I'm announcing the release of the 5.10.199 kernel. All users of the 5.10 kernel series must upgrade. The updated 5.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/admin-guide/sysctl/net.rst | 18 Documentation/networking/ip-sysctl.rst | 8 Makefile | 2 arch/arm/boot/dts/motorola-mapphone-common.dtsi | 1 arch/arm64/include/asm/cpufeature.h | 3 arch/arm64/include/asm/exception.h | 13 arch/arm64/include/asm/spectre.h | 2 arch/arm64/include/asm/system_misc.h | 2 arch/arm64/include/asm/traps.h | 19 arch/arm64/kernel/armv8_deprecated.c | 572 +++++++-------- arch/arm64/kernel/cpufeature.c | 23 arch/arm64/kernel/entry-common.c | 36 arch/arm64/kernel/proton-pack.c | 26 arch/arm64/kernel/traps.c | 125 +-- arch/powerpc/include/asm/nohash/32/pte-8xx.h | 7 arch/powerpc/include/asm/nohash/64/pgtable.h | 2 arch/powerpc/include/asm/nohash/pgtable.h | 2 arch/riscv/net/bpf_jit_comp64.c | 33 arch/s390/pci/pci_dma.c | 15 arch/x86/boot/compressed/sev-es.c | 10 arch/x86/include/asm/msr-index.h | 9 arch/x86/kernel/alternative.c | 13 arch/x86/kernel/cpu/amd.c | 8 arch/x86/kernel/sev-es-shared.c | 53 + arch/x86/kernel/sev-es.c | 30 arch/x86/kvm/lapic.c | 8 drivers/acpi/irq.c | 7 drivers/acpi/resource.c | 121 ++- drivers/ata/libata-eh.c | 2 drivers/base/regmap/regmap.c | 2 drivers/bluetooth/hci_vhci.c | 3 drivers/counter/microchip-tcb-capture.c | 2 drivers/dma/mediatek/mtk-uart-apdma.c | 3 drivers/dma/stm32-mdma.c | 4 drivers/gpio/gpio-timberdale.c | 5 drivers/gpio/gpio-vf610.c | 4 drivers/gpu/drm/amd/display/dc/core/dc.c | 9 drivers/gpu/drm/drm_connector.c | 79 ++ drivers/gpu/drm/drm_crtc_internal.h | 2 drivers/gpu/drm/drm_panel_orientation_quirks.c | 16 drivers/gpu/drm/drm_sysfs.c | 87 +- drivers/gpu/drm/i915/gem/i915_gem_mman.c | 1 drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c | 12 drivers/gpu/drm/msm/dp/dp_ctrl.c | 13 drivers/gpu/drm/msm/dsi/dsi_host.c | 12 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 drivers/hid/hid-holtek-kbd.c | 4 drivers/hid/hid-logitech-hidpp.c | 3 drivers/hid/hid-multitouch.c | 4 drivers/i2c/i2c-mux.c | 2 drivers/iio/pressure/bmp280-core.c | 2 drivers/iio/pressure/dps310.c | 8 drivers/iio/pressure/ms5611_core.c | 2 drivers/infiniband/hw/cxgb4/cm.c | 3 drivers/infiniband/ulp/srp/ib_srp.c | 172 +--- drivers/infiniband/ulp/srp/ib_srp.h | 2 drivers/input/joystick/xpad.c | 2 drivers/input/misc/powermate.c | 1 drivers/input/mouse/elantech.c | 1 drivers/input/mouse/synaptics.c | 1 drivers/input/serio/i8042-acpipnpio.h | 8 drivers/input/touchscreen/goodix.c | 19 drivers/mcb/mcb-core.c | 10 drivers/mcb/mcb-parse.c | 2 drivers/media/platform/mtk-jpeg/mtk_jpeg_core.c | 1 drivers/mmc/core/mmc.c | 2 drivers/mmc/core/sdio.c | 8 drivers/mtd/maps/physmap-core.c | 11 drivers/mtd/nand/raw/arasan-nand-controller.c | 16 drivers/mtd/nand/raw/marvell_nand.c | 23 drivers/mtd/nand/raw/qcom_nandc.c | 2 drivers/mtd/nand/spi/micron.c | 2 drivers/net/dsa/bcm_sf2.c | 24 drivers/net/ethernet/intel/i40e/i40e_common.c | 4 drivers/net/ethernet/intel/ice/ice_lib.c | 3 drivers/net/ethernet/intel/ice/ice_main.c | 15 drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 5 drivers/net/ethernet/marvell/sky2.h | 2 drivers/net/ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 2 drivers/net/ethernet/mellanox/mlxsw/spectrum_nve_vxlan.c | 4 drivers/net/ethernet/qlogic/qed/qed_ll2.c | 7 drivers/net/ethernet/renesas/ravb_main.c | 6 drivers/net/ieee802154/ca8210.c | 17 drivers/net/macsec.c | 2 drivers/net/phy/mscc/mscc_macsec.c | 6 drivers/net/tun.c | 7 drivers/net/usb/dm9601.c | 7 drivers/net/usb/smsc95xx.c | 2 drivers/net/xen-netback/interface.c | 3 drivers/nvme/host/pci.c | 3 drivers/nvme/host/rdma.c | 3 drivers/nvme/target/tcp.c | 7 drivers/perf/arm-cmn.c | 2 drivers/phy/motorola/phy-mapphone-mdm6600.c | 38 drivers/pinctrl/renesas/Kconfig | 1 drivers/platform/x86/asus-nb-wmi.c | 3 drivers/platform/x86/asus-wmi.h | 2 