[5.16,0763/1017] block, bfq: dont move oom_bfqq

From: Yu Kuai <yukuai3@huawei.com>

From: Yu Kuai <yukuai3@huawei.com>

[ Upstream commit 8410f70977734f21b8ed45c37e925d311dfda2e7 ]

Our test report a UAF:

[ 2073.019181] ==================================================================
[ 2073.019188] BUG: KASAN: use-after-free in __bfq_put_async_bfqq+0xa0/0x168
[ 2073.019191] Write of size 8 at addr ffff8000ccf64128 by task rmmod/72584
[ 2073.019192]
[ 2073.019196] CPU: 0 PID: 72584 Comm: rmmod Kdump: loaded Not tainted 4.19.90-yk #5
[ 2073.019198] Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015
[ 2073.019200] Call trace:
[ 2073.019203]  dump_backtrace+0x0/0x310
[ 2073.019206]  show_stack+0x28/0x38
[ 2073.019210]  dump_stack+0xec/0x15c
[ 2073.019216]  print_address_description+0x68/0x2d0
[ 2073.019220]  kasan_report+0x238/0x2f0
[ 2073.019224]  __asan_store8+0x88/0xb0
[ 2073.019229]  __bfq_put_async_bfqq+0xa0/0x168
[ 2073.019233]  bfq_put_async_queues+0xbc/0x208
[ 2073.019236]  bfq_pd_offline+0x178/0x238
[ 2073.019240]  blkcg_deactivate_policy+0x1f0/0x420
[ 2073.019244]  bfq_exit_queue+0x128/0x178
[ 2073.019249]  blk_mq_exit_sched+0x12c/0x160
[ 2073.019252]  elevator_exit+0xc8/0xd0
[ 2073.019256]  blk_exit_queue+0x50/0x88
[ 2073.019259]  blk_cleanup_queue+0x228/0x3d8
[ 2073.019267]  null_del_dev+0xfc/0x1e0 [null_blk]
[ 2073.019274]  null_exit+0x90/0x114 [null_blk]
[ 2073.019278]  __arm64_sys_delete_module+0x358/0x5a0
[ 2073.019282]  el0_svc_common+0xc8/0x320
[ 2073.019287]  el0_svc_handler+0xf8/0x160
[ 2073.019290]  el0_svc+0x10/0x218
[ 2073.019291]
[ 2073.019294] Allocated by task 14163:
[ 2073.019301]  kasan_kmalloc+0xe0/0x190
[ 2073.019305]  kmem_cache_alloc_node_trace+0x1cc/0x418
[ 2073.019308]  bfq_pd_alloc+0x54/0x118
[ 2073.019313]  blkcg_activate_policy+0x250/0x460
[ 2073.019317]  bfq_create_group_hierarchy+0x38/0x110
[ 2073.019321]  bfq_init_queue+0x6d0/0x948
[ 2073.019325]  blk_mq_init_sched+0x1d8/0x390
[ 2073.019330]  elevator_switch_mq+0x88/0x170
[ 2073.019334]  elevator_switch+0x140/0x270
[ 2073.019338]  elv_iosched_store+0x1a4/0x2a0
[ 2073.019342]  queue_attr_store+0x90/0xe0
[ 2073.019348]  sysfs_kf_write+0xa8/0xe8
[ 2073.019351]  kernfs_fop_write+0x1f8/0x378
[ 2073.019359]  __vfs_write+0xe0/0x360
[ 2073.019363]  vfs_write+0xf0/0x270
[ 2073.019367]  ksys_write+0xdc/0x1b8
[ 2073.019371]  __arm64_sys_write+0x50/0x60
[ 2073.019375]  el0_svc_common+0xc8/0x320
[ 2073.019380]  el0_svc_handler+0xf8/0x160
[ 2073.019383]  el0_svc+0x10/0x218
[ 2073.019385]
[ 2073.019387] Freed by task 72584:
[ 2073.019391]  __kasan_slab_free+0x120/0x228
[ 2073.019394]  kasan_slab_free+0x10/0x18
[ 2073.019397]  kfree+0x94/0x368
[ 2073.019400]  bfqg_put+0x64/0xb0
[ 2073.019404]  bfqg_and_blkg_put+0x90/0xb0
[ 2073.019408]  bfq_put_queue+0x220/0x228
[ 2073.019413]  __bfq_put_async_bfqq+0x98/0x168
[ 2073.019416]  bfq_put_async_queues+0xbc/0x208
[ 2073.019420]  bfq_pd_offline+0x178/0x238
[ 2073.019424]  blkcg_deactivate_policy+0x1f0/0x420
[ 2073.019429]  bfq_exit_queue+0x128/0x178
[ 2073.019433]  blk_mq_exit_sched+0x12c/0x160
[ 2073.019437]  elevator_exit+0xc8/0xd0
[ 2073.019440]  blk_exit_queue+0x50/0x88
[ 2073.019443]  blk_cleanup_queue+0x228/0x3d8
[ 2073.019451]  null_del_dev+0xfc/0x1e0 [null_blk]
[ 2073.019459]  null_exit+0x90/0x114 [null_blk]
[ 2073.019462]  __arm64_sys_delete_module+0x358/0x5a0
[ 2073.019467]  el0_svc_common+0xc8/0x320
[ 2073.019471]  el0_svc_handler+0xf8/0x160
[ 2073.019474]  el0_svc+0x10/0x218
[ 2073.019475]
[ 2073.019479] The buggy address belongs to the object at ffff8000ccf63f00
 which belongs to the cache kmalloc-1024 of size 1024
[ 2073.019484] The buggy address is located 552 bytes inside of
 1024-byte region [ffff8000ccf63f00, ffff8000ccf64300)
[ 2073.019486] The buggy address belongs to the page:
[ 2073.019492] page:ffff7e000333d800 count:1 mapcount:0 mapping:ffff8000c0003a00 index:0x0 compound_mapcount: 0
[ 2073.020123] flags: 0x7ffff0000008100(slab|head)
[ 2073.020403] raw: 07ffff0000008100 ffff7e0003334c08 ffff7e00001f5a08 ffff8000c0003a00
[ 2073.020409] raw: 0000000000000000 00000000001c001c 00000001ffffffff 0000000000000000
[ 2073.020411] page dumped because: kasan: bad access detected
[ 2073.020412]
[ 2073.020414] Memory state around the buggy address:
[ 2073.020420]  ffff8000ccf64000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2073.020424]  ffff8000ccf64080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2073.020428] >ffff8000ccf64100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2073.020430]                                   ^
[ 2073.020434]  ffff8000ccf64180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2073.020438]  ffff8000ccf64200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2073.020439] ==================================================================

The same problem exist in mainline as well.

This is because oom_bfqq is moved to a non-root group, thus root_group
is freed earlier.

Thus fix the problem by don't move oom_bfqq.

Signed-off-by: Yu Kuai <yukuai3@huawei.com>
Reviewed-by: Jan Kara <jack@suse.cz>
Acked-by: Paolo Valente <paolo.valente@linaro.org>
Link: https://lore.kernel.org/r/20220129015924.3958918-4-yukuai3@huawei.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
 block/bfq-cgroup.c | 6 ++++++
 1 file changed, 6 insertions(+)

Message ID	20220405070416.907181498@linuxfoundation.org
State	Superseded
Headers	show Return-Path: <stable-owner@kernel.org> From: Greg Kroah-Hartman <gregkh@linuxfoundation.org> To: linux-kernel@vger.kernel.org Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>, stable@vger.kernel.org, Yu Kuai <yukuai3@huawei.com>, Jan Kara <jack@suse.cz>, Paolo Valente <paolo.valente@linaro.org>, Jens Axboe <axboe@kernel.dk>, Sasha Levin <sashal@kernel.org> Subject: [PATCH 5.16 0763/1017] block, bfq: dont move oom_bfqq Date: Tue, 5 Apr 2022 09:27:56 +0200 Message-Id: <20220405070416.907181498@linuxfoundation.org> In-Reply-To: <20220405070354.155796697@linuxfoundation.org> References: <20220405070354.155796697@linuxfoundation.org> User-Agent: quilt/0.66 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Precedence: bulk
Series	None \| expand [5.16,0002/1017] USB: serial: pl2303: add IBM device IDs [5.16,0005/1017] USB: serial: simple: add Nokia phone driver [5.16,0008/1017] HID: Add support for open wheel and no attachment to T300 [5.16,0009/1017] xfrm: fix tunnel model fragmentation behavior [5.16,0010/1017] ARM: mstar: Select HAVE_ARM_ARCH_TIMER [5.16,0011/1017] virtio_console: break out of buf poll on remove [5.16,0016/1017] spi: Fix invalid sgs value [5.16,0017/1017] net:mcf8390: Use platform_get_irq() to get the interrupt [5.16,0022/1017] net: dsa: microchip: add spi_device_id tables [5.16,0024/1017] selftests: vm: fix clang build error multiple output files [5.16,0026/1017] drm/amdgpu: move PX checking into amdgpu_device_ip_early_init [5.16,0028/1017] iommu/iova: Improve 32-bit free space estimate [5.16,0030/1017] block: ensure plug merging checks the correct queue at least once [5.16,0031/1017] block: flush plug based on hardware and software queue order [5.16,0033/1017] USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c [5.16,0040/1017] mei: avoid iterator usage outside of list_for_each_entry [5.16,0043/1017] docs: sphinx/requirements: Limit jinja2<3.1 [5.16,0044/1017] coresight: Fix TRCCONFIGR.QE sysfs interface [5.16,0049/1017] iio: inkern: apply consumer scale when no channel scale is available [5.16,0050/1017] iio: inkern: make a best effort on offset calculation [5.16,0051/1017] greybus: svc: fix an error handling bug in gb_svc_hello() [5.16,0052/1017] clk: rockchip: re-add rational best approximation algorithm to the fractional di... [5.16,0053/1017] clk: uniphier: Fix fixed-rate initialization [5.16,0056/1017] cifs: we do not need a spinlock around the tree access during umount [5.16,0057/1017] KEYS: fix length validation in keyctl_pkey_params_get_2() [5.16,0059/1017] KEYS: asymmetric: properly validate hash_algo and encoding [5.16,0061/1017] Documentation: update stable tree link [5.16,0062/1017] firmware: stratix10-svc: add missing callback parameter on RSU [5.16,0064/1017] HID: intel-ish-hid: Use dma_alloc_coherent for firmware update [5.16,0065/1017] SUNRPC: avoid race between mod_timer() and del_timer_sync() [5.16,0066/1017] SUNRPC: Do not dereference non-socket transports in sysfs [5.16,0067/1017] NFS: NFSv2/v3 clients should never be setting NFS_CAP_XATTR [5.16,0071/1017] f2fs: quota: fix loop condition at f2fs_quota_sync() [5.16,0073/1017] remoteproc: Fix count check in rproc_coredump_write() [5.16,0076/1017] pinctrl: samsung: drop pin banks references on error paths [5.16,0077/1017] net: bnxt_ptp: fix compilation error [5.16,0079/1017] mtd: rawnand: protect access to rawnand devices while in suspend [5.16,0080/1017] can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path [5.16,0084/1017] jffs2: fix memory leak in jffs2_do_mount_fs [5.16,0085/1017] jffs2: fix memory leak in jffs2_scan_medium [5.16,0086/1017] mm: fs: fix lru_cache_disabled race in bh_lru [5.16,0091/1017] scsi: core: sd: Add silence_suspend flag to suppress some PM messages [5.16,0092/1017] scsi: ufs: Fix runtime PM messages never-ending cycle [5.16,0093/1017] scsi: scsi_transport_fc: Fix FPIN Link Integrity statistics counters [5.16,0095/1017] qed: display VF trust config [5.16,0096/1017] qed: validate and restrict untrusted VFs vlan promisc mode [5.16,0098/1017] riscv: Fix fill_callchain return value [5.16,0100/1017] Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" [5.16,0101/1017] cifs: do not skip link targets when an I/O fails [5.16,0105/1017] ALSA: hda: Avoid unsol event during RPM suspending [5.16,0106/1017] ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock [5.16,0108/1017] rtc: mc146818-lib: fix locking in mc146818_set_time [5.16,0112/1017] drm/simpledrm: Add "panel orientation" property on non-upright mounted LCD panels [5.16,0114/1017] mm: madvise: return correct bytes advised with process_madvise [5.16,0115/1017] Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" [5.16,0116/1017] mm,hwpoison: unmap poisoned page before invalidation [5.16,0122/1017] dm integrity: set journal entry unused when shrinking device [5.16,0124/1017] drbd: fix potential silent data