[PATCH 5.4 00/94] 5.4.290-rc2 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 5.4.290 release.
There are 94 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun, 02 Feb 2025 11:20:53 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.290-rc2.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 5.4.290-rc2

Ron Economos <re@xxxxxxxx>
    Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals

Arnd Bergmann <arnd@xxxxxxxx>
    xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals

Maíra Canal <mcanal@xxxxxxxxxx>
    drm/v3d: Assign job pointer to NULL before signaling the fence

Jack Greiner <jack@xxxxxxxxx>
    Input: xpad - add support for wooting two he (arm)

Nilton Perim Neto <niltonperimneto@xxxxxxxxx>
    Input: xpad - add unofficial Xbox 360 wireless receiver clone

Mark Pearson <mpearson-lenovo@xxxxxxxxx>
    Input: atkbd - map F23 key to support default copilot shortcut

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null"

Qasim Ijaz <qasdev00@xxxxxxxxx>
    USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()

Baokun Li <libaokun1@xxxxxxxxxx>
    ext4: fix slab-use-after-free in ext4_split_extent_at()

Theodore Ts'o <tytso@xxxxxxx>
    ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path

Alex Williamson <alex.williamson@xxxxxxxxxx>
    vfio/platform: check the bounds of read/write syscalls

Jeongjun Park <aha310510@xxxxxxxxx>
    net/xen-netback: prevent UAF in xenvif_flush_hash()

Madhuparna Bhowmik <madhuparnabhowmik04@xxxxxxxxx>
    net: xen-netback: hash.c: Use built-in RCU list checking

Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
    signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die

Liam Howlett <liam.howlett@xxxxxxxxxx>
    m68k: Add missing mmap_read_lock() to sys_cacheflush()

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
    m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal

Andreas Gruenbacher <agruenba@xxxxxxxxxx>
    gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag

Philippe Simons <simons.philippe@xxxxxxxxx>
    irqchip/sunxi-nmi: Add missing SKIP_WAKE flag

Xiang Zhang <hawkxiang.cpp@xxxxxxxxx>
    scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request

Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxx>
    ASoC: wm8994: Add depends on MFD core

Wang Liang <wangliang74@xxxxxxxxxx>
    net: fix data-races around sk->sk_forward_alloc

Suraj Sonawane <surajsonawane0215@xxxxxxxxx>
    scsi: sg: Fix slab-use-after-free read in sg_release()

Eric Dumazet <edumazet@xxxxxxxxxx>
    ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()

Koichiro Den <koichiro.den@xxxxxxxxxxxxx>
    hrtimers: Handle CPU state correctly on hotplug

Yogesh Lal <quic_ylal@xxxxxxxxxxx>
    irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly

Rik van Riel <riel@xxxxxxxxxxx>
    fs/proc: fix softlockup in __read_vmcore (part 2)

Heiner Kallweit <hkallweit1@xxxxxxxxx>
    net: ethernet: xgbe: re-add aneg to supported features in PHY quirks

Luis Chamberlain <mcgrof@xxxxxxxxxx>
    nvmet: propagate npwg topology

Oleg Nesterov <oleg@xxxxxxxxxx>
    poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()

David Howells <dhowells@xxxxxxxxxx>
    kheaders: Ignore silly-rename files

Leo Stone <leocstone@xxxxxxxxx>
    hfs: Sanity check the root record

Lizhi Xu <lizhi.xu@xxxxxxxxxxxxx>
    mac802154: check local interfaces before deleting sdata list

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
    i2c: mux: demux-pinctrl: check initial mux selection, too

Maíra Canal <mcanal@xxxxxxxxxx>
    drm/v3d: Ensure job pointer is set to NULL after job completion

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    nfp: bpf: prevent integer overflow in nfp_bpf_event_output()

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
    gtp: Destroy device along with udp socket's netns dismantle.

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
    gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().

