This is the start of the stable review cycle for the 5.10.143 release. There are 79 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 15 Sep 2022 14:03:27 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.143-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.10.143-rc1 Ionela Voinescu <ionela.voinescu@xxxxxxx> arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly Eliav Farber <farbere@xxxxxxxxxx> hwmon: (mr75203) enable polling for all VM channels Eliav Farber <farbere@xxxxxxxxxx> hwmon: (mr75203) fix multi-channel voltage reading Eliav Farber <farbere@xxxxxxxxxx> hwmon: (mr75203) fix voltage equation for negative source input Eliav Farber <farbere@xxxxxxxxxx> hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors Eliav Farber <farbere@xxxxxxxxxx> hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined John Sperbeck <jsperbeck@xxxxxxxxxx> iommu/amd: use full 64-bit value in build_completion_wait() Chao Gao <chao.gao@xxxxxxxxx> swiotlb: avoid potential left shift overflow Yang Ling <gnaygnil@xxxxxxxxx> MIPS: loongson32: ls1c: Fix hang during startup Nathan Chancellor <nathan@xxxxxxxxxx> ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion Claudiu Beznea <claudiu.beznea@xxxxxxxxxxxxx> ASoC: mchp-spdiftx: remove references to mchp_i2s_caps Toke Høiland-Jørgensen <toke@xxxxxxx> sch_sfb: Also store skb len before calling child enqueue Neal Cardwell <ncardwell@xxxxxxxxxx> tcp: fix early ETIMEDOUT after spurious non-SACK RTO Sagi Grimberg <sagi@xxxxxxxxxxx> nvme-tcp: fix regression that causes sporadic requests to time out Sagi Grimberg <sagi@xxxxxxxxxxx> nvme-tcp: fix UAF when detecting digest errors Chris Mi <cmi@xxxxxxxxxx> RDMA/mlx5: Set local port to one when accessing counters Yishai Hadas <yishaih@xxxxxxxxxx> IB/core: Fix a nested dead lock as part of ODP flow David Lebrun <dlebrun@xxxxxxxxxx> ipv6: sr: fix out-of-bounds read when setting HMAC data. Linus Walleij <linus.walleij@xxxxxxxxxx> RDMA/siw: Pass a pointer to virt_to_page() Paul Durrant <pdurrant@xxxxxxxxxx> xen-netback: only remove 'hotplug-status' when the vif is actually destroyed Csókás Bence <csokas.bence@xxxxxxxxx> net: fec: Use a spinlock to guard `fep->ptp_clk_on` Ivan Vecera <ivecera@xxxxxxxxxx> i40e: Fix kernel crash during module removal Michal Swiatkowski <michal.swiatkowski@xxxxxxxxxxxxxxx> ice: use bitmap_free instead of devm_kfree Dan Carpenter <dan.carpenter@xxxxxxxxxx> tipc: fix shift wrapping bug in map_get() Toke Høiland-Jørgensen <toke@xxxxxxx> sch_sfb: Don't assume the skb is still around after enqueueing to child David Howells <dhowells@xxxxxxxxxx> afs: Use the operation issue time instead of the reply time for callbacks David Howells <dhowells@xxxxxxxxxx> rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Register card again for iface over delayed_register option Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Inform the delayed registration more properly David Leadbeater <dgl@xxxxxx> netfilter: nf_conntrack_irc: Fix forged IP logic Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: clean up hook list when offload flags check fails Harsh Modi <harshmodi@xxxxxxxxxx> netfilter: br_netfilter: Drop dst references before setting. Claudiu Beznea <claudiu.beznea@xxxxxxxxxxxxx> ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time Claudiu Beznea <claudiu.beznea@xxxxxxxxxxxxx> ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time Claudiu Beznea <claudiu.beznea@xxxxxxxxxxxxx> ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges Claudiu Beznea <claudiu.beznea@xxxxxxxxxxxxx> ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges Wenpeng Liang <liangwenpeng@xxxxxxxxxx> RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift Chengchang Tang <tangchengchang@xxxxxxxxxx> RDMA/hns: Fix supported page size Liang He <windhl@xxxxxxx> soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs Michael Guralnik <michaelgur@xxxxxxxxxx> RDMA/cma: Fix arguments order in net device validation Jens Wiklander <jens.wiklander@xxxxxxxxxx> tee: fix compiler warning in tee_shm_register() Andrew Halaney <ahalaney@xxxxxxxxxx> regulator: core: Clean up on enable failure Marco Felsch <m.felsch@xxxxxxxxxxxxxx> ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node David Howells <dhowells@xxxxxxxxxx> smb3: missing inode locks in punch hole Enzo Matsumiya <ematsumiya@xxxxxxx> cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() Tejun Heo <tj@xxxxxxxxxx> cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock Tejun Heo <tj@xxxxxxxxxx> cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree Yang Yingliang <yangyingliang@xxxxxxxxxx> scsi: lpfc: Add missing destroy_workqueue() in error path Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxx> scsi: mpt3sas: Fix use-after-free warning Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/i915: Implement WaEdpLinkRateDataReload Bart Van Assche <bvanassche@xxxxxxx> nvmet: fix a use-after-free Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> debugfs: add debugfs_lookup_and_remove() Christian A. Ehrhardt <lk@xxxxxxx> kprobes: Prohibit probes in gate area Dongxiang Ke <kdx.glider@xxxxxxxxx> ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() Pattara Teerapong <pteerapong@xxxxxxxxxxxx> ALSA: aloop: Fix random zeros in capture data when using jiffies timer Tasos Sahanidis <tasos@xxxxxxxxxxxx> ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() Qu Huang <jinsdb@xxxxxxx> drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly Yang Yingliang <yangyingliang@xxxxxxxxxx> fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() lily <floridsleeves@xxxxxxxxx> net/core/skbuff: Check the return value of skb_copy_bits() Mark Brown <broonie@xxxxxxxxxx> arm64/signal: Raise limit on stack frames Sudeep Holla <sudeep.holla@xxxxxxx> arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level Helge Deller <deller@xxxxxx> parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines Li Qiong <liqiong@xxxxxxxxxxxx> parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() Zhenneng Li <lizhenneng@xxxxxxxxxx> drm/radeon: add a force flush to delay work when radeon Candice Li <candice.li@xxxxxxx> drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. YiPeng Chai <YiPeng.Chai@xxxxxxx> drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini Jeffy Chen <jeffy.chen@xxxxxxxxxxxxxx> drm/gem: Fix GEM handle release errors Guixin Liu <kanie@xxxxxxxxxxxxxxxxx> scsi: megaraid_sas: Fix double kfree() Tony Battersby <tonyb@xxxxxxxxxxxxxxx> scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX Yee Lee <yee.lee@xxxxxxxxxxxx> Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> fs: only do a memory barrier for the first set_buffer_uptodate() Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> net: mvpp2: debugfs: fix memory leak when using debugfs_lookup() Stanislaw Gruszka <stf_xl@xxxxx> wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() Hyunwoo Kim <imv4bel@xxxxxxxxx> efi: capsule-loader: Fix use-after-free in efi_capsule_write Ard Biesheuvel <ardb@xxxxxxxxxx> efi: libstub: Disable struct randomization Fedor Pchelkin <pchelkin@xxxxxxxxx> tty: n_gsm: avoid call of sleeping functions from atomic context Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> tty: n_gsm: initialize more members at gsm_alloc_mux() SeongJae Park <sj@xxxxxxxxxx> xen-blkfront: Cache feature_persistent value before advertisement Chuck Lever <chuck.lever@xxxxxxxxxx> NFSD: Fix verifier returned in stable WRITEs ------------- Diffstat: Documentation/arm64/silicon-errata.rst | 2 + Makefile | 4 +- arch/arm/boot/dts/at91-sama5d27_wlsom1.dtsi | 21 +++--- arch/arm/boot/dts/at91-sama5d2_icp.dts | 21 +++--- arch/arm/boot/dts/imx6qdl-kontron-samx6i.dtsi | 10 --- arch/arm64/Kconfig | 18 +++++ arch/arm64/include/asm/cpucaps.h | 3 +- arch/arm64/kernel/cacheinfo.c | 6 +- arch/arm64/kernel/cpu_errata.c | 9 +++ arch/arm64/kernel/cpufeature.c | 5 +- arch/arm64/kernel/signal.c | 2 +- arch/mips/loongson32/ls1c/board.c | 1 - arch/parisc/kernel/head.S | 43 ++++++++++- drivers/block/xen-blkfront.c | 14 ++-- drivers/firmware/efi/capsule-loader.c | 31 ++------ drivers/firmware/efi/libstub/Makefile | 7 ++ drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_xgmi.c | 2 +- drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v1_0.c | 1 + drivers/gpu/drm/drm_gem.c | 17 +---- drivers/gpu/drm/drm_internal.h | 4 +- drivers/gpu/drm/drm_prime.c | 20 +++-- .../gpu/drm/i915/display/intel_dp_link_training.c | 22 ++++++ drivers/gpu/drm/radeon/radeon_device.c | 3 + drivers/hwmon/mr75203.c | 72 ++++++++++++------ drivers/infiniband/core/cma.c | 4 +- drivers/infiniband/core/umem_odp.c | 2 +- drivers/infiniband/hw/hns/hns_roce_hw_v2.h | 2 +- drivers/infiniband/hw/hns/hns_roce_qp.c | 7 +- drivers/infiniband/hw/mlx5/mad.c | 6 ++ drivers/infiniband/sw/siw/siw_qp_tx.c | 18 ++++- drivers/iommu/amd/iommu.c | 3 +- drivers/net/ethernet/freescale/fec.h | 1 - drivers/net/ethernet/freescale/fec_main.c | 17 +++-- drivers/net/ethernet/freescale/fec_ptp.c | 28 +++---- drivers/net/ethernet/intel/i40e/i40e_client.c | 5 +- drivers/net/ethernet/intel/ice/ice_main.c | 2 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_debugfs.c | 4 +- drivers/net/wireless/intel/iwlegacy/4965-rs.c | 5 +- drivers/net/xen-netback/xenbus.c | 2 +- drivers/nvme/host/tcp.c | 7 +- drivers/nvme/target/core.c | 6 +- drivers/parisc/ccio-dma.c | 11 ++- drivers/regulator/core.c | 9 ++- drivers/scsi/lpfc/lpfc_init.c | 5 +- drivers/scsi/megaraid/megaraid_sas_fusion.c | 1 - drivers/scsi/mpt3sas/mpt3sas_scsih.c | 2 +- drivers/scsi/qla2xxx/qla_target.c | 10 +-- drivers/soc/bcm/brcmstb/pm/pm-arm.c | 50 ++++++++++--- drivers/tee/tee_shm.c | 1 + drivers/tty/n_gsm.c | 46 ++++++------ drivers/video/fbdev/chipsfb.c | 1 + fs/afs/flock.c | 2 +- fs/afs/fsclient.c | 2 +- fs/afs/internal.h | 3 +- fs/afs/rxrpc.c | 7 +- fs/afs/yfsclient.c | 3 +- fs/cifs/smb2file.c | 1 - fs/cifs/smb2ops.c | 45 +++++------- fs/cifs/smb2pdu.c | 20 +++-- fs/cifs/smb2proto.h | 4 +- fs/debugfs/inode.c | 22 ++++++ fs/nfsd/vfs.c | 4 + include/linux/buffer_head.h | 11 +++ include/linux/debugfs.h | 6 ++ kernel/cgroup/cgroup.c | 85 ++++++++++++++++------ kernel/cgroup/cpuset.c | 3 +- kernel/dma/swiotlb.c | 5 +- kernel/fork.c | 1 + kernel/kprobes.c | 1 + mm/kmemleak.c | 8 +- net/bridge/br_netfilter_hooks.c | 2 + net/bridge/br_netfilter_ipv6.c | 1 + net/core/skbuff.c | 5 +- net/ipv4/tcp_input.c | 25 +++++-- net/ipv6/seg6.c | 5 ++ net/netfilter/nf_conntrack_irc.c | 5 +- net/netfilter/nf_tables_api.c | 4 +- net/rxrpc/rxkad.c | 2 +- net/sched/sch_sfb.c | 13 ++-- net/tipc/monitor.c | 2 +- sound/drivers/aloop.c | 7 +- sound/pci/emu10k1/emupcm.c | 2 +- sound/soc/atmel/mchp-spdiftx.c | 10 +-- sound/usb/card.c | 2 +- sound/usb/quirks.c | 2 +- sound/usb/stream.c | 9 ++- 88 files changed, 577 insertions(+), 351 deletions(-)