This is the start of the stable review cycle for the 5.15.166 release. There are 215 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Tue, 03 Sep 2024 16:07:34 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.166-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.15.166-rc1 Guenter Roeck <linux@xxxxxxxxxxxx> apparmor: fix policy_unpack_test on big endian systems Ben Hutchings <benh@xxxxxxxxxx> scsi: aacraid: Fix double-free on probe failure Faizal Rahim <faizal.abdul.rahim@xxxxxxxxxxxxxxx> igc: Fix qbv tx latency by setting gtxoffset Faizal Rahim <faizal.abdul.rahim@xxxxxxxxxxxxxxx> igc: Fix reset adapter logics when tx mode change Sean Anderson <sean.anderson@xxxxxxxxx> phy: zynqmp: Enable reference clock correctly Pawel Laszczak <pawell@xxxxxxxxxxx> usb: cdnsp: fix for Link TRB with TC Pawel Laszczak <pawell@xxxxxxxxxxx> usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function Zijun Hu <quic_zijuhu@xxxxxxxxxxx> usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> usb: dwc3: st: add missing depopulate in probe error path Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> usb: dwc3: st: fix probed platform device ref count on probe error path Selvarasu Ganesan <selvarasu.g@xxxxxxxxxxx> usb: dwc3: core: Prevent USB core invalid event buffer address access Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> usb: dwc3: omap: add missing depopulate in probe error path ZHANG Yuntian <yt@xxxxxxxxx> USB: serial: option: add MeiG Smart SRM825L Ian Ray <ian.ray@xxxxxxxxxxxxxxxx> cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller Volodymyr Babchuk <Volodymyr_Babchuk@xxxxxxxx> soc: qcom: cmd-db: Map shared memory as WC, not WB Aleksandr Mishin <amishin@xxxxxxxxxx> nfc: pn533: Add poll mod list filling check Eric Dumazet <edumazet@xxxxxxxxxx> net: busy-poll: use ktime_get_ns() instead of local_clock() Cong Wang <cong.wang@xxxxxxxxxxxxx> gtp: fix a potential NULL pointer dereference Jamie Bainbridge <jamie.bainbridge@xxxxxxxxx> ethtool: check device is present when getting link settings Serge Semin <fancer.lancer@xxxxxxxxx> dmaengine: dw: Add memory bus width verification Serge Semin <fancer.lancer@xxxxxxxxx> dmaengine: dw: Add peripheral bus width verification Piyush Mehta <piyush.mehta@xxxxxxx> phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume Piyush Mehta <piyush.mehta@xxxxxxx> phy: xilinx: phy-zynqmp: dynamic clock support for power-save Piyush Mehta <piyush.mehta@xxxxxxx> phy: xilinx: add runtime PM support Paul Cercueil <paul@xxxxxxxxxxxxxxx> PM: runtime: Add DEFINE_RUNTIME_DEV_PM_OPS() macro Paul Cercueil <paul@xxxxxxxxxxxxxxx> PM: core: Add EXPORT[_GPL]_SIMPLE_DEV_PM_OPS macros Paul Cercueil <paul@xxxxxxxxxxxxxxx> PM: core: Remove DEFINE_UNIVERSAL_DEV_PM_OPS() macro Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> soundwire: stream: fix programming slave ports for non-continous port maps Namjae Jeon <linkinjeon@xxxxxxxxxx> ksmbd: the buffer of smb2 query dir response has at least 1 byte Allison Henderson <allison.henderson@xxxxxxxxxx> net:rds: Fix possible deadlock in rds_message_put Chen Ridong <chenridong@xxxxxxxxxx> cgroup/cpuset: Prevent UAF in proc_cpuset_show() Niklas Cassel <cassel@xxxxxxxxxx> ata: libata-core: Fix null pointer dereference on error Alex Deucher <alexander.deucher@xxxxxxx> drm/amdkfd: don't allow mapping the MMIO HDP page with large pages Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "MIPS: Loongson64: reset: Prioritise firmware service" Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> mptcp: sched: check both backup in retrans Haiyang Zhang <haiyangz@xxxxxxxxxxxxx> net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response Sascha Hauer <s.hauer@xxxxxxxxxxxxxx> wifi: mwifiex: duplicate static structs used in driver instances Ma Ke <make24@xxxxxxxxxxx> pinctrl: single: fix potential NULL dereference in pcs_get_function() Huang-Huang Bao <i@xxxxxx> pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: run delayed iputs when flushing delalloc Jesse Zhang <jesse.zhang@xxxxxxx> drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc Alexander Lobakin <aleksander.lobakin@xxxxxxxxx> tools: move alignment-related macros to new <linux/align.h> Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> Input: MT - limit max slots Lee, Chun-Yi <joeyli.kernel@xxxxxxxxx> Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO Zi Yan <ziy@xxxxxxxxxx> mm/numa: no task_numa_fault() call if PTE is changed Zi Yan <ziy@xxxxxxxxxx> mm/numa: no task_numa_fault() call if PMD is changed Takashi Iwai <tiwai@xxxxxxx> ALSA: timer: Relax start tick time check for slave timer elements Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt() Alex Hung <alex.hung@xxxxxxx> Revert "drm/amd/display: Validate hw_points_num before using it" Ben Whitten <ben.whitten@xxxxxxxxx> mmc: dw_mmc: allow biu and ciu clocks to defer Marc Zyngier <maz@xxxxxxxxxx> KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 Nikolay Kuratov <kniv@xxxxxxxxxxxxxx> cxgb4: add forgotten u64 ivlan cast before shift Siarhei Vishniakou <svv@xxxxxxxxxx> HID: microsoft: Add rumble support to latest xbox controllers Jason Gerecke <jason.gerecke@xxxxxxxxx> HID: wacom: Defer calculation of resolution until resolution_code is known Jiaxun Yang <jiaxun.yang@xxxxxxxxxxx> MIPS: Loongson64: Set timer mode in cpu-probe Chaotian Jing <chaotian.jing@xxxxxxxxxxxx> scsi: core: Fix the return value of scsi_logical_block_count() Griffin Kroah-Hartman <griffin@xxxxxxxxx> Bluetooth: MGMT: Add error handling to pair_device() Dan Carpenter <dan.carpenter@xxxxxxxxxx> mmc: mmc_test: Fix NULL dereference on allocation failure Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxx> drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails Abhinav Kumar <quic_abhinavk@xxxxxxxxxxx> drm/msm/dp: reset the link phy params before link training Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxx> drm/msm/dpu: don't play tricks with debug macros Sean Anderson <sean.anderson@xxxxxxxxx> net: xilinx: axienet: Fix dangling multicast addresses Sean Anderson <sean.anderson@xxxxxxxxx> net: xilinx: axienet: Always disable promiscuous mode Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: flowtable: validate vlan header Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: prevent possible UAF in ip6_xmit() Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: fix possible UAF in ip6_finish_output2() Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: prevent UAF in ip6_send_skb() Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx> netem: fix return value if duplicate enqueue fails Joseph Huang <Joseph.Huang@xxxxxxxxxx> net: dsa: mv88e6xxx: Fix out-of-bound access Vladimir Oltean <vladimir.oltean@xxxxxxx> net: dsa: mv88e6xxx: replace ATU violation prints with trace points Hans J. Schultz <netdev@xxxxxxxxxxxxxxxxxxxx> net: dsa: mv88e6xxx: read FID when handling ATU violations Dan Carpenter <dan.carpenter@xxxxxxxxxx> dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp() Maciej Fijalkowski <maciej.fijalkowski@xxxxxxxxx> ice: fix ICE_LAST_OFFSET formula Nikolay Aleksandrov <razor@xxxxxxxxxxxxx> bonding: fix xfrm state handling when clearing active slave Nikolay Aleksandrov <razor@xxxxxxxxxxxxx> bonding: fix xfrm real_dev null pointer dereference Nikolay Aleksandrov <razor@xxxxxxxxxxxxx> bonding: fix null pointer deref in bond_ipsec_offload_ok Nikolay Aleksandrov <razor@xxxxxxxxxxxxx> bonding: fix bond_ipsec_offload_ok return type Thomas Bogendoerfer <tbogendoerfer@xxxxxxx> ip6_tunnel: Fix broken GRO Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx> netfilter: nft_counter: Synchronize nft_counter_reset() against reader. Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx> netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> kcm: Serialise kcm_sendmsg() for the same socket. Simon Horman <horms@xxxxxxxxxx> tc-testing: don't access non-existent variable on exception Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: SMP: Fix assumption of Central always being Initiator Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: hci_core: Fix LE quote calculation Maximilian Luz <luzmaximilian@xxxxxxxxx> platform/surface: aggregator: Fix warning when controller is destroyed in probe Long Li <longli@xxxxxxxxxxxxx> net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings Mikulas Patocka <mpatocka@xxxxxxxxxx> dm suspend: return -ERESTARTSYS instead of -EINTR Aurelien Jarno <aurelien@xxxxxxxxxxx> media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c) Josef Bacik <josef@xxxxxxxxxxxxxx> nfsd: make svc_stat per-network namespace instead of global Josef Bacik <josef@xxxxxxxxxxxxxx> nfsd: remove nfsd_stats, make th_cnt a global counter Josef Bacik <josef@xxxxxxxxxxxxxx> nfsd: make all of the nfsd stats per-network namespace Josef Bacik <josef@xxxxxxxxxxxxxx> nfsd: expose /proc/net/sunrpc/nfsd in net namespaces Josef Bacik <josef@xxxxxxxxxxxxxx> nfsd: rename NFSD_NET_* to NFSD_STATS_* Josef Bacik <josef@xxxxxxxxxxxxxx> sunrpc: use the struct net as the svc proc private Josef Bacik <josef@xxxxxxxxxxxxxx> sunrpc: remove ->pg_stats from svc_program Josef Bacik <josef@xxxxxxxxxxxxxx> sunrpc: pass in the sv_stats struct through svc_create_pooled Josef Bacik <josef@xxxxxxxxxxxxxx> nfsd: stop setting ->pg_stats for unused stats Josef Bacik <josef@xxxxxxxxxxxxxx> sunrpc: don't change ->sv_stats if it doesn't exist Chuck Lever <chuck.lever@xxxxxxxxxx> NFSD: Fix frame size warning in svc_export_parse() Chuck Lever <chuck.lever@xxxxxxxxxx> NFSD: Rewrite synopsis of nfsd_percpu_counters_init() Chuck Lever <chuck.lever@xxxxxxxxxx> NFSD: Refactor the duplicate reply cache shrinker Chuck Lever <chuck.lever@xxxxxxxxxx> NFSD: Replace nfsd_prune_bucket() Chuck Lever <chuck.lever@xxxxxxxxxx> NFSD: Rename nfsd_reply_cache_alloc() Chuck Lever <chuck.lever@xxxxxxxxxx> NFSD: Refactor nfsd_reply_cache_free_locked() Jeff Layton <jlayton@xxxxxxxxxx> nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net Jeff Layton <jlayton@xxxxxxxxxx> nfsd: move reply cache initialization into nfsd startup Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> block: use "unsigned long" for blk_validate_block_size(). Eric Dumazet <edumazet@xxxxxxxxxx> gtp: pull network headers in gtp_dev_xmit() Phil Chang <phil.chang@xxxxxxxxxxxx> hrtimer: Prevent queuing of hrtimer without a function callback Sagi Grimberg <sagi@xxxxxxxxxxx> nvmet-rdma: fix possible bad dereference when freeing rsps Baokun Li <libaokun1@xxxxxxxxxx> ext4: set the type of max_zeroout to unsigned int to avoid overflow Guanrui Huang <guanrui.huang@xxxxxxxxxxxxxxxxx> irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc Abdulrasaq Lawani <abdulrasaqolawani@xxxxxxxxx> fbdev: offb: replace of_node_put with __free(device_node) Krishna Kurapati <quic_kriskura@xxxxxxxxxxx> usb: dwc3: core: Skip setting event buffers for host only controllers Gergo Koteles <soyer@xxxxxx> platform/x86: lg-laptop: fix %s null argument warning Adrian Hunter <adrian.hunter@xxxxxxxxx> clocksource: Make watchdog and suspend-timing multiplication overflow safe Alexander Gordeev <agordeev@xxxxxxxxxxxxx> s390/iucv: fix receive buffer virtual vs physical address confusion Oreoluwa Babatunde <quic_obabatun@xxxxxxxxxxx> openrisc: Call setup_memory() earlier in the init sequence NeilBrown <neilb@xxxxxxx> NFS: avoid infinite loop in pnfs_update_layout. Hannes Reinecke <hare@xxxxxxx> nvmet-tcp: do not continue for invalid icreq Jian Shen <shenjian15@xxxxxxxxxx> net: hns3: add checking for vf id of mailbox Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: bnep: Fix out-of-bound access Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx> usb: gadget: fsl: Increase size of name buffer for endpoints Zhiguo Niu <zhiguo.niu@xxxxxxxxxx> f2fs: fix to do sanity check in update_sit_entry David Sterba <dsterba@xxxxxxxx> btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() David Sterba <dsterba@xxxxxxxx> btrfs: change BUG_ON to assertion in tree_move_down() David Sterba <dsterba@xxxxxxxx> btrfs: send: handle unexpected data in header buffer in begin_cmd() David Sterba <dsterba@xxxxxxxx> btrfs: handle invalid root reference found in may_destroy_subvol() David Sterba <dsterba@xxxxxxxx> btrfs: change BUG_ON to assertion when checking for delayed_node root Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/boot: Only free if realloc() succeeds Li zeming <zeming@xxxxxxxxxxxx> powerpc/boot: Handle allocation failure in simple_realloc() Helge Deller <deller@xxxxxx> parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 Christophe Kerello <christophe.kerello@xxxxxxxxxxx> memory: stm32-fmc2-ebi: check regmap_read return value Kees Cook <keescook@xxxxxxxxxxxx> x86: Increase brk randomness entropy for 64-bit systems Li Nan <linan122@xxxxxxxxxx> md: clean up invalid BUG_ON in md_ioctl Eric Dumazet <edumazet@xxxxxxxxxx> netlink: hold nlk->cb_mutex longer in __netlink_dump_start() Martin Blumenstingl <martin.blumenstingl@xxxxxxxxxxxxxx> clocksource/drivers/arm_global_timer: Guard against division by zero Stefan Hajnoczi <stefanha@xxxxxxxxxx> virtiofs: forbid newlines in tags Erico Nunes <nunes.erico@xxxxxxxxx> drm/lima: set gp bus_stop bit before hard reset Kees Cook <keescook@xxxxxxxxxxxx> net/sun3_82586: Avoid reading past buffer in debug output Philipp Stanner <pstanner@xxxxxxxxxx> media: drivers/media/dvb-core: copy user arrays safely Justin Tee <justin.tee@xxxxxxxxxxxx> scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list() Max Filippov <jcmvbkbc@xxxxxxxxx> fs: binfmt_elf_efpic: don't use missing interpreter's properties Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: pci: cx23885: check cx23885_vdev_init() return Jan Kara <jack@xxxxxxx> quota: Remove BUG_ON from dqget() Al Viro <viro@xxxxxxxxxxxxxxxxxx> fuse: fix UAF in rcu pathwalks Al Viro <viro@xxxxxxxxxxxxxxxxxx> afs: fix __afs_break_callback() / afs_drop_open_mmap() race Baokun Li <libaokun1@xxxxxxxxxx> ext4: do not trim the group with corrupted block bitmap Daniel Wagner <dwagner@xxxxxxx> nvmet-trace: avoid dereferencing pointer too early Kunwu Chan <chentao@xxxxxxxxxx> powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu Ashish Mhetre <amhetre@xxxxxxxxxx> memory: tegra: Skip SID programming if SID registers aren't set Samuel Holland <samuel.holland@xxxxxxxxxx> arm64: Fix KASAN random tag seed initialization Antoniu Miclaus <antoniu.miclaus@xxxxxxxxxx> hwmon: (ltc2992) Avoid division by zero Chengfeng Ye <dg573847474@xxxxxxxxx> IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock Mukesh Sisodiya <mukesh.sisodiya@xxxxxxxxx> wifi: iwlwifi: fw: Fix debugfs command sending Miri Korenblit <miriam.rachel.korenblit@xxxxxxxxx> wifi: iwlwifi: abort scan when rfkill on but device enabled Andreas Gruenbacher <agruenba@xxxxxxxxxx> gfs2: setattr_chown: Add missing initialization Mike Christie <michael.christie@xxxxxxxxxx> scsi: spi: Fix sshdr use Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: qcom: venus: fix incorrect return value Christian Brauner <christian.brauner@xxxxxxxxxx> binfmt_misc: cleanup on filesystem umount Chengfeng Ye <dg573847474@xxxxxxxxx> staging: ks7010: disable bh on tx_dev_lock Alex Hung <alex.hung@xxxxxxx> drm/amd/display: Validate hw_points_num before using it David Lechner <dlechner@xxxxxxxxxxxx> staging: iio: resolver: ad2s1210: fix use before initialization Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: radio-isa: use dev_name to fill in bus_info Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx> i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx> i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out Heiko Carstens <hca@xxxxxxxxxxxxx> s390/smp,mcck: fix early IPI handling Zhu Yanjun <yanjun.zhu@xxxxxxxxx> RDMA/rtrs: Fix the problem of variable not initialized fully Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: riic: avoid potential division by zero Jeff Johnson <quic_jjohnson@xxxxxxxxxxx> wifi: cw1200: Avoid processing an invalid TIM IE Johannes Berg <johannes.berg@xxxxxxxxx> wifi: mac80211: fix BA session teardown race Johannes Berg <johannes.berg@xxxxxxxxx> wifi: cfg80211: check wiphy mutex is held for wdev mutex Rand Deeb <rand.sec96@xxxxxxxxx> ssb: Fix division by zero issue in ssb_calc_clock_rate Parsa Poorshikhian <parsa.poorsh@xxxxxxxxx> ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 Jie Wang <wangjie125@xxxxxxxxxx> net: hns3: fix a deadlock problem when config TC during resetting Jie Wang <wangjie125@xxxxxxxxxx> net: hns3: fix wrong use of semaphore up Florian Westphal <fw@xxxxxxxxx> netfilter: nf_queue: drop packets with cloned unconfirmed conntracks Donald Hunter <donald.hunter@xxxxxxxxx> netfilter: flowtable: initialise extack before use Tom Hughes <tom@xxxxxxxxxx> netfilter: allow ipv6 fragments to arrive on different devices Eugene Syromiatnikov <esyr@xxxxxxxxxx> mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size David Thompson <davthompson@xxxxxxxxxx> mlxbf_gige: disable RX filters until RX path initialized Yue Haibing <yuehaibing@xxxxxxxxxx> mlxbf_gige: Remove two unused function declarations Pawel Dembicki <paweldembicki@xxxxxxxxx> net: dsa: vsc73xx: check busy flag in MDIO operations Pawel Dembicki <paweldembicki@xxxxxxxxx> net: dsa: vsc73xx: use read_poll_timeout instead delay loop Pawel Dembicki <paweldembicki@xxxxxxxxx> net: dsa: vsc73xx: pass value in phy_write operation Radhey Shyam Pandey <radhey.shyam.pandey@xxxxxxx> net: axienet: Fix register defines comment description Dan Carpenter <dan.carpenter@xxxxxxxxxx> atm: idt77252: prevent use after free in dequeue_rx() Cosmin Ratiu <cratiu@xxxxxxxxxx> net/mlx5e: Correctly report errors for ethtool rx flows Faizal Rahim <faizal.abdul.rahim@xxxxxxxxxxxxxxx> igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer Muhammad Husaini Zulkifli <muhammad.husaini.zulkifli@xxxxxxxxx> igc: remove I226 Qbv BaseTime restriction Muhammad Husaini Zulkifli <muhammad.husaini.zulkifli@xxxxxxxxx> igc: Correct the launchtime offset Claudio Imbrenda <imbrenda@xxxxxxxxxxxxx> s390/uv: Panic for set and remove shared access UVC errors Alex Deucher <alexander.deucher@xxxxxxx> drm/amdgpu/jpeg2: properly set atomics vmid field Al Viro <viro@xxxxxxxxxxxxxxxxxx> memcg_write_event_control(): fix a user-triggerable oops Bas Nieuwenhuizen <bas@xxxxxxxxxxxxxxxxxxx> drm/amdgpu: Actually check flags for all context ops. Qu Wenruo <wqu@xxxxxxxx> btrfs: tree-checker: add dev extent item checks Zhen Lei <thunder.leizhen@xxxxxxxxxx> selinux: fix potential counting error in avc_add_xperms_decision() Al Viro <viro@xxxxxxxxxxxxxxxxxx> fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE Alexander Lobakin <aleksander.lobakin@xxxxxxxxx> bitmap: introduce generic optimized bitmap_size() Alexander Lobakin <aleksander.lobakin@xxxxxxxxx> btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() Alexander Lobakin <aleksander.lobakin@xxxxxxxxx> s390/cio: rename bitmap_size() -> idset_bitmap_size() Alexander Lobakin <aleksander.lobakin@xxxxxxxxx> fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64() Zhihao Cheng <chengzhihao1@xxxxxxxxxx> vfs: Don't evict inode under the inode lru traversing context Mikulas Patocka <mpatocka@xxxxxxxxxx> dm persistent data: fix memory allocation failure Khazhismel Kumykov <khazhy@xxxxxxxxxx> dm resume: don't return EINVAL when signalled Haibo Xu <haibo1.xu@xxxxxxxxx> arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE Stefan Haberland <sth@xxxxxxxxxxxxx> s390/dasd: fix error recovery leading to data corruption on ESE devices Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx> thunderbolt: Mark XDomain as unplugged when router is removed Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration Juan José Arboleda <soyjuanarbol@xxxxxxxxx> ALSA: usb-audio: Support Yamaha P-125 quirk entry Lianqin Hu <hulianqin@xxxxxxxx> ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET Eli Billauer <eli.billauer@xxxxxxxxx> char: xillybus: Check USB endpoints when probing device Eli Billauer <eli.billauer@xxxxxxxxx> char: xillybus: Refine workqueue handling Eli Billauer <eli.billauer@xxxxxxxxx> char: xillybus: Don't destroy workqueue from work item running on it Jann Horn <jannh@xxxxxxxxxx> fuse: Initialize beyond-EOF page contents before setting uptodate ------------- Diffstat: Makefile | 4 +- arch/arm64/kernel/acpi_numa.c | 2 +- arch/arm64/kernel/setup.c | 3 - arch/arm64/kernel/smp.c | 2 + arch/arm64/kvm/sys_regs.c | 6 + arch/arm64/kvm/vgic/vgic.h | 7 + arch/mips/kernel/cpu-probe.c | 4 + arch/mips/loongson64/reset.c | 38 ++-- arch/openrisc/kernel/setup.c | 6 +- arch/parisc/kernel/irq.c | 4 +- arch/powerpc/boot/simple_alloc.c | 7 +- arch/powerpc/sysdev/xics/icp-native.c | 2 + arch/s390/include/asm/uv.h | 5 +- arch/s390/kernel/early.c | 12 +- arch/s390/kernel/smp.c | 4 +- arch/x86/kernel/process.c | 5 +- drivers/ata/libata-core.c | 3 + drivers/atm/idt77252.c | 9 +- drivers/bluetooth/hci_ldisc.c | 3 +- drivers/char/xillybus/xillyusb.c | 42 +++- drivers/clocksource/arm_global_timer.c | 11 +- drivers/dma/dw/core.c | 89 ++++++++- drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c | 8 + drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 3 +- drivers/gpu/drm/amd/amdgpu/jpeg_v2_0.