[PATCH 5.10 000/122] 5.10.211-rc1 review

From: Greg Kroah-Hartman
Date: Tue Feb 27 2024 - 09:26:33 EST


This is the start of the stable review cycle for the 5.10.211 release.
There are 122 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu, 29 Feb 2024 13:15:36 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.211-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 5.10.211-rc1

Baokun Li <libaokun1@xxxxxxxxxx>
ext4: regenerate buddy after block freeing failed if under fc replay

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
arp: Prevent overflow in arp_req_get().

Bart Van Assche <bvanassche@xxxxxxx>
fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio

Michael Schmitz <schmitzmic@xxxxxxxxx>
block: ataflop: more blk-mq refactoring fixes

Armin Wolf <W_Armin@xxxxxx>
drm/amd/display: Fix memory leak in dm_sw_fini()

Erik Kurzinger <ekurzinger@xxxxxxxxxx>
drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set

Christian König <christian.koenig@xxxxxxx>
drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3

Florian Westphal <fw@xxxxxxxxx>
netfilter: nf_tables: set dormant flag on hook register failure

Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
tls: stop recv() if initial process_rx_list gave us non-DATA

Jakub Kicinski <kuba@xxxxxxxxxx>
tls: rx: drop pointless else after goto

Jakub Kicinski <kuba@xxxxxxxxxx>
tls: rx: jump to a more appropriate label

Jason Gunthorpe <jgg@xxxxxxxx>
s390: use the correct count for __iowrite64_copy()

Kees Cook <keescook@xxxxxxxxxxxx>
net: dev: Convert sa_data to flexible array in struct sockaddr

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
packet: move from strlcpy with unused retval to strscpy

Vasiliy Kovalev <kovalev@xxxxxxxxxxxx>
ipv6: sr: fix possible use-after-free and null-ptr-deref

Daniil Dulov <d.dulov@xxxxxxxxxx>
afs: Increase buffer size in afs_update_volume_status()

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid

Arnd Bergmann <arnd@xxxxxxxx>
nouveau: fix function cast warnings

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
scsi: jazz_esp: Only build if SCSI core is builtin

Gianmarco Lusvardi <glusvardi@xxxxxxxxxx>
bpf, scripts: Correct GPL license name

Arnd Bergmann <arnd@xxxxxxxx>
RDMA/srpt: fix function pointer cast warnings

Heiko Stuebner <heiko.stuebner@xxxxxxxxx>
arm64: dts: rockchip: set num-cs property for spi on px30

Kamal Heib <kheib@xxxxxxxxxx>
RDMA/qedr: Fix qedr_create_user_qp error flow

Bart Van Assche <bvanassche@xxxxxxx>
RDMA/srpt: Support specifying the srpt_service_guid parameter

Kalesh AP <kalesh-anakkur.purayil@xxxxxxxxxxxx>
RDMA/bnxt_re: Return error for SRQ resize

Zhipeng Lu <alexious@xxxxxxxxxx>
IB/hfi1: Fix a memleak in init_credit_return

Paolo Abeni <pabeni@xxxxxxxxxx>
mptcp: fix lockless access in subflow ULP diag

Xu Yang <xu.yang_2@xxxxxxx>
usb: roles: don't get/set_role() when usb_role_switch is unregistered

Xu Yang <xu.yang_2@xxxxxxx>
usb: roles: fix NULL pointer issue when put module's reference

Krishna Kurapati <quic_kriskura@xxxxxxxxxxx>
usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs

Frank Li <Frank.Li@xxxxxxx>
usb: cdns3: fix memory double free when handle zero packet

Frank Li <Frank.Li@xxxxxxx>
usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/alternative: Make custom return thunk unconditional

Borislav Petkov (AMD) <bp@xxxxxxxxx>
Revert "x86/alternative: Make custom return thunk unconditional"

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/returnthunk: Allow different return thunks

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/ftrace: Use alternative RET encoding

