This is the start of the stable review cycle for the 5.4.215 release. There are 120 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 28 Sep 2022 10:07:26 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.215-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.4.215-rc1 Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: fix use-after-free when aborting corrupt attr inactivation Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: fix an ABBA deadlock in xfs_rename Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: don't commit sunit/swidth updates to disk if that would cause repair failures Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: split the sunit parameter update into two parts Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: refactor agfl length computation function Brian Foster <bfoster@xxxxxxxxxx> xfs: use bitops interface for buf log item AIL flag check Brian Foster <bfoster@xxxxxxxxxx> xfs: stabilize insert range start boundary to avoid COW writeback race Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: fix some memory leaks in log recovery Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: always log corruption errors Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: constify the buffer pointer arguments to error functions Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: convert EIO to EFSCORRUPTED when log contents are invalid kaixuxia <xiakaixu1987@xxxxxxxxx> xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename() Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: attach dquots and reserve quota blocks during unwritten conversion Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: range check ri_cnt when recovering log items Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: add missing assert in xfs_fsmap_owner_from_rmap Christoph Hellwig <hch@xxxxxx> xfs: slightly tweak an assert in xfs_fs_map_blocks Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: replace -EIO with -EFSCORRUPTED for corrupt metadata Jan Kara <jack@xxxxxxx> ext4: make directory inode spreading reflect flexbg size Luís Henriques <lhenriques@xxxxxxx> ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> workqueue: don't skip lockdep work dependency in cancel_work_sync() Nathan Huckleberry <nhuck@xxxxxxxxxx> drm/rockchip: Fix return type of cdn_dp_connector_mode_valid Yao Wang1 <Yao.Wang1@xxxxxxx> drm/amd/display: Limit user regamma to a valid value Hamza Mahfooz <hamza.mahfooz@xxxxxxx> drm/amdgpu: use dirty framebuffer helper Linus Walleij <linus.walleij@xxxxxxxxxx> gpio: ixp4xx: Make irqchip immutable Vitaly Kuznetsov <vkuznets@xxxxxxxxxx> Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region Stefan Metzmacher <metze@xxxxxxxxx> cifs: always initialize struct msghdr smb_msg completely Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx> usb: xhci-mtk: fix issue of out-of-bounds array access Stefan Haberland <sth@xxxxxxxxxxxxx> s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx> serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx> serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx> serial: Create uart_xmit_advance() Hangyu Hua <hbh25y@xxxxxxxxx> net: sched: fix possible refcount leak in tc_new_tfilter() Sean Anderson <seanga2@xxxxxxxxx> net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD Adrian Hunter <adrian.hunter@xxxxxxxxx> perf kcore_copy: Do not check /proc/modules is unchanged Lieven Hey <lieven.hey@xxxxxxxx> perf jit: Include program header in ELF files Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx> can: gs_usb: gs_can_open(): fix race dev->can.state condition Florian Westphal <fw@xxxxxxxxx> netfilter: ebtables: fix memory leak when blob is malformed Vladimir Oltean <vladimir.oltean@xxxxxxx> net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs Vladimir Oltean <vladimir.oltean@xxxxxxx> net/sched: taprio: avoid disabling offload when it was never enabled Liang He <windhl@xxxxxxx> of: mdio: Add of_node_put() when breaking out of for_each_xx Michal Jaron <michalx.jaron@xxxxxxxxx> i40e: Fix set max_tx_rate when it is lower than 1 Mbps Michal Jaron <michalx.jaron@xxxxxxxxx> i40e: Fix VF set max MTU size Michal Jaron <michalx.jaron@xxxxxxxxx> iavf: Fix set max MTU size with port VLAN and jumbo frames Norbert Zulinski <norbertx.zulinski@xxxxxxxxx> iavf: Fix bad page state Serge Semin <Sergey.Semin@xxxxxxxxxxxxxxxxxxxx> MIPS: Loongson32: Fix PHY-mode being left unspecified Randy Dunlap <rdunlap@xxxxxxxxxxxxx> MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko Benjamin Poirier <bpoirier@xxxxxxxxxx> net: team: Unsync device addresses on ndo_stop Lu Wei <luwei32@xxxxxxxxxx> ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header Brett Creeley <brett.creeley@xxxxxxxxx> iavf: Fix cached head and tail value for iavf_get_tx_pending Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() David Leadbeater <dgl@xxxxxx> netfilter: nf_conntrack_irc: Tighten matching on DCC message Igor Ryzhov <iryzhov@xxxxxxxxxx> netfilter: nf_conntrack_sip: fix ct_sip_walk_headers Fabio Estevam <festevam@xxxxxxx> arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma zain wang <wzz@xxxxxxxxxxxxxx> arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz Brian Norris <briannorris@xxxxxxxxxxxx> arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob Chao Yu <chao.yu@xxxxxxxx> mm/slub: fix to return errno if kmalloc() fails Ard Biesheuvel <ardb@xxxxxxxxxx> efi: libstub: check Shim mode using MokSBStateRT Callum Osmotherly <callum.osmotherly@xxxxxxxxx> ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop Luke D. Jones <luke@xxxxxxxxxx> ALSA: hda/realtek: Add quirk for ASUS GA503R laptop Luke D. Jones <luke@xxxxxxxxxx> ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack Luke D. Jones <luke@xxxxxxxxxx> ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack Takashi Iwai <tiwai@xxxxxxx> ALSA: hda/realtek: Re-arrange quirk table entries huangwenhui <huangwenhuia@xxxxxxxxxxxxx> ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 Kai Vehmanen <kai.vehmanen@xxxxxxxxxxxxxxx> ALSA: hda: add Intel 5 Series / 3400 PCI DID Mohan Kumar <mkumard@xxxxxxxxxx> ALSA: hda/tegra: set depop delay for tegra jerry meng <jerry-meng@xxxxxxxxxxx> USB: serial: option: add Quectel RM520N Carl Yin(殷张成) <carl.yin@xxxxxxxxxxx> USB: serial: option: add Quectel BG95 0x0203 composition Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: core: Fix RST error in hub.c Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "usb: add quirks for Lenovo OneLink+ Dock" Pawel Laszczak <pawell@xxxxxxxxxxx> usb: cdns3: fix issue with rearming ISO OUT endpoint Piyush Mehta <piyush.mehta@xxxxxxx> usb: gadget: udc-xilinx: replace memcpy with memcpy_toio Jean-Francois Le Fillatre <jflf_kernel@xxxxxxx> usb: add quirks for Lenovo OneLink+ Dock Sergiu Moga <sergiu.moga@xxxxxxxxxxxxx> tty: serial: atmel: Preserve previous USART mode if RS485 disabled Lino Sanfilippo <LinoSanfilippo@xxxxxx> serial: atmel: remove redundant assignment in rs485_config Codrin.Ciubotariu@xxxxxxxxxxxxx <Codrin.Ciubotariu@xxxxxxxxxxxxx> tty/serial: atmel: RS485 & ISO7816: wait for TXRDY before sending data Siddh Raman Pant <code@xxxxxxxx> wifi: mac80211: Fix UAF in ieee80211_scan_rx() Marcus Folkesson <marcus.folkesson@xxxxxxxxx> iio: adc: mcp3911: correct "microchip,device-addr" property Jonathan Cameron <Jonathan.Cameron@xxxxxxxxxx> iio:adc:mcp3911: Switch to generic firmware properties. Ikjoon Jang <ikjn@xxxxxxxxxxxx> usb: xhci-mtk: relax TT periodic bandwidth allocation Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx> usb: xhci-mtk: allow multiple