This is the start of the stable review cycle for the 5.4.276 release. There are 84 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 16 May 2024 10:09:32 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.276-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.4.276-rc1 Chen-Yu Tsai <wenst@xxxxxxxxxxxx> pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback YueHaibing <yuehaibing@xxxxxxxxxx> pinctrl: mediatek: remove set but not used variable 'e' Dan Carpenter <dan.carpenter@xxxxxxxxxx> pinctrl: mediatek: Fix some off by one bugs Hsin-Yi Wang <hsinyi@xxxxxxxxxxxx> pinctrl: mediatek: Fix fallback behavior for bias_set_combo Johan Hovold <johan+linaro@xxxxxxxxxx> regulator: core: fix debugfs creation regression Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxx> net: fix out-of-bounds access in ops_init Zack Rusin <zack.rusin@xxxxxxxxxxxx> drm/vmwgfx: Fix invalid reads in fence signaled events Jim Cromie <jim.cromie@xxxxxxxxx> dyndbg: fix old BUG_ON in >control parser Paolo Abeni <pabeni@xxxxxxxxxx> tipc: fix UAF in error path Chris Wulff <Chris.Wulff@xxxxxxxxx> usb: gadget: f_fs: Fix a race condition when processing setup packets. Peter Korsgaard <peter@xxxxxxxxxxxxx> usb: gadget: composite: fix OS descriptors w_value logic Thanassis Avgerinos <thanassis.avgerinos@xxxxxxxxx> firewire: nosy: ensure user_length is taken into account when fetching packet contents Asbjørn Sloth Tønnesen <ast@xxxxxxxxxxx> net: qede: use return from qede_parse_flow_attr() for flower Asbjørn Sloth Tønnesen <ast@xxxxxxxxxxx> net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() Felix Fietkau <nbd@xxxxxxxx> net: bridge: fix corrupted ethernet header on multicast-to-unicast Eric Dumazet <edumazet@xxxxxxxxxx> phonet: fix rtm_phonet_notify() skb allocation Roded Zats <rzats@xxxxxxxxxxxxxxxxxxxx> rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation Duoming Zhou <duoming@xxxxxxxxxx> Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout Duoming Zhou <duoming@xxxxxxxxxx> Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Eric Dumazet <edumazet@xxxxxxxxxx> tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets Paul Davey <paul.davey@xxxxxxxxxxxxxxxxxxx> xfrm: Preserve vlan tags for transport mode software GRO Neil Armstrong <narmstrong@xxxxxxxxxxxx> ASoC: meson: axg-tdm-interface: Fix formatters in trigger" Neil Armstrong <narmstrong@xxxxxxxxxxxx> ASoC: meson: axg-card: Fix nonatomic links Hsin-Yi Wang <hsinyi@xxxxxxxxxxxx> pinctrl: mediatek: Fix fallback call path Vanillan Wang <vanillanwang@xxxxxxx> net:usb:qmi_wwan: support Rolling modules Joakim Sindholt <opensource@xxxxxxxxxx> fs/9p: drop inodes immediately on non-.L too Stephen Boyd <sboyd@xxxxxxxxxx> clk: Don't hold prepare_lock when calling kref_put() Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> gpio: crystalcove: Use -ENOTSUPP consistently Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> gpio: wcove: Use -ENOTSUPP consistently Jeff Layton <jlayton@xxxxxxxxxx> 9p: explicitly deny setlease attempts Joakim Sindholt <opensource@xxxxxxxxxx> fs/9p: translate O_TRUNC into OTRUNC Joakim Sindholt <opensource@xxxxxxxxxx> fs/9p: only translate RWX permissions for plain 9P2000 John Stultz <jstultz@xxxxxxxxxx> selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior Jiaxun Yang <jiaxun.yang@xxxxxxxxxxx> MIPS: scall: Save thread_info.syscall unconditionally on entry Thierry Reding <treding@xxxxxxxxxx> gpu: host1x: Do not setup DMA for virtual devices Maurizio Lombardi <mlombard@xxxxxxxxxx> scsi: target: Fix SELinux error when systemd-modules loads the target module Boris Burkov <boris@xxxxxx> btrfs: always clear PERTRANS metadata during commit Boris Burkov <boris@xxxxxx> btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve Peng Liu <liupeng17@xxxxxxxxxx> tools/power turbostat: Fix Bzy_MHz documentation typo Doug Smythies <dsmythies@xxxxxxxxx> tools/power turbostat: Fix added raw MSR output Adam Goldman <adamg@xxxxxxxxx> firewire: ohci: mask bus reset interrupts between ISR and bottom half Chen Ni <nichen@xxxxxxxxxxx> ata: sata_gemini: Check clk_enable() result Phil Elwell <phil@xxxxxxxxxxxxxxx> net: bcmgenet: Reset RBUF on first open Takashi Iwai <tiwai@xxxxxxx> ALSA: line6: Zero-initialize message buffers Saurav Kashyap <skashyap@xxxxxxxxxxx> scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload linke li <lilinke99@xxxxxx> net: mark racy access on sk->sk_rcvbuf Igor Artemiev <Igor.A.Artemiev@xxxxxxx> wifi: cfg80211: fix rdev_dump_mpp() arguments order Jeff Johnson <quic_jjohnson@xxxxxxxxxxx> wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc Andrew Price <anprice@xxxxxxxxxx> gfs2: Fix invalid metadata access in punch_hole Justin Tee <justin.tee@xxxxxxxxxxxx> scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic Jernej Skrabec <jernej.skrabec@xxxxxxxxx> clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change Xin Long <lucien.xin@xxxxxxxxx> tipc: fix a possible memleak in tipc_buf_append Felix Fietkau <nbd@xxxxxxxx> net: bridge: fix multicast-to-unicast with fraglist GSO Marek Behún <kabel@xxxxxxxxxx> net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 Andrew Lunn <andrew@xxxxxxx> net: dsa: mv88e6xxx: Add number of MACs in the ATU Jerome Brunet <jbrunet@xxxxxxxxxxxx> ASoC: meson: axg-tdm-interface: manage formatters in trigger Jerome Brunet <jbrunet@xxxxxxxxxxxx> ASoC: meson: axg-card: make links nonatomic Asbjørn Sloth Tønnesen <ast@xxxxxxxxxxx> net: qede: use return from qede_parse_flow_attr() for flow_spec David Bauer <mail@xxxxxxxxxxxxxxx> net l2tp: drop flow hash on forward Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). Bui Quang Minh <minhquangbui99@xxxxxxxxx> bna: ensure the copied buf is NUL terminated Claudio Imbrenda <imbrenda@xxxxxxxxxxxxx> s390/mm: Fix clearing storage keys for huge pages Claudio Imbrenda <imbrenda@xxxxxxxxxxxxx> s390/mm: Fix storage key clearing for guest huge pages Zeng Heng <zengheng4@xxxxxxxxxx> pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() Arnd Bergmann <arnd@xxxxxxxx> power: rt9455: hide unused rt9455_boost_voltage_values Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> nfs: Handle error of rpc_proc_register() in nfs_net_init(). Josef Bacik <josef@xxxxxxxxxxxxxx> nfs: make the rpc_stat per net namespace Josef Bacik <josef@xxxxxxxxxxxxxx> nfs: expose /proc/net/sunrpc/nfs in net namespaces Josef Bacik <josef@xxxxxxxxxxxxxx> sunrpc: add a struct rpc_stats arg to rpc_create_args Chen-Yu Tsai <wenst@xxxxxxxxxxxx> pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE Chen-Yu Tsai <wenst@xxxxxxxxxxxx> pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic Chen-Yu Tsai <wenst@xxxxxxxxxxxx> pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback Light Hsieh <light.hsieh@xxxxxxxxxxxx> pinctrl: mediatek: remove shadow variable declaration Light Hsieh <light.hsieh@xxxxxxxxxxxx> pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull usage Light Hsieh <light.hsieh@xxxxxxxxxxxx> pinctrl: mediatek: Refine mtk_pinconf_get() Light Hsieh <light.hsieh@xxxxxxxxxxxx> pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set() Light