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR

Borislav Petkov (AMD) <bp@xxxxxxxxx>
Revert "x86/ftrace: Use alternative RET encoding"

Nikita Shubin <nikita.shubin@xxxxxxxxxxx>
ARM: ep93xx: Add terminator to gpiod_lookup_table

Tom Parkin <tparkin@xxxxxxxxxxx>
l2tp: pass correct message length to ip6_append_data

Vidya Sagar <vidyas@xxxxxxxxxx>
PCI/MSI: Prevent MSI hardware interrupt number truncation

Vasiliy Kovalev <kovalev@xxxxxxxxxxxx>
gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()

Oliver Upton <oliver.upton@xxxxxxxxx>
KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()

Oliver Upton <oliver.upton@xxxxxxxxx>
KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler

Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm-crypt: don't modify the data when using authenticated encryption

Peter Oberparleiter <oberpar@xxxxxxxxxxxxx>
s390/cio: fix invalid -EBUSY on ccw_device_start

Daniel Vacek <neelx@xxxxxxxxxx>
IB/hfi1: Fix sdma.h tx->num_descs off-by-one error

Gao Xiang <hsiangkao@xxxxxxxxxxxxxxxxx>
erofs: fix lz4 inplace decompression

Jan Beulich <jbeulich@xxxxxxxx>
x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()

Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint

Zhang Yi <yi.zhang@xxxxxxxxxx>
jbd2: recheck chechpointing non-dirty buffer

Zhang Yi <yi.zhang@xxxxxxxxxx>
jbd2: remove redundant buffer io error checks

Johannes Berg <johannes.berg@xxxxxxxxx>
iwlwifi: mvm: write queue_sync_state only for sync

Johannes Berg <johannes.berg@xxxxxxxxx>
iwlwifi: mvm: do more useful queue sync accounting

Max Verevkin <me@xxxxxxxxxxxxxx>
platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC

Sergej Bauer <sbauer@xxxxxxxxxxx>
lan743x: fix for potential NULL pointer dereference with bare card

Filipe Manana <fdmanana@xxxxxxxx>
btrfs: do not pin logs too early during renames

Filipe Manana <fdmanana@xxxxxxxx>
btrfs: unify lookup return value when dir entry is missing

Marcos Paulo de Souza <mpdesouza@xxxxxxxx>
btrfs: introduce btrfs_lookup_match_dir

Josef Bacik <josef@xxxxxxxxxxxxxx>
btrfs: tree-checker: check for overlapping extent items

Borislav Petkov <bp@xxxxxxx>
task_stack, x86/cea: Force-inline stack helpers

Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use

Pierre-Louis Bossart <pierre-louis.bossart@xxxxxxxxxxxxxxx>
ASoC: Intel: boards: get codec device with ACPI instead of bus search

Pierre-Louis Bossart <pierre-louis.bossart@xxxxxxxxxxxxxxx>
ASoC: Intel: boards: harden codec property handling

YouChing Lin <ycllin@xxxxxxxxxxx>
mtd: spinand: macronix: Add support for MX35LFxGE4AD

Shyam Prasad N <sprasad@xxxxxxxxxxxxx>
cifs: add a warning when the in-flight count goes negative

Benjamin Gray <bgray@xxxxxxxxxxxxx>
powerpc/watchpoints: Annotate atomic context in more places

Ravi Bangoria <ravi.bangoria@xxxxxxxxxxxxx>
powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions

Michael Schmitz <schmitzmic@xxxxxxxxx>
block: ataflop: fix breakage introduced at blk-mq refactoring

Kees Cook <keescook@xxxxxxxxxxxx>
seccomp: Invalidate seccomp mode to catch death failures

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/uaccess: Implement macros for CMPXCHG on user addresses

Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx>
hsr: Avoid double remove of a node.

