This is the start of the stable review cycle for the 5.10.71 release. There are 93 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 06 Oct 2021 12:50:17 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.71-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.10.71-rc1 Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: Fix oversized kvmalloc() calls Eric Dumazet <edumazet@xxxxxxxxxx> netfilter: conntrack: serialize hash resizes and cleanups Haimin Zhang <tcs_kernel@xxxxxxxxxxx> KVM: x86: Handle SRCU initialization failure during page track init Yanfei Xu <yanfei.xu@xxxxxxxxxxxxx> net: mdiobus: Fix memory leak in __mdiobus_register Anirudh Rayabharam <mail@xxxxxxxxxxxxx> HID: usbhid: free raw_report buffers in usbhid_stop Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> mm: don't allow oversized kvmalloc() calls Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx> netfilter: ipset: Fix oversized kvmalloc() calls F.A.Sulaiman <asha.16@xxxxxxxxxxxxxxx> HID: betop: fix slab-out-of-bounds Write in betop_probe Dan Carpenter <dan.carpenter@xxxxxxxxxx> crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() Dongliang Mu <mudongliangabcd@xxxxxxxxx> usb: hso: remove the bailout parameter Shuming Fan <shumingf@xxxxxxxxxxx> ASoC: dapm: use component prefix when checking widget names Eric Dumazet <edumazet@xxxxxxxxxx> net: udp: annotate data race around udp_sk(sk)->corkflag Andrej Shadura <andrew.shadura@xxxxxxxxxxxxxxx> HID: u2fzero: ignore incomplete packets without data yangerkun <yangerkun@xxxxxxxxxx> ext4: fix potential infinite loop in ext4_dx_readdir() Theodore Ts'o <tytso@xxxxxxx> ext4: add error checking to ext4_ext_replay_set_iblocks() Jeffle Xu <jefflexu@xxxxxxxxxxxxxxxxx> ext4: fix reserved space counter leakage Hou Tao <houtao1@xxxxxxxxxx> ext4: limit the number of blocks in one ADD_RANGE TLV Ritesh Harjani <riteshh@xxxxxxxxxxxxx> ext4: fix loff_t overflow in ext4_max_bitmap_size() Johan Hovold <johan@xxxxxxxxxx> ipack: ipoctal: fix module reference leak Johan Hovold <johan@xxxxxxxxxx> ipack: ipoctal: fix missing allocation-failure check Johan Hovold <johan@xxxxxxxxxx> ipack: ipoctal: fix tty-registration error handling Johan Hovold <johan@xxxxxxxxxx> ipack: ipoctal: fix tty registration race Johan Hovold <johan@xxxxxxxxxx> ipack: ipoctal: fix stack information leak Nirmoy Das <nirmoy.das@xxxxxxx> debugfs: debugfs_create_file_size(): use IS_ERR to check for error Chen Jingwen <chenjingwen6@xxxxxxxxxx> elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings Keith Busch <kbusch@xxxxxxxxxx> nvme: add command id quirk for apple controllers Vadim Pasternak <vadimp@xxxxxxxxxx> hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller Kan Liang <kan.liang@xxxxxxxxxxxxxxx> perf/x86/intel: Update event constraints for ICX Eric Dumazet <edumazet@xxxxxxxxxx> af_unix: fix races in sk_peer_pid and sk_peer_cred accesses Vlad Buslov <vladbu@xxxxxxxxxx> net: sched: flower: protect fl_walk() with rcu Florian Fainelli <f.fainelli@xxxxxxxxx> net: phy: bcm7xxx: Fixed indirect MMD operations Guangbin Huang <huangguangbin2@xxxxxxxxxx> net: hns3: fix always enable rx vlan filter problem after selftest Peng Li <lipeng321@xxxxxxxxxx> net: hns3: reconstruct function hns3_self_test