This is the start of the stable review cycle for the 4.19.322 release. There are 95 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 12 Sep 2024 09:42:36 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.322-rc2.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.19.322-rc2 Li RongQing <lirongqing@xxxxxxxxx> netns: restore ops before calling ops_exit_list Zhang Changzhong <zhangchangzhong@xxxxxxxxxx> cx82310_eth: fix error return code in cx82310_bind() Daniel Borkmann <daniel@xxxxxxxxxxxxx> net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket Roland Xu <mu001999@xxxxxxxxxxx> rtmutex: Drop rt_mutex::wait_lock before scheduling Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> drm/i915/fence: Mark debug_fence_free() with __maybe_unused Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused Jonathan Cameron <Jonathan.Cameron@xxxxxxxxxx> ACPI: processor: Fix memory leaks in error paths of processor_add() Jonathan Cameron <Jonathan.Cameron@xxxxxxxxxx> ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() Eric Dumazet <edumazet@xxxxxxxxxx> ila: call nf_unregister_net_hooks() sooner Eric Dumazet <edumazet@xxxxxxxxxx> netns: add pre_exit method to struct pernet_operations Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: protect references to superblock parameters exposed in sysfs Qing Wang <wangqing@xxxxxxxx> nilfs2: replace snprintf in show functions with sysfs_emit Zheng Yejian <zhengyejian@xxxxxxxxxxxxxxx> tracing: Avoid possible softlockup in tracing_iter_reset() Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> ring-buffer: Rename ring_buffer_read() to read_buffer_iter_advance() Sven Schnelle <svens@xxxxxxxxxxxxx> uprobes: Use kzalloc to allocate xol area Jacky Bai <ping.bai@xxxxxxx> clocksource/drivers/imx-tpm: Fix next event not taking effect sometime Jacky Bai <ping.bai@xxxxxxx> clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX David Fernandez Gonzalez <david.fernandez.gonzalez@xxxxxxxxxx> VMCI: Fix use-after-free when removing resource in vmci_resource_remove() Naman Jain <namjain@xxxxxxxxxxxxxxxxxxx> Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic Saurabh Sengar <ssengar@xxxxxxxxxxxxxxxxxxx> uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind Geert Uytterhoeven <geert+renesas@xxxxxxxxx> nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc Matteo Martelli <matteomartelli3@xxxxxxxxx> iio: fix scale application in iio_convert_raw_to_processed_unlocked David Lechner <dlechner@xxxxxxxxxxxx> iio: buffer-dmaengine: fix releasing dma channel on error Michael Ellerman <mpe@xxxxxxxxxxxxxx> ata: pata_macio: Use WARN instead of BUG Stefan Wiehler <stefan.wiehler@xxxxxxxxx> of/irq: Prevent device address out-of-bounds read in interrupt map walk Phillip Lougher <phillip@xxxxxxxxxxxxxxx> Squashfs: sanity check symbolic link size Oliver Neukum <oneukum@xxxxxxxx> usbnet: ipheth: race between ipheth_close and error handling Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> Input: uinput - reject requests with unreasonable number of slots Camila Alvarez <cam.alvarez.i@xxxxxxxxx> HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup David Sterba <dsterba@xxxxxxxx> btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() Dan Williams <dan.j.williams@xxxxxxxxx> PCI: Add missing bridge lock to pci_bus_lock() Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: clean up our handling of refs == 0 in snapshot delete Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: replace BUG_ON with ASSERT in walk_down_proc() Zqiang <qiang.zhang1211@xxxxxxxxx> smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() Sascha Hauer <s.hauer@xxxxxxxxxxxxxx> wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() Guenter Roeck <linux@xxxxxxxxxxxx> hwmon: (w83627ehf) Fix underflows seen when writing limit attributes Guenter Roeck <linux@xxxxxxxxxxxx> hwmon: (nct6775-core) Fix underflows seen when writing limit attributes Guenter Roeck <linux@xxxxxxxxxxxx> hwmon: (lm95234) Fix underflows seen when writing limit attributes Guenter Roeck <linux@xxxxxxxxxxxx> hwmon: (adc128d818) Fix underflows seen when writing limit attributes Krishna Kumar <krishnak@xxxxxxxxxxxxx> pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv Zijun Hu <quic_zijuhu@xxxxxxxxxxx> devres: Initialize an uninitialized struct member Johannes Berg <johannes.berg@xxxxxxxxx> um: line: always fill *error_out in setup_one_line() Waiman Long <longman@xxxxxxxxxx> cgroup: Protect css->cgroup write under css_set_lock Jacob Pan <jacob.jun.pan@xxxxxxxxxxxxxxx> iommu/vt-d: Handle volatile descriptor status read Pawel Dembicki <paweldembicki@xxxxxxxxx> net: dsa: vsc73xx: fix possible subblocks range of CAPT block Jonas Gorski <jonas.gorski@xxxxxxxx> net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx> net: bridge: fdb: convert added_by_external_learn to use bitops Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx> net: bridge: fdb: convert added_by_user to bitops Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx> net: bridge: fdb: convert is_sticky to bitops Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx> net: bridge: fdb: convert is_static to bitops Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx> net: bridge: fdb: convert is_local to bitops Ido Schimmel <idosch@xxxxxxxxxxxx> bridge: switchdev: Allow clearing FDB entry offload indication Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx> net: bridge: add support for sticky fdb entries Richard Guy Briggs <rgb@xxxxxxxxxx> rfkill: fix spelling mistake contidion to condition Oliver Neukum <oneukum@xxxxxxxx> usbnet: modern method to get random MAC Jakub Kicinski <kuba@xxxxxxxxxx> net: usb: don't write directly to netdev->dev_addr Len Baker <len.baker@xxxxxxx> drivers/net/usb: Remove all strcpy() uses Ondrej Zary <linux@xxxxxxx> cx82310_eth: re-enable ethernet mode after router reboot Aleksandr Mishin <amishin@xxxxxxxxxx> platform/x86: dell-smbios: Fix error path in dell_smbios_init() Daiwei Li <daiweili@xxxxxxxxxx> igb: Fix not clearing TimeSync interrupts for 82580 Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> can: bcm: Remove proc entry when dev is unregistered. Jules Irenge <jbi.octave@xxxxxxxxx> pcmcia: Use resource_size function on resource object Chen Ni <nichen@xxxxxxxxxxx> media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse Arend van Spriel <arend.vanspriel@xxxxxxxxxxxx> wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 Jan Kara <jack@xxxxxxx> udf: Avoid excessive partition lengths Yunjian Wang <wangyunjian@xxxxxxxxxx> netfilter: nf_conncount: fix wrong variable type Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> af_unix: Remove put_pid()/put_cred() in copy_peercred(). Pali Rohár <pali@xxxxxxxxxx> irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 Konstantin Andreev <andreev@xxxxxxxxx> smack: unix sockets: fix accept()ed socket label Takashi Iwai <tiwai@xxxxxxx> ALSA: hda: Add input value sanity checks to HDMI channel map controls Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: fix state management in error path of log writing function Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: fix missing cleanup on rollforward recovery error Satya Priya Kakitapalli <quic_skakitap@xxxxxxxxxxx> clk: qcom: clk-alpha-pll: Fix the pll post div mask Jann Horn <jannh@xxxxxxxxxx> fuse: use unsigned type for getxattr/listxattr size truncation Sam Protsenko <semen.protsenko@xxxxxxxxxx> mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K Zheng Qixing <zhengqixing@xxxxxxxxxx> ata: libata: Fix memory leak for error path in ata_host_alloc() Christoffer Sandberg <cs@xxxxxxxxx> ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx> sch/netem: fix use after free in netem_dequeue Hillf Danton <hdanton@xxxxxxxx> ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Sanity checks for each pipe and EP types Jan Kara <jack@xxxxxxx> udf: Limit file size to 4TB Breno Leitao <leitao@xxxxxxxxxx> virtio_net: Fix napi_skb_cache_put warning Christoph Hellwig <hch@xxxxxx> block: initialize integrity buffer to zero before writing it to media Ricardo Ribalda <ribalda@xxxxxxxxxxxx> media: uvcvideo: Enforce alignment of frame and interval Casey Schaufler <casey@xxxxxxxxxxxxxxxx> smack: tcp: ipv4, fix incorrect labeling Simon Holesch <simon@xxxxxxxxxx> usbip: Don't submit special requests twice Leesoo Ahn <lsahn@xxxxxxxxxx> apparmor: fix possible NULL pointer dereference