Merge tag 'android12-5.4.254_r00' into android12-5.4
This is the merge of 5.4.254 into the android12-5.4 branch.
It contains the following commits:
* 2f4bb789ebcc Merge android12-5.4 into android12-5.4-lts
* 25d683f9b7fe Merge 5.4.254 into android12-5.4-lts
|\
| * fd2a1d1f32ea Linux 5.4.254
| * e7711f15ed6b sch_netem: fix issues in netem_change() vs get_dist_table()
| * 3c3ffd6a3cf7 alpha: remove __init annotation from exported page_is_ram()
| * e12fac07f61c scsi: core: Fix possible memory leak if device_add() fails
| * cea09922f5f7 scsi: snic: Fix possible memory leak if device_add() fails
| * 12162414a7c1 scsi: 53c700: Check that command slot is not NULL
| * 048ebc9a28fb scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
| * ecb1fbe2879f scsi: core: Fix legacy /proc parsing buffer overflow
| * 979822844209 netfilter: nf_tables: report use refcount overflow
| * 137e25f0906e nvme-rdma: fix potential unbalanced freeze & unfreeze
| * ab32fbe3fe70 nvme-tcp: fix potential unbalanced freeze & unfreeze
| * 756c024698f4 btrfs: set cache_block_group_error if we find an error
| * fa7bc2684a05 btrfs: don't stop integrity writeback too early
| * 0a3b5893c6b1 ibmvnic: Handle DMA unmapping of login buffs in release functions
| * d66a27113ebb net/mlx5: Allow 0 for total host VFs
| * d7b2df974299 dmaengine: mcf-edma: Fix a potential un-allocated memory access
| * e913d89445e3 wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
| * c2145b18740c IB/hfi1: Fix possible panic during hotplug remove
| * 9d469552c9d2 drivers: net: prevent tun_build_skb() to exceed the packet size limit
| * 67eebc7a9217 dccp: fix data-race around dp->dccps_mss_cache
| * ef8810965f0c bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
| * 9c7deea5afcc net/packet: annotate data-races around tp->status
| * 60d9662f39f5 mISDN: Update parameter type of dsp_cmx_send()
| * dd72849bce27 selftests/rseq: Fix build with undefined __weak
| * 302d848188d6 drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
| * ed8dcd9543b8 x86: Move gds_ucode_mitigated() declaration to header
| * 6b342b1f3b01 x86/mm: Fix VDSO and VVAR placement on 5-level paging machines
| * 91a5e755e11f x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
| * 14254212b431 usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
| * 25038d3f16b9 usb: dwc3: Properly handle processing of pending events
| * 044f4446e06b usb-storage: alauda: Fix uninit-value in alauda_check_media()
| * b97dad01c121 binder: fix memory leak in binder_init()
| * 182f0e71ff34 iio: cros_ec: Fix the allocation size for cros_ec_command
| * d2c539c216cc nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
| * 655716938d14 x86/pkeys: Revert a5eff7259790 ("x86/pkeys: Add PKRU value to init_fpstate")
| * ea1b4c31161f radix tree test suite: fix incorrect allocation size for pthreads
| * aa0bfe169d29 drm/nouveau/gr: enable memory loads on helper invocation on all channels
| * 8a489b0bc87c dmaengine: pl330: Return DMA_PAUSED when transaction is paused
| * 7c62508d6b91 ipv6: adjust ndisc_is_useropt() to also return true for PIO
| * 0a67c1262162 mmc: moxart: read scr register without changing byte order
* | 0b05262cbb71 Merge 5.4.253 into android12-5.4-lts
|\|
| * 4b4223f7d26d Linux 5.4.253
| * 9e5374875f96 Revert "driver core: Annotate dev_err_probe() with __must_check"
| * ca33c0704151 drivers: core: fix kernel-doc markup for dev_err_probe()
| * 04ece65d9bad driver code: print symbolic error code
| * f2c1b4f9c157 driver core: Annotate dev_err_probe() with __must_check
| * 2e8fc2ddffee ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node
| * a1ba8725577b ARM: dts: imx6sll: fixup of operating points
| * 6c71d73945d2 ARM: dts: imx: add usb alias
| * 66579ee141a5 ARM: dts: imx: Align L2 cache-controller nodename with dtschema
| * 3b454fb938e1 ARM: dts: imx6sll: Make ssi node name same as other platforms
| * 03b119d900fd arm64: dts: stratix10: fix incorrect I2C property for SCL signal
| * 72c946246e21 ceph: defer stopping mdsc delayed_work
| * f82fe11a30ae ceph: use kill_anon_super helper
| * 82edffead586 ceph: show tasks waiting on caps in debugfs caps file
| * 632023a2b3ac PM: sleep: wakeirq: fix wake irq arming
| * d7f34e2cdd12 PM / wakeirq: support enabling wake-up irq after runtime_suspend called
| * 9cbffa33749a selftests/rseq: Play nice with binaries statically linked against glibc 2.35+
| * 13553469bdbd selftests/rseq: check if libc rseq support is registered
| * a65e7b4b31ca powerpc/mm/altmap: Fix altmap boundary check
| * f8cf0f83cf04 mtd: rawnand: omap_elm: Fix incorrect type in assignment
| * 2af8ed119722 test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation
| * 0f68b0f8eb5a test_firmware: prevent race conditions by a correct implementation of locking
| * 040cdadf9fdc ext2: Drop fragment support
| * 0336b42456e4 fs: Protect reconfiguration of sb read-write from racing writes
| * a05ac5d00eb7 net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
| * a2da00d1ea1a Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
| * 0a44ceba77c3 fs/sysv: Null check to prevent null-ptr-deref bug
| * 1202deb153d6 net: tap_open(): set sk_uid from current_fsuid()
| * 1d53ea776760 net: tun_chr_open(): set sk_uid from current_fsuid()
| * ae9cf40873d3 mtd: rawnand: meson: fix OOB available bytes for ECC
| * 8deaaf4be175 mtd: spinand: toshiba: Fix ecc_get_status
| * eacb19bd7cd2 USB: zaurus: Add ID for A-300/B-500/C-700
| * 5107f9e8db60 libceph: fix potential hang in ceph_osdc_notify()
| * 6f14228e82fe scsi: zfcp: Defer fc_rport blocking until after ADISC response
| * a490c2e8927e tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
| * 6d49ed957d77 tcp_metrics: annotate data-races around tm->tcpm_net
| * fc566cf344d8 tcp_metrics: annotate data-races around tm->tcpm_vals[]
| * 76b47daba7cd tcp_metrics: annotate data-races around tm->tcpm_lock
