ci2 starts bisection 2025-05-17 03:57:56.299758675 +0000 UTC m=+24056.389187896 bisecting fixing commit since 8d23314f588a573519ab88c332e94c927f870810 building syzkaller on c673ca06b23cea94091ab496ef62c3513e434585 ensuring issue is reproducible on original commit 8d23314f588a573519ab88c332e94c927f870810 testing commit 8d23314f588a573519ab88c332e94c927f870810 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 16504c3c83525245eee3860e6e867ffadfb11422a5d7c5ca09c9ed04ed2db3b4 all runs: crashed: general protection fault in current_umask representative crash: general protection fault in current_umask, types: [UNKNOWN] check whether we can drop unnecessary instrumentation disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 8d23314f588a573519ab88c332e94c927f870810 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 05937d710ce7877db82629a0ad55fc07ddad4cca90481c66bd9e0ea3b579539f all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in current_umask representative crash: BUG: unable to handle kernel NULL pointer dereference in current_umask, types: [UNKNOWN] the bug reproduces without the instrumentation disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed kconfig minimization: base=4788 full=6020 leaves diff=245 split chunks (needed=false): <245> split chunk #0 of len 245 into 5 parts testing without sub-chunk 1/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit 8d23314f588a573519ab88c332e94c927f870810 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4fc48fdbec641d533ab1cdeae21a794058afc36d331646523bf62e686630a2fa all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in current_umask representative crash: BUG: unable to handle kernel NULL pointer dereference in current_umask, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 8d23314f588a573519ab88c332e94c927f870810 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 47427c127f15160c8b6676b77124d4d12495037ca75fa159c87783f9889fdefd all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in current_umask representative crash: BUG: unable to handle kernel NULL pointer dereference in current_umask, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 8d23314f588a573519ab88c332e94c927f870810 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 97b992d638b48a809ac15072d51fab110d27ed70ce576eb031fb0b06b07e8311 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in current_umask representative crash: BUG: unable to handle kernel NULL pointer dereference in current_umask, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 8d23314f588a573519ab88c332e94c927f870810 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b1b045b8afecbd9e74765e41717a6f4d99bbf630cf0124fff7fa405b5dc8fff5 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in current_umask representative crash: BUG: unable to handle kernel NULL pointer dereference in current_umask, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit 8d23314f588a573519ab88c332e94c927f870810 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 failed building 8d23314f588a573519ab88c332e94c927f870810: net/socket.c:1128: undefined reference to `wext_handle_ioctl' net/socket.c:3397: undefined reference to `compat_wext_handle_ioctl' net/core/net-procfs.c:346: undefined reference to `wext_proc_exit' net/core/net-procfs.c:330: undefined reference to `wext_proc_init' minimized to 49 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM USB_XHCI_PCI_RENESAS WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS X86_X32 ZEROPLUS_FF] disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing current HEAD 7e2543346ff7ecc2e4fff0c95767c72c5ac165c6 testing commit 7e2543346ff7ecc2e4fff0c95767c72c5ac165c6 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 595ae03cdb46e34ee5512fdb0594201e5a78d67b6f2c81366296619fbfba520b all runs: OK false negative chance: 0.000 # git bisect start 7e2543346ff7ecc2e4fff0c95767c72c5ac165c6 8d23314f588a573519ab88c332e94c927f870810 Bisecting: 1444 revisions left to test after this (roughly 11 steps) [dac3f7ba392ceea9dbc6460857e24e26921776ed] Revert "clkdev: remove CONFIG_CLKDEV_LOOKUP" determine whether the revision contains the guilty commit checking the merge base b57d01c66f40ec96d8a5df6c2cdbd75e15e5f07c no existing result, test the revision testing commit b57d01c66f40ec96d8a5df6c2cdbd75e15e5f07c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a4c6552e21cc793353624c81e9e14316a27f80cf4d55ec7e1ba4bbb0619d810a all runs: OK