Hsieh <light.hsieh@xxxxxxxxxxxx> pinctrl: mediatek: Supporting driving setting without mapping current to register value Light Hsieh <light.hsieh@xxxxxxxxxxxx> pinctrl: mediatek: Check gpio pin number and use binary search in mtk_hw_pin_field_lookup() Dan Carpenter <dan.carpenter@xxxxxxxxxx> pinctrl: core: delete incorrect free in pinctrl_enable() Johannes Berg <johannes.berg@xxxxxxxxx> wifi: nl80211: don't free NULL coalescing rule Vinod Koul <vkoul@xxxxxxxxxx> dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" Bumyong Lee <bumyong.lee@xxxxxxxxxxx> dmaengine: pl330: issue_pending waits until WFP state ------------- Diffstat: Makefile | 4 +- arch/mips/include/asm/ptrace.h | 2 +- arch/mips/kernel/asm-offsets.c | 1 + arch/mips/kernel/ptrace.c | 15 +- arch/mips/kernel/scall32-o32.S | 23 +- arch/mips/kernel/scall64-n32.S | 3 +- arch/mips/kernel/scall64-n64.S | 3 +- arch/mips/kernel/scall64-o32.S | 33 +-- arch/s390/mm/gmap.c | 2 +- arch/s390/mm/hugetlbpage.c | 2 +- drivers/ata/sata_gemini.c | 5 +- drivers/clk/clk.c | 12 +- drivers/clk/sunxi-ng/ccu-sun50i-h6.c | 19 +- drivers/firewire/nosy.c | 6 +- drivers/firewire/ohci.c | 6 +- drivers/gpio/gpio-crystalcove.c | 2 +- drivers/gpio/gpio-wcove.c | 2 +- drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 2 +- drivers/gpu/host1x/bus.c | 8 - drivers/net/dsa/mv88e6xxx/chip.c | 29 ++- drivers/net/dsa/mv88e6xxx/chip.h | 6 + drivers/net/ethernet/broadcom/genet/bcmgenet.c | 16 +- drivers/net/ethernet/brocade/bna/bnad_debugfs.c | 4 +- drivers/net/ethernet/qlogic/qede/qede_filter.c | 15 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/pinctrl/core.c | 8 +- drivers/pinctrl/devicetree.c | 10 +- drivers/pinctrl/mediatek/pinctrl-mt6765.c | 11 +- drivers/pinctrl/mediatek/pinctrl-mt8183.c | 7 +- drivers/pinctrl/mediatek/pinctrl-mtk-common-v2.c | 268 ++++++++++++++++++++- drivers/pinctrl/mediatek/pinctrl-mtk-common-v2.h | 16 ++ drivers/pinctrl/mediatek/pinctrl-paris.c | 281 +++++++++-------------- drivers/power/supply/rt9455_charger.c | 2 + drivers/regulator/core.c | 27 ++- drivers/scsi/bnx2fc/bnx2fc_tgt.c | 2 - drivers/scsi/lpfc/lpfc.h | 1 - drivers/scsi/lpfc/lpfc_scsi.c | 13 +- drivers/target/target_core_configfs.c | 12 + drivers/usb/gadget/composite.c | 6 +- drivers/usb/gadget/function/f_fs.c | 2 +- fs/9p/vfs_file.c | 2 + fs/9p/vfs_inode.c | 5 +- fs/9p/vfs_super.c | 1 + fs/btrfs/inode.c | 2 +- fs/btrfs/transaction.c | 2 +- fs/gfs2/bmap.c | 5 +- fs/nfs/client.c | 5 +- fs/nfs/inode.c | 13 +- fs/nfs/internal.h | 2 - fs/nfs/netns.h | 2 + include/linux/skbuff.h | 15 ++ include/linux/sunrpc/clnt.h | 1 + include/net/xfrm.h | 3 + lib/dynamic_debug.c | 6 +- net/bluetooth/l2cap_core.c | 3 + net/bluetooth/sco.c | 4 + net/bridge/br_forward.c | 9 +- net/core/net_namespace.c | 13 +- net/core/rtnetlink.c | 2 +- net/core/sock.c | 4 +- net/ipv4/tcp.c | 4 +- net/ipv4/tcp_input.c | 2 + net/ipv4/tcp_ipv4.c | 8 +- net/ipv4/tcp_output.c | 4 +- net/ipv4/xfrm4_input.c | 6 +- net/ipv6/fib6_rules.c | 6 +- net/ipv6/xfrm6_input.c | 6 +- net/l2tp/l2tp_eth.c | 3 + net/mac80211/ieee80211_i.h | 4 +- net/nsh/nsh.c | 14 +- net/phonet/pn_netlink.c | 2 +- net/sunrpc/clnt.c | 5 +- net/tipc/msg.c | 8 +- net/wireless/nl80211.c | 2 + net/wireless/trace.h | 2 +- net/xfrm/xfrm_input.c | 8 + sound/usb/line6/driver.c | 6 +- tools/power/x86/turbostat/turbostat.8 | 2 +- tools/power/x86/turbostat/turbostat.c | 7 +- tools/testing/selftests/timers/valid-adjtimex.c | 73 +++--- 80 files changed, 763 insertions(+), 395 deletions(-)