This is the start of the stable review cycle for the 5.10.62 release. There are 103 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 03 Sep 2021 12:22:41 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.62-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.10.62-rc1 Richard Guy Briggs <rgb@xxxxxxxxxx> audit: move put_tree() to avoid trim_trees refcount underflow and UAF Peter Collingbourne <pcc@xxxxxxxxxx> net: don't unconditionally copy_from_user a struct ifreq for socket ioctls Helge Deller <deller@xxxxxx> Revert "parisc: Add assembly implementations for memset, strlen, strcpy, strncpy and strcat" Denis Efremov <efremov@xxxxxxxxx> Revert "floppy: reintroduce O_NDELAY fix" Peter Zijlstra <peterz@xxxxxxxxxxxxx> kthread: Fix PF_KTHREAD vs to_kthread() race Qu Wenruo <wqu@xxxxxxxx> btrfs: fix NULL pointer dereference when deleting device by invalid id Petr Vorel <petr.vorel@xxxxxxxxx> arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88 Kees Cook <keescook@xxxxxxxxxxxx> lkdtm: Enable DOUBLE_FAULT on all architectures DENG Qingfang <dqfext@xxxxxxxxx> net: dsa: mt7530: fix VLAN traffic leaks again Bjorn Andersson <bjorn.andersson@xxxxxxxxxx> usb: typec: ucsi: Clear pending after acking connector change Benjamin Berg <bberg@xxxxxxxxxx> usb: typec: ucsi: Work around PPM losing change information Benjamin Berg <bberg@xxxxxxxxxx> usb: typec: ucsi: acpi: Always decode connector change information Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx> tracepoint: Use rcu get state and cond sync for static call updates Paul E. McKenney <paulmck@xxxxxxxxxx> srcu: Provide polling interfaces for Tiny SRCU grace periods Paul E. McKenney <paulmck@xxxxxxxxxx> srcu: Make Tiny SRCU use multi-bit grace-period counter Paul E. McKenney <paulmck@xxxxxxxxxx> srcu: Provide internal interface to start a Tiny SRCU grace period Paul E. McKenney <paulmck@xxxxxxxxxx> srcu: Provide polling interfaces for Tree SRCU grace periods Paul E. McKenney <paulmck@xxxxxxxxxx> srcu: Provide internal interface to start a Tree SRCU grace period Athira Rajeev <atrajeev@xxxxxxxxxxxxxxxxxx> powerpc/perf: Invoke per-CPU variable access with disabled interrupts Martin Liška <mliska@xxxxxxx> perf annotate: Fix jump parsing for C++ code. Jianlin Lv <Jianlin.Lv@xxxxxxx> perf tools: Fix arm64 build error with gcc-11 Namhyung Kim <namhyung@xxxxxxxxxx> perf record: Fix memory leak in vDSO found using ASAN Riccardo Mancini <rickyman7@xxxxxxxxx> perf symbol-elf: Fix memory leak by freeing sdt_note.args Riccardo Mancini <rickyman7@xxxxxxxxx> perf env: Fix memory leak of bpf_prog_info_linear member Guo Ren <guoren@xxxxxxxxxxxxxxxxx> riscv: Fixup patch_text panic in ftrace Guo Ren <guoren@xxxxxxxxxxxxxxxxx> riscv: Fixup wrong ftrace remove cflag Pauli Virtanen <pav@xxxxxx> Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> vt_kdsetmode: extend console locking Xin Long <lucien.xin@xxxxxxxxx> tipc: call tipc_wait_for_connect only when dlen is not 0 Frieder Schrempf <frieder.schrempf@xxxxxxxxxx> mtd: spinand: Fix incorrect parameters for