This bug was fixed in the package linux-azure-cvm - 5.4.0-1063.66+cvm2 --------------- linux-azure-cvm (5.4.0-1063.66+cvm2) focal; urgency=medium * focal/linux-azure-cvm: 5.4.0-1063.66+cvm2 -proposed tracker (LP: #1947232) * linux-azure-cvm: Create a 5.4 based kernel (LP: #1948057) - Revert "UBUNTU: [Packaging] linux-azure-cvm: Disable UEFI signed kernel image" * Backport commits required for confidential VMs (LP: #1915146) - SAUCE: x86/hyperv: Load/save the Isolation Configuration leaf - SAUCE: x86/Hyper-V: Add visibility parameter for vmbus_establish_gpadl() - SAUCE: x86/Hyper-V: Add new hvcall guest address host visibility support - SAUCE: HV: Get Hyper-V Isolated VM capability - SAUCE: HV: Add Write/Read MSR registers via ghcb - SAUCE: HV: Add ghcb hvcall support for SNP VM - SAUCE: HV/Vmbus: Add SNP support for VMbus channel initiate message - SAUCE: hv/vmbus: Initialize VMbus ring buffer for Isolated VM - SAUCE: x86/Hyper-V: Initialize bounce buffer page cache and list - SAUCE: x86/Hyper-V: Add new parameter for vmbus_sendpacket_pagebuffer()/mpb_desc() - SAUCE: x86/Hyper-V: Copy data from/to bounce buffer during IO operation. - SAUCE: HV/Netvsc: Add SNP support for netvsc driver - SAUCE: HV/Storvsc: Add bounce buffer support for Storvsc - hv_netvsc: Remove unnecessary round_up for recv_completion_cnt - hv_netvsc: Add validation for untrusted Hyper-V values - drivers: hv: vmbus: Introduce latency testing - Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening - scsi: storvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening - hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening - SAUCE: Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the ring buffer - SAUCE: hv_utils: Add validation for untrusted Hyper-V values - SAUCE: Drivers: hv: vmbus: Initialize memory to be sent to the host - Drivers: hv: copy from message page only what's needed - Drivers: hv: check VMBus messages lengths - Drivers: hv: allocate the exact needed memory for messages - SAUCE: Drivers: hv: vmbus: Reduce number of references to message in vmbus_on_msg_dpc() - Drivers: hv: make sure that 'struct vmbus_channel_message_header' compiles correctly - SAUCE: Drivers: hv: vmbus: Resolve race condition in vmbus_onoffer_rescind() - SAUCE: scsi: storvsc: Fix max_outstanding_req_per_channel for Win8 and newer - SAUCE: scsi: storvsc: Resolve data race in storvsc_probe() - SAUCE: scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() - SAUCE: hv_netvsc: Add (more) validation for untrusted Hyper-V values - Drivers: hv: vmbus: Introduce table of VMBus protocol versions - Drivers: hv: vmbus: Enable VMBus protocol versions 4.1, 5.1 and 5.2 - SAUCE: Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests - SAUCE: Drivers: hv: vmbus: Enforce 'VMBus version >= 5.2' on isolated guests - SAUCE: hv_netvsc: Restrict configurations on isolated guests - SAUCE: hv_netvsc: Copy packets sent by Hyper-V out of the receive buffer - SAUCE: HV/Bounce buffer: Add SMP support in the bounce buffer code - SAUCE: HV/IVM: Disable interrupt when read ghcb - SAUCE: HV/Netvsc: Unmap recv_buf and send buf in extra address space - SAUCE: HV: Set gpadl buffer not visible to host when return buffer back to system - SAUCE: Stovsc: Reserve bounce buffer for storvsc subchannel - hv_netvsc: Validate number of allocated sub-channels - SAUCE: Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc() - SAUCE: hv_netvsc: Allocate the recv_buf buffers after NVSP_MSG1_TYPE_SEND_RECV_BUF - SAUCE: hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet info - SAUCE: HV/Netvsc: Fix dropping package during high network throughput - SAUCE: Netvsc: Fix race condition with skb - SAUCE: HV/IVM: Add support for new AMD GHCB spec - [Config] azure: CONFIG_HYPERV_TESTING=y - Drivers: hv: vmbus: Use after free in __vmbus_open() - hv_netvsc: Cache the current data path to avoid duplicate call and message - hv_netvsc: Wait for completion on request SWITCH_DATA_PATH - Drivers: hv: vmbus: Drop error message when 'No request id available' - SAUCE: Revert "UBUNTU: SAUCE: Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the ring buffer" - SAUCE: Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the ring buffer - SAUCE: scsi: storvsc: Use blk_mq_unique_tag() to generate requestIDs - SAUCE: HV/Storvsc: Adjust bounce buffer in on_channel_callback - SAUCE: move hv_init_channel_ivm before vmbus_device_register - SAUCE: vmbus: Fix reserve bounce buffer isn't released during unloading driver - SAUCE: scsi: storvsc: Fix validation for unsolicited incoming packets [ Ubuntu: 5.4.0-1063.66 ] * focal/linux-azure: 5.4.0-1063.66 -proposed tracker (LP: #1947235) * focal/linux: 5.4.0-90.101 -proposed tracker (LP: #1947260) * Packaging resync (LP: #1786013) - debian/dkms-versions -- update from kernel-versions (main/2021.10.18) * Add final-checks to check certificates (LP: #1947174) - [Packaging] Add system trusted and revocation keys final check * No sound on Lenovo laptop models Legion 15IMHG05, Yoga 7 14ITL5, and 13s Gen2 (LP: #1939052) - ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops. - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2 * CVE-2020-36385 - RDMA/cma: Add missing locking to rdma_accept() - RDMA/ucma: Fix the locking of ctx->file - RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy * Focal update: v5.4.148 upstream stable release (LP: #1946802) - rtc: tps65910: Correct driver module alias - btrfs: wake up async_delalloc_pages waiters after submit - btrfs: reset replace target device to allocation state on close - blk-zoned: allow zone management send operations without CAP_SYS_ADMIN - blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN - PCI/MSI: Skip masking MSI-X on Xen PV - powerpc/perf/hv-gpci: Fix counter value parsing - xen: fix setting of max_pfn in shared_info - include/linux/list.h: add a macro to test if entry is pointing to the head - 9p/xen: Fix end of loop tests for list_for_each_entry - tools/thermal/tmon: Add cross compiling support - pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast - pinctrl: ingenic: Fix incorrect pull up/down info - soc: qcom: aoss: Fix the out of bound usage of cooling_devs - soc: aspeed: lpc-ctrl: Fix boundary check for mmap - soc: aspeed: p2a-ctrl: Fix boundary check for mmap - arm64: head: avoid over-mapping in map_memory - crypto: public_key: fix overflow during implicit conversion - block: bfq: fix bfq_set_next_ioprio_data() - power: supply: max17042: handle fails of reading status register - dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() - VMCI: fix NULL pointer dereference when unmapping queue pair - media: uvc: don't do DMA on stack - media: rc-loopback: return number of emitters rather than error - Revert "dmaengine: imx-sdma: refine to load context only once" - dmaengine: imx-sdma: remove duplicated sdma_load_context - libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs - ARM: 9105/1: atags_to_fdt: don't warn about stack size - PCI/portdrv: Enable Bandwidth Notification only if port supports it - PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported - PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure - PCI: xilinx-nwl: Enable the clock through CCF - PCI: aardvark: Fix checking for PIO status - PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response - PCI: aardvark: Fix masking and unmasking legacy INTx interrupts - HID: input: do not report stylus battery state as "full" - f2fs: quota: fix potential deadlock - scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND - IB/hfi1: Adjust pkey entry in index 0 - RDMA/iwcm: Release resources if iw_cm module initialization fails - docs: Fix infiniband uverbs minor number - pinctrl: samsung: Fix pinctrl bank pin count - vfio: Use config not menuconfig for VFIO_NOIOMMU - powerpc/stacktrace: Include linux/delay.h - RDMA/efa: Remove double QP type assignment - f2fs: show f2fs instance in printk_ratelimited - f2fs: reduce the scope of setting fsck tag when de->name_len is zero - openrisc: don't printk() unconditionally - dma-debug: fix debugfs initialization order - SUNRPC: Fix potential memory corruption - scsi: fdomain: Fix error return code in fdomain_probe() - pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() - scsi: smartpqi: Fix an error code in pqi_get_raid_map() - scsi: qedi: Fix error codes in qedi_alloc_global_queues() - scsi: qedf: Fix error codes in qedf_alloc_global_queues() - powerpc/config: Renable MTD_PHYSMAP_OF - scsi: target: avoid per-loop XCOPY buffer allocations - HID: i2c-hid: Fix Elan touchpad regression - KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live - platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call - fscache: Fix cookie key hashing - clk: at91: sam9x60: Don't use audio PLL - clk: at91: clk-generated: pass the id of changeable parent at registration - clk: at91: clk-generated: Limit the requested rate to our range - KVM: PPC: Fix clearing never mapped TCEs in realmode - f2fs: fix to account missing .skipped_gc_rwsem - f2fs: fix unexpected ENOENT comes from f2fs_map_blocks() - f2fs: fix to unmap pages from userspace process in punch_hole() - MIPS: Malta: fix alignment of the devicetree buffer - kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y - userfaultfd: prevent concurrent API initialization - drm/amdgpu: Fix amdgpu_ras_eeprom_init() - ASoC: atmel: ATMEL drivers don't need HAS_DMA - media: dib8000: rewrite the init prbs logic - crypto: mxs-dcp - Use sg_mapping_iter to copy data - PCI: Use pci_update_current_state() in pci_enable_device_flags() - tipc: keep the skb in rcv queue until the whole data is read - iio: dac: ad5624r: Fix incorrect handling of an optional regulator. - iavf: do not override the adapter state in the watchdog task - iavf: fix locking of critical sections - ARM: dts: qcom: apq8064: correct clock names - video: fbdev: kyro: fix a DoS bug by restricting user input - netlink: Deal with ESRCH error in nlmsg_notify() - Smack: Fix wrong semantics in smk_access_entry() - drm: avoid blocking in drm_clients_info's rcu section - igc: Check if num of q_vectors is smaller than max before array access - usb: host: fotg210: fix the endpoint's transactional opportunities calculation - usb: host: fotg210: fix the actual_length of an iso packet - usb: gadget: u_ether: fix a potential null pointer dereference - USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable() - usb: gadget: composite: Allow bMaxPower=0 if self-powered - staging: board: Fix uninitialized spinlock when attaching genpd - tty: serial: jsm: hold port lock when reporting modem line changes - drm/amd/display: Fix timer_per_pixel unit error - drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex - bpf/tests: Fix copy-and-paste error in double word test - bpf/tests: Do not PASS tests without actually testing the result - video: fbdev: asiliantfb: Error out if 'pixclock' equals zero - video: fbdev: kyro: Error out if 'pixclock' equals zero - video: fbdev: riva: Error out if 'pixclock' equals zero - ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() - flow_dissector: Fix out-of-bounds warnings - s390/jump_label: print real address in a case of a jump label bug - s390: make PCI mio support a machine flag - serial: 8250: Define RX trigger levels for OxSemi 950 devices - xtensa: ISS: don't panic in rs_init - hvsi: don't panic on tty_register_driver failure - serial: 8250_pci: make setup_port() parameters explicitly unsigned - staging: ks7010: Fix the initialization of the 'sleep_status' structure - samples: bpf: Fix tracex7 error raised on the missing argument - ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init() - Bluetooth: skip invalid hci_sync_conn_complete_evt - workqueue: Fix possible memory leaks in wq_numa_init() - bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler() - arm64: tegra: Fix Tegra194 PCIe EP compatible string - ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output - media: imx258: Rectify mismatch of VTS value - media: imx258: Limit the max analogue gain to 480 - media: v4l2-dv-timings.c: fix wrong condition in two for-loops - media: TDA1997x: fix tda1997x_query_dv_timings() return value - media: tegra-cec: Handle errors of clk_prepare_enable() - ARM: dts: imx53-ppd: Fix ACHC entry - arm64: dts: qcom: sdm660: use reg value for memory node - net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe() - drm/msm: mdp4: drop vblank get/put from prepare/complete_commit - selftests/bpf: Fix xdp_tx.c prog section name - Bluetooth: schedule SCO timeouts with delayed_work - Bluetooth: avoid circular locks in sco_sock_connect - net/mlx5: Fix variable type to match 64bit - gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() - drm/display: fix possible null-pointer dereference in dcn10_set_clock() - mac80211: Fix monitor MTU limit so that A-MSDUs get through - ARM: tegra: tamonten: Fix UART pad setting - arm64: tegra: Fix compatible string for Tegra132 CPUs - arm64: dts: ls1046a: fix eeprom entries - nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data - Bluetooth: Fix handling of LE Enhanced Connection Complete - opp: Don't print an error if required-opps is missing - serial: sh-sci: fix break handling for sysrq - tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD - rpc: fix gss_svc_init cleanup on failure - staging: rts5208: Fix get_ms_information() heap buffer size - gfs2: Don't call dlm after protocol is unmounted - usb: chipidea: host: fix port index underflow and UBSAN complains - lockd: lockd server-side shouldn't set fl_ops - drm/exynos: Always initialize mapping in exynos_drm_register_dma() - m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch - btrfs: tree-log: check btrfs_lookup_data_extent return value - ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER - ASoC: Intel: Skylake: Fix passing loadable flag for module - of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS - mmc: sdhci-of-arasan: Check return value of non-void funtions - mmc: rtsx_pci: Fix long reads when clock is prescaled - selftests/bpf: Enlarge select() timeout for test_maps - mmc: core: Return correct emmc response in case of ioctl error - cifs: fix wrong release in sess_alloc_buffer() failed path - Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set" - usb: musb: musb_dsps: request_irq() after initializing musb - usbip: give back URBs for unsent unlink requests during cleanup - usbip:vhci_hcd USB port can get stuck in the disabled state - ASoC: rockchip: i2s: Fix regmap_ops hang - ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B - drm/amdkfd: Account for SH/SE count when setting up cu masks. - iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed - iwlwifi: mvm: avoid static queue number aliasing - iwlwifi: mvm: fix access to BSS elements - net/mlx5: DR, Enable QP retransmission - parport: remove non-zero check on count - ath9k: fix OOB read ar9300_eeprom_restore_internal - ath9k: fix sleeping in atomic context - net: fix NULL pointer reference in cipso_v4_doi_free - fix array-index-out-of-bounds in taprio_change - net: w5100: check return value after calling platform_get_resource() - parisc: fix crash with signals and alloca - ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup() - scsi: BusLogic: Fix missing pr_cont() use - scsi: qla2xxx: Changes to support kdump kernel - scsi: qla2xxx: Sync queue idx with queue_pair_map idx - cpufreq: powernv: Fix init_chip_info initialization in numa=off - s390/pv: fix the forcing of the swiotlb - mm/hugetlb: initialize hugetlb_usage in mm_init - mm,vmscan: fix divide by zero in get_scan_count - memcg: enable accounting for pids in nested pid namespaces - platform/chrome: cros_ec_proto: Send command again when timeout occurs - lib/test_stackinit: Fix static initializer test - net: dsa: lantiq_gswip: fix maximum frame length - drm/msi/mdp4: populate priv->kms in mdp4_kms_init - drm/amdgpu: Fix BUG_ON assert - drm/panfrost: Simplify lock_region calculation - drm/panfrost: Use u64 for size in lock_region - drm/panfrost: Clamp lock region to Bifrost minimum - btrfs: fix upper limit for max_inline for page size 64K - xen: reset legacy rtc flag for PV domU - bnx2x: Fix enabling network interfaces without VFs - arm64/sve: Use correct size when reinitialising SVE state - PM: base: power: don't try to use non-existing RTC for storing data - PCI: Add AMD GPU multi-function power dependencies - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 - drm/etnaviv: return context from etnaviv_iommu_context_get - drm/etnaviv: put submit prev MMU context when it exists - drm/etnaviv: stop abusing mmu_context as FE running marker - drm/etnaviv: keep MMU context across runtime suspend/resume - drm/etnaviv: exec and MMU state is lost when resetting the GPU - drm/etnaviv: fix MMU context leak on GPU reset - drm/etnaviv: reference MMU context when setting up hardware state - drm/etnaviv: add missing MMU context put when reaping MMU mapping - s390/sclp: fix Secure-IPL facility detection - x86/mm: Fix kern_addr_valid() to cope with existing but not present entries - tipc: fix an use-after-free issue in tipc_recvmsg - net-caif: avoid user-triggerable WARN_ON(1) - ptp: dp83640: don't define PAGE0 - net/l2tp: Fix reference count leak in l2tp_udp_recv_core - r6040: Restore MDIO clock frequency after MAC reset - tipc: increase timeout in tipc_sk_enqueue() - perf machine: Initialize srcline string member in add_location struct - net/mlx5: FWTrace, cancel work on alloc pd error flow - net/mlx5: Fix potential sleeping in atomic context - events: Reuse value read using READ_ONCE instead of re-reading it - vhost_net: fix OoB on sendmsg() failure. - net/af_unix: fix a data-race in unix_dgram_poll - net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup - tcp: fix tp->undo_retrans accounting in tcp_sacktag_one() - qed: Handle management FW error - dt-bindings: arm: Fix Toradex compatible typo - ibmvnic: check failover_pending in login response - KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers - net: hns3: pad the short tunnel frame before sending to hardware - net: hns3: change affinity_mask to numa node range - net: hns3: disable mac in flr process - net: hns3: fix the timing issue of VF clearing interrupt sources - mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range() - dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation - mfd: db8500-prcmu: Adjust map to reality - PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms - fuse: fix use after free in fuse_read_interrupt() - mfd: Don't use irq_create_mapping() to resolve a mapping - tracing/probes: Reject events which have the same name of existing one - PCI: Add ACS quirks for Cavium multi-function devices - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 - net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 - PCI: ibmphp: Fix double unmap of io_mem - ethtool: Fix an error code in cxgb2.c - NTB: Fix an error code in ntb_msit_probe() - NTB: perf: Fix an error code in perf_setup_inbuf() - mfd: axp20x: Update AXP288 volatile ranges - PCI: Fix pci_dev_str_match_path() alloc while atomic bug - mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set - KVM: arm64: Handle