6191e863ca3e Linux 5.15.84-xanmod1 dab4ec1180f0 Merge tag 'v5.15.84' into 5.15 d68f50bfb00f Linux 5.15.84 972707bae3d7 net: fec: properly guard irq coalesce setup 289721fe0993 ASoC: ops: Correct bounds check for second channel on SX controls de0866b94a64 nvme-pci: clear the prp2 field when not used 8bffa95ac19f perf: Fix perf_pending_task() UaF 825bd2af4227 ASoC: cs42l51: Correct PGA Volume minimum value 91582b3a1ab2 net: fec: don't reset irq coalesce settings to defaults on "ip link up" c772dab247f1 can: mcba_usb: Fix termination command argument aa822de7de3b can: sja1000: fix size of OCR_MODE_MASK define 09e08740d78c pinctrl: meditatek: Startup with the IRQs disabled 172a95026f06 libbpf: Use page size as max_entries when probing ring buffer map cf611d786796 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() a74b88e17025 ASoC: fsl_micfil: explicitly clear CHnF flags afac1e7d78eb ASoC: fsl_micfil: explicitly clear software reset bit 9d933af8fef3 nfp: fix use-after-free in area_cache_get() e1a4f5880d00 vfs: fix copy_file_range() averts filesystem freeze protection 86e28ed25b00 x86/vdso: Conditionally export __vdso_sgx_enter_enclave() fd6d66840b42 Linux 5.15.83 f895511de9d2 io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() f435c66d2336 io_uring: move to separate directory d9e1e5d8a74c block: move CONFIG_BLOCK guard to top Makefile e5c0bc4ff5b0 can: esd_usb: Allow REC and TEC to return to zero db6343a5b0d9 s390/qeth: fix use-after-free in hsci a56c1cebe4a0 s390/qeth: fix various format strings a6dba316c93e macsec: add missing attribute validation for offload 40500f1f4745 net: mvneta: Fix an out of bounds check b9274dbe3999 net: thunderbolt: fix memory leak in tbnet_open() 7390c70bd431 ipv6: avoid use-after-free in ip6_fragment() 1beb475892f7 net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() b08412a9cf26 net: phy: mxl-gpy: fix version reporting dec5abd91abc xen/netback: fix build warning 54d830e24247 dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() c7adcbd0fd3f ethernet: aeroflex: fix potential skb leak in greth_init_rings() d962d42d6376 tipc: call tipc_lxc_xmit without holding node_read_lock f3b5dda26cd0 net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() 5dab6fa068d7 ipv4: Fix incorrect route flushing when table ID 0 is used ac566bd5770f ipv4: Fix incorrect route flushing when source address is deleted af4ccae4b704 tipc: Fix potential OOB in tipc_link_proto_rcv() b8ce0e6f9f88 net: hisilicon: Fix potential use-after-free in hix5hd2_rx() 16854177745a net: mdio: fix unbalanced fwnode reference count in mdio_device_release() 6f4798ac9c9e net: hisilicon: Fix potential use-after-free in hisi_femac_rx() 114e65a22189 net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq 51c04945756a net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue 99eec0a766f9 ip_gre: do not report erspan version on GRE interface 2891957853f2 net: stmmac: fix "snps,axi-config" node property parsing 5cb8f1a784fd gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() b8c2f0392d1d nvme initialize core quirks before calling nvme_init_subsystem 908b2da426fe NFC: nci: Bounds check struct nfc_target arrays d841cc156304 i40e: Disallow ip4 and ip6 l4_4_bytes 625a13850b31 i40e: Fix for VF MAC address 0 5538794dbd42 i40e: Fix not setting default xps_cpus after reset a6b30598fec8 net: mvneta: Prevent out of bounds read in mvneta_config_rss() e6e897d4fe2f xen-netfront: Fix NULL sring after live migration eefd8953a748 octeontx2-pf: Fix potential memory leak in otx2_init_tc() f88acaed07b1 net: mdiobus: fix double put fwnode in the error path cc62d76928e0 net: mdiobus: fwnode_mdiobus_register_phy() rework error handling ea113b570eee net: encx24j600: Fix invalid logic in reading of MISTAT register 8aae746d065c net: encx24j600: Add parentheses to fix precedence a110287ef4a4 mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() e046421bed5a selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload 4fa8988a36d5 net: dsa: sja1105: Check return value b35be171dfe6 net: dsa: hellcreek: Check return value a4c342e645d6 net: dsa: ksz: Check return value edf7284a9829 Bluetooth: Fix not cleanup led when bt_init fails 3322193949ac Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() 6c88c764e0c4 vmxnet3: use correct intrConf reference when using extended queues 5ad0d85757f8 vmxnet3: correctly report encapsulated LRO packet 5c014eb0ed6c af_unix: Get user_ns from in_skb in unix_diag_get_exact(). 