| * 38661fe6d001 tcp_metrics: annotate data-races around tm->tcpm_stamp
| * 96f14d689dc5 tcp_metrics: fix addr_same() helper
| * 0438e60a00d4 ip6mr: Fix skb_under_panic in ip6mr_cache_report()
| * 5b3dbedb8d4a net: dcb: choose correct policy to parse DCB_ATTR_BCN
| * 363c56f97122 net: ll_temac: fix error checking of irq_of_parse_and_map()
| * 7928f81443f6 net: ll_temac: Switch to use dev_err_probe() helper
| * 97d8a0bbda6b driver core: add device probe log helper
| * 227b8ce59cd3 bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
| * 1c8262f31fd2 net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
| * 83e3d4b0ae37 net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
| * be785808db32 net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
| * b705759a1a25 net: add missing data-race annotation for sk_ll_usec
| * 95dd65f29070 net: add missing data-race annotations around sk->sk_peek_off
| * 8a6dddcb47a6 net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
| * ec4b7532d70b net: add missing READ_ONCE(sk->sk_sndbuf) annotation
| * 9cd3adc26e53 net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
| * 481186cad78f net: annotate data-races around sk->sk_max_pacing_rate
| * 1774250a20d7 mISDN: hfcpci: Fix potential deadlock on &hc->lock
| * 42b28808070e net: sched: cls_u32: Fix match key mis-addressing
| * 1b047dc9108e perf test uprobe_from_different_cu: Skip if there is no gcc
| * ad46d4861ed3 rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
| * 80381ecf2933 net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
| * 800d8c96bf99 net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
| * 4730c0a1131c KVM: s390: fix sthyi error handling
| * d2fb0969262c word-at-a-time: use the same return type for has_zero regardless of endianness
| * be4d2b456206 loop: Select I/O scheduler 'none' from inside add_disk()
| * 11e929c38029 perf: Fix function pointer case
| * 1db90f97d719 arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro
| * f41cab7a4653 arm64: Add AMPERE1 to the Spectre-BHB affected list
| * 6e4aa8c89034 ASoC: cs42l51: fix driver to properly autoload with automatic module loading
| * cf8ecd6ea680 net/sched: sch_qfq: account for stab overhead in qfq_enqueue
| * 0e0f324c259d btrfs: fix race between quota disable and quota assign ioctls
| * 4f8f86bc5d33 btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled
| * 8c1d1f3a33e5 btrfs: qgroup: remove one-time use variables for quota_root checks
| * c8b1499e420e cpufreq: intel_pstate: Drop ACPI _PSS states table patching
| * f331413e1cf1 ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
| * 511851c87031 ACPI: processor: perflib: Use the "no limit" frequency QoS
| * 81cd6ceee7ce dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
| * e3efc4767a46 ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
| * 00748bc586a4 s390/dasd: fix hanging device after quiesce/resume
| * 73e872466ddc virtio-net: fix race between set queues and probe
| * 6db2a3c5c201 btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
| * 5adbd7ccd430 irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
| * a0019e13a9e9 tpm_tis: Explicitly check for error code
| * d1c6e68003d3 btrfs: check for commit error at btrfs_attach_transaction_barrier()
| * ee2eed8306b3 hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
| * 5373a1aa91b2 staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
| * 352e0cae4cce Documentation: security-bugs.rst: clarify CVE handling
| * e331a88ea56b Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group
| * fd21197af575 Revert "usb: xhci: tegra: Fix error check"
| * e0c92c329131 usb: xhci-mtk: set the dma max_seg_size
| * 3f39d58a0c1a USB: quirks: add quirk for Focusrite Scarlett
| * 8f86b1b3b539 usb: ohci-at91: Fix the unhandle interrupt when resume
| * 640cb5f5e4b4 usb: dwc3: don't reset device side if dwc3 was configured as host-only
| * a7d080cf4fab usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
| * 5fc6ace75ceb Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
| * 80d40a3d6d45 can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED
| * 58f0affb3c47 USB: serial: simple: sort driver entries
| * 43ee3cf0c783 USB: serial: simple: add Kaufmann RKS+CAN VCP
| * bcf1fc781ea1 USB: serial: option: add Quectel EC200A module support
| * 3ec7c5ef6021 USB: serial: option: support Quectel EM060K_128
| * da7ebd86cd2e serial: sifive: Fix sifive_serial_console_setup() section
| * d674cb90a9ef serial: 8250_dw: Preserve original value of DLF register
| * cdcc35e64541 tracing: Fix warning in trace_buffered_event_disable()
| * d7b20279244f ring-buffer: Fix wrong stat of cpu_buffer->read
| * f6e1e569ac97 ata: pata_ns87415: mark ns87560_tf_read static
| * 53c06e0d15ee dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
| * 9ebcca93bd41 block: Fix a source code comment in include/uapi/linux/blkzoned.h
| * c0aad2fe1b9f ASoC: fsl_spdif: Silence output on stop
| * 3bd1b4793b01 drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
| * 4970f72f810c drm/msm/adreno: Fix snapshot BINDLESS_DATA size
| * 5200bd7e6096 drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
| * 4990f529b745 RDMA/mlx4: Make check for invalid flags stricter
| * 74843851d418 benet: fix return value check in be_lancer_xmit_workarounds()
| * 07d9723cef28 net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
| * 2eb617529458 net/sched: mqprio: add extack to mqprio_parse_nlattr()
| * 29c5eb0ffac7 net/sched: mqprio: refactor nlattr parsing to a separate function
| * 17afc24d20c9 platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
| * 504177c84f04 team: reset team's flags when down link is P2P device
| * a3bb02598db9 bonding: reset bond's flags when down link is P2P device
| * d87d67c8bdd1 tcp: Reduce chance of collisions in inet6_hashfn().
