This is the start of the stable review cycle for the 5.18.10 release. There are 102 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 07 Jul 2022 11:55:56 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.18.10-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.18.10-rc1 Oleksandr Tyshchenko <oleksandr_tyshchenko@xxxxxxxx> xen/arm: Fix race in RB-tree based P2M accounting Jan Beulich <jbeulich@xxxxxxxx> xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() Roger Pau Monne <roger.pau@xxxxxxxxxx> xen/blkfront: force data bouncing when backend is untrusted Roger Pau Monne <roger.pau@xxxxxxxxxx> xen/netfront: force data bouncing when backend is untrusted Roger Pau Monne <roger.pau@xxxxxxxxxx> xen/netfront: fix leaking data in shared pages Roger Pau Monne <roger.pau@xxxxxxxxxx> xen/blkfront: fix leaking data in shared pages Yang Yingliang <yangyingliang@xxxxxxxxxx> hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails Casper Andersson <casper.casan@xxxxxxxxx> net: sparx5: mdb add/del handle non-sparx5 devices Casper Andersson <casper.casan@xxxxxxxxx> net: sparx5: Add handling of host MDB entries Carlos Llamas <cmllamas@xxxxxxxxxx> drm/fourcc: fix integer type usage in uapi header Hans de Goede <hdegoede@xxxxxxxxxx> platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses Hans de Goede <hdegoede@xxxxxxxxxx> platform/x86: panasonic-laptop: don't report duplicate brightness key-presses Hans de Goede <hdegoede@xxxxxxxxxx> platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" Hans de Goede <hdegoede@xxxxxxxxxx> platform/x86: panasonic-laptop: sort includes alphabetically Stefan Seyfried <seife+kernel@xxxxxxxxxxxxxx> platform/x86: panasonic-laptop: de-obfuscate button codes Liang He <windhl@xxxxxxx> drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c Rob Clark <robdclark@xxxxxxxxxxxx> drm/msm/gem: Fix error return on fence id alloc fail Anshuman Gupta <anshuman.gupta@xxxxxxxxx> drm/i915/dgfx: Disable d3cold at gfx root port katrinzhou <katrinzhou@xxxxxxxxxxx> drm/i915/gem: add missing else Hans de Goede <hdegoede@xxxxxxxxxx> platform/x86: ideapad-laptop: Add allow_v4_dytc module parameter Stephen Boyd <swboyd@xxxxxxxxxxxx> drm/msm/dpu: Increment vsync_cnt before waking up userspace Steve French <stfrench@xxxxxxxxxxxxx> cifs: fix minor compile warning Jakub Kicinski <kuba@xxxxxxxxxx> net: tun: avoid disabling NAPI twice Petr Machata <petrm@xxxxxxxxxx> mlxsw: spectrum_router: Fix rollback in tunnel next hop init Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: fix lockdep splat in in6_dump_addrs() katrinzhou <katrinzhou@xxxxxxxxxxx> ipv6/sit: fix ipip6_tunnel_get_prl return value Alan Adamson <alan.adamson@xxxxxxxxxx> nvmet: add a clear_ids attribute for passthru targets Amir Goldstein <amir73il@xxxxxxxxx> fanotify: refine the validation checks on non-dir inode mask Eric Dumazet <edumazet@xxxxxxxxxx> tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() Hans de Goede <hdegoede@xxxxxxxxxx> ACPI: video: Change how we determine if brightness key-presses are handled Sagi Grimberg <sagi@xxxxxxxxxxx> nvmet-tcp: fix regression in data_digest calculation Eric Dumazet <edumazet@xxxxxxxxxx> tcp: add a missing nf_reset_ct() in 3WHS handling Stephen Boyd <swboyd@xxxxxxxxxxxx> cpufreq: qcom-hw: Don't do lmh things without a throttle interrupt Tong Zhang <ztong0001@xxxxxxxxx> epic100: fix use after free on rmmod Xin Long <lucien.xin@xxxxxxxxx> tipc: move bc link creation back to tipc_node_create Michael Walle <michael@xxxxxxxx> NFC: nxp-nci: Don't issue a zero length i2c_master_read() Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> nfc: nfcmrvl: Fix irq_of_parse_and_map() return value Hans de Goede <hdegoede@xxxxxxxxxx> platform/x86: ideapad-laptop: Add Ideapad 5 15ITL05 to ideapad_dytc_v4_allow_table[] Jean Delvare <jdelvare@xxxxxxx> platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource Aneesh Kumar K.V <aneesh.kumar@xxxxxxxxxxxxx> powerpc/memhotplug: Add add_pages override for PPC Vladimir Oltean <vladimir.oltean@xxxxxxx> net: dsa: felix: fix race between reading PSFP stats and port stats Yevhen Orlov <yevhen.orlov@xxxxxxxxxxx> net: bonding: fix use-after-free after 802.3ad slave unbind Coleman Dietsch <dietschc@xxxxxxx> selftests net: fix kselftest net fatal error Oleksij Rempel <linux@xxxxxxxxxxxxxxxx> net: phy: ax88772a: fix lost pause advertisement configuration Eric Dumazet <edumazet@xxxxxxxxxx> net: bonding: fix possible NULL deref in rlb code Oleksij Rempel <linux@xxxxxxxxxxxxxxxx> net: asix: fix "can't send until first packet is send" issue Victor Nogueira <victor@xxxxxxxxxxxx> net/sched: act_api: Notify user space if any actions were flushed before error Liang He <windhl@xxxxxxx> net/dsa/hirschmann: Add missing of_node_get() in hellcreek_led_setup() Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nft_dynset: restore set element counter when failing to update Masahiro Yamada <masahiroy@xxxxxxxxxx> s390: remove unneeded 'select BUILD_BIN2C' Eli Cohen <elic@xxxxxxxxxx> vdpa/mlx5: Update Control VQ callback information wuchi <wuchi.zero@xxxxxxxxx> lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() Miaoqian Lin <linmq006@xxxxxxxxx> PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events Jens Axboe <axboe@xxxxxxxxx> io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio Jason Wang <jasowang@xxxxxxxxxx> caif_virtio: fix race between virtio_device_ready() and ndo_open() Amir Goldstein <amir73il@xxxxxxxxx> vfs: fix copy_file_range() regression in cross-fs copies Scott Mayhew <smayhew@xxxxxxxxxx> NFSv4: Add an fattr allocation to _nfs4_discover_trunking() Alexey Khoroshilov <khoroshilov@xxxxxxxxx> NFSD: restore EINVAL error translation in nfsd_commit() NeilBrown <neilb@xxxxxxx> NFS: restore module put when manager exits. YueHaibing <yuehaibing@xxxxxxxxxx> net: ipv6: unexport __init-annotated seg6_hmac_net_init() Eddie James <eajames@xxxxxxxxxxxxx> hwmon: (occ) Prevent power cap command overwriting poll response Mat Martineau <mathew.j.martineau@xxxxxxxxxxxxxxx> selftests: mptcp: Initialize variables to quiet gcc 12 warnings Ossama Othman <ossama.othman@xxxxxxxxx> mptcp: fix conflict with <netinet/in.h> Paolo Abeni <pabeni@xxxxxxxxxx> selftests: mptcp: more stable diag tests Paolo Abeni <pabeni@xxxxxxxxxx> mptcp: fix race on unaccepted mptcp sockets Oliver Neukum <oneukum@xxxxxxxx> usbnet: fix memory allocation in helpers Oleksij Rempel <linux@xxxxxxxxxxxxxxxx> net: usb: asix: do not force pause frames support Tao Liu <thomas.liu@xxxxxxxxx> linux/dim: Fix divide by 0 in RDMA DIM Miaoqian Lin <linmq006@xxxxxxxxx> RDMA/cm: Fix memory leak in ib_cm_insert_listen Kamal Heib <kamalheib1@xxxxxxxxx> RDMA/qedr: Fix reporting QP timeout attribute Enguerrand de Ribaucourt <enguerrand.de-ribaucourt@xxxxxxxxxxxxxxxxxxxx> net: dp83822: disable rx error interrupt Enguerrand de Ribaucourt <enguerrand.de-ribaucourt@xxxxxxxxxxxxxxxxxxxx> net: dp83822: disable false carrier interrupt Dan Carpenter <dan.carpenter@xxxxxxxxxx> net: fix IFF_TX_SKB_NO_LINEAR definition Jakub Kicinski <kuba@xxxxxxxxxx> net: tun: stop NAPI when detaching queues Jakub Kicinski <kuba@xxxxxxxxxx> net: tun: unlink NAPI from device on destruction Doug Berger <opendmb@xxxxxxxxx> net: dsa: bcm_sf2: force pause link settings Dimitris Michailidis <d.michailidis@xxxxxxxxxxxx> selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test Jason Wang <jasowang@xxxxxxxxxx> virtio-net: fix race between ndo_open() and virtio_device_ready() Jose Alonso <joalonsof@xxxxxxxxx> net: usb: ax88179_178a: Fix packet receiving Duoming Zhou <duoming@xxxxxxxxxx> net: rose: fix UAF bugs caused by timer handler Chuck Lever <chuck.lever@xxxxxxxxxx> SUNRPC: Fix READ_PLUS crasher Mikulas Patocka <mpatocka@xxxxxxxxxx> dm raid: fix KASAN warning in raid5_add_disks Heinz Mauelshagen <heinzm@xxxxxxxxxx> dm raid: fix accesses beyond end of raid member array Jinzhou Su <Jinzhou.Su@xxxxxxx> cpufreq: amd-pstate: Add resume and suspend callbacks Naveen N. Rao <naveen.n.rao@xxxxxxxxxxxxxxxxxx> powerpc/bpf: Fix use of user_pt_regs in uapi Christophe Leroy <christophe.leroy@xxxxxxxxxx> powerpc/book3e: Fix PUD allocation size in map_kernel_page() Liam Howlett <liam.howlett@xxxxxxxxxx> powerpc/prom_init: Fix kernel config grep Helge Deller <deller@xxxxxx> parisc/unaligned: Fix emulate_ldw() breakage Helge Deller <deller@xxxxxx> parisc: Fix vDSO signal breakage on 32-bit kernel Jeff Layton <jlayton@xxxxxxxxxx> ceph: wait on async create before checking caps for syncfs Chris Ye <chris.ye@xxxxxxxxx> nvdimm: Fix badblocks clear off-by-one error Lamarque Vieira Souza <lamarque@xxxxxxxxxxxxxxxxxxx> nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA IM2P33F8ABR1 Pablo Greco <pgreco@xxxxxxxxxxxxxxxxx> nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) Jason A. Donenfeld <Jason@xxxxxxxxx> s390/archrandom: simplify back to earlier design and initialize earlier Lukas Wunner <lukas@xxxxxxxxx> net: phy: Don't trigger state machine while in suspend Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> ipv6: take care of disable_policy when restoring routes Jason A. Donenfeld <Jason@xxxxxxxxx> ksmbd: use vfs_llseek instead of dereferencing NULL Namjae Jeon <linkinjeon@xxxxxxxxxx> ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA Namjae Jeon <linkinjeon@xxxxxxxxxx> ksmbd: set the range of bytes to zero without extending file size in FSCTL_ZERO_DATA Ruili Ji <ruiliji2@xxxxxxx> drm/amdgpu: To flush tlb for MMHUB of RAVEN series Alex Deucher <alexander.deucher@xxxxxxx> Revert "drm/amdgpu/display: set vblank_disable_immediate for DC" Alex Deucher <alexander.deucher@xxxxxxx> drm/amdgpu: fix adev variable used in amdgpu_device_gpu_recover() ------------- Diffstat: Makefile | 4 +- arch/arm/xen/p2m.c | 6 +- arch/parisc/kernel/asm-offsets.c | 5 + arch/parisc/kernel/unaligned.c | 2 +- arch/powerpc/Kconfig | 4 + arch/powerpc/include/asm/bpf_perf_event.h | 9 + arch/powerpc/include/uapi/asm/bpf_perf_event.h | 9 - arch/powerpc/kernel/prom_init_check.sh | 2 +- arch/powerpc/mm/mem.c | 33 +++- arch/powerpc/mm/nohash/book3e_pgtable.c | 6 +- arch/s390/Kconfig | 1 - arch/s390/crypto/arch_random.c | 217 --------------------- arch/s390/include/asm/archrandom.h | 14 +- arch/s390/kernel/setup.c | 5 + drivers/acpi/acpi_video.c | 13 +- drivers/block/xen-blkfront.c | 56 ++++-- drivers/cpufreq/amd-pstate.c | 24 +++ drivers/cpufreq/qcom-cpufreq-hw.c | 6 + drivers/cpufreq/qoriq-cpufreq.c | 1 + drivers/devfreq/event/exynos-ppmu.