This is the start of the stable review cycle for the 5.15.54 release. There are 226 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 14 Jul 2022 07:13:20 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.54-rc3... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 5.15.54-rc3

Hangbin Liu liuhangbin@gmail.com selftests/net: fix section name when using xdp_dummy.o

Dave Jiang dave.jiang@intel.com dmaengine: idxd: force wq context cleanup on device disable path

Miaoqian Lin linmq006@gmail.com dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate

Caleb Connolly caleb.connolly@linaro.org dmaengine: qcom: bam_dma: fix runtime PM underflow

Miaoqian Lin linmq006@gmail.com dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate

Michael Walle michael@walle.cc dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly

Christophe JAILLET christophe.jaillet@wanadoo.fr dmaengine: lgm: Fix an error handling path in intel_ldma_probe()

Dmitry Osipenko dmitry.osipenko@collabora.com dmaengine: pl330: Fix lockdep warning about non-static key

Linus Torvalds torvalds@linux-foundation.org ida: don't use BUG_ON() for debugging

Samuel Holland samuel@sholland.org dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo

AngeloGioacchino Del Regno angelogioacchino.delregno@collabora.com Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL"

Naoya Horiguchi naoya.horiguchi@nec.com Revert "mm/memory-failure.c: fix race with changing page compound again"

Shuah Khan skhan@linuxfoundation.org misc: rtsx_usb: set return value in rsp_buf alloc err path

Shuah Khan skhan@linuxfoundation.org misc: rtsx_usb: use separate command and response buffers

Shuah Khan skhan@linuxfoundation.org misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer

Peter Robinson pbrobinson@gmail.com dmaengine: imx-sdma: Allow imx8m for imx7 FW revs

Satish Nagireddy satish.nagireddy@getcruise.com i2c: cadence: Unregister the clk notifier in error path

Heiner Kallweit hkallweit1@gmail.com r8169: fix accessing unset transport header

Vladimir Oltean vladimir.oltean@nxp.com selftests: forwarding: fix error message in learning_test

Vladimir Oltean vladimir.oltean@nxp.com selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT

Vladimir Oltean vladimir.oltean@nxp.com selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT

Rick Lindsley ricklind@us.ibm.com ibmvnic: Properly dispose of all skbs during a failover.

Fabrice Gasnier fabrice.gasnier@foss.st.com ARM: dts: stm32: add missing usbh clock and fix clk order on stm32mp15

Amelie Delaunay amelie.delaunay@foss.st.com ARM: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on stm32mp151

Norbert Zulinski norbertx.zulinski@intel.com i40e: Fix VF's MAC Address change on VM

Lukasz Cieplicki lukaszx.cieplicki@intel.com i40e: Fix dropped jumbo frames statistics

Jean Delvare jdelvare@suse.de i2c: piix4: Fix a memory leak in the EFCH MMIO support

Ivan Malov ivan.malov@oktetlabs.ru xsk: Clear page contiguity bit when unmapping pool

Mihai Sain mihai.sain@microchip.com ARM: at91: fix soc detection for SAM9X60 SiPs

Eugen Hristev eugen.hristev@microchip.com ARM: dts: at91: sama5d2_icp: fix eeprom compatibles

Eugen Hristev eugen.hristev@microchip.com ARM: dts: at91: sam9x60ek: fix eeprom compatible and size

Claudiu Beznea claudiu.beznea@microchip.com ARM: at91: pm: use proper compatibles for sama7g5's rtc and rtt

Claudiu Beznea claudiu.beznea@microchip.com ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt

Claudiu Beznea claudiu.beznea@microchip.com ARM: at91: pm: use proper compatible for sama5d2's rtc

Stephan Gerhold stephan.gerhold@kernkonzept.com arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo

Andrei Lalaev andrey.lalaev@gmail.com pinctrl: sunxi: sunxi_pconf_set: use correct offset

Peng Fan peng.fan@nxp.com arm64: dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings

Peng Fan peng.fan@nxp.com arm64: dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings

Peng Fan peng.fan@nxp.com arm64: dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings

Peng Fan peng.fan@nxp.com arm64: dts: imx8mp-evk: correct I2C3 pad settings

Peng Fan peng.fan@nxp.com arm64: dts: imx8mp-evk: correct I2C1 pad settings

Peng Fan peng.fan@nxp.com arm64: dts: imx8mp-evk: correct eqos pad settings

Peng Fan peng.fan@nxp.com arm64: dts: imx8mp-evk: correct vbus pad settings

Peng Fan peng.fan@nxp.com arm64: dts: imx8mp-evk: correct gpio-led pad settings

Sherry Sun sherry.sun@nxp.com arm64: dts: imx8mp-evk: correct the uart2 pinctl value

Peng Fan peng.fan@nxp.com arm64: dts: imx8mp-evk: correct mmc pad settings

Fabio Estevam festevam@denx.de ARM: mxs_defconfig: Enable the framebuffer

Dmitry Baryshkov dmitry.baryshkov@linaro.org arm64: dts: qcom: sdm845: use dispcc AHB clock for mdss node

