CHANGELOG 216-218-LTS

Merge 5.10.218 into android12-5.10-lts

Changes in 5.10.218

1. pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()

2. x86/xen: Drop USERGS_SYSRET64 paravirt call

3. Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"

4. net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access

5. net: bcmgenet: synchronize UMAC_CMD access

6. ima: fix deadlock when traversing "ima_default_rules".

7. netlink: annotate lockless accesses to nlk->max_recvmsg_len

8. KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection

9. firmware: arm_scmi: Harden accesses to the reset domains

10. mptcp: ensure snd_nxt is properly initialized on connect

11. btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()

12. drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()

13. usb: typec: ucsi: displayport: Fix potential deadlock

14. serial: kgdboc: Fix NMI-safety problems from keyboard reset code

15. docs: kernel_include.py: Cope with docutils 0.21

Linux 5.10.218

=====================

Merge 5.10.217 into android12-5.10-lts

Changes in 5.10.217

1. dmaengine: pl330: issue_pending waits until WFP state

2. dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"

3. wifi: nl80211: don't free NULL coalescing rule

4. eeprom: at24: Use dev_err_probe for nvmem register failure

5. eeprom: at24: Probe for DDR3 thermal sensor in the SPD case

6. eeprom: at24: fix memory corruption race condition

7. pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T

8. pinctrl/meson: fix typo in PDM's pin name

9. pinctrl: core: delete incorrect free in pinctrl_enable()

10. pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic

11. pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback

12. pinctrl: mediatek: paris: Rework support for

13. PIN_CONFIG_{INPUT,OUTPUT}_ENABLE

14. sunrpc: add a struct rpc_stats arg to rpc_create_args

15. nfs: expose /proc/net/sunrpc/nfs in net namespaces

16. nfs: make the rpc_stat per net namespace

17. nfs: Handle error of rpc_proc_register() in nfs_net_init().

18. power: rt9455: hide unused rt9455_boost_voltage_values

19. pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()

20. regulator: mt6360: De-capitalize devicetree regulator subnodes

21. s390/mm: Fix storage key clearing for guest huge pages

22. s390/mm: Fix clearing storage keys for huge pages

23. bna: ensure the copied buf is NUL terminated

24. octeontx2-af: avoid off-by-one read from userspace

25. nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().

26. net l2tp: drop flow hash on forward

27. s390/vdso: Add CFI for RA register to asm macro vdso_func

28. net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()

29. net: qede: use return from qede_parse_flow_attr() for flower

30. net: qede: use return from qede_parse_flow_attr() for flow_spec

31. net: qede: use return from qede_parse_actions()

32. ASoC: Fix 7/8 spaces indentation in Kconfig

33. ASoC: meson: cards: select SND_DYNAMIC_MINORS

34. cxgb4: Properly lock TX queue for the selftest.

35. net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341

36. net: bridge: fix multicast-to-unicast with fraglist GSO

37. net: core: reject skb_copy(_expand) for fraglist GSO skbs

38. tipc: fix a possible memleak in tipc_buf_append

39. net: gro: add flush check in udp_gro_receive_segment

40. clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change

41. KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id

42. KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()

43. scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic

44. gfs2: Fix invalid metadata access in punch_hole

45. wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc

46. wifi: cfg80211: fix rdev_dump_mpp() arguments order

47. net: mark racy access on sk->sk_rcvbuf

48. scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload

49. btrfs: return accurate error code on open failure in open_fs_devices()

50. ALSA: line6: Zero-initialize message buffers

51. net: bcmgenet: Reset RBUF on first open

52. ata: sata_gemini: Check clk_enable() result

53. firewire: ohci: mask bus reset interrupts between ISR and bottom half

54. tools/power turbostat: Fix added raw MSR output

55. tools/power turbostat: Fix Bzy_MHz documentation typo

56. btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve

57. btrfs: always clear PERTRANS metadata during commit

58. scsi: target: Fix SELinux error when systemd-modules loads the target module

59. blk-iocost: avoid out of bounds shift

60. gpu: host1x: Do not setup DMA for virtual devices

61. MIPS: scall: Save thread_info.syscall unconditionally on entry

62. selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior

63. fs/9p: only translate RWX permissions for plain 9P2000

64. fs/9p: translate O_TRUNC into OTRUNC

65. 9p: explicitly deny setlease attempts

66. gpio: wcove: Use -ENOTSUPP consistently

67. gpio: crystalcove: Use -ENOTSUPP consistently

68. clk: Don't hold prepare_lock when calling kref_put()

69. fs/9p: drop inodes immediately on non-.L too

70. drm/nouveau/dp: Don't probe eDP ports twice harder

71. net:usb:qmi_wwan: support Rolling modules

72. xfrm: Preserve vlan tags for transport mode software GRO

73. tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets

74. tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().

75. Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout

76. Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout

77. rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation

78. hwmon: (corsair-cpro) Use a separate buffer for sending commands

79. hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()

80. hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock

81. phonet: fix rtm_phonet_notify() skb allocation

82. kcov: Remove kcov include from sched.h and move it to its users.

83. net: bridge: fix corrupted ethernet header on multicast-to-unicast

84. ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()

85. net: hns3: use appropriate barrier function after setting a bit value

86. btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()

87. firewire: nosy: ensure user_length is taken into account when fetching packet contents

88. arm64: dts: qcom: Fix 'interrupt-map' parent address cells

89. usb: typec: ucsi: Check for notifications after init

90. usb: typec: ucsi: Fix connector check on init

91. usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device

92. usb: ohci: Prevent missed ohci interrupts

93. usb: gadget: composite: fix OS descriptors w_value logic

94. usb: gadget: f_fs: Fix a race condition when processing setup packets.

95. usb: xhci-plat: Don't include xhci.h

96. usb: dwc3: core: Prevent phy suspend during init

97. ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU

98. iio:imu: adis16475: Fix sync mode setting

99. iio: accel: mxc4005: Interrupt handling fixes

100. tipc: fix UAF in error path

101. net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()

102. ASoC: tegra: Fix DSPK 16-bit playback

103. dyndbg: fix old BUG_ON in >control parser

104. mei: me: add lunar lake point M DID

105. drm/vmwgfx: Fix invalid reads in fence signaled events

106. net: fix out-of-bounds access in ops_init

107. hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us

108. regulator: core: fix debugfs creation regression

109. keys: Fix overwrite of key expiration on instantiation

110. md: fix kmemleak of rdev->serial

Linux 5.10.217

=====================

Merge 5.10.216 into android12-5.10-lts

Changes in 5.10.216

1. batman-adv: Avoid infinite loop trying to resize local TT

2. Bluetooth: Fix memory leak in hci_req_sync_complete()

3. media: cec: core: remove length check of Timer Status

4. nouveau: fix function cast warning

5. net: openvswitch: fix unwanted error log on timeout policy probing

6. u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file

7. xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING

8. geneve: fix header validation in geneve[6]_xmit_skb

9. octeontx2-af: Fix NIX SQ mode and BP config

10. ipv6: fib: hide unused 'pn' variable

11. ipv4/route: avoid unused-but-set-variable warning

12. ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr

13. Bluetooth: SCO: Fix not validating setsockopt user input

14. netfilter: complete validation of user input

15. net/mlx5: Properly link new fs rules into the tree

16. af_unix: Do not use atomic ops for unix_sk(sk)->inflight.

17. af_unix: Fix garbage collector racing against connect()

18. net: ena: Fix potential sign extension issue

19. net: ena: Wrong missing IO completions check order

20. net: ena: Fix incorrect descriptor free behavior

21. iommu/vt-d: Allocate local memory for page request queue

22. mailbox: imx: fix suspend failue

23. btrfs: qgroup: correctly model root qgroup rsv in convert

24. drm/client: Fully protect modes[] with dev->mode_config.mutex

25. vhost: Add smp_rmb() in vhost_vq_avail_empty()

26. x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n

27. selftests: timers: Fix abs() warning in posix_timers test

28. x86/apic: Force native_apic_mem_read() to use the MOV instruction

29. irqflags: Explicitly ignore lockdep_hrtimer_exit() argument

30. btrfs: record delayed inode root in transaction

31. riscv: Enable per-task stack canaries

32. riscv: process: Fix kernel gp leakage

33. selftests/ftrace: Limit length in subsystem-enable tests

34. kprobes: Fix possible use-after-free issue on kprobe registration

35. Revert "tracing/trigger: Fix to return error if failed to alloc snapshot"

36. netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()

37. netfilter: nft_set_pipapo: do not free live element

38. tun: limit printing rate when illegal packet received by tun dev

39. RDMA/rxe: Fix the problem "mutex_destroy missing"

40. RDMA/cm: Print the old state when cm_destroy_id gets timeout

41. RDMA/mlx5: Fix port number for counter query in multi-port configuration

42. drm: nv04: Fix out of bounds access

43. drm/panel: visionox-rm69299: don't unregister DSI device

44. clk: Remove prepare_lock hold assertion in __clk_release()

45. clk: Mark 'all_lists' as const

46. clk: remove extra empty line

47. clk: Print an info line before disabling unused clocks

48. clk: Initialize struct clk_core kref earlier

49. clk: Get runtime PM before walking tree during disable_unused

50. x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ

51. binder: check offset alignment in binder_get_object()

52. thunderbolt: Avoid notify PM core about runtime PM resume

53. thunderbolt: Fix wake configurations after device unplug

54. comedi: vmk80xx: fix incomplete endpoint checking

55. serial/pmac_zilog: Remove flawed mitigation for rx irq flood

56. USB: serial: option: add Fibocom FM135-GL variants

57. USB: serial: option: add support for Fibocom FM650/FG650

58. USB: serial: option: add Lonsung U8300/U9300 product

59. USB: serial: option: support Quectel EM060K sub-models

60. USB: serial: option: add Rolling RW101-GL and RW135-GL support

61. USB: serial: option: add Telit FN920C04 rmnet compositions

62. Revert "usb: cdc-wdm: close race between read and workqueue"

63. usb: dwc2: host: Fix dereference issue in DDMA completion flow.