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 1 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3 - drivers/gpu/drm/i915/gem/i915_gem_context.c | 5 +- drivers/gpu/drm/i915/i915_driver.c | 34 ++-- drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c | 3 +- drivers/gpu/drm/msm/msm_gem_submit.c | 2 +- drivers/hwmon/ibmaem.c | 12 +- drivers/hwmon/occ/common.c | 5 +- drivers/hwmon/occ/common.h | 3 +- drivers/hwmon/occ/p8_i2c.c | 13 +- drivers/hwmon/occ/p9_sbe.c | 7 +- drivers/infiniband/core/cm.c | 4 +- drivers/infiniband/hw/qedr/qedr.h | 1 + drivers/infiniband/hw/qedr/verbs.c | 4 +- drivers/md/dm-raid.c | 34 ++-- drivers/md/raid5.c | 1 + drivers/net/bonding/bond_3ad.c | 3 +- drivers/net/bonding/bond_alb.c | 2 +- drivers/net/caif/caif_virtio.c | 10 +- drivers/net/dsa/bcm_sf2.c | 5 + drivers/net/dsa/hirschmann/hellcreek_ptp.c | 1 + drivers/net/dsa/ocelot/felix_vsc9959.c | 4 + .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 14 +- .../ethernet/microchip/sparx5/sparx5_switchdev.c | 18 ++ drivers/net/ethernet/smsc/epic100.c | 4 +- drivers/net/phy/ax88796b.c | 6 +- drivers/net/phy/dp83822.c | 4 +- drivers/net/phy/phy.c | 23 +++ drivers/net/phy/phy_device.c | 23 +++ drivers/net/tun.c | 15 +- drivers/net/usb/asix.h | 3 +- drivers/net/usb/asix_common.c | 1 + drivers/net/usb/ax88179_178a.c | 101 +++++++--- drivers/net/usb/usbnet.c | 4 +- drivers/net/virtio_net.c | 8 +- drivers/net/xen-netfront.c | 56 +++++- drivers/nfc/nfcmrvl/i2c.c | 6 +- drivers/nfc/nfcmrvl/spi.c | 6 +- drivers/nfc/nxp-nci/i2c.c | 3 + drivers/nvdimm/bus.c | 4 +- drivers/nvme/host/pci.c | 5 +- drivers/nvme/target/configfs.c | 20 ++ drivers/nvme/target/core.c | 6 + drivers/nvme/target/nvmet.h | 1 + drivers/nvme/target/passthru.c | 55 ++++++ drivers/nvme/target/tcp.c | 23 +-- drivers/platform/x86/Kconfig | 2 + drivers/platform/x86/ideapad-laptop.c | 29 ++- drivers/platform/x86/panasonic-laptop.c | 84 ++++++-- drivers/platform/x86/thinkpad_acpi.c | 1 + drivers/vdpa/mlx5/net/mlx5_vnet.c | 2 + fs/ceph/caps.c | 1 + fs/cifs/connect.c | 2 + fs/io_uring.c | 4 +- fs/ksmbd/smb2pdu.c | 43 ++-- fs/ksmbd/vfs.c | 12 +- fs/nfs/nfs4proc.c | 19 +- fs/nfs/nfs4state.c | 1 + fs/nfsd/vfs.c | 11 +- fs/notify/fanotify/fanotify_user.c | 34 ++-- fs/read_write.c | 77 ++++---- include/linux/dim.h | 2 +- include/linux/fanotify.h | 4 + include/linux/netdevice.h | 2 +- include/linux/phy.h | 6 + include/uapi/drm/drm_fourcc.h | 4 +- include/uapi/linux/mptcp.h | 9 +- lib/sbitmap.c | 5 +- net/ipv4/ip_tunnel_core.c | 2 +- net/ipv4/tcp_ipv4.c | 6 +- net/ipv6/addrconf.c | 8 +- net/ipv6/route.c | 9 +- net/ipv6/seg6_hmac.c | 1 - net/ipv6/sit.c | 8 +- net/mptcp/protocol.c | 5 + net/mptcp/protocol.h | 2 + net/mptcp/subflow.c | 52 +++++ net/netfilter/nft_set_hash.c | 2 + net/rose/rose_timer.c | 34 ++-- net/sched/act_api.c | 22 ++- net/sunrpc/xdr.c | 2 +- net/tipc/node.c | 41 ++-- tools/testing/selftests/net/bpf/Makefile | 2 +- tools/testing/selftests/net/mptcp/diag.sh | 48 ++++- tools/testing/selftests/net/mptcp/mptcp_connect.c | 2 +- tools/testing/selftests/net/mptcp/mptcp_inq.c | 2 +- tools/testing/selftests/net/mptcp/mptcp_sockopt.c | 2 +- tools/testing/selftests/net/udpgso_bench.sh | 2 +- 110 files changed, 1013 insertions(+), 589 deletions(-)