Eric Dumazet <edumazet@xxxxxxxxxx>
    gtp: use exit_batch_rtnl() method

Eric Dumazet <edumazet@xxxxxxxxxx>
    net: add exit_batch_rtnl() method

Yajun Deng <yajun.deng@xxxxxxxxx>
    net: net_namespace: Optimize the code

Sudheer Kumar Doredla <s-doredla@xxxxxx>
    net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()

Anup Patel <anup.patel@xxxxxxx>
    RISC-V: Don't enable all interrupts in trap_init()

Paul Walmsley <paul.walmsley@xxxxxxxxxx>
    riscv: prefix IRQ_ macro names with an RV_ namespace

Nam Cao <namcao@xxxxxxxxxxxxx>
    riscv: Fix sleeping in invalid context in die()

Mattias Nissler <mnissler@xxxxxxxxxxxx>
    riscv: Avoid enabling interrupts in die()

Palmer Dabbelt <palmer@xxxxxxxxxxxx>
    RISC-V: Avoid dereferening NULL regs in die()

Rouven Czerwinski <rouven@xxxxxxxxxxxxxx>
    riscv: remove unused handle_exception symbol

Christoph Hellwig <hch@xxxxxx>
    riscv: abstract out CSR names for supervisor vs machine mode

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
    sctp: sysctl: rto_min/max: avoid using current->nsproxy

Dennis Lam <dennis.lamerice@xxxxxxxxx>
    ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv

Joseph Qi <joseph.qi@xxxxxxxxxxxxxxxxx>
    ocfs2: correct return value of ocfs2_local_free_info()

Zijun Hu <quic_zijuhu@xxxxxxxxxxx>
    phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider

Vinod Koul <vkoul@xxxxxxxxxx>
    phy: core: fix code style in devm_of_phy_provider_unregister

Peter Geis <pgwipeout@xxxxxxxxx>
    arm64: dts: rockchip: add hevc power domain clock to rk3328

Johan Jonker <jbx6244@xxxxxxxxx>
    arm64: dts: rockchip: add #power-domain-cells to power domain nodes

Johan Jonker <jbx6244@xxxxxxxxx>
    arm64: dts: rockchip: fix pd_tcpc0 and pd_tcpc1 node position on rk3399

Johan Jonker <jbx6244@xxxxxxxxx>
    arm64: dts: rockchip: fix defines in pd_vio node for rk3399

Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx>
    iio: inkern: call iio_device_put() only on mapped devices

Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx>
    iio: adc: at91: call input_free_device() on allocated iio_dev

Fabio Estevam <festevam@xxxxxxxxx>
    iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()

Carlos Song <carlos.song@xxxxxxx>
    iio: gyro: fxas21002c: Fix missing data update in trigger handler

Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx>
    iio: adc: ti-ads8688: fix information leak in triggered buffer

Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx>
    iio: imu: kmx61: fix information leak in triggered buffer

Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx>
    iio: light: vcnl4035: fix information leak in triggered buffer

Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx>
    iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer

Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx>
    iio: pressure: zpa2326: fix information leak in triggered buffer

Akash M <akash.m5@xxxxxxxxxxx>
    usb: gadget: f_fs: Remove WARN_ON in functionfs_bind

Ma Ke <make_ruc2021@xxxxxxx>
    usb: fix reference leak in usb_new_device()

Kai-Heng Feng <kaihengf@xxxxxxxxxx>
    USB: core: Disable LPM only for non-suspended ports

Jun Yan <jerrysteve1101@xxxxxxxxx>
    USB: usblp: return error when setting unsupported protocol

Lianqin Hu <hulianqin@xxxxxxxx>
    usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null

Johan Hovold <johan@xxxxxxxxxx>
    USB: serial: cp210x: add Phoenix Contact UPS Device

Lubomir Rintel <lrintel@xxxxxxxxxx>
    usb-storage: Add max sectors quirk for Nokia 208

Zicheng Qu <quzicheng@xxxxxxxxxx>
    staging: iio: ad9832: Correct phase range check

Zicheng Qu <quzicheng@xxxxxxxxxx>
    staging: iio: ad9834: Correct phase range check

Michal Hrusecky <michal.hrusecky@xxxxxxxxxx>
    USB: serial: option: add Neoway N723-EA support

Chukun Pan <amadeus@xxxxxxxxxx>
    USB: serial: option: add MeiG Smart SRM815

Melissa Wen <mwen@xxxxxxxxxx>
    drm/amd/display: increase MAX_SURFACES to the value supported by hw

