Linux Kernel 5.15.217

The 120 most recent commits in this release — the full changelog is longer:

• Linux 5.15.217
• ring-buffer: Use current_context for safe per-CPU buffer swap
• ring-buffer: Remove jump to out label in ring_buffer_swap_cpu()
• jiffies: Cast to unsigned long in secs_to_jiffies() conversion
• drm/virtio: Unlock reservations on dma_resv_reserve_fences() error
• drm/vmwgfx: Reserve fence slots on buffer objects in cotables
• udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()
• binfmt_misc: use exe_file_deny_write_access() for the interpreter clone
• net/x25: fix use-after-free of the socket by its timers
• net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
• af_packet: Don't send zero-byte data in tpacket_snd().
• ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
• net: packet: fix wrong transport_header when sending VLAN-tagged frame
• netfilter: ipset: fix list type element drift bug
• netfilter: flowtable: publish GC-visible tuple last
• netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
• netfilter: ipset: fix refcount race between list:set GC and swap
• crypto: ccm - Set rfc4309 maxauthsize from child
• arm64: tegra: Add EL2 virtual timer interrupt for Tegra194
• net: smc: fix splice entry lifetime imbalance in smc_rx_splice
• net/smc: rdma write inline if qp has sufficient inline space
• net: atlantic: free stranded TX buffers on ring deinit
• net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
• openvswitch: move key and ovs_cb update out of handle_fragments
• net: sched: use skb_ip_totlen and iph_totlen
• openvswitch: use skb_ip_totlen in conntrack
• net: add a couple of helpers for iph tot_len
• mm/ptdump: always stabilise against page table freeing using init_mm
• sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
• drm/amd/pm: fix torn gpu metrics reads
• ice: wait for reset completion in ice_resume()
• jiffies: Define secs_to_jiffies()
• can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure
• i2c: iproc: reset bus after timeout if START_BUSY is stuck
• i2c: bcm-iproc: remove printout on handled timeouts
• i2c: imx: Fix slave registration race and error handling
• binfmt_misc: restore write access when removing an entry
• fs: don't block write during exec on pre-content watched files
• fsnotify: opt-in for permission events at file open time
• ice: fix memory leak in ice_lbtest_prepare_rings()
• ice: fix VF interrupts cleanup
• scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write
• scsi: scsi_debug: Rename zone type constants
• scsi: sd: sd_zbc: Return early in sd_zbc_check_zoned_characteristics()
• scsi: sd: sd_zbc: Introduce struct zoned_disk_info
• scsi: sd: sd_zbc: Use logical blocks as unit when querying zones
• scsi: sd: sd_zbc: Improve source code documentation
• net: pktgen: fix proc entry use-after-free
• net: pktgen: fix code style (WARNING: Block comments)
• igc: remove napi_synchronize() in igc_down()
• wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()
• ksmbd: reject repeated SMB2 NEGOTIATE requests
• ksmbd: conn lock to serialize smb2 negotiate
• mm/vmstat: fold stranded per-cpu node stats when a node comes online
• ksmbd: validate minimum PDU size for transform requests
• smb/server: fix minimum SMB2 PDU size
• smb/server: fix minimum SMB1 PDU size
• ksmbd: rename smb2_get_msg to smb_get_msg
• super: fix emergency thaw deadlock on frozen block devices
• ftrace: Add global mutex to serialize trace_parser access
• net/sched: serialize qdisc_rtab_list against concurrent get/put
• ksmbd: defer destroy_previous_session() until after NTLM authentication
• libceph: fix two unsafe bare decodes in decode_lockers()
• ceph: fix hanging __ceph_get_caps() with stale mds_wanted
• ceph: print cluster fsid and client global_id in all debug logs
• ceph: rename _to_client() to _to_fs_client()
• libceph: add doutc and *_client debug macros support
• libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE
• libceph: Amend checking to fix make W=1 build breakage
• ceph: avoid fs reclaim while using current->journal_info
• sctp: avoid auth_enable sysctl UAF during netns teardown
• mptcp: decrement subflows counter on failed passive join
• mptcp: fix subflow accounting on close
• mptcp: cleanup MPJ subflow list handling
• serial: sc16is7xx: implement gpio get_direction() callback
• serial: sc16is7xx: fix regression with GPIO configuration
• serial: sc16is7xx: remove obsolete out_thread label
• serial: sc16is7xx: Fill in rs485_supported
• sc16is7xx: Properly resume TX after stop
• wifi: brcmfmac: set F2 blocksize to 256 for BCM43752
• wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW)
• serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
• serial: 8250_mid: Remove unneeded test for ->setup() presence
• wifi: brcmfmac: drain bus_reset work on device removal
• ALSA: seq: close a re-opened queue timer in the destructor
• media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()
• media: v4l: async: Set owner for async sub-devices
• wifi: ath6kl: fix use-after-free in aggr_reset_state()
• media: imx219: Fix maximum frame length in lines
• media: i2c: imx219: Rename VTS to FRM_LENGTH
• media: i2c: imx219: Correct the minimum vblanking value
• media: i2c: imx219: Drop IMX219_VTS_* macros
• media: marvell-cam: fix missing pci_disable_device() on remove
• drm/i915/hdcp: require monotonically increasing seq_num_v
• drm/i915/hdcp: check streams[] bounds before overflow
• drm/i915/vrr: require valid min/max vfreq for VRR
• media: aspeed: fix missing of_reserved_mem_device_release() on probe failure
• drm/virtio: bound EDID block reads to the response buffer
• drm/virtio: Return proper error codes instead of -1
• drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT
• drm/tegra: fbdev: Remove offset into framebuffer memory
• drm/displayid: fix Tiled Display Topology ID size
• drm/virtio: use uninterruptible resv lock for plane updates
• dma-buf/drivers: make reserving a shared slot mandatory v4
• drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers
• drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers
• usb: gadget: f_tcm: synchronize delayed set_alt with teardown
• drm/dp/mst: fix buffer overflows in sideband chunk accumulation
• fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
• octeontx2-pf: fix SQB pointer leak on init failure
• net: ipa: fix SMEM state handle leaks in SMP2P init
• espintcp: use sk_msg_free_partial to fix partial send
• bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()
• bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c
• bootconfig: do not put quotes on cmdline items unless necessary
• net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked
• net/sched: taprio: avoid calling child->ops->dequeue(child) twice
• gpio: tegra: do not call pinctrl for GPIO direction
• treewide: rename pinctrl_gpio_direction_output_new()
• octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF