This is the start of the stable review cycle for the 5.15.83 release. There are 123 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 14 Dec 2022 13:08:57 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.83-rc1... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 5.15.83-rc1

Harshit Mogalapalli harshit.m.mogalapalli@oracle.com io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()

Jens Axboe axboe@kernel.dk io_uring: move to separate directory

Masahiro Yamada masahiroy@kernel.org block: move CONFIG_BLOCK guard to top Makefile

Frank Jungclaus frank.jungclaus@esd.eu can: esd_usb: Allow REC and TEC to return to zero

Alexandra Winter wintera@linux.ibm.com s390/qeth: fix use-after-free in hsci

Heiko Carstens hca@linux.ibm.com s390/qeth: fix various format strings

Emeel Hakim ehakim@nvidia.com macsec: add missing attribute validation for offload

Dan Carpenter error27@gmail.com net: mvneta: Fix an out of bounds check

Zhengchao Shao shaozhengchao@huawei.com net: thunderbolt: fix memory leak in tbnet_open()

Eric Dumazet edumazet@google.com ipv6: avoid use-after-free in ip6_fragment()

Yang Yingliang yangyingliang@huawei.com net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()

Michael Walle michael@walle.cc net: phy: mxl-gpy: fix version reporting

Juergen Gross jgross@suse.com xen/netback: fix build warning

Yuan Can yuancan@huawei.com dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()

Zhang Changzhong zhangchangzhong@huawei.com ethernet: aeroflex: fix potential skb leak in greth_init_rings()

Xin Long lucien.xin@gmail.com tipc: call tipc_lxc_xmit without holding node_read_lock

Zhengchao Shao shaozhengchao@huawei.com net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()

Ido Schimmel idosch@nvidia.com ipv4: Fix incorrect route flushing when table ID 0 is used

Ido Schimmel idosch@nvidia.com ipv4: Fix incorrect route flushing when source address is deleted

YueHaibing yuehaibing@huawei.com tipc: Fix potential OOB in tipc_link_proto_rcv()

Liu Jian liujian56@huawei.com net: hisilicon: Fix potential use-after-free in hix5hd2_rx()

Zeng Heng zengheng4@huawei.com net: mdio: fix unbalanced fwnode reference count in mdio_device_release()

Liu Jian liujian56@huawei.com net: hisilicon: Fix potential use-after-free in hisi_femac_rx()

Yongqiang Liu liuyongqiang13@huawei.com net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq

Qiheng Lin linqiheng@huawei.com net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue

Hangbin Liu liuhangbin@gmail.com ip_gre: do not report erspan version on GRE interface

Jisheng Zhang jszhang@kernel.org net: stmmac: fix "snps,axi-config" node property parsing

Wang Yufen wangyufen@huawei.com gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()

Pankaj Raghav p.raghav@samsung.com nvme initialize core quirks before calling nvme_init_subsystem

Kees Cook keescook@chromium.org NFC: nci: Bounds check struct nfc_target arrays

Przemyslaw Patynowski przemyslawx.patynowski@intel.com i40e: Disallow ip4 and ip6 l4_4_bytes

Sylwester Dziedziuch sylwesterx.dziedziuch@intel.com i40e: Fix for VF MAC address 0

Michal Jaron michalx.jaron@intel.com i40e: Fix not setting default xps_cpus after reset

Dan Carpenter error27@gmail.com net: mvneta: Prevent out of bounds read in mvneta_config_rss()

Lin Liu lin.liu@citrix.com xen-netfront: Fix NULL sring after live migration

Ziyang Xuan william.xuanziyang@huawei.com octeontx2-pf: Fix potential memory leak in otx2_init_tc()

Yang Yingliang yangyingliang@huawei.com net: mdiobus: fix double put fwnode in the error path

Oleksij Rempel linux@rempel-privat.de net: mdiobus: fwnode_mdiobus_register_phy() rework error handling