Konrad Dybcio konrad.dybcio@somainline.org arm64: dts: qcom: msm8994: Fix CPU6/7 reg values

Pierre-Louis Bossart pierre-louis.bossart@linux.intel.com ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect

Charles Keepax ckeepax@opensource.cirrus.com ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver

Charles Keepax ckeepax@opensource.cirrus.com ASoC: rt711: Add endianness flag in snd_soc_component_driver

Samuel Holland samuel@sholland.org pinctrl: sunxi: a83t: Fix NAND function name for some pins

Miaoqian Lin linmq006@gmail.com ARM: meson: Fix refcount leak in meson_smp_prepare_cpus

daniel.starke@siemens.com daniel.starke@siemens.com tty: n_gsm: fix encoding of command/response bit

Tom Rix trix@redhat.com btrfs: fix use of uninitialized variable at rm device ioctl

Ye Guojin ye.guojin@zte.com.cn virtio-blk: modify the value type of num in virtio_queue_rq()

Dan Carpenter dan.carpenter@oracle.com btrfs: fix error pointer dereference in btrfs_ioctl_rm_dev_v2()

Hui Wang hui.wang@canonical.com Revert "serial: sc16is7xx: Clear RS485 bits in the shutdown"

Eric Sandeen sandeen@redhat.com xfs: remove incorrect ASSERT in xfs_rename

Jimmy Assarsson extja@kvaser.com can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits

Jimmy Assarsson extja@kvaser.com can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression

Jimmy Assarsson extja@kvaser.com can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info

Christian Marangi ansuelsmth@gmail.com net: dsa: qca8k: reset cpu port on MTU change

Jason A. Donenfeld Jason@zx2c4.com powerpc/powernv: delay rng platform device creation until later in boot

Hsin-Yi Wang hsinyi@chromium.org video: of_display_timing.h: include errno.h

Dan Williams dan.j.williams@intel.com memregion: Fix memregion_free() fallback definition

Rafael J. Wysocki rafael.j.wysocki@intel.com PM: runtime: Redefine pm_runtime_release_supplier()

Helge Deller deller@gmx.de fbcon: Prevent that screen size is smaller than font size

Helge Deller deller@gmx.de fbcon: Disallow setting font bigger than screen size

Helge Deller deller@gmx.de fbmem: Check virtual screen sizes in fb_set_var()

Guiling Deng greens9@163.com fbdev: fbmem: Fix logo center image dx issue

Yian Chen yian.chen@intel.com iommu/vt-d: Fix PCI bus rescan device hot add

Alexey Dobriyan adobriyan@gmail.com module: fix [e_shstrndx].sh_size=0 OOB access

Shuah Khan skhan@linuxfoundation.org module: change to print useful messages from elf_validity_check()

Bryan O'Donoghue bryan.odonoghue@linaro.org dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible

Vladimir Lypak vladimir.lypak@gmail.com dt-bindings: soc: qcom: smd-rpm: Add compatible for MSM8953 SoC

David Howells dhowells@redhat.com rxrpc: Fix locking issue

Mark Rutland mark.rutland@arm.com irqchip/gic-v3: Refactor ISB + EOIR at ack time

Mark Rutland mark.rutland@arm.com irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling

Pavel Begunkov asml.silence@gmail.com io_uring: avoid io-wq -EAGAIN looping for !IOPOLL

Sean Wang sean.wang@mediatek.com Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event

Niels Dossche dossche.niels@gmail.com Bluetooth: protect le accept and resolv lists with hdev->lock

Rex-BC Chen rex-bc.chen@mediatek.com drm/mediatek: Add vblank register/unregister callback functions

Chun-Kuang Hu chunkuang.hu@kernel.org drm/mediatek: Add cmdq_handle in mtk_crtc

Chun-Kuang Hu chunkuang.hu@kernel.org drm/mediatek: Detect CMDQ execution timeout

Chun-Kuang Hu chunkuang.hu@kernel.org drm/mediatek: Remove the pointer of struct cmdq_client

Chun-Kuang Hu chunkuang.hu@kernel.org drm/mediatek: Use mailbox rx_callback instead of cmdq_task_cb

Thomas Hellström thomas.hellstrom@linux.intel.com drm/i915: Fix a race between vma / object destruction and unbinding

Richard Gong richard.gong@amd.com drm/amdgpu: vi: disable ASPM on Intel Alder Lake based systems

Mario Limonciello mario.limonciello@amd.com drm/amd: Refactor `amdgpu_aspm` to be evaluated per device

Daniel Starke daniel.starke@siemens.com tty: n_gsm: fix invalid gsmtty_write_room() result

AngeloGioacchino Del Regno angelogioacchino.delregno@collabora.com serial: 8250_mtk: Make sure to select the right FEATURE_SEL

Daniel Starke daniel.starke@siemens.com tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output()

Daniel Starke daniel.starke@siemens.com tty: n_gsm: fix invalid use of MSC in advanced option

