5.10.168-rc2 review

This is the start of the stable review cycle for the 5.10.168 release. There are 134 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 16 Feb 2023 17:25:19 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.168-rc2.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 5.10.168-rc2

David Chen <[email protected]>
Fix page corruption caused by racy check in __free_pages

Heiner Kallweit <[email protected]>
arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive

Heiner Kallweit <[email protected]>
arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive

Heiner Kallweit <[email protected]>
arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive

Guo Ren <[email protected]>
riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte

Xiubo Li <[email protected]>
ceph: flush cap releases when the session is flushed

Prashant Malani <[email protected]>
usb: typec: altmodes/displayport: Fix probe pin assign check

Mark Pearson <[email protected]>
usb: core: add quirk for Alcor Link AK9563 smartcard reader

Anand Jain <[email protected]>
btrfs: free device in btrfs_close_devices for a single device filesystem

Alan Stern <[email protected]>
net: USB: Fix wrong-direction WARNING in plusb.c

ZhaoLong Wang <[email protected]>

    cifs: Fix use-after-free in rdata->read_into_pages()

Andy Shevchenko <[email protected]>
pinctrl: intel: Restore the pins that used to be in Direct IRQ mode

Serge Semin <[email protected]>
spi: dw: Fix wrong FIFO level setting for long xfers

Maxim Korotkov <[email protected]>
pinctrl: single: fix potential NULL dereference

Joel Stanley <[email protected]>
pinctrl: aspeed: Fix confusing types in return value

Dan Carpenter <[email protected]>
ALSA: pci: lx6464es: fix a debug loop

Hangbin Liu <[email protected]>
selftests: forwarding: lib: quote the sysctl values

Pietro Borrello <[email protected]>
rds: rds_rm_zerocopy_callback() use list_first_entry()

Shay Drory <[email protected]>
net/mlx5: fw_tracer, Zero consumer index when reloading the tracer

Shay Drory <[email protected]>
net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers

Dragos Tatulea <[email protected]>
net/mlx5e: IPoIB, Show unknown speed instead of error

Vladimir Oltean <[email protected]>
net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q"

Anirudh Venkataramanan <[email protected]>
ice: Do not use WQ_MEM_RECLAIM flag for workqueue

Herton R. Krzesinski <[email protected]>
uapi: add missing ip/ipv6 header dependencies for linux/stddef.h

Neel Patel <[email protected]>
ionic: clean interrupt before enabling queue to avoid credit race

Heiner Kallweit <[email protected]>
net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY

Qi Zheng <[email protected]>
bonding: fix error checking in bond_debug_reregister()

Christian Hopps <[email protected]>
xfrm: fix bug with DSCP copy to v6 from v4 tunnel

Yang Yingliang <[email protected]>
RDMA/usnic: use iommu_map_atomic() under spin_lock()

Dragos Tatulea <[email protected]>
IB/IPoIB: Fix legacy IPoIB due to wrong number of queues

Eric Dumazet <[email protected]>
xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()

Dean Luick <[email protected]>
IB/hfi1: Restore allocated resources on failed copyout

Anastasia Belova <[email protected]>
xfrm: compat: change expression for switch in xfrm_xlate64

Devid Antonio Filoni <[email protected]>
can: j1939: do not wait 250 ms if the same addr was already claimed

Mark Brown <[email protected]>
of/address: Return an error when no valid dma-ranges are found

Shiju Jose <[email protected]>
tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw

Guillaume Pinot <[email protected]>
ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360

Artemii Karasev <[email protected]>
ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()

Edson Juliano Drosdeck <[email protected]>
ALSA: hda/realtek: Add Positivo N14KP6-TG

Alexander Potapenko <[email protected]>
btrfs: zlib: zero-initialize zlib workspace

Josef Bacik <[email protected]>
btrfs: limit device extents to the device size

Mike Kravetz <[email protected]>
migrate: hugetlb: check for hugetlb shared PMD in node migration

Miaohe Lin <[email protected]>
mm/migration: return errno when isolate_huge_page failed

Andreas Kemnade <[email protected]>
iio:adc:twl6030: Enable measurement of VAC

Martin KaFai Lau <[email protected]>
bpf: Do not reject when the stack read size is different from the tracked scalar size

Christophe Kerello <[email protected]>
nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property

Minsuk Kang <[email protected]>
wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads

Chao Yu <[email protected]>
f2fs: fix to do sanity check on i_extra_isize in is_alive()

Dongliang Mu <[email protected]>
fbdev: smscufx: fix error handling code in ufx_usb_probe

Ilpo Järvinen <[email protected]>
serial: 8250_dma: Fix DMA Rx rearm race

Ilpo Järvinen <[email protected]>
serial: 8250_dma: Fix DMA Rx completion race

Michael Walle <[email protected]>
nvmem: core: fix cell removal on error

Russell King (Oracle) <[email protected]>

    nvmem: core: initialise nvmem->id early

Rob Clark <[email protected]>
drm/i915: Fix potential bit_17 double-free

Phillip Lougher <[email protected]>
Squashfs: fix handling and sanity checking of xattr_ids count

Longlong Xia <[email protected]>
mm/swapfile: add cond_resched() in get_swap_pages()

Zheng Yongjun <[email protected]>
fpga: stratix10-soc: Fix return value check in s10_ops_write_init()

Joerg Roedel <[email protected]>
x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses

Mike Kravetz <[email protected]>
mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps

Andreas Schwab <[email protected]>
riscv: disable generation of unwind tables

Helge Deller <[email protected]>
parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case

Helge Deller <[email protected]>
parisc: Fix return code of pdc_iodc_print()

Johan Hovold <[email protected]>
nvmem: qcom-spmi-sdam: fix module autoloading

Carlos Song <[email protected]>
iio: imu: fxos8700: fix MAGN sensor scale and unit

Carlos Song <[email protected]>
iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN

Carlos Song <[email protected]>
iio: imu: fxos8700: fix failed initialization ODR mode assignment

Carlos Song <[email protected]>
iio: imu: fxos8700: fix incorrect ODR mode readback

Carlos Song <[email protected]>
iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback

Carlos Song <[email protected]>
iio: imu: fxos8700: fix map label of channel type to MAGN sensor

Carlos Song <[email protected]>
iio: imu: fxos8700: fix IMU data bits returned to user space

Carlos Song <[email protected]>
iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback

Carlos Song <[email protected]>
iio: imu: fxos8700: fix ACCEL measurement range selection

Andreas Kemnade <[email protected]>
iio:adc:twl6030: Enable measurements of VUSB, VBAT and others

Xiongfeng Wang <[email protected]>
iio: adc: berlin2-adc: Add missing of_node_put() in error path

Dmitry Perchanov <[email protected]>
iio: hid: fix the retval in accel_3d_capture_sample

Ard Biesheuvel <[email protected]>
efi: Accept version 2 of memory attributes table

Victor Shyba <[email protected]>
ALSA: hda/realtek: Add Acer Predator PH315-54

Alexander Egorenkov <[email protected]>
watchdog: diag288_wdt: fix __diag288() inline assembly

Alexander Egorenkov <[email protected]>
watchdog: diag288_wdt: do not use stack buffers for hardware data

Natalia Petrova <[email protected]>
net: qrtr: free memory on error path in radix_tree_insert()

Samuel Thibault <[email protected]>
fbcon: Check font dimension limits

Werner Sembach <[email protected]>
Input: i8042 - add Clevo PCX0DX to i8042 quirk table

Werner Sembach <[email protected]>
Input: i8042 - add TUXEDO devices to i8042 quirk tables

Werner Sembach <[email protected]>
Input: i8042 - merge quirk tables

Werner Sembach <[email protected]>
Input: i8042 - move __initconst to fix code styling warning

George Kennedy <[email protected]>
vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF

Udipto Goswami <[email protected]>
usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait

Neil Armstrong <[email protected]>
usb: dwc3: qcom: enable vbus override when in OTG dr-mode

Wesley Cheng <[email protected]>
usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API

Olivier Moysan <[email protected]>
iio: adc: stm32-dfsdm: fill module aliases

Hyunwoo Kim <[email protected]>
net/x25: Fix to not accept on connected socket

Koba Ko <[email protected]>

    platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table

Randy Dunlap <[email protected]>
i2c: rk3x: fix a bunch of kernel-doc warnings

Mike Christie <[email protected]>
scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress

Maurizio Lombardi <[email protected]>
scsi: target: core: Fix warning on RT kernels

Stefan Wahren <[email protected]>
i2c: mxs: suppress probe-deferral error message

Magnus Karlsson <[email protected]>
qede: execute xdp_do_flush() before napi_complete_done()

Bhaskar Upadhaya <[email protected]>
qede: add netpoll support for qede driver

Anton Gusev <[email protected]>
efi: fix potential NULL deref in efi_mem_reserve_persistent

Fedor Pchelkin <[email protected]>
net: openvswitch: fix flow memory leak in ovs_flow_cmd_new

Parav Pandit <[email protected]>
virtio-net: Keep stop() to follow mirror sequence of open()

Andrei Gherzan <[email protected]>
selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking

Andrei Gherzan <[email protected]>
selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs

Andrei Gherzan <[email protected]>
selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided

Andrei Gherzan <[email protected]>
selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning

Damien Le Moal <[email protected]>
ata: libata: Fix sata_down_spd_limit() when no link speed is reported

Ziyang Xuan <[email protected]>
can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate

Tom Rix <[email protected]>
igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp()

Chris Healy <[email protected]>
net: phy: meson-gxl: Add generic dummy stubs for MMD register access

Fedor Pchelkin <[email protected]>
squashfs: harden sanity check in squashfs_read_xattr_id_table

Florian Westphal <[email protected]>
netfilter: br_netfilter: disable sabotage_in hook after first suppression

Hyunwoo Kim <[email protected]>
netrom: Fix use-after-free caused by accept on already connected socket

Andre Kalb <[email protected]>

    net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices

Íñigo Huguet <[email protected]>
sfc: correctly advertise tunneled IPv6 segmentation

Magnus Karlsson <[email protected]>
virtio-net: execute xdp_do_flush() before napi_complete_done()

Al Viro <[email protected]>
fix "direction" argument of iov_iter_kvec()

Al Viro <[email protected]>
fix iov_iter_bvec() "direction" argument

Al Viro <[email protected]>
READ is "data destination", not source...

Al Viro <[email protected]>
WRITE is "data source", not destination...

Eric Auger <[email protected]>
vhost/net: Clear the pending messages when the backend is removed

Martin K. Petersen <[email protected]>
scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT"

Hans Verkuil <[email protected]>
drm/vc4: hdmi: make CEC adapter name unique

Pierluigi Passaro <[email protected]>
arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX

Jakub Sitnicki <[email protected]>
bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener

Eduard Zingerman <[email protected]>
bpf: Fix to preserve reg parent/live fields when copying range info

Martin KaFai Lau <[email protected]>
bpf: Support <8-byte scalar spill and refill

Christophe Leroy <[email protected]>
powerpc/bpf: Move common helpers into bpf_jit.h

Christophe Leroy <[email protected]>
powerpc/bpf: Change register numbering for bpf_set/is_seen_register()

Artemii Karasev <[email protected]>
ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()

Yonghong Song <[email protected]>
bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers

Michael Ellerman <[email protected]>
powerpc/imc-pmu: Revert nest_init_lock to being a mutex

Paul Chaignon <[email protected]>
bpf: Fix incorrect state pruning for <8B spill/fill

Yuan Can <[email protected]>
bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()