Valentina Goncharenko goncharenko.vp@ispras.ru net: encx24j600: Fix invalid logic in reading of MISTAT register

Valentina Goncharenko goncharenko.vp@ispras.ru net: encx24j600: Add parentheses to fix precedence

Wei Yongjun weiyongjun1@huawei.com mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()

Zhengchao Shao shaozhengchao@huawei.com selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload

Artem Chernyshev artem.chernyshev@red-soft.ru net: dsa: sja1105: Check return value

Artem Chernyshev artem.chernyshev@red-soft.ru net: dsa: hellcreek: Check return value

Artem Chernyshev artem.chernyshev@red-soft.ru net: dsa: ksz: Check return value

Chen Zhongjin chenzhongjin@huawei.com Bluetooth: Fix not cleanup led when bt_init fails

Wang ShaoBo bobo.shaobowang@huawei.com Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()

Ronak Doshi doshir@vmware.com vmxnet3: use correct intrConf reference when using extended queues

Ronak Doshi doshir@vmware.com vmxnet3: correctly report encapsulated LRO packet

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Get user_ns from in_skb in unix_diag_get_exact().

Guillaume BRUN the.cheaterman@gmail.com drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420

YueHaibing yuehaibing@huawei.com net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835

Akihiko Odaki akihiko.odaki@daynix.com igb: Allocate MSI-X vector when testing

Akihiko Odaki akihiko.odaki@daynix.com e1000e: Fix TX dispatch condition

Xiongfeng Wang wangxiongfeng2@huawei.com gpio: amd8111: Fix PCI device reference count leak

Qiqi Zhang eddy.zhang@rock-chips.com drm/bridge: ti-sn65dsi86: Fix output polarity setting bug

Pablo Neira Ayuso pablo@netfilter.org netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark

Hauke Mehrtens hauke@hauke-m.de ca8210: Fix crash by zero initializing data

Ziyang Xuan william.xuanziyang@huawei.com ieee802154: cc2520: Fix error return code in cc2520_hw_init()

Dawei Li set_pte_at@outlook.com drm/vmwgfx: Fix race issue calling pin_user_pages

Stefano Brivio sbrivio@redhat.com netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one

Zeng Heng zengheng4@huawei.com gpiolib: fix memory leak in gpiochip_setup_dev()

Bartosz Golaszewski brgl@bgdev.pl gpiolib: check the 'ngpios' property in core gpiolib code

Bartosz Golaszewski brgl@bgdev.pl gpiolib: improve coding style for local variables

Uwe Kleine-König u.kleine-koenig@pengutronix.de clk: Fix pointer casting to prevent oops in devm_clk_release()

Oliver Hartkopp socketcan@hartkopp.net can: af_can: fix NULL pointer dereference in can_rcv_filter

Hans de Goede hdegoede@redhat.com HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10

ZhangPeng zhangpeng362@huawei.com HID: core: fix shift-out-of-bounds in hid_report_raw_event

Anastasia Belova abelova@astralinux.ru HID: hid-lg4ff: Add check for empty lbuf

Ankit Patel anpatel@nvidia.com HID: usbhid: Add ALWAYS_POLL quirk for some mice

Radu Nicolae Pirea (OSS) radu-nicolae.pirea@oss.nxp.com net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing()

Rob Clark robdclark@chromium.org drm/shmem-helper: Avoid vm_open error paths

Rob Clark robdclark@chromium.org drm/shmem-helper: Remove errant put in error path

Prike Liang Prike.Liang@amd.com drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend

Zack Rusin zackr@vmware.com drm/vmwgfx: Don't use screen objects when SEV is active

Thomas Huth thuth@redhat.com KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field

Haiyang Zhang haiyangz@microsoft.com net: mana: Fix race on per-CQ variable napi work_done

Luiz Augusto von Dentz luiz.von.dentz@intel.com Bluetooth: Fix crash when replugging CSR fake controllers

Ismael Ferreras Morezuelas swyterzone@gmail.com Bluetooth: btusb: Add debug message for CSR controllers