Roger Pau Monne <roger.pau@xxxxxxxxxx>
hvc/xen: prevent concurrent accesses to the shared ring

Dan Carpenter <error27@xxxxxxxxx>
media: av7110: prevent underflow in write_ts_to_decoder()

Shengjiu Wang <shengjiu.wang@xxxxxxx>
ASoC: fsl_micfil: register platform component before registering cpu dai

Xiaolei Wang <xiaolei.wang@xxxxxxxxxxxxx>
ARM: dts: imx: Set default tuning step for imx6sx usdhc

Jiaxun Yang <jiaxun.yang@xxxxxxxxxxx>
irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable

Rafał Miłecki <rafal@xxxxxxxxxx>
ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger

Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
pmdomain: renesas: r8a77980-sysc: CR7 must be always on

Yi Sun <yi.sun@xxxxxxxxxx>
virtio-blk: Ensure no requests in virtqueues before deleting vqs.

Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx>
firewire: core: send bus reset promptly on gap count error

Hannes Reinecke <hare@xxxxxxx>
scsi: lpfc: Use unsigned type for num_sge

Zhang Rui <rui.zhang@xxxxxxxxx>
hwmon: (coretemp) Enlarge per package core count limit

Andrew Bresticker <abrestic@xxxxxxxxxxxx>
efi: Don't add memblocks for soft-reserved memory

Andrew Bresticker <abrestic@xxxxxxxxxxxx>
efi: runtime: Fix potential overflow of soft-reserved region size

Szilard Fabian <szfabian@xxxxxxxxxxxxx>
Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table

Zhang Yi <yi.zhang@xxxxxxxxxx>
ext4: correct the hole length returned by ext4_map_blocks()

Daniel Wagner <dwagner@xxxxxxx>
nvmet-fc: abort command when there is no binding

Daniel Wagner <dwagner@xxxxxxx>
nvmet-fc: release reference on target port

Daniel Wagner <dwagner@xxxxxxx>
nvmet-fcloop: swap the list_add_tail arguments

Daniel Wagner <dwagner@xxxxxxx>
nvme-fc: do not wait in vain when unloading module

Xin Long <lucien.xin@xxxxxxxxx>
netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
spi: sh-msiof: avoid integer overflow in constants

Chen-Yu Tsai <wens@xxxxxxxx>
ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616

Guixin Liu <kanie@xxxxxxxxxxxxxxxxx>
nvmet-tcp: fix nvme tcp ida memory leak

Martin Blumenstingl <martin.blumenstingl@xxxxxxxxxxxxxx>
regulator: pwm-regulator: Add validity checks in continuous .get_voltage

Kunwu Chan <chentao@xxxxxxxxxx>
dmaengine: ti: edma: Add some null pointer checks to the edma_probe

Baokun Li <libaokun1@xxxxxxxxxx>
ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()

Baokun Li <libaokun1@xxxxxxxxxx>
ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()

Lennert Buytenhek <kernel@xxxxxxxxxxxxxx>
ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers

Conrad Kostecki <conikost@xxxxxxxxxx>
ahci: asm1166: correct count of reported ports

Devyn Liu <liudingyuan@xxxxxxxxxx>
spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected

Fullway Wang <fullwaywang@xxxxxxxxxxx>
fbdev: sis: Error out if pixclock equals zero

Fullway Wang <fullwaywang@xxxxxxxxxxx>
fbdev: savage: Error out if pixclock equals zero

Felix Fietkau <nbd@xxxxxxxx>
wifi: mac80211: fix race condition on enabling fast-xmit

Michal Kazior <michal@xxxxxxxxx>
wifi: cfg80211: fix missing interfaces when dumping

Vinod Koul <vkoul@xxxxxxxxxx>
dmaengine: fsl-qdma: increase size of 'irq_name'

Vinod Koul <vkoul@xxxxxxxxxx>
dmaengine: shdma: increase size of 'dev_id'

Dmitry Bogdanov <d.bogdanov@xxxxxxxxx>
scsi: target: core: Add TMF to tmr_list handling

Cyril Hrubis <chrubis@xxxxxxx>
sched/rt: Disallow writing invalid values to sched_rt_period_us

Cyril Hrubis <chrubis@xxxxxxx>
sched/rt: Fix sysctl_sched_rr_timeslice intial value

Damien Le Moal <dlemoal@xxxxxxxxxx>
zonefs: Improve error handling

Lokesh Gidra <lokeshgidra@xxxxxxxxxx>
userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb

Cyril Hrubis <chrubis@xxxxxxx>
sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset

Paulo Alcantara <pc@xxxxxxxxxxxxx>
smb: client: fix parsing of SMB3.1.1 POSIX create context

Paulo Alcantara <pc@xxxxxxxxxxxxx>
smb: client: fix potential OOBs in smb2_parse_contexts()

Paulo Alcantara <pc@xxxxxxxxxxxxx>
smb: client: fix OOB in receive_encrypted_standard()

Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
net/sched: Retire dsmark qdisc

Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
net/sched: Retire ATM qdisc

Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
net/sched: Retire CBQ qdisc


-------------

Diffstat:

Makefile | 4 +-
arch/arm/boot/dts/bcm47189-luxul-xap-1440.dts | 1 -
arch/arm/boot/dts/bcm47189-luxul-xap-810.dts | 2 -
arch/arm/boot/dts/imx6sx.dtsi | 6 +
arch/arm/mach-ep93xx/core.c | 1 +
arch/arm64/boot/dts/rockchip/px30.dtsi | 2 +
arch/arm64/kvm/vgic/vgic-its.c | 5 +
arch/powerpc/kernel/hw_breakpoint.c | 76 +-
arch/s390/pci/pci.c | 2 +-
arch/x86/include/asm/cpu_entry_area.h | 2 +-
arch/x86/include/asm/nospec-branch.h | 2 +
arch/x86/include/asm/text-patching.h | 46 +-
arch/x86/include/asm/uaccess.h | 142 ++
arch/x86/kernel/alternative.c | 13 +-
arch/x86/kernel/ftrace.c | 4 +-
arch/x86/kernel/paravirt.c | 22 +-
arch/x86/kernel/static_call.c | 2 +-
arch/x86/net/bpf_jit_comp.c | 2 +-
drivers/ata/ahci.c | 34 +-
drivers/ata/ahci.h | 1 +
drivers/block/ataflop.c | 56 +-
drivers/block/virtio_blk.c | 7 +-
drivers/dma/fsl-qdma.c | 2 +-
drivers/dma/sh/shdma.h | 2 +-
drivers/dma/ti/edma.c | 10 +
drivers/firewire/core-card.c | 18 +-
drivers/firmware/efi/arm-runtime.c | 2 +-
drivers/firmware/efi/efi-init.c | 19 +-
drivers/firmware/efi/riscv-runtime.c | 2 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 1 +
drivers/gpu/drm/drm_syncobj.c | 16 +-
drivers/gpu/drm/nouveau/nvkm/subdev/bios/shadow.c | 8 +-
drivers/hwmon/coretemp.c | 2 +-
drivers/infiniband/hw/bnxt_re/ib_verbs.c | 5 +-
drivers/infiniband/hw/hfi1/pio.c | 6 +-
drivers/infiniband/hw/hfi1/sdma.c | 2 +-
drivers/infiniband/hw/qedr/verbs.c | 11 +-
drivers/infiniband/ulp/srpt/ib_srpt.c | 17 +-
drivers/input/serio/i8042-acpipnpio.h | 8 +
drivers/irqchip/irq-mips-gic.c | 2 +
drivers/md/dm-crypt.c | 6 +
drivers/media/pci/ttpci/av7110_av.c | 4 +-
drivers/mtd/nand/spi/macronix.c | 20 +
drivers/net/ethernet/microchip/lan743x_ethtool.c | 9 +-
