459 commits
Author | SHA1 | Message | Date | |
---|---|---|---|---|
Ivaylo Georgiev
|
d46ff52af6 |
Merge android-4.19.110 (1984fff ) into msm-4.19
* refs/heads/tmp-1984fff: Revert "ANDROID: staging: android: ion: enable modularizing the ion driver" Revert "BACKPORT: sched/rt: Make RT capacity-aware" Revert "ANDROID: GKI: Add devm_thermal_of_virtual_sensor_register API." Linux 4.19.110 KVM: SVM: fix up incorrect backport ANDROID: gki_defconfig: Enable USB_CONFIGFS_MASS_STORAGE UPSTREAM: arm64: memory: Add missing brackets to untagged_addr() macro UPSTREAM: mm: Avoid creating virtual address aliases in brk()/mmap()/mremap() ANDROID: Add TPM support and the vTPM proxy to Cuttlefish. Revert "ANDROID: tty: serdev: Fix broken serial console input" ANDROID: serdev: restrict claim of platform devices ANDROID: update the ABI xml representation ANDROID: GKI: add a USB TypeC vendor field for ABI compat UPSTREAM: usb: typec: mux: Switch to use fwnode_property_count_uXX() UPSTREAM: usb: typec: Make sure an alt mode exist before getting its partner UPSTREAM: usb: typec: Registering real device entries for the muxes UPSTREAM: usb: typec: mux: remove redundant check on variable match UPSTREAM: usb: typec: mux: Fix unsigned comparison with less than zero UPSTREAM: usb: typec: mux: Find the muxes by also matching against the device node UPSTREAM: usb: typec: Find the ports by also matching against the device node UPSTREAM: usb: typec: Rationalize the API for the muxes UPSTREAM: device property: Add helpers to count items in an array UPSTREAM: platform/x86: intel_cht_int33fe: Remove old style mux connections UPSTREAM: platform/x86: intel_cht_int33fe: Prepare for better mux naming scheme UPSTREAM: usb: typec: Prepare alt mode enter/exit reporting for UCSI alt mode support ANDROID: GKI: Update ABI ANDROID: GKI: drivers: of: Add API to find ddr device type UPSTREAM: Input: reset device timestamp on sync UPSTREAM: Input: allow drivers specify timestamp for input events ANDROID: GKI: usb: dwc3: Add USB_DR_MODE_DRD as dual role mode ANDROID: GKI: Add devm_thermal_of_virtual_sensor_register API. UPSTREAM: crypto: skcipher - Introduce crypto_sync_skcipher ANDROID: GKI: cfg80211: Add AP stopped interface UPSTREAM: device connection: Add fwnode member to struct device_connection FROMGIT: kallsyms: unexport kallsyms_lookup_name() and kallsyms_on_each_symbol() FROMGIT: samples/hw_breakpoint: drop use of kallsyms_lookup_name() FROMGIT: samples/hw_breakpoint: drop HW_BREAKPOINT_R when reporting writes UPSTREAM: fscrypt: don't evict dirty inodes after removing key ANDROID: gki_defconfig: Enable CONFIG_VM_EVENT_COUNTERS ANDROID: gki_defconfig: Enable CONFIG_CLEANCACHE ANDROID: Update ABI representation ANDROID: gki_defconfig: disable CONFIG_DEBUG_DEVRES Linux 4.19.109 scsi: pm80xx: Fixed kernel panic during error recovery for SATA drive dm integrity: fix a deadlock due to offloading to an incorrect workqueue efi/x86: Handle by-ref arguments covering multiple pages in mixed mode efi/x86: Align GUIDs to their size in the mixed mode runtime wrapper powerpc: fix hardware PMU exception bug on PowerVM compatibility mode systems dmaengine: coh901318: Fix a double lock bug in dma_tc_handle() hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT() ARM: dts: imx7-colibri: Fix frequency for sd/mmc ARM: dts: am437x-idk-evm: Fix incorrect OPP node names ARM: imx: build v7_cpu_resume() unconditionally IB/hfi1, qib: Ensure RCU is locked when accessing list RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen() RDMA/iwcm: Fix iwcm work deallocation ARM: dts: imx6: phycore-som: fix emmc supply phy: mapphone-mdm6600: Fix write timeouts with shorter GPIO toggle interval phy: mapphone-mdm6600: Fix timeouts by adding wake-up handling drm/sun4i: de2/de3: Remove unsupported VI layer formats drm/sun4i: Fix DE2 VI layer format support ASoC: dapm: Correct DAPM handling of active widgets during shutdown ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output dmaengine: imx-sdma: remove dma_slave_config direction usage and leave sdma_event_enable() ASoC: intel: skl: Fix possible buffer overflow in debug outputs ASoC: intel: skl: Fix pin debug prints ASoC: topology: Fix memleak in soc_tplg_manifest_load() ASoC: topology: Fix memleak in soc_tplg_link_elems_load() spi: bcm63xx-hsspi: Really keep pll clk enabled ARM: dts: ls1021a: Restore MDIO compatible to gianfar dm writecache: verify watermark during resume dm: report suspended device during destroy dm cache: fix a crash due to incorrect work item cancelling dmaengine: tegra-apb: Prevent race conditions of tasklet vs free list dmaengine: tegra-apb: Fix use-after-free x86/pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes media: v4l2-mem2mem.c: fix broken links vt: selection, push sel_lock up vt: selection, push console lock down vt: selection, close sel_buffer race serial: 8250_exar: add support for ACCES cards tty:serial:mvebu-uart:fix a wrong return arm: dts: dra76x: Fix mmc3 max-frequency fat: fix uninit-memory access for partial initialized inode mm: fix possible PMD dirty bit lost in set_pmd_migration_entry() mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa vgacon: Fix a UAF in vgacon_invert_region usb: core: port: do error out if usb_autopm_get_interface() fails usb: core: hub: do error out if usb_autopm_get_interface() fails usb: core: hub: fix unhandled return by employing a void function usb: dwc3: gadget: Update chain bit correctly when using sg list usb: quirks: add NO_LPM quirk for Logitech Screen Share usb: storage: Add quirk for Samsung Fit flash cifs: don't leak -EAGAIN for stat() during reconnect ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master ALSA: hda/realtek - Add Headset Mic supported net: thunderx: workaround BGX TX Underflow issue x86/xen: Distribute switch variables for initialization ice: Don't tell the OS that link is going down nvme: Fix uninitialized-variable warning s390/qdio: fill SL with absolute addresses x86/boot/compressed: Don't declare __force_order in kaslr_64.c s390: make 'install' not depend on vmlinux s390/cio: cio_ignore_proc_seq_next should increase position index watchdog: da9062: do not ping the hw during stop() net: ks8851-ml: Fix 16-bit IO operation net: ks8851-ml: Fix 16-bit data access net: ks8851-ml: Remove 8-bit bus accessors net: dsa: b53: Ensure the default VID is untagged selftests: forwarding: use proto icmp for {gretap, ip6gretap}_mac testing drm/msm/dsi/pll: call vco set rate explicitly drm/msm/dsi: save pll state before dsi host is powered off scsi: megaraid_sas: silence a warning drm: msm: Fix return type of dsi_mgr_connector_mode_valid for kCFI drm/msm/mdp5: rate limit pp done timeout warnings usb: gadget: serial: fix Tx stall after buffer overflow usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flags usb: gadget: composite: Support more than 500mA MaxPower selftests: fix too long argument serial: ar933x_uart: set UART_CS_{RX,TX}_READY_ORIDE ALSA: hda: do not override bus codec_mask in link_get() kprobes: Fix optimize_kprobe()/unoptimize_kprobe() cancellation logic RDMA/core: Fix use of logical OR in get_new_pps RDMA/core: Fix pkey and port assignment in get_new_pps net: dsa: bcm_sf2: Forcibly configure IMP port for 1Gb/sec ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1 EDAC/amd64: Set grain per DIMM ANDROID: Fix kernelci build-break for arm32 ANDROID: enable CONFIG_WATCHDOG_CORE=y ANDROID: kbuild: align UNUSED_KSYMS_WHITELIST with upstream FROMLIST: f2fs: fix wrong check on F2FS_IOC_FSSETXATTR FROMGIT: driver core: Reevaluate dev->links.need_for_probe as suppliers are added FROMGIT: driver core: Call sync_state() even if supplier has no consumers FROMGIT: of: property: Add device link support for power-domains and hwlocks UPSTREAM: binder: prevent UAF for binderfs devices II UPSTREAM: binder: prevent UAF for binderfs devices ANDROID: GKI: enable PM_GENERIC_DOMAINS by default ANDROID: GKI: pci: framework: disable auto suspend link ANDROID: GKI: gpio: Add support for hierarchical IRQ domains ANDROID: GKI: of: property: Add device links support for pinctrl-[0-3] ANDROID: GKI: of: property: Ignore properties that start with "qcom," ANDROID: GKI: of: property: Add support for parsing qcom,msm-bus,name property ANDROID: GKI: genirq: Export symbols to compile irqchip drivers as modules ANDROID: GKI: of: irq: add helper to remap interrupts to another irqdomain ANDROID: GKI: genirq/irqdomain: add export symbols for modularizing ANDROID: GKI: genirq: Introduce irq_chip_get/set_parent_state calls ANDROID: Update ABI representation ANDROID: arm64: gki_defconfig: disable CONFIG_ZONE_DMA32 ANDROID: GKI: drivers: thermal: Fix ABI diff for struct thermal_cooling_device ANDROID: GKI: drivers: thermal: Indicate in DT the trips are for temperature falling ANDROID: Update ABI representation ANDROID: Update ABI whitelist for qcom SoCs ANDROID: gki_defconfig: enable CONFIG_TYPEC ANDROID: Fix kernelci build-break on !CONFIG_CMA builds ANDROID: GKI: mm: fix cma accounting in zone_watermark_ok ANDROID: CC_FLAGS_CFI add -fno-sanitize-blacklist FROMLIST: lib: test_stackinit.c: XFAIL switch variable init tests Linux 4.19.108 audit: always check the netlink payload length in audit_receive_msg() mm, thp: fix defrag setting if newline is not used mm/huge_memory.c: use head to check huge zero page netfilter: nf_flowtable: fix documentation netfilter: nft_tunnel: no need to call htons() when dumping ports thermal: brcmstb_thermal: Do not use DT coefficients KVM: x86: Remove spurious clearing of async #PF MSR KVM: x86: Remove spurious kvm_mmu_unload() from vcpu destruction path perf hists browser: Restore ESC as "Zoom out" of DSO/thread/etc pwm: omap-dmtimer: put_device() after of_find_device_by_node() kprobes: Set unoptimized flag after unoptimizing code drivers: net: xgene: Fix the order of the arguments of 'alloc_etherdev_mqs()' perf stat: Fix shadow stats for clock events perf stat: Use perf_evsel__is_clocki() for clock events sched/fair: Fix O(nr_cgroups) in the load balancing path sched/fair: Optimize update_blocked_averages() KVM: Check for a bad hva before dropping into the ghc slow path KVM: SVM: Override default MMIO mask if memory encryption is enabled mwifiex: delete unused mwifiex_get_intf_num() mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame() namei: only return -ECHILD from follow_dotdot_rcu() net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE net/smc: no peer ID in CLC decline for SMCD net: atlantic: fix potential error handling net: atlantic: fix use after free kasan warn net: netlink: cap max groups which will be considered in netlink_bind() s390/qeth: vnicc Fix EOPNOTSUPP precedence usb: charger: assign specific number for enum value hv_netvsc: Fix unwanted wakeup in netvsc_attach() drm/i915/gvt: Separate display reset from ALL_ENGINES reset drm/i915/gvt: Fix orphan vgpu dmabuf_objs' lifetime i2c: jz4780: silence log flood on txabrt i2c: altera: Fix potential integer overflow MIPS: VPE: Fix a double free and a memory leak in 'release_vpe()' HID: hiddev: Fix race in in hiddev_disconnect() HID: alps: Fix an error handling path in 'alps_input_configured()' vhost: Check docket sk_family instead of call getname amdgpu/gmc_v9: save/restore sdpif regs during S3 Revert "PM / devfreq: Modify the device name as devfreq(X) for sysfs" tracing: Disable trace_printk() on post poned tests macintosh: therm_windtunnel: fix regression when instantiating devices HID: core: increase HID report buffer size to 8KiB HID: core: fix off-by-one memset in hid_report_raw_event() HID: ite: Only bind to keyboard USB interface on Acer SW5-012 keyboard dock KVM: VMX: check descriptor table exits on instruction emulation ACPI: watchdog: Fix gas->access_width usage ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro audit: fix error handling in audit_data_to_entry() ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() net/tls: Fix to avoid gettig invalid tls record qede: Fix race between rdma destroy workqueue and link change event ipv6: Fix nlmsg_flags when splitting a multipath route ipv6: Fix route replacement with dev-only route sctp: move the format error check out of __sctp_sf_do_9_1_abort nfc: pn544: Fix occasional HW initialization failure net: sched: correct flower port blocking net: phy: restore mdio regs in the iproc mdio driver net: mscc: fix in frame extraction net: fib_rules: Correctly set table field when table number exceeds 8 bits sysrq: Remove duplicated sysrq message sysrq: Restore original console_loglevel when sysrq disabled cfg80211: add missing policy for NL80211_ATTR_STATUS_CODE cifs: Fix mode output in debugging statements net: ena: ena-com.c: prevent NULL pointer dereference net: ena: ethtool: use correct value for crc32 hash net: ena: fix incorrectly saving queue numbers when setting RSS indirection table net: ena: rss: store hash function as values and not bits net: ena: rss: fix failure to get indirection table net: ena: fix incorrect default RSS key net: ena: add missing ethtool TX timestamping indication net: ena: fix uses of round_jiffies() net: ena: fix potential crash when rxfh key is NULL soc/tegra: fuse: Fix build with Tegra194 configuration ARM: dts: sti: fixup sound frame-inversion for stihxxx-b2120.dtsi qmi_wwan: unconditionally reject 2 ep interfaces qmi_wwan: re-add DW5821e pre-production variant s390/zcrypt: fix card and queue total counter wrap cfg80211: check wiphy driver existence for drvinfo report mac80211: consider more elements in parsing CRC dax: pass NOWAIT flag to iomap_apply drm/msm: Set dma maximum segment size for mdss ipmi:ssif: Handle a possible NULL pointer reference iwlwifi: pcie: fix rb_allocator workqueue allocation irqchip/gic-v3-its: Fix misuse of GENMASK macro ANDROID: Update ABI representation ANDROID: abi_gki_aarch64_whitelist: add module_layout and task_struct ANDROID: gki_defconfig: disable KPROBES, update ABI ANDROID: GKI: mm: add cma pcp list ANDROID: GKI: cma: redirect page allocation to CMA BACKPORT: mm, compaction: be selective about what pageblocks to clear skip hints BACKPORT: mm: reclaim small amounts of memory when an external fragmentation event occurs BACKPORT: mm: move zone watermark accesses behind an accessor UPSTREAM: mm: use alloc_flags to record if kswapd can wake UPSTREAM: mm, page_alloc: spread allocations across zones before introducing fragmentation ANDROID: GKI: update abi for ufshcd changes ANDROID: Unconditionally create bridge tracepoints ANDROID: gki_defconfig: Enable MFD_SYSCON on x86 ANDROID: scsi: ufs: allow ufs variants to override sg entry size ANDROID: Re-add default y for VIRTIO_PCI_LEGACY ANDROID: GKI: build in HVC_DRIVER ANDROID: Removed default m for virtual sw crypto device ANDROID: Remove default y on BRIDGE_IGMP_SNOOPING ANDROID: GKI: Added missing SND configs FROMLIST: ufs: fix a bug on printing PRDT UPSTREAM: sched/uclamp: Reject negative values in cpu_uclamp_write() ANDROID: gki_defconfig: Disable CONFIG_RT_GROUP_SCHED ANDROID: GKI: Remove CONFIG_BRIDGE from arm64 config ANDROID: Add ABI Whitelist for qcom ANDROID: Enable HID_NINTENDO as y FROMLIST: HID: nintendo: add nintendo switch controller driver UPSTREAM: regulator/of_get_regulator: add child path to find the regulator supplier ANDROID: gki_defconfig: Remove 'BRIDGE_NETFILTER is not set' BACKPORT: net: disable BRIDGE_NETFILTER by default ANDROID: kbuild: fix UNUSED_KSYMS_WHITELIST backport Linux 4.19.107 Revert "char/random: silence a lockdep splat with printk()" s390/mm: Explicitly compare PAGE_DEFAULT_KEY against zero in storage_key_init_range xen: Enable interrupts when calling _cond_resched() ata: ahci: Add shutdown to freeze hardware resources of ahci rxrpc: Fix call RCU cleanup using non-bh-safe locks netfilter: xt_hashlimit: limit the max size of hashtable ALSA: seq: Fix concurrent access to queue current tick/time ALSA: seq: Avoid concurrent access to queue flags ALSA: rawmidi: Avoid bit fields for state flags bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill genirq/proc: Reject invalid affinity masks (again) iommu/vt-d: Fix compile warning from intel-svm.h ecryptfs: replace BUG_ON with error handling code staging: greybus: use after free in gb_audio_manager_remove_all() staging: rtl8723bs: fix copy of overlapping memory usb: dwc2: Fix in ISOC request length checking usb: gadget: composite: Fix bMaxPower for SuperSpeedPlus scsi: Revert "target: iscsi: Wait for all commands to finish before freeing a session" scsi: Revert "RDMA/isert: Fix a recently introduced regression related to logout" Revert "dmaengine: imx-sdma: Fix memory leak" Btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents btrfs: do not check delayed items are empty for single transaction cleanup btrfs: reset fs_root to NULL on error in open_ctree btrfs: fix bytes_may_use underflow in prealloc error condtition KVM: apic: avoid calculating pending eoi from an uninitialized val KVM: nVMX: handle nested posted interrupts when apicv is disabled for L1 KVM: nVMX: Check IO instruction VM-exit conditions KVM: nVMX: Refactor IO bitmap checks into helper function ext4: fix race between writepages and enabling EXT4_EXTENTS_FL ext4: rename s_journal_flag_rwsem to s_writepages_rwsem ext4: fix mount failure with quota configured as module ext4: fix potential race between s_flex_groups online resizing and access ext4: fix potential race between s_group_info online resizing and access ext4: fix potential race between online resizing and write operations ext4: add cond_resched() to __ext4_find_entry() ext4: fix a data race in EXT4_I(inode)->i_disksize drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets lib/stackdepot.c: fix global out-of-bounds in stack_slabs tty: serial: qcom_geni_serial: Fix RX cancel command failure tty: serial: qcom_geni_serial: Remove xfer_mode variable tty: serial: qcom_geni_serial: Remove set_rfr_wm() and related variables tty: serial: qcom_geni_serial: Remove use of *_relaxed() and mb() tty: serial: qcom_geni_serial: Remove interrupt storm tty: serial: qcom_geni_serial: Fix UART hang KVM: x86: don't notify userspace IOAPIC on edge-triggered interrupt EOI KVM: nVMX: Don't emulate instructions in guest mode xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms drm/amdgpu/soc15: fix xclk for raven mm/vmscan.c: don't round up scan size for online memory cgroup genirq/irqdomain: Make sure all irq domain flags are distinct nvme-multipath: Fix memory leak with ana_log_buf mm/memcontrol.c: lost css_put in memcg_expand_shrinker_maps() Revert "ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()" MAINTAINERS: Update drm/i915 bug filing URL serdev: ttyport: restore client ops on deregistration tty: serial: imx: setup the correct sg entry for tx dma tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode serial: 8250: Check UPF_IRQ_SHARED in advance x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF x86/mce/amd: Fix kobject lifetime x86/mce/amd: Publish the bank pointer only after setup has succeeded jbd2: fix ocfs2 corrupt when clearing block group bits powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery staging: rtl8723bs: Fix potential overuse of kernel memory staging: rtl8723bs: Fix potential security hole staging: rtl8188eu: Fix potential overuse of kernel memory staging: rtl8188eu: Fix potential security hole usb: dwc3: gadget: Check for IOC/LST bit in TRB->ctrl fields usb: dwc2: Fix SET/CLEAR_FEATURE and GET_STATUS flows USB: hub: Fix the broken detection of USB3 device in SMSC hub USB: hub: Don't record a connect-change event during reset-resume USB: Fix novation SourceControl XL after suspend usb: uas: fix a plug & unplug racing USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 USB: core: add endpoint-blacklist quirk usb: host: xhci: update event ring dequeue pointer on purpose xhci: Fix memory leak when caching protocol extended capability PSI tables - take 2 xhci: fix runtime pm enabling for quirky Intel hosts xhci: Force Maximum Packet size for Full-speed bulk devices to valid range. staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi. staging: android: ashmem: Disallow ashmem memory from being remapped vt: vt_ioctl: fix race in VT_RESIZEX vt: selection, handle pending signals in paste_selection vt: fix scrollback flushing on background consoles floppy: check FDC index for errors before assigning it USB: misc: iowarrior: add support for the 100 device USB: misc: iowarrior: add support for the 28 and 28L devices USB: misc: iowarrior: add support for 2 OEMed devices thunderbolt: Prevent crash if non-active NVMem file is read ecryptfs: fix a memory leak bug in ecryptfs_init_messaging() ecryptfs: fix a memory leak bug in parse_tag_1_packet() ASoC: sun8i-codec: Fix setting DAI data format ALSA: hda/realtek - Apply quirk for yet another MSI laptop ALSA: hda/realtek - Apply quirk for MSI GP63, too ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs iommu/qcom: Fix bogus detach logic UPSTREAM: sched/psi: Fix OOB write when writing 0 bytes to PSI files UPSTREAM: psi: Fix a division error in psi poll() UPSTREAM: sched/psi: Fix sampling error and rare div0 crashes with cgroups and high uptime UPSTREAM: sched/psi: Correct overly pessimistic size calculation ANDROID: build.config.gki.aarch64: enable symbol trimming FROMLIST: f2fs: Handle casefolding with Encryption FROMLIST: fscrypt: Have filesystems handle their d_ops FROMLIST: ext4: Use generic casefolding support FROMLIST: f2fs: Use generic