| * 458294ee1537 ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address
| * a249705862d7 ethernet: atheros: fix return value check in atl1e_tso_csum()
| * 195e806b2afb phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
| * 27b63e8b8552 vxlan: calculate correct header length for GPE
| * 5e98318c632d i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
| * 6b1ee62ecbf1 ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
| * 65bd66a794bf keys: Fix linking a duplicate key to a keyring's assoc_array
| * c1df96689fe1 uapi: General notification queue definitions
| * ea64c727f201 scsi: qla2xxx: Array index may go out of bound
| * 5e387df414f9 scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c
| * 629628738078 pwm: meson: fix handling of period/duty if greater than UINT_MAX
| * 7ae4671a868e pwm: meson: Simplify duplicated per-channel tracking
| * 8abacc57af7b pwm: meson: Remove redundant assignment to variable fin_freq
| * 680e1455b828 ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
| * 05ff1d355e0b ftrace: Store the order of pages allocated in ftrace_page
| * e3098e52bf5a ftrace: Check if pages were allocated before calling free_pages()
| * aad84a978841 ftrace: Add information on number of page groups allocated
| * bd020c7763d6 fs: dlm: interrupt posix locks only when process is killed
| * f61d5752aed0 dlm: rearrange async condition return
| * ed092c495e29 dlm: cleanup plock_op vs plock_xop
| * a50ad9f8c06c PCI/ASPM: Avoid link retraining race
| * e50434e33de9 PCI/ASPM: Factor out pcie_wait_for_retrain()
| * 7411202a0fee PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
| * 8eb15ff216c1 ext4: Fix reusing stale buffer heads from last failed mounting
| * 0204319de8ea ext4: rename journal_dev to s_journal_dev inside ext4_sb_info
| * 356056cbe667 btrfs: fix extent buffer leak after tree mod log failure at split_node()
| * 63008dab58ad btrfs: fix race between quota disable and relocation
| * 0a55f346e0e5 btrfs: qgroup: catch reserved space leaks at unmount time
| * b070f29a6143 bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
| * 38a6dd2b68f9 bcache: remove 'int n' from parameter list of bch_bucket_alloc_set()
| * edb81d6e1e50 gpio: tps68470: Make tps68470_gpio_output() always set the initial value
| * 34e71f7d3a03 jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
| * 937cb20746c8 jbd2: recheck chechpointing non-dirty buffer
| * acc9a81f7cb2 jbd2: remove redundant buffer io error checks
| * 05d440d0f5da jbd2: fix kernel-doc markups
| * b41fa1ed91de jbd2: fix incorrect code style
* | e9bd7cccf422 Merge 5.4.252 into android12-5.4-lts
|\|
| * 21732fd22497 Linux 5.4.252
| * 9399ea1ce481 x86: fix backwards merge of GDS/SRSO bit
| * bc7b9a6c2ca4 xen/netback: Fix buffer overrun triggered by unusual packet
| * 43ed6f79b3e7 x86/cpu, kvm: Add support for CPUID_80000021_EAX
| * 1f0618bb2456 x86/bugs: Increase the x86 bugs vector size to two u32s
| * 08ba48152a8a tools headers cpufeatures: Sync with the kernel sources
| * 694b40dcfb41 x86/cpufeatures: Assign dedicated feature word for CPUID_0x8000001F[EAX]
| * 4fa849d4af68 x86/cpu: Add VM page flush MSR availablility as a CPUID feature
| * 998eec066607 x86/cpufeatures: Add SEV-ES CPU feature
| * 3e21d8b0f3a9 Documentation/x86: Fix backwards on/off logic about YMM support
| * ad7670dd65cb x86/mm: Initialize text poking earlier
| * 979366f5c2aa mm: Move mm_cachep initialization to mm_init()
| * 3d1b8cfdd0c9 x86/mm: Use mm_alloc() in poking_init()
| * ddcf05fe8850 x86/mm: fix poking_init() for Xen PV guests
| * 3f8968f1f0ad x86/xen: Fix secondary processors' FPU initialization
| * e56c1e0f9134 KVM: Add GDS_NO support to KVM
| * ed56430ab253 x86/speculation: Add Kconfig option for GDS
| * e35c65794365 x86/speculation: Add force option to GDS mitigation
| * f68f9f2df68e x86/speculation: Add Gather Data Sampling mitigation
| * 6e6044366897 x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
| * 2ee37a46aa13 x86/fpu: Mark init functions __init
| * 77fe8150579c x86/fpu: Remove cpuinfo argument from init functions
| * 95356fff6fee init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
| * 7aa2cec22e28 init: Invoke arch_cpu_finalize_init() earlier
| * 944d5c3ffa4b init: Remove check_bugs() leftovers
| * a03ef708788e um/cpu: Switch to arch_cpu_finalize_init()
| * 98c3955e145f sparc/cpu: Switch to arch_cpu_finalize_init()
| * 568d68fc1dd4 sh/cpu: Switch to arch_cpu_finalize_init()
| * 18cd611a3eaa mips/cpu: Switch to arch_cpu_finalize_init()
| * 2febb4a73004 m68k/cpu: Switch to arch_cpu_finalize_init()
| * 1f4494ea77e8 ia64/cpu: Switch to arch_cpu_finalize_init()
| * 73719e89e32b ARM: cpu: Switch to arch_cpu_finalize_init()
| * 1743bc756b6b x86/cpu: Switch to arch_cpu_finalize_init()
| * afe787cf253b init: Provide arch_cpu_finalize_init()
* | 32ffcd7d1e39 Revert "posix-timers: Ensure timer ID search-loop limit is valid"
* | ce4b7b13d5b0 Revert "drm/panel: Initialise panel dev and funcs through drm_panel_init()"
* | ea79936407d4 Revert "drm/panel: Add and fill drm_panel type field"
* | d6e37c922ca9 Revert "drm/panel: simple: Add connector_type for innolux_at043tn24"
* | ddd0b319368f Revert "Revert "8250: add support for ASIX devices with a FIFO bug""
* | dcebb2a2309d Merge 5.4.251 into android12-5.4-lts
|\|
| * 887433e4bc93 Linux 5.4.251
| * 1e02fbe4f0ed tracing/histograms: Return an error if we fail to add histogram to hist_vars list
| * b1062596556e tcp: annotate data-races around fastopenq.max_qlen
| * 21c325d01ecc tcp: annotate data-races around tp->notsent_lowat
| * 7175277b4d0b tcp: annotate data-races around rskq_defer_accept
| * 3121d649e4c6 tcp: annotate data-races around tp->linger2
| * b1cd5655fc13 net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX
| * 8ce44cf35ef6 tcp: annotate data-races around tp->tcp_tx_delay
| * c822536b3e41 netfilter: nf_tables: can't schedule in nft_chain_validate
| * caa228792fb5 netfilter: nf_tables: fix spurious set element insertion failure
| * b8944e53ee70 llc: Don't drop packet from non-root netns.