drivers/net/gtp.c | 10 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 14 +-
drivers/net/wireless/intel/iwlwifi/mvm/mvm.h | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/rxmq.c | 10 +-
drivers/nvme/host/fc.c | 47 +-
drivers/nvme/target/fc.c | 11 +-
drivers/nvme/target/fcloop.c | 6 +-
drivers/nvme/target/tcp.c | 1 +
drivers/pci/msi.c | 2 +-
drivers/platform/x86/intel-vbtn.c | 6 +
drivers/regulator/pwm-regulator.c | 3 +
drivers/s390/cio/device_ops.c | 6 +-
drivers/scsi/Kconfig | 2 +-
drivers/scsi/lpfc/lpfc_scsi.c | 12 +-
drivers/soc/renesas/r8a77980-sysc.c | 3 +-
drivers/spi/spi-hisi-sfc-v3xx.c | 5 +
drivers/spi/spi-sh-msiof.c | 16 +-
drivers/target/target_core_device.c | 5 -
drivers/target/target_core_transport.c | 4 +
drivers/tty/hvc/hvc_xen.c | 19 +-
drivers/usb/cdns3/gadget.c | 8 +-
drivers/usb/gadget/function/f_ncm.c | 10 +-
drivers/usb/roles/class.c | 29 +-
drivers/video/fbdev/savage/savagefb_driver.c | 3 +
drivers/video/fbdev/sis/sis_main.c | 2 +
fs/afs/volume.c | 4 +-
fs/aio.c | 9 +-
fs/btrfs/ctree.h | 2 +-
fs/btrfs/dir-item.c | 122 +-
fs/btrfs/inode.c | 48 +-
fs/btrfs/tree-checker.c | 25 +-
fs/btrfs/tree-log.c | 14 +-
fs/cifs/smb2ops.c | 19 +-
fs/cifs/smb2pdu.c | 95 +-
fs/cifs/smb2proto.h | 12 +-
fs/erofs/decompressor.c | 24 +-
fs/ext4/extents.c | 111 +-
fs/ext4/mballoc.c | 33 +-
fs/jbd2/checkpoint.c | 137 +-
fs/zonefs/super.c | 68 +-
include/linux/fs.h | 2 +
include/linux/lockdep.h | 5 +
include/linux/sched/task_stack.h | 2 +-
include/linux/socket.h | 5 +-
include/net/tcp.h | 2 +-
kernel/sched/rt.c | 10 +-
kernel/seccomp.c | 10 +
kernel/sysctl.c | 4 +
mm/userfaultfd.c | 14 +-
net/core/dev.c | 2 +-
net/core/dev_ioctl.c | 2 +-
net/hsr/hsr_framereg.c | 16 +-
net/hsr/hsr_framereg.h | 1 +
net/ipv4/arp.c | 3 +-
net/ipv4/devinet.c | 21 +-
net/ipv6/addrconf.c | 21 +-
net/ipv6/seg6.c | 20 +-
net/l2tp/l2tp_ip6.c | 2 +-
net/mac80211/sta_info.c | 2 +
net/mac80211/tx.c | 2 +-
net/mptcp/diag.c | 6 +-
net/netfilter/nf_conntrack_proto_sctp.c | 2 +-
net/netfilter/nf_tables_api.c | 1 +
net/packet/af_packet.c | 12 +-
net/sched/Kconfig | 42 -
net/sched/Makefile | 3 -
net/sched/sch_atm.c | 709 --------
net/sched/sch_cbq.c | 1816 ---------------------
net/sched/sch_dsmark.c | 521 ------
net/tls/tls_main.c | 2 +-
net/tls/tls_sw.c | 12 +-
net/wireless/nl80211.c | 1 +
scripts/bpf_helpers_doc.py | 2 +-
sound/soc/fsl/fsl_micfil.c | 15 +-
sound/soc/intel/boards/bytcht_es8316.c | 14 +-
sound/soc/intel/boards/bytcr_rt5640.c | 46 +-
sound/soc/intel/boards/bytcr_rt5651.c | 41 +-
sound/soc/sunxi/sun4i-spdif.c | 5 +
123 files changed, 1267 insertions(+), 3694 deletions(-)