Start-Split in a microframe Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx> usb: xhci-mtk: add some schedule error number Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx> usb: xhci-mtk: add a function to (un)load bandwidth info Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx> usb: xhci-mtk: use @sch_tt to check whether need do TT schedule Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx> usb: xhci-mtk: add only one extra CS for FS/LS INTR Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx> usb: xhci-mtk: get the microframe boundary for ESIT Wesley Cheng <quic_wcheng@xxxxxxxxxxx> usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: dwc3: gadget: Refactor pullup() Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: dwc3: gadget: Prevent repeat pullup() Wesley Cheng <quic_wcheng@xxxxxxxxxxx> usb: dwc3: Issue core soft reset before enabling run/stop Wesley Cheng <wcheng@xxxxxxxxxxxxxx> usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind Takashi Iwai <tiwai@xxxxxxx> ALSA: hda/sigmatel: Fix unused variable warning for beep power change Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() Hyunwoo Kim <imv4bel@xxxxxxxxx> video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write Youling Tang <tangyouling@xxxxxxxxxxx> mksysmap: Fix the mismatch of 'L0' symbols in System.map Alexander Sverdlin <alexander.sverdlin@xxxxxxxxx> MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() David Howells <dhowells@xxxxxxxxxx> afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked jerry.meng <jerry-meng@xxxxxxxxxxx> net: usb: qmi_wwan: add Quectel RM520N Mohan Kumar <mkumard@xxxxxxxxxx> ALSA: hda/tegra: Align BDL entry to 4KB boundary Takashi Iwai <tiwai@xxxxxxx> ALSA: hda/sigmatel: Keep power up while beep is enabled David Howells <dhowells@xxxxxxxxxx> rxrpc: Fix calc of resend age David Howells <dhowells@xxxxxxxxxx> rxrpc: Fix local destruction being repeated Xiaolei Wang <xiaolei.wang@xxxxxxxxxxxxx> regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() Takashi Iwai <tiwai@xxxxxxx> ASoC: nau8824: Fix semaphore unbalance at error paths Chandan Babu R <chandan.babu@xxxxxxxxxx> iomap: iomap that extends beyond EOF should be marked dirty Chandan Babu R <chandan.babu@xxxxxxxxxx> MAINTAINERS: add Chandan as xfs maintainer for 5.4.y Stefan Metzmacher <metze@xxxxxxxxx> cifs: don't send down the destination address to sendmsg for a SOCK_STREAM Ronnie Sahlberg <lsahlber@xxxxxxxxxx> cifs: revalidate mapping when doing direct writes Yipeng Zou <zouyipeng@xxxxxxxxxx> tracing: hold caller_addr to hardirq_{enable,disable}_ip Borislav Petkov <bp@xxxxxxx> task_stack, x86/cea: Force-inline stack helpers Sasha Levin <sashal@xxxxxxxxxx> ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC Ard Biesheuvel <ardb@xxxxxxxxxx> efi: libstub: Disable struct randomization Sami Tolvanen <samitolvanen@xxxxxxxxxx> efi/libstub: Disable Shadow Call Stack Yang Yingliang <yangyingliang@xxxxxxxxxx> parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() Stuart Menefy <stuart.menefy@xxxxxxxxxxxxxxxx> drm/meson: Fix OSD1 RGB to YCbCr coefficient Stuart Menefy <stuart.menefy@xxxxxxxxxxxxxxxx> drm/meson: Correct OSD1 global alpha value Pali Rohár <pali@xxxxxxxxxx> gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 Sergey Shtylyov <s.shtylyov@xxxxxx> of: fdt: fix off-by-one error in unflatten_dt_nodes() ------------- Diffstat: MAINTAINERS | 3 +- Makefile | 4 +- arch/arm64/boot/dts/rockchip/rk3399-gru-bob.dts | 5 + .../boot/dts/rockchip/rk3399-gru-chromebook.dtsi | 9 ++ arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi | 1 - arch/mips/cavium-octeon/octeon-irq.c | 10 ++ arch/mips/lantiq/clk.c | 1 + arch/mips/loongson32/common/platform.c | 16 +- arch/x86/include/asm/cpu_entry_area.h | 2 +- drivers/firmware/efi/libstub/Makefile | 10 ++ drivers/firmware/efi/libstub/secureboot.c | 8 +- drivers/gpio/gpio-ixp4xx.c | 17 ++- drivers/gpio/gpio-mpc8xxx.