| * b07e31824df6 fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
| * 6d39e9fc5934 Revert "tcp: avoid the lookup process failing to get sk in ehash table"
| * 0c0bd9789a8d net:ipv6: check return value of pskb_trim()
| * 17046107ca15 iavf: Fix use-after-free in free_netdev
| * 765e1eaf42de net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()
| * 3b6f56021af6 pinctrl: amd: Use amd_pinconf_set() for all config options
| * 951f4e9730f1 fbdev: imxfb: warn about invalid left/right margin
| * 3e03319ab97d spi: bcm63xx: fix max prepend length
| * c9f56f3c7bc9 igb: Fix igb_down hung on surprise removal
| * 7d80e834625c wifi: iwlwifi: mvm: avoid baid size integer overflow
| * 41d149376078 wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point()
| * 970c7035f4b0 devlink: report devlink_port_type_warn source device
| * e09a285ea1e8 bpf: Address KCSAN report on bpf_lru_list
| * cec1857b1ea5 sched/fair: Don't balance task to its current running CPU
| * 9d8d3df71516 arm64: mm: fix VA-range sanity check
| * 8ad6679a5bb9 posix-timers: Ensure timer ID search-loop limit is valid
| * d0345f7c7dbc md/raid10: prevent soft lockup while flush writes
| * 09539f9e2076 md: fix data corruption for raid456 when reshape restart while grow up
| * 4181c30a2c55 nbd: Add the maximum limit of allocated index in nbd_dev_add
| * d4f1cd9b9d66 debugobjects: Recheck debug_objects_enabled before reporting
| * 0afcebcec057 ext4: correct inline offset when handling xattrs in inode body
| * 5d580017bdb9 drm/client: Fix memory leak in drm_client_modeset_probe
| * 52daf6ba2e0d drm/client: Fix memory leak in drm_client_target_cloned
| * 9533dbfac0ff can: bcm: Fix UAF in bcm_proc_show()
| * 5dd838be69e4 selftests: tc: set timeout to 15 minutes
| * 7f83199862c2 fuse: revalidate: don't invalidate if interrupted
| * ae91ab710d8e btrfs: fix warning when putting transaction with qgroups enabled after abort
| * e217a3d19e10 perf probe: Add test for regression introduced by switch to die_get_decl_file()
| * 380c7ceabdde drm/atomic: Fix potential use-after-free in nonblocking commits
| * b7084ebf4f54 scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
| * 3f22f9ddbb29 scsi: qla2xxx: Pointer may be dereferenced
| * a1c5149a82de scsi: qla2xxx: Correct the index of array
| * 1b7e5bdf2be2 scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
| * 4f90a8b04816 scsi: qla2xxx: Fix potential NULL pointer dereference
| * d25fded78d88 scsi: qla2xxx: Wait for io return on terminate rport
| * 056fd1820724 tracing/probes: Fix not to count error code to total length
| * 93114cbc7cb1 tracing: Fix null pointer dereference in tracing_err_log_open()
| * 597eb52583d4 xtensa: ISS: fix call to split_if_spec
| * e84829522fc7 ring-buffer: Fix deadloop issue on reading trace_pipe
| * 481535905608 tracing/histograms: Add histograms to hist_vars if they have referenced variables
| * 46574e5a0a2a tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk
| * 30962268fa1a tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error
| * 0697a1a592c7 Revert "8250: add support for ASIX devices with a FIFO bug"
| * 45e55e9cac13 meson saradc: fix clock divider mask length
| * 2cdced57bc00 ceph: don't let check_caps skip sending responses for revoke msgs
| * 1883a484c87e hwrng: imx-rngc - fix the timeout for init and self check
| * e3373e6b6c79 firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool()
| * 826c7bfe5c49 serial: atmel: don't enable IRQs prematurely
| * 15d4bd0f0a6b drm/rockchip: vop: Leave vblank enabled in self-refresh
| * 6bc6ec8b0a0b drm/atomic: Allow vblank-enabled + self-refresh "disable"
| * f86942709b0e fs: dlm: return positive pid value for F_GETLK
| * ecfd1f82c4f5 md/raid0: add discard support for the 'original' layout
| * dac4afa3efae misc: pci_endpoint_test: Re-init completion for every test
| * dd2210379205 misc: pci_endpoint_test: Free IRQs before removing the device
| * 9cfa4ef25de5 PCI: rockchip: Set address alignment for endpoint mode
| * 35aec6bc0c04 PCI: rockchip: Use u32 variable to access 32-bit registers
| * 13b93891308c PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core
| * c049b20655f6 PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked
| * a1f311d430f2 PCI: rockchip: Write PCI Device ID to correct register
| * 592795119f2b PCI: rockchip: Assert PCI Configuration Enable bit after probe
| * 35c95eda7b6d PCI: qcom: Disable write access to read only registers for IP v2.3.3
| * b0aac7792525 PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
| * f450388d8b6d PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
| * a4855aeb13e4 jfs: jfs_dmap: Validate db_l2nbperpage while mounting
| * ee2fd448608e ext4: only update i_reserved_data_blocks on successful block allocation
| * 02543d1ddd77 ext4: fix wrong unit use in ext4_mb_clear_bb
| * 96a85becb811 erofs: fix compact 4B support for 16k block size
| * 42725e5c1b18 SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
| * 29a560437f67 misc: fastrpc: Create fastrpc scalar with correct buffer count
