This is the start of the stable review cycle for the 5.4.220 release. There are 255 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 26 Oct 2022 11:29:24 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.220-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.4.220-rc1 Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> thermal: intel_powerclamp: Use first online CPU as control_cpu Eric Dumazet <edumazet@xxxxxxxxxx> inet: fully convert sk->sk_rx_dst to RCU rules Ard Biesheuvel <ardb@xxxxxxxxxx> efi: libstub: drop pointless get_memory_map() call Saurabh Sengar <ssengar@xxxxxxxxxxxxxxxxxxx> md: Replace snprintf with scnprintf Jerry Lee 李修賢 <jerrylee@xxxxxxxx> ext4: continue to expand file system when the target size doesn't reach Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> net/ieee802154: don't warn zero-sized raw_sendmsg() Alexander Aring <aahringo@xxxxxxxxxx> Revert "net/ieee802154: reject zero-sized raw_sendmsg()" Alexander Aring <aahringo@xxxxxxxxxx> net: ieee802154: return -EINVAL for unknown addr type Pavel Begunkov <asml.silence@xxxxxxxxx> io_uring/af_unix: defer registered files gc to io_uring release Adrian Hunter <adrian.hunter@xxxxxxxxx> perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc Maxime Ripard <maxime@xxxxxxxxxx> clk: bcm2835: Make peripheral PLLC critical Dongliang Mu <mudongliangabcd@xxxxxxxxx> usb: idmouse: fix an uninit-value in idmouse_open Varun Prakash <varun@xxxxxxxxxxx> nvmet-tcp: add bounds check on Transfer Tag Keith Busch <kbusch@xxxxxxxxxx> nvme: copy firmware_rev on each init Xiaoke Wang <xkernel.wang@xxxxxxxxxxx> staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() sunghwan jung <onenowy@xxxxxxxxx> Revert "usb: storage: Add quirk for Samsung Fit flash" Robin Guo <guoweibin@xxxxxxxxxx> usb: musb: Fix musb_gadget.c rxstate overflow bug Jianglei Nie <niejianglei2021@xxxxxxx> usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() Logan Gunthorpe <logang@xxxxxxxxxxxx> md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d Hyunwoo Kim <imv4bel@xxxxxxxxx> HID: roccat: Fix use-after-free in roccat_read() Coly Li <colyli@xxxxxxx> bcache: fix set_at_max_writeback_rate() for multiple attached devices Serge Semin <Sergey.Semin@xxxxxxxxxxxxxxxxxxxx> ata: libahci_platform: Sanity check the DT child nodes number Nam Cao <namcaov@xxxxxxxxx> staging: vt6655: fix potential memory leak Wei Yongjun <weiyongjun1@xxxxxxxxxx> power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() Shigeru Yoshida <syoshida@xxxxxxxxxx> nbd: Fix hung when signal interrupts nbd_start_device_ioctl() Letu Ren <fantasquex@xxxxxxxxx> scsi: 3w-9xxx: Avoid disabling device if failing to enable it Quanyang Wang <quanyang.wang@xxxxxxxxxxxxx> clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate Zheyu Ma <zheyuma97@xxxxxxxxx> media: cx88: Fix a null-ptr-deref bug in buffer_prepare() Ian Nam <young.kwan.nam@xxxxxxxxxx> clk: zynqmp: Fix stack-out-of-bounds in strncpy` Qu Wenruo <wqu@xxxxxxxx> btrfs: scrub: try to fix super block errors Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> ARM: dts: imx6sx: add missing properties for sram Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> ARM: dts: imx6sll: add missing properties for sram Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> ARM: dts: imx6sl: add missing properties for sram Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> ARM: dts: imx6qp: add missing properties for sram Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> ARM: dts: imx6dl: add missing properties for sram Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> ARM: dts: imx6q: add missing properties for sram Haibo Chen <haibo.chen@xxxxxxx> ARM: dts: imx7d-sdb: config the max pressure for tsc2046 Richard Acayan <mailingradian@xxxxxxxxx> mmc: sdhci-msm: add compatible string check for sdm670 hongao <hongao@xxxxxxxxxxxxx> drm/amdgpu: fix initial connector audio value Hans de Goede <hdegoede@xxxxxxxxxx> platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading Maya Matuszczyk <maccraft123mc@xxxxxxxxx> drm: panel-orientation-quirks: Add quirk for Anbernic Win600 Mateusz Kwiatkowski <kfyatek+publicgit@xxxxxxxxx> drm/vc4: vec: Fix timings for VEC modes David Gow <davidgow@xxxxxxxxxx> drm/amd/display: fix overflow on MIN_I64 definition Javier Martinez Canillas <javierm@xxxxxxxxxx> drm: Prevent drm_copy_field() to attempt copying a NULL pointer Javier Martinez Canillas <javierm@xxxxxxxxxx> drm: Use size_t type for len variable in drm_copy_field() Jianglei Nie <niejianglei2021@xxxxxxx> drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() Andrew Gaul <gaul@xxxxxxxx> r8152: Rate limit overflow messages Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: L2CAP: Fix user-after-free Liu Jian <liujian56@xxxxxxxxxx> net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory Daniel Golle <daniel@xxxxxxxxxxxxxx> wifi: rt2x00: correctly set BBP register 86 for MT7620 Daniel Golle <daniel@xxxxxxxxxxxxxx> wifi: rt2x00: set SoC wmac clock register Daniel Golle <daniel@xxxxxxxxxxxxxx> wifi: rt2x00: set VGC gain for both chains of MT7620 Daniel Golle <daniel@xxxxxxxxxxxxxx> wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 Daniel Golle <daniel@xxxxxxxxxxxxxx> wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 Ziyang Xuan <william.xuanziyang@xxxxxxxxxx> can: bcm: check the result of can_send() in bcm_can_tx() Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() Alexander Coffin <alex.coffin@xxxxxxxxxxxx> wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() Khalid Masum <khalid.masum.92@xxxxxxxxx> xfrm: Update ipcomp_scratches with NULL when freed Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() Eric Dumazet <edumazet@xxxxxxxxxx> tcp: annotate data-race around tcp_md5sig_pool_populated Mike Pattrick <mkp@xxxxxxxxxx> openvswitch: Fix overreporting of drops in dropwatch Mike Pattrick <mkp@xxxxxxxxxx> openvswitch: Fix double reporting of drops in dropwatch Quentin Monnet <quentin@xxxxxxxxxxxxx> bpftool: Clear errno after libcap's checks Wright Feng <wright.feng@xxxxxxxxxxx> wifi: brcmfmac: fix invalid address access when enabling SCAN log level Anna Schumaker <Anna.Schumaker@xxxxxxxxxx> NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data Kees Cook <keescook@xxxxxxxxxxxx> x86/entry: Work around Clang __bdos() bug Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx> thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash Chao Qin <chao.qin@xxxxxxxxx> powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue Kees Cook <keescook@xxxxxxxxxxxx> MIPS: BCM47XX: Cast memcmp() of function to (void *) Arvid Norlander <lkml@xxxxxxxxx> ACPI: video: Add Toshiba Satellite/Portege Z830 quirk Zhang Qilong <zhangqilong3@xxxxxxxxxx> f2fs: fix race condition on setting FI_NO_EXTENT flag Dan Carpenter <dan.carpenter@xxxxxxxxxx> crypto: cavium - prevent integer overflow loading firmware Masahiro Yamada <masahiroy@xxxxxxxxxx> kbuild: remove the target in signal traps when interrupted Robin Murphy <robin.murphy@xxxxxxx> iommu/iova: Fix module config properly Koba Ko <koba.ko@xxxxxxxxxxxxx> crypto: ccp - Release dma channels before dmaengine unrgister Ignat Korchagin <ignat@xxxxxxxxxxxxxx> crypto: akcipher - default implementation for setting a private key Dan Carpenter <dan.carpenter@xxxxxxxxxx> iommu/omap: Fix buffer overflow in debugfs Waiman Long <longman@xxxxxxxxxx> cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset Pali Rohár <pali@xxxxxxxxxx> powerpc: Fix SPE Power ISA properties for e500v1 platforms Nicholas Piggin <npiggin@xxxxxxxxx> powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 Vitaly Kuznetsov <vkuznets@xxxxxxxxxx> x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition Zheng Yongjun <zhengyongjun3@xxxxxxxxxx> powerpc/powernv: add missing of_node_put() in opal_export_attrs() Liang He <windhl@xxxxxxx> powerpc/pci_dn: Add missing of_node_put() Liang He <windhl@xxxxxxx> powerpc/sysdev/fsl_msi: Add missing of_node_put() Nathan Chancellor <nathan@xxxxxxxxxx> powerpc/math_emu/efp: Include module.h Jack Wang <jinpu.wang@xxxxxxxxx> mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg Joel Stanley <joel@xxxxxxxxx> clk: ast2600: BCLK comes from EPLL Miaoqian Lin <linmq006@xxxxxxxxx> clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe Stefan Wahren <stefan.wahren@xxxxxxxx> clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration David Collins <collinsd@xxxxxxxxxxxxxx> spmi: pmic-arb: correct duplicate APID to PPID mapping logic Dave Jiang <dave.jiang@xxxxxxxxx> dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() Chen-Yu Tsai <wenst@xxxxxxxxxxxx> clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent Jiasheng Jiang <jiasheng@xxxxxxxxxxx> mfd: sm501: Add check for platform_driver_register() Dan Carpenter <dan.carpenter@xxxxxxxxxx> mfd: fsl-imx25: Fix check for platform_get_irq() errors Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> mfd: lp8788: Fix an error handling path in lp8788_probe() Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() Jiasheng Jiang <jiasheng@xxxxxxxxxxx> fsi: core: Check error number after calling ida_simple_get Duoming Zhou <duoming@xxxxxxxxxx> scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() Pali Rohár <pali@xxxxxxxxxx> serial: 8250: Fix restoring termios speed after suspend Guilherme G. Piccoli <gpiccoli@xxxxxxxxxx> firmware: google: Test spinlock on panic path to avoid lockups Nam Cao <namcaov@xxxxxxxxx> staging: vt6655: fix some erroneous memory clean-up loops Dongliang Mu <mudongliangabcd@xxxxxxxxx> phy: qualcomm: call clk_disable_unprepare in the error handling Sherry Sun <sherry.sun@xxxxxxx> tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown Dan Carpenter <dan.carpenter@xxxxxxxxxx> drivers: serial: jsm: fix some leaks in probe Albert Briscoe <albertsbriscoe@xxxxxxxxx> usb: gadget: function: fix dangling pnp_string in f_printer.c Mario Limonciello <mario.limonciello@xxxxxxx> xhci: Don't show warning for reinit on known broken suspend Logan Gunthorpe <logang@xxxxxxxxxxxx> md/raid5: Ensure stripe_fill happens on non-read IO with journal Dan Carpenter <dan.carpenter@xxxxxxxxxx> mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() Niklas Cassel <niklas.cassel@xxxxxxx> ata: fix ata_id_has_dipm() Niklas Cassel <niklas.cassel@xxxxxxx> ata: fix ata_id_has_ncq_autosense() Niklas Cassel <niklas.cassel@xxxxxxx> ata: fix ata_id_has_devslp() Niklas Cassel <niklas.cassel@xxxxxxx> ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() Bernard Metzler <bmt@xxxxxxxxxxxxxx> RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. William Dean <williamsukatube@xxxxxxxxx> mtd: devices: docg3: check the return value of devm_ioremap() in the probe Jim Cromie <jim.cromie@xxxxxxxxx> dyndbg: let query-modname override actual module name Jim Cromie <jim.cromie@xxxxxxxxx> dyndbg: fix module.dyndbg handling Hangyu Hua <hbh25y@xxxxxxxxx> misc: ocxl: fix possible refcount leak in afu_ioctl() Zhu Yanjun <yanjun.zhu@xxxxxxxxx> RDMA/rxe: Fix the error caused by qp->sk Zhu Yanjun <yanjun.zhu@xxxxxxxxx> RDMA/rxe: Fix "kernel NULL pointer dereference" error Miaoqian Lin <linmq006@xxxxxxxxx> media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init Shubhrajyoti Datta <shubhrajyoti.datta@xxxxxxxxxx> tty: xilinx_uartps: Fix the ignore_status Liang He <windhl@xxxxxxx> media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop Jack Wang <jinpu.wang@xxxxxxxxx> HSI: omap_ssi_port: Fix dma_map_sg error check Miaoqian Lin <linmq006@xxxxxxxxx> HSI: omap_ssi: Fix refcount leak in ssi_probe Miaoqian Lin <linmq006@xxxxxxxxx> clk: tegra20: Fix refcount leak in tegra20_clock_init Miaoqian Lin <linmq006@xxxxxxxxx> clk: tegra: Fix refcount leak in tegra114_clock_init Miaoqian Lin <linmq006@xxxxxxxxx> clk: tegra: Fix refcount leak in tegra210_clock_init Liang He <windhl@xxxxxxx> clk: berlin: Add of_node_put() for of_get_parent() Liang He <windhl@xxxxxxx> clk: oxnas: Hold reference returned by of_get_parent() Liang He <windhl@xxxxxxx> clk: meson: Hold reference returned by of_get_parent() Jonathan Cameron <Jonathan.Cameron@xxxxxxxxxx> iio: ABI: Fix wrong format of differential capacitance channel ABI. Nuno