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 2 + .../drm/amd/display/modules/color/color_gamma.c | 4 + drivers/gpu/drm/meson/meson_plane.c | 2 +- drivers/gpu/drm/meson/meson_viu.c | 2 +- drivers/gpu/drm/rockchip/cdn-dp-core.c | 5 +- drivers/hv/vmbus_drv.c | 10 +- drivers/iio/adc/mcp3911.c | 16 +- drivers/net/can/usb/gs_usb.c | 4 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 32 +++- drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 20 +++ drivers/net/ethernet/intel/iavf/iavf_txrx.c | 9 +- drivers/net/ethernet/intel/iavf/iavf_virtchnl.c | 7 +- drivers/net/ethernet/sun/sunhme.c | 4 +- drivers/net/ipvlan/ipvlan_core.c | 6 +- drivers/net/team/team.c | 24 ++- drivers/net/usb/qmi_wwan.c | 1 + drivers/of/fdt.c | 2 +- drivers/of/of_mdio.c | 1 + drivers/parisc/ccio-dma.c | 1 + drivers/regulator/pfuze100-regulator.c | 2 +- drivers/s390/block/dasd_alias.c | 9 +- drivers/tty/serial/atmel_serial.c | 32 ++-- drivers/tty/serial/serial-tegra.c | 5 +- drivers/tty/serial/tegra-tcu.c | 2 +- drivers/usb/cdns3/gadget.c | 1 + drivers/usb/core/hub.c | 2 +- drivers/usb/dwc3/core.c | 2 +- drivers/usb/dwc3/core.h | 4 + drivers/usb/dwc3/gadget.c | 81 +++++----- drivers/usb/host/xhci-mtk-sch.c | 149 ++++++++++-------- drivers/usb/host/xhci-mtk.h | 2 - drivers/usb/serial/option.c | 6 + drivers/video/fbdev/pxa3xx-gcu.c | 2 +- fs/afs/misc.c | 1 + fs/cifs/connect.c | 7 +- fs/cifs/file.c | 3 + fs/cifs/transport.c | 6 +- fs/ext4/extents.c | 4 + fs/ext4/ialloc.c | 2 +- fs/nfs/super.c | 27 ++-- fs/xfs/libxfs/xfs_alloc.c | 27 +++- fs/xfs/libxfs/xfs_attr_leaf.c | 12 +- fs/xfs/libxfs/xfs_bmap.c | 16 +- fs/xfs/libxfs/xfs_btree.c | 5 +- fs/xfs/libxfs/xfs_da_btree.c | 24 ++- fs/xfs/libxfs/xfs_dir2.c | 4 +- fs/xfs/libxfs/xfs_dir2_leaf.c | 4 +- fs/xfs/libxfs/xfs_dir2_node.c | 12 +- fs/xfs/libxfs/xfs_dir2_sf.c | 28 +++- fs/xfs/libxfs/xfs_ialloc.c | 64 ++++++++ fs/xfs/libxfs/xfs_ialloc.h | 1 + fs/xfs/libxfs/xfs_inode_fork.c | 6 + fs/xfs/libxfs/xfs_refcount.c | 4 +- fs/xfs/libxfs/xfs_rtbitmap.c | 6 +- fs/xfs/xfs_acl.c | 15 +- fs/xfs/xfs_attr_inactive.c | 10 +- fs/xfs/xfs_attr_list.c | 5 +- fs/xfs/xfs_bmap_item.c | 7 +- fs/xfs/xfs_bmap_util.c | 12 ++ fs/xfs/xfs_buf_item.c | 2 +- fs/xfs/xfs_dquot.c | 2 +- fs/xfs/xfs_error.c | 27 +++- fs/xfs/xfs_error.h | 7 +- fs/xfs/xfs_extfree_item.c | 5 +- fs/xfs/xfs_fsmap.c | 1 + fs/xfs/xfs_inode.c | 40 ++++- fs/xfs/xfs_inode_item.c | 5 +- fs/xfs/xfs_iomap.c | 17 +++ fs/xfs/xfs_iops.c | 10 +- fs/xfs/xfs_log_recover.c | 72 ++++++--- fs/xfs/xfs_message.c | 2 +- fs/xfs/xfs_message.h | 2 +- fs/xfs/xfs_mount.c | 168 ++++++++++++++------- fs/xfs/xfs_pnfs.c | 4 +- fs/xfs/xfs_qm.c | 13 +- fs/xfs/xfs_refcount_item.c | 5 +- fs/xfs/xfs_rmap_item.c | 9 +- fs/xfs/xfs_trace.h | 21 +++ include/linux/iomap.h | 2 + include/linux/sched/task_stack.h | 2 +- include/linux/serial_core.h | 17 +++ kernel/cgroup/cgroup-v1.c | 3 + kernel/trace/trace_preemptirq.c | 4 +- kernel/workqueue.c | 6 +- mm/slub.c | 5 +- net/bridge/netfilter/ebtables.c | 4 +- net/mac80211/scan.c | 11 +- net/netfilter/nf_conntrack_irc.c | 34 ++++- net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nfnetlink_osf.c | 4 +- net/rxrpc/call_event.c | 2 +- net/rxrpc/local_object.c | 3 + net/sched/cls_api.c | 1 + net/sched/sch_taprio.c | 18 ++- scripts/mksysmap | 2 +- sound/core/oss/pcm_oss.c | 5 +- sound/pci/hda/hda_intel.c | 2 + sound/pci/hda/hda_tegra.c | 3 +- sound/pci/hda/patch_hdmi.c | 1 + sound/pci/hda/patch_realtek.c | 31 +++- sound/pci/hda/patch_sigmatel.c | 24 +++ sound/soc/codecs/nau8824.c | 17 ++- tools/perf/util/genelf.c | 14 ++ tools/perf/util/genelf.h | 4 + tools/perf/util/symbol-elf.c | 7 +- 118 files changed, 1096 insertions(+), 396 deletions(-)