| * b157987242bd powerpc: Fail build if using recordmcount with binutils v2.37
| * 2b59740ebc86 net: bcmgenet: Ensure MDIO unregistration has clocks enabled
| * 1fe96568e78b mtd: rawnand: meson: fix unaligned DMA buffers handling
| * 86b9820395f2 tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
| * 96a16069a81d pinctrl: amd: Only use special debounce behavior for GPIO 0
| * 6dcb493fc478 pinctrl: amd: Detect internal GPIO0 debounce handling
| * a1a443651569 pinctrl: amd: Fix mistake in handling clearing pins at startup
| * cf57a0853ba5 net/sched: make psched_mtu() RTNL-less safe
| * 96391959a99e net/sched: flower: Ensure both minimum and maximum ports are specified
| * 166fa538e0dd cls_flower: Add extack support for src and dst port range options
| * aadca5f08aef wifi: airo: avoid uninitialized warning in airo_get_rate()
| * cc2c06ca7fbf erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF
| * b55c38fe2441 platform/x86: wmi: Break possible infinite loop when parsing GUID
| * cb8a256202b9 platform/x86: wmi: move variables
| * 669c488cb25a platform/x86: wmi: use guid_t and guid_equal()
| * fd8049d6553f platform/x86: wmi: remove unnecessary argument
| * 4c8e26fc3302 platform/x86: wmi: Fix indentation in some cases
| * 8717326e4362 platform/x86: wmi: Replace UUID redefinitions by their originals
| * c7eeba470585 ipv6/addrconf: fix a potential refcount underflow for idev
| * 7a06554214fe NTB: ntb_tool: Add check for devm_kcalloc
| * 88e243618e4c NTB: ntb_transport: fix possible memory leak while device_register() fails
| * b5b9e041eb04 ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
| * 0ae4fac8fe33 NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
| * bb17520c0383 ntb: idt: Fix error handling in idt_pci_driver_init()
| * 4e64ef41c6cf udp6: fix udp6_ehashfn() typo
| * 61b4c4659746 icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
| * 4c7276a6daf7 ionic: remove WARN_ON to prevent panic_on_warn
| * 3e77647acdcf ionic: ionic_intr_free parameter change
| * f0dc38bdef52 ionic: move irq request to qcq alloc
| * 7cf21fba1bf8 ionic: clean irq affinity on queue deinit
| * ef7fc26b6a19 ionic: improve irq numa locality
| * 808211a8d427 net/sched: cls_fw: Fix improper refcount update leads to use-after-free
| * d98ac5bce2d5 net: mvneta: fix txq_map in case of txq_number==1
| * 58cd168825b4 scsi: qla2xxx: Fix error code in qla2x00_start_sp()
| * b49b55a7d578 igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings
| * a45afb07121c igc: Remove delay during TX ring configuration
| * 59c190082a01 drm/panel: simple: Add connector_type for innolux_at043tn24
| * 64b76abfe32d drm/panel: Add and fill drm_panel type field
| * 362940f8e40f drm/panel: Initialise panel dev and funcs through drm_panel_init()
| * 6d5172a3ab8f workqueue: clean up WORK_* constant types, clarify masking
| * 003d33924911 net: lan743x: Don't sleep in atomic context
| * 373b9475ea8c block/partition: fix signedness issue for Amiga partitions
| * 22df19fee7b9 tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
| * b7d636c924eb netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
| * 61c7a5256543 netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
| * 565bdccdded3 netfilter: nf_tables: fix scheduling-while-atomic splat
| * 7c4610ac3b41 netfilter: nf_tables: unbind non-anonymous set if rule construction fails
| * 90d54ee329d2 netfilter: nf_tables: reject unbound anonymous set before commit phase
| * 1df28fde1270 netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
| * 1adb5c272b20 netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
| * 077ef851f0a3 netfilter: nf_tables: add rescheduling points during loop detection walks
| * 11352851944c netfilter: nf_tables: use net_generic infra for transaction data
| * d59ed9dc0058 netfilter: add helper function to set up the nfnetlink header and use it
| * fa498dead9ee netfilter: nftables: add helper function to set the base sequence number
| * ef35dd70a340 netfilter: nf_tables: fix nat hook table deletion
| * d1b7fe307c75 block: add overflow checks for Amiga partition support
| * 2b71cbf7ab48 fanotify: disallow mount/sb marks on kernel internal pseudo fs
| * 9a6ce27a5d61 fs: no need to check source
| * c1c41cda0ab1 ARM: orion5x: fix d2net gpio initialization
| * 679c34821ab7 btrfs: fix race when deleting quota root from the dirty cow roots list
| * f0fbbd405a94 fs: Lock moved directories
| * b97ac51f8492 fs: Establish locking order for unrelated directories
| * d95dc41ad181 Revert "f2fs: fix potential corruption when moving a directory"
| * a9a926423a63 ext4: Remove ext4 locking of moved directory
| * eefebf8877d3 fs: avoid empty option when generating legacy mount string
| * e9a3310bc2fc jffs2: reduce stack usage in jffs2_build_xattr_subsystem()
| * a249a61ac528 integrity: Fix possible multiple allocation in integrity_inode_get()
| * 0729029e6472 bcache: Remove unnecessary NULL point check in node allocations
| * 4be68f1c7076 mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used.