Naoya Horiguchi naoya.horiguchi@nec.com mm/hwpoison: fix race between hugetlb free/demotion and memory_failure_hugetlb()

Miaohe Lin linmiaohe@huawei.com mm/memory-failure.c: fix race with changing page compound again

luofei luofei@unicloud.com mm/hwpoison: avoid the impact of hwpoison_filter() return value on mce handler

Naoya Horiguchi naoya.horiguchi@nec.com mm/hwpoison: mf_mutex for soft offline and unpoison

Sean Christopherson seanjc@google.com KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref

Naohiro Aota naohiro.aota@wdc.com btrfs: zoned: use dedicated lock for data relocation

Johannes Thumshirn johannes.thumshirn@wdc.com btrfs: zoned: encapsulate inode locking for zoned relocation

Daniel Starke daniel.starke@siemens.com tty: n_gsm: fix missing update of modem controls after DLCI open

Maurizio Avogadro mavoga@gmail.com ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX.

Johannes Schickel lordhoto@gmail.com ALSA: usb-audio: add mapping for MSI MPG X570S Carbon Max Wifi.

Daniel Starke daniel.starke@siemens.com tty: n_gsm: fix frame reception handling

Zhenguo Zhao Zhenguo.Zhao1@unisoc.com tty: n_gsm: Save dlci address open status when config requester

Zhenguo Zhao Zhenguo.Zhao1@unisoc.com tty: n_gsm: Modify CR,PF bit when config requester

Oliver Upton oupton@google.com KVM: Don't create VM debugfs files outside of the VM directory

tiancyin tianci.yin@amd.com drm/amd/vcn: fix an error msg on vcn 3.0

Xiaomeng Tong xiam0nd.tong@gmail.com ASoC: rt5682: fix an incorrect NULL check on list iterator

Jack Yu jack.yu@realtek.com ASoC: rt5682: move clk related code to rt5682_i2c_probe

Tadeusz Struk tadeusz.struk@linaro.org uapi/linux/stddef.h: Add include guards

Kees Cook keescook@chromium.org stddef: Introduce DECLARE_FLEX_ARRAY() helper

Paul Davey paul.davey@alliedtelesis.co.nz bus: mhi: Fix pm_state conversion to string

Kees Cook keescook@chromium.org bus: mhi: core: Use correctly sized arguments for bit field

Hui Wang hui.wang@canonical.com serial: sc16is7xx: Clear RS485 bits in the shutdown

Nicholas Piggin npiggin@gmail.com powerpc/tm: Fix more userspace r13 corruption

Nicholas Piggin npiggin@gmail.com powerpc: flexible GPR range save/restore macros

Christophe Leroy christophe.leroy@csgroup.eu powerpc/32: Don't use lmw/stmw for saving/restoring non volatile regs

Arun Easi aeasi@marvell.com scsi: qla2xxx: Fix loss of NVMe namespaces after driver reload test

Claudio Imbrenda imbrenda@linux.ibm.com KVM: s390x: fix SCK locking

Dongliang Mu mudongliangabcd@gmail.com btrfs: don't access possibly stale fs_info data in device_list_add

Paolo Bonzini pbonzini@redhat.com KVM: use __vcalloc for very large allocations

Paolo Bonzini pbonzini@redhat.com mm: vmalloc: introduce array allocation functions

Kees Cook keescook@chromium.org Compiler Attributes: add __alloc_size() for better bounds checking

Tudor Ambarus tudor.ambarus@microchip.com mtd: spi-nor: Skip erase logic when SPI_NOR_NO_ERASE is set

Sebastian Andrzej Siewior bigeasy@linutronix.de batman-adv: Use netif_rx().

Haibo Chen haibo.chen@nxp.com iio: accel: mma8452: use the correct logic to get mma8452_data

Palmer Dabbelt palmer@rivosinc.com riscv/mm: Add XIP_FIXUP for riscv_pfn_base

Chuck Lever chuck.lever@oracle.com NFSD: COMMIT operations must not return NFS?ERR_INVAL

Chuck Lever chuck.lever@oracle.com NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id)

CHANDAN VURDIGERE NATARAJ chandan.vurdigerenataraj@amd.com drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw

Michael Strauss michael.strauss@amd.com drm/amd/display: Set min dcfclk if pipe count is 0

Xiaomeng Tong xiam0nd.tong@gmail.com drbd: fix an invalid memory access caused by incorrect use of list iterator

Wu Bo wubo40@huawei.com drbd: Fix double free problem in drbd_create_device

Luis Chamberlain mcgrof@kernel.org drbd: add error handling support for add_disk()

Qu Wenruo wqu@suse.com btrfs: remove device item and update super block in the same transaction

Josef Bacik josef@toxicpanda.com btrfs: use btrfs_get_dev_args_from_path in dev removal ioctls

Josef Bacik josef@toxicpanda.com btrfs: add a btrfs_get_dev_args_from_path helper

Josef Bacik josef@toxicpanda.com btrfs: handle device lookup with btrfs_dev_lookup_args