corruption [5.16,0125/1017] can: isotp: sanitize CAN ID checks in isotp_bind() [5.16,0127/1017] arm64: signal: nofpsimd: Do not allocate fp/simd context when not available [5.16,0129/1017] arm64: dts: qcom: sm8250: Fix MSI IRQ for PCIe1 and PCIe2 [5.16,0131/1017] arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs [5.16,0132/1017] arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs [5.16,0136/1017] Revert "ACPI: Pass the same capabilities to the _OSC regardless of the query flag" [5.16,0137/1017] ACPI: properties: Consistently return -ENOENT if there are no more references [5.16,0138/1017] coredump: Also dump first pages of non-executable ELF libraries [5.16,0140/1017] ext4: fix fs corruption when tring to remove a non-empty directory with IO error [5.16,0144/1017] mailbox: tegra-hsp: Flush whole channel [5.16,0146/1017] block: fix rq-qos breakage from skipping rq_qos_done_bio() [5.16,0147/1017] block: limit request dispatch loop duration [5.16,0149/1017] drm/edid: check basic audio support on CEA extension block [5.16,0151/1017] video: fbdev: sm712fb: Fix crash in smtcfb_read() [5.16,0152/1017] video: fbdev: atari: Atari 2 bpp (STe) palette bugfix [5.16,0153/1017] rfkill: make new event layout opt-in [5.16,0155/1017] ARM: dts: at91: sama5d2: Fix PMERRLOC resource size [5.16,0158/1017] ARM: dts: exynos: add missing HDMI supplies on SMDK5420 [5.16,0159/1017] mgag200 fix memmapsl configuration in GCTL6 register [5.16,0162/1017] thermal: int340x: Increase bitmap size [5.16,0163/1017] lib/raid6/test: fix multiple definition linking error [5.16,0165/1017] crypto: rsa-pkcs1pad - only allow with rsa [5.16,0170/1017] PM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove() [5.16,0171/1017] DEC: Limit PMAX memory probing to R3k systems [5.16,0172/1017] media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC [5.16,0173/1017] media: omap3isp: Use struct_group() for memcpy() region [5.16,0175/1017] media: venus: hfi_cmds: List HDR10 property as unsupported for v1 and v3 [5.16,0178/1017] media: davinci: vpif: fix unbalanced runtime PM enable [5.16,0179/1017] media: davinci: vpif: fix use-after-free on driver unbind [5.16,0182/1017] btrfs: verify the tranisd of the to-be-written dirty extent buffer [5.16,0183/1017] xtensa: define update_mmu_tlb function [5.16,0185/1017] xtensa: fix xtensa_wsr always writing 0 [5.16,0186/1017] drm/syncobj: flatten dma_fence_chains on transfer [5.16,0188/1017] drm/nouveau/backlight: Just set all backlight types as RAW [5.16,0192/1017] brcmfmac: pcie: Declare missing firmware files in pcie.c [5.16,0195/1017] drm/i915/opregion: check port number bounds for SWSCI display power state [5.16,0196/1017] drm/i915/gem: add missing boundary check in vm_access [5.16,0197/1017] PCI: imx6: Allow to probe when dw_pcie_wait_for_link() fails [5.16,0202/1017] selinux: check return value of sel_make_avc_files [5.16,0205/1017] hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER [5.16,0206/1017] crypto: sun8i-ss - really disable hash on A80 [5.16,0208/1017] crypto: mxs-dcp - Fix scatterlist processing [5.16,0209/1017] selinux: Fix selinux_sb_mnt_opts_compat() [5.16,0210/1017] thermal: int340x: Check for NULL after calling kmemdup() [5.16,0211/1017] crypto: octeontx2 - remove CONFIG_DM_CRYPT check [5.16,0215/1017] arm64/mm: avoid fixmap race condition when create pud mapping [5.16,0216/1017] security: add sctp_assoc_established hook [5.16,0218/1017] blk-cgroup: set blkg iostat after percpu stat aggregation [5.16,0224/1017] crypto: ccree - dont attempt 0 len DMA mappings [5.16,0225/1017] crypto: hisilicon/sec - fix the aead software fallback for engine [5.16,0227/1017] hwmon: (pmbus) Add mutex to regulator ops [5.16,0228/1017] hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING [5.16,0229/1017] nvme: cleanup __nvme_check_ids [5.16,0231/1017] block: dont delete queue kobject before its children [5.16,0234/1017] spi: spi-zynqmp-gqspi: Handle error for dma_set_mask [5.16,0235/1017] hwrng: atmel - disable trng on failure path [5.16,0239/1017] crypto: gemini - call finalize with bh disabled [5.16,0240/1017] crypto: vmx - add missing dependencies [5.16,0241/1017] clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix [5.16,0242/1017] clocksource/drivers/exynos_mct: Refactor resources allocation [5.16,0243/1017] clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts [5.16,0244/1017] clocksource/drivers/timer-microchip-pit64b: Use notrace [5.16,0245/1017] clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_in... [5.16,0249/1017] ACPI: APEI: fix return value of __setup handlers [5.16,0250/1017] crypto: ccp - ccp_dmaengine_unregister release dma channels [5.16,0254/1017] clocksource: acpi_pm: fix return value of __setup handler [5.16,0257/1017] watch_queue: Fix NULL dereference in error cleanup [5.16,0258/1017] watch_queue: Actually free the watch [5.16,0259/1017] f2fs: fix to enable ATGC correctly via gc_idle sysfs interface [5.16,0260/1017] sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa [5.16,0263/1017] rseq: Remove broken uapi field layout on 32-bit little endian [5.16,0264/1017] perf/core: Fix address filter parser for multiple filters [5.16,0268/1017] nfsd: more robust allocation failure handling in nfsd_file_cache_init [5.16,0269/1017] sched/cpuacct: Fix charge percpu cpuusage [5.16,0272/1017] btrfs: fix unexpected error path when reflinking an inline extent [5.16,0273/1017] f2fs: fix compressed