This is the start of the stable review cycle for the 5.10.206 release. There are 75 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 05 Jan 2024 16:47:49 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.206-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.10.206-rc1 Ville Baillie <villeb@xxxxxxxxxxxxxx> spi: atmel: Fix PDC transfer setup bug Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: SMP: Fix crash when receiving new connection when debug is enabled Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "MIPS: Loongson64: Enable DMA noncoherent support" Francis Laniel <flaniel@xxxxxxxxxxxxxxxxxxx> tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols Mikulas Patocka <mpatocka@xxxxxxxxxx> dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: skip set commit for deleted/destroyed sets Steven Rostedt (Google) <rostedt@xxxxxxxxxxx> tracing: Fix blocked reader of snapshot buffer Steven Rostedt (Google) <rostedt@xxxxxxxxxxx> ring-buffer: Fix wake ups when buffer_percent is set to 100 Alexander Atanasov <alexander.atanasov@xxxxxxxxxxxxx> scsi: core: Always send batch on reset or error handling command Bart Van Assche <bvanassche@xxxxxxx> scsi: core: Use a structure member to track the SCSI command submitter Bart Van Assche <bvanassche@xxxxxxx> scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request Martin K. Petersen <martin.petersen@xxxxxxxxxx> scsi: core: Make scsi_get_lba() return the LBA Bart Van Assche <bvanassche@xxxxxxx> scsi: core: Introduce scsi_get_sector() Martin K. Petersen <martin.petersen@xxxxxxxxxx> scsi: core: Add scsi_prot_ref_tag() helper Dan Sneddon <dan.sneddon@xxxxxxxxxxxxx> spi: atmel: Fix CS and initialization bug Dan Sneddon <dan.sneddon@xxxxxxxxxxxxx> spi: atmel: Switch to transfer_one transfer method Hyunwoo Kim <v4bel@xxxxxxxxx> Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix OOB in smbCalcSize() Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix OOB in SMB2_query_info_init() Dan Carpenter <dan.carpenter@xxxxxxxxxx> usb: fotg210-hcd: delete an incorrect bounds test Xiao Yao <xiaoyao@xxxxxxxxxxxxxx> Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE Archie Pusaka <apusaka@xxxxxxxxxxxx> Bluetooth: use inclusive language in SMP Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: SMP: Convert BT_ERR/BT_DBG to bt_dev_err/bt_dev_dbg Tony Lindgren <tony@xxxxxxxxxxx> ARM: dts: Fix occasional boot hang for am3 usb Hangyu Hua <hbh25y@xxxxxxxxx> 9p/net: fix possible memory leak in p9_check_errors() Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/alternatives: Sync core before enabling interrupts Herve Codina <herve.codina@xxxxxxxxxxx> lib/vsprintf: Fix %pfwf when current node refcount == 0 Tony Lindgren <tony@xxxxxxxxxxx> bus: ti-sysc: Flush posted write only after srst_udelay Steven Rostedt (Google) <rostedt@xxxxxxxxxxx> tracing / synthetic: Disable events after testing in synth_event_gen_test_init() Fabio Estevam <festevam@xxxxxxx> dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp Ronald Wahl <ronald.wahl@xxxxxxxxxxx> net: ks8851: Fix TX stall caused by TX buffer overrun Rouven Czerwinski <r.czerwinski@xxxxxxxxxxxxxx> net: rfkill: gpio: set GPIO direction Fedor Pchelkin <pchelkin@xxxxxxxxx> net: 9p: avoid freeing uninit memory in p9pdu_vreadf Christoffer Sandberg <cs@xxxxxxxxx> Input: soc_button_array - add mapping for airplane mode button Frédéric Danis <frederic.danis@xxxxxxxxxxxxx> Bluetooth: L2CAP: Send reject on command corrupted request Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent Reinhard Speyerer <rspmn@xxxxxxxx> USB: serial: option: add Quectel RM500Q R13 firmware support Slark Xiao <slark_xiao@xxxxxxx> USB: serial: option: add Foxconn T99W265 with new baseline Alper Ak <alperyasinak1@xxxxxxxxx> USB: serial: option: add Quectel EG912Y module support Mark Glover <mark.glover@xxxxxxxxxxxxx> USB: serial: ftdi_sio: update Actisense PIDs constant names Johannes Berg <johannes.berg@xxxxxxxxx> wifi: cfg80211: fix certs build to not depend on file order Chen-Yu Tsai <wens@xxxxxxxxxx> wifi: cfg80211: Add my certificate Wadim Egorov <w.egorov@xxxxxxxxx> iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table Wei Yongjun <weiyongjun1@xxxxxxxxxx> scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() Haoran Liu <liuhaoran14@xxxxxxx> Input: ipaq-micro-keys - add error handling for devm_kmemdup Konrad Dybcio <konrad.dybcio@xxxxxxxxxx> interconnect: qcom: sm8250: Enable sync_state Su Hui <suhui@xxxxxxxxxxxx> iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw Mike Tipton <quic_mdtipton@xxxxxxxxxxx> interconnect: Treat xlate() returning NULL node as an error Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: do not allow non subvolume root targets for snapshot Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix NULL deref in asn1_ber_decoder() Kai Vehmanen <kai.vehmanen@xxxxxxxxxxxxxxx> ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB Kai Vehmanen <kai.vehmanen@xxxxxxxxxxxxxxx> ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10 Alexis Lothoré <alexis.lothore@xxxxxxxxxxx> pinctrl: at91-pio4: use dedicated lock class for IRQ Quan Nguyen <quan@xxxxxxxxxxxxxxxxxxxxxx> i2c: aspeed: Handle the coalesced stop conditions with the start conditions. David Howells <dhowells@xxxxxxxxxx> afs: Fix overwriting of result of DNS query David Howells <dhowells@xxxxxxxxxx> keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry Eric Dumazet <edumazet@xxxxxxxxxx> net: check dev->gso_max_size in gso_features_check() Heiner Kallweit <hkallweit1@xxxxxxxxx> net: warn if gso_type isn't set for a GSO SKB David Howells <dhowells@xxxxxxxxxx> afs: Fix dynamic root lookup DNS check David Howells <dhowells@xxxxxxxxxx> afs: Fix the dynamic root's d_delete to always delete unused dentries Liu Jian <liujian56@xxxxxxxxxx> net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() Eric Dumazet <edumazet@xxxxxxxxxx> net/rose: fix races in rose_kill_by_device() Zhipeng Lu <alexious@xxxxxxxxxx> ethernet: atheros: fix a memleak in atl1e_setup_ring_resources Eric Dumazet <edumazet@xxxxxxxxxx> net: sched: ife: fix potential use-after-free Rahul Rameshbabu <rrameshbabu@xxxxxxxxxx> net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors Moshe Shemesh <moshe@xxxxxxxxxx> net/mlx5: Fix fw tracer first block check Shifeng Li <lishifeng@xxxxxxxxxxxxxx> net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() Vlad Buslov <vladbu@xxxxxxxxxx> Revert "net/mlx5e: fix double free of encap_header" Johannes Berg <johannes.berg@xxxxxxxxx> wifi: mac80211: mesh_plink: fix matches_local logic Heiko Carstens <hca@xxxxxxxxxxxxx> s390/vx: fix save/restore of fpu kernel