false negative chance: 0.000 the bug was not introduced yet; pretend that kernel crashed # git bisect good dac3f7ba392ceea9dbc6460857e24e26921776ed Bisecting: 722 revisions left to test after this (roughly 10 steps) [1cb11ddbfb7cef6fd16615f3398054bb18692916] eeprom: digsy_mtc: Make GPIO lookup table match the device determine whether the revision contains the guilty commit checking the merge base b57d01c66f40ec96d8a5df6c2cdbd75e15e5f07c the bug was not introduced yet; pretend that kernel crashed # git bisect good 1cb11ddbfb7cef6fd16615f3398054bb18692916 Bisecting: 361 revisions left to test after this (roughly 9 steps) [95ad4cf7a18ee080314bfa28b2f6715ba2740af2] igc: handle the IGC_PTP_ENABLED flag correctly determine whether the revision contains the guilty commit checking the merge base b57d01c66f40ec96d8a5df6c2cdbd75e15e5f07c the bug was not introduced yet; pretend that kernel crashed # git bisect good 95ad4cf7a18ee080314bfa28b2f6715ba2740af2 Bisecting: 184 revisions left to test after this (roughly 8 steps) [ab07aeb2c93dcc85c5f61ea220c0fd846fcaadd4] Merge branch 'android13-5.10' into android13-5.10-lts determine whether the revision contains the guilty commit revision 8d23314f588a573519ab88c332e94c927f870810 crashed and is reachable testing commit ab07aeb2c93dcc85c5f61ea220c0fd846fcaadd4 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 620d144965d251bce8b82f3e83c66a6f1f564fa8142a8d68fdc2c0af1790f3d8 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in current_umask representative crash: BUG: unable to handle kernel NULL pointer dereference in current_umask, types: [UNKNOWN] # git bisect good ab07aeb2c93dcc85c5f61ea220c0fd846fcaadd4 Bisecting: 92 revisions left to test after this (roughly 7 steps) [024fe3ea24b7330519562eca44ca5773b658ad0f] media: venus: pm_helpers: Check instance state when calculate instance frequency determine whether the revision contains the guilty commit checking the merge base b57d01c66f40ec96d8a5df6c2cdbd75e15e5f07c the bug was not introduced yet; pretend that kernel crashed # git bisect good 024fe3ea24b7330519562eca44ca5773b658ad0f Bisecting: 46 revisions left to test after this (roughly 6 steps) [c87d713ccdb478a52bb1cbd076681cfdfeb5d411] usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive determine whether the revision contains the guilty commit checking the merge base b57d01c66f40ec96d8a5df6c2cdbd75e15e5f07c the bug was not introduced yet; pretend that kernel crashed # git bisect good c87d713ccdb478a52bb1cbd076681cfdfeb5d411 Bisecting: 23 revisions left to test after this (roughly 5 steps) [a89063ffa0253b35ce9b893ee776b2370b354ab8] ext4: make block validity check resistent to sb bh corruption determine whether the revision contains the guilty commit checking the merge base b57d01c66f40ec96d8a5df6c2cdbd75e15e5f07c the bug was not introduced yet; pretend that kernel crashed # git bisect good a89063ffa0253b35ce9b893ee776b2370b354ab8 Bisecting: 11 revisions left to test after this (roughly 4 steps) [024a4a45fdf87218e3c0925475b05a27bcea103f] Linux 5.10.237 determine whether the revision contains the guilty commit checking the merge base b57d01c66f40ec96d8a5df6c2cdbd75e15e5f07c the bug was not introduced yet; pretend that kernel crashed # git bisect good 024a4a45fdf87218e3c0925475b05a27bcea103f Bisecting: 5 revisions left to test after this (roughly 3 steps) [2c590db8469e8efc1780293c018e2c26f10aa5a2] Revert "PCI: Coalesce host bridge contiguous apertures" determine whether the revision contains the guilty commit revision ab07aeb2c93dcc85c5f61ea220c0fd846fcaadd4 crashed and is reachable testing commit 2c590db8469e8efc1780293c018e2c26f10aa5a2 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6310bcd0fc8b4320b630f6411be2bef5a4178c7493bedbb0c27046ade50e0853 all runs: OK false negative chance: 0.000 # git bisect bad 2c590db8469e8efc1780293c018e2c26f10aa5a2 Bisecting: 2 revisions left to test after this (roughly 2 steps) [bc50975b8d63111359b6bd6c86463608f5b537c0] Revert "PCI: Fix reference leak in pci_register_host_bridge()" determine whether the revision contains the guilty commit revision 8d23314f588a573519ab88c332e94c927f870810 crashed and is reachable testing commit bc50975b8d63111359b6bd6c86463608f5b537c0 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5b746c73d766f3e82de71a1d0c5dba764476b3962536f11f17ae87a5f4e73199 all runs: OK false negative chance: 0.000 # git bisect bad bc50975b8d63111359b6bd6c86463608f5b537c0 