5.15.82-rc3 review

This is the start of the stable review cycle for the 5.15.82 release. There are 121 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 08 Dec 2022 16:34:23 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.82-rc3.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 5.15.82-rc3

Linus Torvalds <[email protected]>
proc: proc_skip_spaces() shouldn't think it is working on C strings

Linus Torvalds <[email protected]>
proc: avoid integer type confusion in get_proc_long

Jann Horn <[email protected]>
ipc/sem: Fix dangling sem_array access in semtimedop race

Zhang Xiaoxu <[email protected]>
Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()

Jan Dabros <[email protected]>
char: tpm: Protect tpm_pm_suspend with locks

Conor Dooley <[email protected]>
Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend"

Vishal Verma <[email protected]>
ACPI: HMAT: Fix initiator registration for single-initiator systems

Vishal Verma <[email protected]>
ACPI: HMAT: remove unnecessary variable initialization

Andrew Lunn <[email protected]>
i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set

Yuan Can <[email protected]>
i2c: npcm7xx: Fix error handling in npcm_i2c_init()

Lukas Wunner <[email protected]>

    serial: stm32: Deassert Transmit Enable on ->rs485_config()

Marek Vasut <[email protected]>
serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode

Marek Vasut <[email protected]>
serial: stm32: Factor out GPIO RTS toggling into separate function

Ido Schimmel <[email protected]>
ipv4: Fix route deletion when nexthop info is not specified

David Ahern <[email protected]>
ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference

Nikolay Aleksandrov <[email protected]>
selftests: net: fix nexthop warning cleanup double ip typo

Nikolay Aleksandrov <[email protected]>
selftests: net: add delete nexthop route warning test

Lee Jones <[email protected]>
Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled

Helge Deller <[email protected]>
parisc: Increase FRAME_WARN to 2048 bytes on parisc

Gavin Shan <[email protected]>
mm: migrate: fix THP's mapcount on isolation

Hugh Dickins <[email protected]>
mm: __isolate_lru_page_prepare() in isolate_migratepages_block()

Xiongfeng Wang <[email protected]>
iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()

Xiongfeng Wang <[email protected]>
iommu/vt-d: Fix PCI device refcount leak in has_external_pci()

Caleb Sander <[email protected]>
nvme: fix SRCU protection of nvme_ns_head list

Guo Ren <[email protected]>
riscv: kexec: Fixup irq controller broken in kexec crash path

Jisheng Zhang <[email protected]>
riscv: fix race when vmap stack overflow

Alexandre Ghiti <[email protected]>
riscv: Sync efi page table's kernel mappings before switching

Maxim Korotkov <[email protected]>
pinctrl: single: Fix potential division by zero

Mark Brown <[email protected]>
ASoC: ops: Fix bounds check for _sx controls

Kazuki Takiguchi <[email protected]>
KVM: x86/mmu: Fix race condition in direct_page_fault

Lin Ma <[email protected]>
io_uring/poll: fix poll_refs race with cancelation

Pavel Begunkov <[email protected]>
io_uring: make poll refs more robust

Pavel Begunkov <[email protected]>
io_uring: cmpxchg for poll arm refs release

Pavel Begunkov <[email protected]>
io_uring: fix tw losing poll events

Pavel Begunkov <[email protected]>
io_uring: update res mask in io_poll_check_events

Steven Rostedt (Google) <[email protected]>
tracing: Free buffers when a used dynamic event is removed

Steven Rostedt (Google) <[email protected]>
tracing: Fix race where histograms can be called before the event

Daniel Bristot de Oliveira <[email protected]>
tracing/osnoise: Fix duration type

Janusz Krzysztofik <[email protected]>
drm/i915: Never return 0 if not all requests retired

Janusz Krzysztofik <[email protected]>
drm/i915: Fix negative value passed as remaining time

Leo Liu <[email protected]>
drm/amdgpu: enable Vangogh VCN indirect sram mode

Lee Jones <[email protected]>
drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame

Adrian Hunter <[email protected]>
mmc: sdhci: Fix voltage switch delay

Wenchao Chen <[email protected]>
mmc: sdhci-sprd: Fix no reset data and command after voltage switch

Sebastian Falbesoner <[email protected]>
mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check

Christian Löhle <[email protected]>
mmc: core: Fix ambiguous TRIM and DISCARD arg

Ye Bin <[email protected]>
mmc: mmc_test: Fix removal of debugfs file

Goh, Wei Sheng <[email protected]>
net: stmmac: Set MAC's flow control register to reflect current settings

Linus Torvalds <[email protected]>
v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails

Andy Shevchenko <[email protected]>
pinctrl: intel: Save and restore pins in "direct IRQ" mode

Pawan Gupta <[email protected]>
x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3

ZhangPeng <[email protected]>
nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()

Tiezhu Yang <[email protected]>
tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"

Steven Rostedt (Google) <[email protected]>
error-injection: Add prompt for function error injection

Takashi Sakamoto <[email protected]>
ALSA: dice: fix regression for Lexicon I-ONIX FW810S

Björn Töpel <[email protected]>
riscv: mm: Proper page permissions after initmem free

Jisheng Zhang <[email protected]>
riscv: vdso: fix section overlapping under some conditions

Yang Yingliang <[email protected]>
hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()

Phil Auld <[email protected]>
hwmon: (coretemp) Check for null before removing sysfs attrs

Yoshihiro Shimoda <[email protected]>
net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed

Zhengchao Shao <[email protected]>
sctp: fix memory leak in sctp_stream_outq_migrate()

Willem de Bruijn <[email protected]>
packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE

Shigeru Yoshida <[email protected]>
net: tun: Fix use-after-free in tun_detach()

David Howells <[email protected]>
afs: Fix fileserver probe RTT handling

Yang Yingliang <[email protected]>
net: mdiobus: fix unbalanced node reference count

YueHaibing <[email protected]>
net: hsr: Fix potential use-after-free

Xin Long <[email protected]>
tipc: re-fetch skb cb after tipc_msg_validate

Jerry Ray <[email protected]>
dsa: lan9303: Correct stat name

M Chetan Kumar <[email protected]>
net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type

M Chetan Kumar <[email protected]>
net: wwan: iosm: fix kernel test robot reported error

Yuri Karpov <[email protected]>
net: ethernet: nixge: fix NULL dereference

Wang Hai <[email protected]>
net/9p: Fix a potential socket leak in p9_socket_open

Yuan Can <[email protected]>
net: net_netdev: Fix error handling in ntb_netdev_init_module()

Zhang Changzhong <[email protected]>
net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe()

Yang Yingliang <[email protected]>
net: phy: fix null-ptr-deref while probe() failed

Lorenzo Bianconi <[email protected]>
wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration

Johannes Berg <[email protected]>
wifi: cfg80211: don't allow multi-BSSID in S1G

Johannes Berg <[email protected]>
wifi: cfg80211: fix buffer overflow in elem comparison

Izabela Bakollari <[email protected]>
aquantia: Do not purge addresses when setting the number of rings

Duoming Zhou <[email protected]>
qlcnic: fix sleep-in-atomic-context bugs caused by msleep

Jiasheng Jiang <[email protected]>
can: m_can: Add check for devm_clk_get

Zhang Changzhong <[email protected]>
can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods

Zhang Changzhong <[email protected]>
can: etas_es58x: es58x_init_netdev(): free netdev when register_candev()

Zhang Changzhong <[email protected]>

    can: cc770: cc770_isa_probe(): add missing free_cc770dev()

Zhang Changzhong <[email protected]>

    can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()

Roi Dayan <[email protected]>
net/mlx5e: Fix use-after-free when reverting termination table

YueHaibing <[email protected]>
net/mlx5: Fix uninitialized variable bug in outlen_write()