drivers/platform/x86/touchscreen_dmi.c | 23 drivers/regulator/core.c | 6 drivers/spi/spi-zynqmp-gqspi.c | 24 drivers/tee/amdtee/core.c | 10 drivers/thunderbolt/icm.c | 38 drivers/thunderbolt/switch.c | 7 drivers/tty/serial/8250/8250_omap.c | 93 +- drivers/usb/core/hcd.c | 6 drivers/usb/core/hub.c | 106 ++ drivers/usb/core/hub.h | 2 drivers/usb/dwc3/core.c | 39 - drivers/usb/gadget/function/f_ncm.c | 26 drivers/usb/gadget/udc/udc-xilinx.c | 20 drivers/usb/host/xhci-hub.c | 228 ++--- drivers/usb/host/xhci-mem.c | 10 drivers/usb/host/xhci-ring.c | 17 drivers/usb/host/xhci.h | 9 drivers/usb/musb/musb_debugfs.c | 2 drivers/usb/musb/musb_host.c | 9 drivers/usb/serial/option.c | 7 drivers/usb/typec/altmodes/Kconfig | 1 drivers/usb/typec/altmodes/displayport.c | 28 fs/btrfs/extent-tree.c | 6 fs/btrfs/ioctl.c | 4 fs/btrfs/tree-log.c | 2 fs/ceph/file.c | 2 fs/ceph/inode.c | 4 fs/nfs/pnfs.c | 33 fs/overlayfs/copy_up.c | 2 fs/quota/dquot.c | 66 + include/drm/drm_connector.h | 25 include/linux/ioport.h | 7 include/linux/ipv6.h | 1 include/linux/mcb.h | 1 include/linux/netdevice.h | 2 include/linux/perf_event.h | 1 include/linux/quota.h | 4 include/linux/quotaops.h | 2 include/linux/usb.h | 2 include/net/bluetooth/hci_core.h | 2 include/net/bluetooth/hci_mon.h | 2 include/net/ip_fib.h | 1 include/net/macsec.h | 1 include/net/netns/xfrm.h | 1 include/net/tcp.h | 3 include/trace/events/neigh.h | 4 include/uapi/linux/ipv6.h | 7 kernel/cgroup/cgroup-v1.c | 5 kernel/events/core.c | 39 - kernel/trace/trace_events.c | 1 kernel/workqueue.c | 8 lib/Kconfig.debug | 5 lib/test_meminit.c | 2 mm/memory_hotplug.c | 16 net/bluetooth/hci_conn.c | 72 + net/bluetooth/hci_core.c | 8 net/bluetooth/hci_event.c | 33 net/bluetooth/hci_sock.c | 3 net/ceph/messenger.c | 4 net/core/pktgen.c | 14 net/ipv4/esp4.c | 4 net/ipv4/fib_semantics.c | 15 net/ipv4/fib_trie.c | 4 net/ipv4/tcp_ipv4.c | 1 net/ipv4/tcp_output.c | 25 net/ipv4/tcp_recovery.c | 2 net/ipv6/addrconf.c | 13 net/ipv6/esp6.c | 4 net/ipv6/ndisc.c | 13 net/ipv6/xfrm6_policy.c | 4 net/mac80211/tx.c | 3 net/netfilter/ipvs/ip_vs_sync.c | 4 net/netfilter/nft_payload.c | 2 net/netfilter/nft_set_rbtree.c | 2 net/nfc/llcp_core.c | 30 net/nfc/nci/core.c | 5 net/nfc/nci/spi.c | 2 net/rds/tcp_connect.c | 2 net/rds/tcp_listen.c | 2 net/rfkill/rfkill-gpio.c | 4 net/sched/sch_hfsc.c | 18 net/socket.c | 6 net/wireless/nl80211.c | 2 net/wireless/scan.c | 4 net/xfrm/xfrm_interface_core.c | 22 net/xfrm/xfrm_policy.c | 6 sound/soc/pxa/pxa-ssp.c | 2 tools/testing/selftests/vm/charge_reserved_hugetlb.sh | 34 tools/testing/selftests/vm/hugetlb_reparenting_test.sh | 21 tools/testing/selftests/vm/write_hugetlb_memory.sh | 2 187 files changed, 2094 insertions(+), 1182 deletions(-) Abhinav Kumar (2): drm/msm/dsi: skip the wait for video mode done if not applicable drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow Alexander Zangerl (1): iio: pressure: ms5611: ms5611_prom_is_valid false negative bug Amelie Delaunay (1): dmaengine: stm32-mdma: abort resume if no ongoing transfer Andy Shevchenko (1): Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" Arkadiusz Bokowy (1): Bluetooth: vhci: Fix race when opening vhci device Arnd Bergmann (1): Bluetooth: avoid memcmp() out of bounds warning Artem Chernyshev (1): RDMA/cxgb4: Check skb value for failure to allocate Avri Altman (1): mmc: core: Capture correct oemid-bits for eMMC cards Bagas Sanjaya (1): Documentation: sysctl: align cells in second content column Bart Van Assche (3): RDMA/srp: Make struct scsi_cmnd and struct srp_request adjacent RDMA/srp: Do not call scsi_done() from srp_abort() RDMA/srp: Fix srp_abort() Benjamin Berg (1): wifi: cfg80211: avoid leaking stack data into trace Benoît Monin (1): USB: serial: option: add entry for Sierra EM9191 with new firmware Bibek Kumar Patro (1): mtd: rawnand: qcom: Unmap the right resource upon probe failure Björn Töpel (1): riscv, bpf: Sign-extend return values Borislav Petkov (AMD) (2): x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs x86/sev: Disable MMIO emulation from user mode Chengfeng Ye (1): gpio: timberdale: Fix potential deadlock on &tgpio->lock Christophe Leroy (2): powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() Clément Léger (1): tracing: relax trace_event_eval_update() execution with cond_resched() Damien Le Moal (1): ata: libata-eh: Fix compilation warning in ata_eh_link_report() Dan Carpenter (5): mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type ixgbe: fix crash with empty VF macvlan list ceph: fix type promotion bug on 32bit systems net: usb: smsc95xx: Fix an error code in smsc95xx_reset() ASoC: pxa: fix a memory leak in probe() Daniel Miess (1): drm/amd/display: Don't set dpms_off for seamless boot Dharma Balasubiramani (1): counter: microchip-tcb-capture: Fix the use of internal GCLK logic Dinghao Liu (1): ieee802154: ca8210: Fix a potential UAF in ca8210_probe Dmitry Torokhov (1): pinctrl: avoid unsafe code pattern in find_pinctrl() Duoming Zhou (1): dmaengine: mediatek: Fix deadlock caused by synchronize_irq() Edward AD (1): Bluetooth: hci_sock: fix slab oob read in create_monitor_event Eric Dumazet (6): net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() xfrm: fix a data-race in xfrm_gen_index() xfrm: interface: use DEV_STATS_INC() tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb tun: prevent negative ifindex ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr Fabio Porcedda (1): USB: serial: option: add Telit LE910C4-WWX 0x1035 composition Filipe Manana (1): btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 Florian Westphal (1): netfilter: nft_payload: fix wrong mac header matching Gavrilov Ilia (1): net: pktgen: Fix interface flags printing Geert Uytterhoeven (2): neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section mtd: physmap-core: Restore map_rom fallback Greg Kroah-Hartman (2): lib/test_meminit: fix off-by-one error in test_pages() Linux 5.10.199 Haibo Chen (2): mmc: core: sdio: hold retuning if sdio in 1-bit mode gpio: vf610: set value before the direction to avoid a glitch Hangbin Liu (1): ipv4/fib: send notify when delete source address routes Hans de Goede (11): HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA drm/connector: Give connector sysfs devices there own device_type drm/connector: Add a fwnode pointer to drm_connector and register with ACPI (v2) drm/connector: Add drm_connector_find_by_fwnode() function (v3) drm/connector: Add support for out-of-band hotplug notification (v3) usb: typec: altmodes/displayport: Notify drm subsys of hotplug events platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events Heiner Kallweit (1): i2c: mux: Avoid potential false error message in i2c_mux_add_adapter Hui Wang (1): ACPI: resources: Add DMI-based legacy IRQ override quirk Hyeonggon Yoo (1): lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default Ilan Peer (1): wifi: cfg80211: Fix 6GHz scan configuration Jan Kara (1): quota: Fix slow quotaoff Javier Carrasco (2): net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read Input: powermate - fix use-after-free in powermate_config_complete Jeff Layton (1): overlayfs: set ctime when setting mtime and atime Jeffery Miller (1): Input: psmouse - fix fast_reconnect function for PS/2 mode Jeremy Cline (1): nfc: nci: assert requested protocol is valid Jesse Brandeburg (2): ice: fix over-shifted variable ice: reset first in crash dump kernels Jim Mattson (1): KVM: x86: Mask LVTPC when handling a PMI Jing Zhang (1): perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 Jinjie Ruan (1): net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register() Joerg Roedel (2): x86/sev: Check IOBM for IOIO exceptions from user-space x86/sev: Check for user-space IOIO