[PATCH 5.4 00/67] 5.4.227-rc1 review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 5.4.227 release.
There are 67 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed, 14 Dec 2022 13:08:57 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.227-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 5.4.227-rc1

Frank Jungclaus <frank.jungclaus@esd.eu>
    can: esd_usb: Allow REC and TEC to return to zero

Dan Carpenter <error27@gmail.com>
    net: mvneta: Fix an out of bounds check

Eric Dumazet <edumazet@google.com>
    ipv6: avoid use-after-free in ip6_fragment()

Yang Yingliang <yangyingliang@huawei.com>
    net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()

Juergen Gross <jgross@suse.com>
    xen/netback: fix build warning

Zhang Changzhong <zhangchangzhong@huawei.com>
    ethernet: aeroflex: fix potential skb leak in greth_init_rings()

Ido Schimmel <idosch@nvidia.com>
    ipv4: Fix incorrect route flushing when table ID 0 is used

Ido Schimmel <idosch@nvidia.com>
    ipv4: Fix incorrect route flushing when source address is deleted

YueHaibing <yuehaibing@huawei.com>
    tipc: Fix potential OOB in tipc_link_proto_rcv()

Liu Jian <liujian56@huawei.com>
    net: hisilicon: Fix potential use-after-free in hix5hd2_rx()

Liu Jian <liujian56@huawei.com>
    net: hisilicon: Fix potential use-after-free in hisi_femac_rx()

Yongqiang Liu <liuyongqiang13@huawei.com>
    net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq

Jisheng Zhang <jszhang@kernel.org>
    net: stmmac: fix "snps,axi-config" node property parsing

Pankaj Raghav <p.raghav@samsung.com>
    nvme initialize core quirks before calling nvme_init_subsystem

Kees Cook <keescook@chromium.org>
    NFC: nci: Bounds check struct nfc_target arrays

Przemyslaw Patynowski <przemyslawx.patynowski@intel.com>
    i40e: Disallow ip4 and ip6 l4_4_bytes

Sylwester Dziedziuch <sylwesterx.dziedziuch@intel.com>
    i40e: Fix for VF MAC address 0

Michal Jaron <michalx.jaron@intel.com>
    i40e: Fix not setting default xps_cpus after reset

Dan Carpenter <error27@gmail.com>
    net: mvneta: Prevent out of bounds read in mvneta_config_rss()

Lin Liu <lin.liu@citrix.com>
    xen-netfront: Fix NULL sring after live migration

Valentina Goncharenko <goncharenko.vp@ispras.ru>
    net: encx24j600: Fix invalid logic in reading of MISTAT register

Valentina Goncharenko <goncharenko.vp@ispras.ru>
    net: encx24j600: Add parentheses to fix precedence

Wei Yongjun <weiyongjun1@huawei.com>
    mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()

Zhengchao Shao <shaozhengchao@huawei.com>
    selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload

Artem Chernyshev <artem.chernyshev@red-soft.ru>
    net: dsa: ksz: Check return value

Chen Zhongjin <chenzhongjin@huawei.com>
    Bluetooth: Fix not cleanup led when bt_init fails

Wang ShaoBo <bobo.shaobowang@huawei.com>
    Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()

Kuniyuki Iwashima <kuniyu@amazon.com>
    af_unix: Get user_ns from in_skb in unix_diag_get_exact().

Akihiko Odaki <akihiko.odaki@daynix.com>
    igb: Allocate MSI-X vector when testing

Akihiko Odaki <akihiko.odaki@daynix.com>
    e1000e: Fix TX dispatch condition

Xiongfeng Wang <wangxiongfeng2@huawei.com>
    gpio: amd8111: Fix PCI device reference count leak

Qiqi Zhang <eddy.zhang@rock-chips.com>
    drm/bridge: ti-sn65dsi86: Fix output polarity setting bug

Hauke Mehrtens <hauke@hauke-m.de>
    ca8210: Fix crash by zero initializing data

Ziyang Xuan <william.xuanziyang@huawei.com>
    ieee802154: cc2520: Fix error return code in cc2520_hw_init()

Baolin Wang <baolin.wang@linux.alibaba.com>
    mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page

Oliver Hartkopp <socketcan@hartkopp.net>
    can: af_can: fix NULL pointer dereference in can_rcv_filter

