-
net/bluetooth/hci_core.c | 48 +-
net/bluetooth/hci_event.c | 223 +-
net/bluetooth/hci_request.c | 81 +-
net/bluetooth/hci_sysfs.c | 3 +-
net/bluetooth/mgmt.c | 4 +-
net/bluetooth/rfcomm/sock.c | 8 +-
net/bluetooth/sco.c | 106 +-
net/bpf/test_run.c | 139 +-
net/bridge/br.c | 62 +-
net/bridge/br_device.c | 16 +-
net/bridge/br_fdb.c | 28 +-
net/bridge/br_forward.c | 16 +-
net/bridge/br_if.c | 15 +-
net/bridge/br_input.c | 24 +-
net/bridge/br_ioctl.c | 83 +-
net/bridge/br_mdb.c | 177 +-
net/bridge/br_multicast.c | 1912 ++++++++-----
net/bridge/br_multicast_eht.c | 92 +-
net/bridge/br_netlink.c | 61 +-
net/bridge/br_private.h | 581 +++-
net/bridge/br_private_mcast_eht.h | 3 +-
net/bridge/br_private_tunnel.h | 6 +-
net/bridge/br_switchdev.c | 246 +-
net/bridge/br_sysfs_br.c | 48 +-
net/bridge/br_sysfs_if.c | 4 +-
net/bridge/br_vlan.c | 136 +-
net/bridge/br_vlan_options.c | 427 ++-
net/bridge/br_vlan_tunnel.c | 14 +-
net/bridge/netfilter/ebtable_broute.c | 17 +-
net/bridge/netfilter/ebtable_filter.c | 17 +-
net/bridge/netfilter/ebtable_nat.c | 17 +-
net/bridge/netfilter/ebtables.c | 109 +-
net/can/j1939/j1939-priv.h | 10 +-
net/can/j1939/socket.c | 143 +-
net/can/j1939/transport.c | 70 +-
net/can/raw.c | 8 +-
net/core/Makefile | 2 -
net/core/bpf_sk_storage.c | 4 +-
net/core/dev.c | 342 +--
net/core/dev_addr_lists.c | 144 +-
net/core/dev_ioctl.c | 264 +-
net/core/devlink.c | 680 +++--
net/core/drop_monitor.c | 6 +-
net/core/dst.c | 6 +-
net/core/fib_rules.c | 4 +-
net/core/filter.c | 134 +-
net/core/flow_dissector.c | 12 +-
net/core/flow_offload.c | 90 +-
net/core/lwtunnel.c | 5 +
net/core/neighbour.c | 29 +-
net/core/net-procfs.c | 24 +-
net/core/net_namespace.c | 52 +-
net/core/page_pool.c | 114 +-
net/core/pktgen.c | 167 +-
net/core/ptp_classifier.c | 2 +-
net/core/rtnetlink.c | 31 +-
net/core/scm.c | 4 +-
net/core/selftests.c | 12 +
net/core/skbuff.c | 75 +-
net/core/sock.c | 31 +-
net/core/sock_map.c | 23 +-
net/dccp/proto.c | 2 +-
net/decnet/dn_dev.c | 6 +-
net/decnet/dn_fib.c | 9 +-
net/decnet/dn_route.c | 18 +-
net/dsa/Kconfig | 13 +-
net/dsa/Makefile | 3 +-
net/dsa/dsa.c | 2 +-
net/dsa/dsa2.c | 112 +-
net/dsa/dsa_priv.h | 194 +-
net/dsa/master.c | 6 +-
net/dsa/port.c | 344 ++-
net/dsa/slave.c | 298 +-
net/dsa/switch.c | 55 +-
net/dsa/tag_8021q.c | 608 ++--
net/dsa/tag_ar9331.c | 3 +-
net/dsa/tag_brcm.c | 34 +-
net/dsa/tag_dsa.c | 95 +-
net/dsa/tag_gswip.c | 3 +-
net/dsa/tag_hellcreek.c | 5 +-
net/dsa/tag_ksz.c | 8 +-
net/dsa/tag_lan9303.c | 24 +-
net/dsa/tag_mtk.c | 19 +-
net/dsa/tag_ocelot.c | 5 +-
net/dsa/tag_ocelot_8021q.c | 9 +-
net/dsa/tag_qca.c | 16 +-
net/dsa/tag_rtl4_a.c | 21 +-
net/dsa/tag_sja1105.c | 284 +-
net/dsa/tag_trailer.c | 3 +-
net/dsa/tag_xrs700x.c | 5 +-
net/ethernet/eth.c | 8 +-
net/ethtool/coalesce.c | 29 +-
net/ethtool/ioctl.c | 172 +-
net/ethtool/netlink.c | 51 +-
net/ethtool/netlink.h | 17 +-
net/ieee802154/nl-phy.c | 3 +-
net/ieee802154/nl802154.c | 3 +-
net/ieee802154/socket.c | 7 +-
net/ipv4/af_inet.c | 12 +-
net/ipv4/bpf_tcp_ca.c | 41 +-
net/ipv4/devinet.c | 21 +-
net/ipv4/esp4.c | 4 +-
net/ipv4/fib_semantics.c | 12 +-
net/ipv4/fib_trie.c | 4 +-
net/ipv4/fou.c | 10 +-
net/ipv4/icmp.c | 3 +-
net/ipv4/igmp.c | 30 +-
net/ipv4/inet_connection_sock.c | 3 +-
net/ipv4/ip_gre.c | 2 +-
net/ipv4/ip_output.c | 39 +-
net/ipv4/ip_sockglue.c | 24 +-
net/ipv4/ip_tunnel.c | 9 +-
net/ipv4/ip_vti.c | 2 +-
net/ipv4/ipip.c | 2 +-
net/ipv4/netfilter/arptable_filter.c | 23 +-
net/ipv4/netfilter/ipt_CLUSTERIP.c | 56 +-
net/ipv4/netfilter/iptable_filter.c | 24 +-
net/ipv4/netfilter/iptable_mangle.c | 19 +-
net/ipv4/netfilter/iptable_nat.c | 20 +-
net/ipv4/netfilter/iptable_raw.c | 21 +-
net/ipv4/netfilter/iptable_security.c | 23 +-
net/ipv4/route.c | 79 +-
net/ipv4/tcp.c | 5 +-
net/ipv4/tcp_fastopen.c | 20 +-
net/ipv4/tcp_input.c | 54 +-
net/ipv4/tcp_ipv4.c | 411 ++-
net/ipv4/tcp_output.c | 3 +-
net/ipv4/tcp_recovery.c | 3 +-
net/ipv4/udp.c | 2 +-
net/ipv4/udp_bpf.c | 1 -
net/ipv4/udp_offload.c | 2 +-
net/ipv6/Kconfig | 11 +
net/ipv6/Makefile | 3 +-
net/ipv6/addrconf.c | 65 +-
net/ipv6/af_inet6.c | 16 +-
net/ipv6/exthdrs.c | 158 +-
net/ipv6/ioam6.c | 910 ++++++
net/ipv6/ioam6_iptunnel.c | 274 ++
net/ipv6/ip6_fib.c | 4 +-
net/ipv6/ip6_gre.c | 17 +-
net/ipv6/ip6_output.c | 80 +-
net/ipv6/ip6_tunnel.c | 21 +-
net/ipv6/ip6_vti.c | 21 +-
net/ipv6/ip6mr.c | 3 +-
net/ipv6/ipv6_sockglue.c | 18 +-
net/ipv6/mcast.c | 20 +-
net/ipv6/ndisc.c | 17 +-
net/ipv6/netfilter/ip6table_filter.c | 23 +-
net/ipv6/netfilter/ip6table_mangle.c | 22 +-
net/ipv6/netfilter/ip6table_nat.c | 16 +-
net/ipv6/netfilter/ip6table_raw.c | 24 +-
net/ipv6/netfilter/ip6table_security.c | 22 +-
net/ipv6/route.c | 30 +-
net/ipv6/seg6_iptunnel.c | 74 +-
net/ipv6/seg6_local.c | 110 +-
net/ipv6/sit.c | 40 +-
net/ipv6/sysctl_net_ipv6.c | 19 +
net/ipv6/udp.c | 2 +-
net/iucv/af_iucv.c | 72 +-
net/iucv/iucv.c | 60 +-
net/llc/af_llc.c | 6 +-
net/mac80211/cfg.c | 234 +-
net/mac80211/driver-ops.h | 36 +
net/mac80211/ibss.c | 15 +-
net/mac80211/ieee80211_i.h | 21 +
net/mac80211/iface.c | 54 +-
net/mac80211/main.c | 2 +-
net/mac80211/rx.c | 102 +-
net/mac80211/s1g.c | 180 ++
net/mac80211/sta_info.c | 2 +-
net/mac80211/status.c | 33 +-
net/mac80211/trace.h | 67 +
net/mac80211/tx.c | 33 +-
net/mac80211/util.c | 12 +
net/mctp/Kconfig | 13 +
net/mctp/Makefile | 3 +
net/mctp/af_mctp.c | 395 +++
net/mctp/device.c | 423 +++
net/mctp/neigh.c | 342 +++
net/mctp/route.c | 1116 ++++++++
net/mpls/af_mpls.c | 2 +-
net/mptcp/ctrl.c | 26 +-
net/mptcp/mib.c | 4 +
net/mptcp/mib.h | 4 +
net/mptcp/options.c | 462 ++--
net/mptcp/pm.c | 84 +-
net/mptcp/pm_netlink.c | 203 +-
net/mptcp/protocol.c | 201 +-
net/mptcp/protocol.h | 114 +-
net/mptcp/subflow.c | 69 +-
net/netfilter/Makefile | 3 +
net/netfilter/nf_conntrack_ecache.c | 211 +-
net/netfilter/nf_conntrack_netlink.c | 132 +-
net/netfilter/nf_conntrack_standalone.c | 15 +
net/netfilter/nf_flow_table_core.c | 12 +-
net/netfilter/nf_flow_table_offload.c | 4 +-
net/netfilter/nf_hooks_lwtunnel.c | 53 +
net/netfilter/nf_queue.c | 43 +-
net/netfilter/nf_tables_offload.c | 1 +
net/netfilter/nfnetlink_queue.c | 15 +-
net/netfilter/nft_compat.c | 8 +-
net/netfilter/x_tables.c | 98 +-
net/netfilter/xt_CT.c | 11 -
net/netfilter/xt_bpf.c | 2 +-
net/netlabel/netlabel_cipso_v4.c | 12 +-
net/netlabel/netlabel_unlabeled.c | 6 +-
net/netlink/af_netlink.c | 4 +-
net/netlink/genetlink.c | 17 +-
net/netrom/nr_loopback.c | 3 +-
net/netrom/nr_route.c | 3 +-
net/nfc/af_nfc.c | 2 +-
net/nfc/core.c | 8 +-
net/nfc/digital_core.c | 4 +-
net/nfc/hci/core.c | 14 +-
net/nfc/hci/llc.c | 4 +-
net/nfc/hci/llc.h | 6 +-
net/nfc/hci/llc_nop.c | 2 +-
net/nfc/hci/llc_shdlc.c | 12 +-
net/nfc/llcp.h | 8 +-
net/nfc/llcp_commands.c | 46 +-
net/nfc/llcp_core.c | 44 +-
net/nfc/nci/core.c | 176 +-
net/nfc/nci/data.c | 12 +-
net/nfc/nci/hci.c | 52 +-
net/nfc/nci/ntf.c | 87 +-
net/nfc/nci/rsp.c | 48 +-
net/nfc/nci/spi.c | 2 +-
net/nfc/netlink.c | 4 +-
net/nfc/nfc.h | 2 +-
net/nfc/rawsock.c | 2 +-
net/openvswitch/actions.c | 8 +-
net/openvswitch/datapath.c | 76 +-
net/openvswitch/datapath.h | 20 +
net/packet/af_packet.c | 15 +-
net/phonet/af_phonet.c | 3 +-
net/phonet/pn_dev.c | 12 +-
net/phonet/socket.c | 3 +-
net/qrtr/qrtr.c | 12 +-
net/rxrpc/Kconfig | 7 +-
net/sched/act_api.c | 73 +-
net/sched/act_bpf.c | 8 +-
net/sched/act_connmark.c | 4 +-
net/sched/act_csum.c | 7 +-
net/sched/act_ct.c | 4 +-
net/sched/act_ctinfo.c | 4 +-
net/sched/act_gact.c | 4 +-
net/sched/act_gate.c | 4 +-
net/sched/act_ife.c | 9 +-
net/sched/act_ipt.c | 21 +-
net/sched/act_mirred.c | 10 +-
net/sched/act_mpls.c | 4 +-
net/sched/act_nat.c | 6 +-
net/sched/act_pedit.c | 4 +-
net/sched/act_police.c | 4 +-
net/sched/act_sample.c | 7 +-
net/sched/act_simple.c | 4 +-
net/sched/act_skbedit.c | 4 +-
net/sched/act_skbmod.c | 47 +-
net/sched/act_tunnel_key.c | 4 +-
net/sched/act_vlan.c | 4 +-
net/sched/cls_api.c | 87 +-
net/sched/cls_basic.c | 10 +-
net/sched/cls_bpf.c | 12 +-
net/sched/cls_cgroup.c | 6 +-
net/sched/cls_flow.c | 6 +-
net/sched/cls_flower.c | 18 +-
net/sched/cls_fw.c | 13 +-
net/sched/cls_matchall.c | 17 +-
net/sched/cls_route.c | 10 +-
net/sched/cls_rsvp.h | 7 +-
net/sched/cls_tcindex.c | 10 +-
net/sched/cls_u32.c | 24 +-
net/sched/sch_api.c | 10 +-
net/sched/sch_atm.c | 2 +-
net/sched/sch_cake.c | 2 +-
net/sched/sch_cbq.c | 4 +-
net/sched/sch_drr.c | 2 +-
net/sched/sch_dsmark.c | 2 +-
net/sched/sch_ets.c | 2 +-
net/sched/sch_fq_codel.c | 2 +-
net/sched/sch_fq_pie.c | 2 +-
net/sched/sch_hfsc.c | 2 +-
net/sched/sch_htb.c | 99 +-
net/sched/sch_multiq.c | 2 +-
net/sched/sch_prio.c | 2 +-
net/sched/sch_qfq.c | 2 +-
net/sched/sch_sfb.c | 2 +-
net/sched/sch_sfq.c | 2 +-
net/sched/sch_taprio.c | 4 +-
net/smc/smc_core.c | 31 +-
net/smc/smc_ib.c | 3 +-
net/smc/smc_pnet.c | 3 +-
net/socket.c | 352 +--
net/switchdev/switchdev.c | 308 +++
net/tipc/socket.c | 34 +-
net/unix/Kconfig | 5 +
net/unix/Makefile | 1 +
net/unix/af_unix.c | 441 ++-
net/unix/unix_bpf.c | 174 ++
net/wireless/nl80211.c | 173 +-
net/wireless/radiotap.c | 9 +-
net/wireless/rdev-ops.h | 13 +
net/wireless/reg.c | 9 +-
net/wireless/scan.c | 3 +-
net/wireless/trace.h | 46 +
net/xfrm/xfrm_policy.c | 16 +
net/xfrm/xfrm_user.c | 57 +
samples/bpf/.gitignore | 2 +
samples/bpf/Makefile | 109 +-
samples/bpf/Makefile.target | 11 +
samples/bpf/cookie_uid_helper_example.c | 11 +-
samples/bpf/offwaketime_kern.c | 9 +-
samples/bpf/test_override_return.sh | 1 +
samples/bpf/tracex4_user.c | 2 +-
samples/bpf/tracex7_user.c | 5 +
samples/bpf/xdp1_kern.c | 2 +
samples/bpf/xdp2_kern.c | 2 +
samples/bpf/xdp_monitor.bpf.c | 8 +
samples/bpf/xdp_monitor_kern.c | 257 --
samples/bpf/xdp_monitor_user.c | 798 +-----
samples/bpf/xdp_redirect.bpf.c | 49 +
..._redirect_cpu_kern.c => xdp_redirect_cpu.bpf.c} | 393 +--
samples/bpf/xdp_redirect_cpu_user.c | 1132 +++-----
samples/bpf/xdp_redirect_kern.c | 90 -
..._redirect_map_kern.c => xdp_redirect_map.bpf.c} | 89 +-
...p_multi_kern.c => xdp_redirect_map_multi.bpf.c} | 50 +-
samples/bpf/xdp_redirect_map_multi_user.c | 345 +--
samples/bpf/xdp_redirect_map_user.c | 385 ++-
samples/bpf/xdp_redirect_user.c | 270 +-
samples/bpf/xdp_sample.bpf.c | 266 ++
samples/bpf/xdp_sample.bpf.h | 141 +
samples/bpf/xdp_sample_shared.h | 17 +
samples/bpf/xdp_sample_user.c | 1673 +++++++++++
samples/bpf/xdp_sample_user.h | 108 +
samples/bpf/xdpsock_user.c | 20 +-
samples/pktgen/functions.sh | 2 +-
.../pktgen/pktgen_bench_xmit_mode_netif_receive.sh | 19 +-
.../pktgen/pktgen_bench_xmit_mode_queue_xmit.sh | 19 +-
samples/pktgen/pktgen_sample01_simple.sh | 13 +-
samples/pktgen/pktgen_sample02_multiqueue.sh | 19 +-
.../pktgen/pktgen_sample03_burst_single_flow.sh | 6 +-
samples/pktgen/pktgen_sample04_many_flows.sh | 12 +-
samples/pktgen/pktgen_sample05_flow_per_thread.sh | 12 +-
...tgen_sample06_numa_awared_queue_irq_affinity.sh | 19 +-
scripts/bpf_doc.py | 2 +
security/selinux/hooks.c | 4 +-
security/selinux/include/classmap.h | 4 +-
tools/bpf/bpftool/Documentation/bpftool-btf.rst | 48 +-
tools/bpf/bpftool/Documentation/bpftool-cgroup.rst | 3 +-
.../bpf/bpftool/Documentation/bpftool-feature.rst | 2 +-
tools/bpf/bpftool/Documentation/bpftool-gen.rst | 9 +-
tools/bpf/bpftool/Documentation/bpftool-iter.rst | 2 +
tools/bpf/bpftool/Documentation/bpftool-link.rst | 3 +-
tools/bpf/bpftool/Documentation/bpftool-map.rst | 3 +-
tools/bpf/bpftool/Documentation/bpftool-net.rst | 2 +-
tools/bpf/bpftool/Documentation/bpftool-perf.rst | 2 +-
tools/bpf/bpftool/Documentation/bpftool-prog.rst | 36 +-
.../bpftool/Documentation/bpftool-struct_ops.rst | 2 +-
tools/bpf/bpftool/Documentation/bpftool.rst | 12 +-
tools/bpf/bpftool/bash-completion/bpftool | 66 +-
tools/bpf/bpftool/btf.c | 11 +-
tools/bpf/bpftool/btf_dumper.c | 6 +-
tools/bpf/bpftool/cgroup.c | 3 +-
tools/bpf/bpftool/common.c | 6 +
tools/bpf/bpftool/feature.c | 1 +
tools/bpf/bpftool/gen.c | 3 +-
tools/bpf/bpftool/iter.c | 2 +
tools/bpf/bpftool/link.c | 3 +-
tools/bpf/bpftool/main.c | 3 +-
tools/bpf/bpftool/main.h | 3 +-
tools/bpf/bpftool/map.c | 19 +-
tools/bpf/bpftool/net.c | 1 +
tools/bpf/bpftool/perf.c | 5 +-
tools/bpf/bpftool/prog.c | 37 +-
tools/bpf/bpftool/struct_ops.c | 2 +-
tools/bpf/resolve_btfids/main.c | 13 +-
tools/include/uapi/linux/bpf.h | 119 +-
tools/include/uapi/linux/ethtool.h | 53 +
tools/include/uapi/linux/if_link.h | 2 +
tools/lib/bpf/Build | 2 +-
tools/lib/bpf/Makefile | 10 +-
tools/lib/bpf/bpf.c | 32 +-
tools/lib/bpf/bpf.h | 8 +-
tools/lib/bpf/btf.c | 47 +-
tools/lib/bpf/btf.h | 31 +-
tools/lib/bpf/btf_dump.c | 871 +++++-
tools/lib/bpf/libbpf.c | 1776 +++---------
tools/lib/bpf/libbpf.h | 76 +-
tools/lib/bpf/libbpf.map | 11 +
tools/lib/bpf/libbpf_internal.h | 113 +-
tools/lib/bpf/relo_core.c | 1295 +++++++++
tools/lib/bpf/relo_core.h | 100 +
tools/perf/util/bpf-event.c | 11 +-
tools/perf/util/bpf_counter.c | 12 +-
tools/testing/selftests/Makefile | 1 +
tools/testing/selftests/bpf/.gitignore | 1 -
tools/testing/selftests/bpf/Makefile | 7 +-
tools/testing/selftests/bpf/README.rst | 7 +
tools/testing/selftests/bpf/bpf_tcp_helpers.h | 19 +
tools/testing/selftests/bpf/netcnt_common.h | 38 +-
tools/testing/selftests/bpf/network_helpers.c | 120 +-
tools/testing/selftests/bpf/network_helpers.h | 11 +
.../selftests/bpf/prog_tests/attach_probe.c | 98 +-
.../testing/selftests/bpf/prog_tests/bpf_cookie.c | 254 ++
tools/testing/selftests/bpf/prog_tests/bpf_iter.c | 16 +
.../selftests/bpf/prog_tests/bpf_iter_setsockopt.c | 226 ++
.../testing/selftests/bpf/prog_tests/bpf_tcp_ca.c | 106 +-
tools/testing/selftests/bpf/prog_tests/btf.c | 4 +-
tools/testing/selftests/bpf/prog_tests/btf_dump.c | 615 +++++
.../testing/selftests/bpf/prog_tests/btf_module.c | 34 +
.../selftests/bpf/prog_tests/core_autosize.c | 22 +-
.../testing/selftests/bpf/prog_tests/core_reloc.c | 25 +-
.../selftests/bpf/prog_tests/get_func_ip_test.c | 55 +
.../testing/selftests/bpf/prog_tests/kfunc_call.c | 2 +-
tools/testing/selftests/bpf/prog_tests/ksyms_btf.c | 31 +
tools/testing/selftests/bpf/prog_tests/netcnt.c | 82 +
.../selftests/bpf/prog_tests/netns_cookie.c | 80 +
tools/testing/selftests/bpf/prog_tests/perf_link.c | 89 +
tools/testing/selftests/bpf/prog_tests/pinning.c | 9 +
.../selftests/bpf/prog_tests/reference_tracking.c | 4 +-
.../testing/selftests/bpf/prog_tests/send_signal.c | 61 +-
tools/testing/selftests/bpf/prog_tests/snprintf.c | 4 +-
.../selftests/bpf/prog_tests/sockmap_listen.c | 445 ++-
.../selftests/bpf/prog_tests/sockopt_inherit.c | 4 +-
.../selftests/bpf/prog_tests/sockopt_qos_to_cc.c | 70 +
.../selftests/bpf/prog_tests/task_pt_regs.c | 47 +
.../testing/selftests/bpf/prog_tests/tc_redirect.c | 11 +-
tools/testing/selftests/bpf/prog_tests/timer.c | 55 +
tools/testing/selftests/bpf/prog_tests/timer_mim.c | 77 +
.../testing/selftests/bpf/prog_tests/xdp_bonding.c | 520 ++++
.../bpf/prog_tests/xdp_context_test_run.c | 105 +
.../selftests/bpf/prog_tests/xdp_cpumap_attach.c | 43 +-
.../selftests/bpf/prog_tests/xdp_devmap_attach.c | 39 +-
tools/testing/selftests/bpf/progs/bpf_dctcp.c | 25 +
.../selftests/bpf/progs/bpf_dctcp_release.c | 26 +
tools/testing/selftests/bpf/progs/bpf_iter.h | 8 +
.../selftests/bpf/progs/bpf_iter_setsockopt.c | 72 +
tools/testing/selftests/bpf/progs/bpf_iter_tcp4.c | 2 +-
tools/testing/selftests/bpf/progs/bpf_iter_unix.c | 80 +
.../testing/selftests/bpf/progs/bpf_tracing_net.h | 10 +
.../testing/selftests/bpf/progs/get_func_ip_test.c | 84 +
.../selftests/bpf/progs/kfunc_call_test_subprog.c | 4 +-
tools/testing/selftests/bpf/progs/netcnt_prog.c | 8 +-
.../selftests/bpf/progs/netns_cookie_prog.c | 84 +
.../selftests/bpf/progs/sockopt_qos_to_cc.c | 39 +
tools/testing/selftests/bpf/progs/sockopt_sk.c | 16 +
.../testing/selftests/bpf/progs/test_bpf_cookie.c | 85 +
.../selftests/bpf/progs/test_core_autosize.c | 20 +-
.../testing/selftests/bpf/progs/test_ksyms_weak.c | 56 +
.../selftests/bpf/progs/test_map_in_map_invalid.c | 26 +
tools/testing/selftests/bpf/progs/test_perf_link.c | 16 +
.../selftests/bpf/progs/test_sk_lookup_kern.c | 14 +-
tools/testing/selftests/bpf/progs/test_snprintf.c | 6 +-
.../selftests/bpf/progs/test_task_pt_regs.c | 29 +
tools/testing/selftests/bpf/progs/test_tc_tunnel.c | 1 -
.../bpf/progs/test_xdp_context_test_run.c | 20 +
tools/testing/selftests/bpf/progs/timer.c | 297 ++
tools/testing/selftests/bpf/progs/timer_mim.c | 88 +
.../testing/selftests/bpf/progs/timer_mim_reject.c | 74 +
tools/testing/selftests/bpf/progs/xdp_tx.c | 2 +-
tools/testing/selftests/bpf/test_bpftool.sh | 6 +
tools/testing/selftests/bpf/test_bpftool_build.sh | 2 +-
.../selftests/bpf/test_bpftool_synctypes.py | 586 ++++
tools/testing/selftests/bpf/test_doc_build.sh | 10 +-
tools/testing/selftests/bpf/test_maps.c | 90 +-