| * 2f6c76994646 mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M
| * c491e27151c1 mmc: core: disable TRIM on Kingston EMMC04G-M627
| * ce7278dedab7 NFSD: add encoding of op_recall flag for write delegation
| * 5016511287dc ALSA: jack: Fix mutex call in snd_jack_report()
| * c64fda48a3ad i2c: xiic: Don't try to handle more interrupt events after error
| * 696e470e910e i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process()
| * 498962715773 sh: dma: Fix DMA channel offset calculation
| * 58b1b3c54e16 net: dsa: tag_sja1105: fix MAC DA patching from meta frames
| * 67a67e258407 net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX
| * ab0085bd7902 xsk: Honor SO_BINDTODEVICE on bind
| * 9347e432297e xsk: Improve documentation for AF_XDP
| * e63dc31b9452 tcp: annotate data races in __tcp_oow_rate_limited()
| * e9c2687988b7 net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
| * fffa51e786ce powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y
| * 45b34500f3ef f2fs: fix error path handling in truncate_dnode()
| * 860d9b717f65 mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
| * 398e6a015877 spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
| * 18d50fb44109 Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
| * 4d8fc6137749 sctp: fix potential deadlock on &net->sctp.addr_wq_lock
| * 999ff7fe492b rtc: st-lpc: Release some resources in st_rtc_probe() in case of error
| * d5c39cca4d03 pwm: sysfs: Do not apply state to already disabled PWMs
| * 5375c024f8ae pwm: imx-tpm: force 'real_period' to be zero in suspend
| * d252c74b8b7a mfd: stmpe: Only disable the regulators if they are enabled
| * d9db18addf42 KVM: s390: vsie: fix the length of APCB bitmap
| * baec796723b7 mfd: stmfx: Fix error path in stmfx_chip_init
| * 5d26f134efa8 serial: 8250_omap: Use force_suspend and resume for system suspend
| * 337073cacad4 mfd: intel-lpss: Add missing check for platform_get_resource
| * 0a6afc83b028 usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove()
| * becd09685d44 KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
| * 151b0dd6d1a0 mfd: rt5033: Drop rt5033-battery sub-device
| * 8e8dae8eb230 usb: hide unused usbfs_notify_suspend/resume functions
| * fe9cdc198619 usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
| * 1531ba3fab51 extcon: Fix kernel doc of property capability fields to avoid warnings
| * 257daec29dcd extcon: Fix kernel doc of property fields to avoid warnings
| * 648a163cff21 usb: dwc3: qcom: Fix potential memory leak
| * d485150c9a52 media: usb: siano: Fix warning due to null work_func_t function pointer
| * 619e6f9a564a media: videodev2.h: Fix struct v4l2_input tuner index comment
| * e9586c49bdd4 media: usb: Check az6007_read() return value
| * fd869bdb5f12 sh: j2: Use ioremap() to translate device tree address into kernel memory
| * 85f4c53849e4 w1: fix loop in w1_fini()
| * dc88382c1d44 block: change all __u32 annotations to __be32 in affs_hardblocks.h
| * fa8548d1a0a4 block: fix signed int overflow in Amiga partition support
| * bec218258cbd usb: dwc3: gadget: Propagate core init errors to UDC during pullup
| * f55127df9918 USB: serial: option: add LARA-R6 01B PIDs
| * bac502cd472a hwrng: st - keep clock enabled while hwrng is registered
| * 071560202a52 hwrng: st - Fix W=1 unused variable warning
| * 18fa56ca4cb8 NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION
| * c182d87c67e2 ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard
| * 02dc8e8bdbe4 modpost: fix off by one in is_executable_section()
| * 1030c0c30968 crypto: marvell/cesa - Fix type mismatch warning
| * ad3c4ecff00b modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}
| * 084bf580019c modpost: fix section mismatch message for R_ARM_ABS32
| * c893658d9ce6 crypto: nx - fix build warnings when DEBUG_FS is not enabled
| * a43bcb0b661c hwrng: virtio - Fix race on data_avail and actual data
| * b70315e44f03 hwrng: virtio - always add a pending request
| * 102a354d52ca hwrng: virtio - don't waste entropy
| * f2a7dfd35f0c hwrng: virtio - don't wait on cleanup
| * 6fe732764a58 hwrng: virtio - add an internal buffer
| * 2cbfb51d2c7e powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary
| * aa3932eb0739 pinctrl: at91-pio4: check return value of devm_kasprintf()
| * e297350c33f6 perf dwarf-aux: Fix off-by-one in die_get_varname()
| * 7f822c8036fe pinctrl: cherryview: Return correct value if pin in push-pull mode
| * 1768e362f20f PCI: Add pci_clear_master() stub for non-CONFIG_PCI
| * 5d3955bc32d4 PCI: ftpci100: Release the clock resources
| * 331dce61c0d4 PCI: pciehp: Cancel bringup sequence if card is not present
| * f58c8563686b scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()
| * 666e7f9d60ce PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
| * 961c8370c5f7 scsi: qedf: Fix NULL dereference in error handling
| * 6f64558b43cf ASoC: imx-audmix: check return value of devm_kasprintf()
| * 35455616110b clk: keystone: sci-clk: check return value of kasprintf()
| * ffe6ad17cf14 clk: cdce925: check return value of kasprintf()
| * 5f13d67027fa ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
| * 801c8341f7af clk: tegra: tegra124-emc: Fix potential memory leak
| * 262db3ff58e2 drm/radeon: fix possible division-by-zero errors
| * cacc0506e571 drm/amdkfd: Fix potential deallocation of previously deallocated memory.
| * 9e3858f82e3c fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
| * 5541d1856c87 arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1
| * 40ac5cb6cbb0 IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors
| * 68e0033dee72 soc/fsl/qe: fix usb.c build errors
| * b756eb5eb9b0 ASoC: es8316: Do not set rate constraints for unsupported MCLKs
| * d1c1ca27cac0 ASoC: es8316: Increment max value for ALC Capture Target Volume control
| * b54bac970b54 memory: brcmstb_dpfe: fix testing array offset after use
| * f54142ed16b5 ARM: ep93xx: fix missing-prototype warnings
| * c2324c5aa247 drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H
| * 4a23954279fc arm64: dts: qcom: msm8916: correct camss unit address
| * 97dcb8dfefaa ARM: dts: gta04: Move model property out of pinctrl node
| * 25bbd1c7bef8 RDMA/bnxt_re: Fix to remove an unnecessary log
| * ed039ad88ab0 drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks`
| * 87ccaf56097a Input: adxl34x - do not hardcode interrupt trigger type
| * c7a8cc9140cf ARM: dts: BCM5301X: Drop "clock-names" from the SPI node
| * c516c00847f5 Input: drv260x - sleep between polling GO bit
| * 3e789aee218b radeon: avoid double free in ci_dpm_init()
| * bc5b57a23087 netlink: Add __sock_i_ino() for __netlink_diag_dump().
| * 1c405b3d3769 ipvlan: Fix return value of ipvlan_queue_xmit()
| * 1d2ab3d4383e netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value.
| * 337fdce45063 netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
| * 32deadf89430 lib/ts_bm: reset initial match offset for every block of text
| * dd6ff3f38627 net: nfc: Fix use-after-free caused by nfc_llcp_find_local
| * edc5d8776a32 nfc: llcp: simplify llcp_sock_connect() error paths
| * 9c9662e2512b gtp: Fix use-after-free in __gtp_encap_destroy().