on-die ECC Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> pipe: do FASYNC notifications for every pipe IO, not just state changes Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> pipe: avoid unnecessary EPOLLET wakeups under normal loads Filipe Manana <fdmanana@xxxxxxxx> btrfs: fix race between marking inode needs to be logged and log syncing Gerd Rausch <gerd.rausch@xxxxxxxxxx> net/rds: dma_map_sg is entitled to merge entries Ben Skeggs <bskeggs@xxxxxxxxxx> drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences Ben Skeggs <bskeggs@xxxxxxxxxx> drm/nouveau/disp: power down unused DP links during init Mark Yacoub <markyacoub@xxxxxxxxxx> drm: Copy drm_wait_vblank to user before returning Ming Lei <ming.lei@xxxxxxxxxx> blk-mq: don't grab rq's refcount in blk_mq_check_expired() Kenneth Feng <kenneth.feng@xxxxxxx> drm/amd/pm: change the workload type for some cards Kenneth Feng <kenneth.feng@xxxxxxx> Revert "drm/amd/pm: fix workload mismatch on vega10" Shai Malin <smalin@xxxxxxxxxxx> qed: Fix null-pointer dereference in qed_rdma_create_qp() Shai Malin <smalin@xxxxxxxxxxx> qed: qed ll2 race condition fixes Michael S. Tsirkin <mst@xxxxxxxxxx> tools/virtio: fix build Neeraj Upadhyay <neeraju@xxxxxxxxxxxxxx> vringh: Use wiov->used to check for read/write desc order Vincent Whitchurch <vincent.whitchurch@xxxxxxxx> virtio_vdpa: reject invalid vq indices Parav Pandit <parav@xxxxxxxxxx> virtio_pci: Support surprise removal of virtio pci device Parav Pandit <parav@xxxxxxxxxx> virtio: Improve vq->broken access to avoid any compiler optimization Thara Gopinath <thara.gopinath@xxxxxxxxxx> cpufreq: blocklist Qualcomm sm8150 in cpufreq-dt-platdev Michał Mirosław <mirq-linux@xxxxxxxxxxxx> opp: remove WARN when no valid OPPs remain Johannes Berg <johannes.berg@xxxxxxxxx> iwlwifi: pnvm: accept multiple HW-type TLVs Adam Ford <aford173@xxxxxxxxx> clk: renesas: rcar-usb2-clock-sel: Fix kernel NULL pointer dereference Colin Ian King <colin.king@xxxxxxxxxxxxx> perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32 Rob Herring <robh@xxxxxxxxxx> dt-bindings: sifive-l2-cache: Fix 'select' matching Jerome Brunet <jbrunet@xxxxxxxxxxxx> usb: gadget: u_audio: fix race condition on endpoint stop Matthew Brost <matthew.brost@xxxxxxxxx> drm/i915: Fix syncmap memory leak Wong Vee Khee <vee.khee.wong@xxxxxxxxxxxxxxx> net: stmmac: fix kernel panic due to NULL pointer dereference of plat->est Xiaoliang Yang <xiaoliang.yang_1@xxxxxxx> net: stmmac: add mutex lock to protect est parameters Ulf Hansson <ulf.hansson@xxxxxxxxxx> Revert "mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711" Guangbin Huang <huangguangbin2@xxxxxxxxxx> net: hns3: fix get wrong pfc_en when query PFC configuration Guojia Liao <liaoguojia@xxxxxxxxxx> net: hns3: fix duplicate node in VLAN list Yufeng Mo <moyufeng@xxxxxxxxxx> net: hns3: add waiting time before cmdq memory is released Yufeng Mo <moyufeng@xxxxxxxxxx> net: hns3: clear hardware resource when loading driver Andrey Ignatov <rdna@xxxxxx> rtnetlink: Return correct error on changing