John Starks jostarks@microsoft.com mm/gup: fix gup_pud_range() for dax

Tejun Heo tj@kernel.org memcg: fix possible use-after-free in memcg_write_event_control()

Hans Verkuil hverkuil-cisco@xs4all.nl media: v4l2-dv-timings.c: fix too strict blanking sanity checks

Francesco Dolcini francesco.dolcini@toradex.com Revert "ARM: dts: imx7: Fix NAND controller size-cells"

Sjoerd Simons sjoerd@collabora.com soundwire: intel: Initialize clock stop timeout

Hans Verkuil hverkuil-cisco@xs4all.nl media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area()

Juergen Gross jgross@suse.com xen/netback: don't call kfree_skb() with interrupts disabled

Juergen Gross jgross@suse.com xen/netback: do some code cleanup

Ross Lagerwall ross.lagerwall@citrix.com xen/netback: Ensure protocol headers don't fall in the non-linear area

Hsin-Yi Wang hsinyi@chromium.org drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read()

Zeng Heng zengheng4@huawei.com cifs: fix use-after-free caused by invalid pointer `hostname`

Mateusz Jończyk mat.jonczyk@o2.pl rtc: cmos: avoid UIP when reading alarm time

Mateusz Jończyk mat.jonczyk@o2.pl rtc: cmos: avoid UIP when writing alarm time

Mateusz Jończyk mat.jonczyk@o2.pl rtc: mc146818-lib: extract mc146818_avoid_UIP

Jann Horn jannh@google.com mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths

Jann Horn jannh@google.com mm/khugepaged: fix GUP-fast interaction by sending IPI

Jann Horn jannh@google.com mm/khugepaged: take the right locks for page table retraction

Davide Tronchin davide.tronchin.94@gmail.com net: usb: qmi_wwan: add u-blox 0x1342 composition

Dominique Martinet asmadeus@codewreck.org 9p/xen: check logical size for buffer size

Thinh Nguyen Thinh.Nguyen@synopsys.com usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer

Tetsuo Handa penguin-kernel@I-love.SAKURA.ne.jp fbcon: Use kzalloc() in fbcon_prepare_logo()

Andreas Kemnade andreas@kemnade.info regulator: twl6030: fix get status of twl6032 regulators

Srinivasa Rao Mandadapu quic_srivasam@quicinc.com ASoC: soc-pcm: Add NULL check in BE reparenting

Filipe Manana fdmanana@suse.com btrfs: send: avoid unaligned encoded writes when attempting to clone range

Daniel Díaz daniel.diaz@linaro.org selftests/net: Find nettest in current directory

Kees Cook keescook@chromium.org ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event

Konrad Dybcio konrad.dybcio@linaro.org regulator: slg51000: Wait after asserting CS pin

GUO Zihua guozihua@huawei.com 9p/fd: Use P9_HDRSZ for header size

Shuming Fan shumingf@realtek.com ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions

Johan Jonker jbx6244@gmail.com ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188

Zhichao Liu zhichao.liu@mediatek.com spi: mediatek: Fix DEVAPC Violation at KO Remove

Chancel Liu chancel.liu@nxp.com ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register

Giulio Benetti giulio.benetti@benettiengineering.com ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation

Tomislav Novak tnovak@fb.com ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels

Jann Horn jannh@google.com fs: use acquire ordering in __fget_light()

Johan Jonker jbx6244@gmail.com ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name

Johan Jonker jbx6244@gmail.com arm64: dts: rockchip: fix ir-receiver node names

Johan Jonker jbx6244@gmail.com ARM: dts: rockchip: fix ir-receiver node names

Sebastian Reichel sebastian.reichel@collabora.com arm: dts: rockchip: remove clock-frequency from rtc

Sebastian Reichel sebastian.reichel@collabora.com arm: dts: rockchip: fix node name for hym8563 rtc

FUKAUMI Naoki naoki@radxa.com arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series

Gaosheng Cui cuigaosheng1@huawei.com mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse()

Uwe Kleine-König u.kleine-koenig@pengutronix.de clk: Provide new devm_clk helpers for prepared and enabled clocks

Uwe Kleine-König u.kleine-koenig@pengutronix.de clk: generalize devm_clk_get() a bit

-------------

Diffstat:

MAINTAINERS | 7 +- Makefile | 8 +- arch/arm/boot/dts/imx7s.dtsi | 4 +- arch/arm/boot/dts/rk3036-evb.dts | 3 +- arch/arm/boot/dts/rk3188-radxarock.dts | 2 +- arch/arm/boot/dts/rk3188.dtsi | 3 +- arch/arm/boot/dts/rk3288-evb-act8846.dts | 2 +- arch/arm/boot/dts/rk3288-firefly.dtsi | 3 +- arch/arm/boot/dts/rk3288-miqi.dts | 3 +- arch/arm/boot/dts/rk3288-rock2-square.dts | 3 +- arch/arm/boot/dts/rk3288-vmarc-som.dtsi | 1 - arch/arm/boot/dts/rk3xxx.dtsi | 7 + arch/arm/include/asm/perf_event.h | 2 +- arch/arm/include/asm/pgtable-nommu.h | 6 - arch/arm/include/asm/pgtable.h | 16 +- arch/arm/mm/nommu.c | 19 ++ arch/arm64/boot/dts/rockchip/rk3308-roc-cc.dts | 2 +- arch/arm64/boot/dts/rockchip/rk3399-rock-pi-4.dtsi | 1 - arch/s390/kvm/vsie.c | 4 +- block/Makefile | 2 +- drivers/bluetooth/btusb.c | 5 + drivers/clk/clk-devres.c | 91 ++++++-- drivers/gpio/gpio-amd8111.c | 4 + drivers/gpio/gpio-rockchip.c | 1 + drivers/gpio/gpiolib.c | 59 ++++-- drivers/gpu/drm/amd/amdgpu/sdma_v4_0.c | 24 ++- drivers/gpu/drm/bridge/analogix/anx7625.c | 4 +- drivers/gpu/drm/bridge/synopsys/dw-hdmi.c | 6 +- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 4 +- drivers/gpu/drm/drm_gem_shmem_helper.c | 18 +- drivers/gpu/drm/vmwgfx/vmwgfx_msg.c | 6 +- drivers/gpu/drm/vmwgfx/vmwgfx_scrn.c | 4 + drivers/hid/hid-core.c | 3 + drivers/hid/hid-ids.h | 4 + drivers/hid/hid-ite.c | 5 + drivers/hid/hid-lg4ff.c | 6 + drivers/hid/hid-quirks.c | 3 + drivers/media/common/videobuf2/videobuf2-core.c | 102 ++++++--- drivers/media/v4l2-core/v4l2-dv-timings.c | 20 +- drivers/mmc/host/mtk-sd.c | 6 +- drivers/net/can/usb/esd_usb2.c | 6 + drivers/net/dsa/sja1105/sja1105_devlink.c | 2 + drivers/net/dsa/sja1105/sja1105_main.c | 2 +- drivers/net/ethernet/aeroflex/greth.c | 1 + drivers/net/ethernet/broadcom/Kconfig | 3 +- drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +- .../ethernet/freescale/dpaa2/dpaa2-switch-flower.c | 4 + drivers/net/ethernet/hisilicon/hisi_femac.c | 2 +- drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 2 +- drivers/net/ethernet/intel/e1000e/netdev.c | 4 +- drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 12 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 19 +- drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 2 + drivers/net/ethernet/intel/igb/igb_ethtool.c | 2 + drivers/net/ethernet/marvell/mvneta.c | 2 +- .../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 7 +- drivers/net/ethernet/microchip/encx24j600-regmap.c | 4 +- .../net/ethernet/microchip/sparx5/sparx5_main.c | 3 + drivers/net/ethernet/microsoft/mana/gdma.h | 9 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 16 +- .