Bisecting: 0 revisions left to test after this (roughly 1 step) [3e089110106cee49bc88298c1741d2d65abcdcf7] Revert "module: sign with sha512 instead of sha1 by default" determine whether the revision contains the guilty commit revision ab07aeb2c93dcc85c5f61ea220c0fd846fcaadd4 crashed and is reachable testing commit 3e089110106cee49bc88298c1741d2d65abcdcf7 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a59dcd30f1ff062242a9868c6a53500a89b261d29829192f62750e8572291eb4 all runs: OK false negative chance: 0.000 # git bisect bad 3e089110106cee49bc88298c1741d2d65abcdcf7 Bisecting: 0 revisions left to test after this (roughly 0 steps) [5131ebcdc5b088d659d670611042516f2c501aa6] Merge 5.10.237 into android13-5.10-lts determine whether the revision contains the guilty commit revision ab07aeb2c93dcc85c5f61ea220c0fd846fcaadd4 crashed and is reachable testing commit 5131ebcdc5b088d659d670611042516f2c501aa6 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ef925a13865156a28b24236fcf83b255c5a70a6c8a36d69dff560f16a8f1989a all runs: OK false negative chance: 0.000 # git bisect bad 5131ebcdc5b088d659d670611042516f2c501aa6 5131ebcdc5b088d659d670611042516f2c501aa6 is the first bad commit commit 5131ebcdc5b088d659d670611042516f2c501aa6 Merge: ab07aeb2c93d 024a4a45fdf8 Author: Greg Kroah-Hartman Date: Mon May 5 12:42:03 2025 +0000 Merge 5.10.237 into android13-5.10-lts Changes in 5.10.237 ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() tipc: fix memory leak in tipc_link_xmit net: tls: explicitly disallow disconnect ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones ata: sata_sx4: Add error handling in pdc20621_i2c_read() nvmet-fcloop: swap list_add_tail arguments net: ppp: Add bound checking for skb data on ppp_sync_txmung nft_set_pipapo: fix incorrect avx2 match of 5th field octet umount: Allow superblock owners to force umount pm: cpupower: bench: Prevent NULL dereference on malloc failure x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine perf: arm_pmu: Don't disable counter in armpmu_add() arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD xen/mcelog: Add __nonstring annotations for unterminated strings HID: pidff: Convert infinite length from Linux API to PID standard HID: pidff: Do not send effect envelope if it's empty HID: pidff: Fix null pointer dereference in pidff_find_fields ALSA: hda: intel: Fix Optimus when GPU has no sound ALSA: usb-audio: Fix CME quirk for UF series keyboards page_pool: avoid infinite loop to schedule delayed worker fs/jfs: cast inactags to s64 to prevent potential overflow fs/jfs: Prevent integer overflow in AG size calculation jfs: Prevent copying of nlink with value 0 from disk inode jfs: add sanity check for agwidth in dbMount ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() ahci: add PCI ID for Marvell 88SE9215 SATA Controller ext4: protect ext4_release_dquot against freezing ext4: ignore xattrs past end scsi: st: Fix array overflow in st_setup() wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table net: vlan: don't propagate flags on open tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER Bluetooth: hci_uart: fix race during initialization drm: allow encoder mode_set even when connectors change for crtc drm: panel-orientation-quirks: Add support for AYANEO 2S drm: panel-orientation-quirks: Add new quirk for GPD Win 2 drm/bridge: panel: forbid initializing a panel with unknown connector type drm/amdkfd: clamp queue size to minimum drm/amdkfd: Fix pqm_destroy_queue race with GPU reset drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off fbdev: omapfb: Add 'plane' value check pwm: mediatek: Always use bus clock pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() pwm: rcar: Simplify multiplication/shift logic pwm: rcar: Improve register calculation pwm: fsl-ftm: Handle clk_get_rate() returning 0 bpf: Add endian modifiers to fix endian warnings bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags ext4: reject casefold inode flag without casefold feature ext4: don't treat fhandle lookup of ea_inode as FS corruption media: i2c: adv748x: Fix test pattern selection mask media: venus: hfi: add a check to handle OOB in sfr region media: venus: hfi: add check to handle incorrect queue size media: vim2m: print device name after registering device media: siano: Fix error handling in smsdvb_module_init() xenfs/xensyms: respect hypervisor's "next" indication arm64: cputype: Add