807a01a32979 drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 eb96fd3983b2 net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835 16eb678bca8e igb: Allocate MSI-X vector when testing 34c6367c946c e1000e: Fix TX dispatch condition 4271515f189b gpio: amd8111: Fix PCI device reference count leak d57b60e9b355 drm/bridge: ti-sn65dsi86: Fix output polarity setting bug f8b29656013c netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark 246bcd05ba6c ca8210: Fix crash by zero initializing data 80dad8df5fc2 ieee802154: cc2520: Fix error return code in cc2520_hw_init() dd9dcfb85c65 drm/vmwgfx: Fix race issue calling pin_user_pages 7b09ba9036b2 netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one 6daaa84b6214 gpiolib: fix memory leak in gpiochip_setup_dev() 1a1075d37108 gpiolib: check the 'ngpios' property in core gpiolib code 70c5515c1c30 gpiolib: improve coding style for local variables 3b714f25fc59 clk: Fix pointer casting to prevent oops in devm_clk_release() c142cba37de2 can: af_can: fix NULL pointer dereference in can_rcv_filter 104bb1f67e3c HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 f755d11c55b2 HID: core: fix shift-out-of-bounds in hid_report_raw_event 2d4b310c32d4 HID: hid-lg4ff: Add check for empty lbuf 5e8021ae0865 HID: usbhid: Add ALWAYS_POLL quirk for some mice 5e88c6f4aaa7 net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() 1074fefce9cc drm/shmem-helper: Avoid vm_open error paths 83e3da8bb92f drm/shmem-helper: Remove errant put in error path 249011f4c3b8 drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend 1e4fe9a1546f drm/vmwgfx: Don't use screen objects when SEV is active f6550976fe22 KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field fe50a9bbeb1f net: mana: Fix race on per-CQ variable napi work_done a49894a5ac36 Bluetooth: Fix crash when replugging CSR fake controllers 1dee2b504771 Bluetooth: btusb: Add debug message for CSR controllers 3ac29732a2ff mm/gup: fix gup_pud_range() for dax aad8bbd17a1d memcg: fix possible use-after-free in memcg_write_event_control() 6fb8bc29bfa8 media: v4l2-dv-timings.c: fix too strict blanking sanity checks a4c575541eeb Revert "ARM: dts: imx7: Fix NAND controller size-cells" 28abc1145924 soundwire: intel: Initialize clock stop timeout 22d800b378e4 media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() 5d0fa6fc8899 xen/netback: don't call kfree_skb() with interrupts disabled 4422241ceffc xen/netback: do some code cleanup 0fe29bd92594 xen/netback: Ensure protocol headers don't fall in the non-linear area f01677be31d1 drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read() ee2536830b16 cifs: fix use-after-free caused by invalid pointer `hostname` dc62f05f666c rtc: cmos: avoid UIP when reading alarm time 48ea4199af85 rtc: cmos: avoid UIP when writing alarm time 3f52afc6ed93 rtc: mc146818-lib: extract mc146818_avoid_UIP 1a3f8c6cd29d mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths 79ad784c9d21 mm/khugepaged: fix GUP-fast interaction by sending IPI d15cd6de0123 mm/khugepaged: take the right locks for page table retraction 26f084e55466 net: usb: qmi_wwan: add u-blox 0x1342 composition 029a7f1c5d70 9p/xen: check logical size for buffer size b398832893c8 usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer e70a5724400a fbcon: Use kzalloc() in fbcon_prepare_logo() fd3768597d2a regulator: twl6030: fix get status of twl6032 regulators 9f74b9aa8d58 ASoC: soc-pcm: Add NULL check in BE reparenting dae93f4168c4 btrfs: send: avoid unaligned encoded writes when attempting to clone range f54e1edf579d selftests/net: Find nettest in current directory fccd454129f6 ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event 542a563bb751 regulator: slg51000: Wait after asserting CS pin 3d1b5fde360e 9p/fd: Use P9_HDRSZ for header size fe2d44e86e96 ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions e945f3d809ed ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 c3b818c91a11 spi: mediatek: Fix DEVAPC Violation at KO Remove d9f0107be1a9 ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register 7ae0262748e5 ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation d81c62e3121f ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels 66717ad03b80 fs: use acquire ordering in __fget_light() 1222e2364ac7 ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name 996fb29b06b6 arm64: dts: rockchip: fix ir-receiver node names 752138ef89e8 ARM: dts: rockchip: fix ir-receiver node names 8045971e40cd arm: dts: rockchip: remove clock-frequency from rtc 5e9fb8013ac9 arm: dts: rockchip: fix node name for hym8563 rtc 2ed7137e911a arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series 5a1122e1a896 mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() 282f52c954a8 clk: Provide new devm_clk helpers for prepared and enabled clocks eb94a7a20f3c clk: generalize devm_clk_get() a bit d9790301361c Linux 5.15.82 48642f94311b proc: proc_skip_spaces() shouldn't think it is working on C strings 3eb9213f6612 proc: avoid integer type confusion in get_proc_long 4a4073a2e2fe ipc/sem: Fix dangling sem_array access in semtimedop race 53b9b1201e34 Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() 571b6bbbf54d char: tpm: Protect tpm_pm_suspend with locks f39891cfe79b Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" a759057af728 ACPI: HMAT: Fix initiator registration for single-initiator systems da8a794d71ec ACPI: HMAT: remove unnecessary variable initialization 2d16161a2c98 i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set 950a05cb15e3 i2c: npcm7xx: Fix error handling in npcm_i2c_init() db3f8da033d9 serial: stm32: Deassert Transmit Enable on ->rs485_config() 45f628f4fd81 serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode c60eae5b1d0b serial: stm32: Factor out GPIO RTS toggling into separate function 041f8dc88292 ipv4: Fix route deletion when nexthop info is not specified 25174d91e4a3 ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference a0ad247e55ea selftests: net: fix nexthop warning cleanup double ip typo 532847b69c29 selftests: net: add delete nexthop route warning test e0783558817d Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled 723fa02e0e0a parisc: Increase FRAME_WARN to 2048 bytes on parisc b951ab4b35ba mm: migrate: fix THP's mapcount on isolation c5eda6029cf9 mm: __isolate_lru_page_prepare() in isolate_migratepages_block() bdb613ef179a iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() b6eea8b2e858 iommu/vt-d: Fix PCI device refcount leak in has_external_pci() 787d81d4eb15 nvme: fix SRCU protection of nvme_ns_head list 12f237200c16 riscv: kexec: Fixup irq controller broken in kexec crash path ac00301adb19 riscv: fix race when vmap stack overflow fa7a7d185ef3 riscv: Sync efi page table's kernel mappings before switching d86d69892545 pinctrl: single: Fix potential division by zero 98b15c706644 ASoC: ops: Fix bounds check for _sx controls f88a6977f8b9 KVM: x86/mmu: Fix race condition in direct_page_fault df4b177b4851 io_uring/poll: fix poll_refs race with cancelation 4b702b7d11ce io_uring: make poll refs more robust 1d58849ac26f io_uring: cmpxchg for poll arm refs release cd1981a8c30d io_uring: fix tw losing poll events 62321dc7b081 io_uring: update res mask in io_poll_check_events 417d5ea6e735 tracing: Free buffers when a used dynamic event is removed 52fc245d150c tracing: Fix race where histograms can be called before the event cb2b0612cd25 tracing/osnoise: Fix duration type 615a996ff397 drm/i915: Never return 0 if not all requests retired 01a2b25ef2cd drm/i915: Fix negative value passed as remaining time ff1591ba33b8 drm/amdgpu: enable Vangogh VCN indirect sram mode ac2d7fa90848 drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame 57ee7bc4c60a mmc: sdhci: Fix voltage switch delay bb8f8095143e mmc: sdhci-sprd: Fix no reset data and command after voltage switch 4c7681c1a52f mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check 01dbe4db590a mmc: core: Fix ambiguous TRIM and DISCARD arg 738946e35504 mmc: mmc_test: Fix removal of debugfs file 635d0517348e net: stmmac: Set MAC's flow control register to reflect current settings 9132dcdf3bf6 v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails 76ad884be092 pinctrl: intel: Save and restore pins in "direct IRQ" mode 41296b85fafa x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 33021419fd81 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() 2e44dd9a8dd6 tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" b60a8ad771fd error-injection: Add prompt for function error injection 757eb00c4c40 ALSA: dice: fix regression for Lexicon I-ONIX FW810S a1a96a6f302c riscv: mm: Proper page permissions after initmem free 