casefolding support FROMLIST: Add standard casefolding support FROMLIST: unicode: Add utf8_casefold_hash ANDROID: sdcardfs: fix -ENOENT lookup race issue ANDROID: gki_defconfig: Enable CONFIG_RD_LZ4 ANDROID: gki: Enable BINFMT_MISC as part of GKI ANDROID: gki_defconfig: disable CONFIG_CRYPTO_MD4 ANDROID: dm: Add wrapped key support in dm-default-key ANDROID: dm: add support for passing through derive_raw_secret ANDROID: block: Prevent crypto fallback for wrapped keys BACKPORT: FROMLIST: kbuild: generate autoksyms.h early BACKPORT: FROMLIST: kbuild: split adjust_autoksyms.sh in two parts BACKPORT: FROMLIST: kbuild: allow symbol whitelisting with TRIM_UNUSED_KSYMS ANDROID: kbuild: use modules.order in adjust_autoksyms.sh UPSTREAM: kbuild: source include/config/auto.conf instead of ${KCONFIG_CONFIG} ANDROID: Disable wq fp check in CFI builds ANDROID: increase limit on sched-tune boost groups BACKPORT: nvmem: core: fix regression in of_nvmem_cell_get() BACKPORT: nvmem: hide unused nvmem_find_cell_by_index function BACKPORT: nvmem: resolve cells from DT at registration time Linux 4.19.106 drm/amdgpu/display: handle multiple numbers of fclks in dcn_calcs.c (v2) mlxsw: spectrum_dpipe: Add missing error path virtio_balloon: prevent pfn array overflow cifs: log warning message (once) if out of disk space help_next should increase position index NFS: Fix memory leaks drm/amdgpu/smu10: fix smu10_get_clock_by_type_with_voltage drm/amdgpu/smu10: fix smu10_get_clock_by_type_with_latency brd: check and limit max_part par microblaze: Prevent the overflow of the start iwlwifi: mvm: Fix thermal zone registration irqchip/gic-v3-its: Reference to its_invall_cmd descriptor when building INVALL bcache: explicity type cast in bset_bkey_last() reiserfs: prevent NULL pointer dereference in reiserfs_insert_item() lib/scatterlist.c: adjust indentation in __sg_alloc_table ocfs2: fix a NULL pointer dereference when call ocfs2_update_inode_fsync_trans() radeon: insert 10ms sleep in dce5_crtc_load_lut trigger_next should increase position index ftrace: fpid_next() should increase position index drm/nouveau/disp/nv50-: prevent oops when no channel method map provided irqchip/gic-v3: Only provision redistributors that are enabled in ACPI rbd: work around -Wuninitialized warning ceph: check availability of mds cluster on mount after wait timeout bpf: map_seq_next should always increase position index cifs: fix NULL dereference in match_prepath iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop hostap: Adjust indentation in prism2_hostapd_add_sta ARM: 8951/1: Fix Kexec compilation issue. jbd2: make sure ESHUTDOWN to be recorded in the journal superblock jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record selftests: bpf: Reset global state between reuseport test runs iommu/vt-d: Remove unnecessary WARN_ON_ONCE() bcache: cached_dev_free needs to put the sb page powerpc/sriov: Remove VF eeh_dev state when disabling SR-IOV drm/nouveau/mmu: fix comptag memory leak ALSA: hda - Add docking station support for Lenovo Thinkpad T420s driver core: platform: fix u32 greater or equal to zero comparison s390/ftrace: generate traced function stack frame s390: adjust -mpacked-stack support check for clang 10 x86/decoder: Add TEST opcode to Group3-2 kbuild: use -S instead of -E for precise cc-option test in Kconfig ALSA: hda/hdmi - add retry logic to parse_intel_hdmi() irqchip/mbigen: Set driver .suppress_bind_attrs to avoid remove problems remoteproc: Initialize rproc_class before use module: avoid setting info->name early in case we can fall back to info->mod->name btrfs: device stats, log when stats are zeroed btrfs: safely advance counter when looking up bio csums btrfs: fix possible NULL-pointer dereference in integrity checks pwm: Remove set but not set variable 'pwm' ide: serverworks: potential overflow in svwks_set_pio_mode() cmd64x: potential buffer overflow in cmd64x_program_timings() pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional x86/mm: Fix NX bit clearing issue in kernel_map_pages_in_pgd f2fs: fix memleak of kobject watchdog/softlockup: Enforce that timestamp is valid on boot drm/amd/display: fixup DML dependencies arm64: fix alternatives with LLVM's integrated assembler scsi: iscsi: Don't destroy session if there are outstanding connections f2fs: free sysfs kobject f2fs: set I_LINKABLE early to avoid wrong access by vfs iommu/arm-smmu-v3: Use WRITE_ONCE() when changing validity of an STE usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add drm/nouveau/fault/gv100-: fix memory leak on module unload drm/nouveau/drm/ttm: Remove set but not used variable 'mem' drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new() vme: bridges: reduce stack usage bpf: Return -EBADRQC for invalid map type in __bpf_tx_xdp_map driver core: Print device when resources present in really_probe() driver core: platform: Prevent resouce overflow from causing infinite loops visorbus: fix uninitialized variable access tty: synclink_gt: Adjust indentation in several functions tty: synclinkmp: Adjust indentation in several functions ASoC: atmel: fix build error with CONFIG_SND_ATMEL_SOC_DMA=m wan: ixp4xx_hss: fix compile-testing on 64-bit x86/nmi: Remove irq_work from the long duration NMI handler Input: edt-ft5x06 - work around first register access error rcu: Use WRITE_ONCE() for assignments to ->pprev for hlist_nulls efi/x86: Don't panic or BUG() on non-critical error conditions soc/tegra: fuse: Correct straps' address for older Tegra124 device trees IB/hfi1: Add software counter for ctxt0 seq drop staging: rtl8188: avoid excessive stack usage udf: Fix free space reporting for metadata and virtual partitions usbip: Fix unsafe unaligned pointer usage ARM: dts: stm32: Add power-supply for DSI panel on stm32f469-disco drm: remove the newline for CRC source name. mlx5: work around high stack usage with gcc ACPI: button: Add DMI quirk for Razer Blade Stealth 13 late 2019 lid switch tools lib api fs: Fix gcc9 stringop-truncation compilation error ALSA: sh: Fix compile warning wrt const clk: uniphier: Add SCSSI clock gate for each channel ALSA: sh: Fix unused variable warnings clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock RDMA/rxe: Fix error type of mmap_offset reset: uniphier: Add SCSSI reset control for each channel pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs PM / devfreq: rk3399_dmc: Add COMPILE_TEST and HAVE_ARM_SMCCC dependency x86/vdso: Provide missing include file crypto: chtls - Fixed memory leak dmaengine: imx-sdma: Fix memory leak dmaengine: Store module owner in dma_device struct selinux: ensure we cleanup the internal AVC counters on error in avc_update() ARM: dts: r8a7779: Add device node for ARM global timer drm/mediatek: handle events when enabling/disabling crtc scsi: aic7xxx: Adjust indentation in ahc_find_syncrate scsi: ufs: Complete pending requests in host reset and restore path ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1 orinoco: avoid assertion in case of NULL pointer rtlwifi: rtl_pci: Fix -Wcast-function-type iwlegacy: Fix -Wcast-function-type ipw2x00: Fix -Wcast-function-type b43legacy: Fix -Wcast-function-type ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy fore200e: Fix incorrect checks of NULL pointer dereference r8169: check that Realtek PHY driver module is loaded reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in v4l2_device macros PCI: Increase D3 delay for AMD Ryzen5/7 XHCI controllers PCI: Add generic quirk for increasing D3hot delay media: cx23885: Add support for AVerMedia CE310B PCI: iproc: Apply quirk_paxc_bridge() for module as well as built-in ARM: dts: imx6: rdu2: Limit USBH1 to Full Speed ARM: dts: imx6: rdu2: Disable WP for USDHC2 and USDHC3 arm64: dts: qcom: msm8996: Disable USB2 PHY suspend by core selinux: ensure we cleanup the internal AVC counters on error in avc_insert() arm: dts: allwinner: H3: Add PMU node arm64: dts: allwinner: H6: Add PMU mode selinux: fall back to ref-walk if audit is required NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu(). net/wan/fsl_ucc_hdlc: reject muram offsets above 64K regulator: rk808: Lower log level on optional GPIOs being not available drm/amdgpu: Ensure ret is always initialized when using SOC15_WAIT_ON_RREG drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table clk: qcom: rcg2: Don't crash if our parent can't be found; return an error kconfig: fix broken dependency in randconfig-generated .config KVM: s390: ENOTSUPP -> EOPNOTSUPP fixups nbd: add a flush_workqueue in nbd_start_device drm/amd/display: Retrain dongles when SINK_COUNT becomes non-zero ath10k: Correct the DMA direction for management tx buffers ext4, jbd2: ensure panic when aborting with zero errno ARM: 8952/1: Disable kmemleak on XIP kernels tracing: Fix very unlikely race of registering two stat tracers tracing: Fix tracing_stat return values in error handling paths powerpc/iov: Move VF pdev fixup into pcibios_fixup_iov() s390/pci: Fix possible deadlock in recover_store() pwm: omap-dmtimer: Simplify error handling x86/sysfb: Fix check for bad VRAM size jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal kselftest: Minimise dependency of get_size on C library interfaces clocksource/drivers/bcm2835_timer: Fix memory leak of timer usb: dwc2: Fix IN FIFO allocation usb: gadget: udc: fix possible sleep-in-atomic-context bugs in gr_probe() uio: fix a sleep-in-atomic-context bug in uio_dmem_genirq_irqcontrol() sparc: Add .exit.data section. MIPS: Loongson: Fix potential NULL dereference in loongson3_platform_init() efi/x86: Map the entire EFI vendor string before copying it pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins media: sti: bdisp: fix a possible sleep-in-atomic-context bug in bdisp_device_run() char/random: silence a lockdep splat with printk() iommu/vt-d: Fix off-by-one in PASID allocation gpio: gpio-grgpio: fix possible sleep-in-atomic-context bugs in grgpio_irq_map/unmap() powerpc/powernv/iov: Ensure the pdn for VFs always contains a valid PE number media: i2c: mt9v032: fix enum mbus codes and frame sizes pxa168fb: Fix the function used to release some memory in an error handling path pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs gianfar: Fix TX timestamping with a stacked DSA driver ALSA: ctl: allow TLV read operation for callback type of element in locked case ext4: fix ext4_dax_read/write inode locking sequence for IOCB_NOWAIT leds: pca963x: Fix open-drain initialization brcmfmac: Fix use after free in brcmf_sdio_readframes() cpu/hotplug, stop_machine: Fix stop_machine vs hotplug order drm/gma500: Fixup fbdev stolen size usage evaluation KVM: nVMX: Use correct root level for nested EPT shadow page tables Revert "KVM: VMX: Add non-canonical check on writes to RTIT address MSRs" Revert "KVM: nVMX: Use correct root level for nested EPT shadow page tables" net/sched: flower: add missing validation of TCA_FLOWER_FLAGS net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS net: dsa: tag_qca: Make sure there is headroom for tag net/smc: fix leak of kernel memory to user space enic: prevent waking up stopped tx queues over watchdog reset core: Don't skip generic XDP program execution for cloned SKBs ANDROID: arm64: update the abi with the new gki_defconfig ANDROID: arm64: gki_defconfig: disable CONFIG_DEBUG_PREEMPT ANDROID: GKI: arm64: gki_defconfig: follow-up to removing DRM_MSM driver ANDROID: drm/msm: Remove Kconfig default ANDROID: GKI: arm64: gki_defconfig: remove qcom,cmd-db driver ANDROID: GKI: drivers: qcom: cmd-db: Allow compiling qcom,cmd-db driver as module ANDROID: GKI: arm64: gki_defconfig: remove qcom,rpmh-rsc driver ANDROID: GKI: drivers: qcom: rpmh-rsc: Add tristate support for qcom,rpmh-rsc driver ANDROID: ufs, block: fix crypto power management and move into block layer ANDROID: rtc: class: support hctosys from modular RTC drivers ANDROID: Incremental fs: Support xattrs ANDROID: abi update for 4.19.105 UPSTREAM: random: ignore GRND_RANDOM in getentropy(2) UPSTREAM: random: add GRND_INSECURE to return best-effort non-cryptographic bytes UPSTREAM: linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check UPSTREAM: linux/random.h: Use false with bool UPSTREAM: linux/random.h: Remove arch_has_random, arch_has_random_seed UPSTREAM: random: remove some dead code of poolinfo UPSTREAM: random: fix typo in add_timer_randomness() UPSTREAM: random: Add and use pr_fmt() UPSTREAM: random: convert to ENTROPY_BITS for better code readability UPSTREAM: random: remove unnecessary unlikely() UPSTREAM: random: remove kernel.random.read_wakeup_threshold UPSTREAM: random: delete code to pull data into pools UPSTREAM: random: remove the blocking pool UPSTREAM: random: make /dev/random be almost like /dev/urandom UPSTREAM: random: Add a urandom_read_nowait() for random APIs that don't warn UPSTREAM: random: Don't wake crng_init_wait when crng_init == 1 UPSTREAM: char/random: silence a lockdep splat with printk() BACKPORT: fdt: add support for rng-seed BACKPORT: arm64: map FDT as RW for early_init_dt_scan() UPSTREAM: random: fix soft lockup when trying to read from an uninitialized blocking pool UPSTREAM: random: document get_random_int() family UPSTREAM: random: move rand_initialize() earlier UPSTREAM: random: only read from /dev/random after its pool has received 128 bits UPSTREAM: drivers/char/random.c: make primary_crng static UPSTREAM: drivers/char/random.c: remove unused stuct poolinfo::poolbits UPSTREAM: drivers/char/random.c: constify poolinfo_table ANDROID: clang: update to 10.0.4 Linux 4.19.105 KVM: x86/mmu: Fix struct guest_walker arrays for 5-level paging jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer jbd2: move the clearing of b_modified flag to the journal_unmap_buffer() NFSv4.1 make cachethis=no for writes hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions. perf/x86/intel: Fix inaccurate period in context switch for auto-reload s390/time: Fix clk type in get_tod_clock RDMA/core: Fix protection fault in get_pkey_idx_qp_list RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq RDMA/hfi1: Fix memory leak in _dev_comp_vect_mappings_create RDMA/core: Fix invalid memory access in spec_filter_size IB/rdmavt: Reset all QPs when the device is shut down IB/hfi1: Close window for pq and request coliding IB/hfi1: Acquire lock to release TID entries when user file is closed nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info perf/x86/amd: Add missing L2 misses event spec to AMD Family 17h's event map KVM: nVMX: Use correct root level for nested EPT shadow page tables arm64: ssbs: Fix context-switch when SSBS is present on all CPUs ARM: npcm: Bring back GPIOLIB support btrfs: log message when rw remount is attempted with unclean tree-log btrfs: print message when tree-log replay starts btrfs: ref-verify: fix memory leaks Btrfs: fix race between using extent maps and merging them ext4: improve explanation of a mount failure caused by a misconfigured kernel ext4: add cond_resched() to ext4_protect_reserved_inode ext4: fix checksum errors with indexed dirs ext4: fix support for inode sizes > 1024 bytes ext4: don't assume that mmp_nodename/bdevname have NUL ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000 ALSA: usb-audio: sound: usb: usb true/false for bool return type arm64: nofpsmid: Handle TIF_FOREIGN_FPSTATE flag cleanly arm64: cpufeature: Set the FP/SIMD compat HWCAP bits properly ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 ALSA: hda/realtek - Fix silent output on MSI-GL73 ALSA: usb-audio: Fix UAC2/3 effect unit parsing Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list Input: synaptics - enable SMBus on ThinkPad L470 Input: synaptics - switch T470s to RMI4 by default ANDROID: Fix ABI representation after enabling CONFIG_NET_NS ANDROID: gki_defconfig: Enable CONFIG_NET_NS ANDROID: gki_defconfig: Enable XDP_SOCKETS UPSTREAM: sched/topology: Introduce a sysctl for Energy Aware Scheduling ANDROID: gki_defconfig: Enable MAC80211_RC_MINSTREL ANDROID: f2fs: remove unused function ANDROID: virtio: virtio_input: pass _DIRECT only if the device advertises _DIRECT ANDROID: cf build: Use merge_configs ANDROID: net: bpf: Allow TC programs to call BPF_FUNC_skb_change_head ANDROID: gki_defconfig: Disable SDCARD_FS Linux 4.19.104 padata: fix null pointer deref of pd->pinst serial: uartps: Move the spinlock after the read of the tx empty x86/stackframe, x86/ftrace: Add pt_regs frame annotations x86/stackframe: Move ENCODE_FRAME_POINTER to asm/frame.h scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state libertas: make lbs_ibss_join_existing() return error code on rates overflow libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B media: i2c: adv748x: Fix unsafe macros crypto: atmel-sha - fix error handling when setting hmac key crypto: artpec6 - return correct error code for failed setkey() mtd: sharpslpart: Fix unsigned comparison to zero mtd: onenand_base: Adjust indentation in onenand_read_ops_nolock KVM: arm64: pmu: Don't increment SW_INCR if PMCR.E is unset KVM: arm: Make inject_abt32() inject an external abort instead KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests KVM: arm/arm64: Fix young bit from mmu notifier arm64: ptrace: nofpsimd: Fail FP/SIMD regset operations arm64: cpufeature: Fix the type of no FP/SIMD capability ARM: 8949/1: mm: mark free_memmap as __init KVM: arm/arm64: vgic-its: Fix restoration of unmapped collections iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning tools/power/acpi: fix compilation error ARM: dts: at91: sama5d3: define clock rate range for tcb1 ARM: dts: at91: sama5d3: fix maximum peripheral clock rates ARM: dts: am43xx: add support for clkout1 clock ARM: dts: at91: Reenable UART TX pull-ups platform/x86: intel_mid_powerbtn: Take a copy of ddata ARC: [plat-axs10x]: Add missing multicast filter number to GMAC node rtc: cmos: Stop using shared IRQ rtc: hym8563: Return -EINVAL if the time is known to be invalid spi: spi-mem: Fix inverted logic in op sanity check spi: spi-mem: Add extra sanity checks on the op param gpio: zynq: Report gpio direction at boot serial: uartps: Add a timeout to the tx empty wait NFSv4: try lease recovery on NFS4ERR_EXPIRED NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes() NFS: Revalidate the file size on a fatal write error nfs: NFS_SWAP should depend on SWAP PCI: Don't disable bridge BARs when assigning bus resources PCI/switchtec: Fix vep_vector_number ioread width ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe PCI/IOV: Fix memory leak in pci_iov_add_virtfn() scsi: ufs: Fix ufshcd_probe_hba() reture value in case ufshcd_scsi_add_wlus() fails RDMA/uverbs: Verify MR access flags RDMA/core: Fix locking in ib_uverbs_event_read RDMA/netlink: Do not always generate an ACK for some netlink operations IB/mlx4: Fix memory leak in add_gid error flow hv_sock: Remove the accept port restriction ASoC: pcm: update FE/BE trigger order based on the command ANDROID: gki_defconfig: Add CONFIG_UNICODE ANDROID: added memory initialization tests to cuttlefish config ANDROID: gki_defconfig: enable CONFIG_RUNTIME_TESTING_MENU fs-verity: use u64_to_user_ptr() fs-verity: use mempool for hash requests fs-verity: implement readahead of Merkle tree pages fs-verity: implement readahead for FS_IOC_ENABLE_VERITY fscrypt: improve format of no-key names ubifs: allow both hash and disk name to be provided in no-key names ubifs: don't trigger assertion on invalid no-key filename fscrypt: clarify what is meant by a per-file key fscrypt: derive dirhash key for casefolded directories fscrypt: don't allow v1 policies with casefolding fscrypt: add "fscrypt_" prefix to fname_encrypt() fscrypt: don't print name of busy file when removing key fscrypt: document gfp_flags for bounce page allocation fscrypt: optimize fscrypt_zeroout_range() fscrypt: remove redundant bi_status check fscrypt: Allow modular crypto algorithms FROMLIST: rename missed uaccess .fixup section ANDROID: f2fs: fix missing blk-crypto changes ANDROID: gki_defconfig: enable heap and stack initialization. UPSTREAM: lib/test_stackinit: Handle Clang auto-initialization pattern UPSTREAM: lib: Introduce test_stackinit module fscrypt: include <linux/ioctl.h> in UAPI header fscrypt: don't check for ENOKEY from fscrypt_get_encryption_info() fscrypt: remove fscrypt_is_direct_key_policy() fscrypt: move fscrypt_valid_enc_modes() to policy.c fscrypt: check for appropriate use of DIRECT_KEY flag earlier fscrypt: split up fscrypt_supported_policy() by policy version fscrypt: introduce fscrypt_needs_contents_encryption() fscrypt: move fscrypt_d_revalidate() to fname.c fscrypt: constify inode parameter to filename encryption functions fscrypt: constify struct fscrypt_hkdf parameter to fscrypt_hkdf_expand() fscrypt: verify that the crypto_skcipher has the correct ivsize fscrypt: use crypto_skcipher_driver_name() fscrypt: support passing a keyring key to FS_IOC_ADD_ENCRYPTION_KEY keys: Export lookup_user_key to external users UPSTREAM: dynamic_debug: allow to work if debugfs is disabled UPSTREAM: lib: dynamic_debug: no need to check return value of debugfs_create functions ANDROID: ABI/Whitelist: update for Cuttlefish ANDROID: update ABI representation and GKI whitelist ANDROID: gki_defconfig: Set CONFIG_ANDROID_BINDERFS=y Linux 4.19.103 rxrpc: Fix service call disconnection perf/core: Fix mlock accounting in perf_mmap() clocksource: Prevent double add_timer_on() for watchdog_timer x86/apic/msi: Plug