tools/testing/selftests/bpf/test_netcnt.c | 148 -
tools/testing/selftests/bpf/test_progs.c | 107 +-
tools/testing/selftests/bpf/test_progs.h | 12 +
tools/testing/selftests/bpf/test_tc_tunnel.sh | 2 +-
tools/testing/selftests/bpf/test_xdp_veth.sh | 2 +-
tools/testing/selftests/bpf/test_xsk.sh | 10 +-
tools/testing/selftests/bpf/trace_helpers.c | 87 +
tools/testing/selftests/bpf/trace_helpers.h | 4 +
tools/testing/selftests/bpf/xdpxceiver.c | 681 +++--
tools/testing/selftests/bpf/xdpxceiver.h | 63 +-
tools/testing/selftests/bpf/xsk_prereqs.sh | 30 +-
tools/testing/selftests/nci/nci_dev.c | 416 ++-
tools/testing/selftests/net/Makefile | 5 +
tools/testing/selftests/net/af_unix/Makefile | 5 +
.../testing/selftests/net/af_unix/test_unix_oob.c | 437 +++
tools/testing/selftests/net/config | 1 +
tools/testing/selftests/net/fcnal-test.sh | 33 +-
tools/testing/selftests/net/fib_rule_tests.sh | 7 +-
.../selftests/net/forwarding/devlink_lib.sh | 15 +-
tools/testing/selftests/net/forwarding/lib.sh | 27 +-
.../selftests/net/forwarding/router_mpath_nh.sh | 2 +-
.../net/forwarding/router_mpath_nh_res.sh | 2 +-
tools/testing/selftests/net/gro.c | 1095 ++++++++
tools/testing/selftests/net/gro.sh | 99 +
tools/testing/selftests/net/ioam6.sh | 652 +++++
tools/testing/selftests/net/ioam6_parser.c | 720 +++++
tools/testing/selftests/net/mptcp/mptcp_join.sh | 345 ++-
tools/testing/selftests/net/mptcp/pm_nl_ctl.c | 16 +-
tools/testing/selftests/net/psock_fanout.c | 4 +-
tools/testing/selftests/net/psock_snd.sh | 3 -
tools/testing/selftests/net/run_afpackettests | 5 +-
tools/testing/selftests/net/setup_loopback.sh | 118 +
tools/testing/selftests/net/setup_veth.sh | 41 +
.../selftests/net/srv6_end_dt46_l3vpn_test.sh | 9 +-
.../selftests/net/srv6_end_dt4_l3vpn_test.sh | 9 +-
.../selftests/net/srv6_end_dt6_l3vpn_test.sh | 9 +-
tools/testing/selftests/net/toeplitz.c | 585 ++++
tools/testing/selftests/net/toeplitz.sh | 199 ++
tools/testing/selftests/net/toeplitz_client.sh | 28 +
tools/testing/selftests/net/unicast_extensions.sh | 5 +-
tools/testing/selftests/net/veth.sh | 183 +-
.../testing/selftests/net/vrf_strict_mode_test.sh | 9 +-
.../tc-testing/tc-tests/actions/skbmod.json | 24 +
.../selftests/tc-testing/tc-tests/qdiscs/mq.json | 137 +
tools/testing/selftests/tc-testing/tdc_config.py | 1 +
1812 files changed, 80507 insertions(+), 41279 deletions(-)
rename Documentation/bpf/libbpf/{libbpf.rst => index.rst} (75%)
delete mode 100644 Documentation/bpf/libbpf/libbpf_api.rst
delete mode 100644 Documentation/devicetree/bindings/net/brcm,unimac-mdio.txt
create mode 100644 Documentation/devicetree/bindings/net/brcm,unimac-mdio.yaml
create mode 100644 Documentation/devicetree/bindings/net/can/bosch,c_can.yaml
delete mode 100644 Documentation/devicetree/bindings/net/can/c_can.txt
create mode 100644 Documentation/devicetree/bindings/net/fsl,fec.yaml
delete mode 100644 Documentation/devicetree/bindings/net/fsl-fec.txt
create mode 100644 Documentation/devicetree/bindings/net/intel,ixp46x-ptp-timer.yaml
create mode 100644 Documentation/devicetree/bindings/net/litex,liteeth.yaml
create mode 100644 Documentation/networking/device_drivers/ethernet/freescale/dpaa2/switch-driver.rst
create mode 100644 Documentation/networking/devlink/hns3.rst
delete mode 100644 Documentation/networking/devlink/sja1105.rst
create mode 100644 Documentation/networking/ioam6-sysctl.rst
create mode 100644 Documentation/networking/mctp.rst
create mode 100644 drivers/net/ethernet/broadcom/bnxt/bnxt_hwrm.c
create mode 100644 drivers/net/ethernet/broadcom/bnxt/bnxt_hwrm.h
create mode 100644 drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.h
create mode 100644 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_devlink.c
create mode 100644 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_devlink.h
create mode 100644 drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_devlink.c
create mode 100644 drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_devlink.h
create mode 100644 drivers/net/ethernet/litex/Kconfig
create mode 100644 drivers/net/ethernet/litex/Makefile
create mode 100644 drivers/net/ethernet/litex/litex_liteeth.c
create mode 100644 drivers/net/ethernet/marvell/octeontx2/af/rvu_sdp.c
create mode 100644 drivers/net/ethernet/marvell/octeontx2/nic/otx2_devlink.c
create mode 100644 drivers/net/ethernet/marvell/octeontx2/nic/otx2_devlink.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/channels.c
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/channels.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/rqt.c
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/rqt.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/rss.c
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/rss.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/rx_res.c
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/rx_res.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/tc/post_act.c
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/tc/post_act.h
rename drivers/net/ethernet/mellanox/mlx5/core/{esw => en/tc}/sample.c (53%)
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/tc/sample.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/tir.c
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/en/tir.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/esw/diag/qos_tracepoint.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/esw/qos.h
delete mode 100644 drivers/net/ethernet/mellanox/mlx5/core/esw/sample.h
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c
create mode 100644 drivers/net/ethernet/mellanox/mlx5/core/lib/fs_ttc.h
create mode 100644 drivers/net/ethernet/microchip/sparx5/sparx5_fdma.c
delete mode 100644 drivers/net/ipa/ipa_clock.c
delete mode 100644 drivers/net/ipa/ipa_clock.h
create mode 100644 drivers/net/ipa/ipa_power.c
create mode 100644 drivers/net/ipa/ipa_power.h
create mode 100644 drivers/net/mctp/Kconfig
create mode 100644 drivers/net/mctp/Makefile
delete mode 100644 drivers/net/mhi/Makefile
delete mode 100644 drivers/net/mhi/mhi.h
delete mode 100644 drivers/net/mhi/proto_mbim.c
rename drivers/net/{mhi/net.c => mhi_net.c} (74%)
create mode 100644 drivers/net/phy/mxl-gpy.c
delete mode 100644 drivers/net/wan/sbni.c
delete mode 100644 drivers/net/wan/sbni.h
create mode 100644 drivers/net/wireless/broadcom/brcm80211/brcmfmac/xtlv.c
create mode 100644 drivers/net/wireless/broadcom/brcm80211/brcmfmac/xtlv.h
delete mode 100644 drivers/net/wireless/intersil/prism54/Makefile
delete mode 100644 drivers/net/wireless/intersil/prism54/isl_38xx.c
delete mode 100644 drivers/net/wireless/intersil/prism54/isl_38xx.h
delete mode 100644 drivers/net/wireless/intersil/prism54/isl_ioctl.c
delete mode 100644 drivers/net/wireless/intersil/prism54/isl_ioctl.h
delete mode 100644 drivers/net/wireless/intersil/prism54/isl_oid.h
delete mode 100644 drivers/net/wireless/intersil/prism54/islpci_dev.c
delete mode 100644 drivers/net/wireless/intersil/prism54/islpci_dev.h
delete mode 100644 drivers/net/wireless/intersil/prism54/islpci_eth.c
delete mode 100644 drivers/net/wireless/intersil/prism54/islpci_eth.h
delete mode 100644 drivers/net/wireless/intersil/prism54/islpci_hotplug.c
delete mode 100644 drivers/net/wireless/intersil/prism54/islpci_mgt.c
delete mode 100644 drivers/net/wireless/intersil/prism54/islpci_mgt.h
delete mode 100644 drivers/net/wireless/intersil/prism54/oid_mgt.c
delete mode 100644 drivers/net/wireless/intersil/prism54/oid_mgt.h
delete mode 100644 drivers/net/wireless/intersil/prism54/prismcompat.h
create mode 100644 drivers/net/wireless/marvell/mwifiex/pcie_quirks.c
create mode 100644 drivers/net/wireless/marvell/mwifiex/pcie_quirks.h
create mode 100644 drivers/net/wwan/mhi_wwan_mbim.c
create mode 100644 include/linux/can/platform/flexcan.h
create mode 100644 include/linux/ioam6.h
create mode 100644 include/linux/ioam6_genl.h
create mode 100644 include/linux/ioam6_iptunnel.h
create mode 100644 include/net/ioam6.h
delete mode 100644 include/net/ipx.h
create mode 100644 include/net/mctp.h
create mode 100644 include/net/mctpdevice.h
create mode 100644 include/net/netfilter/nf_hooks_lwtunnel.h
create mode 100644 include/net/netns/mctp.h
delete mode 100644 include/net/netns/x_tables.h
create mode 100644 include/uapi/linux/ioam6.h
create mode 100644 include/uapi/linux/ioam6_genl.h
create mode 100644 include/uapi/linux/ioam6_iptunnel.h
delete mode 100644 include/uapi/linux/ipx.h
create mode 100644 include/uapi/linux/mctp.h
create mode 100644 include/uapi/linux/nl80211-vnd-intel.h
delete mode 100644 net/802/p8023.c
create mode 100644 net/ipv6/ioam6.c
create mode 100644 net/ipv6/ioam6_iptunnel.c
create mode 100644 net/mctp/Kconfig
create mode 100644 net/mctp/Makefile
create mode 100644 net/mctp/af_mctp.c
create mode 100644 net/mctp/device.c
create mode 100644 net/mctp/neigh.c
create mode 100644 net/mctp/route.c
create mode 100644 net/netfilter/nf_hooks_lwtunnel.c
create mode 100644 net/unix/unix_bpf.c
create mode 100644 samples/bpf/xdp_monitor.bpf.c
delete mode 100644 samples/bpf/xdp_monitor_kern.c
create mode 100644 samples/bpf/xdp_redirect.bpf.c
rename samples/bpf/{xdp_redirect_cpu_kern.c => xdp_redirect_cpu.bpf.c} (52%)
delete mode 100644 samples/bpf/xdp_redirect_kern.c
rename samples/bpf/{xdp_redirect_map_kern.c => xdp_redirect_map.bpf.c} (57%)
rename samples/bpf/{xdp_redirect_map_multi_kern.c => xdp_redirect_map_multi.bpf.c} (64%)
create mode 100644 samples/bpf/xdp_sample.bpf.c
create mode 100644 samples/bpf/xdp_sample.bpf.h
create mode 100644 samples/bpf/xdp_sample_shared.h
create mode 100644 samples/bpf/xdp_sample_user.c
create mode 100644 samples/bpf/xdp_sample_user.h
create mode 100644 tools/lib/bpf/relo_core.c
create mode 100644 tools/lib/bpf/relo_core.h
create mode 100644 tools/testing/selftests/bpf/prog_tests/bpf_cookie.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/bpf_iter_setsockopt.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/btf_module.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/get_func_ip_test.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/netcnt.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/netns_cookie.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/perf_link.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/sockopt_qos_to_cc.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/task_pt_regs.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/timer.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/timer_mim.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/xdp_bonding.c
create mode 100644 tools/testing/selftests/bpf/prog_tests/xdp_context_test_run.c
create mode 100644 tools/testing/selftests/bpf/progs/bpf_dctcp_release.c
create mode 100644 tools/testing/selftests/bpf/progs/bpf_iter_setsockopt.c
create mode 100644 tools/testing/selftests/bpf/progs/bpf_iter_unix.c
create mode 100644 tools/testing/selftests/bpf/progs/get_func_ip_test.c
create mode 100644 tools/testing/selftests/bpf/progs/netns_cookie_prog.c
create mode 100644 tools/testing/selftests/bpf/progs/sockopt_qos_to_cc.c
create mode 100644 tools/testing/selftests/bpf/progs/test_bpf_cookie.c
create mode 100644 tools/testing/selftests/bpf/progs/test_ksyms_weak.c
create mode 100644 tools/testing/selftests/bpf/progs/test_map_in_map_invalid.c
create mode 100644 tools/testing/selftests/bpf/progs/test_perf_link.c
create mode 100644 tools/testing/selftests/bpf/progs/test_task_pt_regs.c
create mode 100644 tools/testing/selftests/bpf/progs/test_xdp_context_test_run.c
create mode 100644 tools/testing/selftests/bpf/progs/timer.c
create mode 100644 tools/testing/selftests/bpf/progs/timer_mim.c
create mode 100644 tools/testing/selftests/bpf/progs/timer_mim_reject.c
create mode 100755 tools/testing/selftests/bpf/test_bpftool_synctypes.py
delete mode 100644 tools/testing/selftests/bpf/test_netcnt.c
create mode 100644 tools/testing/selftests/net/af_unix/Makefile
create mode 100644 tools/testing/selftests/net/af_unix/test_unix_oob.c
create mode 100644 tools/testing/selftests/net/gro.c
create mode 100755 tools/testing/selftests/net/gro.sh
create mode 100755 tools/testing/selftests/net/ioam6.sh
create mode 100644 tools/testing/selftests/net/ioam6_parser.c
create mode 100755 tools/testing/selftests/net/setup_loopback.sh
create mode 100644 tools/testing/selftests/net/setup_veth.sh
create mode 100644 tools/testing/selftests/net/toeplitz.c
create mode 100755 tools/testing/selftests/net/toeplitz.sh
create mode 100755 tools/testing/selftests/net/toeplitz_client.sh
create mode 100644 tools/testing/selftests/tc-testing/tc-tests/qdiscs/mq.json
^ permalink raw reply [relevance 1%]
* Re: [PATCH v8 7/7] drm: remove drm_file.master_lookup_lock
2021-08-31 6:02 14% ` Desmond Cheong Zhi Xi
@ 2021-08-31 12:28 9% ` Daniel Vetter
0 siblings, 0 replies; 200+ results
From: Daniel Vetter @ 2021-08-31 12:28 UTC (permalink / raw)
To: Desmond Cheong Zhi Xi
Cc: maarten.lankhorst, mripard, tzimmermann, airlied, sumit.semwal,
christian.koenig, jani.nikula, joonas.lahtinen, rodrigo.vivi,
chris, ville.syrjala, matthew.auld, dan.carpenter,
tvrtko.ursulin, matthew.d.roper, lucas.demarchi, karthik.b.s,
jose.souza, manasi.d.navare, airlied, aditya.swarup, andrescj,
linux-graphics-maintainer, zackr, dri-devel, linux-kernel,
intel-gfx, linux-media, linaro-mm-sig, skhan, gregkh,
linux-kernel-mentees, Daniel Vetter
On Tue, Aug 31, 2021 at 02:02:39PM +0800, Desmond Cheong Zhi Xi wrote:
> On 26/8/21 9:21 pm, Daniel Vetter wrote:
> > On Thu, Aug 26, 2021 at 10:01:22AM +0800, Desmond Cheong Zhi Xi wrote:
> > > Previously, master_lookup_lock was introduced in
> > > commit 0b0860a3cf5e ("drm: serialize drm_file.master with a new
> > > spinlock") to serialize accesses to drm_file.master. This then allowed
> > > us to write drm_file_get_master in commit 56f0729a510f ("drm: protect
> > > drm_master pointers in drm_lease.c").
> > >
> > > The rationale behind introducing a new spinlock at the time was that
> > > the other lock that could have been used (drm_device.master_mutex) was
> > > the outermost lock, so embedding calls to drm_file_get_master and
> > > drm_is_current_master in various functions easily caused us to invert
> > > the lock hierarchy.
> > >
> > > Following the conversion of master_mutex into a rwsem, and its use to
> > > plug races with modesetting rights, we've untangled some lock
> > > hierarchies and removed the need for using drm_file_get_master and the
> > > unlocked version of drm_is_current_master in multiple places.
> > >
> > > Hence, we can take this opportunity to clean up the locking design by
> > > replacing master_lookup_lock with drm_device.master_rwsem.
> > >
> > > Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
> > > ---
> > > drivers/gpu/drm/drm_auth.c | 19 +++++++------------
> > > drivers/gpu/drm/drm_file.c | 1 -
> > > drivers/gpu/drm/drm_internal.h | 1 +
> > > drivers/gpu/drm/drm_ioctl.c | 4 ++--
> > > drivers/gpu/drm/drm_lease.c | 18 ++++++++----------
> > > include/drm/drm_file.h | 9 +--------
> > > 6 files changed, 19 insertions(+), 33 deletions(-)
> > >
> > > diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
> > > index f2b2f197052a..232416119407 100644
> > > --- a/drivers/gpu/drm/drm_auth.c
> > > +++ b/drivers/gpu/drm/drm_auth.c
> > > @@ -61,10 +61,9 @@
> > > * trusted clients.
> > > */
> > > -static bool drm_is_current_master_locked(struct drm_file *fpriv)
> > > +bool drm_is_current_master_locked(struct drm_file *fpriv)
> > > {
> > > - lockdep_assert_once(lockdep_is_held(&fpriv->master_lookup_lock) ||
> > > - lockdep_is_held(&fpriv->minor->dev->master_rwsem));
> > > + lockdep_assert_held_once(&fpriv->minor->dev->master_rwsem);
> > > return fpriv->is_master && drm_lease_owner(fpriv->master) == fpriv->minor->dev->master;
> > > }
> > > @@ -83,9 +82,9 @@ bool drm_is_current_master(struct drm_file *fpriv)
> > > {
> > > bool ret;
> > > - spin_lock(&fpriv->master_lookup_lock);
> > > + down_read(&fpriv->minor->dev->master_rwsem);
> >
> > Looking at the 3 patches and the need to have a locked version of pretty
> > much everything I'm wondering: Can't we just drop the spinlock completely,
> > and everywhere we've taking it thus far replace it with a
> > lockdep_assert_held_once?
> >
> > The thing is, if there's any path left that doesn't hold the rwsem in at
> > least read mode we have a bug. And the right way to fix such a bug is to
> > grab the rwsem sufficiently high up in the callchain. That way I think we
> > should be able to avoid all these tedious changes to everything, including
> > touching i915 and vmwgfx drivers.
> >
> > Or am I missing something big time?
> > -Daniel
> >
>
> Thanks for taking a look at all the patches and for the suggestions, Daniel.
>
> Just my two cents. I think it makes sense to replace the lock with the
> lockdep assertion. This avoids the weirdness with the lock being taken both
> as an outer lock and sometimes as a deeply embedded inner lock.
>
> But we'll probably have to fix some stuff because I don't think we always
> hold the rwsem in the places where the spinlock is grabbed (i.e. when
> drm_is_current_master or drm_file_get_master is called).
Yeah right I forgot about that again when coming up with this idea. All
the ioctl that read kms state need a read lock too. Maybe those ioctl
could just grab the master rwsem themselves? This should work now that
we've untangled the drm_global_mutex situation I think.
> I'll split the series as suggested so we can test things up to PATCH 4
> ("drm: avoid races with modesetting rights"). For the rest of the series to
> remove the spinlock, I'll take a closer look and probably send out a patch
> later this week.
Sounds great!
-Daniel
>
> Best wishes,
> Desmond
>
> > > ret = drm_is_current_master_locked(fpriv);
> > > - spin_unlock(&fpriv->master_lookup_lock);
> > > + up_read(&fpriv->minor->dev->master_rwsem);
> > > return ret;
> > > }
> > > @@ -120,7 +119,7 @@ int drm_authmagic(struct drm_device *dev, void *data,
> > > DRM_DEBUG("%u\n", auth->magic);
> > > down_write(&dev->master_rwsem);
> > > - if (unlikely(!drm_is_current_master(file_priv))) {
> > > + if (unlikely(!drm_is_current_master_locked(file_priv))) {
> > > up_write(&dev->master_rwsem);
> > > return -EACCES;
> > > }
> > > @@ -178,9 +177,7 @@ static int drm_new_set_master(struct drm_device *dev, struct drm_file *fpriv)
> > > new_master = drm_master_create(dev);
> > > if (!new_master)
> > > return -ENOMEM;
> > > - spin_lock(&fpriv->master_lookup_lock);
> > > fpriv->master = new_master;
> > > - spin_unlock(&fpriv->master_lookup_lock);
> > > fpriv->is_master = 1;
> > > fpriv->authenticated = 1;
> > > @@ -343,9 +340,7 @@ int drm_master_open(struct drm_file *file_priv)
> > > if (!dev->master) {
> > > ret = drm_new_set_master(dev, file_priv);
> > > } else {
> > > - spin_lock(&file_priv->master_lookup_lock);
> > > file_priv->master = drm_master_get(dev->master);
> > > - spin_unlock(&file_priv->master_lookup_lock);
> > > }
> > > up_write(&dev->master_rwsem);
> > > @@ -413,13 +408,13 @@ struct drm_master *drm_file_get_master(struct drm_file *file_priv)
> > > if (!file_priv)
> > > return NULL;
> > > - spin_lock(&file_priv->master_lookup_lock);
> > > + down_read(&file_priv->minor->dev->master_rwsem);
> > > if (!file_priv->master)
> > > goto unlock;
> > > master = drm_master_get(file_priv->master);
> > > unlock:
> > > - spin_unlock(&file_priv->master_lookup_lock);
> > > + up_read(&file_priv->minor->dev->master_rwsem);
> > > return master;
> > > }
> > > EXPORT_SYMBOL(drm_file_get_master);
> > > diff --git a/drivers/gpu/drm/drm_file.c b/drivers/gpu/drm/drm_file.c
> > > index 90b62f360da1..8c846e0179d7 100644
> > > --- a/drivers/gpu/drm/drm_file.c
> > > +++ b/drivers/gpu/drm/drm_file.c
> > > @@ -176,7 +176,6 @@ struct drm_file *drm_file_alloc(struct drm_minor *minor)
> > > init_waitqueue_head(&file->event_wait);
> > > file->event_space = 4096; /* set aside 4k for event buffer */
> > > - spin_lock_init(&file->master_lookup_lock);
> > > mutex_init(&file->event_read_lock);
> > > if (drm_core_check_feature(dev, DRIVER_GEM))
> > > diff --git a/drivers/gpu/drm/drm_internal.h b/drivers/gpu/drm/drm_internal.h
> > > index 17f3548c8ed2..5d421f749a17 100644
> > > --- a/drivers/gpu/drm/drm_internal.h
> > > +++ b/drivers/gpu/drm/drm_internal.h
> > > @@ -132,6 +132,7 @@ int drm_crtc_queue_sequence_ioctl(struct drm_device *dev, void *data,
> > > struct drm_file *filp);
> > > /* drm_auth.c */
> > > +bool drm_is_current_master_locked(struct drm_file *fpriv);
> > > int drm_getmagic(struct drm_device *dev, void *data,
> > > struct drm_file *file_priv);
> > > int drm_authmagic(struct drm_device *dev, void *data,
> > > diff --git a/drivers/gpu/drm/drm_ioctl.c b/drivers/gpu/drm/drm_ioctl.c
> > > index 8bea39ffc5c0..c728437466c3 100644
> > > --- a/drivers/gpu/drm/drm_ioctl.c
> > > +++ b/drivers/gpu/drm/drm_ioctl.c
> > > @@ -386,7 +386,7 @@ static int drm_setversion(struct drm_device *dev, void *data, struct drm_file *f
> > > int if_version, retcode = 0;
> > > down_write(&dev->master_rwsem);
> > > - if (unlikely(!drm_is_current_master(file_priv))) {
> > > + if (unlikely(!drm_is_current_master_locked(file_priv))) {
> > > retcode = -EACCES;
> > > goto unlock;
> > > }
> > > @@ -540,7 +540,7 @@ static int drm_ioctl_permit(u32 flags, struct drm_file *file_priv)
> > > /* MASTER is only for master or control clients */
> > > if (unlikely((flags & DRM_MASTER) &&
> > > - !drm_is_current_master(file_priv)))
> > > + !drm_is_current_master_locked(file_priv)))
> > > return -EACCES;
> > > /* Render clients must be explicitly allowed */
> > > diff --git a/drivers/gpu/drm/drm_lease.c b/drivers/gpu/drm/drm_lease.c
> > > index 15bf3a3c76d1..0eecf320b1ab 100644
> > > --- a/drivers/gpu/drm/drm_lease.c
> > > +++ b/drivers/gpu/drm/drm_lease.c
> > > @@ -498,12 +498,12 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
> > > return PTR_ERR(lessee_file);
> > > down_read(&dev->master_rwsem);
> > > - if (unlikely(!drm_is_current_master(lessor_priv))) {
> > > + if (unlikely(!drm_is_current_master_locked(lessor_priv))) {
> > > ret = -EACCES;
> > > goto out_file;
> > > }
> > > - lessor = drm_file_get_master(lessor_priv);
> > > + lessor = lessor_priv->master;
> > > /* Do not allow sub-leases */
> > > if (lessor->lessor) {
> > > DRM_DEBUG_LEASE("recursive leasing not allowed\n");
> > > @@ -565,7 +565,6 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
> > > /* Hook up the fd */
> > > fd_install(fd, lessee_file);
> > > - drm_master_put(&lessor);
> > > up_read(&dev->master_rwsem);
> > > DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl succeeded\n");
> > > return 0;
> > > @@ -600,7 +599,8 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
> > > if (!drm_core_check_feature(dev, DRIVER_MODESET))
> > > return -EOPNOTSUPP;
> > > - lessor = drm_file_get_master(lessor_priv);
> > > + lockdep_assert_held_once(&dev->master_rwsem);
> > > + lessor = lessor_priv->master;
> > > DRM_DEBUG_LEASE("List lessees for %d\n", lessor->lessee_id);
> > > mutex_lock(&dev->mode_config.idr_mutex);
> > > @@ -624,7 +624,6 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
> > > arg->count_lessees = count;
> > > mutex_unlock(&dev->mode_config.idr_mutex);
> > > - drm_master_put(&lessor);
> > > return ret;
> > > }
> > > @@ -650,7 +649,8 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
> > > if (!drm_core_check_feature(dev, DRIVER_MODESET))
> > > return -EOPNOTSUPP;
> > > - lessee = drm_file_get_master(lessee_priv);
> > > + lockdep_assert_held_once(&dev->master_rwsem);
> > > + lessee = lessee_priv->master;
> > > DRM_DEBUG_LEASE("get lease for %d\n", lessee->lessee_id);
> > > mutex_lock(&dev->mode_config.idr_mutex);
> > > @@ -678,7 +678,6 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
> > > arg->count_objects = count;
> > > mutex_unlock(&dev->mode_config.idr_mutex);
> > > - drm_master_put(&lessee);
> > > return ret;
> > > }
> > > @@ -703,11 +702,11 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
> > > return -EOPNOTSUPP;
> > > down_write(&dev->master_rwsem);
> > > - if (unlikely(!drm_is_current_master(lessor_priv))) {
> > > + if (unlikely(!drm_is_current_master_locked(lessor_priv))) {
> > > ret = -EACCES;
> > > goto unlock;
> > > }
> > > - lessor = drm_file_get_master(lessor_priv);
> > > + lessor = lessor_priv->master;
> > > mutex_lock(&dev->mode_config.idr_mutex);
> > > lessee = _drm_find_lessee(lessor, arg->lessee_id);
> > > @@ -728,7 +727,6 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
> > > fail:
> > > mutex_unlock(&dev->mode_config.idr_mutex);
> > > - drm_master_put(&lessor);
> > > unlock:
> > > up_write(&dev->master_rwsem);
> > > diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
> > > index d12bb2ba7814..e2d49fe3e32d 100644
> > > --- a/include/drm/drm_file.h
> > > +++ b/include/drm/drm_file.h
> > > @@ -227,16 +227,12 @@ struct drm_file {
> > > * @master:
> > > *
> > > * Master this node is currently associated with. Protected by struct
> > > - * &drm_device.master_rwsem, and serialized by @master_lookup_lock.
> > > + * &drm_device.master_rwsem.
> > > *
> > > * Only relevant if drm_is_primary_client() returns true. Note that
> > > * this only matches &drm_device.master if the master is the currently
> > > * active one.
> > > *
> > > - * To update @master, both &drm_device.master_rwsem and
> > > - * @master_lookup_lock need to be held, therefore holding either of
> > > - * them is safe and enough for the read side.
> > > - *
> > > * When dereferencing this pointer, either hold struct
> > > * &drm_device.master_rwsem for the duration of the pointer's use, or
> > > * use drm_file_get_master() if struct &drm_device.master_rwsem is not
> > > @@ -248,9 +244,6 @@ struct drm_file {
> > > */
> > > struct drm_master *master;
> > > - /** @master_lock: Serializes @master. */
> > > - spinlock_t master_lookup_lock;
> > > -
> > > /** @pid: Process that opened this file. */
> > > struct pid *pid;
> > > --
> > > 2.25.1
> > >
> >
>
--
Daniel Vetter
Software Engineer, Intel Corporation
http://blog.ffwll.ch
^ permalink raw reply [relevance 9%]
* [PATCH v10 4/4] drm: avoid races with modesetting rights
2021-08-31 7:24 17% [PATCH v10 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
` (2 preceding siblings ...)
2021-08-31 7:25 18% ` [PATCH v10 3/4] drm: lock drm_global_mutex earlier in the ioctl handler Desmond Cheong Zhi Xi
@ 2021-08-31 7:25 13% ` Desmond Cheong Zhi Xi
2021-09-07 19:50 21% ` [PATCH v10 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
4 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-08-31 7:25 UTC (permalink / raw)
To: maarten.lankhorst, mripard, tzimmermann, airlied, daniel,
sumit.semwal, christian.koenig
Cc: Desmond Cheong Zhi Xi, dri-devel, linux-kernel, intel-gfx, skhan,
gregkh, linux-kernel-mentees, linux-media, linaro-mm-sig,
Daniel Vetter
In drm_client_modeset.c and drm_fb_helper.c,
drm_master_internal_{acquire,release} are used to avoid races with DRM
userspace. These functions hold onto drm_device.master_rwsem while
committing, and bail if there's already a master.
However, there are other places where modesetting rights can race. A
time-of-check-to-time-of-use error can occur if an ioctl that changes
the modeset has its rights revoked after it validates its permissions,
but before it completes.
There are four places where modesetting permissions can change:
- DROP_MASTER ioctl removes rights for a master and its leases
- REVOKE_LEASE ioctl revokes rights for a specific lease
- SET_MASTER ioctl sets the device master if the master role hasn't
been acquired yet
- drm_open which can create a new master for a device if one does not
currently exist
These races can be avoided using drm_device.master_rwsem: users that
perform modesetting should hold a read lock on the new
drm_device.master_rwsem, and users that change these permissions
should hold a write lock.
To avoid deadlocks with master_rwsem, for ioctls that need to check
for modesetting permissions, but also need to hold a write lock on
master_rwsem to protect some other attribute (or recurses to some
function that holds a write lock, like drm_mode_create_lease_ioctl
which eventually calls drm_master_open), we remove the DRM_MASTER flag
and push the master_rwsem lock and permissions check into the ioctl.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
---
drivers/gpu/drm/drm_auth.c | 4 ++++
drivers/gpu/drm/drm_ioctl.c | 20 +++++++++++++++-----
drivers/gpu/drm/drm_lease.c | 35 ++++++++++++++++++++++++-----------
include/drm/drm_device.h | 6 ++++++
4 files changed, 49 insertions(+), 16 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index 73ade0513ccb..65065f7e1499 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -120,6 +120,10 @@ int drm_authmagic(struct drm_device *dev, void *data,
DRM_DEBUG("%u\n", auth->magic);
down_write(&dev->master_rwsem);
+ if (unlikely(!drm_is_current_master(file_priv))) {
+ up_write(&dev->master_rwsem);
+ return -EACCES;
+ }
file = idr_find(&file_priv->master->magic_map, auth->magic);
if (file) {
file->authenticated = 1;
diff --git a/drivers/gpu/drm/drm_ioctl.c b/drivers/gpu/drm/drm_ioctl.c
index fe9c4c0264a9..f6a8aa6c53b3 100644
--- a/drivers/gpu/drm/drm_ioctl.c
+++ b/drivers/gpu/drm/drm_ioctl.c
@@ -386,6 +386,10 @@ static int drm_setversion(struct drm_device *dev, void *data, struct drm_file *f
int if_version, retcode = 0;
down_write(&dev->master_rwsem);
+ if (unlikely(!drm_is_current_master(file_priv))) {
+ retcode = -EACCES;
+ goto unlock;
+ }
if (sv->drm_di_major != -1) {
if (sv->drm_di_major != DRM_IF_MAJOR ||
sv->drm_di_minor < 0 || sv->drm_di_minor > DRM_IF_MINOR) {
@@ -420,8 +424,9 @@ static int drm_setversion(struct drm_device *dev, void *data, struct drm_file *f
sv->drm_di_minor = DRM_IF_MINOR;
sv->drm_dd_major = dev->driver->major;
sv->drm_dd_minor = dev->driver->minor;
- up_write(&dev->master_rwsem);
+unlock:
+ up_write(&dev->master_rwsem);
return retcode;
}
@@ -574,12 +579,12 @@ static const struct drm_ioctl_desc drm_ioctls[] = {
DRM_IOCTL_DEF(DRM_IOCTL_GET_STATS, drm_getstats, 0),
DRM_IOCTL_DEF(DRM_IOCTL_GET_CAP, drm_getcap, DRM_RENDER_ALLOW),
DRM_IOCTL_DEF(DRM_IOCTL_SET_CLIENT_CAP, drm_setclientcap, 0),
- DRM_IOCTL_DEF(DRM_IOCTL_SET_VERSION, drm_setversion, DRM_MASTER),
+ DRM_IOCTL_DEF(DRM_IOCTL_SET_VERSION, drm_setversion, 0),
DRM_IOCTL_DEF(DRM_IOCTL_SET_UNIQUE, drm_invalid_op, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
DRM_IOCTL_DEF(DRM_IOCTL_BLOCK, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
DRM_IOCTL_DEF(DRM_IOCTL_UNBLOCK, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
- DRM_IOCTL_DEF(DRM_IOCTL_AUTH_MAGIC, drm_authmagic, DRM_MASTER),
+ DRM_IOCTL_DEF(DRM_IOCTL_AUTH_MAGIC, drm_authmagic, 0),
DRM_LEGACY_IOCTL_DEF(DRM_IOCTL_ADD_MAP, drm_legacy_addmap_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
DRM_LEGACY_IOCTL_DEF(DRM_IOCTL_RM_MAP, drm_legacy_rmmap_ioctl, DRM_AUTH),
@@ -706,10 +711,10 @@ static const struct drm_ioctl_desc drm_ioctls[] = {
DRM_RENDER_ALLOW),
DRM_IOCTL_DEF(DRM_IOCTL_CRTC_GET_SEQUENCE, drm_crtc_get_sequence_ioctl, 0),
DRM_IOCTL_DEF(DRM_IOCTL_CRTC_QUEUE_SEQUENCE, drm_crtc_queue_sequence_ioctl, 0),
- DRM_IOCTL_DEF(DRM_IOCTL_MODE_CREATE_LEASE, drm_mode_create_lease_ioctl, DRM_MASTER),
+ DRM_IOCTL_DEF(DRM_IOCTL_MODE_CREATE_LEASE, drm_mode_create_lease_ioctl, 0),
DRM_IOCTL_DEF(DRM_IOCTL_MODE_LIST_LESSEES, drm_mode_list_lessees_ioctl, DRM_MASTER),
DRM_IOCTL_DEF(DRM_IOCTL_MODE_GET_LEASE, drm_mode_get_lease_ioctl, DRM_MASTER),
- DRM_IOCTL_DEF(DRM_IOCTL_MODE_REVOKE_LEASE, drm_mode_revoke_lease_ioctl, DRM_MASTER),
+ DRM_IOCTL_DEF(DRM_IOCTL_MODE_REVOKE_LEASE, drm_mode_revoke_lease_ioctl, 0),
};
#define DRM_CORE_IOCTL_COUNT ARRAY_SIZE(drm_ioctls)
@@ -779,6 +784,9 @@ long drm_ioctl_kernel(struct file *file, drm_ioctl_t *func, void *kdata,
if (locked_ioctl)
mutex_lock(&drm_global_mutex);
+ if (unlikely(flags & DRM_MASTER))
+ down_read(&dev->master_rwsem);
+
retcode = drm_ioctl_permit(flags, file_priv);
if (unlikely(retcode))
goto out;
@@ -786,6 +794,8 @@ long drm_ioctl_kernel(struct file *file, drm_ioctl_t *func, void *kdata,
retcode = func(dev, kdata, file_priv);
out:
+ if (unlikely(flags & DRM_MASTER))
+ up_read(&dev->master_rwsem);
if (locked_ioctl)
mutex_unlock(&drm_global_mutex);
return retcode;
diff --git a/drivers/gpu/drm/drm_lease.c b/drivers/gpu/drm/drm_lease.c
index dee4f24a1808..bed6f7636cbe 100644
--- a/drivers/gpu/drm/drm_lease.c
+++ b/drivers/gpu/drm/drm_lease.c
@@ -500,6 +500,18 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
return -EINVAL;
}
+ /* Clone the lessor file to create a new file for us */
+ DRM_DEBUG_LEASE("Allocating lease file\n");
+ lessee_file = file_clone_open(lessor_file);
+ if (IS_ERR(lessee_file))
+ return PTR_ERR(lessee_file);
+
+ down_read(&dev->master_rwsem);
+ if (unlikely(!drm_is_current_master(lessor_priv))) {
+ ret = -EACCES;
+ goto out_file;
+ }
+
lessor = drm_file_get_master(lessor_priv);
/* Do not allow sub-leases */
if (lessor->lessor) {
@@ -547,14 +559,6 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
goto out_leases;
}
- /* Clone the lessor file to create a new file for us */
- DRM_DEBUG_LEASE("Allocating lease file\n");
- lessee_file = file_clone_open(lessor_file);
- if (IS_ERR(lessee_file)) {
- ret = PTR_ERR(lessee_file);
- goto out_lessee;
- }
-
lessee_priv = lessee_file->private_data;
/* Change the file to a master one */
drm_master_put(&lessee_priv->master);
@@ -571,17 +575,19 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
fd_install(fd, lessee_file);
drm_master_put(&lessor);
+ up_read(&dev->master_rwsem);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl succeeded\n");
return 0;
-out_lessee:
- drm_master_put(&lessee);
-
out_leases:
put_unused_fd(fd);
out_lessor:
drm_master_put(&lessor);
+
+out_file:
+ up_read(&dev->master_rwsem);
+ fput(lessee_file);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl failed: %d\n", ret);
return ret;
}
@@ -705,6 +711,11 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ down_write(&dev->master_rwsem);
+ if (unlikely(!drm_is_current_master(lessor_priv))) {
+ ret = -EACCES;
+ goto unlock;
+ }
lessor = drm_file_get_master(lessor_priv);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -728,5 +739,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
mutex_unlock(&dev->mode_config.idr_mutex);
drm_master_put(&lessor);
+unlock:
+ up_write(&dev->master_rwsem);
return ret;
}
diff --git a/include/drm/drm_device.h b/include/drm/drm_device.h
index 142fb2f6e74d..5504f9192408 100644
--- a/include/drm/drm_device.h
+++ b/include/drm/drm_device.h
@@ -151,6 +151,12 @@ struct drm_device {
* Lock for &drm_device.master, &drm_file.was_master,
* &drm_file.is_master, &drm_file.master, &drm_master.unique,
* &drm_master.unique_len, and &drm_master.magic_map.
+ *
+ * Additionally, synchronizes access rights to exclusive resources like
+ * modesetting access between multiple users. For example, users that
+ * can change the modeset or display state must hold a read lock on
+ * @master_rwsem, and users that change modesetting rights should hold
+ * a write lock.
*/
struct rw_semaphore master_rwsem;
--
2.25.1
^ permalink raw reply related [relevance 13%]
* [PATCH v10 3/4] drm: lock drm_global_mutex earlier in the ioctl handler
2021-08-31 7:24 17% [PATCH v10 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
2021-08-31 7:24 18% ` [PATCH v10 1/4] drm: fix null ptr dereference in drm_master_release Desmond Cheong Zhi Xi
2021-08-31 7:24 11% ` [PATCH v10 2/4] drm: convert drm_device.master_mutex into a rwsem Desmond Cheong Zhi Xi
@ 2021-08-31 7:25 18% ` Desmond Cheong Zhi Xi
2021-08-31 7:25 13% ` [PATCH v10 4/4] drm: avoid races with modesetting rights Desmond Cheong Zhi Xi
2021-09-07 19:50 21% ` [PATCH v10 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
4 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-08-31 7:25 UTC (permalink / raw)
To: maarten.lankhorst, mripard, tzimmermann, airlied, daniel,
sumit.semwal, christian.koenig
Cc: Desmond Cheong Zhi Xi, dri-devel, linux-kernel, intel-gfx, skhan,
gregkh, linux-kernel-mentees, linux-media, linaro-mm-sig,
Daniel Vetter
In a future patch, a read lock on drm_device.master_rwsem is
held in the ioctl handler before the check for ioctl
permissions. However, this inverts the lock hierarchy of
drm_global_mutex --> master_rwsem.