Huazhong Tan <tanhuazhong@xxxxxxxxxx> net: hns3: fix prototype warning Jian Shen <shenjian15@xxxxxxxxxx> net: hns3: fix show wrong state when add existing uc mac address Jian Shen <shenjian15@xxxxxxxxxx> net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE Yonglong Liu <liuyonglong@xxxxxxxxxx> net: hns3: keep MAC pause mode when multiple TCs are enabled Jian Shen <shenjian15@xxxxxxxxxx> net: hns3: do not allow call hns3_nic_net_open repeatedly Feng Zhou <zhoufeng.zf@xxxxxxxxxxxxx> ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup Rahul Lakkireddy <rahul.lakkireddy@xxxxxxxxxxx> scsi: csiostor: Add module softdep on cxgb4 Jens Axboe <axboe@xxxxxxxxx> Revert "block, bfq: honor already-setup queue merges" Arnd Bergmann <arnd@xxxxxxxx> net: ks8851: fix link error Jiri Benc <jbenc@xxxxxxxxxx> selftests, bpf: test_lwt_ip_encap: Really disable rp_filter Jiri Benc <jbenc@xxxxxxxxxx> selftests, bpf: Fix makefile dependencies on libbpf Lorenz Bauer <lmb@xxxxxxxxxxxxxx> bpf: Exempt CAP_BPF from checks against bpf_jit_limit Yixing Liu <liuyixing1@xxxxxxxxxx> RDMA/hns: Fix inaccurate prints Jacob Keller <jacob.e.keller@xxxxxxxxx> e100: fix buffer overrun in e100_get_regs Jacob Keller <jacob.e.keller@xxxxxxxxx> e100: fix length calculation in e100_get_regs_len Andrew Lunn <andrew@xxxxxxx> dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports Andrew Lunn <andrew@xxxxxxx> dsa: mv88e6xxx: Fix MTU definition Andrew Lunn <andrew@xxxxxxx> dsa: mv88e6xxx: 6161: Use chip wide MAX MTU Matthew Auld <matthew.auld@xxxxxxxxx> drm/i915/request: fix early tracepoints Aaro Koskinen <aaro.koskinen@xxxxxx> smsc95xx: fix stalled rx after link change Xiao Liang <shaw.leon@xxxxxxxxx> net: ipv4: Fix rtnexthop len when RTA_FLOW is present Vladimir Oltean <vladimir.oltean@xxxxxxx> net: enetc: fix the incorrect clearing of IF_MODE bits Paul Fertser <fercerpav@xxxxxxxxx> hwmon: (tmp421) fix rounding for negative values Paul Fertser <fercerpav@xxxxxxxxx> hwmon: (tmp421) report /PVLD condition as fault Florian Westphal <fw@xxxxxxxxx> mptcp: don't return sockets in foreign netns Xin Long <lucien.xin@xxxxxxxxx> sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb Johannes Berg <johannes.berg@xxxxxxxxx> mac80211-hwsim: fix late beacon hrtimer handling Johannes Berg <johannes.berg@xxxxxxxxx> mac80211: mesh: fix potentially unaligned access Lorenzo Bianconi <lorenzo@xxxxxxxxxx> mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap Chih-Kang Chang <gary.chang@xxxxxxxxxxx> mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug Vadim Pasternak <vadimp@xxxxxxxxxx> hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs Piotr Krysiuk <piotras@xxxxxxxxx> bpf, mips: Validate conditional branch offsets Tao Liu <thomas.liu@xxxxxxxxx> RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure Christoph Lameter <cl@xxxxxxxxx> IB/cma: Do not send IGMP leaves for sendonly Multicast groups Hou Tao <houtao1@xxxxxxxxxx> bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog Andrea Claudi <aclaudi@xxxxxxxxxx> ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 Hawking Zhang <Hawking.Zhang@xxxxxxx> drm/amdgpu: correct initial cp_hqd_quantum for gfx9 Charlene Liu <Charlene.Liu@xxxxxxx> drm/amd/display: Pass PCI deviceid into DC Jason Gunthorpe <jgg@xxxxxxxx> RDMA/cma: Do not change route.addr.src_addr.ss_family Sean Young <sean@xxxxxxxx> media: ir_toy: prevent device from hanging during transmit Sean Christopherson <seanjc@xxxxxxxxxx> KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest Vitaly Kuznetsov <vkuznets@xxxxxxxxxx> KVM: nVMX: Filter out all unsupported controls when eVMCS was activated Maxim Levitsky <mlevitsk@xxxxxxxxxx> KVM: x86: nSVM: don't copy virt_ext from vmcb12 Vitaly Kuznetsov <vkuznets@xxxxxxxxxx> KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() Zelin Deng <zelin.deng@xxxxxxxxxxxxxxxxx> x86/kvmclock: Move this_cpu_pvti into kvmclock.h Johannes Berg <johannes.berg@xxxxxxxxx> mac80211: fix use-after-free in CCMP/GCMP RX Jonathan Hsu <jonathan.hsu@xxxxxxxxxxxx> scsi: ufs: Fix illegal offset in UPIU event trace Andrey Gusakov <andrey.gusakov@xxxxxxxxxxxxxxxxxx> gpio: pca953x: do not ignore i2c errors Nadezda Lutovinova <lutovinova@xxxxxxxxx> hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field Nadezda Lutovinova <lutovinova@xxxxxxxxx> hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field Nadezda Lutovinova <lutovinova@xxxxxxxxx> hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field Paul Fertser <fercerpav@xxxxxxxxx> hwmon: (tmp421) handle I2C errors Eric Biggers <ebiggers@xxxxxxxxxx> fs-verity: fix signed integer overflow with i_size near S64_MAX Jia He <justin.he@xxxxxxx> ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect Cameron Berkenpas <cam@xxxxxxxxxxx> ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops. Pawel Laszczak <pawell@xxxxxxxxxxx> usb: cdns3: fix race condition before setting doorbell James Morse <james.morse@xxxxxxx> cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory Saurav Kashyap <skashyap@xxxxxxxxxxx> scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS Kevin Hao <haokexin@xxxxxxxxx> cpufreq: schedutil: Use kobject release() method to free sugov_tunables Igor Matheus Andrade Torrente <igormtorrente@xxxxxxxxx> tty: Fix out-of-bound vmalloc access in imageblit ------------- Diffstat: Makefile | 4 +- arch/mips/net/bpf_jit.c | 57 ++++++--- arch/x86/events/intel/core.c | 1 + arch/x86/include/asm/kvm_page_track.h | 2 +- arch/x86/include/asm/kvmclock.h | 14 +++ arch/x86/kernel/kvmclock.c | 13 +-- arch/x86/kvm/ioapic.c | 10 +- arch/x86/kvm/mmu/page_track.c | 4 +- arch/x86/kvm/svm/nested.c | 1 - arch/x86/kvm/vmx/evmcs.c | 12 +- arch/x86/kvm/vmx/vmx.c | 9 +- arch/x86/kvm/x86.c | 7 +- arch/x86/net/bpf_jit_comp.c | 53 ++++++--- block/bfq-iosched.c | 16 +-- drivers/acpi/nfit/core.c | 12 ++ drivers/cpufreq/cpufreq_governor_attr_set.c | 2 +- drivers/crypto/ccp/ccp-ops.c | 14 ++- drivers/gpio/gpio-pca953x.c | 11 +- drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 2 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 1 + drivers/gpu/drm/i915/i915_request.c | 11 +- drivers/hid/hid-betopff.c | 13 ++- drivers/hid/hid-u2fzero.c | 4 +- drivers/hid/usbhid/hid-core.c | 13 ++- drivers/hwmon/mlxreg-fan.c | 12 +- drivers/hwmon/pmbus/mp2975.c | 2 +- drivers/hwmon/tmp421.c | 71 +++++++----- drivers/hwmon/w83791d.c | 29 ++--- drivers/hwmon/w83792d.c | 28 ++--- drivers/hwmon/w83793.c | 26 ++--- drivers/infiniband/core/cma.c | 28 ++++- drivers/infiniband/hw/hns/hns_roce_alloc.c | 4 +- drivers/infiniband/hw/hns/hns_roce_cq.c | 35 +++--- drivers/infiniband/hw/hns/hns_roce_hem.c | 18 +-- drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 30 ++--- drivers/infiniband/hw/hns/hns_roce_mr.c | 10 +- drivers/infiniband/hw/hns/hns_roce_pd.c | 2 +- drivers/infiniband/hw/hns/hns_roce_qp.c | 61 +++++----- drivers/infiniband/hw/hns/hns_roce_srq.c | 37 +++--- drivers/ipack/devices/ipoctal.c | 63 +++++++--- drivers/media/rc/ir_toy.c | 21 +++- drivers/net/dsa/mv88e6xxx/chip.c | 17 +-- drivers/net/dsa/mv88e6xxx/chip.h | 1 + drivers/net/dsa/mv88e6xxx/global1.c | 2 + drivers/net/dsa/mv88e6xxx/port.c | 2 + drivers/net/ethernet/freescale/enetc/enetc_pf.c | 3 +- drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 5 + drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.c | 105 +++++++++++------ .../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 7 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 19 ++- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 52 ++++----- drivers/net/ethernet/intel/e100.c | 22 ++-- drivers/net/ethernet/intel/ixgbe/ixgbe_ethtool.c | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 8 +- drivers/net/ethernet/micrel/Makefile | 6 +- drivers/net/ethernet/micrel/ks8851_common.c | 8 ++ drivers/net/phy/bcm7xxx.c | 114 +++++++++++++++++- drivers/net/phy/mdio_bus.c | 1 + drivers/net/usb/hso.c | 6 +- drivers/net/usb/smsc95xx.c | 3 + drivers/net/wireless/mac80211_hwsim.c | 4 +- drivers/nvme/host/core.c | 4 +- drivers/nvme/host/nvme.h | 6 + drivers/nvme/host/pci.c | 3 +- drivers/scsi/csiostor/csio_init.c | 1 + drivers/scsi/qla2xxx/qla_def.h | 1 - drivers/scsi/qla2xxx/qla_isr.c | 2 + drivers/scsi/qla2xxx/qla_nvme.c | 40 +++---- drivers/scsi/ufs/ufshcd.c | 3 +- drivers/tty/vt/vt.c | 21 +++- drivers/usb/cdns3/gadget.c | 14 +++ fs/binfmt_elf.c | 2 +- fs/debugfs/inode.c | 2 +- fs/ext4/dir.c | 6 +- fs/ext4/extents.c | 19 ++- fs/ext4/fast_commit.c | 6 + fs/ext4/inode.c | 5 + fs/ext4/super.c | 16 ++- fs/verity/enable.c | 2 +- fs/verity/open.c | 2 +- include/linux/bpf.h | 2 + include/net/ip_fib.h | 2 +- include/net/nexthop.h | 2 +- include/net/sock.h | 2 + kernel/bpf/bpf_struct_ops.c | 7 +- kernel/bpf/core.c | 2 +- kernel/entry/kvm.c | 4 +- kernel/rseq.c | 13 ++- kernel/sched/cpufreq_schedutil.c | 16 ++- mm/util.c | 4 + net/core/sock.c | 32 ++++- net/ipv4/fib_semantics.c | 16 +-- net/ipv4/udp.c | 10 +- net/ipv6/route.c | 5 +- net/ipv6/udp.c | 2 +- net/mac80211/mesh_ps.c | 3 +- net/mac80211/tx.c | 12 ++ net/mac80211/wpa.c | 6 + net/mptcp/mptcp_diag.c | 2 +- net/mptcp/protocol.h | 2 +- net/mptcp/subflow.c | 2 +- net/mptcp/syncookies.c | 13 +-- net/mptcp/token.c | 11 +- net/mptcp/token_test.c | 14 ++- net/netfilter/ipset/ip_set_hash_gen.h | 4 +- net/netfilter/ipvs/ip_vs_conn.c | 4 + net/netfilter/nf_conntrack_core.c | 70 +++++------ net/netfilter/nf_tables_api.c | 2 +- net/sched/cls_flower.c | 6 + net/sctp/input.c | 2 +- net/unix/af_unix.c | 34 +++++- sound/pci/hda/patch_realtek.c | 129 +++++++++++++++++++++ sound/soc/soc-dapm.c | 13 ++- tools/testing/selftests/bpf/Makefile | 3 +- tools/testing/selftests/bpf/test_lwt_ip_encap.sh | 13 ++- 115 files changed, 1205 insertions(+), 564 deletions(-)