non-maskable MSI affinity race cifs: fail i/o on soft mounts if sessionsetup errors out mm/page_alloc.c: fix uninitialized memmaps on a partially populated last section mm: return zero_resv_unavail optimization mm: zero remaining unavailable struct pages KVM: Play nice with read-only memslots when querying host page size KVM: Use vcpu-specific gva->hva translation when querying host page size KVM: nVMX: vmread should not set rflags to specify success in case of #PF KVM: VMX: Add non-canonical check on writes to RTIT address MSRs KVM: x86: Use gpa_t for cr2/gpa to fix TDP support on 32-bit KVM KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM btrfs: flush write bio if we loop in extent_write_cache_pages drm/dp_mst: Remove VCPI while disabling topology mgr drm: atmel-hlcdc: enable clock before configuring timing engine btrfs: free block groups after free'ing fs trees btrfs: use bool argument in free_root_pointers() ext4: fix deadlock allocating crypto bounce page from mempool net: dsa: b53: Always use dev->vlan_enabled in b53_configure_vlan() net: macb: Limit maximum GEM TX length in TSO net: macb: Remove unnecessary alignment check for TSO net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx net/mlx5: IPsec, Fix esp modify function attribute net: systemport: Avoid RBUF stuck in Wake-on-LAN mode net_sched: fix a resource leak in tcindex_set_parms() net: mvneta: move rx_dropped and rx_errors in per-cpu stats net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port bonding/alb: properly access headers in bond_alb_xmit() mfd: rn5t618: Mark ADC control register volatile mfd: da9062: Fix watchdog compatible string ubi: Fix an error pointer dereference in error handling code ubi: fastmap: Fix inverted logic in seen selfcheck nfsd: Return the correct number of bytes written to the file nfsd: fix jiffies/time_t mixup in LRU list nfsd: fix delay timer on 32-bit architectures IB/core: Fix ODP get user pages flow IB/mlx5: Fix outstanding_pi index for GSI qps net: tulip: Adjust indentation in {dmfe, uli526x}_init_module net: smc911x: Adjust indentation in smc911x_phy_configure ppp: Adjust indentation into ppp_async_input NFC: pn544: Adjust indentation in pn544_hci_check_presence drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable powerpc/44x: Adjust indentation in ibm4xx_denali_fixup_memsize ext2: Adjust indentation in ext2_fill_super phy: qualcomm: Adjust indentation in read_poll_timeout scsi: ufs: Recheck bkops level if bkops is disabled scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free scsi: csiostor: Adjust indentation in csio_device_reset scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type percpu: Separate decrypted varaibles anytime encryption can be enabled drm/amd/dm/mst: Ignore payload update failures clk: tegra: Mark fuse clock as critical KVM: s390: do not clobber registers during guest reset/store status KVM: x86: Free wbinvd_dirty_mask if vCPU creation fails KVM: x86: Don't let userspace set host-reserved cr4 bits x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit KVM: PPC: Book3S PR: Free shared page if mmu initialization fails KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails KVM: x86: Fix potential put_fpu() w/o load_fpu() on MPX platform KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks aio: prevent potential eventfd recursion on poll eventfd: track eventfd_signal() recursion depth bcache: add readahead cache policy options via sysfs interface watchdog: fix UAF in reboot notifier handling in watchdog core code xen/balloon: Support xend-based toolstack take two tools/kvm_stat: Fix kvm_exit filter name media: rc: ensure lirc is initialized before registering input device drm/rect: Avoid division by zero gfs2: fix O_SYNC write handling gfs2: move setting current->backing_dev_info sunrpc: expiry_time should be seconds not timeval mwifiex: fix unbalanced locking in mwifiex_process_country_ie() iwlwifi: don't throw error when trying to remove IGTK ARM: tegra: Enable PLLP bypass during Tegra124 LP1 Btrfs: fix race between adding and putting tree mod seq elements and nodes btrfs: set trans->drity in btrfs_commit_transaction Btrfs: fix missing hole after hole punching and fsync when using NO_HOLES jbd2_seq_info_next should increase position index NFS: Directory page cache pages need to be locked when read NFS: Fix memory leaks and corruption in readdir scsi: qla2xxx: Fix unbound NVME response length crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill crypto: api - Fix race condition in crypto_spawn_alg crypto: atmel-aes - Fix counter overflow in CTR mode crypto: pcrypt - Do not clear MAY_SLEEP flag in original request crypto: ccp - set max RSA modulus size for v3 platform devices as well samples/bpf: Don't try to remove user's homedir on clean ftrace: Protect ftrace_graph_hash with ftrace_sync ftrace: Add comment to why rcu_dereference_sched() is open coded tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu tracing: Annotate ftrace_graph_hash pointer with __rcu padata: Remove broken queue flushing dm writecache: fix incorrect flush sequence when doing SSD mode commit dm: fix potential for q->make_request_fn NULL pointer dm crypt: fix benbi IV constructor crash if used in authenticated mode dm space map common: fix to ensure new block isn't already in use dm zoned: support zone sizes smaller than 128MiB of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc PM: core: Fix handling of devices deleted during system-wide resume f2fs: code cleanup for f2fs_statfs_project() f2fs: fix miscounted block limit in f2fs_statfs_project() f2fs: choose hardlimit when softlimit is larger than hardlimit in f2fs_statfs_project() ovl: fix wrong WARN_ON() in ovl_cache_update_ino() power: supply: ltc2941-battery-gauge: fix use-after-free scsi: qla2xxx: Fix mtcp dump collection failure scripts/find-unused-docs: Fix massive false positives crypto: ccree - fix PM race condition crypto: ccree - fix pm wrongful error reporting crypto: ccree - fix backlog memory leak crypto: api - Check spawn->alg under lock in crypto_drop_spawn mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile hv_balloon: Balloon up according to request page number mmc: sdhci-of-at91: fix memleak on clk_get failure PCI: keystone: Fix link training retries initiation crypto: geode-aes - convert to skcipher API and make thread-safe ubifs: Fix deadlock in concurrent bulk-read and writepage ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag ubifs: don't trigger assertion on invalid no-key filename ubifs: Reject unsupported ioctl flags explicitly alarmtimer: Unregister wakeup source when module get fails ACPI / battery: Deal better with neither design nor full capacity not being reported ACPI / battery: Use design-cap for capacity calculations if full-cap is not available ACPI / battery: Deal with design or full capacity being reported as -1 ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards mmc: spi: Toggle SPI polarity, do not hardcode it PCI: tegra: Fix return value check of pm_runtime_get_sync() smb3: fix signing verification of large reads powerpc/pseries: Advance pfn if section is not present in lmb_is_removable() powerpc/xmon: don't access ASDR in VMs s390/mm: fix dynamic pagetable upgrade for hugetlbfs MIPS: boot: fix typo in 'vmlinux.lzma.its' target MIPS: fix indentation of the 'RELOCS' message KVM: arm64: Only sign-extend MMIO up to register width KVM: arm/arm64: Correct AArch32 SPSR on exception entry KVM: arm/arm64: Correct CPSR on exception entry KVM: arm64: Correct PSTATE on exception entry ALSA: hda: Add Clevo W65_67SB the power_save blacklist platform/x86: intel_scu_ipc: Fix interrupt support irqdomain: Fix a memory leak in irq_domain_push_irq() lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more() media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments media: v4l2-core: compat: ignore native command codes media/v4l2-core: set pages dirty upon releasing DMA buffers mm: move_pages: report the number of non-attempted pages mm/memory_hotplug: fix remove_memory() lockdep splat ALSA: dummy: Fix PCM format loop in proc output ALSA: usb-audio: Fix endianess in descriptor validation usb: gadget: f_ecm: Use atomic_t to track in-flight request usb: gadget: f_ncm: Use atomic_t to track in-flight request usb: gadget: legacy: set max_speed to super-speed usb: typec: tcpci: mask event interrupts when remove driver brcmfmac: Fix memory leak in brcmf_usbdev_qinit rcu: Avoid data-race in rcu_gp_fqs_check_wake() tracing: Fix sched switch start/stop refcount racy updates ipc/msg.c: consolidate all xxxctl_down() functions mfd: dln2: More sanity checking for endpoints media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors rxrpc: Fix NULL pointer deref due to call->conn being cleared on disconnect rxrpc: Fix missing active use pinning of rxrpc_local object rxrpc: Fix insufficient receive notification generation rxrpc: Fix use-after-free in rxrpc_put_local() tcp: clear tp->segs_{in|out} in tcp_disconnect() tcp: clear tp->data_segs{in|out} in tcp_disconnect() tcp: clear tp->delivered in tcp_disconnect() tcp: clear tp->total_retrans in tcp_disconnect() bnxt_en: Fix TC queue mapping. net: stmmac: Delete txtimer in suspend() net_sched: fix an OOB access in cls_tcindex net: hsr: fix possible NULL deref in hsr_handle_frame() l2tp: Allow duplicate session creation with UDP gtp: use __GFP_NOWARN to avoid memalloc warning cls_rsvp: fix rsvp_policy sparc32: fix struct ipc64_perm type definition iwlwifi: mvm: fix NVM check for 3168 devices printk: fix exclusive_console replaying udf: Allow writing to 'Rewritable' partitions x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR ocfs2: fix oops when writing cloned file media: iguanair: fix endpoint sanity check kernel/module: Fix memleak in module_add_modinfo_attrs() ovl: fix lseek overflow on 32bit Revert "drm/sun4i: dsi: Change the start delay calculation" ANDROID: Revert "ANDROID: gki_defconfig: removed CONFIG_PM_WAKELOCKS" ANDROID: dm: prevent default-key from being enabled without needed hooks ANDROID: gki: x86: Enable PCI_MSI, WATCHDOG, HPET ANDROID: Incremental fs: Fix crash on failed lookup ANDROID: Incremental fs: Make files writeable ANDROID: update abi for 4.19.102 ANDROID: Incremental fs: Remove C++-style comments Linux 4.19.102 mm/migrate.c: also overwrite error when it is bigger than zero perf report: Fix no libunwind compiled warning break s390 issue btrfs: do not zero f_bavail if we have available space net: Fix skb->csum update in inet_proto_csum_replace16(). l2t_seq_next should increase position index seq_tab_next() should increase position index net: fsl/fman: rename IF_MODE_XGMII to IF_MODE_10G net/fsl: treat fsl,erratum-a011043 powerpc/fsl/dts: add fsl,erratum-a011043 qlcnic: Fix CPU soft lockup while collecting firmware dump ARM: dts: am43x-epos-evm: set data pin directions for spi0 and spi1 r8152: get default setting of WOL before initializing airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE tee: optee: Fix compilation issue with nommu ARM: 8955/1: virt: Relax arch timer version check during early boot scsi: fnic: do not queue commands during fwreset xfrm: interface: do not confirm neighbor when do pmtu update xfrm interface: fix packet tx through bpf_redirect() vti[6]: fix packet tx through bpf_redirect() ARM: dts: am335x-boneblack-common: fix memory size iwlwifi: Don't ignore the cap field upon mcc update riscv: delete temporary files bnxt_en: Fix ipv6 RFS filter matching logic. net: dsa: bcm_sf2: Configure IMP port for 2Gb/sec netfilter: nft_tunnel: ERSPAN_VERSION must not be null wireless: wext: avoid gcc -O3 warning mac80211: Fix TKIP replay protection immediately after key setup cfg80211: Fix radar event during another phy CAC wireless: fix enabling channel 12 for custom regulatory domain parisc: Use proper printk format for resource_size_t qmi_wwan: Add support for Quectel RM500Q ASoC: sti: fix possible sleep-in-atomic platform/x86: GPD pocket fan: Allow somewhat lower/higher temperature limits igb: Fix SGMII SFP module discovery for 100FX/LX. ixgbe: Fix calculation of queue with VFs and flow director on interface flap ixgbevf: Remove limit of 10 entries for unicast filter list ASoC: rt5640: Fix NULL dereference on module unload clk: mmp2: Fix the order of timer mux parents mac80211: mesh: restrict airtime metric to peered established plinks clk: sunxi-ng: h6-r: Fix AR100/R_APB2 parent order rseq: Unregister rseq for clone CLONE_VM tools lib traceevent: Fix memory leakage in filter_event soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot ARM: dts: beagle-x15-common: Model 5V0 regulator ARM: dts: am57xx-beagle-x15/am57xx-idk: Remove "gpios" for endpoint dt nodes ARM: dts: sun8i: a83t: Correct USB3503 GPIOs polarity media: si470x-i2c: Move free() past last use of 'radio' cgroup: Prevent double killing of css when enabling threaded cgroup Bluetooth: Fix race condition in hci_release_sock() ttyprintk: fix a potential deadlock in interrupt context issue tomoyo: Use atomic_t for statistics counter media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0 media: gspca: zero usb_buf media: vp7045: do not read uninitialized values if usb transfer fails media: af9005: uninitialized variable printked media: digitv: don't continue if remote control state can't be read reiserfs: Fix memory leak of journal device string mm/mempolicy.c: fix out of bounds write in mpol_parse_str() ext4: validate the debug_want_extra_isize mount option at parse time arm64: kbuild: remove compressed images on 'make ARCH=arm64 (dist)clean' tools lib: Fix builds when glibc contains strlcpy() PM / devfreq: Add new name attribute for sysfs perf c2c: Fix return type for histogram sorting comparision functions rsi: fix use-after-free on failed probe and unbind rsi: add hci detach for hibernation and poweroff crypto: pcrypt - Fix user-after-free on module unload x86/resctrl: Fix a deadlock due to inaccurate reference x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup x86/resctrl: Fix use-after-free when deleting resource groups vfs: fix do_last() regression ANDROID: update abi definitions BACKPORT: clk: core: clarify the check for runtime PM UPSTREAM: sched/fair/util_est: Implement faster ramp-up EWMA on utilization increases ANDROID: Re-use SUGOV_RT_MAX_FREQ to control uclamp rt behavior BACKPORT: sched/fair: Make EAS wakeup placement consider uclamp restrictions BACKPORT: sched/fair: Make task_fits_capacity() consider uclamp restrictions ANDROID: sched/core: Move SchedTune task API into UtilClamp wrappers ANDROID: sched/core: Add a latency-sensitive flag to uclamp ANDROID: sched/tune: Move SchedTune cpu API into UtilClamp wrappers ANDROID: init: kconfig: Only allow sched tune if !uclamp FROMGIT: sched/core: Fix size of rq::uclamp initialization FROMGIT: sched/uclamp: Fix a bug in propagating uclamp value in new cgroups FROMGIT: sched/uclamp: Rename uclamp_util_with() into uclamp_rq_util_with() FROMGIT: sched/uclamp: Make uclamp util helpers use and return UL values FROMGIT: sched/uclamp: Remove uclamp_util() BACKPORT: sched/rt: Make RT capacity-aware UPSTREAM: tools headers UAPI: Sync sched.h with the kernel UPSTREAM: sched/uclamp: Fix overzealous type replacement UPSTREAM: sched/uclamp: Fix incorrect condition UPSTREAM: sched/core: Fix compilation error when cgroup not selected UPSTREAM: sched/core: Fix uclamp ABI bug, clean up and robustify sched_read_attr() ABI logic and code UPSTREAM: sched/uclamp: Always use 'enum uclamp_id' for clamp_id values UPSTREAM: sched/uclamp: Update CPU's refcount on TG's clamp changes UPSTREAM: sched/uclamp: Use TG's clamps to restrict TASK's clamps UPSTREAM: sched/uclamp: Propagate system defaults to the root group UPSTREAM: sched/uclamp: Propagate parent clamps UPSTREAM: sched/uclamp: Extend CPU's cgroup controller BACKPORT: sched/uclamp: Add uclamp support to energy_compute() UPSTREAM: sched/uclamp: Add uclamp_util_with() BACKPORT: sched/cpufreq, sched/uclamp: Add clamps for FAIR and RT tasks UPSTREAM: sched/uclamp: Set default clamps for RT tasks UPSTREAM: sched/uclamp: Reset uclamp values on RESET_ON_FORK UPSTREAM: sched/uclamp: Extend sched_setattr() to support utilization clamping UPSTREAM: sched/core: Allow sched_setattr() to use the current policy UPSTREAM: sched/uclamp: Add system default clamps UPSTREAM: sched/uclamp: Enforce last task's UCLAMP_MAX UPSTREAM: sched/uclamp: Add bucket local max tracking UPSTREAM: sched/uclamp: Add CPU's clamp buckets refcounting UPSTREAM: cgroup: add cgroup_parse_float() Linux 4.19.101 KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE block: fix 32 bit overflow in __blkdev_issue_discard() block: cleanup __blkdev_issue_discard() random: try to actively add entropy rather than passively wait for it crypto: af_alg - Use bh_lock_sock in sk_destruct rsi: fix non-atomic allocation in completion handler rsi: fix memory leak on failed URB submission rsi: fix use-after-free on probe errors sched/fair: Fix insertion in rq->leaf_cfs_rq_list sched/fair: Add tmp_alone_branch assertion usb-storage: Disable UAS on JMicron SATA enclosure ARM: OMAP2+: SmartReflex: add omap_sr_pdata definition iommu/amd: Support multiple PCI DMA aliases in IRQ Remapping PCI: Add DMA alias quirk for Intel VCA NTB platform/x86: dell-laptop: disable kbd backlight on Inspiron 10xx HID: steam: Fix input device disappearing atm: eni: fix uninitialized variable warning gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP net: wan: sdla: Fix cast from pointer to integer of different size drivers/net/b44: Change to non-atomic bit operations on pwol_mask spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls watchdog: rn5t618_wdt: fix module aliases watchdog: max77620_wdt: fix potential build errors phy: cpcap-usb: Prevent USB line glitches from waking up modem phy: qcom-qmp: Increase PHY ready timeout drivers/hid/hid-multitouch.c: fix a possible null pointer access. HID: Add quirk for incorrect input length on Lenovo Y720 HID: ite: Add USB id match for Acer SW5-012 keyboard dock HID: Add quirk for Xin-Mo Dual Controller arc: eznps: fix allmodconfig kconfig warning HID: multitouch: Add LG MELF0410 I2C touchscreen support net_sched: fix ops->bind_class() implementations net_sched: ematch: reject invalid TCF_EM_SIMPLE zd1211rw: fix storage endpoint lookup rtl8xxxu: fix interface sanity check brcmfmac: fix interface sanity check ath9k: fix storage endpoint lookup cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() crypto: chelsio - fix writing tfm flags to wrong place iio: st_gyro: Correct data for LSM9DS0 gyro mei: me: add comet point (lake) H device ids component: do not dereference opaque pointer in debugfs serial: 8250_bcm2835aux: Fix line mismatch on driver unbind staging: vt6656: Fix false Tx excessive retries reporting. staging: vt6656: use NULLFUCTION stack on mac80211 staging: vt6656: correct packet types for CTS protect, mode. staging: wlan-ng: ensure error return is actually returned staging: most: net: fix buffer overflow usb: dwc3: turn off VBUS when leaving host mode USB: serial: ir-usb: fix IrLAP framing USB: serial: ir-usb: fix link-speed handling USB: serial: ir-usb: add missing endpoint sanity check usb: dwc3: pci: add ID for the Intel Comet Lake -V variant rsi_91x_usb: fix interface sanity check orinoco_usb: fix interface sanity check ANDROID: gki: Removed cf modules from gki_defconfig ANDROID: Remove default y for VIRTIO_PCI_LEGACY ANDROID: gki_defconfig: Remove SND_8X0 ANDROID: gki: Fixed some typos in Kconfig.gki ANDROID: modularize BLK_MQ_VIRTIO ANDROID: kallsyms: strip hashes from function names with ThinLTO ANDROID: Incremental fs: Remove unneeded compatibility typedef ANDROID: Incremental fs: Enable incrementalfs in GKI ANDROID: Incremental fs: Fix sparse errors ANDROID: Fixing incremental fs style issues ANDROID: Make incfs selftests pass ANDROID: Initial commit of Incremental FS ANDROID: gki_defconfig: Enable req modules in GKI ANDROID: gki_defconfig: Set IKHEADERS back to =y UPSTREAM: UAPI: ndctl: Remove use of PAGE_SIZE Linux 4.19.100 mm/memory_hotplug: shrink zones when offlining memory mm/memory_hotplug: fix try_offline_node() mm/memunmap: don't access uninitialized memmap in memunmap_pages() drivers/base/node.c: simplify unregister_memory_block_under_nodes() mm/hotplug: kill is_dev_zone() usage in __remove_pages() mm/memory_hotplug: remove "zone" parameter from sparse_remove_one_section mm/memory_hotplug: make unregister_memory_block_under_nodes() never fail mm/memory_hotplug: remove memory block devices before arch_remove_memory() mm/memory_hotplug: create memory block devices after arch_add_memory() drivers/base/memory: pass a block_id to init_memory_block() mm/memory_hotplug: allow arch_remove_memory() without CONFIG_MEMORY_HOTREMOVE s390x/mm: implement arch_remove_memory() mm/memory_hotplug: make __remove_pages() and arch_remove_memory() never fail powerpc/mm: Fix section mismatch warning mm/memory_hotplug: make __remove_section() never fail mm/memory_hotplug: make unregister_memory_section() never fail mm, memory_hotplug: update a comment in unregister_memory() drivers/base/memory.c: clean up relics in function parameters mm/memory_hotplug: release memory resource after arch_remove_memory() mm, memory_hotplug: add nid parameter to arch_remove_memory drivers/base/memory.c: remove an unnecessary check on NR_MEM_SECTIONS mm, sparse: pass nid instead of pgdat to sparse_add_one_section() mm, sparse: drop pgdat_resize_lock in sparse_add/remove_one_section() mm/memory_hotplug: make remove_memory() take the device_hotplug_lock net/x25: fix nonblocking connect netfilter: nf_tables: add __nft_chain_type_get() netfilter: ipset: use bitmap infrastructure completely scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT libertas: Fix two buffer overflows at parsing bss descriptor coresight: tmc-etf: Do not call smp_processor_id from preemptible coresight: etb10: Do not call smp_processor_id from preemptible crypto: geode-aes - switch to skcipher for cbc(aes) fallback sd: Fix REQ_OP_ZONE_REPORT completion handling tracing: Fix histogram code when expression has same var as value tracing: Remove open-coding of hist trigger var_ref management tracing: Use hist trigger's var_ref array to destroy var_refs net/sonic: Prevent tx watchdog timeout net/sonic: Fix CAM initialization net/sonic: Fix command register usage net/sonic: Quiesce SONIC before re-initializing descriptor memory net/sonic: Fix receive buffer replenishment net/sonic: Improve receive descriptor status flag check net/sonic: Avoid needless receive descriptor EOL flag updates net/sonic: Fix receive buffer handling net/sonic: Fix interface error stats collection net/sonic: Use MMIO accessors net/sonic: Clear interrupt flags immediately net/sonic: Add mutual exclusion for accessing shared state do_last(): fetch directory ->i_mode and ->i_uid before it's too late tracing: xen: Ordered comparison of function pointers scsi: RDMA/isert: Fix a recently introduced regression related to logout hwmon: (nct7802) Fix voltage limits to wrong registers netfilter: nft_osf: add missing check for DREG attribute Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register Input: pegasus_notetaker - fix endpoint sanity check Input: aiptek - fix endpoint sanity check Input: gtco - fix endpoint sanity check Input: sur40 - fix interface sanity checks Input: pm8xxx-vib - fix handling of separate enable register Documentation: Document arm64 kpti control mmc: sdhci: fix minimum clock rate for v3 controller mmc: tegra: fix SDR50 tuning override ARM: 8950/1: ftrace/recordmcount: filter relocation types Revert "Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers" Input: keyspan-remote - fix control-message timeouts tracing: trigger: Replace unneeded RCU-list traversals PCI: Mark AMD Navi14 GPU rev 0xc5 ATS as broken hwmon: (core) Do not use device managed functions for memory allocations hwmon: (adt7475) Make volt2reg return same reg as reg2volt input afs: Fix characters allowed into cell names tun: add mutex_unlock() call and napi.skb clearing in tun_get_user() tcp: do not leave dangling pointers in tp->highest_sack tcp_bbr: improve arithmetic division in bbr_update_bw() Revert "udp: do rmem bulk free even if the rx sk queue is empty" net: usb: lan78xx: Add .ndo_features_check net-sysfs: Fix reference count leak net-sysfs: Call dev_hold always in rx_queue_add_kobject net-sysfs: Call dev_hold always in netdev_queue_add_kobject net-sysfs: fix netdev_queue_add_kobject() breakage net-sysfs: Fix reference count leak in rx|netdev_queue_add_kobject net_sched: fix datalen for ematch net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link() net, ip_tunnel: fix namespaces move net, ip6_tunnel: fix namespaces move net: ip6_gre: fix moving ip6gre between namespaces net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM net: bcmgenet: Use netif_tx_napi_add() for TX NAPI ipv6: sr: remove SKB_GSO_IPXIP6 on End.D* actions gtp: make sure only SOCK_DGRAM UDP sockets are accepted firestream: fix memory leaks can, slip: Protect tty->disc_data in write_wakeup and close with RCU ANDROID: update abi definitions UPSTREAM: staging: most: net: fix buffer overflow ANDROID: gki_defconfig: Enable CONFIG_BTT ANDROID: gki_defconfig: Temporarily disable CFI f2fs: fix race conditions in ->d_compare() and ->d_hash() f2fs: fix dcache lookup of !casefolded directories f2fs: Add f2fs stats to sysfs f2fs: delete duplicate information on sysfs nodes f2fs: change to use rwsem for gc_mutex f2fs: update f2fs document regarding to fsync_mode f2fs: add a way to turn off ipu bio cache f2fs: code cleanup for f2fs_statfs_project() f2fs: fix miscounted block limit in f2fs_statfs_project() f2fs: show the CP_PAUSE reason in checkpoint traces f2fs: fix deadlock allocating bio_post_read_ctx from mempool f2fs: remove unneeded check for error allocating bio_post_read_ctx f2fs: convert inline_dir early before starting rename f2fs: fix memleak of kobject f2fs: fix to add swap extent correctly mm: export add_swap_extent() f2fs: run fsck when getting bad inode during GC f2fs: support data compression f2fs: free sysfs kobject f2fs: declare nested quota_sem and remove unnecessary sems f2fs: don't put new_page twice in f2fs_rename f2fs: set I_LINKABLE early to avoid wrong access by vfs f2fs: don't keep META_MAPPING pages used for moving verity file blocks f2fs: introduce private bioset f2fs: cleanup duplicate stats for atomic files f2fs: set GFP_NOFS when moving inline dentries f2fs: should avoid recursive filesystem ops f2fs: keep quota data on write_begin failure f2fs: call f2fs_balance_fs outside of locked page f2fs: preallocate DIO blocks when forcing buffered_io Linux 4.19.99 m68k: Call timer_interrupt() with interrupts disabled arm64: dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node serial: stm32: fix clearing interrupt error flags IB/iser: Fix dma_nents type definition usb: dwc3: Allow building USB_DWC3_QCOM without EXTCON samples/bpf: Fix broken xdp_rxq_info due to map order assumptions arm64: dts: juno: Fix UART frequency drm/radeon: fix bad DMA from INTERRUPT_CNTL2 dmaengine: ti: edma: fix missed failure handling afs: Remove set but not used variables 'before', 'after' affs: fix a memory leak in affs_remount mmc: core: fix wl1251 sdio quirks mmc: sdio: fix wl1251 vendor id i2c: stm32f7: report dma error during probe packet: fix data-race in fanout_flow_is_huge() net: neigh: use long type to store jiffies delta hv_netvsc: flag software created hash value MIPS: Loongson: Fix return value of loongson_hwmon_init dpaa_eth: avoid timestamp read on error paths dpaa_eth: perform DMA unmapping before read hwrng: omap3-rom - Fix missing clock by probing with device tree drm: panel-lvds: Potential Oops in probe error handling afs: Fix large file support hv_netvsc: Fix send_table offset in case of a host bug hv_netvsc: Fix offset usage in netvsc_send_table() net: qca_spi: Move reset_count to struct qcaspi afs: Fix missing timeout reset bpf, offload: Unlock on error in bpf_offload_dev_create() xsk: Fix registration of Rx-only sockets net: netem: correct the parent's backlog when corrupted packet was dropped net: netem: fix error path for corrupted GSO frames arm64: hibernate: check pgd table allocation firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices dmaengine: imx-sdma: fix size check for sdma script_number vhost/test: stop device before reset drm/msm/dsi: Implement reset correctly net/smc: receive pending data after RCV_SHUTDOWN net/smc: receive returns without data tcp: annotate lockless access to tcp_memory_pressure net: add {READ|WRITE}_ONCE() annotations on ->rskq_accept_head net: avoid possible false sharing in sk_leave_memory_pressure() act_mirred: Fix mirred_init_module error handling s390/qeth: Fix initialization of vnicc cmd masks during set online s390/qeth: Fix error handling during VNICC initialization sctp: add chunks to sk_backlog when the newsk sk_socket is not set net: stmmac: fix disabling flexible PPS output net: stmmac: fix length of PTP clock's name string ip6erspan: remove the incorrect mtu limit for ip6erspan llc: fix sk_buff refcounting in llc_conn_state_process() llc: fix another potential sk_buff leak in llc_ui_sendmsg() mac80211: accept deauth frames in IBSS mode rxrpc: Fix trace-after-put looking at the put connection record net: stmmac: gmac4+: Not all Unicast addresses may be available nvme: retain split access workaround for capability reads net: sched: cbs: Avoid division by zero when calculating the port rate net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse() net: nixge: Fix a signedness bug in nixge_probe() of: mdio: Fix a signedness bug in of_phy_get_and_connect() net: axienet: fix a signedness bug in probe net: stmmac: dwmac-meson8b: Fix signedness bug in probe net: socionext: Fix a signedness bug in ave_probe() net: netsec: Fix signedness bug in netsec_probe() net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe() net: hisilicon: Fix signedness bug in hix5hd2_dev_probe() cxgb4: Signedness bug in init_one() net: aquantia: Fix aq_vec_isr_legacy() return value iommu/amd: Wait for completion of IOTLB flush in attach_device crypto: hisilicon - Matching the dma address for dma_pool_free() bpf: fix BTF limits powerpc/mm/mce: Keep irqs disabled during lockless page table walk clk: actions: Fix factor clk struct member access mailbox: qcom-apcs: fix max_register value f2fs: fix to avoid accessing uninitialized field of inode page in is_alive() bnxt_en: Increase timeout for HWRM_DBG_COREDUMP_XX commands um: Fix off by one error in IRQ enumeration net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names' RDMA/cma: Fix false error message ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet gpio/aspeed: Fix incorrect number of banks pinctrl: iproc-gpio: Fix incorrect pinconf configurations net: sonic: replace dev_kfree_skb in sonic_send_packet hwmon: (shtc1) fix shtc1 and shtw1 id mask ixgbe: sync the first fragment unconditionally btrfs: use correct count in btrfs_file_write_iter() Btrfs: fix inode cache waiters hanging on path allocation failure Btrfs: fix inode cache waiters hanging on failure to start caching thread Btrfs: fix hang when loading existing inode cache off disk scsi: fnic: fix msix interrupt allocation f2fs: fix error path of f2fs_convert_inline_page() f2fs: fix wrong error injection path in inc_valid_block_count() ARM: dts: logicpd-som-lv: Fix i2c2 and i2c3 Pin mux rtlwifi: Fix file release memory leak net: hns3: fix error VF index when setting VLAN offload net: sonic: return NETDEV_TX_OK if failed to map buffer led: triggers: Fix dereferencing of null pointer xsk: avoid store-tearing when assigning umem xsk: avoid store-tearing when assigning queues ARM: dts: aspeed-g5: Fixe gpio-ranges upper limit tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs wcn36xx: use dynamic allocation for large variables ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init netfilter: ctnetlink: honor IPS_OFFLOAD flag iio: dac: ad5380: fix incorrect assignment to val bcache: Fix an error code in bch_dump_read() usb: typec: tps6598x: Fix build error without CONFIG_REGMAP_I2C bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA irqdomain: Add the missing assignment of domain->fwnode for named fwnode staging: greybus: light: fix a couple double frees x86, perf: Fix the dependency of the x86 insn decoder selftest power: supply: Init device wakeup after device_add() net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate hwmon: (lm75) Fix write operations for negative temperatures Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()" rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2] ahci: Do not export local variable ahci_em_messages iommu/mediatek: Fix iova_to_phys PA start for 4GB mode media: em28xx: Fix exception handling in em28xx_alloc_urbs() mips: avoid explicit UB in assignment of mips_io_port_base rtc: pcf2127: bugfix: read rtc disables watchdog ARM: 8896/1: VDSO: Don't leak kernel addresses media: atmel: atmel-isi: fix timeout value for stop streaming i40e: reduce stack usage in i40e_set_fc mac80211: minstrel_ht: fix per-group max throughput rate initialization rtc: rv3029: revert error handling patch to rv3029_eeprom_write() dmaengine: dw: platform: Switch to acpi_dma_controller_register() ASoC: sun4i-i2s: RX and TX counter registers are swapped powerpc/64s/radix: Fix memory hot-unplug page table split signal: Allow cifs and drbd to receive their terminating signals bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails drm: rcar-du: lvds: Fix bridge_to_rcar_lvds tools: bpftool: fix format strings and arguments for jsonw_printf() tools: bpftool: fix arguments for p_err() in do_event_pipe() net/rds: Add a few missing rds_stat_names entries ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls ASoC: cs4349: Use PM ops 'cs4349_runtime_pm' ASoC: es8328: Fix copy-paste error in es8328_right_line_controls RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver ext4: set error return correctly when ext4_htree_store_dirent fails crypto: caam - free resources in case caam_rng registration failed cxgb4: smt: Add lock for atomic_dec_and_test spi: bcm-qspi: Fix BSPI QUAD and DUAL mode support when using flex mode net: fix bpf_xdp_adjust_head regression for generic-XDP iio: tsl2772: Use devm_add_action_or_reset for tsl2772_chip_off cifs: fix rmmod regression in cifs.ko caused by force_sig changes net/mlx5: Fix mlx5_ifc_query_lag_out_bits ARM: dts: stm32: add missing vdda-supply to adc on stm32h743i-eval tipc: reduce risk of wakeup queue starvation arm64: dts: renesas: r8a77995: Fix register range of display node ALSA: aoa: onyx: always initialize register read value crypto: ccp - Reduce maximum stack usage x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI mic: avoid statically declaring a 'struct device'. media: rcar-vin: Clean up correct notifier in error path usb: host: xhci-hub: fix extra endianness conversion qed: reduce maximum stack frame size libertas_tf: Use correct channel range in lbtf_geo_init PM: sleep: Fix possible overflow in pm_system_cancel_wakeup() clk: sunxi-ng: v3s: add the missing PLL_DDR1 drm/panel: make drm_panel.h self-contained xfrm interface: ifname may be wrong in logs scsi: libfc: fix null pointer dereference on a null lport ARM: stm32: use "depends on" instead of "if" after prompt xdp: fix possible cq entry leak x86/pgtable/32: Fix LOWMEM_PAGES constant net/tls: fix socket wmem accounting on fallback with netem net: pasemi: fix an use-after-free in pasemi_mac_phy_init() ceph: fix "ceph.dir.rctime" vxattr value PCI: mobiveil: Fix the valid check for inbound and outbound windows PCI: mobiveil: Fix devfn check in mobiveil_pcie_valid_device() PCI: mobiveil: Remove the flag MSI_FLAG_MULTI_PCI_MSI RDMA/hns: Fixs hw access invalid dma memory error fsi: sbefifo: Don't fail operations when in SBE IPL state devres: allow const resource arguments fsi/core: Fix error paths on CFAM init ACPI: PM: Introduce "poweroff" callbacks for ACPI PM domain and LPSS ACPI: PM: Simplify and fix PM domain hibernation callbacks PM: ACPI/PCI: Resume all devices during hibernation um: Fix IRQ controller regression on console read xprtrdma: Fix use-after-free in rpcrdma_post_recvs rxrpc: Fix uninitialized error code in rxrpc_send_data_packet() mfd: intel-lpss: Release IDA resources iommu/amd: Make iommu_disable safer bnxt_en: Suppress error messages when querying DSCP DCB capabilities. bnxt_en: Fix ethtool selftest crash under error conditions. fork,memcg: alloc_thread_stack_node needs to set tsk->stack backlight: pwm_bl: Fix heuristic to determine number of brightness levels tools: bpftool: use correct argument in cgroup errors nvmem: imx-ocotp: Change TIMING calculation to u-boot algorithm nvmem: imx-ocotp: Ensure WAIT bits are preserved when setting timing clk: qcom: Fix -Wunused-const-variable dmaengine: hsu: Revert "set HSU_CH_MTSR to memory width" perf/ioctl: Add check for the sample_period value ip6_fib: Don't discard nodes with valid routing information in fib6_locate_1() drm/msm/a3xx: remove TPL1 regs from snapshot arm64: dts: allwinner: h6: Pine H64: Add interrupt line for RTC net/sched: cbs: Fix error path of cbs_module_init ARM: dts: iwg20d-q7-common: Fix SDHI1 VccQ regularor rtc: pcf8563: Clear event flags and disable interrupts before requesting irq rtc: pcf8563: Fix interrupt trigger method ASoC: ti: davinci-mcasp: Fix slot mask settings when using multiple AXRs net/af_iucv: always register net_device notifier net/af_iucv: build proper skbs for HiperTransport net/udp_gso: Allow TX timestamp with UDP GSO net: netem: fix backlog accounting for corrupted GSO frames drm/msm/mdp5: Fix mdp5_cfg_init error return IB/hfi1: Handle port down properly in pio bpf: fix the check that forwarding is enabled in bpf_ipv6_fib_lookup powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild qed: iWARP - fix uninitialized callback qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state ASoC: meson: axg-tdmout: right_j is not supported ASoC: meson: axg-tdmin: right_j is not supported ntb_hw_switchtec: potential shift wrapping bug in switchtec_ntb_init_sndev() firmware: arm_scmi: update rate_discrete in clock_describe_rates_get firmware: arm_scmi: fix bitfield definitions for SENSOR_DESC attributes phy: usb: phy-brcm-usb: Remove sysfs attributes upon driver removal iommu/vt-d: Duplicate iommu_resv_region objects per device list arm64: dts: meson-gxm-khadas-vim2: fix Bluetooth support arm64: dts: meson-gxm-khadas-vim2: fix gpio-keys-polled node serial: stm32: fix a recursive locking in stm32_config_rs485 mpls: fix warning with multi-label encap arm64: dts: renesas: ebisu: Remove renesas, no-ether-link property crypto: inside-secure - fix queued len computation crypto: inside-secure - fix zeroing of the request in ahash_exit_inv media: vivid: fix incorrect assignment operation when setting video mode clk: sunxi-ng: sun50i-h6-r: Fix incorrect W1 clock gate register cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency cpufreq: brcmstb-avs-cpufreq: Fix initial command check phy: qcom-qusb2: fix missing assignment of ret when calling clk_prepare_enable net: don't clear sock->sk early to avoid trouble in strparser RDMA/uverbs: check for allocation failure in uapi_add_elm() net: core: support XDP generic on stacked devices. netvsc: unshare skb in VF rx handler crypto: talitos - fix AEAD processing. net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector inet: frags: call inet_frags_fini() after unregister_pernet_subsys() signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig signal/bpfilter: Fix bpfilter_kernl to use send_sig not force_sig iommu: Use right function to get group for device iommu: Add missing new line for dma type misc: sgi-xp: Properly initialize buf in xpc_get_rsvd_page_pa serial: stm32: fix wakeup source initialization serial: stm32: Add support of TC bit status check serial: stm32: fix transmit_chars when tx is stopped serial: stm32: fix rx data length when parity enabled serial: stm32: fix rx error handling serial: stm32: fix word length configuration crypto: ccp - Fix 3DES complaint from ccp-crypto module crypto: ccp - fix AES CFB error exposed by new test vectors spi: spi-fsl-spi: call spi_finalize_current_message() at the end RDMA/qedr: Fix incorrect device rate. arm64: dts: meson: libretech-cc: set eMMC as removable dmaengine: tegra210-adma: Fix crash during probe clk: meson: axg: spread spectrum is on mpll2 clk: meson: gxbb: no spread spectrum on mpll0 ARM: dts: sun8i-h3: Fix wifi in Beelink X2 DT afs: Fix double inc of vnode->cb_break afs: Fix lock-wait/callback-break double locking afs: Don't invalidate callback if AFS_VNODE_DIR_VALID not set afs: Fix key leak in afs_release() and afs_evict_inode() EDAC/mc: Fix edac_mc_find() in case no device is found thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power thermal: rcar_gen3_thermal: fix interrupt type backlight: lm3630a: Return 0 on success in update_status functions netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value kdb: do a sanity check on the cpu in kdb_per_cpu() nfp: bpf: fix static check error through tightening shift amount adjustment ARM: riscpc: fix lack of keyboard interrupts after irq conversion pwm: meson: Don't disable PWM when setting duty repeatedly pwm: meson: Consider 128 a valid pre-divider netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule crypto: caam - fix caam_dump_sg that iterates through scatterlist platform/x86: alienware-wmi: printing the wrong error code media: davinci/vpbe: array underflow in vpbe_enum_outputs() media: omap_vout: potential buffer overflow in vidioc_dqbuf() ALSA: aica: Fix a long-time build breakage l2tp: Fix possible NULL pointer dereference vfio/mdev: Fix aborting mdev child device removal if one fails vfio/mdev: Follow correct remove sequence vfio/mdev: Avoid release parent reference during error path afs: Fix the afs.cell and afs.volume xattr handlers ath10k: Fix encoding for protected management frames lightnvm: pblk: fix lock order in pblk_rb_tear_down_check mmc: core: fix possible use after free of host watchdog: rtd119x_wdt: Fix remove function dmaengine: tegra210-adma: restore channel status net: ena: fix ena_com_fill_hash_function() implementation net: ena: fix incorrect test of supported hash function net: ena: fix: Free napi resources when ena_up() fails net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU RDMA/rxe: Consider skb reserve space based on netdev of GID IB/mlx5: Add missing XRC options to QP optional params mask dwc2: gadget: Fix completed transfer size calculation in DDMA usb: gadget: fsl: fix link error against usb-gadget module ASoC: fix valid stream condition packet: in recvmsg msg_name return at least sizeof sockaddr_ll ARM: dts: logicpd-som-lv: Fix MMC1 card detect PCI: iproc: Enable