file start atomic write may cause data corruption [5.16,0277/1017] pinctrl: samsung: Remove EINT handler for Exynos850 ALIVE and CMGP gpios [5.16,0278/1017] media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size [5.16,0279/1017] media: camss: csid-170: fix non-10bit formats [5.16,0280/1017] media: camss: csid-170: dont enable unused irqs [5.16,0282/1017] media: camss: vfe-170: fix "VFE halt timeout" error [5.16,0283/1017] media: staging: media: imx: imx7-mipi-csis: Make subdev name unique [5.16,0287/1017] media: imx: imx8mq-mipi_csi2: fix system resume [5.16,0291/1017] ASoC: codecs: Check for error pointer after calling devm_regmap_init_mmio [5.16,0295/1017] media: coda: Fix missing put_device() call in coda_get_vdoa_data [5.16,0296/1017] media: meson: vdec: potential dereference of null pointer [5.16,0297/1017] media: hantro: Fix overfill bottom register field name [5.16,0299/1017] media: v4l: Avoid unaligned access warnings when printing 4cc modifiers [5.16,0302/1017] video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid b... [5.16,0306/1017] video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() [5.16,0308/1017] ASoC: max98927: add missing header file [5.16,0313/1017] soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem [5.16,0316/1017] arm64: dts: qcom: sdm845: fix microphone bias properties and values [5.16,0318/1017] arm64: dts: broadcom: bcm4908: use proper TWD binding [5.16,0319/1017] arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc [5.16,0320/1017] arm64: dts: qcom: sm8350: Correct TCS configuration for apps rsc [5.16,0321/1017] arm64: dts: qcom: msm8994: Provide missing "xo_board" and "sleep_clk" to GCC [5.16,0324/1017] soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe [5.16,0326/1017] ARM: dts: sun8i: v3s: Move the csi1 block to follow address order [5.16,0327/1017] ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15 [5.16,0328/1017] ARM: ftrace: ensure that ADR takes the Thumb bit into account [5.16,0329/1017] vsprintf: Fix potential unaligned access [5.16,0332/1017] media: video/hdmi: handle short reads of hdmi info frame. [5.16,0334/1017] media: em28xx: initialize refcount before kref_get [5.16,0336/1017] media: cedrus: H265: Fix neighbour info buffer size [5.16,0339/1017] ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type [5.16,0340/1017] ASoC: codecs: va-macro: fix accessing array out of bounds for enum type [5.16,0341/1017] ASoC: codecs: wc938x: fix accessing array out of bounds for enum type [5.16,0344/1017] ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put [5.16,0346/1017] media: ov5640: Fix set format, v4l2_mbus_pixelcode not updated [5.16,0347/1017] selftests/lkdtm: Add UBSAN config [5.16,0349/1017] uaccess: fix nios2 and microblaze get_user_8() [5.16,0350/1017] ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() [5.16,0351/1017] ASoC: acp: check the return value of devm_kzalloc() in acp_legacy_dai_links_crea... [5.16,0352/1017] soc: mediatek: pm-domains: Add wakeup capacity support in power domain [5.16,0354/1017] ASoC: ti: davinci-i2s: Add check for clk_enable() [5.16,0355/1017] ALSA: spi: Add check for clk_enable() [5.16,0356/1017] arm64: dts: ns2: Fix spi-cpol and spi-cpha property [5.16,0358/1017] printk: fix return value of printk.devkmsg __setup handler [5.16,0362/1017] ASoC: soc-compress: prevent the potentially use of null pointer [5.16,0363/1017] memory: emif: Add check for setup_interrupts [5.16,0364/1017] memory: emif: check the pointer temp in get_device_details() [5.16,0365/1017] ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction [5.16,0367/1017] m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined [5.16,0370/1017] ASoC: cs35l41: Fix GPIO2 configuration [5.16,0371/1017] ASoC: cs35l41: Fix max number of TX channels [5.16,0373/1017] ASoC: wm8350: Handle error for wm8350_register_irq [5.16,0376/1017] media: saa7134: fix incorrect use to determine if list is empty [5.16,0377/1017] ivtv: fix incorrect device_caps for ivtvfb [5.16,0378/1017] ASoC: atmel: Fix error handling in snd_proto_probe [5.16,0382/1017] ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe [5.16,0385/1017] ASoC: mxs: Fix error handling in mxs_sgtl5000_probe [5.16,0386/1017] ASoC: fsl_spdif: Disable TX clock when stop [5.16,0387/1017] ASoC: imx-es8328: Fix error return code in imx_es8328_probe() [5.16,0389/1017] ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_di... [5.16,0391/1017] ASoC: rockchip: Fix PM usage reference of rockchip_i2s_tdm_resume [5.16,0393/1017] ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe [5.16,0394/1017] ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data [5.16,0398/1017] drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops [5.16,0399/1017] drm/meson: split out encoder from meson_dw_hdmi [5.16,0401/1017] drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev [5.16,0403/1017] drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe [5.16,0404/1017] drm: bridge: adv7511: Fix ADV7535 HPD enablement [5.16,0408/1017] bpftool: Fix error check when calling hashmap__new() [5.16,0410/1017] bpftool: Only set obj->skeleton on complete success [5.16,0411/1017] udmabuf: validate ubuf->pagecount [5.16,0413/1017] drm/selftests/test-drm_dp_mst_helper: Fix memory leak in sideband_msg_req_encode... [5.16,0414/1017] drm/locking: fix drm_modeset_acquire_ctx kernel-doc [5.16,0419/1017] mtd: rawnand: gpmi: fix controller