Eli Cohen elic@nvidia.com vdpa/mlx5: Avoid processing works if workqueue was destroyed

Andreas Gruenbacher agruenba@redhat.com gfs2: Fix gfs2_file_buffered_write endless loop workaround

Arun Easi aeasi@marvell.com scsi: qla2xxx: Fix crash during module load unload test

Quinn Tran qutran@marvell.com scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe

Quinn Tran qutran@marvell.com scsi: qla2xxx: Fix laggy FC remote port session recovery

Manish Rangankar mrangankar@marvell.com scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue

Sean Christopherson seanjc@google.com KVM: x86/mmu: Use common TDP MMU zap helper for MMU notifier unmap hook

Sean Christopherson seanjc@google.com KVM: x86/mmu: Use yield-safe TDP MMU root iter in MMU notifier unmapping

Lad Prabhakar prabhakar.mahadev-lad.rj@bp.renesas.com clk: renesas: r9a07g044: Update multiplier and divider values for PLL2/3

Dan Williams dan.j.williams@intel.com cxl/port: Hold port reference until decoder release

Lorenzo Bianconi lorenzo@kernel.org mt76: mt7921: do not always disable fw runtime-pm

Sean Wang sean.wang@mediatek.com mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error

Johan Hovold johan@kernel.org media: davinci: vpif: fix use-after-free on driver unbind

Kees Cook keescook@chromium.org media: omap3isp: Use struct_group() for memcpy() region

Kees Cook keescook@chromium.org stddef: Introduce struct_group() helper macro

Tejun Heo tj@kernel.org block: fix rq-qos breakage from skipping rq_qos_done_bio()

Jens Axboe axboe@kernel.dk block: only mark bio as tracked if it really is tracked

Pavel Begunkov asml.silence@gmail.com block: use bdev_get_queue() in bio.c

Jens Axboe axboe@kernel.dk io_uring: ensure that fsnotify is always called

Max Gurtovoy mgurtovoy@nvidia.com virtio-blk: avoid preallocating big SGL for data

Sukadev Bhattiprolu sukadev@linux.ibm.com ibmvnic: Allow queueing resets during probe

Sukadev Bhattiprolu sukadev@linux.ibm.com ibmvnic: clear fop when retrying probe

Sukadev Bhattiprolu sukadev@linux.ibm.com ibmvnic: init init_done_rc earlier

Alexander Egorenkov egorenar@linux.ibm.com s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE

Alexander Gordeev agordeev@linux.ibm.com s390/setup: use physical pointers for memblock_reserve()

Alexander Gordeev agordeev@linux.ibm.com s390/boot: allocate amode31 section in decompressor

Florian Westphal fw@strlen.de netfilter: nft_payload: don't allow th access for fragments

Pablo Neira Ayuso pablo@netfilter.org netfilter: nft_payload: support for inner header matching / mangling

Pablo Neira Ayuso pablo@netfilter.org netfilter: nf_tables: convert pktinfo->tprot_set to flags field

Peter Ujfalusi peter.ujfalusi@linux.intel.com ASoC: rt5682: Fix deadlock on resume

Derek Fang derek.fang@realtek.com ASoC: rt5682: Re-detect the combo jack after resuming

Derek Fang derek.fang@realtek.com ASoC: rt5682: Avoid the unexpected IRQ event during going to suspend

Roi Dayan roid@nvidia.com net/mlx5e: TC, Reject rules with forward and drop actions

Roi Dayan roid@nvidia.com net/mlx5e: TC, Reject rules with drop and modify hdr action

Roi Dayan roid@nvidia.com net/mlx5e: Split actions_match_supported() into a sub function

Roi Dayan roid@nvidia.com net/mlx5e: Check action fwd/drop flag exists also for nic flows

Palmer Dabbelt palmer@rivosinc.com RISC-V: defconfigs: Set CONFIG_FB=y, for FB console

Heinrich Schuchardt heinrich.schuchardt@canonical.com riscv: defconfig: enable DRM_NOUVEAU

Hou Tao houtao1@huawei.com bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC

Martin KaFai Lau kafai@fb.com bpf: Stop caching subprog index in the bpf_pseudo_func insn

Lorenzo Bianconi lorenzo@kernel.org mt76: mt7921: fix a possible race enabling/disabling runtime-pm

Lorenzo Bianconi lorenzo@kernel.org mt76: mt7921: introduce mt7921_mcu_set_beacon_filter utility routine

Lorenzo Bianconi lorenzo@kernel.org mt76: mt7921: get rid of mt7921_mac_set_beacon_filter

Hans de Goede hdegoede@redhat.com platform/x86: wmi: Fix driver->notify() vs ->probe() race

Hans de Goede hdegoede@redhat.com platform/x86: wmi: Replace read_takes_no_args with a flags field

Barnabás Pőcze pobrn@protonmail.com platform/x86: wmi: introduce helper to convert driver to WMI driver

Shai Malin smalin@marvell.com qed: Improve the stack space of filter_config()

Seevalamuthu Mariappan quic_seevalam@quicinc.com ath11k: add hw_param for wakeup_mhi

Andrew Gabbasov andrew_gabbasov@mentor.com memory: renesas-rpc-if: Avoid unaligned bus access for HyperFlash

Sean Young sean@mess.org media: ir_toy: prevent device from hanging during transmit

Lukas Wunner lukas@wunner.de PCI: pciehp: Ignore Link Down/Up caused by error-induced Hot Reset

Lukas Wunner lukas@wunner.de PCI/portdrv: Rename pm_iter() to pcie_port_device_iter()

Ville Syrjälä ville.syrjala@linux.intel.com drm/i915: Replace the unconditional clflush with drm_clflush_virt_range()

Thomas Hellström thomas.hellstrom@linux.intel.com drm/i915/gt: Register the migrate contexts with their engines

Matthew Brost matthew.brost@intel.com drm/i915: Disable bonding on gen12+ platforms

Filipe Manana fdmanana@suse.com btrfs: fix deadlock between chunk allocation and chunk btree modifications

Michel Dänzer mdaenzer@redhat.com dma-buf/poll: Get a file reference for outstanding fence callbacks

Hans de Goede hdegoede@redhat.com Input: goodix - try not to touch the reset-pin on x86/ACPI devices

Hans de Goede hdegoede@redhat.com Input: goodix - refactor reset handling

Hans de Goede hdegoede@redhat.com Input: goodix - add a goodix.h header file

Hans de Goede hdegoede@redhat.com Input: goodix - change goodix_i2c_write() len parameter type to int

Tang Bin tangbin@cmss.chinamobile.com Input: cpcap-pwrbutton - handle errors from platform_get_irq()

Filipe Manana fdmanana@suse.com btrfs: fix warning when freeing leaf after subvolume creation failure

Filipe Manana fdmanana@suse.com btrfs: fix invalid delayed ref after subvolume creation failure

Nikolay Borisov nborisov@suse.com btrfs: add additional parameters to btrfs_init_tree_ref/btrfs_init_data_ref

Nikolay Borisov nborisov@suse.com btrfs: rename btrfs_alloc_chunk to btrfs_create_chunk

Pablo Neira Ayuso pablo@netfilter.org netfilter: nf_tables: stricter validation of element data

Pablo Neira Ayuso pablo@netfilter.org netfilter: nft_set_pipapo: release elements in clone from abort path

Duoming Zhou duoming@zju.edu.cn net: rose: fix UAF bug caused by rose_t0timer_expiry

Oliver Neukum oneukum@suse.com usbnet: fix memory leak in error case

Daniel Borkmann daniel@iogearbox.net bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals

Daniel Borkmann daniel@iogearbox.net bpf: Fix incorrect verifier simulation around jmp32's jeq/jne

Thomas Kopp thomas.kopp@microchip.com can: mcp251xfd: mcp251xfd_regmap_crc_read(): update workaround broken CRC on TBC register

Thomas Kopp thomas.kopp@microchip.com can: mcp251xfd: mcp251xfd_regmap_crc_read(): improve workaround handling for mcp2517fd

Marc Kleine-Budde mkl@pengutronix.de can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits

Marc Kleine-Budde mkl@pengutronix.de can: m_can: m_can_chip_config(): actually enable internal timestamping

Rhett Aultman rhett.aultman@samsara.com can: gs_usb: gs_usb_open/close(): fix memory leak

Liang He windhl@126.com can: grcan: grcan_probe(): remove extra of_node_get()

Oliver Hartkopp socketcan@hartkopp.net can: bcm: use call_rcu() instead of costly synchronize_rcu()

Takashi Iwai tiwai@suse.de ALSA: cs46xx: Fix missing snd_card_free() call at probe error

Tim Crawford tcrawford@system76.com ALSA: hda/realtek: Add quirk for Clevo L140PU

Takashi Iwai tiwai@suse.de ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD

Po-Hsu Lin po-hsu.lin@canonical.com Revert "selftests/bpf: Add test for bpf_timer overwriting crash"

Liu Shixin liushixin2@huawei.com mm/filemap: fix UAF in find_lock_entries

Jann Horn jannh@google.com mm/slub: add missing TID updates on slab deactivation

-------------

Diffstat:

.../bindings/dma/allwinner,sun50i-a64-dma.yaml | 2 +- .../devicetree/bindings/soc/qcom/qcom,smd-rpm.yaml | 3 + MAINTAINERS | 3 +- Makefile | 19 +- arch/arm/boot/dts/at91-sam9x60ek.dts | 3 +- arch/arm/boot/dts/at91-sama5d2_icp.dts | 6 +- arch/arm/boot/dts/stm32mp151.dtsi | 4 +- arch/arm/configs/mxs_defconfig | 1 + arch/arm/include/asm/arch_gicv3.h | 7 +- arch/arm/mach-at91/pm.c | 10 +- arch/arm/mach-meson/platsmp.c | 2 + arch/arm64/boot/dts/freescale/imx8mp-evk.dts | 54 ++-- .../dts/freescale/imx8mp-phyboard-pollux-rdk.dts | 48 ++-- .../boot/dts/qcom/msm8992-bullhead-rev-101.dts | 2 +- arch/arm64/boot/dts/qcom/msm8992-xiaomi-libra.dts | 2 +- arch/arm64/boot/dts/qcom/msm8994.dtsi | 4 +- arch/arm64/boot/dts/qcom/sdm845.dtsi | 2 +- arch/arm64/include/asm/arch_gicv3.h | 6 - arch/arm64/net/bpf_jit_comp.c | 5 +- arch/powerpc/boot/crt0.S | 31 +-- arch/powerpc/crypto/md5-asm.S | 10 +- arch/powerpc/crypto/sha1-powerpc-asm.S | 6 +- arch/powerpc/include/asm/ppc_asm.h | 43 +-- arch/powerpc/kernel/entry_32.S | 23 +- arch/powerpc/kernel/exceptions-64e.S | 14 +- arch/powerpc/kernel/exceptions-64s.S | 6 +- arch/powerpc/kernel/head_32.h | 3 +- arch/powerpc/kernel/head_booke.h | 3 +- arch/powerpc/kernel/interrupt_64.S | 34 +-- arch/powerpc/kernel/optprobes_head.S | 4 +- arch/powerpc/kernel/tm.S | 38 +-- arch/powerpc/kernel/trace/ftrace_64_mprofile.S | 15 +- arch/powerpc/kvm/book3s_hv_rmhandlers.S | 5 +- arch/powerpc/kvm/book3s_hv_uvmem.c | 2 +- arch/powerpc/lib/test_emulate_step_exec_instr.S | 8 +- arch/powerpc/platforms/powernv/rng.c | 16 +- arch/riscv/configs/defconfig | 8 +- arch/riscv/configs/rv32_defconfig | 1 + arch/riscv/mm/init.c | 1 + arch/s390/boot/compressed/decompressor.h | 1 + arch/s390/boot/startup.c | 8 + arch/s390/kernel/entry.h | 1 + arch/s390/kernel/setup.c | 31 +-- arch/s390/kernel/vmlinux.lds.S | 1 + arch/s390/kvm/kvm-s390.c | 19 +- arch/s390/kvm/kvm-s390.h | 4 +- arch/s390/kvm/priv.c | 15 +- arch/x86/kernel/cpu/mce/core.c | 8 +- arch/x86/kvm/mmu/page_track.c | 4 +- arch/x86/kvm/mmu/tdp_mmu.c | 9 +- arch/x86/kvm/x86.c | 4 +- block/bio.c | 11 +- block/blk-iolatency.c | 2 +- block/blk-rq-qos.h | 23 +- drivers/base/core.c | 3 +- drivers/base/memory.c | 2 + drivers/base/power/runtime.c | 20 +- drivers/block/Kconfig | 1 + drivers/block/drbd/drbd_main.c | 8 +- drivers/block/virtio_blk.c | 158 +++++++---- drivers/bluetooth/btmtksdio.c | 3 +- drivers/bus/mhi/core/init.c | 9 +- drivers/bus/mhi/core/internal.h | 2 +- drivers/clk/renesas/r9a07g044-cpg.c | 4 +- drivers/cxl/core/bus.c | 4 + drivers/dma-buf/dma-buf.c | 19 +- drivers/dma/at_xdmac.c | 5 + drivers/dma/idxd/device.c | 5 +- drivers/dma/imx-sdma.c | 2 +- drivers/dma/lgm/lgm-dma.c | 3 +- drivers/dma/pl330.c | 2 +- drivers/dma/qcom/bam_dma.c | 39 +-- drivers/dma/ti/dma-crossbar.c | 5 + drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 25 ++ drivers/gpu/drm/amd/amdgpu/cik.c | 2 +- drivers/gpu/drm/amd/amdgpu/nv.c | 2 +- drivers/gpu/drm/amd/amdgpu/si.c | 2 +- drivers/gpu/drm/amd/amdgpu/soc15.c | 2 +- drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/vi.c | 17 +- .../gpu/drm/amd/display/dc/dcn30/dcn30_resource.c | 2 +- .../gpu/drm/amd/display/dc/dcn30/dcn30_resource.h | 7 + .../gpu/drm/amd/display/dc/dcn31/dcn31_resource.c | 65 ++++- .../drm/amd/pm/swsmu/smu11/sienna_cichlid_ppt.c | 2 +- drivers/gpu/drm/i915/gem/i915_gem_context.c | 7 + drivers/gpu/drm/i915/gem/i915_gem_object.c | 6 + drivers/gpu/drm/i915/gt/intel_context_types.h | 8 + drivers/gpu/drm/i915/gt/intel_engine_cs.c | 4 + drivers/gpu/drm/i915/gt/intel_engine_pm.c | 23 ++ drivers/gpu/drm/i915/gt/intel_engine_pm.h | 2 + drivers/gpu/drm/i915/gt/intel_engine_types.h | 7 + .../gpu/drm/i915/gt/intel_execlists_submission.c | 2 + drivers/gpu/drm/i915/gt/intel_ring_submission.c | 5 +- drivers/gpu/drm/i915/gt/mock_engine.c | 2 + drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c | 12 +- drivers/gpu/drm/mediatek/mtk_disp_drv.h | 16 +- drivers/gpu/drm/mediatek/mtk_disp_ovl.c | 22 +- drivers/gpu/drm/mediatek/mtk_disp_rdma.c | 20 +- drivers/gpu/drm/mediatek/mtk_drm_crtc.c | 133 +++++++-- drivers/gpu/drm/mediatek/mtk_drm_ddp_comp.c | 4 + drivers/gpu/drm/mediatek/mtk_drm_ddp_comp.h | 29 +- drivers/i2c/busses/i2c-cadence.c | 1 + drivers/i2c/busses/i2c-piix4.c | 16 +- drivers/iio/accel/mma8452.c | 4 +- drivers/input/misc/cpcap-pwrbutton.c | 6 +- drivers/input/touchscreen/goodix.c | 150 +++++----- drivers/input/touchscreen/goodix.h | 75 +++++ drivers/iommu/intel/dmar.c | 2 +- drivers/irqchip/irq-gic-v3.c | 42 ++- drivers/media/platform/davinci/vpif.c | 97 +++++-- drivers/media/platform/omap3isp/ispstat.c | 5 +- drivers/media/rc/ir_toy.c | 2 +- drivers/memory/renesas-rpc-if.c | 48 +++- drivers/misc/cardreader/rtsx_usb.c | 27 +- drivers/mtd/spi-nor/core.c | 3 +- drivers/net/can/grcan.c | 1 - drivers/net/can/m_can/m_can.c | 8 +- drivers/net/can/spi/mcp251xfd/mcp251xfd-regmap.c | 22 +- drivers/net/can/usb/gs_usb.c | 23 +- drivers/net/can/usb/kvaser_usb/kvaser_usb.h | 25 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 286 ++++++++++--------- drivers/net/can/usb/kvaser_usb/kvaser_usb_hydra.c | 4 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 119 ++++---- drivers/net/dsa/qca8k.c | 23 +- drivers/net/ethernet/ibm/ibmvnic.c | 147 +++++++++- drivers/net/ethernet/ibm/ibmvnic.h | 1 + drivers/net/ethernet/intel/i40e/i40e.h | 16 ++ drivers/net/ethernet/intel/i40e/i40e_main.c | 73 +++++ drivers/net/ethernet/intel/i40e/i40e_register.h | 13 + drivers/net/ethernet/intel/i40e/i40e_type.h | 1 + drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 4 + drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 88 +++--- drivers/net/ethernet/qlogic/qed/qed_l2.c | 23 +- drivers/net/ethernet/qlogic/qede/qede_filter.c | 47 ++-- drivers/net/ethernet/realtek/r8169_main.c | 10 +- drivers/net/usb/usbnet.c | 17 +- drivers/net/wireless/ath/ath11k/core.c | 5 + drivers/net/wireless/ath/ath11k/hw.h | 1 + drivers/net/wireless/ath/ath11k/pci.c | 12 +- .../net/wireless/mediatek/mt76/mt76_connac_mac.c | 3 - .../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 2 +- .../net/wireless/mediatek/mt76/mt7921/debugfs.c | 31 ++- drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 28 -- drivers/net/wireless/mediatek/mt76/mt7921/main.c | 33 +-- drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 47 ++-- drivers/net/wireless/mediatek/mt76/mt7921/mt7921.h | 11 +- drivers/pci/hotplug/pciehp.h | 2 + drivers/pci/hotplug/pciehp_core.c | 2 + drivers/pci/hotplug/pciehp_hpc.c | 26 ++ drivers/pci/pcie/portdrv.h | 3 + drivers/pci/pcie/portdrv_core.c | 20 +- drivers/pci/pcie/portdrv_pci.c | 3 + drivers/pinctrl/sunxi/pinctrl-sun8i-a83t.c | 10 +- drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 + drivers/platform/x86/wmi.c | 39 +-- drivers/scsi/qla2xxx/qla_def.h | 5 +- drivers/scsi/qla2xxx/qla_edif.c | 39 +-- drivers/scsi/qla2xxx/qla_edif.h | 1 - drivers/scsi/qla2xxx/qla_init.c | 2 + drivers/scsi/qla2xxx/qla_nvme.c | 27 +- drivers/scsi/qla2xxx/qla_os.c | 102 ++++--- drivers/soc/atmel/soc.c | 12 +- drivers/tty/n_gsm.c | 263 ++++++++++++++--- drivers/vdpa/mlx5/net/mlx5_vnet.c | 7 +- drivers/video/fbdev/core/fbcon.c | 33 +++ drivers/video/fbdev/core/fbmem.c | 16 +- fs/btrfs/block-group.c | 152 ++++++---- fs/btrfs/block-group.h | 2 + fs/btrfs/ctree.c | 17 +- fs/btrfs/ctree.h | 8 +- fs/btrfs/delayed-ref.h | 5 +- fs/btrfs/dev-replace.c | 16 +- fs/btrfs/disk-io.c | 1 + fs/btrfs/extent-tree.c | 28 +- fs/btrfs/extent_io.c | 8 +- fs/btrfs/file.c | 13 +- fs/btrfs/free-space-tree.c | 4 +- fs/btrfs/inode.c | 3 +- fs/btrfs/ioctl.c | 96 ++++--- fs/btrfs/qgroup.c | 3 +- fs/btrfs/relocation.c | 25 +- fs/btrfs/scrub.c | 6 +- fs/btrfs/tree-log.c | 2 +- fs/btrfs/volumes.c | 310 +++++++++++++-------- fs/btrfs/volumes.h | 28 +- fs/btrfs/zoned.c | 2 +- fs/btrfs/zoned.h | 17 ++ fs/gfs2/file.c | 1 + fs/io_uring.c | 10 +- fs/nfsd/nfs3proc.c | 6 - fs/nfsd/vfs.c | 64 +++-- fs/nfsd/vfs.h | 4 +- fs/seq_file.c | 32 +++ fs/xfs/xfs_inode.c | 1 - include/linux/blk_types.h | 3 +- include/linux/bpf.h | 6 + include/linux/compiler-gcc.h | 8 + include/linux/compiler_attributes.h | 10 + include/linux/compiler_types.h | 12 + include/linux/fbcon.h | 4 + include/linux/hugetlb.h | 6 + include/linux/list.h | 10 + include/linux/memregion.h | 2 +- include/linux/mm.h | 8 + include/linux/pm_runtime.h | 5 +- include/linux/qed/qed_eth_if.h | 21 +- include/linux/rtsx_usb.h | 2 - include/linux/seq_file.h | 4 + include/linux/stddef.h | 61 ++++ include/linux/vmalloc.h | 5 + include/net/netfilter/nf_tables.h | 10 +- include/net/netfilter/nf_tables_ipv4.h | 7 +- include/net/netfilter/nf_tables_ipv6.h | 6 +- include/uapi/linux/netfilter/nf_tables.h | 2 + include/uapi/linux/omap3isp.h | 21 +- include/uapi/linux/stddef.h | 41 +++ include/video/of_display_timing.h | 2 + kernel/bpf/core.c | 7 + kernel/bpf/verifier.c | 150 ++++------ kernel/module.c | 79 ++++-- lib/idr.c | 3 +- mm/filemap.c | 12 +- mm/hugetlb.c | 10 + mm/hwpoison-inject.c | 3 +- mm/madvise.c | 2 + mm/memory-failure.c | 205 ++++++++------ mm/slub.c | 2 + mm/util.c | 50 ++++ net/batman-adv/bridge_loop_avoidance.c | 2 +- net/bluetooth/hci_event.c | 12 + net/can/bcm.c | 18 +- net/netfilter/nf_tables_api.c | 9 +- net/netfilter/nf_tables_core.c | 2 +- net/netfilter/nf_tables_trace.c | 4 +- net/netfilter/nft_exthdr.c | 2 +- net/netfilter/nft_meta.c | 2 +- net/netfilter/nft_payload.c | 63 ++++- net/netfilter/nft_set_pipapo.c | 48 +++- net/rose/rose_route.c | 4 +- net/rxrpc/ar-internal.h | 2 +- net/rxrpc/call_accept.c | 6 +- net/rxrpc/call_object.c | 18 +- net/rxrpc/net_ns.c | 2 +- net/rxrpc/proc.c | 10 +- net/xdp/xsk_buff_pool.c | 1 + scripts/checkpatch.pl | 3 +- scripts/kernel-doc | 9 + sound/pci/cs46xx/cs46xx.c | 22 +- sound/pci/hda/patch_realtek.c | 1 + sound/soc/codecs/rt5682-i2c.c | 36 ++- sound/soc/codecs/rt5682.c | 125 ++++----- sound/soc/codecs/rt5682.h | 4 +- sound/soc/codecs/rt700.c | 16 +- sound/soc/codecs/rt711-sdca.c | 27 +- sound/soc/codecs/rt711.c | 25 +- sound/usb/mixer_maps.c | 16 ++ sound/usb/quirks.c | 4 + .../testing/selftests/bpf/prog_tests/timer_crash.c | 32 --- tools/testing/selftests/bpf/progs/timer_crash.c | 54 ---- tools/testing/selftests/net/forwarding/lib.sh | 6 +- tools/testing/selftests/net/udpgro.sh | 2 +- tools/testing/selftests/net/udpgro_bench.sh | 2 +- tools/testing/selftests/net/udpgro_fwd.sh | 2 +- tools/testing/selftests/net/veth.sh | 6 +- virt/kvm/kvm_main.c | 14 +- 266 files changed, 3772 insertions(+), 2018 deletions(-)