iProc config read for PAXBv2 netfilter: nft_flow_offload: add entry to flowtable after confirmation KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() scsi: qla2xxx: Fix a format specifier irqchip/gic-v3-its: fix some definitions of inner cacheability attributes s390/kexec_file: Fix potential segment overlap in ELF loader coresight: catu: fix clang build warning NFS: Don't interrupt file writeout due to fatal errors afs: Further fix file locking afs: Fix AFS file locking to allow fine grained locks ALSA: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk() dmaengine: axi-dmac: Don't check the number of frames for alignment 6lowpan: Off by one handling ->nexthdr media: ov2659: fix unbalanced mutex_lock/unlock ARM: dts: ls1021: Fix SGMII PCS link remaining down after PHY disconnect powerpc: vdso: Make vdso32 installation conditional in vdso_install net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info() selftests/ipc: Fix msgque compiler warnings usb: typec: tcpm: Notify the tcpc to start connection-detection for SRPs tipc: set sysctl_tipc_rmem and named_timeout right range platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer soc: amlogic: meson-gx-pwrc-vpu: Fix power on/off register bitmask PCI: dwc: Fix dw_pcie_ep_find_capability() to return correct capability offset staging: android: vsoc: fix copy_from_user overrun perf/core: Fix the address filtering fix hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses net: hns3: fix for vport->bw_limit overflow problem PCI: rockchip: Fix rockchip_pcie_ep_assert_intx() bitwise operations ARM: pxa: ssp: Fix "WARNING: invalid free of devm_ allocated data" brcmfmac: fix leak of mypkt on error return path scsi: target/core: Fix a race condition in the LUN lookup code rxrpc: Fix detection of out of order acks firmware: arm_scmi: fix of_node leak in scmi_mailbox_check ACPI: button: reinitialize button state upon resume clk: qcom: Skip halt checks on gcc_pcie_0_pipe_clk for 8998 net/sched: cbs: fix port_rate miscalculation of: use correct function prototype for of_overlay_fdt_apply() scsi: qla2xxx: Unregister chrdev if module initialization fails drm/vmwgfx: Remove set but not used variable 'restart' bpf: Add missed newline in verifier verbose log ehea: Fix a copy-paste err in ehea_init_port_res rtc: mt6397: Don't call irq_dispose_mapping. rtc: Fix timestamp value for RTC_TIMESTAMP_BEGIN_1900 arm64/vdso: don't leak kernel addresses drm/fb-helper: generic: Call drm_client_add() after setup is done spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios soc/fsl/qe: Fix an error code in qe_pin_request() bus: ti-sysc: Fix sysc_unprepare() when no clocks have been allocated spi: tegra114: configure dma burst size to fifo trig level spi: tegra114: flush fifos spi: tegra114: terminate dma and reset on transfer timeout spi: tegra114: fix for unpacked mode transfers spi: tegra114: clear packed bit for unpacked mode media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame media: davinci-isif: avoid uninitialized variable use soc: qcom: cmd-db: Fix an error code in cmd_db_dev_probe() net: dsa: Avoid null pointer when failing to connect to PHY ARM: OMAP2+: Fix potentially uninitialized return value for _setup_reset() net: phy: don't clear BMCR in genphy_soft_reset ARM: dts: sun9i: optimus: Fix fixed-regulators arm64: dts: allwinner: a64: Add missing PIO clocks ARM: dts: sun8i: a33: Reintroduce default pinctrl muxing m68k: mac: Fix VIA timer counter accesses tipc: tipc clang warning jfs: fix bogus variable self-initialization crypto: ccree - reduce kernel stack usage with clang regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB media: cx23885: check allocation return media: wl128x: Fix an error code in fm_download_firmware() media: cx18: update *pos correctly in cx18_read_pos() media: ivtv: update *pos correctly in ivtv_read_pos() soc: amlogic: gx-socinfo: Add mask for each SoC packages regulator: lp87565: Fix missing register for LP87565_BUCK_0 net: sh_eth: fix a missing check of of_get_phy_mode net/mlx5e: IPoIB, Fix RX checksum statistics update net/mlx5: Fix multiple updates of steering rules in parallel xen, cpu_hotplug: Prevent an out of bounds access drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen() nfp: fix simple vNIC mailbox length scsi: megaraid_sas: reduce module load time x86/mm: Remove unused variable 'cpu' nios2: ksyms: Add missing symbol exports PCI: Fix "try" semantics of bus and slot reset rbd: clear ->xferred on error from rbd_obj_issue_copyup() media: dvb/earth-pt1: fix wrong initialization for demod blocks powerpc/mm: Check secondary hash page table net: aquantia: fixed instack structure overflow NFSv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE() NFS: Add missing encode / decode sequence_maxsz to v4.2 operations iommu/vt-d: Fix NULL pointer reference in intel_svm_bind_mm() hwrng: bcm2835 - fix probe as platform device net: sched: act_csum: Fix csum calc for tagged packets netfilter: nft_set_hash: bogus element self comparison from deactivation path netfilter: nft_set_hash: fix lookups with fixed size hash on big endian ath10k: Fix length of wmi tlv command for protected mgmt frames regulator: wm831x-dcdc: Fix list of wm831x_dcdc_ilim from mA to uA ARM: 8849/1: NOMMU: Fix encodings for PMSAv8's PRBAR4/PRLAR4 ARM: 8848/1: virt: Align GIC version check with arm64 counterpart ARM: 8847/1: pm: fix HYP/SVC mode mismatch when MCPM is used iommu: Fix IOMMU debugfs fallout mmc: sdhci-brcmstb: handle mmc_of_parse() errors during probe NFS/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount platform/x86: wmi: fix potential null pointer dereference clocksource/drivers/exynos_mct: Fix error path in timer resources initialization clocksource/drivers/sun5i: Fail gracefully when clock rate is unavailable perf, pt, coresight: Fix address filters for vmas with non-zero offset perf: Copy parent's address filter offsets on clone NFS: Fix a soft lockup in the delegation recovery code powerpc/64s: Fix logic when handling unknown CPU features staging: rtlwifi: Use proper enum for return in halmac_parse_psd_data_88xx fs/nfs: Fix nfs_parse_devname to not modify it's argument net: dsa: fix unintended change of bridge interface STP state ASoC: qcom: Fix of-node refcount unbalance in apq8016_sbc_parse_of() driver core: Fix PM-runtime for links added during consumer probe drm/nouveau: fix missing break in switch statement drm/nouveau/pmu: don't print reply values if exec is false drm/nouveau/bios/ramcfg: fix missing parentheses when calculating RON net/mlx5: Delete unused FPGA QPN variable net: dsa: qca8k: Enable delay for RGMII_ID mode regulator: pv88090: Fix array out-of-bounds access regulator: pv88080: Fix array out-of-bounds access regulator: pv88060: Fix array out-of-bounds access brcmfmac: create debugfs files for bus-specific layer cdc-wdm: pass return value of recover_from_urb_loss dmaengine: mv_xor: Use correct device for DMA API staging: r8822be: check kzalloc return or bail KVM: PPC: Release all hardware TCE tables attached to a group mdio_bus: Fix PTR_ERR() usage after initialization to constant hwmon: (pmbus/tps53679) Fix driver info initialization in probe routine vfio_pci: Enable memory accesses before calling pci_map_rom media: sh: migor: Include missing dma-mapping header mt76: usb: fix possible memory leak in mt76u_buf_free net: dsa: b53: Do not program CPU port's PVID net: dsa: b53: Properly account for VLAN filtering net: dsa: b53: Fix default VLAN ID keys: Timestamp new keys block: don't use bio->bi_vcnt to figure out segment number usb: phy: twl6030-usb: fix possible use-after-free on remove PCI: endpoint: functions: Use memcpy_fromio()/memcpy_toio() driver core: Fix possible supplier PM-usage counter imbalance RDMA/mlx5: Fix memory leak in case we fail to add an IB device pinctrl: sh-pfc: sh73a0: Fix fsic_spdif pin groups pinctrl: sh-pfc: r8a7792: Fix vin1_data18_b pin group pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group pinctrl: sh-pfc: emev2: Add missing pinmux functions ntb_hw_switchtec: NT req id mapping table register entry number should be 512 ntb_hw_switchtec: debug print 64bit aligned crosslink BAR Numbers drm/etnaviv: potential NULL dereference xsk: add missing smp_rmb() in xsk_mmap ipmi: kcs_bmc: handle devm_kasprintf() failure case iw_cxgb4: use tos when finding ipv6 routes iw_cxgb4: use tos when importing the endpoint fbdev: chipsfb: remove set but not used variable 'size' rtc: pm8xxx: fix unintended sign extension rtc: 88pm80x: fix unintended sign extension rtc: 88pm860x: fix unintended sign extension net/smc: original socket family in inet_sock_diag rtc: ds1307: rx8130: Fix alarm handling net: phy: fixed_phy: Fix fixed_phy not checking GPIO ath10k: fix dma unmap direction for management frames arm64: dts: msm8916: remove bogus argument to the cpu clock thermal: mediatek: fix register index error rtc: ds1672: fix unintended sign extension clk: ingenic: jz4740: Fix gating of UDC clock staging: most: cdev: add missing check for cdev_add failure iwlwifi: mvm: fix RSS config command drm/xen-front: Fix mmap attributes for display buffers ARM: dts: lpc32xx: phy3250: fix SD card regulator voltage ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller clocks property ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller variant ARM: dts: lpc32xx: reparent keypad controller to SIC1 ARM: dts: lpc32xx: add required clocks property to keypad device node driver core: Do not call rpm_put_suppliers() in pm_runtime_drop_link() driver core: Fix handling of runtime PM flags in device_link_add() driver core: Do not resume suppliers under device_links_write_lock() driver core: Avoid careless re-use of existing device links driver core: Fix DL_FLAG_AUTOREMOVE_SUPPLIER device link flag handling crypto: crypto4xx - Fix wrong ppc4xx_trng_probe()/ppc4xx_trng_remove() arguments driver: uio: fix possible use-after-free in __uio_register_device driver: uio: fix possible memory leak in __uio_register_device tty: ipwireless: Fix potential NULL pointer dereference bus: ti-sysc: Fix timer handling with drop pm_runtime_irq_safe() iwlwifi: mvm: fix A-MPDU reference assignment arm64: dts: allwinner: h6: Move GIC device node fix base address ordering ip_tunnel: Fix route fl4 init in ip_md_tunnel_xmit net/mlx5: Take lock with IRQs disabled to avoid deadlock iwlwifi: mvm: avoid possible access out of array. clk: sunxi-ng: sun8i-a23: Enable PLL-MIPI LDOs when ungating it ARM: dts: sun8i-a23-a33: Move NAND controller device node to sort by address net: hns3: fix bug of ethtool_ops.get_channels for VF spi/topcliff_pch: Fix potential NULL dereference on allocation error rtc: cmos: ignore bogus century byte IB/mlx5: Don't override existing ip_protocol media: tw9910: Unregister subdevice with v4l2-async net: hns3: fix wrong combined count returned by ethtool -l IB/iser: Pass the correct number of entries for dma mapped SGL ASoC: imx-sgtl5000: put of nodes if finding codec fails crypto: tgr192 - fix unaligned memory access crypto: brcm - Fix some set-but-not-used warning kbuild: mark prepare0 as PHONY to fix external module build media: s5p-jpeg: Correct step and max values for V4L2_CID_JPEG_RESTART_INTERVAL drm/etnaviv: NULL vs IS_ERR() buf in etnaviv_core_dump() memory: tegra: Don't invoke Tegra30+ specific memory timing setup on Tegra20 net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ9031 RDMA/iw_cxgb4: Fix the unchecked ep dereference spi: cadence: Correct initialisation of runtime PM arm64: dts: apq8016-sbc: Increase load on l11 for SDCARD drm/shmob: Fix return value check in shmob_drm_probe RDMA/qedr: Fix out of bounds index check in query pkey RDMA/ocrdma: Fix out of bounds index check in query pkey IB/usnic: Fix out of bounds index check in query pkey fork, memcg: fix cached_stacks case drm/fb-helper: generic: Fix setup error path drm/etnaviv: fix some off by one bugs ARM: dts: r8a7743: Remove generic compatible string from iic3 drm: Fix error handling in drm_legacy_addctx remoteproc: qcom: q6v5-mss: Add missing regulator for MSM8996 remoteproc: qcom: q6v5-mss: Add missing clocks for MSM8996 arm64: defconfig: Re-enable bcm2835-thermal driver MIPS: BCM63XX: drop unused and broken DSP platform device clk: dove: fix refcount leak in dove_clk_init() clk: mv98dx3236: fix refcount leak in mv98dx3236_clk_init() clk: armada-xp: fix refcount leak in axp_clk_init() clk: kirkwood: fix refcount leak in kirkwood_clk_init() clk: armada-370: fix refcount leak in a370_clk_init() clk: vf610: fix refcount leak in vf610_clocks_init() clk: imx7d: fix refcount leak in imx7d_clocks_init() clk: imx6sx: fix refcount leak in imx6sx_clocks_init() clk: imx6q: fix refcount leak in imx6q_clocks_init() clk: samsung: exynos4: fix refcount leak in exynos4_get_xom() clk: socfpga: fix refcount leak clk: ti: fix refcount leak in ti_dt_clocks_register() clk: qoriq: fix refcount leak in clockgen_init() clk: highbank: fix refcount leak in hb_clk_init() fork,memcg: fix crash in free_thread_stack on memcg charge fail Input: nomadik-ske-keypad - fix a loop timeout test vxlan: changelink: Fix handling of default remotes net: hns3: fix error handling int the hns3_get_vector_ring_chain pinctrl: sh-pfc: sh7734: Remove bogus IPSR10 value pinctrl: sh-pfc: sh7269: Add missing PCIOR0 field pinctrl: sh-pfc: r8a77995: Remove bogus SEL_PWM[0-3]_3 configurations pinctrl: sh-pfc: sh7734: Add missing IPSR11 field pinctrl: sh-pfc: r8a77980: Add missing MOD_SEL0 field pinctrl: sh-pfc: r8a77970: Add missing MOD_SEL0 field pinctrl: sh-pfc: r8a7794: Remove bogus IPSR9 field pinctrl: sh-pfc: sh73a0: Add missing TO pin to tpu4_to3 group pinctrl: sh-pfc: r8a7791: Remove bogus marks from vin1_b_data18 group pinctrl: sh-pfc: r8a7791: Remove bogus ctrl marks from qspi_data4_b group pinctrl: sh-pfc: r8a7740: Add missing LCD0 marks to lcd0_data24_1 group pinctrl: sh-pfc: r8a7740: Add missing REF125CK pin to gether_gmii group ipv6: add missing tx timestamping on IPPROTO_RAW switchtec: Remove immediate status check after submitting MRPC command staging: bcm2835-camera: fix module autoloading staging: bcm2835-camera: Abort probe if there is no camera mailbox: ti-msgmgr: Off by one in ti_msgmgr_of_xlate() IB/rxe: Fix incorrect cache cleanup in error flow OPP: Fix missing debugfs supply directory for OPPs IB/hfi1: Correctly process FECN and BECN in packets net: phy: Fix not to call phy_resume() if PHY is not attached arm64: dts: renesas: r8a7795-es1: Add missing power domains to IPMMU nodes arm64: dts: meson-gx: Add hdmi_5v regulator as hdmi tx supply drm/dp_mst: Skip validating ports during destruction, just ref net: always initialize pagedlen drm: rcar-du: Fix vblank initialization drm: rcar-du: Fix the return value in case of error in 'rcar_du_crtc_set_crc_source()' exportfs: fix 'passing zero to ERR_PTR()' warning bus: ti-sysc: Add mcasp optional clocks flag pinctrl: meson-gxl: remove invalid GPIOX tsin_a pins ASoC: sun8i-codec: add missing route for ADC pcrypt: use format specifier in kobject_add ARM: dts: bcm283x: Correct mailbox register sizes ASoC: wm97xx: fix uninitialized regmap pointer problem NTB: ntb_hw_idt: replace IS_ERR_OR_NULL with regular NULL checks mlxsw: spectrum: Set minimum shaper on MC TCs mlxsw: reg: QEEC: Add minimum shaper fields net: hns3: add error handler for hns3_nic_init_vector_data() drm/sun4i: hdmi: Fix double flag assignation net: socionext: Add dummy PHY register read in phy_write() tipc: eliminate message disordering during binding table update powerpc/kgdb: add kgdb_arch_set/remove_breakpoint() netfilter: nf_flow_table: do not remove offload when other netns's interface is down RDMA/bnxt_re: Add missing spin lock initialization rtlwifi: rtl8821ae: replace _rtl8821ae_mrate_idx_to_arfr_id with generic version powerpc/pseries/memory-hotplug: Fix return value type of find_aa_index pwm: lpss: Release runtime-pm reference from the driver's remove callback netfilter: nft_osf: usage from output path is not valid staging: comedi: ni_mio_common: protect register write overflow iwlwifi: nvm: get num of hw addresses from firmware ALSA: usb-audio: update quirk for B&W PX to remove microphone of: Fix property name in of_node_get_device_type drm/msm: fix unsigned comparison with less than zero mei: replace POLL* with EPOLL* for write queues. cfg80211: regulatory: make initialization more robust usb: gadget: fsl_udc_core: check allocation return value and cleanup on failure usb: dwc3: add EXTCON dependency for qcom genirq/debugfs: Reinstate full OF path for domain name IB/hfi1: Add mtu check for operational data VLs IB/rxe: replace kvfree with vfree mailbox: mediatek: Add check for possible failure of kzalloc ASoC: wm9712: fix unused variable warning signal/ia64: Use the force_sig(SIGSEGV,...) in ia64_rt_sigreturn signal/ia64: Use the generic force_sigsegv in setup_frame drm/hisilicon: hibmc: Don't overwrite fb helper surface depth bridge: br_arp_nd_proxy: set icmp6_router if neigh has NTF_ROUTER PCI: iproc: Remove PAXC slot check to allow VF support firmware: coreboot: Let OF core populate platform device ARM: qcom_defconfig: Enable MAILBOX apparmor: don't try to replace stale label in ptrace access check ALSA: hda: fix unused variable warning apparmor: Fix network performance issue in aa_label_sk_perm iio: fix position relative kernel version drm/virtio: fix bounds check in virtio_gpu_cmd_get_capset() ixgbe: don't clear IPsec sa counters on HW clearing ARM: dts: at91: nattis: make the SD-card slot work ARM: dts: at91: nattis: set the PRLUD and HIPOW signals low drm/sti: do not remove the drm_bridge that was never added ipmi: Fix memory leak in __ipmi_bmc_register watchdog: sprd: Fix the incorrect pointer getting from driver data soc: aspeed: Fix snoop_file_poll()'s return type perf map: No need to adjust the long name of modules crypto: sun4i-ss - fix big endian issues mt7601u: fix bbp version check in mt7601u_wait_bbp_ready tipc: fix wrong timeout input for tipc_wait_for_cond() tipc: update mon's self addr when node addr generated powerpc/archrandom: fix arch_get_random_seed_int() powerpc/pseries: Enable support for ibm,drc-info property SUNRPC: Fix svcauth_gss_proxy_init() mfd: intel-lpss: Add default I2C device properties for Gemini Lake i2c: i2c-stm32f7: fix 10-bits check in slave free id search loop i2c: stm32f7: rework slave_id allocation xfs: Sanity check flags of Q_XQUOTARM call Revert "efi: Fix debugobjects warning on 'efi_rts_work'" FROMGIT: ext4: Add EXT4_IOC_FSGETXATTR/EXT4_IOC_FSSETXATTR to compat_ioctl. ANDROID: gki_defconfig: Set IKHEADERS back to =m ANDROID: gki_defconfig: enable NVDIMM/PMEM options UPSTREAM: virtio-pmem: Add virtio pmem driver UPSTREAM: libnvdimm: nd_region flush callback support UPSTREAM: libnvdimm/of_pmem: Provide a unique name for bus provider UPSTREAM: libnvdimm/of_pmem: Fix platform_no_drv_owner.cocci warnings ANDROID: x86: gki_defconfig: enable LTO and CFI ANDROID: x86: map CFI jump tables in pti_clone_entry_text ANDROID: BACKPORT: x86, module: Ignore __typeid__ relocations ANDROID: BACKPORT: x86, relocs: Ignore __typeid__ relocations ANDROID: BACKPORT: x86/extable: Do not mark exception callback as CFI FROMLIST: crypto, x86/sha: Eliminate casts on asm implementations UPSTREAM: crypto: x86 - Rename functions to avoid conflict with crypto/sha256.h UPSTREAM: x86/vmlinux: Actually use _etext for the end of the text segment ANDROID: update ABI following inline crypto changes ANDROID: gki_defconfig: enable dm-default-key ANDROID: dm: add dm-default-key target for metadata encryption ANDROID: dm: enable may_passthrough_inline_crypto on some targets ANDROID: dm: add support for passing through inline crypto support ANDROID: block: Introduce passthrough keyslot manager ANDROID: ext4, f2fs: enable direct I/O with inline encryption FROMLIST: scsi: ufs: add program_key() variant op ANDROID: block: export symbols needed for modules to use inline crypto ANDROID: block: fix some inline crypto bugs UPSTREAM: mm/page_io.c: annotate refault stalls from swap_readpage UPSTREAM: lib/test_meminit.c: add bulk alloc/free tests UPSTREAM: lib/test_meminit: add a kmem_cache_alloc_bulk() test UPSTREAM: mm/slub.c: init_on_free=1 should wipe freelist ptr for bulk allocations ANDROID: mm/cma.c: Export symbols ANDROID: gki_defconfig: Set CONFIG_ION=m ANDROID: lib/plist: Export symbol plist_add ANDROID: staging: android: ion: enable modularizing the ion driver Revert "ANDROID: security,perf: Allow further restriction of perf_event_open" ANDROID: selinux: modify RTM_GETLINK permission FROMLIST: security: selinux: allow per-file labelling for binderfs BACKPORT: tracing: Remove unnecessary DEBUG_FS dependency BACKPORT: debugfs: Fix !DEBUG_FS debugfs_create_automount ANDROID: update abi for 4.19.98 Linux 4.19.98 hwmon: (pmbus/ibm-cffps) Switch LEDs to blocking brightness call regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id clk: sprd: Use IS_ERR() to validate the return value of syscon_regmap_lookup_by_phandle() perf probe: Fix wrong address verification scsi: core: scsi_trace: Use get_unaligned_be*() scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI scsi: target: core: Fix a pr_debug() argument scsi: bnx2i: fix potential use after free scsi: qla4xxx: fix double free bug scsi: esas2r: unlock on error in esas2r_nvram_read_direct() reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr drm/nouveau/mmu: qualify vmm during dtor drm/nouveau/bar/gf100: ensure BAR is mapped