MIDR_CORTEX_A76AE arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list spi: cadence-qspi: Fix probe on AM62A LP SK mtd: rawnand: brcmnand: fix PM resume warning media: streamzap: prevent processing IR data on URB failure media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() media: i2c: ov7251: Set enable GPIO low in probe media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO media: venus: hfi_parser: add check to avoid out of bound access net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family mtd: Replace kcalloc() with devm_kcalloc() clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup wifi: mac80211: fix integer overflow in hwmp_route_info_get() ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path ext4: fix off-by-one error in do_split vdpa/mlx5: Fix oversized null mkey longer than 32bit i3c: Add NULL pointer check in i3c_master_queue_ibi() jbd2: remove wrong sb->s_sequence check mfd: ene-kb3930: Fix a potential NULL pointer dereference locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets mtd: inftlcore: Add error check for inftl_read_oob() mtd: rawnand: Add status chack in r852_ready() arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string sparc/mm: disable preemption in lazy mmu mode mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock sctp: detect and prevent references to a freed transport in sendmsg thermal/drivers/rockchip: Add missing rk3328 mapping entry crypto: ccp - Fix check for the primary ASP device dm-integrity: set ti->error on memory allocation failure ftrace: Add cond_resched() to ftrace_graph_set_hash() gpio: zynq: Fix wakeup source leaks on device unbind ntb: use 64-bit arithmetic for the MSI doorbell mask of/irq: Fix device node refcount leakages in of_irq_count() of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() of/irq: Fix device node refcount leakages in of_irq_init() PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() PCI: Fix reference leak in pci_alloc_child_bus() pinctrl: qcom: Clear latched interrupt status when changing IRQ type x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() Bluetooth: hci_uart: Fix another race during initialization pwm: mediatek: always use bus clock for PWM on MT7622 HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition wifi: at76c50x: fix use after free access in at76_disconnect wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() wifi: mac80211: Purge vif txq in ieee80211_do_stop() wifi: wl1251: fix memory leak in wl1251_tx_work scsi: iscsi: Fix missing scsi_host_put() in error path RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() RDMA/hns: Fix wrong maximum DMA segment size RDMA/core: Silence oversized kvmalloc() warning Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address Bluetooth: btrtl: Prevent potential NULL dereference Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" igc: handle the IGC_PTP_ENABLED flag correctly igc: cleanup PTP module if probe fails net: openvswitch: fix nested key length validation in the set() action cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path net: b53: enable BPDU reception for management port riscv: KGDB: Do not inline arch_kgdb_breakpoint() riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS writeback: fix false warning in inode_to_wb() asus-laptop: Fix an uninitialized variable nfs: move nfs_fhandle_hash to common include file nfs: add missing selections of CONFIG_CRC32 nfsd: decrease sc_count directly if fail to queue dl_recall btrfs: correctly escape subvol in btrfs_show_options() crypto: caam/qi - Fix drv_ctx refcount bug hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key i2c: cros-ec-tunnel: defer probe if parent EC is not present isofs: Prevent the use of too small fid riscv: Avoid fortify warning in syscall_get_arguments() tracing: Fix filter string testing virtiofs: add filesystem context source name check perf/x86/intel: Allow to update user space GPRs from PEBS records perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX module: sign with sha512 instead of sha1 by default drm/repaper: fix integer overflows in repeat functions drm/amd/pm/powerplay: Prevent division by zero drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero drm/nouveau: prime: fix ttm_bo_delayed_delete oops drm/sti: remove duplicate object names cpufreq: Reference count policy in cpufreq_update_limits() kbuild: Add '-fno-builtin-wcslen' tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). mptcp: fix NULL pointer in can_accept_new_subflow mptcp: only inc MPJoinAckHMacFailure for HMAC failures mptcp: sockopt: fix getting IPV6_V6ONLY misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type x86/pvh: Call C code via the kernel virtual mapping nvme: avoid double free special payload powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function wifi: ath10k: avoid NULL pointer error during sdio remove drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' nvmet-fc: Remove unused functions smb: client: fix potential UAF in cifs_debug_files_proc_show() smb: client: fix use-after-free bug in cifs_debug_data_proc_show() cifs: Fix UAF in cifs_demultiplex_thread() smb: client: fix potential deadlock when releasing mids smb: client: fix potential UAF in cifs_stats_proc_show() smb: client: fix UAF in async decryption smb: client: fix NULL ptr deref in crypto_aead_setkey() bpf: avoid holding freeze_mutex during mmap operation bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers blk-cgroup: support to track if policy is online blk-iocost: do not WARN if iocg was already offlined ext4: fix timer use-after-free on failed mount net/mlx5e: Fix use-after-free of encap entry in neigh update handler ipvs: properly dereference pe in ip_vs_add_service net: openvswitch: fix race on port output openvswitch: fix lockup on tx to unregistering netdev with carrier scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() scsi: ufs: bsg: Set bsg_queue to NULL after removal net: defer final 'struct net' free in netns dismantle MIPS: dec: Declare which_prom() as static MIPS: cevt-ds1287: Add missing ds1287.h include MIPS: ds1287: Match ds1287_set_base_clock() function types jfs: Fix shift-out-of-bounds in dbDiscardAG dm cache: fix flushing uninitialized delayed_work on cache_ctr error vfio/pci: fix memory leak during D3hot to D0 transition kernel/resource: fix kfree() of bootmem memory again drm/i915/gt: Cleanup partial engine discovery failures fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats mm: fix apply_to_existing_page_range() drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() s390/dasd: fix double module refcount decrement pmdomain: ti: Add a null pointer check to the omap_prm_domain_init drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() platform/x86: ISST: Correct command storage data length tracing: Allow synthetic events to pass around stacktraces tracing: Fix synth event printk format for str fields media: streamzap: remove unnecessary ir_raw_event_reset and handle media: streamzap: no need for usb pid/vid in device name media: streamzap: less chatter media: streamzap: remove unused struct members media: streamzap: fix race between device disconnection and urb callback media: venus: venc: Init the session only once in queue_setup media: venus: Limit HFI sessions to the maximum supported media: venus: hfi: Correct session init return error media: venus: pm_helpers: Check instance state when calculate instance frequency media: venus: Create hfi platform and move vpp/vsp there media: venus: Rename venus_caps to hfi_plat_caps media: venus: hfi_plat: Add codecs and capabilities ops media: venus: Get codecs and capabilities from hfi platform media: venus: hfi_parser: refactor hfi packet parsing logic net: dsa: mv88e6xxx: fix VTU methods for 6320 family soc: samsung: exynos-chipid: initialize later - with arch_initcall soc: samsung: exynos-chipid: convert to driver and merge exynos-asv soc: samsung: exynos-chipid: avoid soc_device_to_device() soc: samsung: exynos-chipid: Pass revision reg offsets soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check iio: adc: ad7768-1: Fix conversion result sign backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() cifs: print TIDs as hex cifs: avoid NULL pointer dereference in dbg call PCI: Introduce domain_nr in pci_host_bridge PCI: Coalesce host bridge contiguous apertures PCI: Assign PCI domain IDs by ida_alloc() PCI: Fix reference leak in pci_register_host_bridge() selftests/mm: generate a temporary mountpoint for cgroup filesystem drm/amd/amdgpu/amdgpu_vram_mgr: Add missing descriptions for 'dev' and 'dir' drm/amdgpu: Remove amdgpu_device arg from free_sgt api (v2) drm/amdgpu/dma_buf: fix page_link check dma/contiguous: avoid warning about unused size_bytes cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() net: phy: leds: fix memory leak