context Geert Uytterhoeven <geert+renesas@xxxxxxxxx> reset: Fix crash when freeing non-existent optional resets Kunwu Chan <chentao@xxxxxxxxxx> ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix OOB in smb2_query_reparse_point() Namjae Jeon <linkinjeon@xxxxxxxxxx> ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE ------------- Diffstat: .../devicetree/bindings/nvmem/mxs-ocotp.yaml | 10 +- Makefile | 4 +- arch/arm/boot/dts/am33xx.dtsi | 1 + arch/arm/mach-omap2/id.c | 5 + arch/mips/Kconfig | 2 - arch/mips/include/asm/mach-loongson64/boot_param.h | 3 +- arch/mips/loongson64/env.c | 10 +- arch/s390/include/asm/fpu/api.h | 2 +- arch/x86/kernel/alternative.c | 2 +- drivers/bus/ti-sysc.c | 18 ++- drivers/i2c/busses/i2c-aspeed.c | 48 ++++-- drivers/iio/adc/ti_am335x_adc.c | 4 +- drivers/iio/common/ms_sensors/ms_sensors_i2c.c | 4 +- drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 4 +- drivers/input/keyboard/ipaq-micro-keys.c | 3 + drivers/input/misc/soc_button_array.c | 5 + drivers/interconnect/core.c | 3 + drivers/interconnect/qcom/sm8250.c | 1 + drivers/md/dm-integrity.c | 11 +- drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 5 +- .../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 2 +- .../net/ethernet/mellanox/mlx5/core/en/tc_tun.c | 10 +- drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/vport.c | 2 +- drivers/net/ethernet/micrel/ks8851.h | 3 + drivers/net/ethernet/micrel/ks8851_common.c | 22 +-- drivers/net/ethernet/micrel/ks8851_spi.c | 42 ++++-- drivers/pinctrl/pinctrl-at91-pio4.c | 8 + drivers/reset/core.c | 3 + drivers/scsi/bnx2fc/bnx2fc_fcoe.c | 9 +- drivers/scsi/scsi.c | 2 +- drivers/scsi/scsi_error.c | 34 ++--- drivers/scsi/scsi_lib.c | 38 +++-- drivers/scsi/scsi_logging.c | 18 ++- drivers/scsi/scsi_priv.h | 1 + drivers/spi/spi-atmel.c | 133 +++++------------ drivers/usb/host/fotg210-hcd.c | 3 - drivers/usb/serial/ftdi_sio.c | 6 +- drivers/usb/serial/ftdi_sio_ids.h | 6 +- drivers/usb/serial/option.c | 5 + fs/afs/cell.c | 6 +- fs/afs/dynroot.c | 31 ++-- fs/btrfs/ioctl.c | 9 ++ fs/cifs/misc.c | 4 + fs/cifs/smb2misc.c | 26 ++-- fs/cifs/smb2ops.c | 26 ++-- fs/cifs/smb2pdu.c | 29 +++- fs/cifs/smb2pdu.h | 2 +- include/linux/key-type.h | 1 + include/net/bluetooth/hci_core.h | 5 + include/net/bluetooth/mgmt.h | 2 +- include/scsi/scsi_cmnd.h | 29 +++- include/scsi/scsi_device.h | 16 +- kernel/trace/ring_buffer.c | 12 +- kernel/trace/synth_event_gen_test.c | 11 ++ kernel/trace/trace.c | 20 ++- kernel/trace/trace_kprobe.c | 74 ++++++++++ kernel/trace/trace_probe.h | 1 + lib/vsprintf.c | 11 +- net/8021q/vlan_core.c | 9 +- net/9p/client.c | 7 +- net/9p/protocol.c | 17 ++- net/bluetooth/af_bluetooth.c | 7 +- net/bluetooth/hci_event.c | 3 +- net/bluetooth/l2cap_core.c | 21 ++- net/bluetooth/mgmt.c | 35 +++-- net/bluetooth/smp.c | 161 +++++++++++---------- net/bluetooth/smp.h | 6 +- net/core/dev.c | 8 + net/dns_resolver/dns_key.c | 10 +- net/ife/ife.c | 1 + net/mac80211/mesh_plink.c | 10 +- net/netfilter/nf_tables_api.c | 2 +- net/rfkill/rfkill-gpio.c | 8 + net/rose/af_rose.c | 41 +++++- net/wireless/certs/wens.hex | 87 +++++++++++ security/keys/gc.c | 31 ++-- security/keys/internal.h | 11 +- security/keys/key.c | 15 +- security/keys/proc.c | 2 +- sound/pci/hda/patch_hdmi.c | 2 + 81 files changed, 857 insertions(+), 446 deletions(-)