timings setting [5.16,0420/1017] selftests, xsk: Fix rx_full stats test [5.16,0422/1017] drm/edid: Split deep color modes between RGB and YUV444 [5.16,0425/1017] ionic: Dont send reset commands if FW isnt running [5.16,0427/1017] ionic: Correctly print AQ errors if completions arent received [5.16,0428/1017] drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() [5.16,0429/1017] drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_commo... [5.16,0430/1017] drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function [5.16,0433/1017] ath9k_htc: fix uninit value bugs [5.16,0434/1017] ath11k: set WMI_PEER_40MHZ while peer assoc for 6 GHz [5.16,0435/1017] RDMA/core: Set MR type in ib_reg_user_mr [5.16,0436/1017] KVM: PPC: Fix vmx/vsx mixup in mmio emulation [5.16,0437/1017] selftests/net: timestamping: Fix bind_phc check [5.16,0440/1017] ice: dont reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb [5.16,0442/1017] igc: dont reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb [5.16,0443/1017] ixgbe: pass bi->xdp to ixgbe_construct_skb_zc() directly [5.16,0448/1017] powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch [5.16,0449/1017] KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init [5.16,0450/1017] powerpc/perf: Dont use perf_hw_context for trace IMC PMU [5.16,0451/1017] mt76: connac: fix sta_rec_wtbl tag len [5.16,0455/1017] mt76: mt7921: set EDCA parameters with the MCU CE command [5.16,0457/1017] mt76: mt7921: fix a leftover race in runtime-pm [5.16,0458/1017] mt76: mt7615: fix a leftover race in runtime-pm [5.16,0462/1017] mt76: mt7921e: fix possible probe failure after reboot [5.16,0463/1017] mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update [5.16,0466/1017] mt76: mt7915: fix mcs_map in mt7915_mcu_set_sta_he_mcs() [5.16,0467/1017] mt76: mt7915: fix the nss setting in bitrates [5.16,0469/1017] net: dsa: mv88e6xxx: Enable port policy support on 6097 [5.16,0470/1017] bpf: Fix a btf decl_tag bug when tagging a function [5.16,0477/1017] i2c: bcm2835: Fix the error handling in bcm2835_i2c_probe() [5.16,0479/1017] mtd: mchp48l640: Add SPI ID table [5.16,0481/1017] selftests/bpf: Use "__se_" prefix on architectures without syscall wrapper [5.16,0485/1017] PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge [5.16,0487/1017] libbpf: Fix signedness bug in btf_dump_array_data() [5.16,0490/1017] cxl/regs: Fix size of CXL Capability Header Register [5.16,0491/1017] net:enetc: allocate CBD ring data memory using DMA coherent methods [5.16,0492/1017] libbpf: Fix compilation warning due to mismatched printf format [5.16,0494/1017] libbpf: Use dynamically allocated buffer when receiving netlink messages [5.16,0495/1017] power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init [5.16,0497/1017] iommu/ipmmu-vmsa: Check for error num after setting mask [5.16,0498/1017] drm/bridge: anx7625: Fix overflow issue on reading EDID [5.16,0499/1017] i2c: pasemi: Drop I2C classes from platform driver variant [5.16,0502/1017] drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug [5.16,0503/1017] libbpf: Fix memleak in libbpf_netlink_recv() [5.16,0505/1017] cxl/port: Hold port reference until decoder release [5.16,0506/1017] dax: make sure inodes are flushed before destroy cache [5.16,0507/1017] selftests: mptcp: add csum mib check for mptcp_connect [5.16,0508/1017] iwlwifi: mvm: Dont call iwl_mvm_sta_from_mac80211() with NULL sta [5.16,0509/1017] iwlwifi: mvm: dont iterate unadded vifs when handling FW SMPS req [5.16,0515/1017] mtd: rawnand: pl353: Set the nand chip node as the flash node [5.16,0516/1017] drm/msm/dp: populate connector of struct dp_panel [5.16,0517/1017] drm/msm/dp: stop link training after link training 2 failed [5.16,0518/1017] drm/msm/dp: always add fail-safe mode into connector mode list [5.16,0519/1017] drm/msm/dsi: Use "ref" fw clock instead of global name for VCO parent [5.16,0523/1017] i40e: remove dead stores on XSK hotpath [5.16,0524/1017] ath11k: avoid active pdev check for each msdu [5.16,0525/1017] ath11k: Invalidate cached reo ring entry before accessing it [5.16,0527/1017] vfio/pci: fix memory leak during D3hot to D0 transition [5.16,0528/1017] vfio/pci: wake-up devices around reset functions [5.16,0532/1017] scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() [5.16,0534/1017] scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() [5.16,0535/1017] scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() [5.16,0541/1017] net: dsa: realtek-smi: fix kdoc warnings [5.16,0542/1017] net: dsa: realtek-smi: move to subdirectory [5.16,0543/1017] RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR [5.16,0544/1017] drm/amd/display: Remove vupdate_int_entry definition [5.16,0547/1017] mt76: mt7915: fix the muru tlv issue [5.16,0551/1017] scsi: hisi_sas: Change permission of parameter prot_mask [5.16,0552/1017] drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt [5.16,0555/1017] xsk: Fix race at socket teardown [5.16,0558/1017] RDMA/irdma: Remove incorrect masking of PD [5.16,0561/1017] powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() [5.16,0565/1017] KVM: SVM: Exit to userspace on ENOMEM/EFAULT GHCB errors [5.16,0566/1017] hv_balloon: rate-limit "Unhandled message" warning [5.16,0570/1017] power: supply: wm8350-power: Handle error for wm8350_register_irq [5.16,0572/1017] IB/hfi1: Allow larger MTU without AIP [5.16,0573/1017] RDMA/core: Fix