drm/nouveau/bar/nv50: check bar1 vmm return value mtd: devices: fix mchp23k256 read and write Revert "arm64: dts: juno: add dma-ranges property" arm64: dts: marvell: Fix CP110 NAND controller node multi-line comment alignment tick/sched: Annotate lockless access to last_jiffies_update cfg80211: check for set_wiphy_params arm64: dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node cw1200: Fix a signedness bug in cw1200_load_firmware() irqchip: Place CONFIG_SIFIVE_PLIC into the menu tcp: refine rule to allow EPOLLOUT generation under mem pressure xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters mlxsw: spectrum: Wipe xstats.backlog of down ports sh_eth: check sh_eth_cpu_data::dual_port when dumping registers tcp: fix marked lost packets not being retransmitted r8152: add missing endpoint sanity check ptp: free ptp device pin descriptors properly net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info net: usb: lan78xx: limit size of local TSO packets net: hns: fix soft lockup when there is not enough memory net: dsa: tag_qca: fix doubled Tx statistics hv_netvsc: Fix memory leak when removing rndis device macvlan: use skb_reset_mac_header() in macvlan_queue_xmit() batman-adv: Fix DAT candidate selection on little endian systems NFC: pn533: fix bulk-message timeout netfilter: nf_tables: fix flowtable list del corruption netfilter: nf_tables: store transaction list locally while requesting module netfilter: nf_tables: remove WARN and add NLA_STRING upper limits netfilter: nft_tunnel: fix null-attribute check netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct netfilter: fix a use-after-free in mtype_destroy() cfg80211: fix page refcount issue in A-MSDU decap cfg80211: fix memory leak in cfg80211_cqm_rssi_update cfg80211: fix deadlocks in autodisconnect work bpf: Fix incorrect verifier simulation of ARSH under ALU32 arm64: dts: agilex/stratix10: fix pmu interrupt numbers mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD alignment mm/huge_memory.c: make __thp_get_unmapped_area static net: stmmac: Enable 16KB buffer size net: stmmac: 16KB buffer must be 16 byte aligned ARM: dts: imx7: Fix Toradex Colibri iMX7S 256MB NAND flash support ARM: dts: imx6q-icore-mipi: Use 1.5 version of i.Core MX6DL ARM: dts: imx6qdl: Add Engicam i.Core 1.5 MX6 mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() btrfs: fix memory leak in qgroup accounting btrfs: do not delete mismatched root refs btrfs: fix invalid removal of root ref btrfs: rework arguments of btrfs_unlink_subvol mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is valid mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD alignment perf report: Fix incorrectly added dimensions as switch perf data file perf hists: Fix variable name's inconsistency in hists__for_each() macro x86/resctrl: Fix potential memory leak drm/i915: Add missing include file <linux/math64.h> x86/efistub: Disable paging at mixed mode entry x86/CPU/AMD: Ensure clearing of SME/SEV features is maintained x86/resctrl: Fix an imbalance in domain_remove_cpu() usb: core: hub: Improved device recognition on remote wakeup ptrace: reintroduce usage of subjective credentials in ptrace_has_cap() LSM: generalize flag passing to security_capable ARM: dts: am571x-idk: Fix gpios property to have the correct gpio number block: fix an integer overflow in logical block size Fix built-in early-load Intel microcode alignment arm64: dts: allwinner: a64: olinuxino: Fix SDIO supply regulator ALSA: usb-audio: fix sync-ep altsetting sanity check ALSA: seq: Fix racy access for queue timer in proc read ALSA: dice: fix fallback from protocol extension into limited functionality ARM: dts: imx6q-dhcom: Fix SGTL5000 VDDIO regulator connection ASoC: msm8916-wcd-analog: Fix MIC BIAS Internal1 ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1 scsi: mptfusion: Fix double fetch bug in ioctl scsi: fnic: fix invalid stack access USB: serial: quatech2: handle unbound ports USB: serial: keyspan: handle unbound ports USB: serial: io_edgeport: add missing active-port sanity check USB: serial: io_edgeport: handle unbound ports on URB completion USB: serial: ch341: handle unbound port at reset_resume USB: serial: suppress driver bind attributes USB: serial: option: add support for Quectel RM500Q in QDL mode USB: serial: opticon: fix control-message timeouts USB: serial: option: Add support for Quectel RM500Q USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx iio: buffer: align the size of scan bytes to size of the largest element ASoC: msm8916-wcd-digital: Reset RX interpolation path after use clk: Don't try to enable critical clocks if prepare failed ARM: dts: imx6q-dhcom: fix rtc compatible dt-bindings: reset: meson8b: fix duplicate reset IDs clk: qcom: gcc-sdm845: Add missing flag to votable GDSCs ARM: dts: meson8: fix the size of the PMU registers ANDROID: gki: Make GKI specific modules builtins ANDROID: fscrypt: add support for hardware-wrapped keys ANDROID: block: add KSM op to derive software secret from wrapped key ANDROID: block: provide key size as input to inline crypto APIs ANDROID: ufshcd-crypto: export cap find API ANDROID: build config for cuttlefish ramdisk ANDROID: Update ABI representation and whitelist Linux 4.19.97 ocfs2: call journal flush to mark journal as empty after journal recovery when mount hexagon: work around compiler crash hexagon: parenthesize registers in asm predicates ioat: ioat_alloc_ring() failure handling. dmaengine: k3dma: Avoid null pointer traversal drm/arm/mali: make malidp_mw_connector_helper_funcs static MIPS: Prevent link failure with kcov instrumentation mips: cacheinfo: report shared CPU map rseq/selftests: Turn off timeout setting selftests: firmware: Fix it to do root uid check and skip scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy() gpio: mpc8xxx: Add platform device to gpiochip->parent rtc: brcmstb-waketimer: add missed clk_disable_unprepare rtc: msm6242: Fix reading of 10-hour digit f2fs: fix potential overflow rtlwifi: Remove unnecessary NULL check in rtl_regd_init spi: atmel: fix handling of cs_change set on non-last xfer mtd: spi-nor: fix silent truncation in spi_nor_read_raw() mtd: spi-nor: fix silent truncation in spi_nor_read() iommu/mediatek: Correct the flush_iotlb_all callback media: exynos4-is: Fix recursive locking in isp_video_release() media: v4l: cadence: Fix how unsued lanes are handled in 'csi2rx_start()' media: rcar-vin: Fix incorrect return statement in rvin_try_format() media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support media: ov6650: Fix some format attributes not under control media: ov6650: Fix incorrect use of JPEG colorspace tty: serial: pch_uart: correct usage of dma_unmap_sg tty: serial: imx: use the sg count from dma_map_sg powerpc/powernv: Disable native PCIe port management PCI/PTM: Remove spurious "d" from granularity message PCI: dwc: Fix find_next_bit() usage compat_ioctl: handle SIOCOUTQNSD af_unix: add compat_ioctl support arm64: dts: apq8096-db820c: Increase load on l21 for SDCARD scsi: sd: enable compat ioctls for sed-opal pinctrl: lewisburg: Update pin list according to v1.1v6 pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume mei: fix modalias documentation iio: imu: adis16480: assign bias value only if operation succeeded NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn NFSv2: Fix a typo in encode_sattr() crypto: virtio - implement missing support for output IVs xprtrdma: Fix completion wait during device removal platform/x86: GPD pocket fan: Use default values when wrong modparams are given platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI scsi: enclosure: Fix stale device oops with hot replug RDMA/srpt: Report the SCSI residual to the initiator RDMA/mlx5: Return proper error value btrfs: simplify inode locking for RWF_NOWAIT drm/ttm: fix incrementing the page pointer for huge pages drm/ttm: fix start page for huge page check in ttm_put_pages() afs: Fix missing cell comparison in afs_test_super() cifs: Adjust indentation in smb2_open_file s390/qeth: Fix vnicc_is_in_use if rx_bcast not set s390/qeth: fix false reporting of VNIC CHAR config failure hsr: reset network header when supervision frame is created gpio: Fix error message on out-of-range GPIO in lookup table iommu: Remove device link to group on failure gpio: zynq: Fix for bug in zynq_gpio_restore_context API mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy ASoC: stm32: spdifrx: fix race condition in irq handler ASoC: stm32: spdifrx: fix inconsistent lock state ASoC: soc-core: Set dpcm_playback / dpcm_capture RDMA/bnxt_re: Fix Send Work Entry state check while polling completions RDMA/bnxt_re: Avoid freeing MR resources if dereg fails rtc: mt6397: fix alarm register overwrite drm/i915: Fix use-after-free when destroying GEM context dccp: Fix memleak in __feat_register_sp RDMA: Fix goto target to release the allocated memory iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init iwlwifi: dbg_ini: fix memory leak in alloc_sgtable media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap f2fs: check if file namelen exceeds max value f2fs: check memory boundary by insane namelen f2fs: Move err variable to function scope in f2fs_fill_dentries() mac80211: Do not send Layer 2 Update frame before authorization cfg80211/mac80211: make ieee80211_send_layer2_update a public function fs/select: avoid clang stack usage warning ethtool: reduce stack usage with clang HID: hidraw, uhid: Always report EPOLLOUT HID: hidraw: Fix returning EPOLLOUT from hidraw_poll hidraw: Return EPOLLOUT from hidraw_poll ANDROID: update ABI whitelist ANDROID: update kernel ABI for CONFIG_DUMMY GKI: enable CONFIG_DUMMY=y UPSTREAM: kcov: fix struct layout for kcov_remote_arg UPSTREAM: vhost, kcov: collect coverage from vhost_worker UPSTREAM: usb, kcov: collect coverage from hub_event ANDROID: update kernel ABI for kcov changes UPSTREAM: kcov: remote coverage support UPSTREAM: kcov: improve CONFIG_ARCH_HAS_KCOV help text UPSTREAM: kcov: convert kcov.refcount to refcount_t UPSTREAM: kcov: no need to check return value of debugfs_create functions GKI: enable CONFIG_NETFILTER_XT_MATCH_QUOTA2_LOG=y Linux 4.19.96 drm/i915/gen9: Clear residual context state on context switch netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present netfilter: conntrack: dccp, sctp: handle null timeout argument netfilter: arp_tables: init netns pointer in xt_tgchk_param struct phy: cpcap-usb: Fix flakey host idling and enumerating of devices phy: cpcap-usb: Fix error path when no host driver is loaded USB: Fix: Don't skip endpoint descriptors with maxpacket=0 HID: hiddev: fix mess in hiddev_open() ath10k: fix memory leak rtl8xxxu: prevent leaking urb scsi: bfa: release allocated memory in case of error mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf mwifiex: fix possible heap overflow in mwifiex_process_country_ie() tty: always relink the port tty: link tty and port before configuring it as console serdev: Don't claim unsupported ACPI serial devices staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21 staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 usb: musb: dma: Correct parameter passed to IRQ handler usb: musb: Disable pullup at init usb: musb: fix idling for suspend after disconnect interrupt USB: serial: option: add ZLP support for 0x1bc7/0x9010 staging: vt6656: set usb_set_intfdata on driver fail. gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism gpiolib: acpi: Turn dmi_system_id table into a generic quirk table can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling to irq mode can: gs_usb: gs_usb_probe(): use descriptors of current altsetting can: kvaser_usb: fix interface sanity check drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ drm/fb-helper: Round up bits_per_pixel if possible drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model Input: input_event - fix struct padding on sparc64 Input: add safety guards to input_set_keycode() HID: hid-input: clear unmapped usages HID: uhid: Fix returning EPOLLOUT from uhid_char_poll HID: Fix slab-out-of-bounds read in hid_field_extract tracing: Change offset type to s32 in preempt/irq tracepoints tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen ALSA: hda/realtek - Set EAPD control to default for ALC222 ALSA: hda/realtek - Add new codec supported for ALCS1200A ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 usb: chipidea: host: Disable port power only if previously enabled i2c: fix bus recovery stop mode timing chardev: Avoid potential use-after-free in 'chrdev_open()' ANDROID: Enable HID_STEAM, HID_SONY, JOYSTICK_XPAD as y ANDROID: gki_defconfig: Enable blk-crypto fallback BACKPORT: FROMLIST: Update Inline Encryption from v5 to v6 of patch series docs: fs-verity: mention statx() support f2fs: support STATX_ATTR_VERITY ext4: support STATX_ATTR_VERITY statx: define STATX_ATTR_VERITY docs: fs-verity: document first supported kernel version f2fs: add support for IV_INO_LBLK_64 encryption policies ext4: add support for IV_INO_LBLK_64 encryption policies fscrypt: add support for IV_INO_LBLK_64 policies fscrypt: avoid data race on fscrypt_mode::logged_impl_name fscrypt: zeroize fscrypt_info before freeing fscrypt: remove struct fscrypt_ctx fscrypt: invoke crypto API for ESSIV handling Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/bus/ti-sysc.txt Documentation/devicetree/bindings/thermal/thermal.txt Documentation/sysctl/vm.txt arch/arm64/mm/mmu.c block/blk-crypto-fallback.c block/blk-merge.c block/keyslot-manager.c drivers/char/Kconfig drivers/clk/qcom/clk-rcg2.c drivers/gpio/gpiolib.c drivers/hid/hid-quirks.c drivers/irqchip/Kconfig drivers/md/Kconfig drivers/md/dm-default-key.c drivers/md/dm.c drivers/nvmem/core.c drivers/of/Kconfig drivers/of/fdt.c drivers/of/irq.c drivers/scsi/ufs/ufshcd-crypto.c drivers/scsi/ufs/ufshcd.c drivers/scsi/ufs/ufshcd.h drivers/scsi/ufs/ufshci.h drivers/usb/dwc3/gadget.c drivers/usb/gadget/composite.c drivers/usb/gadget/function/f_fs.c fs/crypto/bio.c fs/crypto/fname.c fs/crypto/fscrypt_private.h fs/crypto/keyring.c fs/crypto/keysetup.c fs/f2fs/data.c fs/f2fs/file.c include/crypto/skcipher.h include/linux/gfp.h include/linux/keyslot-manager.h include/linux/of_fdt.h include/sound/soc.h kernel/sched/cpufreq_schedutil.c kernel/sched/fair.c kernel/sched/psi.c kernel/sched/rt.c kernel/sched/sched.h kernel/sched/topology.c kernel/sched/tune.h kernel/sysctl.c mm/compaction.c mm/page_alloc.c mm/vmscan.c security/commoncap.c security/selinux/avc.c Change-Id: I9a08175c4892e533ecde8da847f75dc4874b303a Signed-off-by: Ivaylo Georgiev <irgeorgiev@codeaurora.org> |
||
Ivaylo Georgiev
|
9e52135608 |
Merge android-4.19-q.94 (dabb11d ) into msm-4.19
* refs/heads/tmp-dabb11d: Revert "dt-bindings: clock: renesas: rcar-usb2-clock-sel: Fix typo in example" Linux 4.19.94 perf/x86/intel/bts: Fix the use of page_private() xen/blkback: Avoid unmapping unmapped grant pages s390/smp: fix physical to logical CPU map for SMT ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps net: add annotations on hh->hh_len lockless accesses xfs: periodically yield scrub threads to the scheduler ath9k_htc: Discard undersized packets ath9k_htc: Modify byte order for an error message net: core: limit nested device depth tcp: annotate tp->rcv_nxt lockless reads rxrpc: Fix possible NULL pointer access in ICMP handling KVM: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag selftests: rtnetlink: add addresses with fixed life time powerpc/pseries/hvconsole: Fix stack overread via udbg drm/mst: Fix MST sideband up-reply failure handling scsi: qedf: Do not retry ELS request if qedf_alloc_cmd fails bdev: Refresh bdev size for disks without partitioning bdev: Factor out bdev revalidation into a common helper fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP tty: serial: msm_serial: Fix lockup for sysrq and oops arm64: dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed warning dt-bindings: clock: renesas: rcar-usb2-clock-sel: Fix typo in example media: usb: fix memory leak in af9005_identify_state regulator: ab8500: Remove AB8505 USB regulator media: flexcop-usb: ensure -EIO is returned on error condition Bluetooth: Fix memory leak in hci_connect_le_scan Bluetooth: delete a stray unlock Bluetooth: btusb: fix PM leak in error case of setup platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table xfs: don't check for AG deadlock for realtime files in bunmapi ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 HID: i2c-hid: Reset ALPS touchpads on resume nfsd4: fix up replay_matches_cache() PM / devfreq: Check NULL governor in available_governors_show drm/msm: include linux/sched/task.h ftrace: Avoid potential division by zero in function profiler arm64: Revert support for execute-only user mappings exit: panic before exit_mm() on global init exit ALSA: firewire-motu: Correct a typo in the clock proc string ALSA: cs4236: fix error return comparison of an unsigned integer apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock tracing: Fix endianness bug in histogram trigger tracing: Have the histogram compare functions convert to u64 first tracing: Avoid memory leak in process_system_preds() tracing: Fix lock inversion in trace_event_enable_tgid_record() rseq/selftests: Fix: Namespace gettid() for compatibility with glibc 2.30 riscv: ftrace: correct the condition logic in function graph tracer gpiolib: fix up emulated open drain outputs libata: Fix retrieving of active qcs ata: ahci_brcm: BCM7425 AHCI requires AHCI_HFLAG_DELAY_ENGINE ata: ahci_brcm: Add missing clock management during recovery ata: ahci_brcm: Allow optional reset controller to be used ata: ahci_brcm: Fix AHCI resources management ata: libahci_platform: Export again ahci_platform_<en/dis>able_phys() compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE compat_ioctl: block: handle Persistent Reservations dmaengine: Fix access to uninitialized dma_slave_caps locks: print unsigned ino in /proc/locks pstore/ram: Write new dumps to start of recycled zones mm: move_pages: return valid node id in status if the page is already on the target node memcg: account security cred as well to kmemcg mm/zsmalloc.c: fix the migrated zspage statistics. media: cec: check 'transmit_in_progress', not 'transmitting' media: cec: avoid decrementing transmit_queue_sz if it is 0 media: cec: CEC 2.0-only bcast messages were ignored media: pulse8-cec: fix lost cec_transmit_attempt_done() call MIPS: Avoid VDSO ABI breakage due to global register variable drm/sun4i: hdmi: Remove duplicate cleanup calls ALSA: hda/realtek - Add headset Mic no shutup for ALC283 ALSA: usb-audio: set the interface format after resume on Dell WD19 ALSA: usb-audio: fix set_format altsetting sanity check ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code netfilter: nft_tproxy: Fix port selector on Big Endian drm: limit to INT_MAX in create_blob ioctl taskstats: fix data-race xfs: fix mount failure crash on invalid iclog memory access ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker PM / hibernate: memory_bm_find_bit(): Tighten node optimisation xen/balloon: fix ballooned page accounting without hotplug enabled xen-blkback: prevent premature module unload IB/mlx5: Fix steering rule of drop and count IB/mlx4: Follow mirror sequence of device add during device removal s390/cpum_sf: Avoid SBD overflow condition in irq handler s390/cpum_sf: Adjust sampling interval to avoid hitting sample limits md: raid1: check rdev before reference in raid1_sync_request func afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP net: make socket read/write_iter() honor IOCB_NOWAIT usb: gadget: fix wrong endpoint desc drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit scsi: libsas: stop discovering if oob mode is disconnected scsi: iscsi: qla4xxx: fix double free in probe scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI scsi: qla2xxx: Send Notify ACK after N2N PLOGI scsi: qla2xxx: Configure local loop for N2N target scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length scsi: qla2xxx: Don't call qlt_async_event twice scsi: qla2xxx: Drop superfluous INIT_WORK of del_work scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func rxe: correctly calculate iCRC for unaligned payloads RDMA/cma: add missed unregister_pernet_subsys in init failure afs: Fix SELinux setting security label on /afs afs: Fix afs_find_server lookups for ipv4 peers PM / devfreq: Don't fail devfreq_dev_release if not in list PM / devfreq: Set scaling_max_freq to max on OPP notifier error PM / devfreq: Fix devfreq_notifier_call returning errno iio: adc: max9611: Fix too short conversion time delay drm/amd/display: Fixed kernel panic when booting with DP-to-HDMI dongle drm/amdgpu: add cache flush workaround to gfx8 emit_fence drm/amdgpu: add check before enabling/disabling broadcast mode nvme-fc: fix double-free scenarios on hw queues nvme_fc: add module to ops template to allow module references Conflicts: drivers/devfreq/devfreq.c drivers/gpu/drm/drm_dp_mst_topology.c drivers/gpu/drm/drm_property.c Change-Id: Iad80571bea0a2197ea36a70c425c61a66c0cf0bc Signed-off-by: Ivaylo Georgiev <irgeorgiev@codeaurora.org> |
||
Arnd Bergmann
|
731afe8a97 |
compat_ioctl: handle SIOCOUTQNSD
commit 9d7bf41fafa5b5ddd4c13eb39446b0045f0a8167 upstream.
Unlike the normal SIOCOUTQ, SIOCOUTQNSD was never handled in compat
mode. Add it to the common socket compat handler along with similar
ones.