To avoid this, we do some prep work to grab the drm_global_mutex
before checking for ioctl permissions.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
---
drivers/gpu/drm/drm_ioctl.c | 21 ++++++++++++---------
1 file changed, 12 insertions(+), 9 deletions(-)
diff --git a/drivers/gpu/drm/drm_ioctl.c b/drivers/gpu/drm/drm_ioctl.c
index 9fc00e36c5d6..fe9c4c0264a9 100644
--- a/drivers/gpu/drm/drm_ioctl.c
+++ b/drivers/gpu/drm/drm_ioctl.c
@@ -767,24 +767,27 @@ long drm_ioctl_kernel(struct file *file, drm_ioctl_t *func, void *kdata,
{
struct drm_file *file_priv = file->private_data;
struct drm_device *dev = file_priv->minor->dev;
+ bool locked_ioctl;
int retcode;
if (drm_dev_is_unplugged(dev))
return -ENODEV;
+ /* Enforce sane locking for modern driver ioctls. */
+ locked_ioctl = (unlikely(drm_core_check_feature(dev, DRIVER_LEGACY)) &&
+ !(flags & DRM_UNLOCKED));
+ if (locked_ioctl)
+ mutex_lock(&drm_global_mutex);
+
retcode = drm_ioctl_permit(flags, file_priv);
if (unlikely(retcode))
- return retcode;
+ goto out;
- /* Enforce sane locking for modern driver ioctls. */
- if (likely(!drm_core_check_feature(dev, DRIVER_LEGACY)) ||
- (flags & DRM_UNLOCKED))
- retcode = func(dev, kdata, file_priv);
- else {
- mutex_lock(&drm_global_mutex);
- retcode = func(dev, kdata, file_priv);
+ retcode = func(dev, kdata, file_priv);
+
+out:
+ if (locked_ioctl)
mutex_unlock(&drm_global_mutex);
- }
return retcode;
}
EXPORT_SYMBOL(drm_ioctl_kernel);
--
2.25.1
^ permalink raw reply related [relevance 18%]
* [PATCH v10 2/4] drm: convert drm_device.master_mutex into a rwsem
2021-08-31 7:24 17% [PATCH v10 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
2021-08-31 7:24 18% ` [PATCH v10 1/4] drm: fix null ptr dereference in drm_master_release Desmond Cheong Zhi Xi
@ 2021-08-31 7:24 11% ` Desmond Cheong Zhi Xi
2021-08-31 7:25 18% ` [PATCH v10 3/4] drm: lock drm_global_mutex earlier in the ioctl handler Desmond Cheong Zhi Xi
` (2 subsequent siblings)
4 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-08-31 7:24 UTC (permalink / raw)
To: maarten.lankhorst, mripard, tzimmermann, airlied, daniel,
sumit.semwal, christian.koenig
Cc: Desmond Cheong Zhi Xi, dri-devel, linux-kernel, intel-gfx, skhan,
gregkh, linux-kernel-mentees, linux-media, linaro-mm-sig,
Daniel Vetter
drm_device.master_mutex currently protects the following:
- drm_device.master
- drm_file.master
- drm_file.was_master
- drm_file.is_master
- drm_master.unique
- drm_master.unique_len
- drm_master.magic_map
There is a clear separation between functions that read or change
these attributes. Hence, convert master_mutex into a rwsem to enable
concurrent readers.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
---
drivers/gpu/drm/drm_auth.c | 35 ++++++++++++++++++-----------------
drivers/gpu/drm/drm_debugfs.c | 4 ++--
drivers/gpu/drm/drm_drv.c | 3 +--
drivers/gpu/drm/drm_ioctl.c | 10 +++++-----
include/drm/drm_auth.h | 6 +++---
include/drm/drm_device.h | 10 ++++++----
include/drm/drm_file.h | 12 ++++++------
7 files changed, 41 insertions(+), 39 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index 60a6b21474b1..73ade0513ccb 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -64,7 +64,7 @@
static bool drm_is_current_master_locked(struct drm_file *fpriv)
{
lockdep_assert_once(lockdep_is_held(&fpriv->master_lookup_lock) ||
- lockdep_is_held(&fpriv->minor->dev->master_mutex));
+ lockdep_is_held(&fpriv->minor->dev->master_rwsem));
return fpriv->is_master && drm_lease_owner(fpriv->master) == fpriv->minor->dev->master;
}
@@ -96,7 +96,7 @@ int drm_getmagic(struct drm_device *dev, void *data, struct drm_file *file_priv)
struct drm_auth *auth = data;
int ret = 0;
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
if (!file_priv->magic) {
ret = idr_alloc(&file_priv->master->magic_map, file_priv,
1, 0, GFP_KERNEL);
@@ -104,7 +104,7 @@ int drm_getmagic(struct drm_device *dev, void *data, struct drm_file *file_priv)
file_priv->magic = ret;
}
auth->magic = file_priv->magic;
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
DRM_DEBUG("%u\n", auth->magic);
@@ -119,13 +119,13 @@ int drm_authmagic(struct drm_device *dev, void *data,
DRM_DEBUG("%u\n", auth->magic);
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
file = idr_find(&file_priv->master->magic_map, auth->magic);
if (file) {
file->authenticated = 1;
idr_replace(&file_priv->master->magic_map, NULL, auth->magic);
}
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
return file ? 0 : -EINVAL;
}
@@ -167,7 +167,7 @@ static int drm_new_set_master(struct drm_device *dev, struct drm_file *fpriv)
struct drm_master *old_master;
struct drm_master *new_master;
- lockdep_assert_held_once(&dev->master_mutex);
+ lockdep_assert_held_once(&dev->master_rwsem);
WARN_ON(fpriv->is_master);
old_master = fpriv->master;
@@ -249,7 +249,7 @@ int drm_setmaster_ioctl(struct drm_device *dev, void *data,
{
int ret;
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
ret = drm_master_check_perm(dev, file_priv);
if (ret)
@@ -281,7 +281,7 @@ int drm_setmaster_ioctl(struct drm_device *dev, void *data,
drm_set_master(dev, file_priv, false);
out_unlock:
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
return ret;
}
@@ -298,7 +298,7 @@ int drm_dropmaster_ioctl(struct drm_device *dev, void *data,
{
int ret;
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
ret = drm_master_check_perm(dev, file_priv);
if (ret)
@@ -321,8 +321,9 @@ int drm_dropmaster_ioctl(struct drm_device *dev, void *data,
}
drm_drop_master(dev, file_priv);
+
out_unlock:
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
return ret;
}
@@ -334,7 +335,7 @@ int drm_master_open(struct drm_file *file_priv)
/* if there is no current master make this fd it, but do not create
* any master object for render clients
*/
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
if (!dev->master) {
ret = drm_new_set_master(dev, file_priv);
} else {
@@ -342,7 +343,7 @@ int drm_master_open(struct drm_file *file_priv)
file_priv->master = drm_master_get(dev->master);
spin_unlock(&file_priv->master_lookup_lock);
}
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
return ret;
}
@@ -352,7 +353,7 @@ void drm_master_release(struct drm_file *file_priv)
struct drm_device *dev = file_priv->minor->dev;
struct drm_master *master;
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
master = file_priv->master;
if (file_priv->magic)
idr_remove(&file_priv->master->magic_map, file_priv->magic);
@@ -375,7 +376,7 @@ void drm_master_release(struct drm_file *file_priv)
/* drop the master reference held by the file priv */
if (file_priv->master)
drm_master_put(&file_priv->master);
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
}
/**
@@ -450,9 +451,9 @@ EXPORT_SYMBOL(drm_master_put);
/* Used by drm_client and drm_fb_helper */
bool drm_master_internal_acquire(struct drm_device *dev)
{
- mutex_lock(&dev->master_mutex);
+ down_read(&dev->master_rwsem);
if (dev->master) {
- mutex_unlock(&dev->master_mutex);
+ up_read(&dev->master_rwsem);
return false;
}
@@ -463,6 +464,6 @@ EXPORT_SYMBOL(drm_master_internal_acquire);
/* Used by drm_client and drm_fb_helper */
void drm_master_internal_release(struct drm_device *dev)
{
- mutex_unlock(&dev->master_mutex);
+ up_read(&dev->master_rwsem);
}
EXPORT_SYMBOL(drm_master_internal_release);
diff --git a/drivers/gpu/drm/drm_debugfs.c b/drivers/gpu/drm/drm_debugfs.c
index b0a826489488..b34c9c263188 100644
--- a/drivers/gpu/drm/drm_debugfs.c
+++ b/drivers/gpu/drm/drm_debugfs.c
@@ -55,7 +55,7 @@ static int drm_name_info(struct seq_file *m, void *data)
struct drm_device *dev = minor->dev;
struct drm_master *master;
- mutex_lock(&dev->master_mutex);
+ down_read(&dev->master_rwsem);
master = dev->master;
seq_printf(m, "%s", dev->driver->name);
if (dev->dev)
@@ -65,7 +65,7 @@ static int drm_name_info(struct seq_file *m, void *data)
if (dev->unique)
seq_printf(m, " unique=%s", dev->unique);
seq_printf(m, "\n");
- mutex_unlock(&dev->master_mutex);
+ up_read(&dev->master_rwsem);
return 0;
}
diff --git a/drivers/gpu/drm/drm_drv.c b/drivers/gpu/drm/drm_drv.c
index 7a5097467ba5..4556bf42954c 100644
--- a/drivers/gpu/drm/drm_drv.c
+++ b/drivers/gpu/drm/drm_drv.c
@@ -570,7 +570,6 @@ static void drm_dev_init_release(struct drm_device *dev, void *res)
/* Prevent use-after-free in drm_managed_release when debugging is
* enabled. Slightly awkward, but can't really be helped. */
dev->dev = NULL;
- mutex_destroy(&dev->master_mutex);
mutex_destroy(&dev->clientlist_mutex);
mutex_destroy(&dev->filelist_mutex);
mutex_destroy(&dev->struct_mutex);
@@ -611,7 +610,7 @@ static int drm_dev_init(struct drm_device *dev,
mutex_init(&dev->struct_mutex);
mutex_init(&dev->filelist_mutex);
mutex_init(&dev->clientlist_mutex);
- mutex_init(&dev->master_mutex);
+ init_rwsem(&dev->master_rwsem);
ret = drmm_add_action(dev, drm_dev_init_release, NULL);
if (ret)
diff --git a/drivers/gpu/drm/drm_ioctl.c b/drivers/gpu/drm/drm_ioctl.c
index 8b8744dcf691..9fc00e36c5d6 100644
--- a/drivers/gpu/drm/drm_ioctl.c
+++ b/drivers/gpu/drm/drm_ioctl.c
@@ -119,16 +119,16 @@ int drm_getunique(struct drm_device *dev, void *data,
struct drm_unique *u = data;
struct drm_master *master;
- mutex_lock(&dev->master_mutex);
+ down_read(&dev->master_rwsem);
master = file_priv->master;
if (u->unique_len >= master->unique_len) {
if (copy_to_user(u->unique, master->unique, master->unique_len)) {
- mutex_unlock(&dev->master_mutex);
+ up_read(&dev->master_rwsem);
return -EFAULT;
}
}
u->unique_len = master->unique_len;
- mutex_unlock(&dev->master_mutex);
+ up_read(&dev->master_rwsem);
return 0;
}
@@ -385,7 +385,7 @@ static int drm_setversion(struct drm_device *dev, void *data, struct drm_file *f
struct drm_set_version *sv = data;
int if_version, retcode = 0;
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
if (sv->drm_di_major != -1) {
if (sv->drm_di_major != DRM_IF_MAJOR ||
sv->drm_di_minor < 0 || sv->drm_di_minor > DRM_IF_MINOR) {
@@ -420,7 +420,7 @@ static int drm_setversion(struct drm_device *dev, void *data, struct drm_file *f
sv->drm_di_minor = DRM_IF_MINOR;
sv->drm_dd_major = dev->driver->major;
sv->drm_dd_minor = dev->driver->minor;
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
return retcode;
}
diff --git a/include/drm/drm_auth.h b/include/drm/drm_auth.h
index ba248ca8866f..f0a89e5fcaad 100644
--- a/include/drm/drm_auth.h
+++ b/include/drm/drm_auth.h
@@ -67,17 +67,17 @@ struct drm_master {
struct drm_device *dev;
/**
* @unique: Unique identifier: e.g. busid. Protected by
- * &drm_device.master_mutex.
+ * &drm_device.master_rwsem.
*/
char *unique;
/**
* @unique_len: Length of unique field. Protected by
- * &drm_device.master_mutex.
+ * &drm_device.master_rwsem.
*/
int unique_len;
/**
* @magic_map: Map of used authentication tokens. Protected by
- * &drm_device.master_mutex.
+ * &drm_device.master_rwsem.
*/
struct idr magic_map;
void *driver_priv;
diff --git a/include/drm/drm_device.h b/include/drm/drm_device.h
index 604b1d1b2d72..142fb2f6e74d 100644
--- a/include/drm/drm_device.h
+++ b/include/drm/drm_device.h
@@ -107,7 +107,7 @@ struct drm_device {
* @master:
*
* Currently active master for this device.
- * Protected by &master_mutex
+ * Protected by &master_rwsem
*/
struct drm_master *master;
@@ -146,11 +146,13 @@ struct drm_device {
struct mutex struct_mutex;
/**
- * @master_mutex:
+ * @master_rwsem:
*
- * Lock for &drm_minor.master and &drm_file.is_master
+ * Lock for &drm_device.master, &drm_file.was_master,
+ * &drm_file.is_master, &drm_file.master, &drm_master.unique,
+ * &drm_master.unique_len, and &drm_master.magic_map.
*/
- struct mutex master_mutex;
+ struct rw_semaphore master_rwsem;
/**
* @open_count:
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index a3acb7ac3550..d12bb2ba7814 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -205,7 +205,7 @@ struct drm_file {
* @was_master:
*
* This client has or had, master capability. Protected by struct
- * &drm_device.master_mutex.
+ * &drm_device.master_rwsem.
*
* This is used to ensure that CAP_SYS_ADMIN is not enforced, if the
* client is or was master in the past.
@@ -216,7 +216,7 @@ struct drm_file {
* @is_master:
*
* This client is the creator of @master. Protected by struct
- * &drm_device.master_mutex.
+ * &drm_device.master_rwsem.
*
* See also the :ref:`section on primary nodes and authentication
* <drm_primary_node>`.
@@ -227,19 +227,19 @@ struct drm_file {
* @master:
*
* Master this node is currently associated with. Protected by struct
- * &drm_device.master_mutex, and serialized by @master_lookup_lock.
+ * &drm_device.master_rwsem, and serialized by @master_lookup_lock.
*
* Only relevant if drm_is_primary_client() returns true. Note that
* this only matches &drm_device.master if the master is the currently
* active one.
*
- * To update @master, both &drm_device.master_mutex and
+ * To update @master, both &drm_device.master_rwsem and
* @master_lookup_lock need to be held, therefore holding either of
* them is safe and enough for the read side.
*
* When dereferencing this pointer, either hold struct
- * &drm_device.master_mutex for the duration of the pointer's use, or
- * use drm_file_get_master() if struct &drm_device.master_mutex is not
+ * &drm_device.master_rwsem for the duration of the pointer's use, or
+ * use drm_file_get_master() if struct &drm_device.master_rwsem is not
* currently held and there is no other need to hold it. This prevents
* @master from being freed during use.
*
--
2.25.1
^ permalink raw reply related [relevance 11%]
* [PATCH v10 1/4] drm: fix null ptr dereference in drm_master_release
2021-08-31 7:24 17% [PATCH v10 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
@ 2021-08-31 7:24 18% ` Desmond Cheong Zhi Xi
2021-08-31 7:24 11% ` [PATCH v10 2/4] drm: convert drm_device.master_mutex into a rwsem Desmond Cheong Zhi Xi
` (3 subsequent siblings)
4 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-08-31 7:24 UTC (permalink / raw)
To: maarten.lankhorst, mripard, tzimmermann, airlied, daniel,
sumit.semwal, christian.koenig
Cc: Desmond Cheong Zhi Xi, dri-devel, linux-kernel, intel-gfx, skhan,
gregkh, linux-kernel-mentees, linux-media, linaro-mm-sig, stable,
Daniel Vetter
drm_master_release can be called on a drm_file without a master, which
results in a null ptr dereference of file_priv->master->magic_map. The
three cases are:
1. Error path in drm_open_helper
drm_open():
drm_open_helper():
drm_master_open():
drm_new_set_master(); <--- returns -ENOMEM,
drm_file.master not set
drm_file_free():
drm_master_release(); <--- NULL ptr dereference
(file_priv->master->magic_map)
2. Error path in mock_drm_getfile
mock_drm_getfile():
anon_inode_getfile(); <--- returns error, drm_file.master not set
drm_file_free():
drm_master_release(); <--- NULL ptr dereference
(file_priv->master->magic_map)
3. In drm_client_close, as drm_client_open doesn't set up a master
drm_file.master is set up in drm_open_helper through the call to
drm_master_open, so we mirror it with a call to drm_master_release in
drm_close_helper, and remove drm_master_release from drm_file_free to
avoid the null ptr dereference.
Fixes: 7eeaeb90a6a5 ("drm/file: Don't set master on in-kernel clients")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Cc: stable@vger.kernel.org
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
---
drivers/gpu/drm/drm_file.c | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/drivers/gpu/drm/drm_file.c b/drivers/gpu/drm/drm_file.c
index ed25168619fc..90b62f360da1 100644
--- a/drivers/gpu/drm/drm_file.c
+++ b/drivers/gpu/drm/drm_file.c
@@ -282,9 +282,6 @@ void drm_file_free(struct drm_file *file)
drm_legacy_ctxbitmap_flush(dev, file);
- if (drm_is_primary_client(file))
- drm_master_release(file);
-
if (dev->driver->postclose)
dev->driver->postclose(dev, file);
@@ -305,6 +302,9 @@ static void drm_close_helper(struct file *filp)
list_del(&file_priv->lhead);
mutex_unlock(&dev->filelist_mutex);
+ if (drm_is_primary_client(file_priv))
+ drm_master_release(file_priv);
+
drm_file_free(file_priv);
}
--
2.25.1
^ permalink raw reply related [relevance 18%]
* [PATCH v10 0/4] drm: update locking for modesetting
@ 2021-08-31 7:24 17% Desmond Cheong Zhi Xi
2021-08-31 7:24 18% ` [PATCH v10 1/4] drm: fix null ptr dereference in drm_master_release Desmond Cheong Zhi Xi
` (4 more replies)
0 siblings, 5 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-08-31 7:24 UTC (permalink / raw)
To: maarten.lankhorst, mripard, tzimmermann, airlied, daniel,
sumit.semwal, christian.koenig
Cc: Desmond Cheong Zhi Xi, dri-devel, linux-kernel, intel-gfx, skhan,
gregkh, linux-kernel-mentees, linux-media, linaro-mm-sig
Sorry for the noise, rebasing on top of drm-misc-next. Please ignore the
v9 series.
Hi,
I updated the patch set with some suggestions by Daniel Vetter, and
dropped the patches after patch 4 so that we can stick the landing for
avoiding races with modesetting rights before dealing with the tricky
spinlock.
Overall, this series fixes races with modesetting rights, and converts
drm_device.master_mutex into master_rwsem.
- Patch 1: Fix a potential null ptr dereference in drm_master_release
- Patch 2: Convert master_mutex into rwsem (avoids creating a new lock)
- Patch 3: Update global mutex locking in the ioctl handler (avoids
deadlock when grabbing read lock on master_rwsem in drm_ioctl_kernel)
- Patch 4: Plug races with drm modesetting rights
v9 -> v10:
- Rebase on top of drm-misc-next, caught by Intel-gfx CI
v8 -> v9 (suggested by Daniel Vetter):
- Drop patches 5-7 to handle it in another series
- Add the appropriate Fixes: tag for the null ptr dereference fix
(patch 1)
- Create a locked_ioctl bool to clarify locking/unlocking patterns in
the ioctl handler (patch 3)
- Clarify the kernel doc for master_rwsem (patch 4)
v7 -> v8:
- Avoid calling drm_lease_held in drm_mode_setcrtc and
drm_wait_vblank_ioctl, caught by Intel-gfx CI
v6 -> v7:
- Export __drm_mode_object_find for loadable modules, caught by the
Intel-gfx CI
v5 -> v6:
- Fix recursive locking on master_rwsem, caught by the Intel-gfx CI
v4 -> v5:
- Avoid calling drm_file_get_master while holding on to the modeset
mutex, caught by the Intel-gfx CI
v3 -> v4 (suggested by Daniel Vetter):
- Drop a patch that added an unnecessary master_lookup_lock in
drm_master_release
- Drop a patch that addressed a non-existent race in
drm_is_current_master_locked
- Remove fixes for non-existent null ptr dereferences
- Protect drm_master.magic_map,unique{_len} with master_rwsem instead of
master_lookup_lock
- Drop the patch that moved master_lookup_lock into struct drm_device
- Drop a patch to export task_work_add
- Revert the check for the global mutex in the ioctl handler to use
drm_core_check_feature instead of drm_dev_needs_global_mutex
- Push down master_rwsem locking for selected ioctls to avoid lock
hierarchy inversions, and to allow us to hold write locks on
master_rwsem instead of flushing readers
- Remove master_lookup_lock by replacing it with master_rwsem
v2 -> v3:
- Unexport drm_master_flush, as suggested by Daniel Vetter.
- Merge master_mutex and master_rwsem, as suggested by Daniel Vetter.
- Export task_work_add, reported by kernel test robot.
- Make master_flush static, reported by kernel test robot.
- Move master_lookup_lock into struct drm_device.
- Add a missing lock on master_lookup_lock in drm_master_release.
