This is the start of the stable review cycle for the 5.4.240 release. There are 104 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 05 Apr 2023 14:03:18 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.240-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.4.240-rc1 Andreas Gruenbacher <agruenba@xxxxxxxxxx> gfs2: Always check inode size of inline inodes Cristian Marussi <cristian.marussi@xxxxxxx> firmware: arm_scmi: Fix device node validation for mailbox transport Eric Dumazet <edumazet@xxxxxxxxxx> net: sched: fix race condition in qdisc_graft() Eric Dumazet <edumazet@xxxxxxxxxx> net_sched: add __rcu annotation to netdev->qdisc Ye Bin <yebin10@xxxxxxxxxx> ext4: fix kernel BUG in 'ext4_write_inline_data_end()' Anand Jain <anand.jain@xxxxxxxxxx> btrfs: scan device in non-exclusive mode Heiko Carstens <hca@xxxxxxxxxxxxx> s390/uaccess: add missing earlyclobber annotations to __clear_user() Lucas Stach <l.stach@xxxxxxxxxxxxxx> drm/etnaviv: fix reference leak when mmaping imported buffer Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Fix regression on detection of Roland VS-100 Takashi Iwai <tiwai@xxxxxxx> ALSA: hda/conexant: Partial revert of a quirk for Lenovo Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4: Fix hangs when recovering open state after a server reboot Johan Hovold <johan+linaro@xxxxxxxxxx> pinctrl: at91-pio4: fix domain name assignment Juergen Gross <jgross@xxxxxxxx> xen/netback: don't do grant copy across page boundary Hans de Goede <hdegoede@xxxxxxxxxx> Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table David Disseldorp <ddiss@xxxxxxx> cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL Paulo Alcantara <pc@xxxxxxxxxxxxx> cifs: prevent infinite recursion in CIFSGetDFSRefer() Jason A. Donenfeld <Jason@xxxxxxxxx> Input: focaltech - use explicitly signed char type msizanoen <msizanoen@xxxxxxxxxxx> Input: alps - fix compatibility with -funsigned-char Horatiu Vultur <horatiu.vultur@xxxxxxxxxxxxx> pinctrl: ocelot: Fix alt mode for ocelot Lorenzo Bianconi <lorenzo@xxxxxxxxxx> net: mvneta: make tx buffer array agnostic Steffen Bätz <steffen@xxxxxxxxxxxx> net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only Kalesh AP <kalesh-anakkur.purayil@xxxxxxxxxxxx> bnxt_en: Fix typo in PCI id to device description string mapping Radoslaw Tyl <radoslawx.tyl@xxxxxxxxx> i40e: fix registers dump after run ethtool adapter self test Tony Krowiak <akrowiak@xxxxxxxxxxxxx> s390/vfio-ap: fix memory leak in vfio_ap device driver Ivan Orlov <ivan.orlov0322@xxxxxxxxx> can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write Faicker Mo <faicker.mo@xxxxxxxxx> net/net_failover: fix txq exceeding warning Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> regulator: Handle deferred clk Colin Ian King <colin.king@xxxxxxxxxxxxx> regulator: fix spelling mistake "Cant" -> "Can't" SongJingyi <u201912584@xxxxxxxxxxx> ptp_qoriq: fix memory leak in probe() Tomas Henzl <thenzl@xxxxxxxxxx> scsi: megaraid_sas: Fix crash after a double completion Arseniy Krasnov <avkrasnov@xxxxxxxxxxxxxx> mtd: rawnand: meson: invalidate cache on polling ECC bit Álvaro Fernández Rojas <noltari@xxxxxxxxx> mips: bmips: BCM6358: disable RAC flush for TP1 Christoph Hellwig <hch@xxxxxx> dma-mapping: drop the dev argument to arch_sync_dma_for_* Harshit Mogalapalli <harshit.m.mogalapalli@xxxxxxxxxx> ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() Wei Chen <harperchen1110@xxxxxxxxx> fbdev: au1200fb: Fix potential divide by zero Wei Chen <harperchen1110@xxxxxxxxx> fbdev: lxfb: Fix potential divide by zero Wei Chen <harperchen1110@xxxxxxxxx> fbdev: intelfb: Fix potential divide by zero Wei Chen <harperchen1110@xxxxxxxxx> fbdev: nvidia: Fix potential divide by zero Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> sched_getaffinity: don't assume 'cpumask_size()' is fully initialized Wei Chen <harperchen1110@xxxxxxxxx> fbdev: tgafb: Fix potential divide by zero Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx> ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx> ALSA: asihpi: check pao in control_message() NeilBrown <neilb@xxxxxxx> md: avoid signed overflow in slot_store() Ivan Bornyakov <i.bornyakov@xxxxxxxxxxx> bus: imx-weim: fix branch condition evaluates to a garbage value Eric Biggers <ebiggers@xxxxxxxxxx> fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY Jan Kara via Ocfs2-devel <ocfs2-devel@xxxxxxxxxxxxxx> ocfs2: fix data corruption after failed write George Kennedy <george.kennedy@xxxxxxxxxx> tun: avoid double free in tun_free_netdev Vincent Guittot <vincent.guittot@xxxxxxxxxx> sched/fair: Sanitize vruntime of entity being migrated Zhang Qiao <zhangqiao22@xxxxxxxxxx> sched/fair: sanitize vruntime of entity being placed Mikulas Patocka <mpatocka@xxxxxxxxxx> dm crypt: add cond_resched() to dmcrypt_write() Jiasheng Jiang <jiasheng@xxxxxxxxxxx> dm stats: check for and propagate alloc_percpu failure Wei Chen <harperchen1110@xxxxxxxxx> i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() Felix Fietkau <nbd@xxxxxxxx> wifi: mac80211: fix qos on mesh interfaces Xu Yang <xu.yang_2@xxxxxxx> usb: chipidea: core: fix possible concurrent when switch role Xu Yang <xu.yang_2@xxxxxxx> usb: chipdea: core: fix return -EINVAL if request role is the same with current role Pawel Laszczak <pawell@xxxxxxxxxxx> usb: cdns3: Fix issue with using incorrect PCI device function Coly Li <colyli@xxxxxxx> dm thin: fix deadlock when swapping to thin device Lin Ma <linma@xxxxxxxxxx> igb: revert rtnl_lock() that causes deadlock Nathan Huckleberry <nhuck@xxxxxxxxxx> fsverity: Remove WQ_UNBOUND from fsverity read workqueue Alvin Šipraga <alsi@xxxxxxxxxxxxxxx> usb: gadget: u_audio: don't let userspace block driver unbind Joel Selvaraj <joelselvaraj.oss@xxxxxxxxx> scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR Shyam Prasad N <sprasad@xxxxxxxxxxxxx> cifs: empty interface list when server doesn't support query interfaces Al Viro <viro@xxxxxxxxxxxxxxxxxx> sh: sanitize the flags on sigreturn Enrico Sau <enrico.sau@xxxxxxxxx> net: usb: qmi_wwan: add Telit 0x1080 composition Enrico Sau <enrico.sau@xxxxxxxxx> net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 Jakob Koschel <jkl820.git@xxxxxxxxx> scsi: lpfc: Avoid usage of list iterator variable after loop Adrien Thierry <athierry@xxxxxxxxxx> scsi: ufs: core: Add soft dependency on governor_simpleondemand Maurizio Lombardi <mlombard@xxxxxxxxxx> scsi: target: iscsi: Fix an error message in iscsi_check_key() Lorenz Bauer <lorenz.bauer@xxxxxxxxxxxxx> selftests/bpf: check that modifier resolves after pointer Michael Schmitz <schmitzmic@xxxxxxxxx> m68k: Only force 030 bus error if PC not in exception table Alexander Aring <aahringo@xxxxxxxxxx> ca8210: fix mac_len negative array access Alexandre Ghiti <alex@xxxxxxxx> riscv: Bump COMMAND_LINE_SIZE value to 1024 Mario Limonciello <mario.limonciello@xxxxxxx> thunderbolt: Use const qualifier for `ring_interrupt_index` Yaroslav Furman <yaro330@xxxxxxxxx> uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 Nilesh Javali <njavali@xxxxxxxxxxx> scsi: qla2xxx: Perform lockless command completion in abort path Frank Crawford <frank@xxxxxxxxxxxxxxxxxx> hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs Tzung-Bi Shih <tzungbi@xxxxxxxxxx> platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl Zheng Wang <zyytlz.wz@xxxxxxx> Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work Stephan Gerhold <stephan.gerhold@xxxxxxxxxxxxxxx> Bluetooth: btqcomsmd: Fix command timeout after setting BD address Liang He <windhl@xxxxxxx> net: mdio: thunder: Add missing fwnode_handle_put() Arınç ÜNAL <arinc.unal@xxxxxxxxxx> net: dsa: mt7530: move setting ssc_delta to PHY_INTERFACE_MODE_TRGMII case Roger Pau Monne <roger.pau@xxxxxxxxxx> hvc/xen: prevent concurrent accesses to the shared ring Caleb Sander <csander@xxxxxxxxxxxxxxx> nvme-tcp: fix nvme_tcp_term_pdu to match spec Zhang Changzhong <zhangchangzhong@xxxxxxxxxx> net/sonic: use dma_mapping_error() for error check Eric Dumazet <edumazet@xxxxxxxxxx> erspan: do not use skb_mac_header() in ndo_start_xmit() Li Zetao <lizetao1@xxxxxxxxxx> atm: idt77252: fix kmemleak when rmmod idt77252 Maher Sanalla <msanalla@xxxxxxxxxx> net/mlx5: Read the TC mapping of all priorities on ETS query Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: Adjust insufficient default bpf_jit_limit David Howells <dhowells@xxxxxxxxxx> keys: Do not cache key in task struct if key is requested from kernel thread Geoff Levand <geoff@xxxxxxxxxxxxx> net/ps3_gelic_net: Use dma_mapping_error Geoff Levand <geoff@xxxxxxxxxxxxx> net/ps3_gelic_net: Fix RX sk_buff length Zheng Wang <zyytlz.wz@xxxxxxx> net: qcom/emac: Fix use after free bug in emac_remove due to race condition Zheng Wang <zyytlz.wz@xxxxxxx> xirc2ps_cs: Fix use after free bug in xirc2ps_detach Daniil Tatianin <d-tatianin@xxxxxxxxxxxxxx> qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info Szymon Heidrich <szymon.heidrich@xxxxxxxxx> net: usb: smsc95xx: Limit packet length to skb->len Yu Kuai <yukuai3@xxxxxxxxxx> scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> i2c: imx-lpi2c: check only for enabled interrupt flags Akihiko Odaki <akihiko.odaki@xxxxxxxxxx> igbvf: Regard vf reset nack as success Gaosheng Cui <cuigaosheng1@xxxxxxxxxx> intel/igbvf: free irq on the error path in igbvf_request_msix() Alexander Lobakin <aleksander.lobakin@xxxxxxxxx> iavf: fix non-tunneled IPv6 UDP packet type and hashing Alexander Lobakin <aleksander.lobakin@xxxxxxxxx> iavf: fix inverted Rx hash condition leading to disabled hash Zheng Wang <zyytlz.wz@xxxxxxx> power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition Hangyu Hua <hbh25y@xxxxxxxxx> net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() ------------- Diffstat: Makefile | 4 +- arch/arc/mm/dma.c | 8 +- arch/arm/mm/dma-mapping.c | 8 +- arch/arm/xen/mm.c | 12 +-- arch/arm64/mm/dma-mapping.c | 8 +- arch/c6x/mm/dma-coherent.c | 14 +-- arch/csky/mm/dma-mapping.c | 8 +- arch/hexagon/kernel/dma.c | 4 +- arch/ia64/mm/init.c | 4 +- arch/m68k/kernel/dma.c | 4 +- arch/m68k/kernel/traps.c | 4 +- arch/microblaze/kernel/dma.c | 14 +-- arch/mips/bmips/dma.c | 7 +- arch/mips/bmips/setup.c | 8 ++ arch/mips/jazz/jazzdma.c | 17 ++-- arch/mips/mm/dma-noncoherent.c | 12 +-- arch/nds32/kernel/dma.c | 8 +- arch/nios2/mm/dma-mapping.c | 8 +- arch/openrisc/kernel/dma.c | 2 +- arch/parisc/kernel/pci-dma.c | 8 +- arch/powerpc/mm/dma-noncoherent.c | 8 +- arch/riscv/include/uapi/asm/setup.h | 8 ++ arch/s390/lib/uaccess.c | 2 +- arch/sh/include/asm/processor_32.h | 1 + arch/sh/kernel/dma-coherent.c | 6 +- arch/sh/kernel/signal_32.c | 3 + arch/sparc/kernel/ioport.c | 4 +- arch/xtensa/kernel/pci-dma.c | 8 +- drivers/atm/idt77252.c | 11 +++ drivers/bluetooth/btqcomsmd.c | 17 +++- drivers/bluetooth/btsdio.c | 1 + drivers/bus/imx-weim.c | 2 +- drivers/firmware/arm_scmi/driver.c | 37 +++++++ drivers/gpu/drm/etnaviv/etnaviv_gem_prime.c | 10 +- drivers/hwmon/it87.c | 4 +- drivers/i2c/busses/i2c-imx-lpi2c.c | 4 + drivers/i2c/busses/i2c-xgene-slimpro.c | 3 + drivers/input/mouse/alps.c | 16 +-- drivers/input/mouse/focaltech.c | 8 +- drivers/input/touchscreen/goodix.c | 14 ++- drivers/iommu/dma-iommu.c | 10 +- drivers/md/dm-crypt.c | 1 + drivers/md/dm-stats.c | 7 +- drivers/md/dm-stats.h | 2 +- drivers/md/dm-thin.c | 2 + drivers/md/dm.c | 4 +- drivers/md/md.c | 3 + drivers/mtd/nand/raw/meson_nand.c | 8 +- drivers/net/dsa/mt7530.c | 9 +- drivers/net/dsa/mv88e6xxx/chip.c | 9 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 8 +- drivers/net/ethernet/intel/i40e/i40e_diag.c | 11 ++- drivers/net/ethernet/intel/i40e/i40e_diag.h | 2 +- drivers/net/ethernet/intel/iavf/iavf_common.c | 2 +- drivers/net/ethernet/intel/iavf/iavf_txrx.c | 2 +- drivers/net/ethernet/intel/igb/igb_main.c | 2 - drivers/net/ethernet/intel/igbvf/netdev.c | 8 +- drivers/net/ethernet/intel/igbvf/vf.c | 13 ++- drivers/net/ethernet/marvell/mvneta.c | 66 ++++++++----- drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 6 +- drivers/net/ethernet/natsemi/sonic.c | 4 +- drivers/net/ethernet/qlogic/qed/qed_sriov.c | 5 +- drivers/net/ethernet/qualcomm/emac/emac.c | 6 ++ drivers/net/ethernet/toshiba/ps3_gelic_net.c | 41 ++++---- drivers/net/ethernet/toshiba/ps3_gelic_net.h | 5 +- drivers/net/ethernet/xircom/xirc2ps_cs.c | 5 + drivers/net/ieee802154/ca8210.c | 5 +- drivers/net/net_failover.c | 8 +- drivers/net/phy/mdio-thunder.c | 1 + drivers/net/tun.c | 109 +++++++++++---------- drivers/net/usb/cdc_mbim.c | 5 + drivers/net/usb/qmi_wwan.c | 1 + drivers/net/usb/smsc95xx.c | 6 ++ drivers/net/xen-netback/common.h | 2 +- drivers/net/xen-netback/netback.c | 25 ++++- drivers/pinctrl/pinctrl-at91-pio4.c | 1 - drivers/pinctrl/pinctrl-ocelot.c | 2 +- drivers/platform/chrome/cros_ec_chardev.c | 2 +- drivers/power/supply/da9150-charger.c | 1 + drivers/ptp/ptp_qoriq.c | 2 +- drivers/regulator/fixed.c | 4 +- drivers/s390/crypto/vfio_ap_drv.c | 3 +- drivers/scsi/device_handler/scsi_dh_alua.c | 6 +- drivers/scsi/lpfc/lpfc_sli.c | 8 +- drivers/scsi/megaraid/megaraid_sas_fusion.c | 4 +- drivers/scsi/qla2xxx/qla_os.c | 11 +++ drivers/scsi/scsi_devinfo.c | 1 + drivers/scsi/ufs/ufshcd.c | 1 + drivers/target/iscsi/iscsi_target_parameters.c | 12 ++- drivers/thunderbolt/nhi.c | 2 +- drivers/tty/hvc/hvc_xen.c | 19 +++- drivers/usb/cdns3/cdns3-pci-wrap.c | 5 + drivers/usb/chipidea/ci.h | 2 + drivers/usb/chipidea/core.c | 11 ++- drivers/usb/chipidea/otg.c | 5 +- drivers/usb/gadget/function/u_audio.c | 2 +- drivers/usb/storage/unusual_uas.h | 7 ++ drivers/video/fbdev/au1200fb.c | 3 + drivers/video/fbdev/geode/lxfb_core.c | 3 + drivers/video/fbdev/intelfb/intelfbdrv.c | 3 + drivers/video/fbdev/nvidia/nvidia.c | 2 + drivers/video/fbdev/tgafb.c | 3 + drivers/xen/swiotlb-xen.c | 8 +- fs/btrfs/volumes.c | 11 ++- fs/cifs/cifsfs.h | 5 +- fs/cifs/cifssmb.c | 9 +- fs/cifs/smb2ops.c | 2 +- fs/ext4/inode.c | 3 +- fs/gfs2/aops.c | 2 - fs/gfs2/bmap.c | 3 - fs/gfs2/glops.c | 3 + fs/nfs/nfs4proc.c | 5 +- fs/nilfs2/ioctl.c | 2 +- fs/ocfs2/aops.c | 18 +++- fs/verity/enable.c | 24 ++--- fs/verity/verify.c | 12 +-- include/linux/dma-noncoherent.h | 20 ++-- include/linux/netdevice.h | 2 +- include/linux/nvme-tcp.h | 5 +- include/xen/swiotlb-xen.h | 8 +- kernel/bpf/core.c | 2 +- kernel/compat.c | 2 +- kernel/dma/direct.c | 14 +-- kernel/sched/core.c | 7 +- kernel/sched/fair.c | 54 +++++++++- net/can/bcm.c | 16 +-- net/core/rtnetlink.c | 6 +- net/ipv4/ip_gre.c | 4 +- net/ipv6/ip6_gre.c | 4 +- net/mac80211/wme.c | 6 +- net/sched/cls_api.c | 6 +- net/sched/sch_api.c | 25 ++--- net/sched/sch_generic.c | 22 +++-- net/tls/tls_main.c | 9 +- security/keys/request_key.c | 9 +- sound/pci/asihpi/hpi6205.c | 2 +- sound/pci/hda/patch_ca0132.c | 4 +- sound/pci/hda/patch_conexant.c | 6 +- sound/usb/format.c | 8 +- tools/testing/selftests/bpf/test_btf.c | 28 ++++++ 140 files changed, 834 insertions(+), 399 deletions(-)