823df3607d8b riscv: vdso: fix section overlapping under some conditions 6e035d5a2a6b hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() 7692700ac818 hwmon: (coretemp) Check for null before removing sysfs attrs 9b5836b9c4b0 net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed 0dfb9a566327 sctp: fix memory leak in sctp_stream_outq_migrate() fcb3e0216156 packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE 04b995e96322 net: tun: Fix use-after-free in tun_detach() 43ca0adf79e5 afs: Fix fileserver probe RTT handling 543d917f691a net: mdiobus: fix unbalanced node reference count dca370e575d9 net: hsr: Fix potential use-after-free 1daec0815655 tipc: re-fetch skb cb after tipc_msg_validate 16a64dc26545 dsa: lan9303: Correct stat name 766086ea8ca7 net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type c667751a4265 net: wwan: iosm: fix kernel test robot reported error 9c584d6d9cfb net: ethernet: nixge: fix NULL dereference 8782b32ef867 net/9p: Fix a potential socket leak in p9_socket_open 6fc9425bff4b net: net_netdev: Fix error handling in ntb_netdev_init_module() 3bc893ef36f9 net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() 7730904f50c7 net: phy: fix null-ptr-deref while probe() failed 59b54f0563b6 wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration dc0853f8b502 wifi: cfg80211: don't allow multi-BSSID in S1G 88a6fe370788 wifi: cfg80211: fix buffer overflow in elem comparison 08fff7aaeb7e aquantia: Do not purge addresses when setting the number of rings 2a7aa52573da qlcnic: fix sleep-in-atomic-context bugs caused by msleep 7b734d26f037 can: m_can: Add check for devm_clk_get ea8dc27bb044 can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods b1d2a8e02acc can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() e53da04e37e4 can: cc770: cc770_isa_probe(): add missing free_cc770dev() d452a71995cb can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() 372eb550faa0 net/mlx5e: Fix use-after-free when reverting termination table 839eeab03c83 net/mlx5: Fix uninitialized variable bug in outlen_write() 34feea3bfb37 net/mlx5: DR, Fix uninitialized var warning 3485ef2aabeb net/mlx5: DR, Rename list field in matcher struct to list_node 9fc27d22cdb9 e100: Fix possible use after free in e100_xmit_prepare 0d9f5bd54b91 iavf: Fix error handling in iavf_init_module() b0b2b9050c17 iavf: remove redundant ret variable 69501d820508 fm10k: Fix error handling in fm10k_init_module() 5e3657dede36 i40e: Fix error handling in i40e_init_module() 7109e9410992 ixgbevf: Fix resource leak in ixgbevf_init_module() 196ea810e21c of: property: decrement node refcount in of_fwnode_get_reference_args() 36164db278a8 nvmem: rmem: Fix return value check in rmem_read() e3761831674a bpf: Do not copy spin lock field from user in bpf_selem_alloc 45f6e8186374 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails a90251376c3e hwmon: (i5500_temp) fix missing pci_disable_device() eeb31b828daf hwmon: (ina3221) Fix shunt sum critical calculation 9514b95cac51 hwmon: (ltc2947) fix temperature scaling 0140e079a420 libbpf: Handle size overflow for ringbuf mmap 06d5790e7df5 ARM: at91: rm9200: fix usb device clock id d074f173fbd1 scripts/faddr2line: Fix regression in name resolution on ppc64le ee3d37d79610 bpf, perf: Use subprog name when reporting subprog ksymbol ec02fc0a4101 iio: light: rpr0521: add missing Kconfig dependencies f7419fc42afc iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw e7e76a77aabe iio: health: afe4403: Fix oob read in afe4403_read_raw ebdca90efbb5 drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" c365d3c3e512 drm/amdgpu: update drm_display_info correctly when the edid is read df5346466e51 drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code 044da1a371a0 btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() da86809ab822 btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker 5d66eadc1cc3 spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock 6b4544a13179 btrfs: free btrfs_path before copying inodes to userspace c7ae3becee72 btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino acc2f40b980c erofs: fix order >= MAX_ORDER warning due to crafted negative i_size ca9f27448af0 drm/i915/gt: Use i915_vm_put on ppgtt_create error paths c2f2972889eb drm/i915: Create a dummy object for gen6 ppgtt 918002bdbe43 arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored