[PATCH 5.10 00/93] 5.10.71-rc1 review

From: Greg Kroah-Hartman
Date: Mon Oct 04 2021 - 09:21:12 EST


This is the start of the stable review cycle for the 5.10.71 release.
There are 93 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed, 06 Oct 2021 12:50:17 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.71-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 5.10.71-rc1

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nf_tables: Fix oversized kvmalloc() calls

Eric Dumazet <edumazet@xxxxxxxxxx>
netfilter: conntrack: serialize hash resizes and cleanups

Haimin Zhang <tcs_kernel@xxxxxxxxxxx>
KVM: x86: Handle SRCU initialization failure during page track init

Yanfei Xu <yanfei.xu@xxxxxxxxxxxxx>
net: mdiobus: Fix memory leak in __mdiobus_register

Anirudh Rayabharam <mail@xxxxxxxxxxxxx>
HID: usbhid: free raw_report buffers in usbhid_stop

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
mm: don't allow oversized kvmalloc() calls

Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
netfilter: ipset: Fix oversized kvmalloc() calls

F.A.Sulaiman <asha.16@xxxxxxxxxxxxxxx>
HID: betop: fix slab-out-of-bounds Write in betop_probe

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()

Dongliang Mu <mudongliangabcd@xxxxxxxxx>
usb: hso: remove the bailout parameter

Shuming Fan <shumingf@xxxxxxxxxxx>
ASoC: dapm: use component prefix when checking widget names

Eric Dumazet <edumazet@xxxxxxxxxx>
net: udp: annotate data race around udp_sk(sk)->corkflag

Andrej Shadura <andrew.shadura@xxxxxxxxxxxxxxx>
HID: u2fzero: ignore incomplete packets without data

yangerkun <yangerkun@xxxxxxxxxx>
ext4: fix potential infinite loop in ext4_dx_readdir()

Theodore Ts'o <tytso@xxxxxxx>
ext4: add error checking to ext4_ext_replay_set_iblocks()

Jeffle Xu <jefflexu@xxxxxxxxxxxxxxxxx>
ext4: fix reserved space counter leakage

Hou Tao <houtao1@xxxxxxxxxx>
ext4: limit the number of blocks in one ADD_RANGE TLV

Ritesh Harjani <riteshh@xxxxxxxxxxxxx>
ext4: fix loff_t overflow in ext4_max_bitmap_size()

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix module reference leak

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix missing allocation-failure check

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix tty-registration error handling

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix tty registration race

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix stack information leak

Nirmoy Das <nirmoy.das@xxxxxxx>
debugfs: debugfs_create_file_size(): use IS_ERR to check for error

Chen Jingwen <chenjingwen6@xxxxxxxxxx>
elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings

Keith Busch <kbusch@xxxxxxxxxx>
nvme: add command id quirk for apple controllers

Vadim Pasternak <vadimp@xxxxxxxxxx>
hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller

Kan Liang <kan.liang@xxxxxxxxxxxxxxx>
perf/x86/intel: Update event constraints for ICX

Eric Dumazet <edumazet@xxxxxxxxxx>
af_unix: fix races in sk_peer_pid and sk_peer_cred accesses

Vlad Buslov <vladbu@xxxxxxxxxx>
net: sched: flower: protect fl_walk() with rcu

Florian Fainelli <f.fainelli@xxxxxxxxx>
net: phy: bcm7xxx: Fixed indirect MMD operations

Guangbin Huang <huangguangbin2@xxxxxxxxxx>
net: hns3: fix always enable rx vlan filter problem after selftest

Peng Li <lipeng321@xxxxxxxxxx>
net: hns3: reconstruct function hns3_self_test

Huazhong Tan <tanhuazhong@xxxxxxxxxx>
net: hns3: fix prototype warning

Jian Shen <shenjian15@xxxxxxxxxx>
net: hns3: fix show wrong state when add existing uc mac address

Jian Shen <shenjian15@xxxxxxxxxx>
net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE

Yonglong Liu <liuyonglong@xxxxxxxxxx>
net: hns3: keep MAC pause mode when multiple TCs are enabled

Jian Shen <shenjian15@xxxxxxxxxx>
net: hns3: do not allow call hns3_nic_net_open repeatedly

Feng Zhou <zhoufeng.zf@xxxxxxxxxxxxx>
ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup

Rahul Lakkireddy <rahul.lakkireddy@xxxxxxxxxxx>
scsi: csiostor: Add module softdep on cxgb4

Jens Axboe <axboe@xxxxxxxxx>
Revert "block, bfq: honor already-setup queue merges"

Arnd Bergmann <arnd@xxxxxxxx>
net: ks8851: fix link error

Jiri Benc <jbenc@xxxxxxxxxx>
selftests, bpf: test_lwt_ip_encap: Really disable rp_filter

Jiri Benc <jbenc@xxxxxxxxxx>
selftests, bpf: Fix makefile dependencies on libbpf

Lorenz Bauer <lmb@xxxxxxxxxxxxxx>
bpf: Exempt CAP_BPF from checks against bpf_jit_limit

Yixing Liu <liuyixing1@xxxxxxxxxx>
RDMA/hns: Fix inaccurate prints

Jacob Keller <jacob.e.keller@xxxxxxxxx>
e100: fix buffer overrun in e100_get_regs

Jacob Keller <jacob.e.keller@xxxxxxxxx>
e100: fix length calculation in e100_get_regs_len

Andrew Lunn <andrew@xxxxxxx>
dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports

Andrew Lunn <andrew@xxxxxxx>
dsa: mv88e6xxx: Fix MTU definition

Andrew Lunn <andrew@xxxxxxx>
dsa: mv88e6xxx: 6161: Use chip wide MAX MTU

Matthew Auld <matthew.auld@xxxxxxxxx>
drm/i915/request: fix early tracepoints

Aaro Koskinen <aaro.koskinen@xxxxxx>
smsc95xx: fix stalled rx after link change

Xiao Liang <shaw.leon@xxxxxxxxx>
net: ipv4: Fix rtnexthop len when RTA_FLOW is present

Vladimir Oltean <vladimir.oltean@xxxxxxx>
net: enetc: fix the incorrect clearing of IF_MODE bits

Paul Fertser <fercerpav@xxxxxxxxx>
hwmon: (tmp421) fix rounding for negative values

Paul Fertser <fercerpav@xxxxxxxxx>
hwmon: (tmp421) report /PVLD condition as fault

Florian Westphal <fw@xxxxxxxxx>
mptcp: don't return sockets in foreign netns

Xin Long <lucien.xin@xxxxxxxxx>
sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb

Johannes Berg <johannes.berg@xxxxxxxxx>
mac80211-hwsim: fix late beacon hrtimer handling

Johannes Berg <johannes.berg@xxxxxxxxx>
mac80211: mesh: fix potentially unaligned access

Lorenzo Bianconi <lorenzo@xxxxxxxxxx>
mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap

Chih-Kang Chang <gary.chang@xxxxxxxxxxx>
mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug

Vadim Pasternak <vadimp@xxxxxxxxxx>
hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs

Piotr Krysiuk <piotras@xxxxxxxxx>
bpf, mips: Validate conditional branch offsets

Tao Liu <thomas.liu@xxxxxxxxx>
RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure

Christoph Lameter <cl@xxxxxxxxx>
IB/cma: Do not send IGMP leaves for sendonly Multicast groups

Hou Tao <houtao1@xxxxxxxxxx>
bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog

Andrea Claudi <aclaudi@xxxxxxxxxx>
ipvs: check that ip_vs_conn_tab_bits is between 8 and 20

Hawking Zhang <Hawking.Zhang@xxxxxxx>
drm/amdgpu: correct initial cp_hqd_quantum for gfx9

Charlene Liu <Charlene.Liu@xxxxxxx>
drm/amd/display: Pass PCI deviceid into DC

Jason Gunthorpe <jgg@xxxxxxxx>
RDMA/cma: Do not change route.addr.src_addr.ss_family

Sean Young <sean@xxxxxxxx>
media: ir_toy: prevent device from hanging during transmit

Sean Christopherson <seanjc@xxxxxxxxxx>
KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest

Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
KVM: nVMX: Filter out all unsupported controls when eVMCS was activated

Maxim Levitsky <mlevitsk@xxxxxxxxxx>
KVM: x86: nSVM: don't copy virt_ext from vmcb12

Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()

Zelin Deng <zelin.deng@xxxxxxxxxxxxxxxxx>
x86/kvmclock: Move this_cpu_pvti into kvmclock.h

Johannes Berg <johannes.berg@xxxxxxxxx>
mac80211: fix use-after-free in CCMP/GCMP RX

Jonathan Hsu <jonathan.hsu@xxxxxxxxxxxx>
scsi: ufs: Fix illegal offset in UPIU event trace

Andrey Gusakov <andrey.gusakov@xxxxxxxxxxxxxxxxxx>
gpio: pca953x: do not ignore i2c errors

Nadezda Lutovinova <lutovinova@xxxxxxxxx>
hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field

Nadezda Lutovinova <lutovinova@xxxxxxxxx>
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field

Nadezda Lutovinova <lutovinova@xxxxxxxxx>
hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field

Paul Fertser <fercerpav@xxxxxxxxx>
hwmon: (tmp421) handle I2C errors

Eric Biggers <ebiggers@xxxxxxxxxx>
fs-verity: fix signed integer overflow with i_size near S64_MAX

Jia He <justin.he@xxxxxxx>
ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect

Cameron Berkenpas <cam@xxxxxxxxxxx>
ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.

Pawel Laszczak <pawell@xxxxxxxxxxx>
usb: cdns3: fix race condition before setting doorbell

James Morse <james.morse@xxxxxxx>
cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory

Saurav Kashyap <skashyap@xxxxxxxxxxx>
scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS

Kevin Hao <haokexin@xxxxxxxxx>
cpufreq: schedutil: Use kobject release() method to free sugov_tunables

Igor Matheus Andrade Torrente <igormtorrente@xxxxxxxxx>
tty: Fix out-of-bound vmalloc access in imageblit


-------------

Diffstat:

Makefile | 4 +-
arch/mips/net/bpf_jit.c | 57 ++++++---
arch/x86/events/intel/core.c | 1 +
arch/x86/include/asm/kvm_page_track.h | 2 +-
arch/x86/include/asm/kvmclock.h | 14 +++
arch/x86/kernel/kvmclock.c | 13 +--
arch/x86/kvm/ioapic.c | 10 +-
arch/x86/kvm/mmu/page_track.c | 4 +-
arch/x86/kvm/svm/nested.c | 1 -
arch/x86/kvm/vmx/evmcs.c | 12 +-
arch/x86/kvm/vmx/vmx.c | 9 +-
arch/x86/kvm/x86.c | 7 +-
arch/x86/net/bpf_jit_comp.c | 53 ++++++---
block/bfq-iosched.c | 16 +--
drivers/acpi/nfit/core.c | 12 ++
drivers/cpufreq/cpufreq_governor_attr_set.c | 2 +-
drivers/crypto/ccp/ccp-ops.c | 14 ++-
drivers/gpio/gpio-pca953x.c | 11 +-
drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 2 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 1 +
drivers/gpu/drm/i915/i915_request.c | 11 +-
drivers/hid/hid-betopff.c | 13 ++-
drivers/hid/hid-u2fzero.c | 4 +-
drivers/hid/usbhid/hid-core.c | 13 ++-
drivers/hwmon/mlxreg-fan.c | 12 +-
drivers/hwmon/pmbus/mp2975.c | 2 +-
drivers/hwmon/tmp421.c | 71 +++++++-----
drivers/hwmon/w83791d.c | 29 ++---
drivers/hwmon/w83792d.c | 28 ++---
drivers/hwmon/w83793.c | 26 ++---
drivers/infiniband/core/cma.c | 28 ++++-
drivers/infiniband/hw/hns/hns_roce_alloc.c | 4 +-
drivers/infiniband/hw/hns/hns_roce_cq.c | 35 +++---
drivers/infiniband/hw/hns/hns_roce_hem.c | 18 +--
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 30 ++---
drivers/infiniband/hw/hns/hns_roce_mr.c | 10 +-
drivers/infiniband/hw/hns/hns_roce_pd.c | 2 +-
drivers/infiniband/hw/hns/hns_roce_qp.c | 61 +++++-----
drivers/infiniband/hw/hns/hns_roce_srq.c | 37 +++---
drivers/ipack/devices/ipoctal.c | 63 +++++++---
drivers/media/rc/ir_toy.c | 21 +++-
drivers/net/dsa/mv88e6xxx/chip.c | 17 +--
drivers/net/dsa/mv88e6xxx/chip.h | 1 +
drivers/net/dsa/mv88e6xxx/global1.c | 2 +
drivers/net/dsa/mv88e6xxx/port.c | 2 +
drivers/net/ethernet/freescale/enetc/enetc_pf.c | 3 +-
drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 5 +
drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.c | 105 +++++++++++------
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 7 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 19 ++-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 52 ++++-----
drivers/net/ethernet/intel/e100.c | 22 ++--
drivers/net/ethernet/intel/ixgbe/ixgbe_ethtool.c | 2 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 8 +-
drivers/net/ethernet/micrel/Makefile | 6 +-
drivers/net/ethernet/micrel/ks8851_common.c | 8 ++
drivers/net/phy/bcm7xxx.c | 114 +++++++++++++++++-
drivers/net/phy/mdio_bus.c | 1 +
drivers/net/usb/hso.c | 6 +-
drivers/net/usb/smsc95xx.c | 3 +
drivers/net/wireless/mac80211_hwsim.c | 4 +-
drivers/nvme/host/core.c | 4 +-
drivers/nvme/host/nvme.h | 6 +
drivers/nvme/host/pci.c | 3 +-
drivers/scsi/csiostor/csio_init.c | 1 +
drivers/scsi/qla2xxx/qla_def.h | 1 -
drivers/scsi/qla2xxx/qla_isr.c | 2 +
drivers/scsi/qla2xxx/qla_nvme.c | 40 +++----
drivers/scsi/ufs/ufshcd.c | 3 +-
drivers/tty/vt/vt.c | 21 +++-
drivers/usb/cdns3/gadget.c | 14 +++
fs/binfmt_elf.c | 2 +-
fs/debugfs/inode.c | 2 +-
fs/ext4/dir.c | 6 +-
fs/ext4/extents.c | 19 ++-
fs/ext4/fast_commit.c | 6 +
fs/ext4/inode.c | 5 +
fs/ext4/super.c | 16 ++-
fs/verity/enable.c | 2 +-
fs/verity/open.c | 2 +-
include/linux/bpf.h | 2 +
include/net/ip_fib.h | 2 +-
include/net/nexthop.h | 2 +-
include/net/sock.h | 2 +
kernel/bpf/bpf_struct_ops.c | 7 +-
kernel/bpf/core.c | 2 +-
kernel/entry/kvm.c | 4 +-
kernel/rseq.c | 13 ++-
kernel/sched/cpufreq_schedutil.c | 16 ++-
mm/util.c | 4 +
net/core/sock.c | 32 ++++-
net/ipv4/fib_semantics.c | 16 +--
net/ipv4/udp.c | 10 +-
net/ipv6/route.c | 5 +-
net/ipv6/udp.c | 2 +-
net/mac80211/mesh_ps.c | 3 +-
net/mac80211/tx.c | 12 ++
net/mac80211/wpa.c | 6 +
net/mptcp/mptcp_diag.c | 2 +-
net/mptcp/protocol.h | 2 +-
net/mptcp/subflow.c | 2 +-
net/mptcp/syncookies.c | 13 +--
net/mptcp/token.c | 11 +-
net/mptcp/token_test.c | 14 ++-
net/netfilter/ipset/ip_set_hash_gen.h | 4 +-
net/netfilter/ipvs/ip_vs_conn.c | 4 +
net/netfilter/nf_conntrack_core.c | 70 +++++------
net/netfilter/nf_tables_api.c | 2 +-
net/sched/cls_flower.c | 6 +
net/sctp/input.c | 2 +-
net/unix/af_unix.c | 34 +++++-
sound/pci/hda/patch_realtek.c | 129 +++++++++++++++++++++
sound/soc/soc-dapm.c | 13 ++-
tools/testing/selftests/bpf/Makefile | 3 +-
tools/testing/selftests/bpf/test_lwt_ip_encap.sh | 13 ++-
115 files changed, 1205 insertions(+), 564 deletions(-)