This is the start of the stable review cycle for the 5.4.289 release. There are 93 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 08 Jan 2025 15:11:04 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.289-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.4.289-rc1 Seiji Nishikawa <snishika@xxxxxxxxxx> mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() Biju Das <biju.das.jz@xxxxxxxxxxxxxx> drm: adv7511: Drop dsi single lane support Nikolay Kuratov <kniv@xxxxxxxxxxxxxx> net/sctp: Prevent autoclose integer overflow in sctp_association_init() Pascal Hambourg <pascal@xxxxxxxxxxxxxxx> sky2: Add device ID 11ab:4373 for Marvell 88E8075 Evgenii Shatokhin <e.shatokhin@xxxxxxxxx> pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking Dan Carpenter <dan.carpenter@xxxxxxxxxx> RDMA/uverbs: Prevent integer overflow issue Masahiro Yamada <masahiroy@xxxxxxxxxx> modpost: fix the missed iteration for the max bit in do_input() Masahiro Yamada <masahiroy@xxxxxxxxxx> modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host Leon Romanovsky <leonro@xxxxxxxxxx> ARC: build: Try to guess GCC variant of cross compiler Uros Bizjak <ubizjak@xxxxxxxxx> irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base Daniele Palmas <dnlplm@xxxxxxxxx> net: usb: qmi_wwan: add Telit FE910C04 compositions Anton Protopopov <aspsk@xxxxxxxxxxxxx> bpf: fix potential error return Adrian Ratiu <adrian.ratiu@xxxxxxxxxxxxx> sound: usb: format: don't warn that raw DSD is unsupported Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx> wifi: mac80211: wake the queues in case of failure in resume Eric Dumazet <edumazet@xxxxxxxxxx> ila: serialize calls to nf_register_net_hooks() Eric Dumazet <edumazet@xxxxxxxxxx> af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK Eric Dumazet <edumazet@xxxxxxxxxx> af_packet: fix vlan_get_tci() vs MSG_PEEK Tanya Agarwal <tanyaagarwal25699@xxxxxxxxx> ALSA: usb-audio: US16x08: Initialize array before use Antonio Pastor <antonio.pastor@xxxxxxxxx> net: llc: reset skb->transport_header Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> netfilter: Replace zero-length array with flexible-array member Ilya Shchipletsov <rabbelkin@xxxxxxx> netrom: check buffer length before accessing it Stefan Ekenberg <stefan.ekenberg@xxxxxxxx> drm/bridge: adv7511_audio: Update Audio InfoFrame properly Bogdan Togorean <bogdan.togorean@xxxxxxxxxx> drm: bridge: adv7511: Enable SPDIF DAI Selvin Xavier <selvin.xavier@xxxxxxxxxxxx> RDMA/bnxt_re: Fix max_qp_wrs reported Kalesh AP <kalesh-anakkur.purayil@xxxxxxxxxxxx> RDMA/bnxt_re: Fix reporting hw_ver in query_device Saravanan Vajravel <saravanan.vajravel@xxxxxxxxxxxx> RDMA/bnxt_re: Add check for path mtu in modify_qp Patrisious Haddad <phaddad@xxxxxxxxxx> RDMA/mlx5: Enforce same type port association for multiport RoCE Parav Pandit <parav@xxxxxxxxxx> net/mlx5: Make API mlx5_core_is_ecpf accept const pointer Parav Pandit <parav@xxxxxxxxxxxx> IB/mlx5: Introduce and use mlx5_core_is_vf() Michael Kelley <mhklinux@xxxxxxxxxxx> Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet Thiébaud Weksteen <tweek@xxxxxxxxxx> selinux: ignore unknown extended permissions Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: prevent possible UAF in ip6_xmit() Vasily Averin <vvs@xxxxxxxxxxxxx> skb_expand_head() adjust skb->truesize incorrectly Filipe Manana <fdmanana@xxxxxxxx> btrfs: avoid monopolizing a core when activating a swap file Christian Göttsche <cgzones@xxxxxxxxxxxxxx> tracing: Constify string literal data member in struct trace_event_call Jiayuan Chen <mrpre@xxxxxxx> bpf: fix recursive lock when verdict program return SK_PASS Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: fix possible UAF in ip6_finish_output2() Vasily Averin <vvs@xxxxxxxxxxxxx> ipv6: use skb_expand_head in ip6_xmit Vasily Averin <vvs@xxxxxxxxxxxxx> ipv6: use skb_expand_head in ip6_finish_output2 Vasily Averin <vvs@xxxxxxxxxxxxx> skbuff: introduce skb_expand_head() Jiaxun Yang <jiaxun.yang@xxxxxxxxxxx> MIPS: Probe toolchain support of -msym32 Xuewen Yan <xuewen.yan@xxxxxxxxxx> epoll: Add synchronous wakeup support for ep_poll_callback Ming Lei <ming.lei@xxxxxxxxxx> virtio-blk: don't keep queue frozen during system suspend Ranjan Kumar <ranjan.kumar@xxxxxxxxxxxx> scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time Armin Wolf <W_Armin@xxxxxx> platform/x86: asus-nb-wmi: Ignore unknown event 0xCF Mark Brown <broonie@xxxxxxxxxx> regmap: Use correct format specifier for logging range errors Tomas Henzl <thenzl@xxxxxxxxxx> scsi: megaraid_sas: Fix for a potential deadlock Magnus Lindholm <linmag7@xxxxxxxxx> scsi: qla1280: Fix hw revision numbering for ISP1020/1040 Masami Hiramatsu (Google) <mhiramat@xxxxxxxxxx> tracing/kprobe: Make trace_kprobe's module callback called after jump_label update Dan Carpenter <dan.carpenter@xxxxxxxxxx> mtd: rawnand: fix double free in atmel_pmecc_create_user() Chen Ridong <chenridong@xxxxxxxxxx> dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> dmaengine: mv_xor: fix child node refcount handling in early exit Zijun Hu <quic_zijuhu@xxxxxxxxxxx> phy: core: Fix that API devm_phy_destroy() fails to destroy the phy Zijun Hu <quic_zijuhu@xxxxxxxxxxx> phy: core: Fix that API devm_phy_put() fails to release the phy Zijun Hu <quic_zijuhu@xxxxxxxxxxx> phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() Zijun Hu <quic_zijuhu@xxxxxxxxxxx> phy: core: Fix an OF node refcount leakage in _of_phy_get() Zichen Xie <zichenxie0106@xxxxxxxxx> mtd: diskonchip: Cast an operand to prevent potential overflow NeilBrown <neilb@xxxxxxx> nfsd: restore callback functionality for NFSv4.0 Cong Wang <cong.wang@xxxxxxxxxxxxx> bpf: Check negative offsets in __bpf_skb_min_len() Nikita Zhandarovich <n.zhandarovich@xxxxxxxxxx> media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg Zijun Hu <quic_zijuhu@xxxxxxxxxxx> of: Fix refcount leakage for OF node returned by __of_get_dma_parent() Herve Codina <herve.codina@xxxxxxxxxxx> of: Fix error path in of_parse_phandle_with_args_map() Jann Horn <jannh@xxxxxxxxxx> udmabuf: also check for F_SEAL_FUTURE_WRITE Edward Adam Davis <eadavis@xxxxxx> nilfs2: prevent use of deleted inode Zijun Hu <quic_zijuhu@xxxxxxxxxxx> of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFS/pnfs: Fix a live lock between recalled layouts and layoutget Qu Wenruo <wqu@xxxxxxxx> btrfs: tree-checker: reject inline extent items with 0 ref count Kairui Song <kasong@xxxxxxxxxxx> zram: refuse to use zero sized block device as backing device Geert Uytterhoeven <geert+renesas@xxxxxxxxx> sh: clk: Fix clk_enable() to return 0 on NULL clk Daniele Palmas <dnlplm@xxxxxxxxx> USB: serial: option: add Telit FE910C04 rmnet compositions Jack Wu <wojackbb@xxxxxxxxx> USB: serial: option: add MediaTek T7XX compositions Mank Wang <mank.wang@xxxxxxxxxxxxx> USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready Michal Hrusecky <michal.hrusecky@xxxxxxxxxx> USB: serial: option: add MeiG Smart SLM770A Daniel Swanemar <d.swanemar@xxxxxxxxx> USB: serial: option: add TCL IK512 MBIM & ECM James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx> efivarfs: Fix error on non-existent file Geert Uytterhoeven <geert+renesas@xxxxxxxxx> i2c: riic: Always round-up when calculating bus period Dan Carpenter <dan.carpenter@xxxxxxxxxx> chelsio/chtls: prevent potential integer overflow on 32bit Prathamesh Shete <pshete@xxxxxxxxxx> mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk Phil Sutter <phil@xxxxxx> netfilter: ipset: Fix for recursive locking warning Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx> net: ethernet: bgmac-platform: fix an OF node reference leak Dan Carpenter <dan.carpenter@xxxxxxxxxx> net: hinic: Fix cleanup in create_rxqs/txqs() Shannon Nelson <shannon.nelson@xxxxxxx> ionic: use ee->offset when returning sprom data Guangguan Wang <guangguan.wang@xxxxxxxxxxxxxxxxx> net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll Gao Xiang <hsiangkao@xxxxxxxxxxxxxxxxx> erofs: fix incorrect symlink detection in fast symlink Gao Xiang <hsiangkao@xxxxxxxxxxxxxxxxx> erofs: fix order >= MAX_ORDER warning due to crafted negative i_size Jiasheng Jiang <jiashengjiangcool@xxxxxxxxx> drm/i915: Fix memory leak by correcting cache object name in error handler Vladimir Riabchun <ferr.lambarginio@xxxxxxxxx> i2c: pnx: Fix timeout in wait functions Ajit Khaparde <ajit.khaparde@xxxxxxxxxxxx> PCI: Add ACS quirk for Broadcom BCM5760X NIC Takashi Iwai <tiwai@xxxxxxx> ALSA: usb: Fix UBSAN warning in parse_audio_unit() Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> PCI/AER: Disable AER service on suspend Peng Hongchi <hongchi.peng@xxxxxxxxxxxx> usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled Lion Ackermann <nnamrec@xxxxxxxxx> net: sched: fix ordering of qlen adjustment ------------- Diffstat: Makefile | 4 +- arch/arc/Makefile | 2 +- arch/mips/Makefile | 2 +- drivers/base/regmap/regmap.c | 4 +- drivers/block/virtio_blk.c | 7 +- drivers/block/zram/zram_drv.c | 6 ++ drivers/crypto/chelsio/chtls/chtls_main.c | 5 +- drivers/dma-buf/udmabuf.c | 2 +- drivers/dma/at_xdmac.c | 2 + drivers/dma/mv_xor.c | 2 + drivers/gpu/drm/bridge/adv7511/adv7511_audio.c | 28 ++++++- drivers/gpu/drm/bridge/adv7511/adv7533.c | 2 +- drivers/gpu/drm/i915/i915_scheduler.c | 2 +- drivers/hv/hv_kvp.c | 6 ++ drivers/hv/hv_snapshot.c | 6 ++ drivers/hv/hv_util.c | 9 +++ drivers/hv/hyperv_vmbus.h | 2 + drivers/i2c/busses/i2c-pnx.c | 4 +- drivers/i2c/busses/i2c-riic.c | 2 +- drivers/infiniband/core/uverbs_cmd.c | 16 ++-- drivers/infiniband/hw/bnxt_re/ib_verbs.c | 28 +++---- drivers/infiniband/hw/bnxt_re/qplib_sp.c | 2 +- drivers/infiniband/hw/mlx5/main.c | 8 +- drivers/irqchip/irq-gic.c | 2 +- drivers/media/dvb-frontends/dib3000mb.c | 2 +- drivers/mmc/host/sdhci-tegra.c | 1 - drivers/mtd/nand/raw/atmel/pmecc.c | 4 +- drivers/mtd/nand/raw/diskonchip.c | 2 +- drivers/net/ethernet/broadcom/bgmac-platform.c | 5 +- drivers/net/ethernet/huawei/hinic/hinic_main.c | 2 + drivers/net/ethernet/marvell/sky2.c | 1 + .../net/ethernet/pensando/ionic/ionic_ethtool.c | 4 +- drivers/net/usb/qmi_wwan.c | 3 + drivers/of/address.c | 2 +- drivers/of/base.c | 15 ++-- drivers/of/irq.c | 1 + drivers/pci/pcie/aer.c | 18 +++++ drivers/pci/quirks.c | 4 + drivers/phy/phy-core.c | 15 ++-- drivers/pinctrl/pinctrl-mcp23s08.c | 6 ++ drivers/platform/x86/asus-nb-wmi.c | 1 + drivers/scsi/megaraid/megaraid_sas_base.c | 5 +- drivers/scsi/mpt3sas/mpt3sas_base.c | 7 +- drivers/scsi/qla1280.h | 12 +-- drivers/sh/clk/core.c | 2 +- drivers/usb/dwc2/gadget.c | 4 +- drivers/usb/serial/option.c | 27 +++++++ fs/btrfs/inode.c | 2 + fs/btrfs/tree-checker.c | 27 ++++++- fs/efivarfs/inode.c | 2 +- fs/efivarfs/internal.h | 1 - fs/efivarfs/super.c | 3 - fs/erofs/inode.c | 20 ++--- fs/eventpoll.c | 5 +- fs/nfs/pnfs.c | 2 +- fs/nfsd/nfs4callback.c | 4 +- fs/nilfs2/inode.c | 8 +- fs/nilfs2/namei.c | 5 ++ include/linux/hyperv.h | 1 + include/linux/if_vlan.h | 16 +++- include/linux/mlx5/driver.h | 13 +++- include/linux/netfilter/ipset/ip_set.h | 2 +- include/linux/netfilter/x_tables.h | 8 +- include/linux/netfilter_arp/arp_tables.h | 2 +- include/linux/netfilter_bridge/ebtables.h | 2 +- include/linux/netfilter_ipv4/ip_tables.h | 2 +- include/linux/netfilter_ipv6/ip6_tables.h | 2 +- include/linux/skbuff.h | 1 + include/linux/trace_events.h | 2 +- include/linux/wait.h | 1 + include/net/netfilter/nf_conntrack_extend.h | 2 +- include/net/netfilter/nf_conntrack_timeout.h | 2 +- include/net/netfilter/nf_tables.h | 13 ++-- include/uapi/linux/netfilter_bridge/ebt_among.h | 2 +- kernel/bpf/core.c | 6 +- kernel/trace/trace_kprobe.c | 2 +- mm/vmscan.c | 9 ++- net/bridge/netfilter/ebtables.c | 2 +- net/core/filter.c | 21 ++++-- net/core/skbuff.c | 52 +++++++++++++ net/core/skmsg.c | 4 +- net/ipv4/netfilter/arp_tables.c | 4 +- net/ipv4/netfilter/ip_tables.c | 4 +- net/ipv6/ila/ila_xlat.c | 16 ++-- net/ipv6/ip6_output.c | 86 +++++++++------------- net/ipv6/netfilter/ip6_tables.c | 4 +- net/llc/llc_input.c | 2 +- net/mac80211/util.c | 3 + net/netfilter/ipset/ip_set_bitmap_ip.c | 2 +- net/netfilter/ipset/ip_set_bitmap_ipmac.c | 2 +- net/netfilter/ipset/ip_set_bitmap_port.c | 2 +- net/netfilter/ipset/ip_set_hash_gen.h | 4 +- net/netfilter/ipset/ip_set_list_set.c | 3 + net/netfilter/nfnetlink_acct.c | 2 +- net/netfilter/xt_hashlimit.c | 2 +- net/netfilter/xt_recent.c | 4 +- net/netrom/nr_route.c | 6 ++ net/packet/af_packet.c | 28 ++----- net/sched/sch_cake.c | 2 +- net/sched/sch_choke.c | 2 +- net/sctp/associola.c | 3 +- net/smc/af_smc.c | 7 ++ scripts/mod/file2alias.c | 4 +- security/selinux/ss/services.c | 8 +- sound/usb/format.c | 7 +- sound/usb/mixer.c | 7 ++ sound/usb/mixer_us16x08.c | 2 +- 107 files changed, 522 insertions(+), 236 deletions(-)