PSCI resets before userspace touches vCPU state - PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n - mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' - ARC: export clear_user_page() for modules - perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} - net: dsa: b53: Fix calculating number of switch ports - netfilter: socket: icmp6: fix use-after-scope - fq_codel: reject silly quantum parameters - qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom - ip_gre: validate csum_start only on pull - net: renesas: sh_eth: Fix freeing wrong tx descriptor - Linux 5.4.148 * Focal update: v5.4.147 upstream stable release (LP: #1946795) - Linux 5.4.147 - upstream stable to v5.4.147 * CVE-2021-3428 - ext4: save the error code which triggered an ext4_error() in the superblock - ext4: simulate various I/O and checksum errors when reading metadata - ext4: save all error info in save_error_info() and drop ext4_set_errno() - ext4: check journal inode extents more carefully * ip6gretap / erspan / ip6erspan in rtnetlink.sh from net of ubuntu_kernel_selftests failed on B-5.4-aws / B-5.4-gke / B-5.4-oracle / B-5.4-azure / B-5.4 (LP: #1896448) - SAUCE: selftests: rtnetlink: fixes for older iproute2 * CVE-2019-19449 - f2fs: fix wrong total_sections check and fsmeta check - f2fs: fix to do sanity check on segment/section count * kernel bug found when disconnecting one fiber channel interface on Cisco Chassis with fnic DRV_VERSION "1.6.0.47" (LP: #1944586) - scsi: fnic: Do not call 'scsi_done()' for unhandled commands * memfd from ubuntu_kernel_selftests failed to build on B-5.4 (unknown type name ‘__u64’) (LP: #1944613) - SAUCE: selftests/memfd: fix __u64 not defined build issue * Medion Notebook Keyboard not working (LP: #1909814) - ACPI: resources: Add DMI-based legacy IRQ override quirk * vrf: fix refcnt leak with vxlan slaves (LP: #1945180) - ipv4: Fix device used for dst_alloc with local routes * Check for changes relevant for security certifications (LP: #1945989) - [Packaging] Add a new fips-checks script - [Packaging] Add fips-checks as part of finalchecks * Fix cold plugged USB device on certain PCIe USB cards (LP: #1945211) - Revert "UBUNTU: SAUCE: Revert "usb: core: reduce power-on-good delay time of root hub"" - usb: core: hcd: Add support for deferring roothub registration - xhci: Set HCD flag to defer primary roothub registration - usb: core: hcd: Modularize HCD stop configuration in usb_stop_hcd() * CVE-2021-3759 - memcg: enable accounting of ipc resources * Focal update: v5.4.146 upstream stable release (LP: #1946024) - locking/mutex: Fix HANDOFF condition - regmap: fix the offset of register error log - crypto: mxs-dcp - Check for DMA mapping errors - sched/deadline: Fix reset_on_fork reporting of DL tasks - power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors - crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop() - sched/deadline: Fix missing clock update in migrate_task_rq_dl() - rcu/tree: Handle VM stoppage in stall detection - hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns() - hrtimer: Ensure timerfd notification for HIGHRES=n - udf: Check LVID earlier - udf: Fix iocharset=utf8 mount option - isofs: joliet: Fix iocharset=utf8 mount option - bcache: add proper error unwinding in bcache_device_init - nvme-tcp: don't update queue count when failing to set io queues - nvme-rdma: don't update queue count when failing to set io queues - nvmet: pass back cntlid on successful completion - power: supply: max17042_battery: fix typo in MAx17042_TOFF - s390/cio: add dev_busid sysfs entry for each subchannel - libata: fix ata_host_start() - crypto: qat - do not ignore errors from enable_vf2pf_comms() - crypto: qat - handle both source of interrupt in VF ISR - crypto: qat - fix reuse of completion variable - crypto: qat - fix naming for init/shutdown VF to PF notifications - crypto: qat - do not export adf_iov_putmsg() - fcntl: fix potential deadlock for &fasync_struct.fa_lock - udf_get_extendedattr() had no boundary checks. - s390/kasan: fix large PMD pages address alignment check - s390/debug: fix debug area life cycle - m68k: emu: Fix invalid free in nfeth_cleanup() - sched: Fix UCLAMP_FLAG_IDLE setting - spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config - spi: spi-pic32: Fix issue with uninitialized dma_slave_config - genirq/timings: Fix error return code in irq_timings_test_irqs() - lib/mpi: use kcalloc in mpi_resize - clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel - crypto: qat - use proper type for vf_mask - certs: Trigger creation of RSA module signing key if it's not an RSA key - regulator: vctrl: Use locked regulator_get_voltage in probe path - regulator: vctrl: Avoid lockdep warning in enable/disable ops - spi: sprd: Fix the wrong WDG_LOAD_VAL - spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible - EDAC/i10nm: Fix NVDIMM detection - drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init() - media: TDA1997x: enable EDID support - soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally - media: cxd2880-spi: Fix an error handling path - bpf: Fix a typo of reuseport map in bpf.h. - bpf: Fix potential memleak and UAF in the verifier. - ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi - arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties - soc: qcom: rpmhpd: Use corner in power_off - media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init - media: dvb-usb: fix uninit-value in vp702x_read_mac_addr - media: dvb-usb: Fix error handling in dvb_usb_i2c_init - media: go7007: remove redundant initialization - media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats - Bluetooth: sco: prevent information leak in sco_conn_defer_accept() - 6lowpan: iphc: Fix an off-by-one check of array index - netns: protect netns ID lookups with RCU - tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos - ARM: dts: meson8: Use a higher default GPU clock frequency - ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties - ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties - ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties - net/mlx5e: Prohibit inner indir TIRs in IPoIB - cgroup/cpuset: Fix a partition bug with hotplug - net: cipso: fix warnings in netlbl_cipsov4_add_std - i2c: highlander: add IRQ check - leds: lt3593: Put fwnode in any case during ->probe() - leds: trigger: audio: Add an activate callback to ensure the initial brightness is set - media: em28xx-input: fix refcount bug in em28xx_usb_disconnect - media: venus: venc: Fix potential null pointer dereference on pointer fmt - PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently - PCI: PM: Enable PME if it can be signaled from D3cold - soc: qcom: smsm: Fix missed interrupts if state changes while masked - debugfs: Return error during {full/open}_proxy_open() on rmmod - Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow - PM: EM: Increase energy calculation precision - drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs - arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7 - counter: 104-quad-8: Return error when invalid mode during ceiling_write - Bluetooth: fix repeated calls to sco_sock_kill - drm/msm/dsi: Fix some reference counted resource leaks - usb: gadget: udc: at91: add IRQ check - usb: phy: fsl-usb: add IRQ check - usb: phy: twl6030: add IRQ checks - usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse - usb: host: ohci-tmio: add IRQ check - usb: phy: tahvo: add IRQ check - mac80211: Fix insufficient headroom issue for AMSDU - lockd: Fix invalid lockowner cast after vfs_test_lock - nfsd4: Fix forced-expiry locking - usb: gadget: mv_u3d: request_irq() after initializing UDC - mm/swap: consider max pages in iomap_swapfile_add_extent - Bluetooth: add timeout sanity check to hci_inquiry - i2c: iop3xx: fix deferred probing - i2c: s3c2410: fix IRQ check - rsi: fix error code in rsi_load_9116_firmware() - rsi: fix an error code in rsi_probe() - ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs - ASoC: Intel: Skylake: Fix module resource and format selection - mmc: dw_mmc: Fix issue with uninitialized dma_slave_config - mmc: moxart: Fix issue with uninitialized dma_slave_config - bpf: Fix possible out of bound write in narrow load handling - CIFS: Fix a potencially linear read overflow - i2c: mt65xx: fix IRQ check - usb: ehci-orion: Handle errors of clk_prepare_enable() in probe - usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available - tty: serial: fsl_lpuart: fix the wrong mapbase value - ASoC: wcd9335: Fix a double irq free in the remove function - ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function - ASoC: wcd9335: Disable irq on slave ports in the remove function - ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() - bcma: Fix memory leak for internally-handled cores - brcmfmac: pcie: fix oops on failure to resume and reprobe - ipv6: make exception cache less predictible - ipv4: make exception cache less predictible - net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed - net: qualcomm: fix QCA7000 checksum handling - octeontx2-af: Fix loop in free and unmap counter - ipv4: fix endianness issue in inet_rtm_getroute_build_skb() - bpf: Introduce BPF nospec instruction for mitigating Spectre v4 - bpf: Fix leakage due to insufficient speculative store bypass mitigation - bpf: verifier: Allocate idmap scratch in verifier env - bpf: Fix pointer arithmetic mask tightening under state pruning - tty: Fix data race between tiocsti() and flush_to_ldisc() - perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op - x86/resctrl: Fix a maybe-uninitialized build warning treated as error - KVM: s390: index kvm->arch.idle_mask by vcpu_idx - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted - KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter - fuse: truncate pagecache on atomic_o_trunc - fuse: flush extending writes - IMA: remove -Wmissing-prototypes warning - IMA: remove the dependency on CRYPTO_MD5 - fbmem: don't allow too huge resolutions - backlight: pwm_bl: Improve bootloader/kernel device handover - clk: kirkwood: Fix a clocking boot regression - Linux 5.4.146 * AMD A8-7680 (amdgpu): broken Xorg acceleration and hibernation (LP: #1920674) // Focal update: v5.4.146 upstream stable release (LP: #1946024) - drm/amdgpu/acp: Make PM domain really work * Focal update: v5.4.145 upstream stable release (LP: #1945517) - fscrypt: add fscrypt_symlink_getattr() for computing st_size - ext4: report correct st_size for encrypted symlinks - f2fs: report correct st_size for encrypted symlinks - ubifs: report correct st_size for encrypted symlinks - kthread: Fix PF_KTHREAD vs to_kthread() race - xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG - gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V formats - reset: reset-zynqmp: Fixed the argument data type - qed: Fix the VF msix vectors flow - net: macb: Add a NULL check on desc_ptp - qede: Fix memset corruption - perf/x86/intel/pt: Fix mask of num_address_ranges - perf/x86/amd/ibs: Work around erratum #1197 - perf/x86/amd/power: Assign pmu.module - cryptoloop: add a deprecation warning - ARM: 8918/2: only build return_address() if needed - ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17 - ALSA: pcm: fix divide error in snd_pcm_lib_ioctl - ARC: wireup clone3 syscall - media: stkwebcam: fix memory leak in stk_camera_probe - igmp: Add ip_mc_list lock in ip_check_mc_rcu - USB: serial: mos7720: improve OOM-handling in read_mos_reg() - ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2) - powerpc/boot: Delete unneeded .globl _zimage_start - net: ll_temac: Remove left-over debug message - mm/page_alloc: speed up the iteration of max_order - Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM" - x86/events/amd/iommu: Fix invalid Perf result due to IOMMU PMC power-gating - Revert "btrfs: compression: don't try to compress if we don't have enough pages" - ALSA: usb-audio: Add registration quirk for JBL Quantum 800 - usb: host: xhci-rcar: Don't reload firmware after the completion - usb: mtu3: use @mult for HS isoc or intr - usb: mtu3: fix the wrong HS mult value - xhci: fix unsafe memory usage in xhci tracing - x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions - PCI: Call Max Payload Size-related fixup quirks early - Linux 5.4.145 * Focal update: v5.4.144 upstream stable release (LP: #1944756) - net: qrtr: fix another OOB Read in qrtr_endpoint_post - ARC: Fix CONFIG_STACKDEPOT - netfilter: conntrack: collect all entries in one cycle - once: Fix panic when module unload - ovl: fix uninitialized pointer read in ovl_lookup_real_one() - mmc: sdhci-msm: Update the software timeout value for sdhc - mm, oom: make the calculation of oom badness more accurate - can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters - Revert "USB: serial: ch341: fix character loss at high transfer rates" - USB: serial: option: add new VID/PID to support Fibocom FG150 - usb: dwc3: gadget: Fix dwc3_calc_trbs_left() - usb: dwc3: gadget: Stop EP0 transfers during pullup disable - scsi: core: Fix hang of freezing queue between blocking and running device - RDMA/bnxt_re: Add missing spin lock initialization - IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() - e1000e: Fix the max snoop/no-snoop latency for 10M - RDMA/efa: Free IRQ vectors on error flow - ip_gre: add validation for csum_start - xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()' - net: marvell: fix MVNETA_TX_IN_PRGRS bit number - rtnetlink: Return correct error on changing device netns - net: hns3: clear hardware resource when loading driver - net: hns3: fix duplicate node in VLAN list - net: hns3: fix get wrong pfc_en when query PFC configuration - drm/i915: Fix syncmap memory leak - usb: gadget: u_audio: fix race condition on endpoint stop - perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32 - opp: remove WARN when no valid OPPs remain - virtio: Improve vq->broken access to avoid any compiler optimization - virtio_pci: Support surprise removal of virtio pci device - vringh: Use wiov->used to check for read/write desc order - qed: qed ll2 race condition fixes - qed: Fix null-pointer dereference in qed_rdma_create_qp() - drm: Copy drm_wait_vblank to user before returning - drm/nouveau/disp: power down unused DP links during init - net/rds: dma_map_sg is entitled to merge entries - btrfs: fix race between marking inode needs to be logged and log syncing - vt_kdsetmode: extend console locking - bpf: Track contents of read-only maps as scalars - bpf: Fix cast to pointer from integer of different size warning - net: dsa: mt7530: fix VLAN traffic leaks again - KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs - arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88 - btrfs: fix NULL pointer dereference when deleting device by invalid id - Revert "floppy: reintroduce O_NDELAY fix" - Revert "parisc: Add assembly implementations for memset, strlen, strcpy, strncpy and strcat" - net: don't unconditionally copy_from_user a struct ifreq for socket ioctls - audit: move put_tree() to avoid trim_trees refcount underflow and UAF - Linux 5.4.144 linux-azure-cvm (5.4.0-1062.65+cvm1) focal; urgency=medium * focal/linux-azure: 5.4.0-1062.65 -proposed tracker (LP: #1946370) * Packaging resync (LP: #1786013) - [Packaging] update variants - [Packaging] update Ubuntu.md - [Packaging] update update.conf * linux-azure-cvm: Create a 5.4 based kernel (LP: #1948057) - [Packaging] linux-azure-cvm: Initial packaging - [Packaging] linux-azure-cvm: Update getabis - [Packaging] linux-azure-cvm: Introduce copy-files and local-mangle - [Packaging] linux-azure-cvm: Automatically sync with linux-azure - [Packaging] linux-azure-cvm: Update the kernel flavour - [Packaging] linux-azure-cvm: Use +fips as custom version suffix - [Packaging] linux-azure-cvm: Add support for custom configs - [Packaging] linux-azure-cvm: Disable UEFI signed kernel image [ Ubuntu: 5.4.0-1062.65 ] * focal/linux-azure: 5.4.0-1062.65 -proposed tracker (LP: #1946370) * focal/linux: 5.4.0-89.100 -proposed tracker (LP: #1944901) * Packaging resync (LP: #1786013) - debian/dkms-versions -- update from kernel-versions (main/2021.09.27) * ext4 journal recovery fails w/ data=journal + mmap (LP: #1847340) - jbd2: introduce/export functions jbd2_journal_submit|finish_inode_data_buffers() - jbd2, ext4, ocfs2: introduce/use journal callbacks j_submit|finish_inode_data_buffers() - ext4: data=journal: fixes for ext4_page_mkwrite() - ext4: data=journal: write-protect pages on j_submit_inode_data_buffers() - ext4: fix mmap write protection for data=journal mode * CVE-2021-40490 - ext4: fix race writing to an inline_data file while its xattrs are changing * Obsolete patch "UBUNTU: SAUCE: ext4: fix directory index node split corruption" (LP: #1942902) - Revert "UBUNTU: SAUCE: ext4: fix directory index node split corruption" * psock_snd.sh in net from ubuntu_kernel_selftests ADT failure with focal/groovy/hirsute/impish (LP: #1892213) - selftests/net: remove min gso test in packet_snd * Focal update: v5.4.143 upstream stable release (LP: #1944212) - ext4: fix EXT4_MAX_LOGICAL_BLOCK macro - x86/fpu: Make init_fpstate correct with optimized XSAVE - ath: Use safer key clearing with key cache entries - ath9k: Clear key cache explicitly on disabling hardware - ath: Export ath_hw_keysetmac() - ath: Modify ath_key_delete() to not need full key entry - ath9k: Postpone key cache entry deletion for TXQ frames reference it - mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards - media: zr364xx: propagate errors from zr364xx_start_readpipe() - media: zr364xx: fix memory leaks in probe() - media: drivers/media/usb: fix memory leak in zr364xx_probe - USB: core: Avoid WARNings for 0-length descriptor requests - dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers - dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() - ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218 - dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available - scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry() - scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach() - scsi: core: Avoid printing an error if target_alloc() returns -ENXIO - scsi: core: Fix capacity set to zero after offlinining device - ARM: dts: nomadik: Fix up interrupt controller node names - net: usb: lan78xx: don't modify phy_device state concurrently - drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X - Bluetooth: hidp: use correct wait queue when removing ctrl_wait - iommu: Check if group is NULL before remove device - cpufreq: armada-37xx: forbid cpufreq for 1.2 GHz variant - dccp: add do-while-0 stubs for dccp_pr_debug macros - virtio: Protect vqs list access - vhost: Fix the calculation in vhost_overflow() - bpf: Clear zext_dst of dead insns - bnxt: don't lock the tx queue from napi poll - bnxt: disable napi before canceling DIM - net: 6pack: fix slab-out-of-bounds in decode_data - ptp_pch: Restore dependency on PCI - bnxt_en: Add missing DMA memory barriers - vrf: Reset skb conntrack connection on VRF rcv - virtio-net: support XDP when not more queues - virtio-net: use NETIF_F_GRO_HW instead