ib_qp_usecnt_dec() called when error [5.16,0575/1017] net: axienet: fix RX ring refill allocation failure handling [5.16,0579/1017] powerpc/sysdev: fix incorrect use to determine if list is empty [5.16,0583/1017] selftests/bpf: Make test_lwt_ip_encap more stable and faster [5.16,0584/1017] platform/x86: huawei-wmi: check the return value of device_create_file() [5.16,0587/1017] xtensa: add missing XCHAL_HAVE_WINDOWED check [5.16,0588/1017] iwlwifi: pcie: fix SW error MSI-X mapping [5.16,0589/1017] vxcan: enable local echo for sent CAN frames [5.16,0594/1017] mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init [5.16,0596/1017] RDMA/irdma: Prevent some integer underflows [5.16,0599/1017] bpf, sockmap: Fix memleak in sk_psock_queue_msg [5.16,0601/1017] bpf, sockmap: Fix more uncharged while msg has more_data [5.16,0602/1017] bpf, sockmap: Fix double uncharge the mem of sk_msg [5.16,0603/1017] samples/bpf, xdpsock: Fix race when running for fix duration of time [5.16,0607/1017] drm/i915/display: Fix HPD short pulse handling for eDP [5.16,0608/1017] drm/i915/display: Do not re-enable PSR after it was marked as not reliable [5.16,0609/1017] netfilter: flowtable: Fix QinQ and pppoe support for inet table [5.16,0610/1017] mt76: mt7921: fix mt7921_queues_acq implementation [5.16,0612/1017] can: isotp: support MSG_TRUNC flag when reading from socket [5.16,0613/1017] bareudp: use ipv6_mod_enabled to check if IPv6 enabled [5.16,0616/1017] selftests/bpf: Fix error reporting from sock_fields programs [5.16,0617/1017] Bluetooth: hci_uart: add missing NULL check in h5_enqueue [5.16,0619/1017] Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt [5.16,0621/1017] ipv4: Fix route lookups when handling ICMP redirects and PMTU updates [5.16,0622/1017] mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb [5.16,0623/1017] af_netlink: Fix shift out of bounds in group mask calculation [5.16,0624/1017] i2c: meson: Fix wrong speed use from probe [5.16,0628/1017] selftests/bpf/test_lirc_mode2.sh: Exit with proper code [5.16,0633/1017] openvswitch: always update flow key after nat [5.16,0636/1017] mfd: asic3: Add missing iounmap() on error asic3_mfd_probe [5.16,0637/1017] ice: fix scheduling while atomic on aux critical err interrupt [5.16,0639/1017] drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool [5.16,0640/1017] kernel/resource: fix kfree() of bootmem memory again [5.16,0642/1017] staging: r8188eu: convert DBG_88E_LEVEL call in hal/rtl8188e_hal_init.c [5.16,0643/1017] staging: r8188eu: release_firmware is not called if allocation fails [5.16,0644/1017] mxser: fix xmit_buf leak in activate when LSR == 0xff [5.16,0645/1017] fsi: scom: Fix error handling [5.16,0648/1017] pps: clients: gpio: Propagate return value from pps_gpio_probe [5.16,0650/1017] misc: alcor_pci: Fix an error handling path [5.16,0651/1017] cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse [5.16,0654/1017] dmaengine: idxd: change bandwidth token to read buffers [5.16,0655/1017] dmaengine: idxd: restore traffic class defaults after wq reset [5.16,0657/1017] staging: qlge: add unregister_netdev in qlge_probe [5.16,0659/1017] staging:iio:adc:ad7280a: Fix handing of device address bit reversing. [5.16,0660/1017] pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel [5.16,0661/1017] pinctrl: renesas: checker: Fix miscalculation of number of states [5.16,0664/1017] phy: phy-brcm-usb: fixup BCM4908 support [5.16,0665/1017] serial: 8250_mid: Balance reference count for PCI DMA device [5.16,0666/1017] serial: 8250_lpss: Balance reference count for PCI DMA device [5.16,0667/1017] NFS: Use of mapping_set_error() results in spurious errors [5.16,0669/1017] iio: adc: Add check for devm_request_threaded_irq [5.16,0670/1017] habanalabs: Add check for pci_enable_device [5.16,0673/1017] dma-debug: fix return value of __setup handlers [5.16,0677/1017] clk: qcom: clk-rcg2: Update logic to calculate D value for RCG [5.16,0678/1017] clk: qcom: clk-rcg2: Update the frac table for pixel clock [5.16,0680/1017] remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region [5.16,0685/1017] clk: loongson1: Terminate clk_div_table with sentinel element [5.16,0686/1017] clk: hisilicon: Terminate clk_div_table with sentinel element [5.16,0687/1017] clk: clps711x: Terminate clk_div_table with sentinel element [5.16,0688/1017] clk: Fix clk_hw_get_clk() when dev is NULL [5.16,0690/1017] mailbox: imx: fix crash in resume on i.mx8ulp [5.16,0691/1017] NFS: remove unneeded check in decode_devicenotify_args() [5.16,0692/1017] staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree [5.16,0693/1017] staging: mt7621-dts: fix formatting [5.16,0695/1017] staging: mt7621-dts: fix GB-PC2 devicetree [5.16,0697/1017] pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback [5.16,0698/1017] pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() [5.16,0700/1017] pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs [5.16,0703/1017] pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe [5.16,0704/1017] tty: hvc: fix return value of __setup handler [5.16,0706/1017] serial: 8250: fix XOFF/XON sending when DMA is used [5.16,0708/1017] virt: acrn: fix a memory leak in acrn_dev_ioctl() [5.16,0711/1017] driver core: dd: fix return value of __setup handler [5.16,0712/1017] jfs: fix divide error in dbNextAG [5.16,0714/1017] SUNRPC: improve swap handling: scheduling and PF_MEMALLOC [5.16,0717/1017] netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options [5.16,0719/1017] NFSv4.1: dont retry BIND_CONN_TO_SESSION on session error [5.16,0720/1017] kdb: Fix the putarea helper function [5.16,0722/1017] clk: qcom: gcc-msm8994: Fix gpll4 width [5.16,0723/1017] vsock/virtio: initialize vdev->priv before using VQs [5.16,0725/1017] vsock/virtio: enable VQs early on probe [5.16,0729/1017] net: hns3: fix bug when PF set the duplicate MAC address for VFs [5.16,0730/1017] net: hns3: fix port base vlan add fail when concurrent with reset [5.16,0731/1017] net: hns3: add vlan list lock to protect vlan list [5.16,0732/1017] net: hns3: format the output of the MAC address [5.16,0737/1017] net: hns3: clean residual vf config after disable sriov [5.16,0739/1017] qlcnic: dcb: default to returning -EOPNOTSUPP [5.16,0740/1017] net/x25: Fix null-ptr-deref caused by x25_disconnect [5.16,0743/1017] selftests: tls: skip cmsg_to_pipe tests with TLS=n [5.16,0744/1017] net: prefer nf_ct_put instead of nf_conntrack_put [5.16,0745/1017] net/sched: act_ct: fix ref leak when switching zones [5.16,0747/1017] net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator [5.16,0749/1017] lib/test: use after free in register_test_dev_kmod() [5.16,0751/1017] LSM: general protection fault in legacy_parse_param [5.16,0754/1017] gcc-plugins/stackleak: Exactly match strings instead of prefixes [5.16,0756/1017] pinctrl: npcm: Fix broken references to chip->parent_device [5.16,0757/1017] rcu: Mark writes to the rcu_segcblist structures ->flags field [5.16,0759/1017] memstick/mspro_block: fix handling of read-only devices [5.16,0762/1017] crypto: hisilicon/sec - not need to enable sm4 extra mode at HW V3 [5.16,0763/1017] block, bfq: dont move oom_bfqq [5.16,0764/1017] selinux: use correct type for context length [5.16,0768/1017] loop: use sysfs_emit() in the sysfs xxx show() [5.16,0772/1017] fs/binfmt_elf: Fix AT_PHDR for unusual ELF files [5.16,0773/1017] bfq: fix use-after-free in bfq_dispatch_request [5.16,0776/1017] Revert "Revert "block, bfq: honor already-setup queue merges"" [5.16,0778/1017] PM: core: keep irq flags in device_pm_check_callbacks() [5.16,0780/1017] parisc: Fix handling off probe non-access faults [5.16,0781/1017] nvme-tcp: lockdep: annotate in-kernel sockets [5.16,0784/1017] atomics: Fix atomic64_{read_acquire,set_release} fallbacks [5.16,0787/1017] ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit [5.16,0788/1017] sched/tracing: Dont re-read p->state when emitting sched_switch event [5.16,0789/1017] sched/tracing: Report TASK_RTLOCK_WAIT tasks as TASK_UNINTERRUPTIBLE [5.16,0793/1017] f2fs: dont get FREEZE lock in f2fs_evict_inode in frozen fs [5.16,0795/1017] btrfs: make search_csum_tree return 0 if we get -EFBIG [5.16,0796/1017] btrfs: handle csum lookup errors properly on reads [5.16,0797/1017] btrfs: do not double complete bio on errors during compressed reads [5.16,0801/1017] Adjust cifssb maximum read size [5.16,0803/1017] media: staging: media: zoran: move videodev alloc [5.16,0805/1017] media: staging: media: zoran: fix various V4L2 compliance errors [5.16,0807/1017] media: ir_toy: free before error exiting [5.16,0808/1017] ASoC: sh: rz-ssi: Make the data structures available before registering the hand... [5.16,0809/1017] ASoC: cs42l42: Report full jack status when plug is detected [5.16,0811/1017] media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers [5.16,0817/1017] video: fbdev: w100fb: Reset global state [5.16,0819/1017] video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit [5.16,0820/1017] ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 [5.16,0822/1017] ASoC: madera: Add dependencies on MFD [5.16,0824/1017] media: atomisp: fix dummy_ptr check to avoid duplicate active_bo [5.16,0827/1017] ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk [5.16,0828/1017] arm64: defconfig: build imx-sdma as a module [5.16,0829/1017] video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() [5.16,0830/1017] video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() [5.16,0831/1017] video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit [5.16,0833/1017] ASoC: soc-core: skip zero num_dai component in searching dai name [5.16,0835/1017] media: imx-jpeg: fix a bug of accessing array out of bounds [5.16,0838/1017] uaccess: fix type mismatch warnings from access_ok() [5.16,0839/1017] lib/test_lockup: fix kernel pointer check for separate address spaces [5.16,0840/1017] ARM: tegra: tamonten: Fix I2C3 pad setting [5.16,0841/1017] ARM: mmp: Fix failure to remove sram device [5.16,0842/1017] ASoC: amd: vg: fix for pm resume callback sequence [5.16,0843/1017] ASoC: amd: vangogh: fix uninitialized symbol warning in machine driver [5.16,0846/1017] media: Revert "media: em28xx: add missing em28xx_close_extension" [5.16,0847/1017] media: hdpvr: initialize dev->worker at hdpvr_register_videodev [5.16,0851/1017] ASoC: Intel: sof_es8336: use NHLT information to set dmic and SSP [5.16,0854/1017] mmc: host: Return an error when ->enable_sdio_irq() ops is missing [5.16,0855/1017] media: atomisp: fix bad usage at error handling logic [5.16,0857/1017] KVM: x86: Reinitialize context if host userspace toggles EFER.LME [5.16,0859/1017] KVM: x86/mmu: Move "invalid" check out of kvm_tdp_mmu_get_root() [5.16,0861/1017] KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU [5.16,0863/1017] KVM: x86: hyper-v: Drop redundant ex parameter