Sá <nuno.sa@xxxxxxxxxx> iio: inkern: only release the device node when done with it Claudiu Beznea <claudiu.beznea@xxxxxxxxxxxxx> iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq Claudiu Beznea <claudiu.beznea@xxxxxxxxxxxxx> iio: adc: at91-sama5d2_adc: check return status for pressure and touch Claudiu Beznea <claudiu.beznea@xxxxxxxxxxxxx> iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> ARM: dts: exynos: fix polarity of VBUS GPIO of Origen Geert Uytterhoeven <geert+renesas@xxxxxxxxx> ARM: Drop CMDLINE_* dependency on ATAGS Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family Michael Walle <michael@xxxxxxxx> ARM: dts: kirkwood: lsxl: remove first ethernet port Michael Walle <michael@xxxxxxxx> ARM: dts: kirkwood: lsxl: fix serial line Marek Behún <kabel@xxxxxxxxxx> ARM: dts: turris-omnia: Fix mpp26 pin name and comment Liang He <windhl@xxxxxxx> soc: qcom: smem_state: Add refcounting for the 'state->of_node' Liang He <windhl@xxxxxxx> soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() Liang He <windhl@xxxxxxx> memory: of: Fix refcount leak bug in of_get_ddr_timings() Liang He <windhl@xxxxxxx> memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() Takashi Iwai <tiwai@xxxxxxx> ALSA: hda/hdmi: Don't skip notification handling during PM operation Zhang Qilong <zhangqilong3@xxxxxxxxxx> ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe Zhang Qilong <zhangqilong3@xxxxxxxxxx> ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe Zhang Qilong <zhangqilong3@xxxxxxxxxx> ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() Andreas Pape <apape@xxxxxxxxxxxxxx> ALSA: dmaengine: increment buffer pointer atomically Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxx> drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx Liang He <windhl@xxxxxxx> ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() Liang He <windhl@xxxxxxx> drm/omap: dss: Fix refcount leak bugs Takashi Iwai <tiwai@xxxxxxx> ALSA: hda: beep: Simplify keep-power-at-enable behavior Jiasheng Jiang <jiasheng@xxxxxxxxxxx> ASoC: rsnd: Add check for rsnd_mod_power_on Zheyu Ma <zheyuma97@xxxxxxxxx> drm/bridge: megachips: Fix a null pointer dereference bug Randy Dunlap <rdunlap@xxxxxxxxxxxxx> drm: fix drm_mipi_dbi build errors Hans de Goede <hdegoede@xxxxxxxxxx> platform/x86: msi-laptop: Fix resource cleanup Hans de Goede <hdegoede@xxxxxxxxxx> platform/x86: msi-laptop: Fix old-ec check for backlight registering Dan Carpenter <dan.carpenter@xxxxxxxxxx> platform/chrome: fix memory corruption in ioctl Rustam Subkhankulov <subkhankulov@xxxxxxxxx> platform/chrome: fix double-free in chromeos_laptop_prepare() Maxime Ripard <maxime@xxxxxxxxxx> drm/mipi-dsi: Detach devices when removing the host Alvin Šipraga <alsi@xxxxxxxxxxxxxxx> drm: bridge: adv7511: fix CEC power down control register offset Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx> net: mvpp2: fix mvpp2 debugfs leak Eric Dumazet <edumazet@xxxxxxxxxx> once: add DO_ONCE_SLOW() for sleepable contexts Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> net/ieee802154: reject zero-sized raw_sendmsg() Jianglei Nie <niejianglei2021@xxxxxxx> bnx2x: fix potential memory leak in bnx2x_tpa_stop() Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() Neal Cardwell <ncardwell@xxxxxxxxxx> tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited Xin Long <lucien.xin@xxxxxxxxx> sctp: handle the error returned from sctp_auth_asoc_init_active_key Duoming Zhou <duoming@xxxxxxxxxx> mISDN: fix use-after-free bugs in l1oip timer handlers Junichi Uekawa <uekawa@xxxxxxxxxxxx> vhost/vsock: Use kvmalloc/kvfree for larger packets. Vincent Whitchurch <vincent.whitchurch@xxxxxxxx> spi: s3c64xx: Fix large transfers with DMA Phil Sutter <phil@xxxxxx> netfilter: nft_fib: Fix for rpath check with VRF devices Zhang Qilong <zhangqilong3@xxxxxxxxxx> spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe Kees Cook <keescook@xxxxxxxxxxxx> x86/microcode/AMD: Track patch allocation size explicitly Lee Jones <lee@xxxxxxxxxx> bpf: Ensure correct locking around