YueHaibing <[email protected]>
net/mlx5: DR, Fix uninitialized var warning

Yevgeny Kliteynik <[email protected]>
net/mlx5: DR, Rename list field in matcher struct to list_node

Wang Hai <[email protected]>
e100: Fix possible use after free in e100_xmit_prepare

Yuan Can <[email protected]>
iavf: Fix error handling in iavf_init_module()

Minghao Chi <[email protected]>
iavf: remove redundant ret variable

Yuan Can <[email protected]>
fm10k: Fix error handling in fm10k_init_module()

Shang XiaoJing <[email protected]>
i40e: Fix error handling in i40e_init_module()

Shang XiaoJing <[email protected]>
ixgbevf: Fix resource leak in ixgbevf_init_module()

Yang Yingliang <[email protected]>
of: property: decrement node refcount in of_fwnode_get_reference_args()

Wei Yongjun <[email protected]>
nvmem: rmem: Fix return value check in rmem_read()

Xu Kuohai <[email protected]>
bpf: Do not copy spin lock field from user in bpf_selem_alloc

Gaosheng Cui <[email protected]>
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails

Yang Yingliang <[email protected]>
hwmon: (i5500_temp) fix missing pci_disable_device()

Ninad Malwade <[email protected]>
hwmon: (ina3221) Fix shunt sum critical calculation

Derek Nguyen <[email protected]>
hwmon: (ltc2947) fix temperature scaling

Hou Tao <[email protected]>
libbpf: Handle size overflow for ringbuf mmap

Michael Grzeschik <[email protected]>
ARM: at91: rm9200: fix usb device clock id

Srikar Dronamraju <[email protected]>
scripts/faddr2line: Fix regression in name resolution on ppc64le

Hou Tao <[email protected]>
bpf, perf: Use subprog name when reporting subprog ksymbol

Paul Gazzillo <[email protected]>
iio: light: rpr0521: add missing Kconfig dependencies

Wei Yongjun <[email protected]>

    iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw

Wei Yongjun <[email protected]>
iio: health: afe4403: Fix oob read in afe4403_read_raw

Alex Deucher <[email protected]>
drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read"

Claudio Suarez <[email protected]>
drm/amdgpu: update drm_display_info correctly when the edid is read

Lyude Paul <[email protected]>
drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code

ChenXiaoSong <[email protected]>
btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()

Nikolay Borisov <[email protected]>
btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker

Frieder Schrempf <[email protected]>
spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock

Anand Jain <[email protected]>
btrfs: free btrfs_path before copying inodes to userspace

David Sterba <[email protected]>
btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino

Gao Xiang <[email protected]>
erofs: fix order >= MAX_ORDER warning due to crafted negative i_size

Chris Wilson <[email protected]>
drm/i915/gt: Use i915_vm_put on ppgtt_create error paths

Maarten Lankhorst <[email protected]>
drm/i915: Create a dummy object for gen6 ppgtt

Catalin Marinas <[email protected]>
arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored

-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm/boot/dts/at91rm9200.dtsi                  |   2 +-
 arch/arm64/kernel/mte.c                            |   9 +-
 arch/arm64/mm/mteswap.c                            |   7 +-
 arch/riscv/include/asm/asm.h                       |   1 +
 arch/riscv/include/asm/efi.h                       |   6 +-
 arch/riscv/include/asm/pgalloc.h                   |  11 +-
 arch/riscv/kernel/entry.S                          |  13 ++
 arch/riscv/kernel/machine_kexec.c                  |  35 ++++++
 arch/riscv/kernel/setup.c                          |   9 +-
 arch/riscv/kernel/traps.c                          |  18 +++
 arch/riscv/kernel/vdso/Makefile                    |   1 +
 arch/x86/include/asm/nospec-branch.h               |   2 +-
 arch/x86/kernel/cpu/bugs.c                         |  21 ++--
 arch/x86/kernel/process.c                          |   2 +-
 arch/x86/kvm/mmu/mmu.c                             |  12 +-
 drivers/acpi/numa/hmat.c                           |  27 ++--
 drivers/char/tpm/tpm-interface.c                   |   5 +-
 drivers/clk/at91/at91rm9200.c                      |   2 +-
 drivers/clocksource/timer-riscv.c                  |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c     |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.c            |   3 +
 drivers/gpu/drm/amd/display/Kconfig                |   7 ++
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |   3 +-
 drivers/gpu/drm/drm_dp_mst_topology.c              |   2 +-
 drivers/gpu/drm/i915/gem/i915_gem_internal.c       |  44 ++++---
 drivers/gpu/drm/i915/gt/gen6_ppgtt.c               | 137 ++++++++++++---------
 drivers/gpu/drm/i915/gt/gen6_ppgtt.h               |   1 -
 drivers/gpu/drm/i915/gt/gen8_ppgtt.c               |  56 +++++----
 drivers/gpu/drm/i915/gt/intel_gt.c                 |   9 +-
 drivers/gpu/drm/i915/gt/intel_gt_requests.c        |   2 +-
 drivers/gpu/drm/i915/gt/intel_gtt.c                |   3 +
 drivers/gpu/drm/i915/i915_drv.h                    |   4 +
 drivers/hwmon/coretemp.c                           |   9 +-
 drivers/hwmon/i5500_temp.c                         |   2 +-
 drivers/hwmon/ibmpex.c                             |   1 +
 drivers/hwmon/ina3221.c                            |   4 +-
 drivers/hwmon/ltc2947-core.c                       |   2 +-
 drivers/i2c/busses/i2c-imx.c                       |   6 +-
 drivers/i2c/busses/i2c-npcm7xx.c                   |  11 +-
 drivers/iio/health/afe4403.c                       |   5 +-
 drivers/iio/health/afe4404.c                       |  12 +-
 drivers/iio/light/Kconfig                          |   2 +
 drivers/input/touchscreen/raydium_i2c_ts.c         |   4 +-
 drivers/iommu/intel/dmar.c                         |   1 +
 drivers/iommu/intel/iommu.c                        |   4 +-
 drivers/media/common/videobuf2/frame_vector.c      |  53 ++------
 drivers/mmc/core/core.c                            |   9 +-
 drivers/mmc/core/mmc_test.c                        |   3 +-
 drivers/mmc/host/sdhci-esdhc-imx.c                 |   2 +-
 drivers/mmc/host/sdhci-sprd.c                      |   4 +-
 drivers/mmc/host/sdhci.c                           |  61 +++++++--
 drivers/mmc/host/sdhci.h                           |   2 +
 drivers/net/can/cc770/cc770_isa.c                  |  10 +-
 drivers/net/can/m_can/m_can.c                      |   2 +-
 drivers/net/can/m_can/m_can_pci.c                  |   9 +-
 drivers/net/can/sja1000/sja1000_isa.c              |  10 +-
 drivers/net/can/usb/etas_es58x/es58x_core.c        |   5 +-
 drivers/net/dsa/lan9303-core.c                     |   2 +-
 .../net/ethernet/aquantia/atlantic/aq_ethtool.c    |   5 +-
 drivers/net/ethernet/aquantia/atlantic/aq_main.c   |   4 +-
 drivers/net/ethernet/aquantia/atlantic/aq_main.h   |   2 +
 drivers/net/ethernet/intel/e100.c                  |   5 +-
 drivers/net/ethernet/intel/fm10k/fm10k_main.c      |  10 +-
 drivers/net/ethernet/intel/i40e/i40e_main.c        |  11 +-
 drivers/net/ethernet/intel/iavf/iavf_main.c        |   8 +-
 drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c  |  10 +-