- Fix a potential race in drm_is_current_master_locked.
- Fix potential null ptr dereferences in drm_{auth, ioctl}.
- Protect magic_map,unique{_len} with master_lookup_lock.
- Convert master_mutex into a rwsem.
- Update global mutex locking in the ioctl handler.
v1 -> v2 (suggested by Daniel Vetter):
- Address an additional race when drm_open runs.
- Switch from SRCU to rwsem to synchronise readers and writers.
- Implement drm_master_flush with task_work so that flushes can be
queued to run before returning to userspace without creating a new
DRM_MASTER_FLUSH ioctl flag.
Best wishes,
Desmond
Desmond Cheong Zhi Xi (4):
drm: fix null ptr dereference in drm_master_release
drm: convert drm_device.master_mutex into a rwsem
drm: lock drm_global_mutex earlier in the ioctl handler
drm: avoid races with modesetting rights
drivers/gpu/drm/drm_auth.c | 39 ++++++++++++++++------------
drivers/gpu/drm/drm_debugfs.c | 4 +--
drivers/gpu/drm/drm_drv.c | 3 +--
drivers/gpu/drm/drm_file.c | 6 ++---
drivers/gpu/drm/drm_ioctl.c | 49 ++++++++++++++++++++++-------------
drivers/gpu/drm/drm_lease.c | 35 +++++++++++++++++--------
include/drm/drm_auth.h | 6 ++---
include/drm/drm_device.h | 16 +++++++++---
include/drm/drm_file.h | 12 ++++-----
9 files changed, 104 insertions(+), 66 deletions(-)
--
2.25.1
^ permalink raw reply [relevance 17%]
* [PATCH] Bluetooth: fix race in sco_sock_connect
@ 2021-08-31 6:56 10% Desmond Cheong Zhi Xi
0 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-08-31 6:56 UTC (permalink / raw)
To: marcel, johan.hedberg, luiz.dentz, davem, kuba
Cc: Desmond Cheong Zhi Xi, linux-bluetooth, netdev, linux-kernel,
skhan, gregkh, linux-kernel-mentees, syzbot+2bef95d3ab4daa10155b,
Hillf Danton
Syzbot reported a use-after-free Write in sco_sock_timeout [1]:
==================================================================
BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
BUG: KASAN: use-after-free in atomic_fetch_add_relaxed include/asm-generic/atomic-instrumented.h:111 [inline]
BUG: KASAN: use-after-free in __refcount_add include/linux/refcount.h:193 [inline]
BUG: KASAN: use-after-free in __refcount_inc include/linux/refcount.h:250 [inline]
BUG: KASAN: use-after-free in refcount_inc include/linux/refcount.h:267 [inline]
BUG: KASAN: use-after-free in sock_hold include/net/sock.h:702 [inline]
BUG: KASAN: use-after-free in sco_sock_timeout+0x64/0x290 net/bluetooth/sco.c:88
Write of size 4 at addr ffff888034b46080 by task kworker/1:0/20
CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.14.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events sco_sock_timeout
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:105
print_address_description.constprop.0.cold+0x6c/0x309 mm/kasan/report.c:233
__kasan_report mm/kasan/report.c:419 [inline]
kasan_report.cold+0x83/0xdf mm/kasan/report.c:436
check_region_inline mm/kasan/generic.c:183 [inline]
kasan_check_range+0x13d/0x180 mm/kasan/generic.c:189
instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
atomic_fetch_add_relaxed include/asm-generic/atomic-instrumented.h:111 [inline]
__refcount_add include/linux/refcount.h:193 [inline]
__refcount_inc include/linux/refcount.h:250 [inline]
refcount_inc include/linux/refcount.h:267 [inline]
sock_hold include/net/sock.h:702 [inline]
sco_sock_timeout+0x64/0x290 net/bluetooth/sco.c:88
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Allocated by task 4872:
kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
kasan_set_track mm/kasan/common.c:46 [inline]
set_alloc_info mm/kasan/common.c:434 [inline]
____kasan_kmalloc mm/kasan/common.c:513 [inline]
____kasan_kmalloc mm/kasan/common.c:472 [inline]
__kasan_kmalloc+0x9b/0xd0 mm/kasan/common.c:522
kmalloc include/linux/slab.h:596 [inline]
sk_prot_alloc+0x110/0x290 net/core/sock.c:1822
sk_alloc+0x32/0xbc0 net/core/sock.c:1875
__netlink_create+0x63/0x2f0 net/netlink/af_netlink.c:640
netlink_create+0x3ad/0x5e0 net/netlink/af_netlink.c:703
__sock_create+0x353/0x790 net/socket.c:1461
sock_create net/socket.c:1512 [inline]
__sys_socket+0xef/0x200 net/socket.c:1554
__do_sys_socket net/socket.c:1563 [inline]
__se_sys_socket net/socket.c:1561 [inline]
__x64_sys_socket+0x6f/0xb0 net/socket.c:1561
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
Freed by task 0:
kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
kasan_set_track+0x1c/0x30 mm/kasan/common.c:46
kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:360
____kasan_slab_free mm/kasan/common.c:366 [inline]
____kasan_slab_free mm/kasan/common.c:328 [inline]
__kasan_slab_free+0xfb/0x130 mm/kasan/common.c:374
kasan_slab_free include/linux/kasan.h:230 [inline]
slab_free_hook mm/slub.c:1628 [inline]
slab_free_freelist_hook+0xdf/0x240 mm/slub.c:1653
slab_free mm/slub.c:3213 [inline]
kfree+0xe4/0x540 mm/slub.c:4267
sk_prot_free net/core/sock.c:1858 [inline]
__sk_destruct+0x6a8/0x900 net/core/sock.c:1943
sk_destruct+0xbd/0xe0 net/core/sock.c:1958
__sk_free+0xef/0x3d0 net/core/sock.c:1969
sk_free+0x78/0xa0 net/core/sock.c:1980
deferred_put_nlk_sk+0x151/0x2f0 net/netlink/af_netlink.c:740
rcu_do_batch kernel/rcu/tree.c:2550 [inline]
rcu_core+0x7ab/0x1380 kernel/rcu/tree.c:2785
__do_softirq+0x29b/0x9c2 kernel/softirq.c:558
Last potentially related work creation:
kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
kasan_record_aux_stack+0xe5/0x110 mm/kasan/generic.c:348
__call_rcu kernel/rcu/tree.c:3029 [inline]
call_rcu+0xb1/0x750 kernel/rcu/tree.c:3109
netlink_release+0xdd4/0x1dd0 net/netlink/af_netlink.c:812
__sock_release+0xcd/0x280 net/socket.c:649
sock_close+0x18/0x20 net/socket.c:1311
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
__do_sys_exit_group kernel/exit.c:933 [inline]
__se_sys_exit_group kernel/exit.c:931 [inline]
__x64_sys_exit_group+0x3a/0x50 kernel/exit.c:931
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
Second to last potentially related work creation:
kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
kasan_record_aux_stack+0xe5/0x110 mm/kasan/generic.c:348
__call_rcu kernel/rcu/tree.c:3029 [inline]
call_rcu+0xb1/0x750 kernel/rcu/tree.c:3109
netlink_release+0xdd4/0x1dd0 net/netlink/af_netlink.c:812
__sock_release+0xcd/0x280 net/socket.c:649
sock_close+0x18/0x20 net/socket.c:1311
__fput+0x288/0x920 fs/file_table.c:280
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
exit_task_work include/linux/task_work.h:32 [inline]
do_exit+0xbd4/0x2a60 kernel/exit.c:825
do_group_exit+0x125/0x310 kernel/exit.c:922
__do_sys_exit_group kernel/exit.c:933 [inline]
__se_sys_exit_group kernel/exit.c:931 [inline]
__x64_sys_exit_group+0x3a/0x50 kernel/exit.c:931
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
The buggy address belongs to the object at ffff888034b46000
which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 128 bytes inside of
2048-byte region [ffff888034b46000, ffff888034b46800)
The buggy address belongs to the page:
page:ffffea0000d2d000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34b40
head:ffffea0000d2d000 order:3 compound_mapcount:0 compound_pincount:0
flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000010200 ffffea0000c37a00 0000000200000002 ffff888010c42000
raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8634, ts 417197903424, free_ts 417180376519
prep_new_page mm/page_alloc.c:2436 [inline]
get_page_from_freelist+0xa72/0x2f80 mm/page_alloc.c:4169
__alloc_pages+0x1b2/0x500 mm/page_alloc.c:5391
alloc_pages+0x18c/0x2a0 mm/mempolicy.c:2244
alloc_slab_page mm/slub.c:1691 [inline]
allocate_slab+0x32e/0x4b0 mm/slub.c:1831
new_slab mm/slub.c:1894 [inline]
new_slab_objects mm/slub.c:2640 [inline]
___slab_alloc+0x473/0x7b0 mm/slub.c:2803
__slab_alloc.constprop.0+0xa7/0xf0 mm/slub.c:2843
slab_alloc_node mm/slub.c:2925 [inline]
__kmalloc_node_track_caller+0x2e3/0x360 mm/slub.c:4653
kmalloc_reserve net/core/skbuff.c:355 [inline]
__alloc_skb+0xde/0x340 net/core/skbuff.c:426
alloc_skb include/linux/skbuff.h:1116 [inline]
alloc_skb_with_frags+0x93/0x620 net/core/skbuff.c:6073
sock_alloc_send_pskb+0x783/0x910 net/core/sock.c:2475
mld_newpack+0x1df/0x770 net/ipv6/mcast.c:1756
add_grhead+0x265/0x330 net/ipv6/mcast.c:1859
add_grec+0x1053/0x14e0 net/ipv6/mcast.c:1997
mld_send_initial_cr.part.0+0xf6/0x230 net/ipv6/mcast.c:2244
mld_send_initial_cr net/ipv6/mcast.c:1232 [inline]
ipv6_mc_dad_complete+0x1d0/0x690 net/ipv6/mcast.c:2255
addrconf_dad_completed+0xa20/0xd60 net/ipv6/addrconf.c:4181
page last free stack trace:
reset_page_owner include/linux/page_owner.h:24 [inline]
free_pages_prepare mm/page_alloc.c:1346 [inline]
free_pcp_prepare+0x2c5/0x780 mm/page_alloc.c:1397
free_unref_page_prepare mm/page_alloc.c:3332 [inline]
free_unref_page+0x19/0x690 mm/page_alloc.c:3411
unfreeze_partials+0x16c/0x1b0 mm/slub.c:2421
put_cpu_partial+0x13d/0x230 mm/slub.c:2457
qlink_free mm/kasan/quarantine.c:146 [inline]
qlist_free_all+0x5a/0xc0 mm/kasan/quarantine.c:165
kasan_quarantine_reduce+0x180/0x200 mm/kasan/quarantine.c:272
__kasan_slab_alloc+0x8e/0xa0 mm/kasan/common.c:444
kasan_slab_alloc include/linux/kasan.h:254 [inline]
slab_post_alloc_hook mm/slab.h:519 [inline]
slab_alloc_node mm/slub.c:2959 [inline]
slab_alloc mm/slub.c:2967 [inline]
kmem_cache_alloc+0x285/0x4a0 mm/slub.c:2972
getname_flags.part.0+0x50/0x4f0 fs/namei.c:138
getname_flags fs/namei.c:2747 [inline]
user_path_at_empty+0xa1/0x100 fs/namei.c:2747
user_path_at include/linux/namei.h:57 [inline]
vfs_statx+0x142/0x390 fs/stat.c:203
vfs_fstatat fs/stat.c:225 [inline]
vfs_lstat include/linux/fs.h:3386 [inline]
__do_sys_newlstat+0x91/0x110 fs/stat.c:380
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
Memory state around the buggy address:
ffff888034b45f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
ffff888034b46000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
> ffff888034b46080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff888034b46100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff888034b46180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
sco_sock_connect checks the socket's state before allocating a new SCO
connection and creating a channel for it with the given socket.
However, because this check occurs outside the socket lock, multiple
concurrent calls to sco_sock_connect are able to pass the check before
serially entering the critical section and making multiple recursive
calls to sco_connect.
The result is that multiple SCO connections are allocated, but each
connection overrides the socket's channel with the previous
connection. This may cause a UAF because the overwritten connections
can't have their channels deleted when the socket is released, so
sco_sock_timeout is able to access the freed socket.
Fix this by checking the socket's state after the socket is locked in
sco_sock_connect.
Link: https://syzkaller.appspot.com/bug?extid=2bef95d3ab4daa10155b [1]
Reported-by: syzbot+2bef95d3ab4daa10155b@syzkaller.appspotmail.com
Tested-by: syzbot+2bef95d3ab4daa10155b@syzkaller.appspotmail.com
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Cc: Hillf Danton <hdanton@sina.com>
---
net/bluetooth/sco.c | 10 +++++++---
1 file changed, 7 insertions(+), 3 deletions(-)
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 98a881586512..fa25b07120c9 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -578,9 +578,6 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
addr->sa_family != AF_BLUETOOTH)
return -EINVAL;
- if (sk->sk_state != BT_OPEN && sk->sk_state != BT_BOUND)
- return -EBADFD;
-
if (sk->sk_type != SOCK_SEQPACKET)
return -EINVAL;
@@ -591,6 +588,13 @@ static int sco_sock_connect(struct socket *sock, struct sockaddr *addr, int alen
lock_sock(sk);
+ if (sk->sk_state != BT_OPEN && sk->sk_state != BT_BOUND) {
+ hci_dev_unlock(hdev);
+ hci_dev_put(hdev);
+ err = -EBADFD;
+ goto done;
+ }
+
/* Set destination address and psm */
bacpy(&sco_pi(sk)->dst, &sa->sco_bdaddr);
--
2.25.1
^ permalink raw reply related [relevance 10%]
* [PATCH v9 4/4] drm: avoid races with modesetting rights
2021-08-31 6:13 17% [PATCH v9 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
` (2 preceding siblings ...)
2021-08-31 6:13 18% ` [PATCH v9 3/4] drm: lock drm_global_mutex earlier in the ioctl handler Desmond Cheong Zhi Xi
@ 2021-08-31 6:13 13% ` Desmond Cheong Zhi Xi
3 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-08-31 6:13 UTC (permalink / raw)
To: maarten.lankhorst, mripard, tzimmermann, airlied, daniel,
sumit.semwal, christian.koenig
Cc: Desmond Cheong Zhi Xi, dri-devel, linux-kernel, intel-gfx, skhan,
gregkh, linux-kernel-mentees, linux-media, linaro-mm-sig,
Daniel Vetter
In drm_client_modeset.c and drm_fb_helper.c,
drm_master_internal_{acquire,release} are used to avoid races with DRM
userspace. These functions hold onto drm_device.master_rwsem while
committing, and bail if there's already a master.
However, there are other places where modesetting rights can race. A
time-of-check-to-time-of-use error can occur if an ioctl that changes
the modeset has its rights revoked after it validates its permissions,
but before it completes.
There are four places where modesetting permissions can change:
- DROP_MASTER ioctl removes rights for a master and its leases
- REVOKE_LEASE ioctl revokes rights for a specific lease
- SET_MASTER ioctl sets the device master if the master role hasn't
been acquired yet
- drm_open which can create a new master for a device if one does not
currently exist
These races can be avoided using drm_device.master_rwsem: users that
perform modesetting should hold a read lock on the new
drm_device.master_rwsem, and users that change these permissions
should hold a write lock.
To avoid deadlocks with master_rwsem, for ioctls that need to check
for modesetting permissions, but also need to hold a write lock on
master_rwsem to protect some other attribute (or recurses to some
function that holds a write lock, like drm_mode_create_lease_ioctl
which eventually calls drm_master_open), we remove the DRM_MASTER flag
and push the master_rwsem lock and permissions check into the ioctl.
Reported-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
---
drivers/gpu/drm/drm_auth.c | 4 ++++
drivers/gpu/drm/drm_ioctl.c | 20 +++++++++++++++-----
drivers/gpu/drm/drm_lease.c | 35 ++++++++++++++++++++++++-----------
include/drm/drm_device.h | 6 ++++++
4 files changed, 49 insertions(+), 16 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index 73ade0513ccb..65065f7e1499 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -120,6 +120,10 @@ int drm_authmagic(struct drm_device *dev, void *data,
DRM_DEBUG("%u\n", auth->magic);
down_write(&dev->master_rwsem);
+ if (unlikely(!drm_is_current_master(file_priv))) {
+ up_write(&dev->master_rwsem);
+ return -EACCES;
+ }
file = idr_find(&file_priv->master->magic_map, auth->magic);
if (file) {
file->authenticated = 1;
diff --git a/drivers/gpu/drm/drm_ioctl.c b/drivers/gpu/drm/drm_ioctl.c
index 59c5aa850dd5..96ae6b661c0a 100644
--- a/drivers/gpu/drm/drm_ioctl.c
+++ b/drivers/gpu/drm/drm_ioctl.c
@@ -386,6 +386,10 @@ static int drm_setversion(struct drm_device *dev, void *data, struct drm_file *f
int if_version, retcode = 0;
down_write(&dev->master_rwsem);
+ if (unlikely(!drm_is_current_master(file_priv))) {
+ retcode = -EACCES;
+ goto unlock;
+ }
if (sv->drm_di_major != -1) {
if (sv->drm_di_major != DRM_IF_MAJOR ||
sv->drm_di_minor < 0 || sv->drm_di_minor > DRM_IF_MINOR) {
@@ -420,8 +424,9 @@ static int drm_setversion(struct drm_device *dev, void *data, struct drm_file *f
sv->drm_di_minor = DRM_IF_MINOR;
sv->drm_dd_major = dev->driver->major;
sv->drm_dd_minor = dev->driver->minor;
- up_write(&dev->master_rwsem);
+unlock:
+ up_write(&dev->master_rwsem);
return retcode;
}
@@ -574,12 +579,12 @@ static const struct drm_ioctl_desc drm_ioctls[] = {
DRM_IOCTL_DEF(DRM_IOCTL_GET_STATS, drm_getstats, 0),
DRM_IOCTL_DEF(DRM_IOCTL_GET_CAP, drm_getcap, DRM_RENDER_ALLOW),
DRM_IOCTL_DEF(DRM_IOCTL_SET_CLIENT_CAP, drm_setclientcap, 0),
- DRM_IOCTL_DEF(DRM_IOCTL_SET_VERSION, drm_setversion, DRM_MASTER),
+ DRM_IOCTL_DEF(DRM_IOCTL_SET_VERSION, drm_setversion, 0),
DRM_IOCTL_DEF(DRM_IOCTL_SET_UNIQUE, drm_invalid_op, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
DRM_IOCTL_DEF(DRM_IOCTL_BLOCK, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
DRM_IOCTL_DEF(DRM_IOCTL_UNBLOCK, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
- DRM_IOCTL_DEF(DRM_IOCTL_AUTH_MAGIC, drm_authmagic, DRM_MASTER),
+ DRM_IOCTL_DEF(DRM_IOCTL_AUTH_MAGIC, drm_authmagic, 0),
DRM_LEGACY_IOCTL_DEF(DRM_IOCTL_ADD_MAP, drm_legacy_addmap_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
DRM_LEGACY_IOCTL_DEF(DRM_IOCTL_RM_MAP, drm_legacy_rmmap_ioctl, DRM_AUTH),
@@ -706,10 +711,10 @@ static const struct drm_ioctl_desc drm_ioctls[] = {
DRM_RENDER_ALLOW),
DRM_IOCTL_DEF(DRM_IOCTL_CRTC_GET_SEQUENCE, drm_crtc_get_sequence_ioctl, 0),
DRM_IOCTL_DEF(DRM_IOCTL_CRTC_QUEUE_SEQUENCE, drm_crtc_queue_sequence_ioctl, 0),
- DRM_IOCTL_DEF(DRM_IOCTL_MODE_CREATE_LEASE, drm_mode_create_lease_ioctl, DRM_MASTER),
+ DRM_IOCTL_DEF(DRM_IOCTL_MODE_CREATE_LEASE, drm_mode_create_lease_ioctl, 0),
DRM_IOCTL_DEF(DRM_IOCTL_MODE_LIST_LESSEES, drm_mode_list_lessees_ioctl, DRM_MASTER),
DRM_IOCTL_DEF(DRM_IOCTL_MODE_GET_LEASE, drm_mode_get_lease_ioctl, DRM_MASTER),
- DRM_IOCTL_DEF(DRM_IOCTL_MODE_REVOKE_LEASE, drm_mode_revoke_lease_ioctl, DRM_MASTER),
+ DRM_IOCTL_DEF(DRM_IOCTL_MODE_REVOKE_LEASE, drm_mode_revoke_lease_ioctl, 0),
};
#define DRM_CORE_IOCTL_COUNT ARRAY_SIZE( drm_ioctls )
@@ -779,6 +784,9 @@ long drm_ioctl_kernel(struct file *file, drm_ioctl_t *func, void *kdata,
if (locked_ioctl)
mutex_lock(&drm_global_mutex);
+ if (unlikely(flags & DRM_MASTER))
+ down_read(&dev->master_rwsem);
+
retcode = drm_ioctl_permit(flags, file_priv);
if (unlikely(retcode))
goto out;
@@ -786,6 +794,8 @@ long drm_ioctl_kernel(struct file *file, drm_ioctl_t *func, void *kdata,
retcode = func(dev, kdata, file_priv);
out:
+ if (unlikely(flags & DRM_MASTER))
+ up_read(&dev->master_rwsem);
if (locked_ioctl)
mutex_unlock(&drm_global_mutex);
return retcode;
diff --git a/drivers/gpu/drm/drm_lease.c b/drivers/gpu/drm/drm_lease.c
index dee4f24a1808..bed6f7636cbe 100644
--- a/drivers/gpu/drm/drm_lease.c
+++ b/drivers/gpu/drm/drm_lease.c
@@ -500,6 +500,18 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
return -EINVAL;
}
+ /* Clone the lessor file to create a new file for us */
+ DRM_DEBUG_LEASE("Allocating lease file\n");
+ lessee_file = file_clone_open(lessor_file);
+ if (IS_ERR(lessee_file))
+ return PTR_ERR(lessee_file);
+
+ down_read(&dev->master_rwsem);
+ if (unlikely(!drm_is_current_master(lessor_priv))) {
+ ret = -EACCES;
+ goto out_file;
+ }
+
lessor = drm_file_get_master(lessor_priv);
/* Do not allow sub-leases */
if (lessor->lessor) {
@@ -547,14 +559,6 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
goto out_leases;
}
- /* Clone the lessor file to create a new file for us */
- DRM_DEBUG_LEASE("Allocating lease file\n");
- lessee_file = file_clone_open(lessor_file);
- if (IS_ERR(lessee_file)) {
- ret = PTR_ERR(lessee_file);
- goto out_lessee;
- }
-
lessee_priv = lessee_file->private_data;
/* Change the file to a master one */
drm_master_put(&lessee_priv->master);
@@ -571,17 +575,19 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
fd_install(fd, lessee_file);
drm_master_put(&lessor);
+ up_read(&dev->master_rwsem);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl succeeded\n");
return 0;
-out_lessee:
- drm_master_put(&lessee);
-
out_leases:
put_unused_fd(fd);
out_lessor:
drm_master_put(&lessor);
+
+out_file:
+ up_read(&dev->master_rwsem);
+ fput(lessee_file);
DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl failed: %d\n", ret);
return ret;
}
@@ -705,6 +711,11 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
if (!drm_core_check_feature(dev, DRIVER_MODESET))
return -EOPNOTSUPP;
+ down_write(&dev->master_rwsem);
+ if (unlikely(!drm_is_current_master(lessor_priv))) {
+ ret = -EACCES;
+ goto unlock;
+ }
lessor = drm_file_get_master(lessor_priv);
mutex_lock(&dev->mode_config.idr_mutex);
@@ -728,5 +739,7 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
mutex_unlock(&dev->mode_config.idr_mutex);
drm_master_put(&lessor);
+unlock:
+ up_write(&dev->master_rwsem);
return ret;
}
diff --git a/include/drm/drm_device.h b/include/drm/drm_device.h
index 142fb2f6e74d..5504f9192408 100644
--- a/include/drm/drm_device.h
+++ b/include/drm/drm_device.h
@@ -151,6 +151,12 @@ struct drm_device {
* Lock for &drm_device.master, &drm_file.was_master,
* &drm_file.is_master, &drm_file.master, &drm_master.unique,
* &drm_master.unique_len, and &drm_master.magic_map.