pointing to kernel space Johan Hovold (1): regmap: fix NULL deref on lookup John Garry (2): resource: Add irqresource_disabled() ACPI: Drop acpi_dev_irqresource_disabled() Jordan Rife (2): net: prevent address rewrite in kernel_bind() libceph: use kernel_connect() Jorge Sanjuan Garcia (1): mcb: remove is_added flag from mcb_device struct Josef Bacik (2): btrfs: initialize start_slot in btrfs_log_prealloc_extents btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c Josua Mayer (1): net: rfkill: gpio: prevent value glitch during probe Juntong Deng (1): selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error Kai Uwe Broulik (1): drm: panel-orientation-quirks: Add quirk for One Mix 2S Kees Cook (2): sky2: Make sure there is at least one frag_addr available Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name Keith Busch (1): nvme-pci: add BOGUS_NID for Intel 0a54 device Kellen Renshaw (1): ACPI: resource: Add ASUS model S5402ZA to quirks Kirill A. Shutemov (1): x86/alternatives: Disable KASAN in apply_alternatives() Konstantin Meskhidze (1): drm/vmwgfx: fix typo of sizeof argument Krishna Kurapati (1): usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call Krzysztof Kozlowski (1): nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Kuogee Hsieh (1): drm/msm/dp: do not reinitialize phy unless retry during link training Lakshmi Yadlapati (1): iio: pressure: dps310: Adjust Timeout Settings Lee, Chun-Yi (2): Bluetooth: hci_event: Ignore NULL link key Bluetooth: Reject connection with the device which has same BD_ADDR Liam Mark (1): mm/memory_hotplug: rate limit page migration warnings Luiz Augusto von Dentz (3): Bluetooth: hci_event: Fix coding style Bluetooth: hci_core: Fix build warnings Bluetooth: hci_event: Fix using memcmp when comparing keys Ma Ke (3): net: ipv4: fix return value check in esp_remove_trailer net: ipv6: fix return value check in esp_remove_trailer HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event Maher Sanalla (1): net/mlx5: Handle fw tracer change ownership event based on MTRC Manish Chopra (1): qed: fix LL2 RX buffer allocation Mark Rutland (14): arm64: report EL1 UNDEFs better arm64: die(): pass 'err' as long arm64: consistently pass ESR_ELx to die() arm64: rework FPAC exception handling arm64: rework BTI exception handling arm64: allow kprobes on EL0 handlers arm64: split EL0/EL1 UNDEF handlers arm64: factor out EL1 SSBS emulation hook arm64: factor insn read out of call_undef_hook() arm64: rework EL0 MRS emulation arm64: armv8_deprecated: fold ops into insn_emulation arm64: armv8_deprecated move emulation functions arm64: armv8_deprecated: move aarch32 helper earlier arm64: armv8_deprecated: rework deprected instruction handling Martin Kurbanov (1): mtd: spinand: micron: correct bitmask for ecc status Mathias Nyman (6): xhci: cleanup xhci_hub_control port references xhci: move port specific items such as state completions to port structure xhci: rename resume_done to resume_timestamp xhci: clear usb2 resume related variables in one place. xhci: decouple usb2 port resume and get_port_status request handling xhci: track port suspend state correctly in unsuccessful resume cases Matthias Berndt (1): Input: xpad - add PXN V900 support Maurizio Lombardi (1): nvme-rdma: do not try to stop unallocated queues Michal Koutný (1): cgroup: Remove duplicates in cgroup v1 tasks file Michal Schmidt (1): i40e: prevent crash on probe if hw registers have invalid values Michał Mirosław (1): regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" Mika Westerberg (2): thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge Miquel Raynal (2): mtd: rawnand: marvell: Ensure program page operations are successful mtd: rawnand: arasan: Ensure program page operations are successful Neal Cardwell (1): tcp: fix excessive TLP and RACK timeouts from HZ rounding Nicolas Dichtel (1): dev_forward_skb: do not scrub skb mark within the same name space Niklas Schnelle (1): s390/pci: fix iommu bitmap allocation Pablo Neira Ayuso (1): netfilter: nft_set_rbtree: .deactivate fails if element has expired Paolo Abeni (1): tcp: check mptcp-level constraints for backlog coalescing Patrick Rohr (3): net: add sysctl accept_ra_min_rtr_lft net: change accept_ra_min_rtr_lft to affect all RA lifetimes net: release reference to inet6_dev pointer Paul Menzel (1): ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA Pedro Tammela (1): net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve Peter Zijlstra (1): perf: Disallow mis-matched inherited group reads Phil Elwell (1): iio: pressure: bmp280: Fix NULL pointer exception Piyush Mehta (1): usb: gadget: udc-xilinx: replace memcpy with memcpy_toio Pu Lehui (1): riscv, bpf: Factor out emit_call for kernel and bpf context Puliang Lu (1): USB: serial: option: add Fibocom to DELL custom modem FM101R-GL RD Babiera (1): usb: typec: altmodes/displayport: Signal hpd low when exiting mode Radu Pirea (NXP OSS) (2): net: macsec: indicate next pn update when offloading net: phy: mscc: macsec: reject PN update requests Rahul Rameshbabu (1): HID: multitouch: Add required quirk for Synaptics 0xcd7e device Ralph Siemsen (1): pinctrl: renesas: rzn1: Enable missing PINMUX Ren Zhijie (1): arm64: armv8_deprecated: fix unused-function error Renan Guilherme Lebre Ramos (1): platform/x86: touchscreen_dmi: Add info for the Positivo C4128B Ricardo Cañuelo (1): usb: hub: Guard against accesses to uninitialized BOS descriptors Rijo Thomas (1): tee: amdtee: fix use-after-free vulnerability in amdtee_close_session Roger Pau Monne (1): xen-netback: use default TX queue size for vifs Sagi Grimberg (1): nvmet-tcp: Fix a possible UAF in queue intialization setup Sasha Levin (2): Revert "spi: zynqmp-gqspi: fix clock imbalance on probe failure" Revert "spi: spi-zynqmp-gqspi: Fix runtime PM imbalance in zynqmp_qspi_probe" Sunil V L (1): ACPI: irq: Fix incorrect return value in acpi_register_gsi() Szilard Fabian (1): Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table Tamim Khan (3): ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA Thinh Nguyen (2): usb: dwc3: Soft reset phy on probe for host usb: core: Track SuperSpeed Plus GenXxY Tony Lindgren (6): serial: 8250: omap: Fix imprecise external abort for omap_8250_pm() serial: 8250_omap: Fix errors with no_console_suspend ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone phy: mapphone-mdm6600: Fix runtime disable on probe phy: mapphone-mdm6600: Fix runtime PM for remove phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins Trond Myklebust (1): pNFS: Fix a hang in nfs4_evict_inode() Ville Syrjälä (1): drm/i915: Retry gtt fault when out of fence registers Waiman Long (2): workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() selftests/vm: make charge_reserved_hugetlb.sh work with existing cgroup setting Wen Gong (1): wifi: mac80211: allow transmitting EAPOL frames with tainted key Wesley Cheng (1): usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer Xingxing Luo (2): usb: musb: Get the musb_qh poniter after musb_giveback usb: musb: Modify the "HWVers" register address Xiubo Li (1): ceph: fix incorrect revoked caps assert in ceph_fill_file_size() Ying Hsu (1): Bluetooth: Avoid redundant authentication Yongqiang Sun (1): drm/amd/display: only check available pipe to disable vbios mode. Yoshihiro Shimoda (2): ravb: Fix up dma_free_coherent() call in ravb_remove() ravb: Fix use-after-free issue in ravb_tx_timeout_work() Zhang Changzhong (1): xfrm6: fix inet6_dev refcount underflow problem Zheng Wang (1): media: mtk-jpeg: Fix use after free bug due to uncanceled work Ziyang Xuan (1): Bluetooth: Fix a refcnt underflow problem for hci_conn yangx.jy@xxxxxxxxxxx (1): RDMA/srp: Set scmnd->result only when scmnd is not NULL