Michael Chen <michael.chen@xxxxxxx> drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device Tim Huang <Tim.Huang@xxxxxxx> drm/amdgpu: fix mc_data out-of-bounds read warning Tim Huang <Tim.Huang@xxxxxxx> drm/amdgpu: fix ucode out-of-bounds read warning Tim Huang <Tim.Huang@xxxxxxx> drm/amdgpu: fix overflowed array index read warning Ma Jun <Jun.Ma2@xxxxxxx> drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> usb: dwc3: st: add missing depopulate in probe error path Nishka Dasgupta <nishkadg.linux@xxxxxxxxx> usb: dwc3: st: Add of_node_put() before return in probe function ZHANG Yuntian <yt@xxxxxxxxx> net: usb: qmi_wwan: add MeiG Smart SRM825L ------------- Diffstat: Makefile | 4 +- arch/um/drivers/line.c | 2 + block/bio-integrity.c | 11 +- drivers/acpi/acpi_processor.c | 15 +-- drivers/ata/libata-core.c | 4 +- drivers/ata/pata_macio.c | 7 +- drivers/base/devres.c | 1 + drivers/clk/qcom/clk-alpha-pll.c | 2 +- drivers/clocksource/timer-imx-tpm.c | 16 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_afmt.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_atombios.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_crat.h | 2 - drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_topology.h | 5 +- drivers/gpu/drm/i915/i915_sw_fence.c | 8 +- drivers/hid/hid-cougar.c | 2 +- drivers/hv/vmbus_drv.c | 1 + drivers/hwmon/adc128d818.c | 4 +- drivers/hwmon/lm95234.c | 9 +- drivers/hwmon/nct6775.c | 2 +- drivers/hwmon/w83627ehf.c | 4 +- drivers/iio/buffer/industrialio-buffer-dmaengine.c | 4 +- drivers/iio/inkern.c | 8 +- drivers/input/misc/uinput.c | 14 +++ drivers/iommu/dmar.c | 2 +- drivers/irqchip/irq-armada-370-xp.c | 4 + drivers/media/platform/qcom/camss/camss.c | 5 +- drivers/media/usb/uvc/uvc_driver.c | 18 ++- drivers/misc/vmw_vmci/vmci_resource.c | 3 +- drivers/mmc/host/dw_mmc.c | 4 +- drivers/net/dsa/vitesse-vsc73xx.c | 10 +- drivers/net/ethernet/intel/igb/igb_main.c | 10 ++ .../ethernet/mellanox/mlxsw/spectrum_switchdev.c | 9 +- drivers/net/ethernet/rocker/rocker_main.c | 1 + drivers/net/usb/ch9200.c | 4 +- drivers/net/usb/cx82310_eth.c | 56 +++++++-- drivers/net/usb/ipheth.c | 4 +- drivers/net/usb/kaweth.c | 3 +- drivers/net/usb/mcs7830.c | 4 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/usb/sierra_net.c | 6 +- drivers/net/usb/sr9700.c | 4 +- drivers/net/usb/sr9800.c | 5 +- drivers/net/usb/usbnet.c | 23 ++-- drivers/net/virtio_net.c | 8 +- .../broadcom/brcm80211/brcmsmac/mac80211_if.c | 1 + drivers/net/wireless/marvell/mwifiex/main.h | 3 + drivers/nvmem/core.c | 6 +- drivers/of/irq.c | 15 ++- drivers/pci/hotplug/pnv_php.c | 3 +- drivers/pci/pci.c | 35 +++--- drivers/pcmcia/yenta_socket.c | 6 +- drivers/platform/x86/dell-smbios-base.c | 5 +- drivers/uio/uio_hv_generic.c | 11 +- drivers/usb/dwc3/dwc3-st.c | 12 +- drivers/usb/usbip/stub_rx.c | 77 ++++++++----- fs/btrfs/extent-tree.c | 32 ++++-- fs/btrfs/inode.c | 2 +- fs/fuse/xattr.c | 4 +- fs/nilfs2/recovery.c | 35 +++++- fs/nilfs2/segment.c | 10 +- fs/nilfs2/sysfs.c | 117 +++++++++++-------- fs/squashfs/inode.c | 7 +- fs/udf/super.c | 24 +++- include/linux/ring_buffer.h | 3 +- include/net/net_namespace.h | 5 + include/net/switchdev.h | 3 +- include/uapi/linux/neighbour.h | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/events/uprobes.c | 3 +- kernel/locking/rtmutex.c | 4 +- kernel/smp.c | 1 + kernel/trace/ring_buffer.c | 23 +--- kernel/trace/trace.c | 6 +- kernel/trace/trace_functions_graph.c | 2 +- net/bridge/br.c | 4 +- net/bridge/br_fdb.c | 128 ++++++++++++--------- net/bridge/br_input.c | 2 +- net/bridge/br_private.h | 18 ++- net/bridge/br_switchdev.c | 11 +- net/can/bcm.c | 4 + net/core/net_namespace.c | 28 +++++ net/dsa/slave.c | 1 + net/ipv6/ila/ila.h | 1 + net/ipv6/ila/ila_main.c | 6 + net/ipv6/ila/ila_xlat.c | 13 ++- net/netfilter/nf_conncount.c | 8 +- net/rfkill/core.c | 4 +- net/sched/sch_netem.c | 9 +- net/sunrpc/xprtsock.c | 7 ++ net/unix/af_unix.c | 9 +- security/apparmor/apparmorfs.c | 4 + security/smack/smack_lsm.c | 14 ++- sound/hda/hdmi_chmap.c | 18 +++ sound/pci/hda/patch_conexant.c | 11 ++ sound/usb/helper.c | 17 +++ sound/usb/helper.h | 1 + sound/usb/quirks.c | 14 ++- 100 files changed, 767 insertions(+), 344 deletions(-)