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 5 +- drivers/gpu/drm/lima/lima_gp.c | 12 ++ drivers/gpu/drm/msm/disp/dpu1/dpu_kms.h | 14 +- drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c | 3 + drivers/gpu/drm/msm/dp/dp_ctrl.c | 2 + drivers/hid/hid-ids.h | 10 +- drivers/hid/hid-microsoft.c | 11 +- drivers/hid/wacom_wac.c | 4 +- drivers/hwmon/ltc2992.c | 8 +- drivers/i2c/busses/i2c-riic.c | 2 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 5 +- drivers/infiniband/hw/hfi1/chip.c | 5 +- drivers/infiniband/ulp/rtrs/rtrs.c | 2 +- drivers/input/input-mt.c | 3 + drivers/irqchip/irq-gic-v3-its.c | 2 - drivers/md/dm-clone-metadata.c | 5 - drivers/md/dm-ioctl.c | 22 ++- drivers/md/dm.c | 4 +- drivers/md/md.c | 5 - drivers/md/persistent-data/dm-space-map-metadata.c | 4 +- drivers/media/dvb-core/dvb_frontend.c | 12 +- drivers/media/pci/cx23885/cx23885-video.c | 8 + drivers/media/pci/solo6x10/solo6x10-offsets.h | 10 +- drivers/media/platform/qcom/venus/pm_helpers.c | 2 +- drivers/media/radio/radio-isa.c | 2 +- drivers/memory/stm32-fmc2-ebi.c | 122 ++++++++---- drivers/memory/tegra/tegra186.c | 3 + drivers/mmc/core/mmc_test.c | 9 +- drivers/mmc/host/dw_mmc.c | 8 + drivers/net/bonding/bond_main.c | 21 +- drivers/net/bonding/bond_options.c | 2 +- drivers/net/dsa/mv88e6xxx/Makefile | 4 + drivers/net/dsa/mv88e6xxx/global1_atu.c | 82 ++++++-- drivers/net/dsa/mv88e6xxx/trace.c | 6 + drivers/net/dsa/mv88e6xxx/trace.h | 66 +++++++ drivers/net/dsa/vitesse-vsc73xx-core.c | 69 +++++-- drivers/net/ethernet/chelsio/cxgb4/cxgb4_filter.c | 3 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 7 +- drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 3 + .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 4 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 7 +- .../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 4 +- drivers/net/ethernet/i825xx/sun3_82586.c | 2 +- drivers/net/ethernet/intel/ice/ice_txrx.c | 2 +- drivers/net/ethernet/intel/igc/igc_base.c | 29 +++ drivers/net/ethernet/intel/igc/igc_base.h | 2 + drivers/net/ethernet/intel/igc/igc_defines.h | 16 ++ drivers/net/ethernet/intel/igc/igc_main.c | 12 +- drivers/net/ethernet/intel/igc/igc_regs.h | 1 + drivers/net/ethernet/intel/igc/igc_tsn.c | 113 +++++++++-- drivers/net/ethernet/intel/igc/igc_tsn.h | 1 + .../ethernet/mellanox/mlx5/core/en_fs_ethtool.c | 2 +- .../net/ethernet/mellanox/mlxbf_gige/mlxbf_gige.h | 9 +- .../ethernet/mellanox/mlxbf_gige/mlxbf_gige_main.c | 10 + .../ethernet/mellanox/mlxbf_gige/mlxbf_gige_regs.h | 2 + .../ethernet/mellanox/mlxbf_gige/mlxbf_gige_rx.c | 50 ++++- drivers/net/ethernet/microsoft/mana/hw_channel.c | 68 ++++--- drivers/net/ethernet/microsoft/mana/mana.h | 1 + drivers/net/ethernet/microsoft/mana/mana_en.c | 22 ++- drivers/net/ethernet/xilinx/xilinx_axienet.h | 17 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 25 +-- drivers/net/gtp.c | 5 +- drivers/net/wireless/intel/iwlwifi/fw/debugfs.c | 6 +- drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 32 ++- drivers/net/wireless/st/cw1200/txrx.c | 2 +- drivers/nfc/pn533/pn533.c | 5 + drivers/nvme/target/rdma.c | 16 +- drivers/nvme/target/tcp.c | 1 + drivers/nvme/target/trace.c | 6 +- drivers/nvme/target/trace.h | 28 +-- drivers/phy/xilinx/phy-zynqmp.c | 152 ++++++++++----- drivers/pinctrl/pinctrl-rockchip.c | 2 +- drivers/pinctrl/pinctrl-single.c | 2 + drivers/platform/surface/aggregator/controller.c | 3 +- drivers/platform/x86/lg-laptop.c | 2 +- drivers/s390/block/dasd.c | 36 ++-- drivers/s390/block/dasd_3990_erp.c | 10 +- drivers/s390/block/dasd_eckd.c | 57 +++--- drivers/s390/block/dasd_int.h | 2 +- drivers/s390/cio/idset.c | 12 +- drivers/scsi/aacraid/comminit.c | 2 + drivers/scsi/lpfc/lpfc_sli.c | 2 +- drivers/scsi/scsi_transport_spi.c | 4 +- drivers/soc/qcom/cmd-db.c | 2 +- drivers/soundwire/stream.c | 8 +- drivers/ssb/main.c | 2 +- drivers/staging/iio/resolver/ad2s1210.c | 7 +- drivers/staging/ks7010/ks7010_sdio.c | 4 +- drivers/thunderbolt/switch.c | 1 + drivers/usb/cdns3/cdnsp-gadget.h | 3 + drivers/usb/cdns3/cdnsp-ring.c | 30 ++- drivers/usb/class/cdc-acm.c | 3 + drivers/usb/core/sysfs.c | 1 + drivers/usb/dwc3/core.c | 21 ++ drivers/usb/dwc3/dwc3-omap.c | 4 +- drivers/usb/dwc3/dwc3-st.c | 16 +- drivers/usb/gadget/udc/fsl_udc_core.c | 2 +- drivers/usb/host/xhci.c | 8 +- drivers/usb/serial/option.c | 5 + drivers/video/fbdev/offb.c | 3 +- fs/afs/file.c | 8 +- fs/binfmt_elf_fdpic.c | 2 +- fs/binfmt_misc.c | 216 ++++++++++++++++----- fs/btrfs/delayed-inode.c | 2 +- fs/btrfs/free-space-cache.c | 8 +- fs/btrfs/inode.c | 9 +- fs/btrfs/qgroup.c | 4 +- fs/btrfs/send.c | 9 +- fs/btrfs/tree-checker.c | 69 +++++++ fs/ext4/extents.c | 3 +- fs/ext4/mballoc.c | 3 + fs/f2fs/segment.c | 5 +- fs/file.c | 28 ++- fs/fuse/cuse.c | 3 +- fs/fuse/dev.c | 6 +- fs/fuse/fuse_i.h | 1 + fs/fuse/inode.c | 15 +- fs/fuse/virtio_fs.c | 10 + fs/gfs2/inode.c | 2 +- fs/inode.c | 39 +++- fs/ksmbd/smb2pdu.c | 3 +- fs/lockd/svc.c | 3 - fs/nfs/callback.c | 3 - fs/nfs/pnfs.c | 8 + fs/nfsd/export.c | 32 ++- fs/nfsd/export.h | 4 +- fs/nfsd/netns.h | 25 ++- fs/nfsd/nfs4proc.c | 6 +- fs/nfsd/nfscache.c | 202 +++++++++++-------- fs/nfsd/nfsctl.c | 24 ++- fs/nfsd/nfsd.h | 1 + fs/nfsd/nfsfh.c | 3 +- fs/nfsd/nfssvc.c | 24 ++- fs/nfsd/stats.c | 52 ++--- fs/nfsd/stats.h | 83 +++----- fs/nfsd/trace.h | 22 +++ fs/nfsd/vfs.c | 6 +- fs/ntfs3/bitmap.c | 4 +- fs/ntfs3/fsntfs.c | 2 +- fs/ntfs3/index.c | 11 +- fs/ntfs3/ntfs_fs.h | 4 +- fs/ntfs3/super.c | 2 +- fs/quota/dquot.c | 5 +- include/linux/bitmap.h | 20 +- include/linux/blkdev.h | 2 +- include/linux/cpumask.h | 2 +- include/linux/fs.h | 5 + include/linux/pm.h | 55 ++++-- include/linux/pm_runtime.h | 14 ++ include/linux/sunrpc/svc.h | 5 +- include/net/busy_poll.h | 2 +- include/net/kcm.h | 1 + include/scsi/scsi_cmnd.h | 2 +- kernel/cgroup/cpuset.c | 13 +- kernel/time/clocksource.c | 42 ++-- kernel/time/hrtimer.c | 2 + lib/math/prime_numbers.c | 2 - mm/huge_memory.c | 30 ++- mm/memcontrol.c | 7 +- mm/memory.c | 29 ++- net/bluetooth/bnep/core.c | 3 +- net/bluetooth/hci_core.c | 19 +- net/bluetooth/mgmt.c | 4 + net/bluetooth/smp.c | 146 +++++++------- net/bridge/br_netfilter_hooks.c | 6 +- net/core/net-sysfs.c | 2 +- net/ethtool/ioctl.c | 3 + net/ipv6/ip6_output.c | 10 + net/ipv6/ip6_tunnel.c | 12 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 4 + net/iucv/iucv.c | 3 +- net/kcm/kcmsock.c | 4 + net/mac80211/agg-tx.c | 6 +- net/mac80211/driver-ops.c | 3 - net/mac80211/sta_info.c | 14 ++ net/mptcp/diag.c | 2 +- net/mptcp/protocol.c | 2 +- net/netfilter/nf_flow_table_inet.c | 3 + net/netfilter/nf_flow_table_ip.c | 3 + net/netfilter/nf_flow_table_offload.c | 2 +- net/netfilter/nfnetlink_queue.c | 35 +++- net/netfilter/nft_counter.c | 9 +- net/netlink/af_netlink.c | 13 +- net/rds/recv.c | 13 +- net/sched/sch_netem.c | 47 +++-- net/sunrpc/stats.c | 2 +- net/sunrpc/svc.c | 36 ++-- net/wireless/core.h | 8 +- security/apparmor/policy_unpack_test.c | 6 +- security/selinux/avc.c | 2 +- sound/core/timer.c | 2 +- sound/pci/hda/patch_realtek.c | 1 - sound/usb/quirks-table.h | 1 + sound/usb/quirks.c | 2 + tools/include/linux/align.h | 12 ++ tools/include/linux/bitmap.h | 9 +- tools/testing/selftests/core/close_range_test.c | 35 ++++ tools/testing/selftests/tc-testing/tdc.py | 1 - 224 files changed, 2394 insertions(+), 1053 deletions(-)