Fixes:
|
||
Jens Axboe
|
b280f0ea1c |
net: make socket read/write_iter() honor IOCB_NOWAIT
[ Upstream commit ebfcd8955c0b52eb793bcbc9e71140e3d0cdb228 ] The socket read/write helpers only look at the file O_NONBLOCK. not the iocb IOCB_NOWAIT flag. This breaks users like preadv2/pwritev2 and io_uring that rely on not having the file itself marked nonblocking, but rather the iocb itself. Cc: netdev@vger.kernel.org Acked-by: David Miller <davem@davemloft.net> Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
Ivaylo Georgiev
|
e0d3bea1a7 |
Merge android-4.19.28 (34e9e65 ) into msm-4.19
* refs/heads/tmp-34e9e65: Linux 4.19.28 bpf: fix sanitation rewrite in case of non-pointers scsi: core: reset host byte in DID_NEXUS_FAILURE case exec: Fix mem leak in kernel_read_file Bluetooth: Fix locking in bt_accept_enqueue() for BH context Bluetooth: btrtl: Restore old logic to assume firmware is already loaded selftests: firmware: fix verify_reqs() return value USB: serial: cp210x: fix GPIO in autosuspend gnss: sirf: fix premature wakeup interrupt enable xtensa: fix get_wchan aio: Fix locking in aio_poll() MIPS: irq: Allocate accurate order pages for irq stack applicom: Fix potential Spectre v1 vulnerabilities usb: xhci: Fix for Enabling USB ROLE SWITCH QUIRK on INTEL_SUNRISEPOINT_LP_XHCI tracing: Fix event filters and triggers to handle negative numbers x86/boot/compressed/64: Do not read legacy ROM on EFI system x86/CPU/AMD: Set the CPB bit unconditionally on F17h net: sched: act_tunnel_key: fix NULL pointer dereference during init net/sched: act_skbedit: fix refcount leak when replace fails net/sched: act_ipt: fix refcount leak when replace fails net: dsa: mv88e6xxx: prevent interrupt storm caused by mv88e6390x_port_set_cmode net: dsa: mv88e6xxx: power serdes on/off for 10G interfaces on 6390X ipv4: Pass original device to ip_rcv_finish_core mpls: Return error for RTA_GATEWAY attribute ipv6: Return error for RTA_VIA attribute ipv4: Return error for RTA_VIA attribute net: avoid use IPCB in cipso_v4_error net: Add __icmp_send helper. tun: remove unnecessary memory barrier xen-netback: fix occasional leak of grant ref mappings under memory pressure xen-netback: don't populate the hash cache on XenBus disconnect tun: fix blocking read tipc: fix race condition causing hung sendto net: socket: set sock->sk to NULL after calling proto_ops::release() net: sit: fix memory leak in sit_init_net() net: phy: phylink: fix uninitialized variable in phylink_get_mac_state net: phy: Micrel KSZ8061: link failure after cable connect net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails net: netem: fix skb length BUG_ON in __skb_to_sgvec netlabel: fix out-of-bounds memory accesses net: dsa: mv88e6xxx: Fix u64 statistics net: dsa: mv88e6xxx: Fix statistics on mv88e6161 lan743x: Fix TX Stall Issue ipv4: Add ICMPv6 support when parse route ipproto hv_netvsc: Fix IP header checksum for coalesced packets geneve: correctly handle ipv6.disable module parameter bnxt_en: Drop oversize TX packets to prevent errors. tipc: fix RDM/DGRAM connect() regression team: Free BPF filter when unregistering netdev sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79 sctp: call iov_iter_revert() after sending ABORT qmi_wwan: Add support for Quectel EG12/EM12 net-sysfs: Fix mem leak in netdev_register_kobject net: sched: put back q.qlen into a single location net: dsa: mv8e6xxx: fix number of internal PHYs for 88E6x90 family net: dsa: mv88e6xxx: handle unknown duplex modes gracefully in mv88e6xxx_port_set_duplex ip6mr: Do not call __IP6_INC_STATS() from preemptible context staging: android: ashmem: Avoid range_alloc() allocation with ashmem_mutex held. staging: android: ashmem: Don't call fallocate() with ashmem_mutex held. staging: android: ion: fix sys heap pool's gfp_flags staging: wilc1000: fix to set correct value for 'vif_num' staging: comedi: ni_660x: fix missing break in switch statement staging: erofs: compressed_pages should not be accessed again after freed staging: erofs: fix illegal address access under memory pressure USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485 USB: serial: cp210x: add ID for Ingenico 3070 USB: serial: option: add Telit ME910 ECM composition staging: erofs: fix mis-acted TAIL merging behavior cpufreq: Use struct kobj_attribute instead of struct global_attr ANDROID: cuttlefish: enable CONFIG_INET_UDP_DIAG=y ANDROID: PM / EM: Document the support for legacy (deprecated) EM UPSTREAM: sched/doc: Document Energy Aware Scheduling UPSTREAM: PM/EM: Document the Energy Model framework ANDROID: cuttlefish: enable CONFIG_USB_RTL8152=y ANDROID: cuttlefish_defconfig: Add support for AC97 audio ANDROID: cpufreq: times: optimize proc files ANDROID: cpufreq: times: record fast switch frequency transitions ANDROID: cpufreq: times: add /proc/uid_concurrent_{active,policy}_time ANDROID: cuttlefish_defconfig: Enable CONFIG_CPU_FREQ_TIMES ANDROID: cpufreq: Add time_in_state to /proc/uid directories ANDROID: proc: Add /proc/uid directory ANDROID: cpufreq: times: track per-uid time in state ANDROID: cpufreq: track per-task time in state ANDROID: cuttlefish: enable CONFIG_NETFILTER_XT_TARGET_CT=y ANDROID: overlayfs: override_creds=off option bypass creator_cred Conflicts: drivers/cpufreq/cpufreq.c drivers/cpufreq/cpufreq_times.c drivers/staging/android/ion/ion_system_heap.c fs/proc/Kconfig include/linux/cpufreq_times.h Change-Id: If347563ae5f040a43c74e1138d412738928dcc01 Signed-off-by: Ivaylo Georgiev <irgeorgiev@codeaurora.org> |
||
Ivaylo Georgiev
|
bb8fbbfe0f |
Merge android-4.19.26 (c97d2b5 ) into msm-4.19
* refs/heads/tmp-c97d2b5: Linux 4.19.26 net: phylink: avoid resolving link state too early pinctrl: max77620: Use define directive for max77620_pinconf_param values udlfb: handle unplug properly netfilter: ipt_CLUSTERIP: fix sleep-in-atomic bug in clusterip_config_entry_put() netfilter: nfnetlink_osf: add missing fmatch check netfilter: ipv6: Don't preserve original oif for loopback address netfilter: nft_compat: use-after-free when deleting targets netfilter: nf_tables: fix flush after rule deletion in the same batch Revert "bridge: do not add port to router list when receives query with source 0.0.0.0" staging: erofs: unzip_vle_lz4.c,utils.c: rectify BUG_ONs staging: erofs: unzip_{pagevec.h,vle.c}: rectify BUG_ONs staging: erofs: {dir,inode,super}.c: rectify BUG_ONs staging: erofs: add a full barrier in erofs_workgroup_unfreeze staging: erofs: fix `erofs_workgroup_{try_to_freeze, unfreeze}' staging: erofs: atomic_cond_read_relaxed on ref-locked workgroup staging: erofs: remove the redundant d_rehash() for the root dentry staging: erofs: drop multiref support temporarily staging: erofs: replace BUG_ON with DBG_BUGON in data.c staging: erofs: complete error handing of z_erofs_do_read_page staging: erofs: fix a bug when appling cache strategy net: avoid false positives in untrusted gso validation net: validate untrusted gso packets without csum offload kvm: x86: Return LA57 feature based on hardware capability mac80211: allocate tailroom for forwarded mesh packets drm/amd/display: Fix MST reboot/poweroff sequence drm/i915/fbdev: Actually configure untiled displays gpu: drm: radeon: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime drm/amdgpu: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime ARC: define ARCH_SLAB_MINALIGN = 8 ARC: U-boot: check arguments paranoidly ARCv2: Enable unaligned access in early ASM code parisc: Fix ptrace syscall number modification KEYS: always initialize keyring_index_key::desc_len KEYS: user: Align the payload buffer RDMA/srp: Rework SCSI device reset handling net/mlx5e: XDP, fix redirect resources availability check net_sched: fix two more memory leaks in cls_tcindex net_sched: fix a memory leak in cls_tcindex net_sched: fix a race condition in tcindex_destroy() sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach() geneve: should not call rt6_lookup() when ipv6 was disabled net: socket: make bond ioctls go through compat_ifreq_ioctl() net: socket: fix SIOCGIFNAME in compat Revert "kill dev_ifsioc()" Revert "socket: fix struct ifreq size in compat ioctl" team: avoid complex list operations in team_nl_cmd_options_set() sctp: set stream ext to NULL after freeing it in sctp_stream_outq_migrate sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment net: sfp: do not probe SFP module before we're attached net/packet: fix 4gb buffer limit due to overflow check net/mlx5e: Don't overwrite pedit action when multiple pedit used net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames net: ena: fix race between link up and device initalization ipv6: propagate genlmsg_reply return code inet_diag: fix reporting cgroup classid and fallback to priority batman-adv: fix uninit-value in batadv_interface_tx() isdn: avm: Fix string plus integer warning from Clang net/mlx5e: Fix wrong (zero) TX drop counter indication for representor selftests: forwarding: Add a test case for externally learned FDB entries mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky net: bridge: Mark FDB entries that were added by user as such mlxsw: pci: Return error on PCI reset timeout dpaa_eth: NETIF_F_LLTX requires to do our own update of trans_start bpf: bpf_setsockopt: reset sock dst on SO_MARK changes leds: lp5523: fix a missing check of return value of lp55xx_read hwmon: (tmp421) Correct the misspelling of the tmp442 compatible attribute in OF device ID table atm: he: fix sign-extension overflow on large shift selftests/bpf: retry tests that expect build-id bpf: zero out build_id for BPF_STACK_BUILD_ID_IP bpf: don't assume build-id length is always 20 bytes afs: Fix key refcounting in file locking code afs: Don't set vnode->cb_s_break in afs_validate() selftests: tc-testing: fix parsing of ife type selftests: tc-testing: fix tunnel_key failure if dst_port is unspecified selftests: tc-testing: drop test on missing tunnel key id pvcalls-front: fix potential null dereference drm/sun4i: backend: add missing of_node_puts vhost: return EINVAL if iovecs size does not match the message size drm/amd/display: fix PME notification not working in RV desktop drm/amdkfd: Don't assign dGPUs to APU topology devices drm/meson: add missing of_node_put always clear the X2APIC_ENABLE bit for PV guest netfilter: nft_flow_offload: fix checking method of conntrack helper scsi: cxgb4i: add wait_for_completion() scsi: ufs: Fix geometry descriptor size scsi: qedi: Add ep_state for login completion on un-reachable targets scsi: ufs: Fix system suspend status scsi: tcmu: avoid cmd/qfull timers updated whenever a new cmd comes isdn: i4l: isdn_tty: Fix some concurrency double-free bugs net: stmmac: Prevent RX starvation in stmmac_napi_poll() net: stmmac: Fix the logic of checking if RX Watchdog must be enabled net: stmmac: Check if CBS is supported before configuring net: stmmac: dwxgmac2: Only clear interrupts that are active net: stmmac: Fix PCI module removal leak acpi/nfit: Fix race accessing memdev in nfit_get_smbios_id() powerpc/8xx: fix setting of pagetable for Abatron BDI debug tool. RDMA/mthca: Clear QP objects during their allocation netfilter: nft_flow_offload: fix interaction with vrf slave device bpf: fix panic in stack_map_get_build_id() on i386 and arm32 pvcalls-front: Avoid get_free_pages(GFP_KERNEL) under spinlock bpf: correctly set initial window on active Fast Open sender netfilter: nft_flow_offload: Fix reverse route lookup MIPS: jazz: fix 64bit build include/linux/compiler*.h: fix OPTIMIZER_HIDE_VAR scsi: isci: initialize shost fully before calling scsi_add_host() scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param netfilter: nf_tables: fix leaking object reference count selftests: forwarding: Add a test for VLAN deletion mlxsw: spectrum_acl: Add cleanup after C-TCAM update error condition xprtrdma: Double free in rpcrdma_sendctxs_create() MIPS: ath79: Enable OF serial ports in the default config net/mlx4: Get rid of page operation after dma_alloc_coherent watchdog: mt7621_wdt/rt2880_wdt: Fix compilation problem selftests/bpf: Test [::] -> [::1] rewrite in sys_sendmsg in test_sock_addr bpf: Fix [::] -> [::1] rewrite in sys_sendmsg net: hns: Fix use after free identified by SLUB debug qed: Fix qed_ll2_post_rx_buffer_notify_fw() by adding a write memory barrier qed: Fix qed_chain_set_prod() for PBL chains with non power of 2 page count xen/pvcalls: remove set but not used variable 'intf' mfd: mc13xxx: Fix a missing check of a register-read failure mfd: tps65218: Use devm_regmap_add_irq_chip and clean up error path in probe() mfd: cros_ec_dev: Add missing mfd_remove_devices() call in remove mfd: axp20x: Add supported cells for AXP803 mfd: axp20x: Re-align MFD cell entries mfd: axp20x: Add AC power supply cell for AXP813 mfd: wm5110: Add missing ASRC rate register mfd: qcom_rpm: write fw_version to CTRL_REG mfd: bd9571mwv: Add volatile register to make DVFS work mfd: ab8500-core: Return zero in get_register_interruptible() mfd: mt6397: Do not call irq_domain_remove if PMIC unsupported mfd: db8500-prcmu: Fix some section annotations mfd: twl-core: Fix section annotations on {,un}protect_pm_master pvcalls-back: set -ENOTCONN in pvcalls_conn_back_read pvcalls-front: properly allocate sk pvcalls-front: don't try to free unallocated rings pvcalls-front: read all data before closing the connection mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells backlight: pwm_bl: Fix devicetree parsing with auto-generated brightness tables KEYS: allow reaching the keys quotas exactly ALSA: hda/realtek: Disable PC beep in passthrough on alc285 ALSA: hda/realtek - Headset microphone and internal speaker support for System76 oryp5 proc, oom: do not report alien mms when setting oom_score_adj numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES ceph: avoid repeatedly adding inode to mdsc->snap_flush_list libceph: handle an empty authorize reply mac80211: Free mpath object when rhashtable insertion fails mac80211: Use linked list instead of rhashtable walk for mesh tables mac80211: Restore vif beacon interval if start ap fails gpio: pxa: avoid attempting to set pin direction via pinctrl on MMP2 gpio: MT7621: use a per instance irq_chip structure MIPS: eBPF: Always return sign extended 32b values tracing: Fix number of entries in trace header ARM: 8834/1: Fix: kprobes: optimized kprobes illegal instruction Change-Id: Ie585d8274f881ac87155e9deda341c43cd8923b4 Signed-off-by: Ivaylo Georgiev <irgeorgiev@codeaurora.org> |
||
Eric Biggers
|
5fdb551fd6 |
net: socket: set sock->sk to NULL after calling proto_ops::release()
[ Upstream commit ff7b11aa481f682e0e9711abfeb7d03f5cd612bf ]
Commit 9060cb719e61 ("net: crypto set sk to NULL when af_alg_release.")
fixed a use-after-free in sockfs_setattr() when an AF_ALG socket is
closed concurrently with fchownat(). However, it ignored that many
other proto_ops::release() methods don't set sock->sk to NULL and
therefore allow the same use-after-free:
- base_sock_release
- bnep_sock_release
- cmtp_sock_release
- data_sock_release
- dn_release
- hci_sock_release
- hidp_sock_release
- iucv_sock_release
- l2cap_sock_release
- llcp_sock_release
- llc_ui_release
- rawsock_release
- rfcomm_sock_release
- sco_sock_release
- svc_release
- vcc_release
- x25_release
Rather than fixing all these and relying on every socket type to get
this right forever, just make __sock_release() set sock->sk to NULL
itself after calling proto_ops::release().
Reproducer that produces the KASAN splat when any of these socket types
are configured into the kernel:
#include <pthread.h>
#include <stdlib.h>
#include <sys/socket.h>
#include <unistd.h>
pthread_t t;
volatile int fd;
void *close_thread(void *arg)
{
for (;;) {
usleep(rand() % 100);
close(fd);
}
}
int main()
{
pthread_create(&t, NULL, close_thread, NULL);
for (;;) {
fd = socket(rand() % 50, rand() % 11, 0);
fchownat(fd, "", 1000, 1000, 0x1000);
close(fd);
}
}
Fixes:
|
||
Devi Sandeep Endluri V V
|
e638895149 |
net: socket: Added notifier chains for socket administrative functions
Allows other areas in the kernel to register notifier callbacks which get invoked whenever something performs an administrative action on a socket. This patch adds hooks in socket(), bind(), listen(), accept(), shutdown(). CRs-Fixed: 626021 Change-Id: I4ae99cb2206d7c4eddba69757335c18d10143045 Acked-by: Manoj Basapathi <manojbm@qti.qualcomm.com> Signed-off-by: Tejaswi Tanikella <tejaswit@codeaurora.org> Signed-off-by: Devi Sandeep Endluri V V <dendluri@codeaurora.org> |
||
Johannes Berg
|
7aab1e6d9e |
net: socket: make bond ioctls go through compat_ifreq_ioctl()
[ Upstream commit 98406133dd9cb9f195676eab540c270dceca879a ]
Same story as before, these use struct ifreq and thus need
to be read with the shorter version to not cause faults.
Cc: stable@vger.kernel.org
Fixes:
|
||
Johannes Berg
|
e37c96c111 |
net: socket: fix SIOCGIFNAME in compat
[ Upstream commit c6c9fee35dc27362b7bac34b2fc9f5b8ace2e22c ]
As reported by Robert O'Callahan in
https://bugzilla.kernel.org/show_bug.cgi?id=202273
reverting the previous changes in this area broke
the SIOCGIFNAME ioctl in compat again (I'd previously
fixed it after his previous report of breakage in
https://bugzilla.kernel.org/show_bug.cgi?id=199469).
This is obviously because I fixed SIOCGIFNAME more or
less by accident.
Fix it explicitly now by making it pass through the
restored compat translation code.
Cc: stable@vger.kernel.org
Fixes:
|
||
Johannes Berg
|
50021ba98f |
Revert "kill dev_ifsioc()"
[ Upstream commit 37ac39bdddc528c998a9f36db36937de923fdf2a ] This reverts commit |
||
Johannes Berg
|
99f3c89669 |
Revert "socket: fix struct ifreq size in compat ioctl"
[ Upstream commit 63ff03ab786ab1bc6cca01d48eacd22c95b9b3eb ] This reverts commit |
||
Wenwen Wang
|
b6168562c8 |
net: socket: fix a missing-check bug
In ethtool_ioctl(), the ioctl command 'ethcmd' is checked through a switch statement to see whether it is necessary to pre-process the ethtool structure, because, as mentioned in the comment, the structure ethtool_rxnfc is defined with padding. If yes, a user-space buffer 'rxnfc' is allocated through compat_alloc_user_space(). One thing to note here is that, if 'ethcmd' is ETHTOOL_GRXCLSRLALL, the size of the buffer 'rxnfc' is partially determined by 'rule_cnt', which is actually acquired from the user-space buffer 'compat_rxnfc', i.e., 'compat_rxnfc->rule_cnt', through get_user(). After 'rxnfc' is allocated, the data in the original user-space buffer 'compat_rxnfc' is then copied to 'rxnfc' through copy_in_user(), including the 'rule_cnt' field. However, after this copy, no check is re-enforced on 'rxnfc->rule_cnt'. So it is possible that a malicious user race to change the value in the 'compat_rxnfc->rule_cnt' between these two copies. Through this way, the attacker can bypass the previous check on 'rule_cnt' and inject malicious data. This can cause undefined behavior of the kernel and introduce potential security risk. This patch avoids the above issue via copying the value acquired by get_user() to 'rxnfc->rule_cn', if 'ethcmd' is ETHTOOL_GRXCLSRLALL. Signed-off-by: Wenwen Wang <wang6495@umn.edu> Signed-off-by: David S. Miller <davem@davemloft.net> |
||
Johannes Berg
|
1cebf8f143 |
socket: fix struct ifreq size in compat ioctl
As reported by Reobert O'Callahan, since Viro's commit to kill
dev_ifsioc() we attempt to copy too much data in compat mode,
which may lead to EFAULT when the 32-bit version of struct ifreq
sits at/near the end of a page boundary, and the next page isn't
mapped.
Fix this by passing the approprate compat/non-compat size to copy
and using that, as before the dev_ifsioc() removal. This works
because only the embedded "struct ifmap" has different size, and
this is only used in SIOCGIFMAP/SIOCSIFMAP which has a different
handler. All other parts of the union are naturally compatible.
This fixes https://bugzilla.kernel.org/show_bug.cgi?id=199469.
