This is the start of the stable review cycle for the 5.18.16 release. There are 88 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 03 Aug 2022 11:41:16 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.18.16-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.18.16-rc1 Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxxxxx> x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available Waiman Long <longman@xxxxxxxxxx> locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter Eiichi Tsukata <eiichi.tsukata@xxxxxxxxxxx> docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed Sherry Sun <sherry.sun@xxxxxxx> EDAC/synopsys: Re-enable the error interrupts on v3 hw Sherry Sun <sherry.sun@xxxxxxx> EDAC/synopsys: Use the correct register to disable the error interrupt on v3 hw Toshi Kani <toshi.kani@xxxxxxx> EDAC/ghes: Set the DIMM label unconditionally Florian Fainelli <f.fainelli@xxxxxxxxx> ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_workaround_signed_windows. Jaewon Kim <jaewon31.kim@xxxxxxxxxxx> page_alloc: fix invalid watermark check on a negative value Ralph Campbell <rcampbell@xxxxxxxxxx> mm/hmm: fault non-owner device private entries Dan Carpenter <dan.carpenter@xxxxxxxxxx> stmmac: dwmac-mediatek: fix resource leak in probe Dimitris Michailidis <d.michailidis@xxxxxxxxxxxx> net/funeth: Fix fun_xdp_tx() and XDP packet reclaim Xin Long <lucien.xin@xxxxxxxxx> sctp: leave the err path free in sctp_stream_init to sctp_stream_free Alejandro Lucero <alejandro.lucero-palau@xxxxxxx> sfc: disable softirqs for ptp TX Leo Yan <leo.yan@xxxxxxxxxx> perf symbol: Correct address for bss symbols Jason Wang <jasowang@xxxxxxxxxx> virtio-net: fix the race between refill work and close Geliang Tang <geliang.tang@xxxxxxxx> mptcp: don't send RST for single subflow Bart Van Assche <bvanassche@xxxxxxx> scsi: ufs: core: Fix a race condition related to device management Bart Van Assche <bvanassche@xxxxxxx> scsi: ufs: Support clearing multiple commands at once Florian Westphal <fw@xxxxxxxxx> netfilter: nf_queue: do not allow packet truncation below transport header offset Sunil Goutham <sgoutham@xxxxxxxxxxx> octeontx2-pf: cn10k: Fix egress ratelimit configuration Duoming Zhou <duoming@xxxxxxxxxx> sctp: fix sleep in atomic context bug in timer handlers Vladimir Oltean <vladimir.oltean@xxxxxxx> net: dsa: fix reference counting for LAG FDBs Michal Maloszewski <michal.maloszewski@xxxxxxxxx> i40e: Fix interface init with MSI interrupts (no MSI-X) Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> ipv4: Fix data-races around sysctl_fib_notify_on_flag_change. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_reflect_tos. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> net: Fix data-races around sysctl_[rw]mem(_offset)?. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sk_pacing_rate. Taehee Yoo <ap420073@xxxxxxxxx> net: mld: fix reference count leak in mld_{query | report}_work() Jianglei Nie <niejianglei2021@xxxxxxx> net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> macsec: always read MACSEC_SA_ATTR_PN as a u64 Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> macsec: limit replay window size with XPN Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> macsec: fix error message in macsec_add_rxsa and _txsa Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> macsec: fix NULL deref in macsec_add_rxsa Xin Long <lucien.xin@xxxxxxxxx> Documentation: fix sctp_wmem in ip-sysctl.rst Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_autocorking. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_tso_rtt_log. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_min_tso_segs. Tom Rix <trix@xxxxxxxxxx> mlxsw: spectrum_router: simplify list unwinding Liang He <windhl@xxxxxxx> net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() Vladimir Oltean <vladimir.oltean@xxxxxxx> net: pcs: xpcs: propagate xpcs_read error to xpcs_get_state_c37_sgmii Maxim Mikityanskiy <maximmi@xxxxxxxxxx> net/tls: Remove the context from the list in tls_device_down Ziyang Xuan <william.xuanziyang@xxxxxxxxxx> ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> net: ping6: Fix memleak in ipv6_renew_options(). David Jeffery <djeffery@xxxxxxxxxx> scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown Jason Yan <yanaijie@xxxxxxxxxx> scsi: core: Fix warning in scsi_alloc_sgtables() Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. Eric Dumazet <edumazet@xxxxxxxxxx> tcp: md5: fix IPv4-mapped support Subbaraya Sundeep <sbhatta@xxxxxxxxxxx> octeontx2-pf: Fix UDP/TCP src and dst port tc filters Wei Wang <weiwan@xxxxxxxxxx> Revert "tcp: change pingpong threshold to 3" Liang He <windhl@xxxxxxx> scsi: ufs: host: Hold reference returned by of_parse_phandle() Anirudh Venkataramanan <anirudh.venkataramanan@xxxxxxxxx> ice: Fix VSIs unable to share unicast MAC Maciej Fijalkowski <maciej.fijalkowski@xxxxxxxxx> ice: do not setup vlan for loopback VSI Maciej Fijalkowski <maciej.fijalkowski@xxxxxxxxx> ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) Przemyslaw Patynowski <przemyslawx.patynowski@xxxxxxxxx> ice: Fix max VLANs available for VF Benjamin Poirier <bpoirier@xxxxxxxxxx> bridge: Do not send empty IFLA_AF_SPEC attribute Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_nometrics_save. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_frto. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_adv_win_scale. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_app_win. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_dsack. Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> watch_queue: Fix missing locking in add_watch_to_object() David Howells <dhowells@xxxxxxxxxx> watch_queue: Fix missing rcu annotation Nathan Chancellor <nathan@xxxxxxxxxx> drm/simpledrm: Fix return type of simpledrm_simple_display_pipe_mode_valid() Alistair Popple <apopple@xxxxxxxxxx> nouveau/svm: Fix to migrate all requested pages Waiman Long <longman@xxxxxxxxxx> intel_idle: Fix false positive RCU splats due to incorrect hardirqs state Harald Freudenberger <freude@xxxxxxxxxxxxx> s390/archrandom: prevent CPACF trng invocations in interrupt context Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx> asm-generic: remove a broken and needless ifdef conditional Miaohe Lin <linmiaohe@xxxxxxxxxx> hugetlb: fix memoryleak in hugetlb_mcopy_atomic_pte Muchun Song <songmuchun@xxxxxxxxxxxxx> mm: fix missing wake-up event for FSDAX pages Josef Bacik <josef@xxxxxxxxxxxxxx> mm: fix page leak with multiple threads mapping the same page Mike Rapoport <rppt@xxxxxxxxxx> secretmem: fix unhandled fault in truncate Andrei Vagin <avagin@xxxxxxxxx> fs: sendfile handles O_NONBLOCK of out_fd ChenXiaoSong <chenxiaosong2@xxxxxxxxxx> ntfs: fix use-after-free in ntfs_ucsncmp() Nadav Amit <namit@xxxxxxxxxx> userfaultfd: provide properly masked address for huge-pages Junxiao Bi <ocfs2-devel@xxxxxxxxxxxxxx> Revert "ocfs2: mount shared volume without ha stack" Linus Walleij <linus.walleij@xxxxxxxxxx> ARM: pxa2xx: Fix GPIO descriptor tables Michael Walle <michael@xxxxxxxx> ARM: dts: lan966x: fix sys_clk frequency Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put Abhishek Pandit-Subedi <abhishekpandit@xxxxxxxxxxxx> Bluetooth: Always set event mask on suspend ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 2 + Documentation/networking/ip-sysctl.rst | 9 +- Makefile | 4 +- arch/arm/boot/dts/lan966x.dtsi | 2 +- arch/arm/include/asm/dma.h | 2 +- arch/arm/mach-pxa/corgi.c | 2 +- arch/arm/mach-pxa/hx4700.c | 2 +- arch/arm/mach-pxa/icontrol.c | 4 +- arch/arm/mach-pxa/littleton.c | 2 +- arch/arm/mach-pxa/magician.c | 2 +- arch/arm/mach-pxa/spitz.c | 2 +- arch/arm/mach-pxa/z2.c | 4 +- arch/s390/include/asm/archrandom.h | 9 +- arch/x86/kernel/cpu/bugs.c | 1 + drivers/edac/ghes_edac.c | 11 ++- drivers/edac/synopsys_edac.c | 44 +++++---- drivers/gpu/drm/nouveau/nouveau_dmem.c | 6 +- drivers/gpu/drm/tiny/simpledrm.c | 2 +- drivers/idle/intel_idle.c | 8 +- drivers/net/ethernet/fungible/funeth/funeth_rx.c | 5 +- drivers/net/ethernet/fungible/funeth/funeth_tx.c | 20 ++-- drivers/net/ethernet/fungible/funeth/funeth_txrx.h | 6 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 4 + drivers/net/ethernet/intel/ice/ice_ethtool.c | 3 +- drivers/net/ethernet/intel/ice/ice_main.c | 10 +- drivers/net/ethernet/intel/ice/ice_sriov.c | 40 -------- drivers/net/ethernet/intel/ice/ice_virtchnl.c | 3 +- .../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 106 ++++++++++++++------- .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 20 ++-- drivers/net/ethernet/sfc/ptp.c | 22 +++++ .../net/ethernet/stmicro/stmmac/dwmac-mediatek.c | 9 +- drivers/net/macsec.c | 33 ++++--- drivers/net/pcs/pcs-xpcs.c | 2 +- drivers/net/sungem_phy.c | 1 + drivers/net/virtio_net.c | 37 ++++++- drivers/scsi/mpt3sas/mpt3sas_scsih.c | 1 + drivers/scsi/scsi_ioctl.c | 2 +- drivers/scsi/ufs/ufshcd-pltfrm.c | 15 ++- drivers/scsi/ufs/ufshcd.c | 98 +++++++++++++------ fs/ntfs/attrib.c | 8 +- fs/ocfs2/ocfs2.h | 4 +- fs/ocfs2/slot_map.c | 46 ++++----- fs/ocfs2/super.c | 21 ---- fs/read_write.c | 3 + fs/userfaultfd.c | 12 ++- include/asm-generic/io.h | 2 - include/linux/mm.h | 14 ++- include/net/addrconf.h | 3 + include/net/bluetooth/l2cap.h | 1 + include/net/inet_connection_sock.h | 10 +- include/net/sock.h | 8 +- include/net/tcp.h | 2 +- kernel/locking/rwsem.c | 30 ++++-- kernel/watch_queue.c | 58 ++++++----- mm/gup.c | 6 +- mm/hmm.c | 19 ++-- mm/hugetlb.c | 1 + mm/memory.c | 7 +- mm/memremap.c | 6 +- mm/page_alloc.c | 12 ++- mm/secretmem.c | 33 +++++-- net/bluetooth/hci_sync.c | 6 +- net/bluetooth/l2cap_core.c | 61 +++++++++--- net/bridge/br_netlink.c | 8 +- net/decnet/af_decnet.c | 4 +- net/dsa/switch.c | 1 + net/ipv4/fib_trie.c | 7 +- net/ipv4/tcp.c | 23 +++-- net/ipv4/tcp_input.c | 41 ++++---- net/ipv4/tcp_ipv4.c | 4 +- net/ipv4/tcp_metrics.c | 10 +- net/ipv4/tcp_output.c | 27 +++--- net/ipv6/mcast.c | 14 +-- net/ipv6/ping.c | 6 ++ net/ipv6/tcp_ipv6.c | 4 +- net/mptcp/protocol.c | 8 +- net/mptcp/subflow.c | 10 +- net/netfilter/nfnetlink_queue.c | 7 +- net/sctp/associola.c | 5 +- net/sctp/stream.c | 19 +--- net/sctp/stream_sched.c | 2 +- net/tipc/socket.c | 2 +- net/tls/tls_device.c | 7 +- tools/perf/util/symbol-elf.c | 45 ++++++++- 84 files changed, 727 insertions(+), 455 deletions(-)