ZhangPeng <zhangpeng362@huawei.com>
    HID: core: fix shift-out-of-bounds in hid_report_raw_event

Anastasia Belova <abelova@astralinux.ru>
    HID: hid-lg4ff: Add check for empty lbuf

Ankit Patel <anpatel@nvidia.com>
    HID: usbhid: Add ALWAYS_POLL quirk for some mice

Rob Clark <robdclark@chromium.org>
    drm/shmem-helper: Remove errant put in error path

Thomas Huth <thuth@redhat.com>
    KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field

John Starks <jostarks@microsoft.com>
    mm/gup: fix gup_pud_range() for dax

Tejun Heo <tj@kernel.org>
    memcg: fix possible use-after-free in memcg_write_event_control()

Hans Verkuil <hverkuil-cisco@xs4all.nl>
    media: v4l2-dv-timings.c: fix too strict blanking sanity checks

Rafał Miłecki <rafal@milecki.pl>
    Revert "net: dsa: b53: Fix valid setting for MDB entries"

Juergen Gross <jgross@suse.com>
    xen/netback: don't call kfree_skb() with interrupts disabled

Juergen Gross <jgross@suse.com>
    xen/netback: do some code cleanup

Ross Lagerwall <ross.lagerwall@citrix.com>
    xen/netback: Ensure protocol headers don't fall in the non-linear area

Jann Horn <jannh@google.com>
    mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths

Jann Horn <jannh@google.com>
    mm/khugepaged: fix GUP-fast interaction by sending IPI

Jann Horn <jannh@google.com>
    mm/khugepaged: take the right locks for page table retraction

Davide Tronchin <davide.tronchin.94@gmail.com>
    net: usb: qmi_wwan: add u-blox 0x1342 composition

Dominique Martinet <asmadeus@codewreck.org>
    9p/xen: check logical size for buffer size

Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
    fbcon: Use kzalloc() in fbcon_prepare_logo()

Andreas Kemnade <andreas@kemnade.info>
    regulator: twl6030: fix get status of twl6032 regulators

Srinivasa Rao Mandadapu <quic_srivasam@quicinc.com>
    ASoC: soc-pcm: Add NULL check in BE reparenting

Filipe Manana <fdmanana@suse.com>
    btrfs: send: avoid unaligned encoded writes when attempting to clone range

Kees Cook <keescook@chromium.org>
    ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event

Konrad Dybcio <konrad.dybcio@linaro.org>
    regulator: slg51000: Wait after asserting CS pin

GUO Zihua <guozihua@huawei.com>
    9p/fd: Use P9_HDRSZ for header size

Johan Jonker <jbx6244@gmail.com>
    ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188

Giulio Benetti <giulio.benetti@benettiengineering.com>
    ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation

Tomislav Novak <tnovak@fb.com>
    ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels

Johan Jonker <jbx6244@gmail.com>
    ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name

Johan Jonker <jbx6244@gmail.com>
    ARM: dts: rockchip: fix ir-receiver node names

Sebastian Reichel <sebastian.reichel@collabora.com>
    arm: dts: rockchip: fix node name for hym8563 rtc

FUKAUMI Naoki <naoki@radxa.com>
    arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series


-------------

Diffstat:

 Makefile                                           |    4 +-
 arch/arm/boot/dts/rk3036-evb.dts                   |    2 +-
 arch/arm/boot/dts/rk3188-radxarock.dts             |    2 +-
 arch/arm/boot/dts/rk3188.dtsi                      |    3 +-
 arch/arm/boot/dts/rk3288-evb-act8846.dts           |    2 +-
 arch/arm/boot/dts/rk3288-firefly.dtsi              |    2 +-
 arch/arm/boot/dts/rk3288-miqi.dts                  |    2 +-
 arch/arm/boot/dts/rk3288-rock2-square.dts          |    2 +-
 arch/arm/boot/dts/rk3xxx.dtsi                      |    7 +
 arch/arm/include/asm/perf_event.h                  |    2 +-
 arch/arm/include/asm/pgtable-nommu.h               |    6 -
 arch/arm/include/asm/pgtable.h                     |   16 +-
 arch/arm/mm/nommu.c                                |   19 +
 arch/arm64/boot/dts/rockchip/rk3399-rock-pi-4.dts  |    1 -
 arch/s390/kvm/vsie.c                               |    4 +-
 drivers/gpio/gpio-amd8111.c                        |    4 +
 drivers/gpu/drm/bridge/ti-sn65dsi86.c              |    4 +-
 drivers/gpu/drm/drm_gem_shmem_helper.c             |    4 +-
 drivers/hid/hid-core.c                             |    3 +
 drivers/hid/hid-ids.h                              |    3 +
 drivers/hid/hid-lg4ff.c                            |    6 +
 drivers/hid/hid-quirks.c                           |    3 +
 drivers/media/v4l2-core/v4l2-dv-timings.c          |   20 +-
 drivers/net/can/usb/esd_usb2.c                     |    6 +
 drivers/net/dsa/b53/b53_common.c                   |    1 +
 drivers/net/ethernet/aeroflex/greth.c              |    1 +
 drivers/net/ethernet/cavium/thunder/nicvf_main.c   |    4 +-
 drivers/net/ethernet/hisilicon/hisi_femac.c        |    2 +-
 drivers/net/ethernet/hisilicon/hix5hd2_gmac.c      |    2 +-
 drivers/net/ethernet/intel/e1000e/netdev.c         |    4 +-
 drivers/net/ethernet/intel/i40e/i40e_ethtool.c     |    6 +-
 drivers/net/ethernet/intel/i40e/i40e_main.c        |   19 +-
 drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c |    2 +
 drivers/net/ethernet/intel/igb/igb_ethtool.c       |    2 +
 drivers/net/ethernet/marvell/mvneta.c              |    2 +-
 drivers/net/ethernet/microchip/encx24j600-regmap.c |    4 +-
 .../net/ethernet/stmicro/stmmac/stmmac_platform.c  |    8 +-
 drivers/net/ieee802154/ca8210.c                    |    2 +-
 drivers/net/ieee802154/cc2520.c                    |    2 +-
 drivers/net/plip/plip.c                            |    4 +-
 drivers/net/usb/qmi_wwan.c                         |    1 +
 drivers/net/xen-netback/common.h                   |   14 +-
 drivers/net/xen-netback/interface.c                |   22 +-
 drivers/net/xen-netback/netback.c                  |  229 +--
 drivers/net/xen-netback/rx.c                       |   10 +-
 drivers/net/xen-netfront.c                         |    6 +
 drivers/nvme/host/core.c                           |    8 +-
 drivers/regulator/slg51000-regulator.c             |    2 +
 drivers/regulator/twl6030-regulator.c              |   15 +-
 drivers/video/fbdev/core/fbcon.c                   |    2 +-
 fs/btrfs/send.c                                    |   24 +-
 include/asm-generic/tlb.h                          |    4 +
 include/linux/cgroup.h                             |    1 +
 include/linux/hugetlb.h                            |    6 +-
 kernel/cgroup/cgroup-internal.h                    |    1 -
 mm/gup.c                                           |   15 +-
 mm/hugetlb.c                                       |   28 +-
 mm/khugepaged.c                                    |   47 +-
 mm/memcontrol.c                                    |   15 +-
 mm/mmu_gather.c                                    |    5 +
 net/9p/trans_fd.c                                  |    6 +-
 net/9p/trans_xen.c                                 |    9 +
 net/bluetooth/6lowpan.c                            |    1 +
 net/bluetooth/af_bluetooth.c                       |    4 +-
 net/can/af_can.c                                   |    4 +-
 net/dsa/tag_ksz.c                                  |    3 +-
 net/ipv4/fib_frontend.c                            |    3 +
 net/ipv4/fib_semantics.c                           |    1 +
 net/ipv6/ip6_output.c                              |    5 +
 net/mac802154/iface.c                              |    1 +
 net/nfc/nci/ntf.c                                  |    6 +
 net/tipc/link.c                                    |    4 +-
 net/unix/diag.c                                    |   20 +-
 sound/core/seq/seq_memory.c                        |   11 +-
 sound/soc/soc-pcm.c                                |    2 +
 tools/testing/selftests/net/fib_tests.sh           | 1727 --------------------
 tools/testing/selftests/net/rtnetlink.sh           |    2 +-
 77 files changed, 476 insertions(+), 1980 deletions(-)