of NETIF_F_LRO - net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32 - net: mdio-mux: Don't ignore memory allocation errors - net: mdio-mux: Handle -EPROBE_DEFER correctly - ovs: clear skb->tstamp in forwarding path - i40e: Fix ATR queue selection - iavf: Fix ping is lost after untrusted VF had tried to change MAC - ovl: add splice file read write helper - mmc: dw_mmc: Fix hang on data CRC error - ALSA: hda - fix the 'Capture Switch' value change notifications - tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name - slimbus: messaging: start transaction ids from 1 instead of zero - slimbus: messaging: check for valid transaction id - slimbus: ngd: reset dma setup during runtime pm - ipack: tpci200: fix many double free issues in tpci200_pci_probe - ipack: tpci200: fix memory leak in the tpci200_register - btrfs: prevent rename2 from exchanging a subvol with a directory from different parents - PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI - ASoC: intel: atom: Fix breakage for PCM buffer address setup - mm, memcg: avoid stale protection values when cgroup is above protection - mm: memcontrol: fix occasional OOMs due to proportional memory.low reclaim - fs: warn about impending deprecation of mandatory locks - netfilter: nft_exthdr: fix endianness of tcp option cast - Linux 5.4.143 * Focal update: v5.4.142 upstream stable release (LP: #1944202) - iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels - iio: humidity: hdc100x: Add margin to the conversion time - iio: adc: Fix incorrect exit of for-loop - ASoC: xilinx: Fix reference to PCM buffer address - ASoC: intel: atom: Fix reference to PCM buffer address - i2c: dev: zero out array used for i2c reads from userspace - ceph: reduce contention in ceph_check_delayed_caps() - ACPI: NFIT: Fix support for virtual SPA ranges - libnvdimm/region: Fix label activation vs errors - ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi - ieee802154: hwsim: fix GPF in hwsim_new_edge_nl - ASoC: cs42l42: Correct definition of ADC Volume control - ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J - ASoC: cs42l42: Fix inversion of ADC Notch Switch control - ASoC: cs42l42: Remove duplicate control for WNF filter frequency - netfilter: nf_conntrack_bridge: Fix memory leak when error - ASoC: cs42l42: Fix LRCLK frame start edge - net: dsa: mt7530: add the missing RxUnicast MIB counter - platform/x86: pcengines-apuv2: revert wiring up simswitch GPIO as LED - platform/x86: pcengines-apuv2: Add missing terminating entries to gpio- lookup tables - net: phy: micrel: Fix link detection on ksz87xx switch" - ppp: Fix generating ifname when empty IFLA_IFNAME is specified - net: sched: act_mirred: Reset ct info when mirror/redirect skb - iavf: Set RSS LUT and key in reset handle path - psample: Add a fwd declaration for skbuff - net/mlx5: Fix return value from tracer initialization - drm/meson: fix colour distortion from HDR set during vendor u-boot - net: dsa: microchip: Fix ksz_read64() - net: Fix memory leak in ieee802154_raw_deliver - net: igmp: fix data-race in igmp_ifc_timer_expire() - net: dsa: lan9303: fix broken backpressure in .port_fdb_dump - net: dsa: lantiq: fix broken backpressure in .port_fdb_dump - net: dsa: sja1105: fix broken backpressure in .port_fdb_dump - net: bridge: fix memleak in br_add_if() - net: linkwatch: fix failure to restore device state across suspend/resume - tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets - net: igmp: increase size of mr_ifc_count - xen/events: Fix race in set_evtchn_to_irq - vsock/virtio: avoid potential deadlock when vsock device remove - nbd: Aovid double completion of a request - powerpc/kprobes: Fix kprobe Oops happens in booke - x86/tools: Fix objdump version check again - genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP - x86/msi: Force affinity setup before startup - x86/ioapic: Force affinity setup before startup - x86/resctrl: Fix default monitoring groups reporting - genirq/msi: Ensure deactivation on teardown - genirq/timings: Prevent potential array overflow in __irq_timings_store() - PCI/MSI: Enable and mask MSI-X early - PCI/MSI: Mask all unused MSI-X entries - PCI/MSI: Enforce that MSI-X table entry is masked for update - PCI/MSI: Enforce MSI[X] entry updates to be visible - PCI/MSI: Do not set invalid bits in MSI mask - PCI/MSI: Correct misleading comments - PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() - PCI/MSI: Protect msi_desc::masked for multi-MSI - KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation - ceph: add some lockdep assertions around snaprealm handling - ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm - ceph: take snap_empty_lock atomically with snaprealm refcount change - vmlinux.lds.h: Handle clang's module.{c,d}tor sections - iommu/vt-d: Fix agaw for a supported 48 bit guest address width - Linux 5.4.142 * Focal update: v5.4.141 upstream stable release (LP: #1943484) - KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB - tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag - media: v4l2-mem2mem: always consider OUTPUT queue during poll - tracing: Reject string operand in the histogram expression - usb: dwc3: Stop active transfers before halting the controller - usb: dwc3: gadget: Allow runtime suspend if UDC unbinded - usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup - usb: dwc3: gadget: Prevent EP queuing while stopping transfers - usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable - usb: dwc3: gadget: Disable gadget IRQ during pullup disable - usb: dwc3: gadget: Avoid runtime resume if disabling pullup - KVM: X86: MMU: Use the correct inherited permissions to get shadow page - USB:ehci:fix Kunpeng920 ehci hardware problem - ALSA: hda: Add quirk for ASUS Flow x13 - ppp: Fix generating ppp unit id when ifname is not specified - ovl: prevent private clone if bind mount is not allowed - btrfs: make qgroup_free_reserved_data take btrfs_inode - btrfs: make btrfs_qgroup_reserve_data take btrfs_inode - btrfs: qgroup: allow to unreserve range without releasing other ranges - btrfs: qgroup: try to flush qgroup space when we get -EDQUOT - btrfs: transaction: Cleanup unused TRANS_STATE_BLOCKED - btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry- after-EDQUOT - btrfs: fix lockdep splat when enabling and disabling qgroups - net: xilinx_emaclite: Do not print real IOMEM pointer - btrfs: qgroup: don't commit transaction when we already hold the handle - btrfs: export and rename qgroup_reserve_meta - btrfs: don't flush from btrfs_delayed_inode_reserve_metadata - Linux 5.4.141 * focal/linux: 5.4.0-88.99 -proposed tracker (LP: #1944747) * Packaging resync (LP: #1786013) - debian/dkms-versions -- update from kernel-versions (main/2021.09.06) * please drop virtualbox-guest-dkms virtualbox-guest-source (LP: #1933248) - Revert "UBUNTU: [Config] Disable virtualbox dkms build" * please drop virtualbox-guest-dkms virtualbox-guest-source (LP: #1933248) - [Config] Disable virtualbox dkms build * Packaging resync (LP: #1786013) - debian/dkms-versions -- update from kernel-versions (main/2021.09.06) * LRMv5: switch primary version handling to kernel-versions data set (LP: #1928921) - [Packaging] switch to kernel-versions * disable “CONFIG_HISI_DMA” config for ubuntu version (LP: #1936771) - Disable CONFIG_HISI_DMA - [Config] Record hisi_dma no longer built for arm64 * memory leaking when removing a profile (LP: #1939915) - apparmor: Fix memory leak of profile proxy * CryptoExpress EP11 cards are going offline (LP: #1939618) - s390/zcrypt: Support for CCA protected key block version 2 - s390: Replace zero-length array with flexible-array member - s390/zcrypt: Use scnprintf() for avoiding potential buffer overflow - s390/zcrypt: replace snprintf/sprintf with scnprintf - s390/ap: Remove ap device suspend and resume callbacks - s390/zcrypt: use fallthrough; - s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc - s390/ap: remove power management code from ap bus and drivers - s390/ap: introduce new ap function ap_get_qdev() - s390/zcrypt: use kzalloc - s390/zcrypt: fix smatch warnings - s390/zcrypt: code beautification and struct field renames - s390/zcrypt: split ioctl function into smaller code units - s390/ap: rename and clarify ap state machine related stuff - s390/zcrypt: provide cex4 cca sysfs attributes for cex3 - s390/ap: rework crypto config info and default domain code - s390/zcrypt: simplify cca_findcard2 loop code - s390/zcrypt: remove set_fs() invocation in zcrypt device driver - s390/ap: remove unnecessary spin_lock_init() - s390/zcrypt: Support for CCA APKA master keys - s390/zcrypt: introduce msg tracking in zcrypt functions - s390/ap: split ap queue state machine state from device state - s390/ap: add error response code field for ap queue devices - s390/ap: add card/queue deconfig state - s390/sclp: Add support for SCLP AP adapter config/deconfig - s390/ap: Support AP card SCLP config and deconfig operations - s390/ap/zcrypt: revisit ap and zcrypt error handling - s390/zcrypt: move ap_msg param one level up the call chain - s390/zcrypt: Introduce Failure Injection feature - s390/zcrypt: fix wrong format specifications - s390/ap: fix ap devices reference counting - s390/zcrypt: return EIO when msg retry limit reached - s390/zcrypt: fix zcard and zqueue hot-unplug memleak - s390/ap: Fix hanging ioctl caused by wrong msg counter * memfd from ubuntu_kernel_selftests failed to build on B-5.4 (LP: #1926142) - SAUCE: selftests/memfd: fix build when F_SEAL_FUTURE_WRITE is not defined * [SRU] Ice driver causes the kernel to crash with Ubuntu 20.04.2 with ethtool specific register commands (LP: #1939855) - ice: Fix bad register reads * ubunut_kernel_selftests: memory-hotplug: avoid spamming logs with dump_page() (LP: #1941829) - selftests: memory-hotplug: avoid spamming logs with dump_page(), ratio limit hot-remove error test * e1000e blocks the boot process when it tried to write checksum to its NVM (LP: #1936998) - e1000e: Do not take care about recovery NVM checksum * Focal update: v5.4.140 upstream stable release (LP: #1941798) - Revert "ACPICA: Fix memory leak caused by _CID repair function" - ALSA: seq: Fix racy deletion of subscriber - arm64: dts: ls1028a: fix node name for the sysclk - ARM: imx: add missing iounmap() - ARM: imx: add missing clk_disable_unprepare() - ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms - ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz - ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init - ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins - arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode - ALSA: usb-audio: fix incorrect clock source setting - clk: stm32f4: fix post divisor setup for I2S/SAI PLLs - ARM: dts: am437x-l4: fix typo in can@0 node - omap5-board-common: remove not physically existing vdds_1v8_main fixed- regulator - spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay - spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation - scsi: sr: Return correct event when media event code is 3 - media: videobuf2-core: dequeue if start_streaming fails - dmaengine: imx-dma: configure the generic DMA type to make it work - net, gro: Set inner transport header offset in tcp/udp GRO hook - net: dsa: sja1105: overwrite dynamic FDB entries with static ones in .port_fdb_add - net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with statically added ones - net: phy: micrel: Fix detection of ksz87xx switch - net: natsemi: Fix missing pci_disable_device() in probe and remove - gpio: tqmx86: really make IRQ optional - sctp: move the active_key update after sh_keys is added - nfp: update ethtool reporting of pauseframe control - net: ipv6: fix returned variable type in ip6_skb_dst_mtu - mips: Fix non-POSIX regexp - bnx2x: fix an error code in bnx2x_nic_load() - net: pegasus: fix uninit-value in get_interrupt_interval - net: fec: fix use-after-free in fec_drv_remove - net: vxge: fix use-after-free in vxge_device_unregister - blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() - Bluetooth: defer cleanup of resources in hci_unregister_dev() - USB: usbtmc: Fix RCU stall warning - USB: serial: option: add Telit FD980 composition 0x1056 - USB: serial: ch341: fix character loss at high transfer rates - USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 - firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback - firmware_loader: fix use-after-free in firmware_fallback_sysfs - ALSA: hda/realtek: add mic quirk for Acer SF314-42 - ALSA: usb-audio: Add registration quirk for JBL Quantum 600 - usb: cdns3: Fixed incorrect gadget state - usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers - usb: gadget: f_hid: fixed NULL pointer dereference - usb: gadget: f_hid: idle uses the highest byte for duration - usb: otg-fsm: Fix hrtimer list corruption - clk: fix leak on devm_clk_bulk_get_all() unwind - scripts/tracing: fix the bug that can't parse raw_trace_func - tracing / histogram: Give calculation hist_fields a size - optee: Clear stale cache entries during initialization - tee: add tee_shm_alloc_kernel_buf() - optee: Fix memory leak when failing to register shm pages - tpm_ftpm_tee: Free and unregister TEE shared memory during kexec - staging: rtl8723bs: Fix a resource leak in sd_int_dpc - staging: rtl8712: get rid of flush_scheduled_work - media: rtl28xxu: fix zero-length control request - pipe: increase minimum default pipe size to 2 pages - ext4: fix potential htree corruption when growing large_dir directories - serial: tegra: Only print FIFO error message when an error occurs - serial: 8250_mtk: fix uart corruption issue when rx power off - serial: 8250: Mask out floating 16/32-bit bus bits - MIPS: Malta: Do not byte-swap accesses to the CBUS UART - serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver - serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts. - timers: Move clearing of base::timer_running under base:: Lock - pcmcia: i82092: fix a null pointer dereference bug - md/raid10: properly indicate failure when ending a failed write request - KVM: x86: accept userspace interrupt only if no event is injected - KVM: Do not leak memory for duplicate debugfs directories - KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds - arm64: vdso: Avoid ISB after reading from cntvct_el0 - soc: ixp4xx: fix printing resources - spi: meson-spicc: fix memory leak in meson_spicc_remove - soc: ixp4xx/qmgr: fix invalid __iomem access - perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest - bpf, selftests: Adjust few selftest result_unpriv outcomes - libata: fix ata_pio_sector for CONFIG_HIGHMEM - reiserfs: add check for root_inode in reiserfs_fill_super - reiserfs: check directory items on read from disk - virt_wifi: fix error on connect - alpha: Send stop IPI to send to online CPUs - net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset - arm64: fix compat syscall return truncation - Linux 5.4.140 * Focal update: v5.4.139 upstream stable release (LP: #1941796) - btrfs: delete duplicated words + other fixes in comments - btrfs: do not commit logs and transactions during link and rename operations - btrfs: fix race causing unnecessary inode logging during link and rename - btrfs: fix lost inode on log replay after mix of fsync, rename and inode eviction - regulator: rt5033: Fix n_voltages settings for BUCK and LDO - spi: stm32h7: fix full duplex irq handler handling - ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits - r8152: Fix potential PM refcount imbalance - qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() - net: Fix zero-copy head len calculation. - nvme: fix nvme_setup_command metadata trace event - ACPI: fix NULL pointer dereference - Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled" - firmware: arm_scmi: Ensure drivers provide a probe function - firmware: arm_scmi: Add delayed response status check - bpf: Inherit expanded/patched seen count from old aux data - bpf: Do not mark insn as seen under speculative path verification - bpf: Fix leakage under speculation on mispredicted branches - bpf: Test_verifier, add alu32 bounds tracking tests - bpf, selftests: Add a verifier test for assigning 32bit reg states to 64bit ones - bpf, selftests: Adjust few selftest outcomes wrt unreachable code - spi: mediatek: Fix fifo transfer - Linux 5.4.139 * Focal update: v5.4.138 upstream stable release (LP: #1940559) - net_sched: check error pointer in tcf_dump_walker() - x86/asm: Ensure asm/proto.h can be included stand-alone - btrfs: fix rw device counting in __btrfs_free_extra_devids - btrfs: mark compressed range uptodate only if all bio succeed - x86/kvm: fix vcpu-id indexed array sizes - KVM: add missing compat KVM_CLEAR_DIRTY_LOG - ocfs2: fix zero out valid data - ocfs2: issue zeroout to EOF blocks - can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive TP.DT to 750ms - can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF - can: mcba_usb_start(): add missing urb->transfer_dma initialization - can: usb_8dev: fix memory leak - can: ems_usb: fix memory leak - can: esd_usb2: fix memory leak - HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT - NIU: fix incorrect error return, missed in previous revert - nfc: nfcsim: fix use after free during module unload - cfg80211: Fix possible memory leak in function cfg80211_bss_update - netfilter: conntrack: adjust stop timestamp to real expiry value - netfilter: nft_nat: allow to specify layer 4 protocol NAT only - i40e: Fix logic of disabling queues - i40e: Fix firmware LLDP agent related warning - i40e: Fix queue-to-TC mapping on Tx - i40e: Fix log TC creation failure when max num of queues is exceeded - tipc: fix sleeping in tipc accept routine - net: Set true network header for ECN decapsulation - mlx4: Fix missing error code in mlx4_load_one() - net: llc: fix skb_over_panic - net/mlx5: Fix flow table chaining - net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev() - sctp: fix return value check in __sctp_rcv_asconf_lookup - tulip: windbond-840: Fix missing pci_disable_device() in probe and remove - sis900: Fix missing pci_disable_device() in probe and remove - can: hi311x: fix a signedness bug in hi3110_cmd() - PCI: mvebu: Setup BAR0 in order to fix MSI - powerpc/pseries: Fix regression while building external modules - i40e: Add additional info to PHY type error - can: j1939: j1939_session_deactivate(): clarify lifetime of session object - Linux 5.4.138 * Focal update: v5.4.137 upstream stable release (LP: #1940557) - selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c - tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include - KVM: x86: determine if an exception has an error code only when injecting it. - af_unix: fix garbage collect vs MSG_PEEK - workqueue: fix UAF in pwq_unbound_release_workfn() - cgroup1: fix leaked context root causing sporadic NULL deref in LTP - net/802/mrp: fix memleak in mrp_request_join() - net/802/garp: fix memleak in garp_request_join() - net: annotate data race around sk_ll_usec - sctp: move 198 addresses from unusable to private scope - ipv6: allocate enough headroom in ip6_finish_output2() - hfs: add missing clean-up