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 8 +- drivers/net/ieee802154/ca8210.c | 2 +- drivers/net/ieee802154/cc2520.c | 2 +- drivers/net/macsec.c | 1 + drivers/net/mdio/fwnode_mdio.c | 25 ++- drivers/net/mdio/of_mdio.c | 3 +- drivers/net/phy/mdio_device.c | 2 + drivers/net/phy/mxl-gpy.c | 11 +- drivers/net/plip/plip.c | 4 +- drivers/net/thunderbolt.c | 1 + drivers/net/usb/qmi_wwan.c | 1 + drivers/net/vmxnet3/vmxnet3_drv.c | 27 ++- drivers/net/xen-netback/common.h | 14 +- drivers/net/xen-netback/interface.c | 22 +- drivers/net/xen-netback/netback.c | 229 ++++++++++++--------- drivers/net/xen-netback/rx.c | 10 +- drivers/net/xen-netfront.c | 6 + drivers/nvme/host/core.c | 8 +- drivers/regulator/slg51000-regulator.c | 2 + drivers/regulator/twl6030-regulator.c | 15 +- drivers/rtc/rtc-cmos.c | 179 ++++++++++------ drivers/rtc/rtc-mc146818-lib.c | 70 +++++++ drivers/s390/net/qeth_l2_main.c | 16 +- drivers/soundwire/intel.c | 1 + drivers/spi/spi-mt65xx.c | 8 +- drivers/usb/dwc3/gadget.c | 3 +- drivers/video/fbdev/core/fbcon.c | 2 +- fs/Makefile | 2 - fs/btrfs/send.c | 24 ++- fs/cifs/connect.c | 1 + fs/file.c | 11 +- include/asm-generic/tlb.h | 4 + include/linux/cgroup.h | 1 + include/linux/clk.h | 109 ++++++++++ include/linux/mc146818rtc.h | 3 + io_uring/Makefile | 6 + {fs => io_uring}/io-wq.c | 0 {fs => io_uring}/io-wq.h | 0 {fs => io_uring}/io_uring.c | 6 +- kernel/cgroup/cgroup-internal.h | 1 - kernel/sched/core.c | 2 +- mm/gup.c | 2 +- mm/khugepaged.c | 47 ++++- mm/memcontrol.c | 15 +- mm/mmu_gather.c | 4 +- net/9p/trans_fd.c | 6 +- net/9p/trans_xen.c | 9 + net/bluetooth/6lowpan.c | 1 + net/bluetooth/af_bluetooth.c | 4 +- net/bluetooth/hci_core.c | 3 +- net/can/af_can.c | 4 +- net/dsa/tag_hellcreek.c | 3 +- net/dsa/tag_ksz.c | 3 +- net/dsa/tag_sja1105.c | 3 +- net/ipv4/fib_frontend.c | 3 + net/ipv4/fib_semantics.c | 1 + net/ipv4/ip_gre.c | 48 +++-- net/ipv6/ip6_output.c | 5 + net/mac802154/iface.c | 1 + net/netfilter/nf_conntrack_netlink.c | 19 +- net/netfilter/nft_set_pipapo.c | 5 +- net/nfc/nci/ntf.c | 6 + net/tipc/link.c | 4 +- net/tipc/node.c | 12 +- net/unix/diag.c | 20 +- sound/core/seq/seq_memory.c | 11 +- sound/soc/codecs/rt711-sdca-sdw.c | 2 +- sound/soc/codecs/wm8962.c | 8 + sound/soc/soc-pcm.c | 2 + tools/testing/selftests/net/fcnal-test.sh | 11 +- tools/testing/selftests/net/fib_tests.sh | 37 ++++ tools/testing/selftests/net/pmtu.sh | 10 +- tools/testing/selftests/net/rtnetlink.sh | 2 +- 133 files changed, 1236 insertions(+), 496 deletions(-)