+ *
+ * Additionally, synchronizes access rights to exclusive resources like
+ * modesetting access between multiple users. For example, users that
+ * can change the modeset or display state must hold a read lock on
+ * @master_rwsem, and users that change modesetting rights should hold
+ * a write lock.
*/
struct rw_semaphore master_rwsem;
--
2.25.1
^ permalink raw reply related [relevance 13%]
* [PATCH v9 3/4] drm: lock drm_global_mutex earlier in the ioctl handler
2021-08-31 6:13 17% [PATCH v9 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
2021-08-31 6:13 18% ` [PATCH v9 1/4] drm: fix null ptr dereference in drm_master_release Desmond Cheong Zhi Xi
2021-08-31 6:13 11% ` [PATCH v9 2/4] drm: convert drm_device.master_mutex into a rwsem Desmond Cheong Zhi Xi
@ 2021-08-31 6:13 18% ` Desmond Cheong Zhi Xi
2021-08-31 6:13 13% ` [PATCH v9 4/4] drm: avoid races with modesetting rights Desmond Cheong Zhi Xi
3 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-08-31 6:13 UTC (permalink / raw)
To: maarten.lankhorst, mripard, tzimmermann, airlied, daniel,
sumit.semwal, christian.koenig
Cc: Desmond Cheong Zhi Xi, dri-devel, linux-kernel, intel-gfx, skhan,
gregkh, linux-kernel-mentees, linux-media, linaro-mm-sig,
Daniel Vetter
In a future patch, a read lock on drm_device.master_rwsem is
held in the ioctl handler before the check for ioctl
permissions. However, this inverts the lock hierarchy of
drm_global_mutex --> master_rwsem.
To avoid this, we do some prep work to grab the drm_global_mutex
before checking for ioctl permissions.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
---
drivers/gpu/drm/drm_ioctl.c | 21 ++++++++++++---------
1 file changed, 12 insertions(+), 9 deletions(-)
diff --git a/drivers/gpu/drm/drm_ioctl.c b/drivers/gpu/drm/drm_ioctl.c
index d25713b09b80..59c5aa850dd5 100644
--- a/drivers/gpu/drm/drm_ioctl.c
+++ b/drivers/gpu/drm/drm_ioctl.c
@@ -767,24 +767,27 @@ long drm_ioctl_kernel(struct file *file, drm_ioctl_t *func, void *kdata,
{
struct drm_file *file_priv = file->private_data;
struct drm_device *dev = file_priv->minor->dev;
+ bool locked_ioctl;
int retcode;
if (drm_dev_is_unplugged(dev))
return -ENODEV;
+ /* Enforce sane locking for modern driver ioctls. */
+ locked_ioctl = (unlikely(drm_core_check_feature(dev, DRIVER_LEGACY)) &&
+ !(flags & DRM_UNLOCKED));
+ if (locked_ioctl)
+ mutex_lock(&drm_global_mutex);
+
retcode = drm_ioctl_permit(flags, file_priv);
if (unlikely(retcode))
- return retcode;
+ goto out;
- /* Enforce sane locking for modern driver ioctls. */
- if (likely(!drm_core_check_feature(dev, DRIVER_LEGACY)) ||
- (flags & DRM_UNLOCKED))
- retcode = func(dev, kdata, file_priv);
- else {
- mutex_lock(&drm_global_mutex);
- retcode = func(dev, kdata, file_priv);
+ retcode = func(dev, kdata, file_priv);
+
+out:
+ if (locked_ioctl)
mutex_unlock(&drm_global_mutex);
- }
return retcode;
}
EXPORT_SYMBOL(drm_ioctl_kernel);
--
2.25.1
^ permalink raw reply related [relevance 18%]
* [PATCH v9 2/4] drm: convert drm_device.master_mutex into a rwsem
2021-08-31 6:13 17% [PATCH v9 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
2021-08-31 6:13 18% ` [PATCH v9 1/4] drm: fix null ptr dereference in drm_master_release Desmond Cheong Zhi Xi
@ 2021-08-31 6:13 11% ` Desmond Cheong Zhi Xi
2021-08-31 6:13 18% ` [PATCH v9 3/4] drm: lock drm_global_mutex earlier in the ioctl handler Desmond Cheong Zhi Xi
2021-08-31 6:13 13% ` [PATCH v9 4/4] drm: avoid races with modesetting rights Desmond Cheong Zhi Xi
3 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-08-31 6:13 UTC (permalink / raw)
To: maarten.lankhorst, mripard, tzimmermann, airlied, daniel,
sumit.semwal, christian.koenig
Cc: Desmond Cheong Zhi Xi, dri-devel, linux-kernel, intel-gfx, skhan,
gregkh, linux-kernel-mentees, linux-media, linaro-mm-sig,
Daniel Vetter
drm_device.master_mutex currently protects the following:
- drm_device.master
- drm_file.master
- drm_file.was_master
- drm_file.is_master
- drm_master.unique
- drm_master.unique_len
- drm_master.magic_map
There is a clear separation between functions that read or change
these attributes. Hence, convert master_mutex into a rwsem to enable
concurrent readers.
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
---
drivers/gpu/drm/drm_auth.c | 35 ++++++++++++++++++-----------------
drivers/gpu/drm/drm_debugfs.c | 4 ++--
drivers/gpu/drm/drm_drv.c | 3 +--
drivers/gpu/drm/drm_ioctl.c | 10 +++++-----
include/drm/drm_auth.h | 6 +++---
include/drm/drm_device.h | 10 ++++++----
include/drm/drm_file.h | 12 ++++++------
7 files changed, 41 insertions(+), 39 deletions(-)
diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
index 60a6b21474b1..73ade0513ccb 100644
--- a/drivers/gpu/drm/drm_auth.c
+++ b/drivers/gpu/drm/drm_auth.c
@@ -64,7 +64,7 @@
static bool drm_is_current_master_locked(struct drm_file *fpriv)
{
lockdep_assert_once(lockdep_is_held(&fpriv->master_lookup_lock) ||
- lockdep_is_held(&fpriv->minor->dev->master_mutex));
+ lockdep_is_held(&fpriv->minor->dev->master_rwsem));
return fpriv->is_master && drm_lease_owner(fpriv->master) == fpriv->minor->dev->master;
}
@@ -96,7 +96,7 @@ int drm_getmagic(struct drm_device *dev, void *data, struct drm_file *file_priv)
struct drm_auth *auth = data;
int ret = 0;
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
if (!file_priv->magic) {
ret = idr_alloc(&file_priv->master->magic_map, file_priv,
1, 0, GFP_KERNEL);
@@ -104,7 +104,7 @@ int drm_getmagic(struct drm_device *dev, void *data, struct drm_file *file_priv)
file_priv->magic = ret;
}
auth->magic = file_priv->magic;
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
DRM_DEBUG("%u\n", auth->magic);
@@ -119,13 +119,13 @@ int drm_authmagic(struct drm_device *dev, void *data,
DRM_DEBUG("%u\n", auth->magic);
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
file = idr_find(&file_priv->master->magic_map, auth->magic);
if (file) {
file->authenticated = 1;
idr_replace(&file_priv->master->magic_map, NULL, auth->magic);
}
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
return file ? 0 : -EINVAL;
}
@@ -167,7 +167,7 @@ static int drm_new_set_master(struct drm_device *dev, struct drm_file *fpriv)
struct drm_master *old_master;
struct drm_master *new_master;
- lockdep_assert_held_once(&dev->master_mutex);
+ lockdep_assert_held_once(&dev->master_rwsem);
WARN_ON(fpriv->is_master);
old_master = fpriv->master;
@@ -249,7 +249,7 @@ int drm_setmaster_ioctl(struct drm_device *dev, void *data,
{
int ret;
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
ret = drm_master_check_perm(dev, file_priv);
if (ret)
@@ -281,7 +281,7 @@ int drm_setmaster_ioctl(struct drm_device *dev, void *data,
drm_set_master(dev, file_priv, false);
out_unlock:
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
return ret;
}
@@ -298,7 +298,7 @@ int drm_dropmaster_ioctl(struct drm_device *dev, void *data,
{
int ret;
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
ret = drm_master_check_perm(dev, file_priv);
if (ret)
@@ -321,8 +321,9 @@ int drm_dropmaster_ioctl(struct drm_device *dev, void *data,
}
drm_drop_master(dev, file_priv);
+
out_unlock:
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
return ret;
}
@@ -334,7 +335,7 @@ int drm_master_open(struct drm_file *file_priv)
/* if there is no current master make this fd it, but do not create
* any master object for render clients
*/
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
if (!dev->master) {
ret = drm_new_set_master(dev, file_priv);
} else {
@@ -342,7 +343,7 @@ int drm_master_open(struct drm_file *file_priv)
file_priv->master = drm_master_get(dev->master);
spin_unlock(&file_priv->master_lookup_lock);
}
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
return ret;
}
@@ -352,7 +353,7 @@ void drm_master_release(struct drm_file *file_priv)
struct drm_device *dev = file_priv->minor->dev;
struct drm_master *master;
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
master = file_priv->master;
if (file_priv->magic)
idr_remove(&file_priv->master->magic_map, file_priv->magic);
@@ -375,7 +376,7 @@ void drm_master_release(struct drm_file *file_priv)
/* drop the master reference held by the file priv */
if (file_priv->master)
drm_master_put(&file_priv->master);
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
}
/**
@@ -450,9 +451,9 @@ EXPORT_SYMBOL(drm_master_put);
/* Used by drm_client and drm_fb_helper */
bool drm_master_internal_acquire(struct drm_device *dev)
{
- mutex_lock(&dev->master_mutex);
+ down_read(&dev->master_rwsem);
if (dev->master) {
- mutex_unlock(&dev->master_mutex);
+ up_read(&dev->master_rwsem);
return false;
}
@@ -463,6 +464,6 @@ EXPORT_SYMBOL(drm_master_internal_acquire);
/* Used by drm_client and drm_fb_helper */
void drm_master_internal_release(struct drm_device *dev)
{
- mutex_unlock(&dev->master_mutex);
+ up_read(&dev->master_rwsem);
}
EXPORT_SYMBOL(drm_master_internal_release);
diff --git a/drivers/gpu/drm/drm_debugfs.c b/drivers/gpu/drm/drm_debugfs.c
index b0a826489488..b34c9c263188 100644
--- a/drivers/gpu/drm/drm_debugfs.c
+++ b/drivers/gpu/drm/drm_debugfs.c
@@ -55,7 +55,7 @@ static int drm_name_info(struct seq_file *m, void *data)
struct drm_device *dev = minor->dev;
struct drm_master *master;
- mutex_lock(&dev->master_mutex);
+ down_read(&dev->master_rwsem);
master = dev->master;
seq_printf(m, "%s", dev->driver->name);
if (dev->dev)
@@ -65,7 +65,7 @@ static int drm_name_info(struct seq_file *m, void *data)
if (dev->unique)
seq_printf(m, " unique=%s", dev->unique);
seq_printf(m, "\n");
- mutex_unlock(&dev->master_mutex);
+ up_read(&dev->master_rwsem);
return 0;
}
diff --git a/drivers/gpu/drm/drm_drv.c b/drivers/gpu/drm/drm_drv.c
index 7a5097467ba5..4556bf42954c 100644
--- a/drivers/gpu/drm/drm_drv.c
+++ b/drivers/gpu/drm/drm_drv.c
@@ -570,7 +570,6 @@ static void drm_dev_init_release(struct drm_device *dev, void *res)
/* Prevent use-after-free in drm_managed_release when debugging is
* enabled. Slightly awkward, but can't really be helped. */
dev->dev = NULL;
- mutex_destroy(&dev->master_mutex);
mutex_destroy(&dev->clientlist_mutex);
mutex_destroy(&dev->filelist_mutex);
mutex_destroy(&dev->struct_mutex);
@@ -611,7 +610,7 @@ static int drm_dev_init(struct drm_device *dev,
mutex_init(&dev->struct_mutex);
mutex_init(&dev->filelist_mutex);
mutex_init(&dev->clientlist_mutex);
- mutex_init(&dev->master_mutex);
+ init_rwsem(&dev->master_rwsem);
ret = drmm_add_action(dev, drm_dev_init_release, NULL);
if (ret)
diff --git a/drivers/gpu/drm/drm_ioctl.c b/drivers/gpu/drm/drm_ioctl.c
index 26f3a9ede8fe..d25713b09b80 100644
--- a/drivers/gpu/drm/drm_ioctl.c
+++ b/drivers/gpu/drm/drm_ioctl.c
@@ -119,16 +119,16 @@ int drm_getunique(struct drm_device *dev, void *data,
struct drm_unique *u = data;
struct drm_master *master;
- mutex_lock(&dev->master_mutex);
+ down_read(&dev->master_rwsem);
master = file_priv->master;
if (u->unique_len >= master->unique_len) {
if (copy_to_user(u->unique, master->unique, master->unique_len)) {
- mutex_unlock(&dev->master_mutex);
+ up_read(&dev->master_rwsem);
return -EFAULT;
}
}
u->unique_len = master->unique_len;
- mutex_unlock(&dev->master_mutex);
+ up_read(&dev->master_rwsem);
return 0;
}
@@ -385,7 +385,7 @@ static int drm_setversion(struct drm_device *dev, void *data, struct drm_file *f
struct drm_set_version *sv = data;
int if_version, retcode = 0;
- mutex_lock(&dev->master_mutex);
+ down_write(&dev->master_rwsem);
if (sv->drm_di_major != -1) {
if (sv->drm_di_major != DRM_IF_MAJOR ||
sv->drm_di_minor < 0 || sv->drm_di_minor > DRM_IF_MINOR) {
@@ -420,7 +420,7 @@ static int drm_setversion(struct drm_device *dev, void *data, struct drm_file *f
sv->drm_di_minor = DRM_IF_MINOR;
sv->drm_dd_major = dev->driver->major;
sv->drm_dd_minor = dev->driver->minor;
- mutex_unlock(&dev->master_mutex);
+ up_write(&dev->master_rwsem);
return retcode;
}
diff --git a/include/drm/drm_auth.h b/include/drm/drm_auth.h
index ba248ca8866f..f0a89e5fcaad 100644
--- a/include/drm/drm_auth.h
+++ b/include/drm/drm_auth.h
@@ -67,17 +67,17 @@ struct drm_master {
struct drm_device *dev;
/**
* @unique: Unique identifier: e.g. busid. Protected by
- * &drm_device.master_mutex.
+ * &drm_device.master_rwsem.
*/
char *unique;
/**
* @unique_len: Length of unique field. Protected by
- * &drm_device.master_mutex.
+ * &drm_device.master_rwsem.
*/
int unique_len;
/**
* @magic_map: Map of used authentication tokens. Protected by
- * &drm_device.master_mutex.
+ * &drm_device.master_rwsem.
*/
struct idr magic_map;
void *driver_priv;
diff --git a/include/drm/drm_device.h b/include/drm/drm_device.h
index 604b1d1b2d72..142fb2f6e74d 100644
--- a/include/drm/drm_device.h
+++ b/include/drm/drm_device.h
@@ -107,7 +107,7 @@ struct drm_device {
* @master:
*
* Currently active master for this device.
- * Protected by &master_mutex
+ * Protected by &master_rwsem
*/
struct drm_master *master;
@@ -146,11 +146,13 @@ struct drm_device {
struct mutex struct_mutex;
/**
- * @master_mutex:
+ * @master_rwsem:
*
- * Lock for &drm_minor.master and &drm_file.is_master
+ * Lock for &drm_device.master, &drm_file.was_master,
+ * &drm_file.is_master, &drm_file.master, &drm_master.unique,
+ * &drm_master.unique_len, and &drm_master.magic_map.
*/
- struct mutex master_mutex;
+ struct rw_semaphore master_rwsem;
/**
* @open_count:
diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
index a3acb7ac3550..d12bb2ba7814 100644
--- a/include/drm/drm_file.h
+++ b/include/drm/drm_file.h
@@ -205,7 +205,7 @@ struct drm_file {
* @was_master:
*
* This client has or had, master capability. Protected by struct
- * &drm_device.master_mutex.
+ * &drm_device.master_rwsem.
*
* This is used to ensure that CAP_SYS_ADMIN is not enforced, if the
* client is or was master in the past.
@@ -216,7 +216,7 @@ struct drm_file {
* @is_master:
*
* This client is the creator of @master. Protected by struct
- * &drm_device.master_mutex.
+ * &drm_device.master_rwsem.
*
* See also the :ref:`section on primary nodes and authentication
* <drm_primary_node>`.
@@ -227,19 +227,19 @@ struct drm_file {
* @master:
*
* Master this node is currently associated with. Protected by struct
- * &drm_device.master_mutex, and serialized by @master_lookup_lock.
+ * &drm_device.master_rwsem, and serialized by @master_lookup_lock.
*
* Only relevant if drm_is_primary_client() returns true. Note that
* this only matches &drm_device.master if the master is the currently
* active one.
*
- * To update @master, both &drm_device.master_mutex and
+ * To update @master, both &drm_device.master_rwsem and
* @master_lookup_lock need to be held, therefore holding either of
* them is safe and enough for the read side.
*
* When dereferencing this pointer, either hold struct
- * &drm_device.master_mutex for the duration of the pointer's use, or
- * use drm_file_get_master() if struct &drm_device.master_mutex is not
+ * &drm_device.master_rwsem for the duration of the pointer's use, or
+ * use drm_file_get_master() if struct &drm_device.master_rwsem is not
* currently held and there is no other need to hold it. This prevents
* @master from being freed during use.
*
--
2.25.1
^ permalink raw reply related [relevance 11%]
* [PATCH v9 1/4] drm: fix null ptr dereference in drm_master_release
2021-08-31 6:13 17% [PATCH v9 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
@ 2021-08-31 6:13 18% ` Desmond Cheong Zhi Xi
2021-08-31 6:13 11% ` [PATCH v9 2/4] drm: convert drm_device.master_mutex into a rwsem Desmond Cheong Zhi Xi
` (2 subsequent siblings)
3 siblings, 0 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-08-31 6:13 UTC (permalink / raw)
To: maarten.lankhorst, mripard, tzimmermann, airlied, daniel,
sumit.semwal, christian.koenig
Cc: Desmond Cheong Zhi Xi, dri-devel, linux-kernel, intel-gfx, skhan,
gregkh, linux-kernel-mentees, linux-media, linaro-mm-sig, stable,
Daniel Vetter
drm_master_release can be called on a drm_file without a master, which
results in a null ptr dereference of file_priv->master->magic_map. The
three cases are:
1. Error path in drm_open_helper
drm_open():
drm_open_helper():
drm_master_open():
drm_new_set_master(); <--- returns -ENOMEM,
drm_file.master not set
drm_file_free():
drm_master_release(); <--- NULL ptr dereference
(file_priv->master->magic_map)
2. Error path in mock_drm_getfile
mock_drm_getfile():
anon_inode_getfile(); <--- returns error, drm_file.master not set
drm_file_free():
drm_master_release(); <--- NULL ptr dereference
(file_priv->master->magic_map)
3. In drm_client_close, as drm_client_open doesn't set up a master
drm_file.master is set up in drm_open_helper through the call to
drm_master_open, so we mirror it with a call to drm_master_release in
drm_close_helper, and remove drm_master_release from drm_file_free to
avoid the null ptr dereference.
Fixes: 7eeaeb90a6a5 ("drm/file: Don't set master on in-kernel clients")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Cc: stable@vger.kernel.org
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
---
drivers/gpu/drm/drm_file.c | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/drivers/gpu/drm/drm_file.c b/drivers/gpu/drm/drm_file.c
index ed25168619fc..90b62f360da1 100644
--- a/drivers/gpu/drm/drm_file.c
+++ b/drivers/gpu/drm/drm_file.c
@@ -282,9 +282,6 @@ void drm_file_free(struct drm_file *file)
drm_legacy_ctxbitmap_flush(dev, file);
- if (drm_is_primary_client(file))
- drm_master_release(file);
-
if (dev->driver->postclose)
dev->driver->postclose(dev, file);
@@ -305,6 +302,9 @@ static void drm_close_helper(struct file *filp)
list_del(&file_priv->lhead);
mutex_unlock(&dev->filelist_mutex);
+ if (drm_is_primary_client(file_priv))
+ drm_master_release(file_priv);
+
drm_file_free(file_priv);
}
--
2.25.1
^ permalink raw reply related [relevance 18%]
* [PATCH v9 0/4] drm: update locking for modesetting
@ 2021-08-31 6:13 17% Desmond Cheong Zhi Xi
2021-08-31 6:13 18% ` [PATCH v9 1/4] drm: fix null ptr dereference in drm_master_release Desmond Cheong Zhi Xi
` (3 more replies)
0 siblings, 4 replies; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-08-31 6:13 UTC (permalink / raw)
To: maarten.lankhorst, mripard, tzimmermann, airlied, daniel,
sumit.semwal, christian.koenig
Cc: Desmond Cheong Zhi Xi, dri-devel, linux-kernel, intel-gfx, skhan,
gregkh, linux-kernel-mentees, linux-media, linaro-mm-sig
Hi,
I updated the patch set with some suggestions by Daniel Vetter, and
dropped the patches after patch 4 so that we can stick the landing for
avoiding races with modesetting rights before dealing with the tricky
spinlock.