64. usb: Disable USB3 LPM at shutdown

65. mei: me: disable RPL-S on SPS and IGN firmwares

66. speakup: Avoid crash on very long word

67. fs: sysfs: Fix reference leak in sysfs_break_active_protection()

68. init/main.c: Fix potential static_command_line memory overflow

69. drm/amdgpu: validate the parameters of bo mapping operations more clearly

70. nouveau: fix instmem race condition around ptr stores

71. nilfs2: fix OOB in nilfs_set_de_type

72. arm64: dts: rockchip: fix alphabetical ordering RK3399 puma

73. arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma

74. arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts

75. arm64: dts: mediatek: mt7622: add support for coherent DMA

76. arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch

77. arm64: dts: mediatek: mt7622: fix clock controllers

78. arm64: dts: mediatek: mt7622: fix IR nodename

79. arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"

80. arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block

81. arm64: dts: mediatek: mt2712: fix validation errors

82. ARC: [plat-hsdk]: Remove misplaced interrupt-cells property

83. wifi: iwlwifi: mvm: remove old PASN station when adding a new one

84. vxlan: drop packets from invalid src-address

85. mlxsw: core: Unregister EMAD trap using FORWARD action

86. NFC: trf7970a: disable all regulators on removal

87. ipv4: check for NULL idev in ip_route_use_hint()

88. net: usb: ax88179_178a: stop lying about skb->truesize

89. net: gtp: Fix Use-After-Free in gtp_dellink

90. ipvs: Fix checksumming on GSO of SCTP packets

91. net: openvswitch: Fix Use-After-Free in ovs_ct_exit

92. mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work

93. mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update

94. mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash

95. mlxsw: spectrum_acl_tcam: Rate limit error message

96. mlxsw: spectrum_acl_tcam: Fix memory leak during rehash

97. mlxsw: spectrum_acl_tcam: Fix warning during rehash

98. mlxsw: spectrum_acl_tcam: Fix incorrect list API usage

99. mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work

100. netfilter: nf_tables: honor table dormant flag from netdev release event path

101. i40e: Do not use WQ_MEM_RECLAIM flag for workqueue

102. i40e: Report MFS in decimal base instead of hex

103. iavf: Fix TC config comparison with existing adapter TC config

104. net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets

105. af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().

106. serial: core: Provide port lock wrappers

107. serial: mxs-auart: add spinlock around changing cts state

108. Revert "crypto: api - Disallow identical driver names"

109. net/mlx5e: Fix a race in command alloc flow

110. tracing: Show size of requested perf buffer

111. tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together

112. PM / devfreq: Fix buffer overflow in trans_stat_show

113. Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()

114. Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853

115. btrfs: fix information leak in btrfs_ioctl_logical_to_ino()

116. cpu: Re-enable CPU mitigations by default for !X86 architectures

117. arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma

118. drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3

119. drm/amdgpu: Fix leak when GPU memory allocation fails

120. irqchip/gic-v3-its: Prevent double free on error

121. ethernet: Add helper for assigning packet type when dest address does not match device address

122. net: b44: set pause params only when interface is up

123. stackdepot: respect __GFP_NOLOCKDEP allocation flag

124. mtd: diskonchip: work around ubsan link failure

125. tcp: Clean up kernel listener's reqsk in inet_twsk_purge()

126. tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()

127. dmaengine: owl: fix register access functions

128. idma64: Don't try to serve interrupts when device is powered off

129. dma: xilinx_dpdma: Fix locking

130. riscv: fix VMALLOC_START definition

131. riscv: Fix TASK_SIZE on 64-bit NOMMU

132. i2c: smbus: fix NULL function pointer dereference

133. HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up

134. bounds: Use the right numbe

r of bits for power-of-two CONFIG_NR_CPUS

135. udp: preserve the connected status if only UDP cmsg

136. serial: core: fix kernel-doc for uart_port_unlock_irqrestore()

137. riscv: Disable STACKPROTECTOR_PER_TASK if GCC_PLUGIN_RANDSTRUCT is enabled

Linux 5.10.216