vulnerable function find_vpid() Zheng Yongjun <zhengyongjun3@xxxxxxxxxx> net: fs_enet: Fix wrong check in do_pd_setup Bitterblue Smith <rtl8821cerfe2@xxxxxxxxx> wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration Lorenz Bauer <oss@xxxxxx> bpf: btf: fix truncated last_member_type_id in btf_struct_resolve Bitterblue Smith <rtl8821cerfe2@xxxxxxxxx> wifi: rtl8xxxu: Fix skb misuse in TX queue selection Xu Qiang <xuqiang36@xxxxxxxxxx> spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() Xu Qiang <xuqiang36@xxxxxxxxxx> spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() Dan Carpenter <dan.carpenter@xxxxxxxxxx> wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() Kohei Tarumizu <tarumizu.kohei@xxxxxxxxxxx> x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register Lam Thai <lamthai@xxxxxxxxxx> bpftool: Fix a wrong type cast in btf_dumper_int Hari Chandrakanthan <quic_haric@xxxxxxxxxxx> wifi: mac80211: allow bw change during channel switch in mesh Wen Gong <quic_wgong@xxxxxxxxxxx> wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> nfsd: Fix a memory leak in an error handling path Wang Kefeng <wangkefeng.wang@xxxxxxxxxx> ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE Kees Cook <keescook@xxxxxxxxxxxx> sh: machvec: Use char[] for section boundaries Ondrej Mosnacek <omosnace@xxxxxxxxxx> userfaultfd: open userfaultfds with O_RDONLY Waiman Long <longman@xxxxxxxxxx> tracing: Disable interrupt or preemption before acquiring arch_spinlock_t Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> selinux: use "grep -E" instead of "egrep" Jianglei Nie <niejianglei2021@xxxxxxx> drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() Martin Liska <mliska@xxxxxxx> gcov: support GCC 12.1 and newer compilers Sean Christopherson <seanjc@xxxxxxxxxx> KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS Sean Christopherson <seanjc@xxxxxxxxxx> KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" Michal Luczaj <mhal@xxxxxxx> KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility Dmitry Osipenko <dmitry.osipenko@xxxxxxxxxxxxx> media: cedrus: Set the platform driver data earlier Steven Rostedt (Google) <rostedt@xxxxxxxxxxx> ring-buffer: Fix race between reset page and reading page Steven Rostedt (Google) <rostedt@xxxxxxxxxxx> ring-buffer: Check pending waiters when doing wake ups as well Steven Rostedt (Google) <rostedt@xxxxxxxxxxx> ring-buffer: Have the shortest_full queue be the shortest not longest Steven Rostedt (Google) <rostedt@xxxxxxxxxxx> ring-buffer: Allow splice to read previous partially read pages Zheng Yejian <zhengyejian1@xxxxxxxxxx> ftrace: Properly unset FTRACE_HASH_FL_MOD Rik van Riel <riel@xxxxxxxxxxx> livepatch: fix race between fork and KLP transition Jinke Han <hanjinke.666@xxxxxxxxxxxxx> ext4: place buffer head allocation before handle start Lalith Rajendran <lalithkraj@xxxxxxxxxx> ext4: make ext4_lazyinit_thread freezable Baokun Li <libaokun1@xxxxxxxxxx> ext4: fix null-ptr-deref in ext4_write_info Jan Kara <jack@xxxxxxx> ext4: avoid crash when inline data creation follows DIO write Andrew Perepechko <anserper@xxxxx> jbd2: wake up journal waiters in FIFO order, not LIFO Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: fix use-after-free bug of struct nilfs_root Chao Yu <chao@xxxxxxxxxx> f2fs: fix to do sanity check on summary info Chao Yu <chao@xxxxxxxxxx> f2fs: fix to do sanity check on destination blkaddr during recovery Jaegeuk Kim <jaegeuk@xxxxxxxxxx> f2fs: increase the limit for reserve_root Filipe Manana <fdmanana@xxxxxxxx> btrfs: fix race between quota enable and quota rescan ioctl Hyunwoo Kim <imv4bel@xxxxxxxxx> fbdev: smscufx: Fix use-after-free in ufx_ops_open() Pali Rohár <pali@xxxxxxxxxx> powerpc/boot: Explicitly disable usage of SPE instructions Maciej W. Rozycki <macro@xxxxxxxxxxx> PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge Huacai Chen <chenhuacai@xxxxxxxxxxx> UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK Fangrui Song <maskray@xxxxxxxxxx> riscv: Pass -mno-relax only on lld < 15.0.0 Andrew Bresticker <abrestic@xxxxxxxxxxxx> riscv: Allow PROT_WRITE-only mmap() Helge Deller <deller@xxxxxx> parisc: fbdev/stifb: Align graphics memory size to 4MB Maciej W. Rozycki <macro@xxxxxxxxxxx> RISC-V: Make port I/O string accessors actually work Linus Walleij <linus.walleij@xxxxxxxxxx> regulator: qcom_rpm: Fix circular deferral regression Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> ASoC: wcd9335: fix order of Slimbus unprepare/disable Zhihao Cheng <chengzhihao1@xxxxxxxxxx> quota: Check next/prev free block number after reading from quota file Andri Yngvason <andri@xxxxxxxxxxx> HID: multitouch: Add memory barriers Alexander Aring <aahringo@xxxxxxxxxx> fs: dlm: handle -EBUSY first in lock arg validation Alexander Aring <aahringo@xxxxxxxxxx> fs: dlm: fix race between test_bit() and queue_work() Wenchao Chen <wenchao.chen@xxxxxxxxxx> mmc: sdhci-sprd: Fix minimum clock limit Anssi Hannula <anssi.hannula@xxxxxxxxxx> can: kvaser_usb_leaf: Fix CAN state after restart Anssi Hannula <anssi.hannula@xxxxxxxxxx> can: kvaser_usb_leaf: Fix TX queue out of sync after restart Anssi Hannula <anssi.hannula@xxxxxxxxxx> can: kvaser_usb_leaf: Fix overread with an invalid command Anssi Hannula <anssi.hannula@xxxxxxxxxx> can: kvaser_usb: Fix use of uninitialized completion Jean-Francois Le Fillatre <jflf_kernel@xxxxxxx> usb: add quirks for Lenovo OneLink+ Dock Eddie James <eajames@xxxxxxxxxxxxx> iio: pressure: dps310: Reset chip after timeout Eddie James <eajames@xxxxxxxxxxxxx> iio: pressure: dps310: Refactor startup procedure Michael Hennerich <michael.hennerich@xxxxxxxxxx> iio: dac: ad5593r: Fix i2c read protocol requirements Zhang Xiaoxu <zhangxiaoxu5@xxxxxxxxxx> cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message Ronnie Sahlberg <lsahlber@xxxxxxxxxx> cifs: destage dirty pages before re-reading them for cache=none Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> mtd: rawnand: atmel: Unmap streaming DMA mappings Saranya Gopal <saranya.gopal@xxxxxxxxx> ALSA: hda/realtek: Add Intel Reference SSID to support headset keys Luke D. Jones <luke@xxxxxxxxxx> ALSA: hda/realtek: Add quirk for ASUS GV601R laptop Luke D. Jones <luke@xxxxxxxxxx> ALSA: hda/realtek: Correct pin configs for ASUS G533Z Callum Osmotherly <callum.osmotherly@xxxxxxxxx> ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Fix NULL dererence at error path Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Fix potential memory leaks Takashi Iwai <tiwai@xxxxxxx> ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() Takashi Iwai <tiwai@xxxxxxx> ALSA: oss: Fix potential deadlock at unregistration ------------- Diffstat: Documentation/ABI/testing/sysfs-bus-iio | 2 +- Makefile | 4 +- arch/arm/Kconfig | 1 - arch/arm/boot/dts/armada-385-turris-omnia.dts | 4 +- arch/arm/boot/dts/exynos4412-midas.dtsi | 2 +- arch/arm/boot/dts/exynos4412-origen.dts | 2 +- arch/arm/boot/dts/imx6dl.dtsi | 3 + arch/arm/boot/dts/imx6q.dtsi | 3 + arch/arm/boot/dts/imx6qp.dtsi | 6 + arch/arm/boot/dts/imx6sl.dtsi | 3 + arch/arm/boot/dts/imx6sll.dtsi | 3 + arch/arm/boot/dts/imx6sx.dtsi | 6 + arch/arm/boot/dts/imx7d-sdb.dts | 7 +- arch/arm/boot/dts/kirkwood-lsxl.dtsi | 16 +- arch/arm/mm/mmu.c | 4 + arch/mips/bcm47xx/prom.c | 4 +- arch/powerpc/Makefile | 2 +- arch/powerpc/boot/Makefile | 1 + arch/powerpc/boot/dts/fsl/e500v1_power_isa.dtsi | 51 ++++ arch/powerpc/boot/dts/fsl/mpc8540ads.dts | 2 +- arch/powerpc/boot/dts/fsl/mpc8541cds.dts | 2 +- arch/powerpc/boot/dts/fsl/mpc8555cds.dts | 2 +- arch/powerpc/boot/dts/fsl/mpc8560ads.dts | 2 +- arch/powerpc/kernel/pci_dn.c | 1 + arch/powerpc/math-emu/math_efp.c | 1 + arch/powerpc/platforms/powernv/opal.c | 1 + arch/powerpc/sysdev/fsl_msi.c | 2 + arch/riscv/Makefile | 2 + arch/riscv/include/asm/io.h | 16 +- arch/riscv/kernel/sys_riscv.c | 3 - arch/sh/include/asm/sections.h | 2 +- arch/sh/kernel/machvec.c | 10 +- arch/um/kernel/um_arch.c | 2 +- arch/x86/include/asm/hyperv-tlfs.h | 4 +- arch/x86/include/asm/microcode.h | 1 + arch/x86/kernel/cpu/microcode/amd.c | 3 +- arch/x86/kernel/cpu/resctrl/pseudo_lock.c | 12 +- arch/x86/kvm/emulate.c | 2 +- arch/x86/kvm/vmx/nested.c | 30 ++- arch/x86/kvm/vmx/vmx.c | 12 +- arch/x86/xen/enlighten_pv.c | 3 +- crypto/akcipher.c | 8 + drivers/acpi/acpi_video.c | 16 ++ drivers/ata/libahci_platform.c | 14 +- drivers/block/nbd.c | 6 +- drivers/clk/bcm/clk-bcm2835.c | 8 +- drivers/clk/berlin/bg2.c | 5 +- drivers/clk/berlin/bg2q.c | 6 +- drivers/clk/clk-ast2600.c | 2 +- drivers/clk/clk-oxnas.c | 6 +- drivers/clk/mediatek/clk-mt8183-mfgcfg.c | 6 +- drivers/clk/meson/meson-aoclk.c | 5 +- drivers/clk/meson/meson-eeclk.c | 5 +- drivers/clk/meson/meson8b.c | 5 +- drivers/clk/tegra/clk-tegra114.c | 1 + drivers/clk/tegra/clk-tegra20.c | 1 + drivers/clk/tegra/clk-tegra210.c | 1 + drivers/clk/ti/clk-dra7-atl.c | 9 +- drivers/clk/zynqmp/clkc.c | 7 + drivers/clk/zynqmp/pll.c | 31 ++- drivers/crypto/cavium/cpt/cptpf_main.c | 6 +- drivers/crypto/ccp/ccp-dmaengine.c | 6 +- drivers/dma/ioat/dma.c | 6 +- drivers/firmware/efi/libstub/fdt.c | 8 - drivers/firmware/google/gsmi.c | 9 + drivers/fsi/fsi-core.c | 3 + drivers/gpu/drm/Kconfig | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 7 +- drivers/gpu/drm/amd/display/dc/calcs/bw_fixed.c | 6 +- drivers/gpu/drm/bridge/adv7511/adv7511.h | 5 +- drivers/gpu/drm/bridge/adv7511/adv7511_cec.c | 4 +- .../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 4 +- drivers/gpu/drm/drm_ioctl.c | 8 +- drivers/gpu/drm/drm_mipi_dsi.c | 1 + drivers/gpu/drm/drm_panel_orientation_quirks.c | 6 + drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 12 +- drivers/gpu/drm/msm/disp/dpu1/dpu_vbif.c | 29 +-- drivers/gpu/drm/nouveau/nouveau_bo.c | 4 +- drivers/gpu/drm/nouveau/nouveau_prime.c | 1 - drivers/gpu/drm/omapdrm/dss/dss.c | 3 + drivers/gpu/drm/vc4/vc4_vec.c | 4 +- drivers/hid/hid-multitouch.c | 8 +- drivers/hid/hid-roccat.c | 4 + drivers/hsi/controllers/omap_ssi_core.c | 1 + drivers/hsi/controllers/omap_ssi_port.c | 8 +- drivers/iio/adc/at91-sama5d2_adc.c | 14 +- drivers/iio/dac/ad5593r.c | 46 ++-- drivers/iio/inkern.c | 6 +- drivers/iio/pressure/dps310.c | 262 +++++++++++++-------- drivers/infiniband/sw/rxe/rxe_qp.c | 10 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 27 ++- drivers/iommu/omap-iommu-debug.c | 6 +- drivers/isdn/mISDN/l1oip.h | 1 + drivers/isdn/mISDN/l1oip_core.c | 13 +- drivers/mailbox/bcm-flexrm-mailbox.c | 8 +- drivers/md/bcache/writeback.c | 73 ++++-- drivers/md/raid0.c | 4 +- drivers/md/raid5.c | 14 +- drivers/media/pci/cx88/cx88-vbi.c | 9 +- drivers/media/pci/cx88/cx88-video.c | 43 ++-- drivers/media/platform/exynos4-is/fimc-is.c | 1 + drivers/media/platform/xilinx/xilinx-vipp.c | 9 +- drivers/memory/of_memory.c | 1 + drivers/memory/pl353-smc.c | 1 + drivers/mfd/fsl-imx25-tsadc.c | 34 ++- drivers/mfd/intel_soc_pmic_core.c | 1 + drivers/mfd/lp8788-irq.c | 3 + drivers/mfd/lp8788.c | 12 +- drivers/mfd/sm501.c | 7 +- drivers/misc/ocxl/file.c | 2 + drivers/mmc/host/au1xmmc.c | 3 +- drivers/mmc/host/sdhci-msm.c | 1 + drivers/mmc/host/sdhci-sprd.c | 2 +- drivers/mmc/host/wmt-sdmmc.c | 5 +- drivers/mtd/devices/docg3.c | 7 +- drivers/mtd/nand/raw/atmel/nand-controller.c | 1 + drivers/mtd/nand/raw/meson_nand.c | 4 +- drivers/net/can/usb/kvaser_usb/kvaser_usb.h | 2 + drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 3 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_hydra.c | 2 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 79 +++++++ drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 1 + drivers/net/ethernet/freescale/fs_enet/mac-fec.c | 2 +- drivers/net/ethernet/marvell/mvpp2/mvpp2.h | 1 + drivers/net/ethernet/marvell/mvpp2/mvpp2_debugfs.c | 10 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 13 +- drivers/net/usb/r8152.c | 4 +- drivers/net/wireless/ath/ath10k/mac.c | 54 +++-- drivers/net/wireless/ath/ath9k/htc_hst.c | 43 ++-- .../wireless/broadcom/brcm80211/brcmfmac/core.c | 3 +- .../net/wireless/broadcom/brcm80211/brcmfmac/pno.c | 12 +- drivers/net/wireless/ralink/rt2x00/rt2800lib.c | 34 ++- .../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 21 +- drivers/nvme/host/core.c | 3 +- drivers/nvme/target/tcp.c | 11 +- drivers/pci/setup-res.c | 11 + drivers/phy/qualcomm/phy-qcom-usb-hsic.c | 6 +- drivers/platform/chrome/chromeos_laptop.c | 24 +- drivers/platform/chrome/cros_ec_chardev.c | 3 + drivers/platform/x86/msi-laptop.c | 14 +- drivers/power/supply/adp5061.c | 6 +- drivers/powercap/intel_rapl_common.c | 3 + drivers/regulator/qcom_rpm-regulator.c | 24 +- drivers/scsi/3w-9xxx.c | 2 +- drivers/scsi/libsas/sas_expander.c | 2 +- drivers/soc/qcom/smem_state.c | 3 +- drivers/soc/qcom/smsm.c | 20 +- drivers/spi/spi-omap-100k.c | 1 + drivers/spi/spi-qup.c | 21 +- drivers/spi/spi-s3c64xx.c | 9 + drivers/spmi/spmi-pmic-arb.c | 13 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +- drivers/staging/rtl8723bs/core/rtw_cmd.c | 16 +- drivers/staging/vt6655/device_main.c | 8 +- drivers/thermal/intel/intel_powerclamp.c | 4 +- drivers/tty/serial/8250/8250_port.c | 7 +- drivers/tty/serial/fsl_lpuart.c | 2 + drivers/tty/serial/jsm/jsm_driver.c | 3 +- drivers/tty/serial/xilinx_uartps.c | 2 + drivers/usb/core/quirks.c | 4 + drivers/usb/gadget/function/f_printer.c | 12 +- drivers/usb/host/xhci-mem.c | 7 +- drivers/usb/host/xhci.c | 3 +- drivers/usb/misc/idmouse.c | 8 +- drivers/usb/musb/musb_gadget.c | 3 + drivers/usb/storage/unusual_devs.h | 6 - drivers/vhost/vsock.c | 2 +- drivers/video/fbdev/smscufx.c | 14 +- drivers/video/fbdev/stifb.c | 2 +- fs/btrfs/qgroup.c | 15 ++ fs/btrfs/scrub.c | 36 +++ fs/cifs/file.c | 9 + fs/cifs/smb2pdu.c | 4 +- fs/dlm/ast.c | 6 +- fs/dlm/lock.c | 16 +- fs/ext4/file.c | 6 + fs/ext4/inode.c | 7 + fs/ext4/resize.c | 2 +- fs/ext4/super.c | 3 +- fs/f2fs/checkpoint.c | 10 +- fs/f2fs/extent_cache.c | 3 +- fs/f2fs/f2fs.h | 4 + fs/f2fs/gc.c | 10 +- fs/f2fs/recovery.c | 23 +- fs/f2fs/super.c | 4 +- fs/io_uring.c | 1 + fs/jbd2/commit.c | 2 +- fs/jbd2/transaction.c | 6 +- fs/nfsd/nfs4recover.c | 4 +- fs/nfsd/nfs4xdr.c | 2 +- fs/nilfs2/inode.c | 18 +- fs/quota/quota_tree.c | 38 +++ fs/userfaultfd.c | 4 +- include/linux/ata.h | 39 +-- include/linux/dynamic_debug.h | 2 +- include/linux/iova.h | 2 +- include/linux/once.h | 28 +++ include/linux/skbuff.h | 2 + include/linux/tcp.h | 2 +- include/net/ieee802154_netdev.h | 12 +- include/net/sock.h | 2 +- include/net/tcp.h | 5 +- kernel/bpf/btf.c | 2 +- kernel/bpf/syscall.c | 2 + kernel/cgroup/cpuset.c | 18 +- kernel/gcov/gcc_4_7.c | 18 +- kernel/livepatch/transition.c | 18 +- kernel/trace/ftrace.c | 8 +- kernel/trace/ring_buffer.c | 48 +++- kernel/trace/trace.c | 22 ++ lib/dynamic_debug.c | 11 +- lib/once.c | 30 +++ net/bluetooth/hci_sysfs.c | 3 + net/bluetooth/l2cap_core.c | 17 +- net/can/bcm.c | 7 +- net/core/stream.c | 3 +- net/ieee802154/socket.c | 4 + net/ipv4/af_inet.c | 2 +- net/ipv4/inet_hashtables.c | 4 +- net/ipv4/netfilter/nft_fib_ipv4.c | 3 + net/ipv4/tcp.c | 19 +- net/ipv4/tcp_input.c | 2 +- net/ipv4/tcp_ipv4.c | 11 +- net/ipv4/tcp_output.c | 19 +- net/ipv4/udp.c | 6 +- net/ipv6/netfilter/nft_fib_ipv6.c | 6 +- net/ipv6/tcp_ipv6.c | 11 +- net/ipv6/udp.c | 4 +- net/mac80211/cfg.c | 3 - net/openvswitch/datapath.c | 18 +- net/rds/tcp.c | 2 +- net/sctp/auth.c | 18 +- net/unix/garbage.c | 20 ++ net/vmw_vsock/virtio_transport_common.c | 2 +- net/xfrm/xfrm_ipcomp.c | 1 + scripts/Kbuild.include | 23 +- scripts/selinux/install_policy.sh | 2 +- sound/core/pcm_dmaengine.c | 8 +- sound/core/rawmidi.c | 2 - sound/core/sound_oss.c | 13 +- sound/pci/hda/hda_beep.c | 15 +- sound/pci/hda/hda_beep.h | 1 + sound/pci/hda/patch_hdmi.c | 6 - sound/pci/hda/patch_realtek.c | 11 +- sound/pci/hda/patch_sigmatel.c | 25 +- sound/soc/codecs/wcd9335.c | 2 +- sound/soc/codecs/wm5102.c | 6 +- sound/soc/codecs/wm5110.c | 6 +- sound/soc/codecs/wm8997.c | 6 +- sound/soc/fsl/eukrea-tlv320.c | 8 +- sound/soc/sh/rcar/ctu.c | 6 +- sound/soc/sh/rcar/dvc.c | 6 +- sound/soc/sh/rcar/mix.c | 6 +- sound/soc/sh/rcar/src.c | 5 +- sound/soc/sh/rcar/ssi.c | 4 +- sound/usb/endpoint.c | 6 +- tools/bpf/bpftool/btf_dumper.c | 2 +- tools/bpf/bpftool/main.c | 10 + tools/perf/util/intel-pt.c | 9 +- 259 files changed, 1849 insertions(+), 760 deletions(-)