Hans de Goede <hdegoede@xxxxxxxxxx>
    ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]

Hans de Goede <hdegoede@xxxxxxxxxx>
    ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]

Roman Li <Roman.Li@xxxxxxx>
    drm/amd/display: Add check for granularity in dml ceil/floor helpers

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
    sctp: sysctl: auth_enable: avoid using current->nsproxy

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
    sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy

Krister Johansen <kjlx@xxxxxxxxxxxxxxxxxx>
    dm thin: make get_first_thin use rcu-safe list first function

Benjamin Coddington <bcodding@xxxxxxxxxx>
    tls: Fix tls_sw_sendmsg error handling

Eric Dumazet <edumazet@xxxxxxxxxx>
    net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute

Zhongqiu Duan <dzq.aishenghu0@xxxxxxxxx>
    tcp/dccp: allow a connection when sk_max_ack_backlog is zero

Jason Xing <kernelxing@xxxxxxxxxxx>
    tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog

Antonio Pastor <antonio.pastor@xxxxxxxxx>
    net: 802: LLC+SNAP OID:PID lookup on start of skb data

Keisuke Nishimura <keisuke.nishimura@xxxxxxxx>
    ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()

Ming-Hung Tsai <mtsai@xxxxxxxxxx>
    dm array: fix cursor index when skipping across block boundaries

Ming-Hung Tsai <mtsai@xxxxxxxxxx>
    dm array: fix unreleased btree blocks on closing a faulty array cursor

Ming-Hung Tsai <mtsai@xxxxxxxxxx>
    dm array: fix releasing a faulty array block twice in dm_array_cursor_end

Zhang Yi <yi.zhang@xxxxxxxxxx>
    jbd2: flush filesystem device before updating tail sequence


-------------

Diffstat:

 Makefile                                           |  4 +-
 arch/arm64/boot/dts/rockchip/px30.dtsi             |  8 +++
 arch/arm64/boot/dts/rockchip/rk3328.dtsi           |  4 ++
 arch/arm64/boot/dts/rockchip/rk3399.dtsi           | 40 ++++++++---
 arch/m68k/fpsp040/skeleton.S                       |  3 +-
 arch/m68k/kernel/entry.S                           |  2 +
 arch/m68k/kernel/sys_m68k.c                        |  2 +
 arch/m68k/kernel/traps.c                           |  2 +-
 arch/riscv/Kconfig                                 |  4 ++
 arch/riscv/include/asm/csr.h                       | 72 ++++++++++++++++---
 arch/riscv/include/asm/irqflags.h                  | 12 ++--
 arch/riscv/include/asm/processor.h                 |  2 +-
 arch/riscv/include/asm/ptrace.h                    | 16 ++---
 arch/riscv/include/asm/switch_to.h                 | 10 +--
 arch/riscv/kernel/asm-offsets.c                    |  8 +--
 arch/riscv/kernel/entry.S                          | 74 +++++++++++--------
 arch/riscv/kernel/fpu.S                            |  8 +--
 arch/riscv/kernel/head.S                           | 12 ++--
 arch/riscv/kernel/irq.c                            | 17 ++---
 arch/riscv/kernel/perf_callchain.c                 |  2 +-
 arch/riscv/kernel/process.c                        | 17 ++---
 arch/riscv/kernel/signal.c                         | 21 +++---
 arch/riscv/kernel/smp.c                            |  2 +-
 arch/riscv/kernel/traps.c                          | 34 ++++-----
 arch/riscv/lib/uaccess.S                           | 12 ++--
 arch/riscv/mm/extable.c                            |  4 +-
 arch/riscv/mm/fault.c                              |  6 +-
 drivers/acpi/resource.c                            | 18 +++++
 drivers/clocksource/timer-riscv.c                  |  8 +--
 drivers/gpu/drm/amd/display/dc/dc.h                |  2 +-
 .../gpu/drm/amd/display/dc/dml/dml_inline_defs.h   |  8 +++
 drivers/gpu/drm/v3d/v3d_irq.c                      | 12 ++++
 drivers/i2c/muxes/i2c-demux-pinctrl.c              |  4 +-
 drivers/iio/adc/at91_adc.c                         |  2 +-
 drivers/iio/adc/ti-ads124s08.c                     |  4 +-
 drivers/iio/adc/ti-ads8688.c                       |  2 +-
 drivers/iio/dummy/iio_simple_dummy_buffer.c        |  2 +-
 drivers/iio/gyro/fxas21002c_core.c                 | 11 ++-
 drivers/iio/imu/kmx61.c                            |  2 +-
 drivers/iio/inkern.c                               |  2 +-
 drivers/iio/light/vcnl4035.c                       |  2 +-
 drivers/iio/pressure/zpa2326.c                     |  2 +
 drivers/input/joystick/xpad.c                      |  2 +
 drivers/input/keyboard/atkbd.c                     |  2 +-
 drivers/irqchip/irq-gic-v3.c                       |  2 +-
 drivers/irqchip/irq-sifive-plic.c                  | 11 +--
 drivers/irqchip/irq-sunxi-nmi.c                    |  3 +-
 drivers/md/dm-thin.c                               |  5 +-
 drivers/md/persistent-data/dm-array.c              | 19 +++--
 drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c        | 19 +----
 drivers/net/ethernet/netronome/nfp/bpf/offload.c   |  3 +-
 drivers/net/ethernet/ti/cpsw_ale.c                 | 14 ++--
 drivers/net/gtp.c                                  | 42 ++++++-----
 drivers/net/ieee802154/ca8210.c                    |  6 +-
 drivers/net/xen-netback/hash.c                     |  7 +-
 drivers/nvme/target/io-cmd-bdev.c                  |  2 +-
 drivers/phy/phy-core.c                             |  7 +-
 drivers/scsi/scsi_transport_iscsi.c                |  4 +-
 drivers/scsi/sg.c                                  |  2 +-
 drivers/staging/iio/frequency/ad9832.c             |  2 +-
 drivers/staging/iio/frequency/ad9834.c             |  2 +-
 drivers/usb/class/usblp.c                          |  7 +-
 drivers/usb/core/hub.c                             |  6 +-
 drivers/usb/core/port.c                            |  7 +-
 drivers/usb/gadget/function/f_fs.c                 |  2 +-
 drivers/usb/serial/cp210x.c                        |  1 +
 drivers/usb/serial/option.c                        |  4 +-
 drivers/usb/serial/quatech2.c                      |  2 +-
 drivers/usb/storage/unusual_devs.h                 |  7 ++
 drivers/vfio/platform/vfio_platform_common.c       | 10 +++
 fs/ext4/ext4.h                                     |  1 +
 fs/ext4/extents.c                                  | 64 ++++++++++++++---
 fs/gfs2/file.c                                     |  1 +
 fs/hfs/super.c                                     |  4 +-
 fs/jbd2/commit.c                                   |  4 +-
 fs/ocfs2/quota_global.c                            |  2 +-
 fs/ocfs2/quota_local.c                             | 10 ++-
 fs/proc/vmcore.c                                   |  2 +
 include/linux/hrtimer.h                            |  1 +
 include/linux/poll.h                               | 10 ++-
 include/linux/usb.h                                |  3 +-
 include/linux/usb/hcd.h                            |  2 -
 include/net/inet_connection_sock.h                 |  2 +-
 include/net/net_namespace.h                        |  3 +
 kernel/cpu.c                                       |  2 +-
 kernel/gen_kheaders.sh                             |  1 +
 kernel/time/hrtimer.c                              | 11 ++-
 net/802/psnap.c                                    |  4 +-
 net/core/net_namespace.c                           | 83 ++++++++++++++--------
 net/dccp/ipv6.c                                    |  2 +-
 net/ipv6/route.c                                   |  2 +-
 net/ipv6/tcp_ipv6.c                                |  4 +-
 net/mac802154/iface.c                              |  4 ++
 net/sched/cls_flow.c                               |  3 +-
 net/sctp/sysctl.c                                  |  9 +--
 net/tls/tls_sw.c                                   |  2 +-
 sound/soc/codecs/Kconfig                           |  1 +
 97 files changed, 598 insertions(+), 318 deletions(-)