| * 08d8ff1bc688 selftests: rtnetlink: remove netdevsim device after ipsec offload test
| * bd1de6107f10 netlink: do not hard code device address lenth in fdb dumps
| * 8f6652ed2ad9 netlink: fix potential deadlock in netlink_set_err()
| * 88d89b4a3102 wifi: ath9k: convert msecs to jiffies where needed
| * 76d5bda2c3af wifi: cfg80211: rewrite merging of inherited elements
| * e4c33144fc75 wifi: iwlwifi: pull from TXQs with softirqs disabled
| * 2ba902da9090 rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO
| * 786e264b37d2 wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()
| * 68305a19bada memstick r592: make memstick_debug_get_tpc_name() static
| * 6f4454ccbea9 kexec: fix a memory leak in crash_shrink_memory()
| * 4503261ab97b watchdog/perf: more properly prevent false positives with turbo modes
| * d5fa3918dfce watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config
| * 7874fb3bef8b wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown
| * 4dc3560561a0 wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
| * f432198058a6 wifi: ray_cs: Fix an error handling path in ray_probe()
| * 8fe51dce8bdc wifi: ray_cs: Drop useless status variable in parse_addr()
| * 0dec0ad304d4 wifi: ray_cs: Utilize strnlen() in parse_addr()
| * ee73ad566a29 wifi: wl3501_cs: Fix an error handling path in wl3501_probe()
| * b7df4e0cb4ed wl3501_cs: use eth_hw_addr_set()
| * 24f34f67be24 net: create netdev->dev_addr assignment helpers
| * dd5dca10d806 wl3501_cs: Fix misspelling and provide missing documentation
| * 051d70773b9c wl3501_cs: Remove unnecessary NULL check
| * 91c3c9eaf1ed wl3501_cs: Fix a bunch of formatting issues related to function docs
| * add539f7d16b wifi: atmel: Fix an error handling path in atmel_probe()
| * 5b06f702805d wifi: orinoco: Fix an error handling path in orinoco_cs_probe()
| * ca4a2955d866 wifi: orinoco: Fix an error handling path in spectrum_cs_probe()
| * 91c3325da240 regulator: core: Streamline debugfs operations
| * 1bb38ef697e4 regulator: core: Fix more error checking for debugfs_create_dir()
| * 6ca0c94f2b02 nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect()
| * 66a1be74230b nfc: constify several pointers to u8, char and sk_buff
| * fea2104e752a wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan()
| * bc5099512057 spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG
| * f394d204d640 samples/bpf: Fix buffer overflow in tcp_basertt
| * 90e3c1017757 wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
| * be3989d93be3 wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation
| * 717e4277ddf7 ima: Fix build warnings
| * 8430a8e8e854 pstore/ram: Add check for kstrdup
| * 540cdd720772 evm: Complete description of evm_inode_setattr()
| * 568b73406d93 ARM: 9303/1: kprobes: avoid missing-declaration warnings
| * ba6da16eefb1 powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
| * c97460ce1f7c PM: domains: fix integer overflow issues in genpd_parse_state()
| * 54cc10a0f4b0 clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
| * 38ca169d66c3 clocksource/drivers/cadence-ttc: Use ttc driver as platform driver
| * 8af3b8d770da tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode().
| * 7b0c664541cd irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
| * d244927e350e irqchip/jcore-aic: Kill use of irq_create_strict_mappings()
| * be481881753b md/raid10: fix io loss while replacement replace rdev
| * 45fa023b3334 md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
| * 31c805a44b75 md/raid10: fix wrong setting of max_corr_read_errors
| * 283f4a63fee3 md/raid10: fix overflow of md/safe_mode_delay
| * b0b971fe7d61 md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
| * 484104918305 x86/resctrl: Only show tasks' pid in current pid namespace
| * 7206eca1ac44 x86/resctrl: Use is_closid_match() in more places
| * 6f2bb37da468 bgmac: fix *initial* chip reset to support BCM5358
| * 794bfb6fd992 drm/amdgpu: Validate VM ioctl flags.
| * 2a4cfd5b0354 scripts/tags.sh: Resolve gtags empty index generation
| * fff826d665f9 drm/i915: Initialise outparam for error return from wait_for_register
| * 99036f1aed7e HID: wacom: Use ktime_t rather than int when dealing with timestamps
| * 815c95d82b79 fbdev: imsttfb: Fix use after free bug in imsttfb_probe
| * a7c8d2f3753d video: imsttfb: check for ioremap() failures
| * f042d80a631f x86/smp: Use dedicated cache-line for mwait_play_dead()
| * 23f98fe887ce gfs2: Don't deref jdesc in evict
* | 90de3523212d Merge 5.4.250 into android12-5.4-lts
|/
* 27745d94abe1 Linux 5.4.250
* 00363ef30797 x86/cpu/amd: Add a Zenbleed fix
* 92b292bed627 x86/cpu/amd: Move the errata checking functionality up
* 4d4112e2845c x86/microcode/AMD: Load late on both threads too
Change-Id: Idb451075400c8d7af3fff15efd62c5da505e3b32
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
diff --git a/arch/arm64/include/asm/efi.h b/arch/arm64/include/asm/efi.h
index 743a1d3..11b8e3b 100644
--- a/arch/arm64/include/asm/efi.h
+++ b/arch/arm64/include/asm/efi.h
@@ -25,7 +25,7 @@
({ \
efi_virtmap_load(); \
__efi_fpsimd_begin(); \
- spin_lock(&efi_rt_lock); \