Overall, this series fixes races with modesetting rights, and converts
drm_device.master_mutex into master_rwsem.
- Patch 1: Fix a potential null ptr dereference in drm_master_release
- Patch 2: Convert master_mutex into rwsem (avoids creating a new lock)
- Patch 3: Update global mutex locking in the ioctl handler (avoids
deadlock when grabbing read lock on master_rwsem in drm_ioctl_kernel)
- Patch 4: Plug races with drm modesetting rights
v8 -> v9 (suggested by Daniel Vetter):
- Dropped patches 5-7 to handle it in another series
- Added the appropriate Fixes: tag for the null ptr dereference fix
(patch 1)
- Create a locked_ioctl bool to clarify locking/unlocking patterns in
the ioctl handler (patch 3)
- Clarified the kernel doc for master_rwsem (patch 4)
v7 -> v8:
- Avoid calling drm_lease_held in drm_mode_setcrtc and
drm_wait_vblank_ioctl, caught by Intel-gfx CI
v6 -> v7:
- Export __drm_mode_object_find for loadable modules, caught by the
Intel-gfx CI
v5 -> v6:
- Fix recursive locking on master_rwsem, caught by the Intel-gfx CI
v4 -> v5:
- Avoid calling drm_file_get_master while holding on to the modeset
mutex, caught by the Intel-gfx CI
v3 -> v4 (suggested by Daniel Vetter):
- Drop a patch that added an unnecessary master_lookup_lock in
drm_master_release
- Drop a patch that addressed a non-existent race in
drm_is_current_master_locked
- Remove fixes for non-existent null ptr dereferences
- Protect drm_master.magic_map,unique{_len} with master_rwsem instead of
master_lookup_lock
- Drop the patch that moved master_lookup_lock into struct drm_device
- Drop a patch to export task_work_add
- Revert the check for the global mutex in the ioctl handler to use
drm_core_check_feature instead of drm_dev_needs_global_mutex
- Push down master_rwsem locking for selected ioctls to avoid lock
hierarchy inversions, and to allow us to hold write locks on
master_rwsem instead of flushing readers
- Remove master_lookup_lock by replacing it with master_rwsem
v2 -> v3:
- Unexport drm_master_flush, as suggested by Daniel Vetter.
- Merge master_mutex and master_rwsem, as suggested by Daniel Vetter.
- Export task_work_add, reported by kernel test robot.
- Make master_flush static, reported by kernel test robot.
- Move master_lookup_lock into struct drm_device.
- Add a missing lock on master_lookup_lock in drm_master_release.
- Fix a potential race in drm_is_current_master_locked.
- Fix potential null ptr dereferences in drm_{auth, ioctl}.
- Protect magic_map,unique{_len} with master_lookup_lock.
- Convert master_mutex into a rwsem.
- Update global mutex locking in the ioctl handler.
v1 -> v2 (suggested by Daniel Vetter):
- Address an additional race when drm_open runs.
- Switch from SRCU to rwsem to synchronise readers and writers.
- Implement drm_master_flush with task_work so that flushes can be
queued to run before returning to userspace without creating a new
DRM_MASTER_FLUSH ioctl flag.
Best wishes,
Desmond
Desmond Cheong Zhi Xi (4):
drm: fix null ptr dereference in drm_master_release
drm: convert drm_device.master_mutex into a rwsem
drm: lock drm_global_mutex earlier in the ioctl handler
drm: avoid races with modesetting rights
drivers/gpu/drm/drm_auth.c | 39 ++++++++++++++++------------
drivers/gpu/drm/drm_debugfs.c | 4 +--
drivers/gpu/drm/drm_drv.c | 3 +--
drivers/gpu/drm/drm_file.c | 6 ++---
drivers/gpu/drm/drm_ioctl.c | 49 ++++++++++++++++++++++-------------
drivers/gpu/drm/drm_lease.c | 35 +++++++++++++++++--------
include/drm/drm_auth.h | 6 ++---
include/drm/drm_device.h | 16 +++++++++---
include/drm/drm_file.h | 12 ++++-----
9 files changed, 104 insertions(+), 66 deletions(-)
--
2.25.1
^ permalink raw reply [relevance 17%]
* Re: [PATCH v8 7/7] drm: remove drm_file.master_lookup_lock
@ 2021-08-31 6:02 14% ` Desmond Cheong Zhi Xi
2021-08-31 12:28 9% ` Daniel Vetter
0 siblings, 1 reply; 200+ results
From: Desmond Cheong Zhi Xi @ 2021-08-31 6:02 UTC (permalink / raw)
To: maarten.lankhorst, mripard, tzimmermann, airlied, sumit.semwal,
christian.koenig, jani.nikula, joonas.lahtinen, rodrigo.vivi,
chris, ville.syrjala, matthew.auld, dan.carpenter,
tvrtko.ursulin, matthew.d.roper, lucas.demarchi, karthik.b.s,
jose.souza, manasi.d.navare, airlied, aditya.swarup, andrescj,
linux-graphics-maintainer, zackr, dri-devel, linux-kernel,
intel-gfx, linux-media, linaro-mm-sig, skhan, gregkh,
linux-kernel-mentees, Daniel Vetter
On 26/8/21 9:21 pm, Daniel Vetter wrote:
> On Thu, Aug 26, 2021 at 10:01:22AM +0800, Desmond Cheong Zhi Xi wrote:
>> Previously, master_lookup_lock was introduced in
>> commit 0b0860a3cf5e ("drm: serialize drm_file.master with a new
>> spinlock") to serialize accesses to drm_file.master. This then allowed
>> us to write drm_file_get_master in commit 56f0729a510f ("drm: protect
>> drm_master pointers in drm_lease.c").
>>
>> The rationale behind introducing a new spinlock at the time was that
>> the other lock that could have been used (drm_device.master_mutex) was
>> the outermost lock, so embedding calls to drm_file_get_master and
>> drm_is_current_master in various functions easily caused us to invert
>> the lock hierarchy.
>>
>> Following the conversion of master_mutex into a rwsem, and its use to
>> plug races with modesetting rights, we've untangled some lock
>> hierarchies and removed the need for using drm_file_get_master and the
>> unlocked version of drm_is_current_master in multiple places.
>>
>> Hence, we can take this opportunity to clean up the locking design by
>> replacing master_lookup_lock with drm_device.master_rwsem.
>>
>> Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
>> ---
>> drivers/gpu/drm/drm_auth.c | 19 +++++++------------
>> drivers/gpu/drm/drm_file.c | 1 -
>> drivers/gpu/drm/drm_internal.h | 1 +
>> drivers/gpu/drm/drm_ioctl.c | 4 ++--
>> drivers/gpu/drm/drm_lease.c | 18 ++++++++----------
>> include/drm/drm_file.h | 9 +--------
>> 6 files changed, 19 insertions(+), 33 deletions(-)
>>
>> diff --git a/drivers/gpu/drm/drm_auth.c b/drivers/gpu/drm/drm_auth.c
>> index f2b2f197052a..232416119407 100644
>> --- a/drivers/gpu/drm/drm_auth.c
>> +++ b/drivers/gpu/drm/drm_auth.c
>> @@ -61,10 +61,9 @@
>> * trusted clients.
>> */
>>
>> -static bool drm_is_current_master_locked(struct drm_file *fpriv)
>> +bool drm_is_current_master_locked(struct drm_file *fpriv)
>> {
>> - lockdep_assert_once(lockdep_is_held(&fpriv->master_lookup_lock) ||
>> - lockdep_is_held(&fpriv->minor->dev->master_rwsem));
>> + lockdep_assert_held_once(&fpriv->minor->dev->master_rwsem);
>>
>> return fpriv->is_master && drm_lease_owner(fpriv->master) == fpriv->minor->dev->master;
>> }
>> @@ -83,9 +82,9 @@ bool drm_is_current_master(struct drm_file *fpriv)
>> {
>> bool ret;
>>
>> - spin_lock(&fpriv->master_lookup_lock);
>> + down_read(&fpriv->minor->dev->master_rwsem);
>
> Looking at the 3 patches and the need to have a locked version of pretty
> much everything I'm wondering: Can't we just drop the spinlock completely,
> and everywhere we've taking it thus far replace it with a
> lockdep_assert_held_once?
>
> The thing is, if there's any path left that doesn't hold the rwsem in at
> least read mode we have a bug. And the right way to fix such a bug is to
> grab the rwsem sufficiently high up in the callchain. That way I think we
> should be able to avoid all these tedious changes to everything, including
> touching i915 and vmwgfx drivers.
>
> Or am I missing something big time?
> -Daniel
>
Thanks for taking a look at all the patches and for the suggestions, Daniel.
Just my two cents. I think it makes sense to replace the lock with the
lockdep assertion. This avoids the weirdness with the lock being taken
both as an outer lock and sometimes as a deeply embedded inner lock.
But we'll probably have to fix some stuff because I don't think we
always hold the rwsem in the places where the spinlock is grabbed (i.e.
when drm_is_current_master or drm_file_get_master is called).
I'll split the series as suggested so we can test things up to PATCH 4
("drm: avoid races with modesetting rights"). For the rest of the series
to remove the spinlock, I'll take a closer look and probably send out a
patch later this week.
Best wishes,
Desmond
>> ret = drm_is_current_master_locked(fpriv);
>> - spin_unlock(&fpriv->master_lookup_lock);
>> + up_read(&fpriv->minor->dev->master_rwsem);
>>
>> return ret;
>> }
>> @@ -120,7 +119,7 @@ int drm_authmagic(struct drm_device *dev, void *data,
>> DRM_DEBUG("%u\n", auth->magic);
>>
>> down_write(&dev->master_rwsem);
>> - if (unlikely(!drm_is_current_master(file_priv))) {
>> + if (unlikely(!drm_is_current_master_locked(file_priv))) {
>> up_write(&dev->master_rwsem);
>> return -EACCES;
>> }
>> @@ -178,9 +177,7 @@ static int drm_new_set_master(struct drm_device *dev, struct drm_file *fpriv)
>> new_master = drm_master_create(dev);
>> if (!new_master)
>> return -ENOMEM;
>> - spin_lock(&fpriv->master_lookup_lock);
>> fpriv->master = new_master;
>> - spin_unlock(&fpriv->master_lookup_lock);
>>
>> fpriv->is_master = 1;
>> fpriv->authenticated = 1;
>> @@ -343,9 +340,7 @@ int drm_master_open(struct drm_file *file_priv)
>> if (!dev->master) {
>> ret = drm_new_set_master(dev, file_priv);
>> } else {
>> - spin_lock(&file_priv->master_lookup_lock);
>> file_priv->master = drm_master_get(dev->master);
>> - spin_unlock(&file_priv->master_lookup_lock);
>> }
>> up_write(&dev->master_rwsem);
>>
>> @@ -413,13 +408,13 @@ struct drm_master *drm_file_get_master(struct drm_file *file_priv)
>> if (!file_priv)
>> return NULL;
>>
>> - spin_lock(&file_priv->master_lookup_lock);
>> + down_read(&file_priv->minor->dev->master_rwsem);
>> if (!file_priv->master)
>> goto unlock;
>> master = drm_master_get(file_priv->master);
>>
>> unlock:
>> - spin_unlock(&file_priv->master_lookup_lock);
>> + up_read(&file_priv->minor->dev->master_rwsem);
>> return master;
>> }
>> EXPORT_SYMBOL(drm_file_get_master);
>> diff --git a/drivers/gpu/drm/drm_file.c b/drivers/gpu/drm/drm_file.c
>> index 90b62f360da1..8c846e0179d7 100644
>> --- a/drivers/gpu/drm/drm_file.c
>> +++ b/drivers/gpu/drm/drm_file.c
>> @@ -176,7 +176,6 @@ struct drm_file *drm_file_alloc(struct drm_minor *minor)
>> init_waitqueue_head(&file->event_wait);
>> file->event_space = 4096; /* set aside 4k for event buffer */
>>
>> - spin_lock_init(&file->master_lookup_lock);
>> mutex_init(&file->event_read_lock);
>>
>> if (drm_core_check_feature(dev, DRIVER_GEM))
>> diff --git a/drivers/gpu/drm/drm_internal.h b/drivers/gpu/drm/drm_internal.h
>> index 17f3548c8ed2..5d421f749a17 100644
>> --- a/drivers/gpu/drm/drm_internal.h
>> +++ b/drivers/gpu/drm/drm_internal.h
>> @@ -132,6 +132,7 @@ int drm_crtc_queue_sequence_ioctl(struct drm_device *dev, void *data,
>> struct drm_file *filp);
>>
>> /* drm_auth.c */
>> +bool drm_is_current_master_locked(struct drm_file *fpriv);
>> int drm_getmagic(struct drm_device *dev, void *data,
>> struct drm_file *file_priv);
>> int drm_authmagic(struct drm_device *dev, void *data,
>> diff --git a/drivers/gpu/drm/drm_ioctl.c b/drivers/gpu/drm/drm_ioctl.c
>> index 8bea39ffc5c0..c728437466c3 100644
>> --- a/drivers/gpu/drm/drm_ioctl.c
>> +++ b/drivers/gpu/drm/drm_ioctl.c
>> @@ -386,7 +386,7 @@ static int drm_setversion(struct drm_device *dev, void *data, struct drm_file *f
>> int if_version, retcode = 0;
>>
>> down_write(&dev->master_rwsem);
>> - if (unlikely(!drm_is_current_master(file_priv))) {
>> + if (unlikely(!drm_is_current_master_locked(file_priv))) {
>> retcode = -EACCES;
>> goto unlock;
>> }
>> @@ -540,7 +540,7 @@ static int drm_ioctl_permit(u32 flags, struct drm_file *file_priv)
>>
>> /* MASTER is only for master or control clients */
>> if (unlikely((flags & DRM_MASTER) &&
>> - !drm_is_current_master(file_priv)))
>> + !drm_is_current_master_locked(file_priv)))
>> return -EACCES;
>>
>> /* Render clients must be explicitly allowed */
>> diff --git a/drivers/gpu/drm/drm_lease.c b/drivers/gpu/drm/drm_lease.c
>> index 15bf3a3c76d1..0eecf320b1ab 100644
>> --- a/drivers/gpu/drm/drm_lease.c
>> +++ b/drivers/gpu/drm/drm_lease.c
>> @@ -498,12 +498,12 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
>> return PTR_ERR(lessee_file);
>>
>> down_read(&dev->master_rwsem);
>> - if (unlikely(!drm_is_current_master(lessor_priv))) {
>> + if (unlikely(!drm_is_current_master_locked(lessor_priv))) {
>> ret = -EACCES;
>> goto out_file;
>> }
>>
>> - lessor = drm_file_get_master(lessor_priv);
>> + lessor = lessor_priv->master;
>> /* Do not allow sub-leases */
>> if (lessor->lessor) {
>> DRM_DEBUG_LEASE("recursive leasing not allowed\n");
>> @@ -565,7 +565,6 @@ int drm_mode_create_lease_ioctl(struct drm_device *dev,
>> /* Hook up the fd */
>> fd_install(fd, lessee_file);
>>
>> - drm_master_put(&lessor);
>> up_read(&dev->master_rwsem);
>> DRM_DEBUG_LEASE("drm_mode_create_lease_ioctl succeeded\n");
>> return 0;
>> @@ -600,7 +599,8 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
>> if (!drm_core_check_feature(dev, DRIVER_MODESET))
>> return -EOPNOTSUPP;
>>
>> - lessor = drm_file_get_master(lessor_priv);
>> + lockdep_assert_held_once(&dev->master_rwsem);
>> + lessor = lessor_priv->master;
>> DRM_DEBUG_LEASE("List lessees for %d\n", lessor->lessee_id);
>>
>> mutex_lock(&dev->mode_config.idr_mutex);
>> @@ -624,7 +624,6 @@ int drm_mode_list_lessees_ioctl(struct drm_device *dev,
>> arg->count_lessees = count;
>>
>> mutex_unlock(&dev->mode_config.idr_mutex);
>> - drm_master_put(&lessor);
>>
>> return ret;
>> }
>> @@ -650,7 +649,8 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
>> if (!drm_core_check_feature(dev, DRIVER_MODESET))
>> return -EOPNOTSUPP;
>>
>> - lessee = drm_file_get_master(lessee_priv);
>> + lockdep_assert_held_once(&dev->master_rwsem);
>> + lessee = lessee_priv->master;
>> DRM_DEBUG_LEASE("get lease for %d\n", lessee->lessee_id);
>>
>> mutex_lock(&dev->mode_config.idr_mutex);
>> @@ -678,7 +678,6 @@ int drm_mode_get_lease_ioctl(struct drm_device *dev,
>> arg->count_objects = count;
>>
>> mutex_unlock(&dev->mode_config.idr_mutex);
>> - drm_master_put(&lessee);
>>
>> return ret;
>> }
>> @@ -703,11 +702,11 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
>> return -EOPNOTSUPP;
>>
>> down_write(&dev->master_rwsem);
>> - if (unlikely(!drm_is_current_master(lessor_priv))) {
>> + if (unlikely(!drm_is_current_master_locked(lessor_priv))) {
>> ret = -EACCES;
>> goto unlock;
>> }
>> - lessor = drm_file_get_master(lessor_priv);
>> + lessor = lessor_priv->master;
>> mutex_lock(&dev->mode_config.idr_mutex);
>>
>> lessee = _drm_find_lessee(lessor, arg->lessee_id);
>> @@ -728,7 +727,6 @@ int drm_mode_revoke_lease_ioctl(struct drm_device *dev,
>>
>> fail:
>> mutex_unlock(&dev->mode_config.idr_mutex);
>> - drm_master_put(&lessor);
>>
>> unlock:
>> up_write(&dev->master_rwsem);
>> diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h
>> index d12bb2ba7814..e2d49fe3e32d 100644
>> --- a/include/drm/drm_file.h
>> +++ b/include/drm/drm_file.h
>> @@ -227,16 +227,12 @@ struct drm_file {
>> * @master:
>> *
>> * Master this node is currently associated with. Protected by struct
>> - * &drm_device.master_rwsem, and serialized by @master_lookup_lock.
>> + * &drm_device.master_rwsem.
>> *
>> * Only relevant if drm_is_primary_client() returns true. Note that
>> * this only matches &drm_device.master if the master is the currently
>> * active one.
>> *
>> - * To update @master, both &drm_device.master_rwsem and
>> - * @master_lookup_lock need to be held, therefore holding either of
>> - * them is safe and enough for the read side.