in hfs_fill_super - hfs: fix high memory mapping in hfs_bnode_read - hfs: add lock nesting notation to hfs_find_init - firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow - firmware: arm_scmi: Fix range check for the maximum number of pending messages - cifs: fix the out of range assignment to bit fields in parse_server_interfaces - iomap: remove the length variable in iomap_seek_data - iomap: remove the length variable in iomap_seek_hole - ARM: dts: versatile: Fix up interrupt controller node names - ipv6: ip6_finish_output2: set sk into newly allocated nskb - Linux 5.4.137 * Focal update: v5.4.136 upstream stable release (LP: #1939899) - igc: Fix use-after-free error during reset - igb: Fix use-after-free error during reset - igc: change default return of igc_read_phy_reg() - ixgbe: Fix an error handling path in 'ixgbe_probe()' - igc: Prefer to use the pci_release_mem_regions method - igc: Fix an error handling path in 'igc_probe()' - igb: Fix an error handling path in 'igb_probe()' - fm10k: Fix an error handling path in 'fm10k_probe()' - e1000e: Fix an error handling path in 'e1000_probe()' - iavf: Fix an error handling path in 'iavf_probe()' - igb: Check if num of q_vectors is smaller than max before array access - igb: Fix position of assignment to *ring - gve: Fix an error handling path in 'gve_probe()' - ipv6: fix 'disable_policy' for fwd packets - selftests: icmp_redirect: remove from checking for IPv6 route get - selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect - pwm: sprd: Ensure configuring period and duty_cycle isn't wrongly skipped - cxgb4: fix IRQ free race during driver unload - nvme-pci: do not call nvme_dev_remove_admin from nvme_remove - perf probe: Fix dso->nsinfo refcounting - perf env: Fix sibling_dies memory leak - perf test session_topology: Delete session->evlist - perf test event_update: Fix memory leak of evlist - perf dso: Fix memory leak in dso__new_map() - perf script: Fix memory 'threads' and 'cpus' leaks on exit - perf lzma: Close lzma stream on exit - perf probe-file: Delete namelist in del_events() on the error path - perf data: Close all files in close_dir() - spi: imx: add a check for speed_hz before calculating the clock - spi: stm32: Use dma_request_chan() instead dma_request_slave_channel() - spi: stm32: fixes pm_runtime calls in probe/remove - regulator: hi6421: Use correct variable type for regmap api val argument - regulator: hi6421: Fix getting wrong drvdata - spi: mediatek: fix fifo rx mode - ASoC: rt5631: Fix regcache sync errors on resume - liquidio: Fix unintentional sign extension issue on left shift of u16 - s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] - bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats - bpftool: Check malloc return value in mount_bpffs_for_pin - net: fix uninit-value in caif_seqpkt_sendmsg - efi/tpm: Differentiate missing and invalid final event log table. - net: decnet: Fix sleeping inside in af_decnet - KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash - KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak - net: sched: fix memory leak in tcindex_partial_destroy_work - netrom: Decrease sock refcount when sock timers expire - scsi: iscsi: Fix iface sysfs attr detection - scsi: target: Fix protect handling in WRITE SAME(32) - spi: cadence: Correct initialisation of runtime PM again - bnxt_en: Improve bnxt_ulp_stop()/bnxt_ulp_start() call sequence. - bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe() - bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task() - bnxt_en: Check abort error state in bnxt_half_open_nic() - net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition - net/tcp_fastopen: fix data races around tfo_active_disable_stamp - net: hns3: fix rx VLAN offload state inconsistent issue - net/sched: act_skbmod: Skip non-Ethernet packets - ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions - nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING - Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" - afs: Fix tracepoint string placement with built-in AFS - r8169: Avoid duplicate sysfs entry creation error - nvme: set the PRACT bit when using Write Zeroes with T10 PI - sctp: update active_key for asoc when old key is being replaced - net: sched: cls_api: Fix the the wrong parameter - drm/panel: raspberrypi-touchscreen: Prevent double-free - proc: Avoid mixing integer types in mem_rw() - s390/ftrace: fix ftrace_update_ftrace_func implementation - s390/boot: fix use of expolines in the DMA code - ALSA: usb-audio: Add missing proc text entry for BESPOKEN type - ALSA: usb-audio: Add registration quirk for JBL Quantum headsets - ALSA: sb: Fix potential ABBA deadlock in CSP driver - ALSA: hdmi: Expose all pins on MSI MS-7C94 board - xhci: Fix lost USB 2 remote wake - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow - KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state - usb: hub: Disable USB 3 device initiated lpm if exit latency is too high - usb: hub: Fix link power management max exit latency (MEL) calculations - USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS - usb: max-3421: Prevent corruption of freed memory - usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() - USB: serial: option: add support for u-blox LARA-R6 family - USB: serial: cp210x: fix comments for GE CS1000 - USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick - usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. - firmware/efi: Tell memblock about EFI iomem reservations - tracing/histogram: Rename "cpu" to "common_cpu" - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. - btrfs: check for missing device in btrfs_trim_fs - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() - ixgbe: Fix packet corruption due to missing DMA sync - selftest: use mmap instead of posix_memalign to allocate memory - userfaultfd: do not untag user pointers - hugetlbfs: fix mount mode command line processing - rbd: don't hold lock_rwsem while running_list is being drained - rbd: always kick acquire on "acquired" and "released" notifications - nds32: fix up stack guard gap - drm: Return -ENOTTY for non-drm ioctls - net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz - net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear - iio: accel: bma180: Use explicit member assignment - iio: accel: bma180: Fix BMA25x bandwidth register values - btrfs: compression: don't try to compress if we don't have enough pages - PCI: Mark AMD Navi14 GPU ATS as broken - perf inject: Close inject.output on exit - xhci: add xhci_get_virt_ep() helper - Linux 5.4.136 * Focal update: v5.4.135 upstream stable release (LP: #1939442) - ARM: dts: gemini: rename mdio to the right name - ARM: dts: gemini: add device_type on pci - ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 - arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi - ARM: dts: rockchip: Fix the timer clocks order - ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x - ARM: dts: rockchip: Fix power-controller node names for rk3066a - ARM: dts: rockchip: Fix power-controller node names for rk3188 - ARM: dts: rockchip: Fix power-controller node names for rk3288 - arm64: dts: rockchip: Fix power-controller node names for px30 - arm64: dts: rockchip: Fix power-controller node names for rk3328 - reset: ti-syscon: fix to_ti_syscon_reset_data macro - ARM: brcmstb: dts: fix NAND nodes names - ARM: Cygnus: dts: fix NAND nodes names - ARM: NSP: dts: fix NAND nodes names - ARM: dts: BCM63xx: Fix NAND nodes names - ARM: dts: Hurricane 2: Fix NAND nodes names - ARM: dts: imx6: phyFLEX: Fix UART hardware flow control - ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info - rtc: mxc_v2: add missing MODULE_DEVICE_TABLE - kbuild: sink stdout from cmd for silent build - ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag for gpios - ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios - ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards - ARM: dts: stm32: fix RCC node name on stm32f429 MCU - ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings - arm64: dts: juno: Update SCPI nodes as per the YAML schema - ARM: dts: rockchip: fix supply properties in io-domains nodes - ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings - ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15 - soc/tegra: fuse: Fix Tegra234-only builds - firmware: tegra: bpmp: Fix Tegra234-only builds - arm64: dts: ls208xa: remove bus-num from dspi node - arm64: dts: imx8mq: assign PCIe clocks - thermal/core: Correct function name thermal_zone_device_unregister() - kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set - rtc: max77686: Do not enforce (incorrect) interrupt trigger type - scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 - scsi: libsas: Add LUN number check in .slave_alloc callback - scsi: libfc: Fix array index out of bound exception - scsi: qedf: Add check to synchronize abort and flush - sched/fair: Fix CFS bandwidth hrtimer expiry type - s390: introduce proper type handling call_on_stack() macro - cifs: prevent NULL deref in cifs_compose_mount_options() - arm64: dts: armada-3720-turris-mox: add firmware node - firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware compatible string - arm64: dts: marvell: armada-37xx: move firmware node to generic dtsi file - f2fs: Show casefolding support only when supported - usb: cdns3: Enable TDL_CHK only for OUT ep - Revert "UBUNTU: SAUCE: Revert "mm: memcg/slab: fix memory leak at non-root kmem_cache destroy"" - mm: slab: fix kmem_cache_create failed when sysfs node not destroyed - dm writecache: return the exact table values that were set - net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz - net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz - net: ipv6: fix return value of ip6_skb_dst_mtu - netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo - net/sched: act_ct: fix err check for nf_conntrack_confirm - net: bridge: sync fdb to new unicast-filtering ports - net: bcmgenet: Ensure all TX/RX queues DMAs are disabled - net: ip_tunnel: fix mtu calculation for ETHER tunnel devices - net: moxa: fix UAF in moxart_mac_probe - net: qcom/emac: fix UAF in emac_remove - net: ti: fix UAF in tlan_remove_one - net: send SYNACK packet with accepted fwmark - net: validate lwtstate->data before returning from skb_tunnel_info() - net: fddi: fix UAF in fza_probe - dma-buf/sync_file: Don't leak fences on merge failure - tcp: annotate data races around tp->mtu_info - ipv6: tcp: drop silly ICMPv6 packet too big messages - bpftool: Properly close va_list 'ap' by va_end() on error - perf test bpf: Free obj_buf - udp: annotate data races around unix_sk(sk)->gso_size - Linux 5.4.135 * Focal update: v5.4.134 upstream stable release (LP: #1939440) - KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio - KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled - KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run() - scsi: core: Fix bad pointer dereference when ehandler kthread is invalid - tracing: Do not reference char * as a string in histograms - cgroup: verify that source is a string - fbmem: Do not delete the mode that is still in use - net: moxa: Use devm_platform_get_and_ioremap_resource() - dmaengine: fsl-qdma: check dma_set_mask return value - srcu: Fix broken node geometry after early ssp init - tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero - misc/libmasm/module: Fix two use after free in ibmasm_init_one - misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge - iio: gyro: fxa21002c: Balance runtime pm + use pm_runtime_resume_and_get(). - iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get() - ALSA: usx2y: Don't call free_pages_exact() with NULL address - Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro" - w1: ds2438: fixing bug that would always get page0 - scsi: hisi_sas: Propagate errors in interrupt_init_v1_hw() - scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology - scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs - scsi: core: Cap scsi_host cmd_per_lun at can_queue - ALSA: ac97: fix PM reference leak in ac97_bus_remove() - tty: serial: 8250: serial_cs: Fix a memory leak in error handling path - scsi: scsi_dh_alua: Check for negative result value - fs/jfs: Fix missing error code in lmLogInit() - scsi: megaraid_sas: Fix resource leak in case of probe failure - scsi: megaraid_sas: Early detection of VD deletion through RaidMap update - scsi: megaraid_sas: Handle missing interrupts while re-enabling IRQs - scsi: iscsi: Add iscsi_cls_conn refcount helpers - scsi: iscsi: Fix conn use after free during resets - scsi: iscsi: Fix shost->max_id use - scsi: qedi: Fix null ref during abort handling - mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE - mfd: cpcap: Fix cpcap dmamask not set warnings - ASoC: img: Fix PM reference leak in img_i2s_in_probe() - serial: tty: uartlite: fix console setup - s390/sclp_vt220: fix console name to match device - ALSA: sb: Fix potential double-free of CSP mixer elements - powerpc/ps3: Add dma_mask to ps3_dma_region - iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails - iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation - gpio: zynq: Check return value of pm_runtime_get_sync - ALSA: ppc: fix error return code in snd_pmac_probe() - selftests/powerpc: Fix "no_handler" EBB selftest - gpio: pca953x: Add support for the On Semi pca9655 - ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() - s390/processor: always inline stap() and __load_psw_mask() - s390/ipl_parm: fix program check new psw handling - s390/mem_detect: fix diag260() program check new psw handling - s390/mem_detect: fix tprot() program check new psw handling - Input: hideep - fix the uninitialized use in hideep_nvm_unlock() - ALSA: bebob: add support for ToneWeal FW66 - ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count - ALSA: usb-audio: scarlett2: Fix data_mutex lock - ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values - usb: gadget: f_hid: fix endianness issue with descriptors - usb: gadget: hid: fix error return code in hid_bind() - powerpc/boot: Fixup device-tree on little endian - ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters - backlight: lm3630a: Fix return code of .update_status() callback - ALSA: hda: Add IRQ check for platform_get_irq() - ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions - staging: rtl8723bs: fix macro value for 2.4Ghz only device - intel_th: Wait until port is in reset before programming it - i2c: core: Disable client irq on reboot/shutdown - power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE - power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE - pwm: spear: Don't modify HW state in .remove callback - power: supply: ab8500: Avoid NULL pointers - power: supply: max17042: Do not enforce (incorrect) interrupt trigger type - power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE - ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 - PCI/P2PDMA: Avoid pci_get_slot(), which may sleep - watchdog: Fix possible use-after-free in wdt_startup() - watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() - watchdog: Fix possible use-after-free by calling del_timer_sync() - watchdog: imx_sc_wdt: fix pretimeout - x86/fpu: Return proper error codes from user access functions - PCI: tegra: Add missing MODULE_DEVICE_TABLE - orangefs: fix orangefs df output. - ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty - NFS: nfs_find_open_context() may only select open files - power: supply: charger-manager: add missing MODULE_DEVICE_TABLE - power: supply: ab8500: add missing MODULE_DEVICE_TABLE - pwm: img: Fix PM reference leak in img_pwm_enable() - pwm: tegra: Don't modify HW state in .remove callback - ACPI: AMBA: Fix resource name in /proc/iomem - ACPI: video: Add quirk for the Dell Vostro 3350 - virtio-blk: Fix memory leak among suspend/resume procedure - virtio_net: Fix error handling in virtnet_restore() - virtio_console: Assure used length from device is limited - x86/signal: Detect and prevent an alternate signal stack overflow - f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs - PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun - power: supply: rt5033_battery: Fix device tree enumeration - NFSv4: Initialise connection to the server in nfs4_alloc_client() - um: fix error return code in slip_open() - um: fix error return code in winch_tramp() - watchdog: aspeed: fix hardware timeout calculation - nfs: fix acl memory leak of posix_acl_create() - ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode - PCI: iproc: Fix multi-MSI base vector number allocation - PCI: iproc: Support multi-MSI only on uniprocessor kernel - x86/fpu: Limit xstate copy size in xstateregs_set() - pwm: imx1: Don't disable clocks at device remove time - virtio_net: move tx vq operation under tx queue lock - nvme-tcp: can't set sk_user_data without write_lock - ALSA: isa: Fix error return code in snd_cmi8330_probe() - NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times - hexagon: use common DISCARDS macro - ARM: dts: gemini-rut1xx: remove duplicate ethernet node - reset: a10sr: add missing of_match_table reference - ARM: exynos: add missing of_node_put for loop iteration - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 - ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1 - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 - memory: atmel-ebi: add missing of_node_put for loop iteration - reset: brcmstb: Add missing MODULE_DEVICE_TABLE - memory: pl353: Fix error return code in pl353_smc_probe() - rtc: fix snprintf() checking in is_rtc_hctosys() - arm64: dts: renesas: v3msk: Fix memory size - ARM: dts: r8a7779, marzen: Fix DU clock names - firmware: tegra: Fix error return code in tegra210_bpmp_init() - firmware: arm_scmi: Reset Rx buffer to max size during async commands - ARM: dts: BCM5301X: Fixup SPI binding - reset: bail if try_module_get() fails - memory: fsl_ifc: fix leak of IO mapping on probe failure - memory: fsl_ifc: fix leak of private memory on probe failure - ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema - ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema - ARM: dts: imx6q-dhcom: Fix ethernet reset time properties - ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems - ARM: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery - thermal/drivers/rcar_gen3_thermal: Fix coefficient calculations - firmware: turris-mox-rwtm: fix reply status decoding function - firmware: turris-mox-rwtm: report failures better - firmware: turris-mox-rwtm: fail probing when firmware does not support hwrng - scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() - mips: always link byteswap helpers into decompressor - mips: disable branch profiling in boot/decompress.o - MIPS: vdso: Invalid GIC access through VDSO - scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg() - misc: alcor_pci: fix inverted branch condition - Linux 5.4.134 * s390x BPF JIT vulnerabilities (LP: #1943960) - SAUCE: s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant - SAUCE: s390/bpf: Fix optimizing out zero-extensions -- Marcelo Henrique Cerri