from kvm_hv_flush_tlb() [5.16,0865/1017] KVM: x86: hyper-v: HVCALL_SEND_IPI_EX is an XMM fast hypercall [5.16,0867/1017] powerpc/lib/sstep: Fix sthcx instruction [5.16,0868/1017] powerpc/lib/sstep: Fix build errors with newer binutils [5.16,0873/1017] drm/i915: Fix PSF GV point mask when SAGV is not possible [5.16,0875/1017] scsi: qla2xxx: Refactor asynchronous command initialization [5.16,0876/1017] scsi: qla2xxx: Implement ref count for SRB [5.16,0878/1017] scsi: qla2xxx: Fix warning message due to adisc being flushed [5.16,0880/1017] scsi: qla2xxx: Fix premature hw access after PCI error [5.16,0881/1017] scsi: qla2xxx: Fix wrong FDMI data for 64G adapter [5.16,0883/1017] scsi: qla2xxx: Fix device reconnect in loop topology [5.16,0884/1017] scsi: qla2xxx: edif: Fix clang warning [5.16,0887/1017] scsi: qla2xxx: Check for firmware dump already collected [5.16,0888/1017] scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() [5.16,0889/1017] scsi: qla2xxx: Fix disk failure to rediscover [5.16,0891/1017] scsi: qla2xxx: Fix hang due to session stuck [5.16,0893/1017] scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests [5.16,0895/1017] scsi: qla2xxx: Fix N2N inconsistent PLOGI [5.16,0896/1017] scsi: qla2xxx: Fix stuck session of PRLI reject [5.16,0899/1017] platform: chrome: Split trace include file [5.16,0903/1017] KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasnt activated [5.16,0904/1017] KVM: Prevent module exit until all VMs are freed [5.16,0906/1017] KVM: SVM: fix panic on out-of-bounds guest IRQ [5.16,0908/1017] ubifs: Fix deadlock in concurrent rename whiteout and inode writeback [5.16,0909/1017] ubifs: Add missing iput if do_tmpfile() failed in rename whiteout [5.16,0912/1017] ubifs: Rectify space amount budget for mkdir/tmpfile operations [5.16,0913/1017] ubifs: setflags: Make dirtied_ino_d 8 bytes aligned [5.16,0916/1017] ubifs: rename_whiteout: correct old_dir size computing [5.16,0918/1017] nvme: fix the read-only state for zoned namespaces with unsupposed features [5.16,0923/1017] can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path [5.16,0930/1017] gfs2: gfs2_setattr_size error path fix [5.16,0931/1017] gfs2: Fix gfs2_file_buffered_write endless loop workaround [5.16,0932/1017] gfs2: Make sure FITRIM minlen is rounded up to fs block size [5.16,0933/1017] net: hns3: fix the concurrency between functions reading debugfs [5.16,0936/1017] rxrpc: Fix call timer start racing with call destruction [5.16,0938/1017] crypto: arm/aes-neonbs-cbc - Select generic cbc and aes [5.16,0941/1017] watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function [5.16,0942/1017] net: sparx5: uses, depends on BRIDGE or !BRIDGE [5.16,0945/1017] ASoC: rockchip: i2s_tdm: Fixup config for SND_SOC_DAIFMT_DSP_A/B [5.16,0946/1017] ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs [5.16,0947/1017] ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl [5.16,0948/1017] ARM: iop32x: offset IRQ numbers by 1 [5.16,0952/1017] virtio: use virtio_device_ready() in virtio_device_restore() [5.16,0953/1017] io_uring: fix memory leak of uid in files registration [5.16,0954/1017] riscv module: remove (NOLOAD) [5.16,0957/1017] spi: Fix Tegra QSPI example [5.16,0961/1017] drm/connector: Fix typo in documentation [5.16,0962/1017] scsi: qla2xxx: Add qla2x00_async_done() for async routines [5.16,0965/1017] arm64: mm: Drop const from conditional arm64_dma_phys_limit definition [5.16,0967/1017] Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" [5.16,0968/1017] tracing: Have type enum modifications copy the strings [5.16,0969/1017] net: add skb_set_end_offset() helper [5.16,0971/1017] mm/mmap: return 1 from stack_guard_gap __setup() handler [5.16,0973/1017] mm/memcontrol: return 1 from cgroup.memory __setup() handler [5.16,0974/1017] mm/usercopy: return 1 from hardened_usercopy __setup() handler [5.16,0976/1017] libbpf: Define BTF_KIND_* constants in btf.h to avoid compilation errors [5.16,0978/1017] bpf: Fix comment for helper bpf_current_task_under_cgroup() [5.16,0979/1017] nbd: fix possible overflow on first_minor in nbd_dev_add() [5.16,0981/1017] dt-bindings: mtd: nand-controller: Fix the reg property description [5.16,0982/1017] dt-bindings: mtd: nand-controller: Fix a comment in the examples [5.16,0986/1017] dt-bindings: memory: mtk-smi: Rename clock to clocks [5.16,0987/1017] dt-bindings: memory: mtk-smi: No need mediatek,larb-id for mt8167 [5.16,0989/1017] dt-bindings: pinctrl: pinctrl-microchip-sgpio: Fix example [5.16,0993/1017] perf vendor events: Update metrics for SkyLake Server [5.16,0995/1017] media: ov6650: Fix crop rectangle affected by set format [5.16,0996/1017] pinctrl: canonical rsel resistance selection property [5.16,0999/1017] ARM: dts: spear13xx: Update SPI dma properties [5.16,1002/1017] um: Fix uml_mconsole stop/go [5.16,1006/1017] vdpa/mlx5: Avoid processing works if workqueue was destroyed [5.16,1007/1017] openvswitch: Fixed nd target mask field in the flow dump. [5.16,1009/1017] n64cart: convert bi_disk to bi_bdev->bd_disk fix build [5.16,1010/1017] Revert "nbd: fix possible overflow on first_minor in nbd_dev_add()" [5.16,1012/1017] mmc: rtsx: Fix build errors/warnings for unused variable [5.16,1016/1017] coredump/elf: Pass coredump_params into fill_note_info [5.16,1017/1017] coredump: Use the vma snapshot in fill_files_note

[5.16,0763/1017] block, bfq: dont move oom_bfqq

Commit Message

Patch