Fixes:
|
||
Linus Torvalds
|
9a76aba02a |
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
Pull networking updates from David Miller: "Highlights: - Gustavo A. R. Silva keeps working on the implicit switch fallthru changes. - Support 802.11ax High-Efficiency wireless in cfg80211 et al, From Luca Coelho. - Re-enable ASPM in r8169, from Kai-Heng Feng. - Add virtual XFRM interfaces, which avoids all of the limitations of existing IPSEC tunnels. From Steffen Klassert. - Convert GRO over to use a hash table, so that when we have many flows active we don't traverse a long list during accumluation. - Many new self tests for routing, TC, tunnels, etc. Too many contributors to mention them all, but I'm really happy to keep seeing this stuff. - Hardware timestamping support for dpaa_eth/fsl-fman from Yangbo Lu. - Lots of cleanups and fixes in L2TP code from Guillaume Nault. - Add IPSEC offload support to netdevsim, from Shannon Nelson. - Add support for slotting with non-uniform distribution to netem packet scheduler, from Yousuk Seung. - Add UDP GSO support to mlx5e, from Boris Pismenny. - Support offloading of Team LAG in NFP, from John Hurley. - Allow to configure TX queue selection based upon RX queue, from Amritha Nambiar. - Support ethtool ring size configuration in aquantia, from Anton Mikaev. - Support DSCP and flowlabel per-transport in SCTP, from Xin Long. - Support list based batching and stack traversal of SKBs, this is very exciting work. From Edward Cree. - Busyloop optimizations in vhost_net, from Toshiaki Makita. - Introduce the ETF qdisc, which allows time based transmissions. IGB can offload this in hardware. From Vinicius Costa Gomes. - Add parameter support to devlink, from Moshe Shemesh. - Several multiplication and division optimizations for BPF JIT in nfp driver, from Jiong Wang. - Lots of prepatory work to make more of the packet scheduler layer lockless, when possible, from Vlad Buslov. - Add ACK filter and NAT awareness to sch_cake packet scheduler, from Toke Høiland-Jørgensen. - Support regions and region snapshots in devlink, from Alex Vesker. - Allow to attach XDP programs to both HW and SW at the same time on a given device, with initial support in nfp. From Jakub Kicinski. - Add TLS RX offload and support in mlx5, from Ilya Lesokhin. - Use PHYLIB in r8169 driver, from Heiner Kallweit. - All sorts of changes to support Spectrum 2 in mlxsw driver, from Ido Schimmel. - PTP support in mv88e6xxx DSA driver, from Andrew Lunn. - Make TCP_USER_TIMEOUT socket option more accurate, from Jon Maxwell. - Support for templates in packet scheduler classifier, from Jiri Pirko. - IPV6 support in RDS, from Ka-Cheong Poon. - Native tproxy support in nf_tables, from Máté Eckl. - Maintain IP fragment queue in an rbtree, but optimize properly for in-order frags. From Peter Oskolkov. - Improvde handling of ACKs on hole repairs, from Yuchung Cheng" * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next: (1996 commits) bpf: test: fix spelling mistake "REUSEEPORT" -> "REUSEPORT" hv/netvsc: Fix NULL dereference at single queue mode fallback net: filter: mark expected switch fall-through xen-netfront: fix warn message as irq device name has '/' cxgb4: Add new T5 PCI device ids 0x50af and 0x50b0 net: dsa: mv88e6xxx: missing unlock on error path rds: fix building with IPV6=m inet/connection_sock: prefer _THIS_IP_ to current_text_addr net: dsa: mv88e6xxx: bitwise vs logical bug net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd() ieee802154: hwsim: using right kind of iteration net: hns3: Add vlan filter setting by ethtool command -K net: hns3: Set tx ring' tc info when netdev is up net: hns3: Remove tx ring BD len register in hns3_enet net: hns3: Fix desc num set to default when setting channel net: hns3: Fix for phy link issue when using marvell phy driver net: hns3: Fix for information of phydev lost problem when down/up net: hns3: Fix for command format parsing error in hclge_is_all_function_id_zero net: hns3: Add support for serdes loopback selftest bnxt_en: take coredump_record structure off stack ... |
||
Jeremy Cline
|
66b51b0a03 |
net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd()
req->sdiag_family is a user-controlled value that's used as an array
index. Sanitize it after the bounds check to avoid speculative
out-of-bounds array access.
This also protects the sock_is_registered() call, so this removes the
sanitize call there.
Fixes:
|
||
Linus Torvalds
|
a66b4cd1e7 |
Merge branch 'work.open3' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
Pull vfs open-related updates from Al Viro: - "do we need fput() or put_filp()" rules are gone - it's always fput() now. We keep track of that state where it belongs - in ->f_mode. - int *opened mess killed - in finish_open(), in ->atomic_open() instances and in fs/namei.c code around do_last()/lookup_open()/atomic_open(). - alloc_file() wrappers with saner calling conventions are introduced (alloc_file_clone() and alloc_file_pseudo()); callers converted, with much simplification. - while we are at it, saner calling conventions for path_init() and link_path_walk(), simplifying things inside fs/namei.c (both on open-related paths and elsewhere). * 'work.open3' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs: (40 commits) few more cleanups of link_path_walk() callers allow link_path_walk() to take ERR_PTR() make path_init() unconditionally paired with terminate_walk() document alloc_file() changes make alloc_file() static do_shmat(): grab shp->shm_file earlier, switch to alloc_file_clone() new helper: alloc_file_clone() create_pipe_files(): switch the first allocation to alloc_file_pseudo() anon_inode_getfile(): switch to alloc_file_pseudo() hugetlb_file_setup(): switch to alloc_file_pseudo() ocxlflash_getfile(): switch to alloc_file_pseudo() cxl_getfile(): switch to alloc_file_pseudo() ... and switch shmem_file_setup() to alloc_file_pseudo() __shmem_file_setup(): reorder allocations new wrapper: alloc_file_pseudo() kill FILE_{CREATED,OPENED} switch atomic_open() and lookup_open() to returning 0 in all success cases document ->atomic_open() changes ->atomic_open(): return 0 in all success cases get rid of 'opened' in path_openat() and the helpers downstream ... |
||
David S. Miller
|
89b1698c93 |
Merge ra.kernel.org:/pub/scm/linux/kernel/git/davem/net
The BTF conflicts were simple overlapping changes. The virtio_net conflict was an overlap of a fix of statistics counter, happening alongisde a move over to a bonafide statistics structure rather than counting value on the stack. Signed-off-by: David S. Miller <davem@davemloft.net> |
||
Christoph Hellwig
|
e6476c2144 |
net: remove bogus RCU annotations on socket.wq
We never use RCU protection for it, just a lot of cargo-cult rcu_deference_protects calls. Note that we do keep the kfree_rcu call for it, as the references through struct sock are RCU protected and thus might require a grace period before freeing. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Eric Dumazet <edumazet@google.com> Acked-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com> Signed-off-by: David S. Miller <davem@davemloft.net> |
||
Christoph Hellwig
|
a331de3bf0 |
net: remove sock_poll_busy_flag
Fold it into the only caller to make the code simpler and easier to read. Signed-off-by: Christoph Hellwig <hch@lst.de> Signed-off-by: David S. Miller <davem@davemloft.net> |
||
Christoph Hellwig
|
f641f13b99 |
net: remove sock_poll_busy_loop
There is no point in hiding this logic in a helper. Also remove the useless events != 0 check and only busy loop once we know we actually have a poll method. Signed-off-by: Christoph Hellwig <hch@lst.de> Signed-off-by: David S. Miller <davem@davemloft.net> |
||
Jeremy Cline
|
e978de7a6d |
net: socket: Fix potential spectre v1 gadget in sock_is_registered
'family' can be a user-controlled value, so sanitize it after the bounds check to avoid speculative out-of-bounds access. Cc: Josh Poimboeuf <jpoimboe@redhat.com> Cc: stable@vger.kernel.org Signed-off-by: Jeremy Cline <jcline@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> |
||
Jeremy Cline
|
c8e8cd579b |
net: socket: fix potential spectre v1 gadget in socketcall
'call' is a user-controlled value, so sanitize the array index after the bounds check to avoid speculating past the bounds of the 'nargs' array. Found with the help of Smatch: net/socket.c:2508 __do_sys_socketcall() warn: potential spectre issue 'nargs' [r] (local cap) Cc: Josh Poimboeuf <jpoimboe@redhat.com> Cc: stable@vger.kernel.org Signed-off-by: Jeremy Cline <jcline@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> |
||
Al Viro
|
d93aa9d82a |
new wrapper: alloc_file_pseudo()
takes inode, vfsmount, name, O_... flags and file_operations and either returns a new struct file (in which case inode reference we held is consumed) or returns ERR_PTR(), in which case no refcounts are altered. converted aio_private_file() and sock_alloc_file() to it Acked-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> |
||
Al Viro
|
c9c554f214 |
alloc_file(): switch to passing O_... flags instead of FMODE_... mode
... so that it could set both ->f_flags and ->f_mode, without callers having to set ->f_flags manually. Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> |
||
Christoph Hellwig
|
e88958e636 |
net: handle NULL ->poll gracefully
The big aio poll revert broke various network protocols that don't
implement ->poll as a patch in the aio poll serie removed sock_no_poll
and made the common code handle this case.
Reported-by: syzbot+57727883dbad76db2ef0@syzkaller.appspotmail.com
Reported-by: syzbot+cdb0d3176b53d35ad454@syzkaller.appspotmail.com
Reported-by: syzbot+2c7e8f74f8b2571c87e8@syzkaller.appspotmail.com
Reported-by: Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
Fixes:
|
||
Linus Torvalds
|
a11e1d432b |
Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL
The poll() changes were not well thought out, and completely unexplained. They also caused a huge performance regression, because "->poll()" was no longer a trivial file operation that just called down to the underlying file operations, but instead did at least two indirect calls. Indirect calls are sadly slow now with the Spectre mitigation, but the performance problem could at least be largely mitigated by changing the "->get_poll_head()" operation to just have a per-file-descriptor pointer to the poll head instead. That gets rid of one of the new indirections. But that doesn't fix the new complexity that is completely unwarranted for the regular case. The (undocumented) reason for the poll() changes was some alleged AIO poll race fixing, but we don't make the common case slower and more complex for some uncommon special case, so this all really needs way more explanations and most likely a fundamental redesign. [ This revert is a revert of about 30 different commits, not reverted individually because that would just be unnecessarily messy - Linus ] Cc: Al Viro <viro@zeniv.linux.org.uk> Cc: Christoph Hellwig <hch@lst.de> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> |
||
Cong Wang
|
6d8c50dcb0 |
socket: close race condition between sock_close() and sockfs_setattr()
fchownat() doesn't even hold refcnt of fd until it figures out
fd is really needed (otherwise is ignored) and releases it after
it resolves the path. This means sock_close() could race with
sockfs_setattr(), which leads to a NULL pointer dereference
since typically we set sock->sk to NULL in ->release().
As pointed out by Al, this is unique to sockfs. So we can fix this
in socket layer by acquiring inode_lock in sock_close() and
checking against NULL in sockfs_setattr().
sock_release() is called in many places, only the sock_close()
path matters here. And fortunately, this should not affect normal
sock_close() as it is only called when the last fd refcnt is gone.
It only affects sock_close() with a parallel sockfs_setattr() in
progress, which is not common.
Fixes:
|
||
Linus Torvalds
|
10b1eb7d8c |
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
Pull security system updates from James Morris: - incorporate new socketpair() hook into LSM and wire up the SELinux and Smack modules. From David Herrmann: "The idea is to allow SO_PEERSEC to be called on AF_UNIX sockets created via socketpair(2), and return the same information as if you emulated socketpair(2) via a temporary listener socket. Right now SO_PEERSEC will return the unlabeled credentials for a socketpair, rather than the actual credentials of the creating process." - remove the unused security_settime LSM hook (Sargun Dhillon). - remove some stack allocated arrays from the keys code (Tycho Andersen) * 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: dh key: get rid of stack allocated array for zeroes dh key: get rid of stack allocated array big key: get rid of stack array allocation smack: provide socketpair callback selinux: provide socketpair callback net: hook socketpair() into LSM security: add hook for socketpair() security: remove security_settime |
||
Christoph Hellwig
|
1525242310 |
net: add support for ->poll_mask in proto_ops
The socket file operations still implement ->poll until all protocols are switched over. Signed-off-by: Christoph Hellwig <hch@lst.de> |
||
Christoph Hellwig
|
3cafb37633 |
net: refactor socket_poll
Factor out two busy poll related helpers for late reuse, and remove a command that isn't very helpful, especially with the __poll_t annotations in place. Signed-off-by: Christoph Hellwig <hch@lst.de> |
||
David Herrmann
|
d47cd9450d |
net: hook socketpair() into LSM
Use the newly created LSM-hook for socketpair(). The default hook return-value is 0, so behavior stays the same unless LSMs start using this hook. Acked-by: Serge Hallyn <serge@hallyn.com> Signed-off-by: Tom Gundersen <teg@jklm.no> Signed-off-by: David Herrmann <dh.herrmann@gmail.com> Acked-by: David S. Miller <davem@davemloft.net> Signed-off-by: James Morris <james.morris@microsoft.com> |
||
Linus Torvalds
|
672a9c1069 |
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial
Pull trivial tree updates from Jiri Kosina. * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial: kfifo: fix inaccurate comment tools/thermal: tmon: fix for segfault net: Spelling s/stucture/structure/ edd: don't spam log if no EDD information is present Documentation: Fix early-microcode.txt references after file rename tracing: Block comments should align the * on each line treewide: Fix typos in printk GenWQE: Fix a typo in two comments treewide: Align function definition open/close braces |
||
Linus Torvalds
|
5bb053bef8 |
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
Pull networking updates from David Miller: 1) Support offloading wireless authentication to userspace via NL80211_CMD_EXTERNAL_AUTH, from Srinivas Dasari. 2) A lot of work on network namespace setup/teardown from Kirill Tkhai. Setup and cleanup of namespaces now all run asynchronously and thus performance is significantly increased. 3) Add rx/tx timestamping support to mv88e6xxx driver, from Brandon Streiff. 4) Support zerocopy on RDS sockets, from Sowmini Varadhan. 5) Use denser instruction encoding in x86 eBPF JIT, from Daniel Borkmann. 6) Support hw offload of vlan filtering in mvpp2 dreiver, from Maxime Chevallier. 7) Support grafting of child qdiscs in mlxsw driver, from Nogah Frankel. 8) Add packet forwarding tests to selftests, from Ido Schimmel. 9) Deal with sub-optimal GSO packets better in BBR congestion control, from Eric Dumazet. 10) Support 5-tuple hashing in ipv6 multipath routing, from David Ahern. 11) Add path MTU tests to selftests, from Stefano Brivio. 12) Various bits of IPSEC offloading support for mlx5, from Aviad Yehezkel, Yossi Kuperman, and Saeed Mahameed. 13) Support RSS spreading on ntuple filters in SFC driver, from Edward Cree. 14) Lots of sockmap work from John Fastabend. Applications can use eBPF to filter sendmsg and sendpage operations. 15) In-kernel receive TLS support, from Dave Watson. 16) Add XDP support to ixgbevf, this is significant because it should allow optimized XDP usage in various cloud environments. From Tony Nguyen. 17) Add new Intel E800 series "ice" ethernet driver, from Anirudh Venkataramanan et al. 18) IP fragmentation match offload support in nfp driver, from Pieter Jansen van Vuuren. 19) Support XDP redirect in i40e driver, from Björn Töpel. 20) Add BPF_RAW_TRACEPOINT program type for accessing the arguments of tracepoints in their raw form, from Alexei Starovoitov. 21) Lots of striding RQ improvements to mlx5 driver with many performance improvements, from Tariq Toukan. 22) Use rhashtable for inet frag reassembly, from Eric Dumazet. * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next: (1678 commits) net: mvneta: improve suspend/resume net: mvneta: split rxq/txq init and txq deinit into SW and HW parts ipv6: frags: fix /proc/sys/net/ipv6/ip6frag_low_thresh net: bgmac: Fix endian access in bgmac_dma_tx_ring_free() net: bgmac: Correctly annotate register space route: check sysctl_fib_multipath_use_neigh earlier than hash fix typo in command value in drivers/net/phy/mdio-bitbang. sky2: Increase D3 delay to sky2 stops working after suspend net/mlx5e: Set EQE based as default TX interrupt moderation mode ibmvnic: Disable irqs before exiting reset from closed state net: sched: do not emit messages while holding spinlock vlan: also check phy_driver ts_info for vlan's real device Bluetooth: Mark expected switch fall-throughs Bluetooth: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for BTUSB_QCA_ROME Bluetooth: btrsi: remove unused including <linux/version.h> Bluetooth: hci_bcm: Remove DMI quirk for the MINIX Z83-4 sh_eth: kill useless check in __sh_eth_get_regs() sh_eth: add sh_eth_cpu_data::no_xdfar flag ipv6: factorize sk_wmem_alloc updates done by __ip6_append_data() ipv4: factorize sk_wmem_alloc updates done by __ip_append_data() ... |
||
Linus Torvalds
|
642e7fd233 |
Merge branch 'syscalls-next' of git://git.kernel.org/pub/scm/linux/kernel/git/brodo/linux
Pull removal of in-kernel calls to syscalls from Dominik Brodowski: "System calls are interaction points between userspace and the kernel. Therefore, system call functions such as sys_xyzzy() or compat_sys_xyzzy() should only be called from userspace via the syscall table, but not from elsewhere in the kernel. At least on 64-bit x86, it will likely be a hard requirement from v4.17 onwards to not call system call functions in the kernel: It is better to use use a different calling convention for system calls there, where struct pt_regs is decoded on-the-fly in a syscall wrapper which then hands processing over to the actual syscall function. This means that only those parameters which are actually needed for a specific syscall are passed on during syscall entry, instead of filling in six CPU registers with random user space content all the time (which may cause serious trouble down the call chain). Those x86-specific patches will be pushed through the x86 tree in the near future. Moreover, rules on how data may be accessed may differ between kernel data and user data. This is another reason why calling sys_xyzzy() is generally a bad idea, and -- at most -- acceptable in arch-specific code. This patchset removes all in-kernel calls to syscall functions in the kernel with the exception of arch/. On top of this, it cleans up the three places where many syscalls are referenced or prototyped, namely kernel/sys_ni.c, include/linux/syscalls.h and include/linux/compat.h" * 'syscalls-next' of git://git.kernel.org/pub/scm/linux/kernel/git/brodo/linux: (109 commits) bpf: whitelist all syscalls for error injection kernel/sys_ni: remove {sys_,sys_compat} from cond_syscall definitions kernel/sys_ni: sort cond_syscall() entries syscalls/x86: auto-create compat_sys_*() prototypes syscalls: sort syscall prototypes in include/linux/compat.h net: remove compat_sys_*() prototypes from net/compat.h syscalls: sort syscall prototypes in include/linux/syscalls.h kexec: move sys_kexec_load() prototype to syscalls.h x86/sigreturn: use SYSCALL_DEFINE0 x86: fix sys_sigreturn() return type to be long, not unsigned long x86/ioport: add ksys_ioperm() helper; remove in-kernel calls to sys_ioperm() mm: add ksys_readahead() helper; remove in-kernel calls to sys_readahead() mm: add ksys_mmap_pgoff() helper; remove in-kernel calls to sys_mmap_pgoff() mm: add ksys_fadvise64_64() helper; remove in-kernel call to sys_fadvise64_64() fs: add ksys_fallocate() wrapper; remove in-kernel calls to sys_fallocate() fs: add ksys_p{read,write}64() helpers; remove in-kernel calls to syscalls fs: add ksys_truncate() wrapper; remove in-kernel calls to sys_truncate() fs: add ksys_sync_file_range helper(); remove in-kernel calls to syscall kernel: add ksys_setsid() helper; remove in-kernel call to sys_setsid() kernel: add ksys_unshare() helper; remove in-kernel calls to sys_unshare() ... |
||
Dominik Brodowski
|
d27e9afc64 |
net: socket: replace call to sys_recv() with __sys_recvfrom()
sys_recv() merely expands the parameters to __sys_recvfrom() by NULL and NULL. Open-code this in the two places which used sys_recv() as a wrapper to __sys_recvfrom(). This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
f3bf896b1d |
net: socket: replace calls to sys_send() with __sys_sendto()
sys_send() merely expands the parameters to __sys_sendto() by NULL and 0. Open-code this in the two places which used sys_send() as a wrapper to __sys_sendto(). This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
e1834a329d |
net: socket: move check for forbid_cmsg_compat to __sys_...msg()
The non-compat codepaths for sys_...msg() verify that MSG_CMSG_COMPAT is not set. By moving this check to the __sys_...msg() functions (and making it dependent on a static flag passed to this function), we can call the __sys...msg() functions instead of the syscall functions in all cases. __sys_recvmmsg() does not need this trickery, as the check is handled within the do_sys_recvmmsg() function internal to net/socket.c. This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
1255e26906 |
net: socket: add do_sys_recvmmsg() helper; remove in-kernel call to syscall
Using the net-internal helper do_sys_recvmmsg() allows us to avoid the internal calls to the sys_getsockopt() syscall. This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
13a2d70e2b |
net: socket: add __sys_getsockopt() helper; remove in-kernel call to syscall
Using the net-internal helper __sys_getsockopt() allows us to avoid the internal calls to the sys_getsockopt() syscall. This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
cc36dca0df |
net: socket: add __sys_setsockopt() helper; remove in-kernel call to syscall
Using the net-internal helper __sys_setsockopt() allows us to avoid the internal calls to the sys_setsockopt() syscall. This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
005a1aeac4 |
net: socket: add __sys_shutdown() helper; remove in-kernel call to syscall
Using the net-internal helper __sys_shutdown() allows us to avoid the internal calls to the sys_shutdown() syscall. This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
6debc8d834 |
net: socket: add __sys_socketpair() helper; remove in-kernel call to syscall
Using the net-internal helper __sys_socketpair() allows us to avoid the internal calls to the sys_socketpair() syscall. This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
b21c8f838a |
net: socket: add __sys_getpeername() helper; remove in-kernel call to syscall
Using the net-internal helper __sys_getpeername() allows us to avoid the internal calls to the sys_getpeername() syscall. This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
8882a107b3 |
net: socket: add __sys_getsockname() helper; remove in-kernel call to syscall
Using the net-internal helper __sys_getsockname() allows us to avoid the internal calls to the sys_getsockname() syscall. This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
25e290eed9 |
net: socket: add __sys_listen() helper; remove in-kernel call to syscall
Using the net-internal helper __sys_listen() allows us to avoid the internal calls to the sys_listen() syscall. This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
1387c2c2f9 |
net: socket: add __sys_connect() helper; remove in-kernel call to syscall
Using the net-internal helper __sys_connect() allows us to avoid the internal calls to the sys_connect() syscall. This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
a87d35d87a |
net: socket: add __sys_bind() helper; remove in-kernel call to syscall
Using the net-internal helper __sys_bind() allows us to avoid the internal calls to the sys_bind() syscall. This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
9d6a15c3f2 |
net: socket: add __sys_socket() helper; remove in-kernel call to syscall
Using the net-internal helper __sys_socket() allows us to avoid the internal calls to the sys_socket() syscall. This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |
||
Dominik Brodowski
|
4541e80560 |
net: socket: add __sys_accept4() helper; remove in-kernel call to syscall
Using the net-internal helper __sys_accept4() allows us to avoid the internal calls to the sys_accept4() syscall. This patch is part of a series which removes in-kernel calls to syscalls. On this basis, the syscall entry path can be streamlined. For details, see http://lkml.kernel.org/r/20180325162527.GA17492@light.dominikbrodowski.net Cc: David S. Miller <davem@davemloft.net> Cc: netdev@vger.kernel.org Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net> |