device netns Rahul Lakkireddy <rahul.lakkireddy@xxxxxxxxxxx> cxgb4: dont touch blocked freelist bitmap after free Eric Dumazet <edumazet@xxxxxxxxxx> ipv4: use siphash instead of Jenkins in fnhe_hashfun() Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: use siphash in rt6_exception_hash() Davide Caratti <dcaratti@xxxxxxxxxx> net/sched: ets: fix crash when flipping from 'strict' to 'quantum' Alexey Gladkov <legion@xxxxxxxxxx> ucounts: Increase ucounts reference counter before the security hook Maxim Kiselev <bigunclemax@xxxxxxxxx> net: marvell: fix MVNETA_TX_IN_PRGRS bit number Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()' Shreyansh Chouhan <chouhan.shreyansh630@xxxxxxxxx> ip_gre: add validation for csum_start Gal Pressman <galpress@xxxxxxxxxx> RDMA/efa: Free IRQ vectors on error flow Sasha Neftin <sasha.neftin@xxxxxxxxx> e1000e: Do not take care about recovery NVM checksum Sasha Neftin <sasha.neftin@xxxxxxxxx> e1000e: Fix the max snoop/no-snoop latency for 10M Toshiki Nishioka <toshiki.nishioka@xxxxxxxxx> igc: Use num_tx_queues when iterating over tx_ring queue Aaron Ma <aaron.ma@xxxxxxxxxxxxx> igc: fix page fault when thunderbolt is unplugged Petko Manolov <petko.manolov@xxxxxxxxxxxx> net: usb: pegasus: fixes of set_register(s) return value evaluation; Jacob Keller <jacob.e.keller@xxxxxxxxx> ice: do not abort devlink info if board identifier can't be found Dinghao Liu <dinghao.liu@xxxxxxxxxx> RDMA/bnxt_re: Remove unpaired rtnl unlock in bnxt_re_dev_init() Tuo Li <islituo@xxxxxxxxx> IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() Naresh Kumar PBS <nareshkumar.pbs@xxxxxxxxxxxx> RDMA/bnxt_re: Add missing spin lock initialization Li Jinlin <lijinlin3@xxxxxxxxxx> scsi: core: Fix hang of freezing queue between blocking and running device Wesley Cheng <wcheng@xxxxxxxxxxxxxx> usb: dwc3: gadget: Stop EP0 transfers during pullup disable Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: dwc3: gadget: Fix dwc3_calc_trbs_left() Takashi Iwai <tiwai@xxxxxxx> usb: renesas-xhci: Prefer firmware loading on unknown ROM state Zhengjun Zhang <zhangzhengjun@xxxxxxxxxxx> USB: serial: option: add new VID/PID to support Fibocom FG150 Johan Hovold <johan@xxxxxxxxxx> Revert "USB: serial: ch341: fix character loss at high transfer rates" Michel Dänzer <mdaenzer@xxxxxxxxxx> drm/amdgpu: Cancel delayed work when GFXOFF is disabled Qu Wenruo <wqu@xxxxxxxx> Revert "btrfs: compression: don't try to compress if we don't have enough pages" Vincent Chen <vincent.chen@xxxxxxxxxx> riscv: Ensure the value of FP registers in the core dump file is up to date Xiubo Li <xiubli@xxxxxxxxxx> ceph: correctly handle releasing an embedded cap flush Stefan Mätje <stefan.maetje@xxxxxx> can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters Mark Brown <broonie@xxxxxxxxxx> net: mscc: Fix non-GPL export of regmap APIs Miklos Szeredi <mszeredi@xxxxxxxxxx> ovl: fix uninitialized pointer read in ovl_lookup_real_one() Ming Lei <ming.lei@xxxxxxxxxx> blk-iocost: fix lockdep warning on blkcg->lock Kefeng Wang <wangkefeng.wang@xxxxxxxxxx> once: Fix panic when module unload Florian Westphal <fw@xxxxxxxxx> netfilter: conntrack: collect all entries in one cycle Guenter Roeck <linux@xxxxxxxxxxxx> ARC: Fix CONFIG_STACKDEPOT Mark Brown <broonie@xxxxxxxxxx> ASoC: component: Remove misplaced prefix handling in pin control functions Derek Fang <derek.fang@xxxxxxxxxxx> ASoC: rt5682: Adjust headset volume button threshold Yonghong Song <yhs@xxxxxx> bpf: Fix NULL pointer dereference in bpf_get_local_storage() helper Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: Fix ringbuf helper function compatibility Xiaolong Huang <butterflyhuangxx@xxxxxxxxx> net: qrtr: fix another OOB Read in qrtr_endpoint_post ------------- Diffstat: .../devicetree/bindings/riscv/sifive-l2-cache.yaml | 6 +- Makefile | 4 +- arch/arc/kernel/vmlinux.lds.S | 2 + .../arm64/boot/dts/qcom/msm8994-angler-rev-101.dts | 4 + arch/parisc/include/asm/string.h | 15 --- arch/parisc/kernel/parisc_ksyms.c | 4 - arch/parisc/lib/Makefile | 4 +- arch/parisc/lib/memset.c | 72 +++++++++++ arch/parisc/lib/string.S | 136 --------------------- arch/powerpc/perf/core-book3s.c | 10 +- arch/riscv/kernel/Makefile | 5 +- arch/riscv/kernel/ptrace.c | 4 + arch/riscv/mm/Makefile | 3 +- arch/x86/events/intel/uncore_snbep.c | 2 +- block/blk-iocost.c | 8 +- block/blk-mq.c | 30 +---- drivers/block/floppy.c | 30 ++--- drivers/bluetooth/btusb.c | 22 ++-- drivers/clk/renesas/rcar-usb2-clock-sel.c | 2 +- drivers/cpufreq/cpufreq-dt-platdev.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 11 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 36 ++++-- .../gpu/drm/amd/pm/powerplay/hwmgr/vega10_hwmgr.c | 15 ++- drivers/gpu/drm/drm_ioc32.c | 4 +- drivers/gpu/drm/i915/gt/intel_timeline.c | 8 ++ drivers/gpu/drm/nouveau/dispnv50/disp.c | 27 ++++ drivers/gpu/drm/nouveau/dispnv50/head.c | 13 +- drivers/gpu/drm/nouveau/dispnv50/head.h | 1 + drivers/gpu/drm/nouveau/nvkm/engine/disp/dp.c | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/disp/dp.h | 1 + drivers/gpu/drm/nouveau/nvkm/engine/disp/outp.c | 9 ++ drivers/infiniband/hw/bnxt_re/ib_verbs.c | 1 + drivers/infiniband/hw/bnxt_re/main.c | 1 - drivers/infiniband/hw/efa/efa_main.c | 1 + drivers/infiniband/hw/hfi1/sdma.c | 9 +- drivers/misc/lkdtm/core.c | 2 - drivers/mmc/host/sdhci-iproc.c | 3 +- drivers/mtd/nand/spi/core.c | 6 +- drivers/mtd/nand/spi/macronix.c | 6 +- drivers/mtd/nand/spi/toshiba.c | 6 +- drivers/net/can/usb/esd_usb2.c | 4 +- drivers/net/dsa/mt7530.c | 5 +- drivers/net/ethernet/apm/xgene-v2/main.c | 4 +- drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 7 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.c | 6 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.h | 4 + .../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 13 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 32 ++++- .../ethernet/hisilicon/hns3/hns3vf/hclgevf_cmd.c | 7 +- .../ethernet/hisilicon/hns3/hns3vf/hclgevf_cmd.h | 1 + drivers/net/ethernet/intel/e1000e/ich8lan.c | 32 +++-- drivers/net/ethernet/intel/e1000e/ich8lan.h | 3 + drivers/net/ethernet/intel/ice/ice_devlink.c | 4 +- drivers/net/ethernet/intel/igc/igc_main.c | 36 +++--- drivers/net/ethernet/intel/igc/igc_ptp.c | 3 +- drivers/net/ethernet/marvell/mvneta.c | 2 +- drivers/net/ethernet/mscc/ocelot_io.c | 16 +-- drivers/net/ethernet/qlogic/qed/qed_ll2.c | 20 +++ drivers/net/ethernet/qlogic/qed/qed_rdma.c | 3 +- drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 21 +++- drivers/net/usb/pegasus.c | 4 +- drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 25 ++-- drivers/opp/of.c | 5 +- drivers/scsi/scsi_sysfs.c | 9 +- drivers/tty/vt/vt_ioctl.c | 10 +- drivers/usb/dwc3/gadget.c | 23 ++-- drivers/usb/gadget/function/u_audio.c | 5 +- drivers/usb/host/xhci-pci-renesas.c | 35 ++++-- drivers/usb/serial/ch341.c | 1 - drivers/usb/serial/option.c | 2 + drivers/usb/typec/ucsi/ucsi.c | 125 ++++++++++++++++--- drivers/usb/typec/ucsi/ucsi.h | 2 + drivers/usb/typec/ucsi/ucsi_acpi.c | 5 +- drivers/vhost/vringh.c | 2 +- drivers/virtio/virtio_pci_common.c | 7 ++ drivers/virtio/virtio_ring.c | 6 +- drivers/virtio/virtio_vdpa.c | 3 + fs/btrfs/btrfs_inode.h | 15 +++ fs/btrfs/file.c | 11 +- fs/btrfs/inode.c | 6 +- fs/btrfs/transaction.h | 2 +- fs/btrfs/volumes.c | 2 +- fs/ceph/caps.c | 21 ++-- fs/ceph/mds_client.c | 7 +- fs/ceph/snap.c | 3 + fs/ceph/super.h | 3 +- fs/overlayfs/export.c | 2 +- fs/pipe.c | 33 +++-- include/linux/bpf-cgroup.h | 57 +++++++-- include/linux/bpf.h | 15 ++- include/linux/netdevice.h | 4 + include/linux/once.h | 4 +- include/linux/pipe_fs_i.h | 2 + include/linux/rcupdate.h | 2 + include/linux/srcu.h | 3 + include/linux/srcutiny.h | 7 +- include/linux/stmmac.h | 1 + kernel/audit_tree.c | 2 +- kernel/bpf/helpers.c | 15 ++- kernel/bpf/local_storage.c | 5 +- kernel/bpf/verifier.c | 8 +- kernel/cred.c | 12 +- kernel/kthread.c | 33 ++++- kernel/rcu/srcutiny.c | 77 ++++++++++-- kernel/rcu/srcutree.c | 127 ++++++++++++++----- kernel/sched/fair.c | 2 +- kernel/tracepoint.c | 81 +++++++++--- lib/once.c | 11 +- net/bpf/test_run.c | 6 +- net/core/rtnetlink.c | 3 +- net/ipv4/ip_gre.c | 2 + net/ipv4/route.c | 12 +- net/ipv6/route.c | 20 ++- net/netfilter/nf_conntrack_core.c | 71 ++++------- net/qrtr/qrtr.c | 2 +- net/rds/ib_frmr.c | 4 +- net/sched/sch_ets.c | 7 ++ net/socket.c | 6 +- net/tipc/socket.c | 2 +- sound/soc/codecs/rt5682.c | 1 + sound/soc/soc-component.c | 63 ++++------ tools/perf/arch/arm/include/perf_regs.h | 2 +- tools/perf/arch/arm64/include/perf_regs.h | 2 +- tools/perf/arch/csky/include/perf_regs.h | 2 +- tools/perf/arch/powerpc/include/perf_regs.h | 2 +- tools/perf/arch/riscv/include/perf_regs.h | 2 +- tools/perf/arch/s390/include/perf_regs.h | 2 +- tools/perf/arch/x86/include/perf_regs.h | 2 +- tools/perf/util/annotate.c | 8 ++ tools/perf/util/annotate.h | 1 + tools/perf/util/env.c | 1 + tools/perf/util/perf_regs.h | 7 ++ tools/perf/util/symbol-elf.c | 1 + tools/perf/util/vdso.c | 2 + tools/virtio/Makefile | 3 +- tools/virtio/linux/spinlock.h | 56 +++++++++ tools/virtio/linux/virtio.h | 2 + 137 files changed, 1226 insertions(+), 659 deletions(-)