tipc: fix NULL pointer dereference in tipc_mon_reinit_self() net_sched: hfsc: Fix a UAF vulnerability in class handling net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE virtio_console: fix missing byte order handling for cols and rows KVM: SVM: Allocate IR data using atomic allocation mcb: fix a double free bug in chameleon_parse_gdd() USB: storage: quirk for ADATA Portable HDD CH94 mei: me: add panther lake H DID KVM: x86: Reset IRTE to host control if *new* route isn't postable serial: sifive: lock port in startup()/shutdown() callbacks USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe USB: serial: option: add Sierra Wireless EM9291 USB: serial: simple: add OWON HDS200 series oscilloscope support usb: cdns3: Fix deadlock when using NCM gadget USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) usb: dwc3: gadget: check that event count does not exceed event buffer length usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive USB: VLI disk crashes if LPM is used MIPS: cm: Detect CM quirks from device tree crypto: null - Use spin lock instead of mutex clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() parisc: PDT: Fix missing prototype warning usb: host: max3421-hcd: Add missing spi_device_id table dmaengine: dmatest: Fix dmatest waiting less when interrupted usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler() qibfs: fix _another_ leak ntb: reduce stack usage in idt_scan_mws sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP KVM: s390: Don't use %pK through tracepoints udmabuf: fix a buf size overflow issue during udmabuf creation selftests: ublk: fix test_stripe_04 nvme: requeue namespace scan on missed AENs ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls nvme: re-read ANA log page after ns scan completes objtool: Stop UNRET validation on UD2 selftests/mincore: Allow read-ahead pages to reach the end of the file x86/bugs: Use SBPB in write_ibpb() if applicable x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline ext4: make block validity check resistent to sb bh corruption scsi: pm80xx: Set phy_attached to zero when device is gone md/raid1: Add check for missing source disk in process_checks() comedi: jr3_pci: Fix synchronous deletion of timer crypto: atmel-sha204a - Set hwrng quality to lowest possible xdp: Reset bpf_redirect_info before running a xdp's BPF prog. MIPS: cm: Fix warning if MIPS_CM is disabled nvme: fixup scan failure for non-ANA multipath controllers PCI: Fix use-after-free in pci_bus_release_domain_nr() soc: samsung: exynos-chipid: correct helpers __init annotation media: venus: Fix uninitialized variable count being checked for zero media: venus: hfi_parser: Check for instance after hfi platform get Linux 5.10.237 Change-Id: If150921e26efe7847f0df5fc543a06c22c62b1b2 Signed-off-by: Greg Kroah-Hartman Makefile | 5 +- arch/arm/mach-exynos/Kconfig | 1 - arch/arm64/boot/dts/mediatek/mt8173.dtsi | 6 +- arch/arm64/include/asm/cputype.h | 4 + arch/arm64/kernel/proton-pack.c | 1 + arch/mips/dec/prom/init.c | 2 +- arch/mips/include/asm/ds1287.h | 2 +- arch/mips/include/asm/mips-cm.h | 22 +++ arch/mips/kernel/cevt-ds1287.c | 1 + arch/mips/kernel/mips-cm.c | 14 ++ arch/parisc/kernel/pdt.c | 2 + arch/powerpc/kernel/rtas.c | 4 + arch/riscv/include/asm/kgdb.h | 9 +- arch/riscv/include/asm/syscall.h | 7 +- arch/riscv/kernel/kgdb.c | 6 + arch/s390/kvm/trace-s390.h | 4 +- arch/sparc/mm/tlb.c | 5 +- arch/x86/entry/entry.S | 2 +- arch/x86/events/intel/ds.c | 8 +- arch/x86/events/intel/uncore_snbep.c | 49 ++----- arch/x86/kernel/cpu/amd.c | 2 +- arch/x86/kernel/cpu/bugs.c | 8 +- arch/x86/kernel/e820.c | 17 ++- arch/x86/kvm/svm/avic.c | 60 ++++---- arch/x86/kvm/vmx/posted_intr.c | 28 ++-- arch/x86/platform/pvh/head.S | 7 +- block/blk-cgroup.c | 24 +++- block/blk-iocost.c | 7 +- crypto/crypto_null.c | 39 +++-- drivers/acpi/pptt.c | 4 +- drivers/ata/ahci.c | 2 + drivers/ata/libata-eh.c | 11 +- drivers/ata/pata_pxa.c | 6 + drivers/ata/sata_sx4.c | 118 ++++++--------- drivers/bluetooth/btrtl.c | 2 + drivers/bluetooth/hci_ldisc.c | 19 ++- drivers/bluetooth/hci_uart.h | 1 + drivers/char/virtio_console.c | 7 +- drivers/clk/clk.c | 4 + drivers/clocksource/timer-stm32-lp.c | 4 +- drivers/cpufreq/cpufreq.c | 8 ++ drivers/cpufreq/scpi-cpufreq.c | 13 +- drivers/crypto/atmel-sha204a.c | 7 +- drivers/crypto/caam/qi.c | 6 +- drivers/crypto/ccp/sp-pci.c | 15 +- drivers/dma-buf/udmabuf.c | 2 +- drivers/dma/dmatest.c | 6 +- drivers/gpio/gpio-zynq.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.h | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 10 ++ .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 2 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 14 +- .../gpu/drm/amd/display/dc/dcn21/dcn21_resource.c | 2 +- .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_thermal.c | 4 +- .../drm/amd/pm/powerplay/hwmgr/vega10_thermal.c | 4 +- .../drm/amd/pm/powerplay/hwmgr/vega20_thermal.c | 2 +- drivers/gpu/drm/drm_atomic_helper.c | 2 +- drivers/gpu/drm/drm_panel.c | 5 +- drivers/gpu/drm/drm_panel_orientation_quirks.c | 10 +- drivers/gpu/drm/i915/gt/intel_engine_cs.c | 7 +- drivers/gpu/drm/mediatek/mtk_dpi.c | 9 ++ drivers/gpu/drm/nouveau/nouveau_bo.c | 3 + drivers/gpu/drm/nouveau/nouveau_gem.c | 3 - drivers/gpu/drm/sti/Makefile | 2 - drivers/gpu/drm/tiny/repaper.c | 4 +- drivers/hid/usbhid/hid-pidff.c | 60 +++++--- drivers/hsi/clients/ssi_protocol.c | 1 + drivers/i2c/busses/i2c-cros-ec-tunnel.c | 3 + drivers/i3c/master.c | 3 + drivers/iio/adc/ad7768-1.c | 5 +- drivers/infiniband/core/umem_odp.c | 6 +- drivers/infiniband/hw/hns/hns_roce_main.c | 2 +- drivers/infiniband/hw/qib/qib_fs.c | 1 + drivers/infiniband/hw/usnic/usnic_ib_main.c | 14 +- drivers/iommu/amd/iommu.c | 2 +- drivers/mcb/mcb-parse.c | 2 +- drivers/md/dm-cache-target.c | 24 ++-- drivers/md/dm-integrity.c | 3 + drivers/md/raid1.c | 26 ++-- drivers/media/common/siano/smsdvb-main.c | 2 + drivers/media/i2c/adv748x/adv748x.h | 2 +- drivers/media/i2c/ov7251.c | 4 +- drivers/media/platform/qcom/venus/Makefile | 3 +- drivers/media/platform/qcom/venus/core.c | 17 --- drivers/media/platform/qcom/venus/core.h | 41 +----- drivers/media/platform/qcom/venus/helpers.c | 60 ++++---- drivers/media/platform/qcom/venus/helpers.h | 2 +- drivers/media/platform/qcom/venus/hfi.c | 18 ++- drivers/media/platform/qcom/venus/hfi_parser.c | 159 ++++++++++++++++----- drivers/media/platform/qcom/venus/hfi_parser.h | 2 +- drivers/media/platform/qcom/venus/hfi_platform.c | 49 +++++++ drivers/media/platform/qcom/venus/hfi_platform.h | 61 ++++++++ .../media/platform/qcom/venus/hfi_platform_v4.c | 60 ++++++++ drivers/media/platform/qcom/venus/hfi_venus.c | 18 ++- drivers/media/platform/qcom/venus/pm_helpers.c | 12 +- drivers/media/platform/qcom/venus/vdec.c | 8 +- drivers/media/platform/qcom/venus/venc.c | 91 ++++++++---- drivers/media/rc/streamzap.c | 135 +++++++---------- drivers/media/test-drivers/vim2m.c | 6 +- drivers/media/v4l2-core/v4l2-dv-timings.c | 4 +- drivers/mfd/ene-kb3930.c | 2 +- drivers/misc/mei/hw-me-regs.h | 1 + drivers/misc/mei/pci-me.c | 1 + drivers/misc/pci_endpoint_test.c | 6 +- drivers/mtd/inftlcore.c | 9 +- drivers/mtd/mtdpstore.c | 9 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 2 +- drivers/mtd/nand/raw/r852.c | 3 + drivers/net/dsa/b53/b53_common.c | 10 ++ drivers/net/dsa/mv88e6xxx/chip.c | 25 +++- drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 1 + drivers/net/ethernet/intel/igc/igc_main.c | 1 + drivers/net/ethernet/intel/igc/igc_ptp.c | 7 + .../net/ethernet/mellanox/mlx5/core/en/rep/neigh.c | 15 +- .../net/ethernet/mellanox/mlx5/core/en/rep/tc.c | 6 +- drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 33 ++++- drivers/net/ethernet/mellanox/mlx5/core/en_tc.h | 3 + drivers/net/phy/phy_led_triggers.c | 23 +-- drivers/net/ppp/ppp_synctty.c | 5 + drivers/net/wireless/ath/ath10k/sdio.c | 5 +- drivers/net/wireless/atmel/at76c50x-usb.c | 2 +- drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 1 + drivers/net/wireless/ti/wl1251/tx.c | 4 +- drivers/ntb/hw/idt/ntb_hw_idt.c | 18 +-- drivers/ntb/ntb_transport.c | 2 +- drivers/nvme/host/core.c | 10 ++ drivers/nvme/target/fc.c | 14 -- drivers/nvme/target/fcloop.c | 2 +- drivers/of/irq.c | 13 +- drivers/pci/controller/pcie-brcmstb.c | 13 +- drivers/pci/pci.c | 103 +++++++------ drivers/pci/probe.c | 58 ++++++-- drivers/pci/remove.c | 7 + drivers/perf/arm_pmu.c | 8 +- drivers/phy/tegra/xusb.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm.c | 12 +- drivers/platform/x86/asus-laptop.c | 9 +- .../x86/intel_speed_select_if/isst_if_common.c | 2 +- drivers/pwm/pwm-fsl-ftm.c | 6 + drivers/pwm/pwm-mediatek.c | 20 ++- drivers/pwm/pwm-rcar.c | 24 ++-- drivers/s390/block/dasd.c | 5 +- drivers/scsi/lpfc/lpfc_hbadisc.c | 2 + drivers/scsi/pm8001/pm8001_sas.c | 1 + drivers/scsi/scsi_transport_iscsi.c | 7 +- drivers/scsi/st.c | 2 +- drivers/scsi/ufs/ufs_bsg.c | 1 + drivers/soc/samsung/Kconfig | 12 +- drivers/soc/samsung/Makefile | 3 +- drivers/soc/samsung/exynos-asv.c | 45 ++---- drivers/soc/samsung/exynos-asv.h | 2 + drivers/soc/samsung/exynos-chipid.c | 137 ++++++++++++++---- drivers/soc/ti/omap_prm.c | 2 + drivers/spi/spi-cadence-quadspi.c | 6 + drivers/staging/comedi/drivers/jr3_pci.c | 15 +- drivers/staging/rtl8723bs/core/rtw_mlme.c | 2 + drivers/thermal/rockchip_thermal.c | 1 + drivers/tty/serial/sifive.c | 6 + drivers/usb/cdns3/gadget.c | 2 + drivers/usb/core/quirks.c | 9 ++ drivers/usb/dwc3/gadget.c | 6 + drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3 + drivers/usb/host/max3421-hcd.c | 7 + drivers/usb/host/ohci-pci.c | 23 +++ drivers/usb/serial/ftdi_sio.c | 2 + drivers/usb/serial/ftdi_sio_ids.h | 5 + drivers/usb/serial/option.c | 3 + drivers/usb/serial/usb-serial-simple.c | 7 + drivers/usb/storage/unusual_uas.h | 7 + drivers/vdpa/mlx5/core/mr.c | 7 +- drivers/vfio/pci/vfio_pci.c | 13 ++ drivers/video/backlight/led_bl.c | 5 +- drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 6 +- drivers/xen/xenfs/xensyms.c | 4 +- fs/Kconfig | 1 + fs/btrfs/super.c | 3 +- fs/cifs/cifs_debug.c | 6 + fs/cifs/cifsglob.h | 9 ++ fs/cifs/cifsproto.h | 7 +- fs/cifs/connect.c | 2 +- fs/cifs/smb2misc.c | 11 +- fs/cifs/smb2ops.c | 48 ++++--- fs/cifs/smb2pdu.c | 10 +- fs/cifs/transport.c | 43 +++--- fs/ext4/block_validity.c | 5 +- fs/ext4/inode.c | 76 +++++++--- fs/ext4/namei.c | 2 +- fs/ext4/super.c | 19 ++- fs/ext4/xattr.c | 11 +- fs/f2fs/node.c | 9 +- fs/fuse/virtio_fs.c | 3 + fs/hfs/bnode.c | 6 + fs/hfsplus/bnode.c | 6 + fs/isofs/export.c | 2 +- fs/jbd2/journal.c | 1 - fs/jfs/jfs_dmap.c | 12 +- fs/jfs/jfs_imap.c | 2 +- fs/namespace.c | 3 +- fs/nfs/Kconfig | 2 +- fs/nfs/internal.h | 22 --- fs/nfs/nfs4session.h | 4 - fs/nfsd/Kconfig | 1 + fs/proc/array.c | 52 ++++--- include/linux/backing-dev.h | 1 + include/linux/blk-cgroup.h | 1 + include/linux/filter.h | 4 + include/linux/nfs.h | 13 ++ include/linux/pci.h | 12 ++ include/linux/soc/samsung/exynos-chipid.h | 6 +- include/net/net_namespace.h | 1 + include/net/sctp/structs.h | 3 +- include/uapi/linux/kfd_ioctl.h | 2 + include/xen/interface/xen-mca.h | 2 +- init/Kconfig | 3 +- kernel/bpf/helpers.c | 11 +- kernel/bpf/syscall.c | 17 ++- kernel/dma/contiguous.c | 3 +- kernel/locking/lockdep.c | 3 + kernel/resource.c | 41 ++---- kernel/sched/cpufreq_schedutil.c | 19 ++- kernel/trace/ftrace.c | 1 + kernel/trace/trace.h | 4 + kernel/trace/trace_events.c | 4 +- kernel/trace/trace_events_filter.c | 4 +- kernel/trace/trace_events_hist.c | 7 +- kernel/trace/trace_events_synth.c | 82 ++++++++++- kernel/trace/trace_synth.h | 1 + lib/sg_split.c | 2 - mm/memory.c | 4 +- mm/vmscan.c | 2 +- net/8021q/vlan_dev.c | 31 +--- net/bluetooth/hci_event.c | 5 +- net/core/dev.c | 1 + net/core/filter.c | 80 ++++++----- net/core/net_namespace.c | 21 ++- net/core/page_pool.c | 8 +- net/ipv4/inet_connection_sock.c | 19 ++- net/mac80211/iface.c | 3 + net/mac80211/mesh_hwmp.c | 14 +- net/mptcp/protocol.c | 45 ++++++ net/mptcp/subflow.c | 15 +- net/netfilter/ipvs/ip_vs_ctl.c | 10 +- net/netfilter/nft_set_pipapo_avx2.c | 3 +- net/openvswitch/actions.c | 4 +- net/openvswitch/flow_netlink.c | 3 +- net/sched/sch_hfsc.c | 23 ++- net/sctp/socket.c | 22 +-- net/sctp/transport.c | 2 + net/tipc/link.c | 1 + net/tipc/monitor.c | 3 +- net/tls/tls_main.c | 6 + sound/pci/hda/hda_intel.c | 15 +- sound/soc/codecs/wcd934x.c | 2 +- sound/soc/qcom/qdsp6/q6asm-dai.c | 19 ++- sound/usb/midi.c | 80 ++++++++++- tools/objtool/check.c | 3 + tools/power/cpupower/bench/parse.c | 4 + tools/testing/selftests/mincore/mincore_selftest.c | 3 - tools/testing/selftests/ublk/test_stripe_04.sh | 24 ++++ .../selftests/vm/charge_reserved_hugetlb.sh | 4 +- .../selftests/vm/hugetlb_reparenting_test.sh | 2 +- 263 files changed, 2370 insertions(+), 1180 deletions(-) create mode 100644 drivers/media/platform/qcom/venus/hfi_platform.c create mode 100644 drivers/media/platform/qcom/venus/hfi_platform.h create mode 100644 drivers/media/platform/qcom/venus/hfi_platform_v4.c create mode 100755 tools/testing/selftests/ublk/test_stripe_04.sh accumulated error probability: 0.00 revisions tested: 13, total time: 3h2m54.916926195s (build: 45m50.792691101s, test: 2h13m53.691274794s) first good commit: 5131ebcdc5b088d659d670611042516f2c501aa6 Merge 5.10.237 into android13-5.10-lts recipients (to): ["gregkh@google.com"] recipients (cc): []