>> - *
>> * When dereferencing this pointer, either hold struct
>> * &drm_device.master_rwsem for the duration of the pointer's use, or
>> * use drm_file_get_master() if struct &drm_device.master_rwsem is not
>> @@ -248,9 +244,6 @@ struct drm_file {
>> */
>> struct drm_master *master;
>>
>> - /** @master_lock: Serializes @master. */
>> - spinlock_t master_lookup_lock;
>> -
>> /** @pid: Process that opened this file. */
>> struct pid *pid;
>>
>> --
>> 2.25.1
>>
>
^ permalink raw reply [relevance 14%]
Results 1-200 of ~800 next (older) | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
2020-09-28 7:48 possible deadlock in f_getown syzbot
2021-09-23 6:03 9% ` [syzbot] " syzbot
2021-09-23 17:20 10% ` Desmond Cheong Zhi Xi
2021-09-23 17:54 9% ` Jeff Layton
2021-08-10 4:14 [PATCH v6 0/6] Bluetooth: fix locking and socket killing in SCO and RFCOMM Desmond Cheong Zhi Xi
2021-08-10 4:14 ` [PATCH v6 1/6] Bluetooth: schedule SCO timeouts with delayed_work Desmond Cheong Zhi Xi
2021-09-02 19:17 9% ` Eric Dumazet
2021-09-02 19:32 10% ` Desmond Cheong Zhi Xi
2021-09-02 21:41 8% ` Eric Dumazet
2021-09-02 22:53 8% ` Desmond Cheong Zhi Xi
2021-09-02 23:05 19% ` Desmond Cheong Zhi Xi
2021-09-02 23:42 11% ` Luiz Augusto von Dentz
2021-09-03 3:17 10% ` Desmond Cheong Zhi Xi
2021-08-15 16:47 [syzbot] INFO: task can't die in __lock_sock syzbot
2021-09-02 1:34 9% ` syzbot
[not found] ` <20210902031752.2502-1-hdanton@sina.com>
2021-09-02 19:54 10% ` Desmond Cheong Zhi Xi
2021-08-26 2:01 [PATCH v8 0/7] drm: update locking for modesetting Desmond Cheong Zhi Xi
2021-08-26 2:01 ` [PATCH v8 7/7] drm: remove drm_file.master_lookup_lock Desmond Cheong Zhi Xi
2021-08-26 13:21 ` Daniel Vetter
2021-08-31 6:02 14% ` Desmond Cheong Zhi Xi
2021-08-31 12:28 9% ` Daniel Vetter
2021-08-26 16:29 [syzbot] KASAN: use-after-free Write in sco_sock_timeout syzbot
2022-02-23 16:15 5% ` syzbot
2021-08-31 6:13 17% [PATCH v9 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
2021-08-31 6:13 18% ` [PATCH v9 1/4] drm: fix null ptr dereference in drm_master_release Desmond Cheong Zhi Xi
2021-08-31 6:13 11% ` [PATCH v9 2/4] drm: convert drm_device.master_mutex into a rwsem Desmond Cheong Zhi Xi
2021-08-31 6:13 18% ` [PATCH v9 3/4] drm: lock drm_global_mutex earlier in the ioctl handler Desmond Cheong Zhi Xi
2021-08-31 6:13 13% ` [PATCH v9 4/4] drm: avoid races with modesetting rights Desmond Cheong Zhi Xi
2021-08-31 6:56 10% [PATCH] Bluetooth: fix race in sco_sock_connect Desmond Cheong Zhi Xi
2021-08-31 7:24 17% [PATCH v10 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
2021-08-31 7:24 18% ` [PATCH v10 1/4] drm: fix null ptr dereference in drm_master_release Desmond Cheong Zhi Xi
2021-08-31 7:24 11% ` [PATCH v10 2/4] drm: convert drm_device.master_mutex into a rwsem Desmond Cheong Zhi Xi
2021-08-31 7:25 18% ` [PATCH v10 3/4] drm: lock drm_global_mutex earlier in the ioctl handler Desmond Cheong Zhi Xi
2021-08-31 7:25 13% ` [PATCH v10 4/4] drm: avoid races with modesetting rights Desmond Cheong Zhi Xi
2021-09-07 19:50 21% ` [PATCH v10 0/4] drm: update locking for modesetting Desmond Cheong Zhi Xi
2021-08-31 20:37 1% [GIT PULL] Networking for v5.15 Jakub Kicinski
2021-09-03 3:13 21% [PATCH 0/2] Bluetooth: various SCO fixes Desmond Cheong Zhi Xi
2021-09-03 3:13 20% ` [PATCH 1/2] Bluetooth: call sock_hold earlier in sco_conn_del Desmond Cheong Zhi Xi
2021-09-10 7:36 4% ` Marcel Holtmann
2021-10-04 18:12 15% ` Desmond Cheong Zhi Xi
2021-09-03 3:13 19% ` [PATCH 2/2] Bluetooth: fix init and cleanup of sco_conn.timeout_work Desmond Cheong Zhi Xi
2021-09-03 23:37 11% ` [PATCH 0/2] Bluetooth: various SCO fixes Luiz Augusto von Dentz
2021-09-03 15:27 2% [ANNOUNCE] 4.19.206-rt87 Clark Williams
2021-09-06 1:19 [PATCH AUTOSEL 5.14 01/47] locking/mutex: Fix HANDOFF condition Sasha Levin
2021-09-06 1:19 11% ` [PATCH AUTOSEL 5.14 38/47] fcntl: fix potential deadlocks for &fown_struct.lock Sasha Levin
2021-09-06 1:19 11% ` [PATCH AUTOSEL 5.14 39/47] fcntl: fix potential deadlock for &fasync_struct.fa_lock Sasha Levin
2021-09-06 1:20 [PATCH AUTOSEL 5.13 01/46] locking/mutex: Fix HANDOFF condition Sasha Levin
2021-09-06 1:20 11% ` [PATCH AUTOSEL 5.13 38/46] fcntl: fix potential deadlocks for &fown_struct.lock Sasha Levin
2021-09-06 1:20 11% ` [PATCH AUTOSEL 5.13 39/46] fcntl: fix potential deadlock for &fasync_struct.fa_lock Sasha Levin
2021-09-06 1:21 [PATCH AUTOSEL 5.10 01/39] locking/mutex: Fix HANDOFF condition Sasha Levin
2021-09-06 1:21 11% ` [PATCH AUTOSEL 5.10 33/39] fcntl: fix potential deadlock for &fasync_struct.fa_lock Sasha Levin
2021-09-06 1:22 [PATCH AUTOSEL 5.4 01/30] locking/mutex: Fix HANDOFF condition Sasha Levin
2021-09-06 1:22 11% ` [PATCH AUTOSEL 5.4 27/30] fcntl: fix potential deadlock for &fasync_struct.fa_lock Sasha Levin
2021-09-06 1:23 [PATCH AUTOSEL 4.19 01/23] locking/mutex: Fix HANDOFF condition Sasha Levin
2021-09-06 1:23 11% ` [PATCH AUTOSEL 4.19 22/23] fcntl: fix potential deadlock for &fasync_struct.fa_lock Sasha Levin
2021-09-09 11:36 [PATCH AUTOSEL 5.14 001/252] drm/bridge: ti-sn65dsi86: Don't read EDID blob over DDC Sasha Levin
2021-09-09 11:37 11% ` [PATCH AUTOSEL 5.14 034/252] drm: avoid blocking in drm_clients_info's rcu section Sasha Levin
2021-09-09 11:37 10% ` [PATCH AUTOSEL 5.14 035/252] drm: serialize drm_file.master with a new spinlock Sasha Levin
2021-09-09 11:37 8% ` [PATCH AUTOSEL 5.14 036/252] drm: protect drm_master pointers in drm_lease.c Sasha Levin
2021-09-09 11:38 11% ` [PATCH AUTOSEL 5.14 090/252] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
2021-09-09 11:39 12% ` [PATCH AUTOSEL 5.14 138/252] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Sasha Levin
2021-09-09 11:39 10% ` [PATCH AUTOSEL 5.14 140/252] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
2021-09-09 11:39 9% ` [PATCH AUTOSEL 5.14 141/252] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
2021-09-09 11:42 [PATCH AUTOSEL 5.13 001/219] drm/vmwgfx: Fix subresource updates with new contexts Sasha Levin
2021-09-09 11:43 11% ` [PATCH AUTOSEL 5.13 027/219] drm: avoid blocking in drm_clients_info's rcu section Sasha Levin
2021-09-09 11:43 10% ` [PATCH AUTOSEL 5.13 028/219] drm: serialize drm_file.master with a new spinlock Sasha Levin
2021-09-09 11:43 8% ` [PATCH AUTOSEL 5.13 029/219] drm: protect drm_master pointers in drm_lease.c Sasha Levin
2021-09-09 11:44 11% ` [PATCH AUTOSEL 5.13 077/219] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
2021-09-09 11:44 12% ` [PATCH AUTOSEL 5.13 121/219] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Sasha Levin
2021-09-09 11:44 10% ` [PATCH AUTOSEL 5.13 123/219] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
2021-09-09 11:45 9% ` [PATCH AUTOSEL 5.13 124/219] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
2021-09-09 11:48 [PATCH AUTOSEL 5.10 001/176] drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET Sasha Levin
2021-09-09 11:48 11% ` [PATCH AUTOSEL 5.10 018/176] drm: avoid blocking in drm_clients_info's rcu section Sasha Levin
2021-09-09 11:48 10% ` [PATCH AUTOSEL 5.10 019/176] drm: serialize drm_file.master with a new spinlock Sasha Levin
2021-09-09 11:48 8% ` [PATCH AUTOSEL 5.10 020/176] drm: protect drm_master pointers in drm_lease.c Sasha Levin
2021-09-09 11:49 11% ` [PATCH AUTOSEL 5.10 062/176] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
2021-09-09 11:50 12% ` [PATCH AUTOSEL 5.10 100/176] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Sasha Levin
2021-09-09 11:50 10% ` [PATCH AUTOSEL 5.10 101/176] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
2021-09-09 11:50 9% ` [PATCH AUTOSEL 5.10 102/176] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
2021-09-09 11:53 [PATCH AUTOSEL 5.4 001/109] drm/amdgpu: Fix amdgpu_ras_eeprom_init() Sasha Levin
2021-09-09 11:53 11% ` [PATCH AUTOSEL 5.4 014/109] drm: avoid blocking in drm_clients_info's rcu section Sasha Levin
2021-09-09 11:54 11% ` [PATCH AUTOSEL 5.4 043/109] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
2021-09-09 11:54 10% ` [PATCH AUTOSEL 5.4 059/109] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
2021-09-09 11:54 9% ` [PATCH AUTOSEL 5.4 060/109] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
2021-09-09 11:56 [PATCH AUTOSEL 4.19 01/74] media: dib8000: rewrite the init prbs logic Sasha Levin
2021-09-09 11:56 11% ` [PATCH AUTOSEL 4.19 32/74] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
2021-09-09 11:56 10% ` [PATCH AUTOSEL 4.19 44/74] Bluetooth: schedule SCO timeouts with delayed_work Sasha Levin
2021-09-09 11:56 9% ` [PATCH AUTOSEL 4.19 45/74] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
2021-09-09 11:58 [PATCH AUTOSEL 4.14 01/59] media: dib8000: rewrite the init prbs logic Sasha Levin
2021-09-09 11:58 11% ` [PATCH AUTOSEL 4.14 29/59] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
2021-09-09 11:58 9% ` [PATCH AUTOSEL 4.14 35/59] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
2021-09-09 11:59 [PATCH AUTOSEL 4.9 01/48] crypto: mxs-dcp - Use sg_mapping_iter to copy data Sasha Levin
2021-09-09 11:59 11% ` [PATCH AUTOSEL 4.9 27/48] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
2021-09-09 11:59 9% ` [PATCH AUTOSEL 4.9 31/48] Bluetooth: avoid circular locks in sco_sock_connect Sasha Levin
2021-09-09 12:00 [PATCH AUTOSEL 4.4 01/35] crypto: mxs-dcp - Use sg_mapping_iter to copy data Sasha Levin
2021-09-09 12:01 11% ` [PATCH AUTOSEL 4.4 21/35] Bluetooth: skip invalid hci_sync_conn_complete_evt Sasha Levin
2021-09-13 13:10 4% [PATCH 5.14 000/334] 5.14.4-rc1 review Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.14 038/334] fcntl: fix potential deadlocks for &fown_struct.lock Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.14 039/334] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
2021-09-13 13:14 11% ` [PATCH 5.14 193/334] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2021-09-13 13:11 4% [PATCH 5.13 000/300] 5.13.17-rc1 review Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.13 038/300] fcntl: fix potential deadlocks for &fown_struct.lock Greg Kroah-Hartman
2021-09-13 13:11 11% ` [PATCH 5.13 039/300] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
2021-09-13 13:13 11% ` [PATCH 5.13 173/300] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2021-09-13 13:11 4% [PATCH 5.10 000/236] 5.10.65-rc1 review Greg Kroah-Hartman
2021-09-13 13:12 11% ` [PATCH 5.10 033/236] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
2021-09-13 13:14 11% ` [PATCH 5.10 141/236] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2021-09-13 13:13 5% [PATCH 5.4 000/144] 5.4.146-rc1 review Greg Kroah-Hartman
2021-09-13 13:13 11% ` [PATCH 5.4 027/144] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
2021-09-13 13:14 11% ` [PATCH 5.4 086/144] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2021-09-15 8:07 3% Linux 5.4.146 Greg Kroah-Hartman
2021-09-15 8:09 2% Linux 5.10.65 Greg Kroah-Hartman
2021-09-15 8:09 2% Linux 5.13.17 Greg Kroah-Hartman
2021-09-15 8:09 2% Linux 5.14.4 Greg Kroah-Hartman
2021-09-16 15:55 8% [PATCH 5.10 000/306] 5.10.67-rc1 review Greg Kroah-Hartman
2021-09-16 15:55 10% ` [PATCH 5.10 008/306] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
2021-09-16 15:57 11% ` [PATCH 5.10 127/306] drm: avoid blocking in drm_clients_infos rcu section Greg Kroah-Hartman
2021-09-16 15:57 10% ` [PATCH 5.10 128/306] drm: serialize drm_file.master with a new spinlock Greg Kroah-Hartman
2021-09-16 15:57 8% ` [PATCH 5.10 129/306] drm: protect drm_master pointers in drm_lease.c Greg Kroah-Hartman
2021-09-16 15:58 11% ` [PATCH 5.10 169/306] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
2021-09-16 15:59 12% ` [PATCH 5.10 206/306] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Greg Kroah-Hartman
2021-09-16 15:59 10% ` [PATCH 5.10 207/306] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
2021-09-16 15:59 9% ` [PATCH 5.10 208/306] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
2021-09-16 15:55 7% [PATCH 5.14 000/432] 5.14.6-rc1 review Greg Kroah-Hartman
2021-09-16 15:56 10% ` [PATCH 5.14 016/432] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
2021-09-16 15:58 11% ` [PATCH 5.14 189/432] drm: avoid blocking in drm_clients_infos rcu section Greg Kroah-Hartman
2021-09-16 15:58 10% ` [PATCH 5.14 190/432] drm: serialize drm_file.master with a new spinlock Greg Kroah-Hartman
2021-09-16 15:59 8% ` [PATCH 5.14 191/432] drm: protect drm_master pointers in drm_lease.c Greg Kroah-Hartman
2021-09-16 15:59 11% ` [PATCH 5.14 241/432] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
2021-09-16 16:00 12% ` [PATCH 5.14 286/432] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Greg Kroah-Hartman
2021-09-16 16:00 10% ` [PATCH 5.14 288/432] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
2021-09-16 16:00 9% ` [PATCH 5.14 289/432] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
2021-09-16 15:55 7% [PATCH 5.13 000/380] 5.13.19-rc1 review Greg Kroah-Hartman
2021-09-16 15:56 10% ` [PATCH 5.13 008/380] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
2021-09-16 15:58 11% ` [PATCH 5.13 165/380] drm: avoid blocking in drm_clients_infos rcu section Greg Kroah-Hartman
2021-09-16 15:58 10% ` [PATCH 5.13 166/380] drm: serialize drm_file.master with a new spinlock Greg Kroah-Hartman
2021-09-16 15:58 8% ` [PATCH 5.13 167/380] drm: protect drm_master pointers in drm_lease.c Greg Kroah-Hartman
2021-09-16 15:59 11% ` [PATCH 5.13 212/380] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
2021-09-16 16:00 12% ` [PATCH 5.13 254/380] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c Greg Kroah-Hartman
2021-09-16 16:00 10% ` [PATCH 5.13 256/380] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
2021-09-16 16:00 9% ` [PATCH 5.13 257/380] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
2021-09-18 12:07 2% Linux 5.10.67 Greg Kroah-Hartman
2021-09-18 12:08 1% Linux 5.14.6 Greg Kroah-Hartman
2021-09-18 12:09 1% Linux 5.13.19 Greg Kroah-Hartman
2021-09-20 16:39 7% [PATCH 4.19 000/293] 4.19.207-rc1 review Greg Kroah-Hartman
2021-09-20 16:40 11% ` [PATCH 4.19 052/293] fcntl: fix potential deadlock for &fasync_struct.fa_lock Greg Kroah-Hartman
2021-09-20 16:40 11% ` [PATCH 4.19 079/293] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2021-09-20 16:41 10% ` [PATCH 4.19 119/293] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
2021-09-20 16:42 11% ` [PATCH 4.19 203/293] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
2021-09-20 16:42 10% ` [PATCH 4.19 214/293] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
2021-09-20 16:42 9% ` [PATCH 4.19 215/293] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
2021-09-20 16:40 7% [PATCH 5.4 000/260] 5.4.148-rc1 review Greg Kroah-Hartman
2021-09-20 16:40 10% ` [PATCH 5.4 003/260] btrfs: reset replace target device to allocation state on close Greg Kroah-Hartman
2021-09-20 16:41 11% ` [PATCH 5.4 085/260] drm: avoid blocking in drm_clients_infos rcu section Greg Kroah-Hartman
2021-09-20 16:42 11% ` [PATCH 5.4 112/260] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
2021-09-20 16:42 10% ` [PATCH 5.4 127/260] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
2021-09-20 16:42 9% ` [PATCH 5.4 128/260] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
2021-09-20 16:40 5% [PATCH 4.14 000/217] 4.14.247-rc1 review Greg Kroah-Hartman
2021-09-20 16:41 11% ` [PATCH 4.14 065/217] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2021-09-20 16:42 11% ` [PATCH 4.14 158/217] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
2021-09-20 16:43 9% ` [PATCH 4.14 163/217] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
2021-09-20 16:40 6% [PATCH 4.9 000/175] 4.9.283-rc1 review Greg Kroah-Hartman
2021-09-20 16:41 11% ` [PATCH 4.9 063/175] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2021-09-20 16:43 11% ` [PATCH 4.9 131/175] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
2021-09-20 16:43 9% ` [PATCH 4.9 134/175] Bluetooth: avoid circular locks in sco_sock_connect Greg Kroah-Hartman
2021-09-20 16:41 6% [PATCH 4.4 000/133] 4.4.284-rc1 review Greg Kroah-Hartman
2021-09-20 16:42 11% ` [PATCH 4.4 048/133] Bluetooth: fix repeated calls to sco_sock_kill Greg Kroah-Hartman
2021-09-20 16:43 11% ` [PATCH 4.4 105/133] Bluetooth: skip invalid hci_sync_conn_complete_evt Greg Kroah-Hartman
2021-09-21 12:48 6% [PATCH 4.9 000/174] 4.9.283-rc2 review Greg Kroah-Hartman
2021-09-21 12:49 6% [PATCH 4.14 000/216] 4.14.247-rc2 review Greg Kroah-Hartman
2021-09-22 11:12 4% Linux 4.4.284 Greg Kroah-Hartman
2021-09-22 11:12 3% Linux 4.9.283 Greg Kroah-Hartman
2021-09-22 11:12 3% Linux 4.14.247 Greg Kroah-Hartman
2021-09-22 11:12 2% Linux 4.19.207 Greg Kroah-Hartman
2021-09-22 11:13 2% Linux 5.4.148 Greg Kroah-Hartman
2021-09-22 14:54 2% [ANNOUNCE] 4.19.207-rt88 Clark Williams
2021-10-01 8:34 3% [ANNOUNCE] 4.4.285-rt226 Daniel Wagner
2021-10-04 18:01 12% [RESEND PATCH] Bluetooth: fix race in sco_sock_connect Desmond Cheong Zhi Xi
2021-10-08 0:26 11% ` Luiz Augusto von Dentz
2021-10-04 18:07 13% [PATCH] Bluetooth: fix deadlock for RFCOMM sk state change Desmond Cheong Zhi Xi
2021-11-02 5:42 1% [GIT PULL] Networking for 5.16 Jakub Kicinski
2021-11-02 23:34 1% [git pull] drm for 5.16-rc1 Dave Airlie
2021-11-08 17:42 [PATCH AUTOSEL 5.15 001/146] dma-buf: WARN on dmabuf release with pending attachments Sasha Levin
2021-11-08 17:42 12% ` [PATCH AUTOSEL 5.15 007/146] Bluetooth: call sock_hold earlier in sco_conn_del Sasha Levin
2021-11-15 16:51 1% [PATCH 5.14 000/849] 5.14.19-rc1 review Greg Kroah-Hartman
2021-11-15 16:57 11% ` [PATCH 5.14 341/849] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
2021-11-15 16:51 1% [PATCH 5.15 000/917] 5.15.3-rc1 review Greg Kroah-Hartman
2021-11-15 16:54 12% ` [PATCH 5.15 188/917] Bluetooth: call sock_hold earlier in sco_conn_del Greg Kroah-Hartman
2021-11-15 16:57 11% ` [PATCH 5.15 329/917] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
2021-11-15 16:55 1% [PATCH 5.10 000/575] 5.10.80-rc1 review Greg Kroah-Hartman
2021-11-15 16:59 11% ` [PATCH 5.10 262/575] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
2021-11-15 16:58 1% [PATCH 5.4 000/355] 5.4.160-rc1 review Greg Kroah-Hartman
2021-11-15 17:01 11% ` [PATCH 5.4 182/355] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
2021-11-16 15:00 1% [PATCH 5.4 000/353] 5.4.160-rc2 review Greg Kroah-Hartman
2021-11-16 15:00 1% [PATCH 5.10 000/578] 5.10.80-rc2 review Greg Kroah-Hartman
2021-11-16 15:01 1% [PATCH 5.14 000/857] 5.14.19-rc2 review Greg Kroah-Hartman
2021-11-16 15:01 1% [PATCH 5.15 000/927] 5.15.3-rc2 review Greg Kroah-Hartman
2021-11-17 10:01 2% Linux 5.4.160 Greg Kroah-Hartman
2021-11-17 10:16 1% [PATCH 5.10 000/577] 5.10.80-rc3 review Greg Kroah-Hartman
2021-11-17 10:19 1% [PATCH 5.15 000/923] 5.15.3-rc3 review Greg Kroah-Hartman
2021-11-17 10:26 1% Linux 5.14.19 Greg Kroah-Hartman
2021-11-17 14:46 1% [PATCH 5.10 000/569] 5.10.80-rc4 review Greg Kroah-Hartman
2021-11-18 8:25 1% [PATCH 5.15 000/920] 5.15.3-rc4 review Greg Kroah-Hartman
2021-11-18 14:03 1% Linux 5.10.80 Greg Kroah-Hartman
2021-11-18 19:20 1% Linux 5.15.3 Greg Kroah-Hartman
2021-11-24 11:53 1% [PATCH 4.19 000/323] 4.19.218-rc1 review Greg Kroah-Hartman
2021-11-24 11:55 11% ` [PATCH 4.19 127/323] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
2021-11-25 11:19 1% [PATCH 4.19 000/321] 4.19.218-rc2 review Greg Kroah-Hartman
2021-11-25 16:07 1% [PATCH 4.19 000/320] 4.19.218-rc3 review Greg Kroah-Hartman
2021-11-26 10:58 2% Linux 4.19.218 Greg Kroah-Hartman
2021-11-27 18:40 2% [ANNOUNCE] 4.19.218-rt96 Clark Williams
2022-01-24 18:41 4% [PATCH 4.14 000/186] 4.14.263-rc1 review Greg Kroah-Hartman
2022-01-24 18:41 10% ` [PATCH 4.14 014/186] Bluetooth: schedule SCO timeouts with delayed_work Greg Kroah-Hartman
2022-01-24 18:41 12% ` [PATCH 4.14 015/186] Bluetooth: fix init and cleanup of sco_conn.timeout_work Greg Kroah-Hartman
2022-01-25 16:31 4% [PATCH 4.14 000/184] 4.14.263-rc2 review Greg Kroah-Hartman
2022-01-27 13:31 3% Linux 4.14.263 Greg Kroah-Hartman
2022-08-27 16:19 possible deadlock in rfcomm_sk_state_change Jiacheng Xu
2022-08-28 11:03 ` Jiacheng Xu
2022-08-30 6:48 15% ` Desmond Cheong Zhi Xi
2022-08-30 17:41 11% ` Luiz Augusto von Dentz
2022-08-30 19:23 4% ` Luiz Augusto von Dentz
2022-10-27 16:55 4% [PATCH 5.10 00/79] 5.10.151-rc1 review Greg Kroah-Hartman
2022-10-28 12:02 4% [PATCH 5.10 00/73] 5.10.152-rc1 review Greg Kroah-Hartman
2022-10-30 9:03 5% Linux 5.10.152 Greg Kroah-Hartman
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).