+ raw_spin_lock(&efi_rt_lock); \
})
#define arch_efi_call_virt(p, f, args...) \
@@ -37,12 +37,12 @@
#define arch_efi_call_virt_teardown() \
({ \
- spin_unlock(&efi_rt_lock); \
+ raw_spin_unlock(&efi_rt_lock); \
__efi_fpsimd_end(); \
efi_virtmap_unload(); \
})
-extern spinlock_t efi_rt_lock;
+extern raw_spinlock_t efi_rt_lock;
efi_status_t __efi_rt_asm_wrapper(void *, const char *, ...);
#define ARCH_EFI_IRQ_FLAGS_MASK (PSR_D_BIT | PSR_A_BIT | PSR_I_BIT | PSR_F_BIT)
diff --git a/arch/arm64/kernel/efi.c b/arch/arm64/kernel/efi.c
index ba5358f..4d5e387e 100644
--- a/arch/arm64/kernel/efi.c
+++ b/arch/arm64/kernel/efi.c
@@ -144,7 +144,7 @@
return s;
}
-DEFINE_SPINLOCK(efi_rt_lock);
+DEFINE_RAW_SPINLOCK(efi_rt_lock);
asmlinkage u64 *efi_rt_stack_top __ro_after_init;
diff --git a/block/blk-core.c b/block/blk-core.c
index 5646c70..711d720 100644
--- a/block/blk-core.c
+++ b/block/blk-core.c
@@ -120,7 +120,6 @@
rq->internal_tag = -1;
rq->start_time_ns = ktime_get_ns();
rq->part = NULL;
- refcount_set(&rq->ref, 1);
blk_crypto_rq_set_defaults(rq);
}
EXPORT_SYMBOL(blk_rq_init);
diff --git a/block/blk-flush.c b/block/blk-flush.c
index 672d04a..e31a409 100644
--- a/block/blk-flush.c
+++ b/block/blk-flush.c
@@ -327,6 +327,14 @@
flush_rq->rq_flags |= RQF_FLUSH_SEQ;
flush_rq->rq_disk = first_rq->rq_disk;
flush_rq->end_io = flush_end_io;
+ /*
+ * Order WRITE ->end_io and WRITE rq->ref, and its pair is the one
+ * implied in refcount_inc_not_zero() called from
+ * blk_mq_find_and_get_req(), which orders WRITE/READ flush_rq->ref
+ * and READ flush_rq->end_io
+ */
+ smp_wmb();
+ refcount_set(&flush_rq->ref, 1);
blk_flush_queue_rq(flush_rq, false);
}
diff --git a/mm/kfence/Makefile b/mm/kfence/Makefile
index 6872cd5..cb2bcf7 100644
--- a/mm/kfence/Makefile
+++ b/mm/kfence/Makefile
@@ -2,5 +2,5 @@
obj-$(CONFIG_KFENCE) := core.o report.o
-CFLAGS_kfence_test.o := -g -fno-omit-frame-pointer -fno-optimize-sibling-calls
+CFLAGS_kfence_test.o := -fno-omit-frame-pointer -fno-optimize-sibling-calls
obj-$(CONFIG_KFENCE_KUNIT_TEST) += kfence_test.o
diff --git a/net/sched/sch_hfsc.c b/net/sched/sch_hfsc.c
index 92ad411..2af4adb 100644
--- a/net/sched/sch_hfsc.c
+++ b/net/sched/sch_hfsc.c
@@ -1012,6 +1012,10 @@
if (parent == NULL)
return -ENOENT;
}
+ if (!(parent->cl_flags & HFSC_FSC) && parent != &q->root) {
+ NL_SET_ERR_MSG(extack, "Invalid parent - parent class must have FSC");
+ return -EINVAL;
+ }
if (classid == 0 || TC_H_MAJ(classid ^ sch->handle) != 0)
return -EINVAL;
diff --git a/net/sched/sch_plug.c b/net/sched/sch_plug.c
index cbc2ebc..339990b 100644
--- a/net/sched/sch_plug.c
+++ b/net/sched/sch_plug.c
@@ -210,7 +210,7 @@
.priv_size = sizeof(struct plug_sched_data),
.enqueue = plug_enqueue,
.dequeue = plug_dequeue,
- .peek = qdisc_peek_head,
+ .peek = qdisc_peek_dequeued,
.init = plug_init,
.change = plug_change,
.reset = qdisc_reset_queue,
diff --git a/net/sched/sch_qfq.c b/net/sched/sch_qfq.c
index 34a54dc..6e9e340 100644
--- a/net/sched/sch_qfq.c
+++ b/net/sched/sch_qfq.c
@@ -975,10 +975,13 @@
}
/* Dequeue head packet of the head class in the DRR queue of the aggregate. */
-static void agg_dequeue(struct qfq_aggregate *agg,
- struct qfq_class *cl, unsigned int len)
+static struct sk_buff *agg_dequeue(struct qfq_aggregate *agg,
+ struct qfq_class *cl, unsigned int len)
{
- qdisc_dequeue_peeked(cl->qdisc);
+ struct sk_buff *skb = qdisc_dequeue_peeked(cl->qdisc);
+
+ if (!skb)
+ return NULL;
cl->deficit -= (int) len;
@@ -988,6 +991,8 @@
cl->deficit += agg->lmax;
list_move_tail(&cl->alist, &agg->active);
}
+
+ return skb;
}
static inline struct sk_buff *qfq_peek_skb(struct qfq_aggregate *agg,
@@ -1133,11 +1138,18 @@
if (!skb)
return NULL;
- qdisc_qstats_backlog_dec(sch, skb);
sch->q.qlen--;
+
+ skb = agg_dequeue(in_serv_agg, cl, len);
+
+ if (!skb) {
+ sch->q.qlen++;
+ return NULL;
+ }
+
+ qdisc_qstats_backlog_dec(sch, skb);
qdisc_bstats_update(sch, skb);
- agg_dequeue(in_serv_agg, cl, len);
/* If lmax is lowered, through qfq_change_class, for a class
* owning pending packets with larger size than the new value
* of lmax, then the following condition may hold.
diff --git a/net/unix/af_unix.c b/net/unix/af_unix.c
index f966b64..baf0af4 100644
--- a/net/unix/af_unix.c
+++ b/net/unix/af_unix.c
@@ -1979,6 +1979,7 @@
if (false) {
alloc_skb:
+ spin_unlock(&other->sk_receive_queue.lock);
unix_state_unlock(other);
mutex_unlock(&unix_sk(other)->iolock);
newskb = sock_alloc_send_pskb(sk, 0, 0, flags & MSG_DONTWAIT,
@@ -2018,6 +2019,7 @@
init_scm = false;
}
+ spin_lock(&other->sk_receive_queue.lock);
skb = skb_peek_tail(&other->sk_receive_queue);
if (tail && tail == skb) {
skb = newskb;
@@ -2048,14 +2050,11 @@
refcount_add(size, &sk->sk_wmem_alloc);
if (newskb) {
- err = unix_scm_to_skb(&scm, skb, false);
- if (err)
- goto err_state_unlock;
- spin_lock(&other->sk_receive_queue.lock);
+ unix_scm_to_skb(&scm, skb, false);
__skb_queue_tail(&other->sk_receive_queue, newskb);
- spin_unlock(&other->sk_receive_queue.lock);
}
+ spin_unlock(&other->sk_receive_queue.lock);
unix_state_unlock(other);
mutex_unlock(&unix_sk(other)->iolock);