 drivers/net/ethernet/mellanox/mlx5/core/cmd.c      |   4 +-
 .../mellanox/mlx5/core/eswitch_offloads_termtbl.c  |   2 +
 .../mellanox/mlx5/core/steering/dr_matcher.c       |  26 ++--
 .../mellanox/mlx5/core/steering/dr_table.c         |   7 +-
 .../mellanox/mlx5/core/steering/dr_types.h         |   2 +-
 drivers/net/ethernet/ni/nixge.c                    |  29 ++---
 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c    |   4 +-
 drivers/net/ethernet/renesas/ravb_main.c           |   1 +
 drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c  |   2 +
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  12 +-
 drivers/net/ethernet/ti/am65-cpsw-nuss.c           |   2 +-
 drivers/net/mdio/fwnode_mdio.c                     |   2 +-
 drivers/net/ntb_netdev.c                           |   9 +-
 drivers/net/phy/phy_device.c                       |   2 +
 drivers/net/tun.c                                  |   4 +-
 drivers/net/wwan/iosm/iosm_ipc_mux_codec.c         |   3 +-
 drivers/net/wwan/iosm/iosm_ipc_protocol.h          |   2 +-
 drivers/nvme/host/core.c                           |   2 +-
 drivers/nvme/host/multipath.c                      |   3 +
 drivers/nvmem/rmem.c                               |   4 +-
 drivers/of/property.c                              |   4 +-
 drivers/pinctrl/intel/pinctrl-intel.c              |  27 +++-
 drivers/pinctrl/pinctrl-single.c                   |   2 +-
 drivers/spi/spi-imx.c                              |   3 +-
 drivers/tty/serial/stm32-usart.c                   | 131 ++++++++++++++------
 drivers/tty/serial/stm32-usart.h                   |   1 +
 fs/afs/fs_probe.c                                  |   4 +-
 fs/btrfs/backref.c                                 |  25 +++-
 fs/btrfs/backref.h                                 |   3 +-
 fs/btrfs/ioctl.c                                   |  38 ++----
 fs/btrfs/qgroup.c                                  |  22 ++--
 fs/erofs/inode.c                                   |   2 +-
 fs/io_uring.c                                      |  57 +++++++--
 fs/nilfs2/dat.c                                    |   7 ++
 include/linux/mmc/mmc.h                            |   2 +-
 include/linux/swap.h                               |   1 -
 include/net/sctp/stream_sched.h                    |   2 +
 ipc/sem.c                                          |   3 +-
 kernel/bpf/bpf_local_storage.c                     |   2 +-
 kernel/events/core.c                               |   2 +-
 kernel/sysctl.c                                    |  30 ++---
 kernel/trace/trace_dynevent.c                      |   2 +
 kernel/trace/trace_events.c                        |  11 +-
 kernel/trace/trace_events_hist.c                   |   3 +
 kernel/trace/trace_osnoise.c                       |   6 +-
 lib/Kconfig.debug                                  |  14 ++-
 mm/compaction.c                                    |  67 +++++++---
 mm/vmscan.c                                        | 101 +++------------
 net/9p/trans_fd.c                                  |   4 +-
 net/hsr/hsr_forward.c                              |   5 +-
 net/ipv4/fib_semantics.c                           |  10 +-
 net/mac80211/airtime.c                             |   3 +
 net/packet/af_packet.c                             |   6 +-
 net/sctp/stream.c                                  |  25 ++--
 net/sctp/stream_sched.c                            |   5 +
 net/sctp/stream_sched_prio.c                       |  19 +++
 net/sctp/stream_sched_rr.c                         |   5 +
 net/tipc/crypto.c                                  |   3 +
 net/wireless/scan.c                                |  10 +-
 scripts/faddr2line                                 |   7 +-
 sound/firewire/dice/dice-stream.c                  |  12 +-
 sound/soc/soc-ops.c                                |   2 +-
 tools/lib/bpf/ringbuf.c                            |  12 +-
 tools/testing/selftests/net/fib_nexthops.sh        |  30 +++++
 tools/vm/slabinfo-gnuplot.sh                       |   4 +-
 132 files changed, 1052 insertions(+), 558 deletions(-)