Takashi Sakamoto <[email protected]>
firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region

-------------

Diffstat:

 Makefile                                           |    4 +-
 arch/arm64/boot/dts/amlogic/meson-axg.dtsi         |    4 +-
 arch/arm64/boot/dts/amlogic/meson-g12-common.dtsi  |    6 +-
 arch/arm64/boot/dts/amlogic/meson-gx.dtsi          |    6 +-
 arch/arm64/boot/dts/freescale/imx8mm-pinfunc.h     |    2 +-
 arch/parisc/kernel/firmware.c                      |    5 +-
 arch/parisc/kernel/ptrace.c                        |   15 +-
 arch/powerpc/net/bpf_jit.h                         |   35 +
 arch/powerpc/net/bpf_jit64.h                       |   19 -
 arch/powerpc/net/bpf_jit_comp64.c                  |   28 +-
 arch/powerpc/perf/imc-pmu.c                        |   14 +-
 arch/riscv/Makefile                                |    3 +
 arch/riscv/mm/cacheflush.c                         |    4 +-
 arch/x86/include/asm/debugreg.h                    |   26 +-
 drivers/ata/libata-core.c                          |    2 +-
 drivers/bus/sunxi-rsb.c                            |    8 +-
 drivers/firewire/core-cdev.c                       |    4 +-
 drivers/firmware/efi/efi.c                         |    2 +
 drivers/firmware/efi/memattr.c                     |    2 +-
 drivers/fpga/stratix10-soc.c                       |    4 +-
 drivers/fsi/fsi-sbefifo.c                          |    6 +-
 drivers/gpu/drm/i915/gem/i915_gem_tiling.c         |    9 +-
 drivers/gpu/drm/vc4/vc4_hdmi.c                     |    3 +-
 drivers/i2c/busses/i2c-mxs.c                       |    4 +-
 drivers/i2c/busses/i2c-rk3x.c                      |   44 +-
 drivers/iio/accel/hid-sensor-accel-3d.c            |    1 +
 drivers/iio/adc/berlin2-adc.c                      |    4 +-
 drivers/iio/adc/stm32-dfsdm-adc.c                  |    1 +
 drivers/iio/adc/twl6030-gpadc.c                    |   32 +
 drivers/iio/imu/fxos8700_core.c                    |  111 +-
 drivers/infiniband/hw/hfi1/file_ops.c              |    7 +-
 drivers/infiniband/hw/usnic/usnic_uiom.c           |    8 +-
 drivers/infiniband/ulp/ipoib/ipoib_main.c          |    8 +
 drivers/infiniband/ulp/rtrs/rtrs-clt.c             |    2 +-
 drivers/input/serio/i8042-x86ia64io.h              | 1188 ++++++++++++--------
 drivers/net/bonding/bond_debugfs.c                 |    2 +-
 drivers/net/ethernet/intel/ice/ice_main.c          |    2 +-
 drivers/net/ethernet/intel/igc/igc_ptp.c           |   14 +-
 .../ethernet/mellanox/mlx5/core/diag/fw_tracer.c   |    3 +-
 .../ethernet/mellanox/mlx5/core/ipoib/ethtool.c    |   13 +-
 drivers/net/ethernet/mscc/ocelot_flower.c          |   24 +-
 drivers/net/ethernet/pensando/ionic/ionic_lif.c    |   15 +-
 drivers/net/ethernet/qlogic/qede/qede_fp.c         |   10 +-
 drivers/net/ethernet/sfc/efx.c                     |    5 +-
 drivers/net/phy/dp83822.c                          |    6 +-
 drivers/net/phy/meson-gxl.c                        |    4 +
 drivers/net/usb/plusb.c                            |    4 +-
 drivers/net/virtio_net.c                           |    8 +-
 .../broadcom/brcm80211/brcmfmac/cfg80211.c         |   17 +
 drivers/nvmem/core.c                               |    8 +-
 drivers/nvmem/qcom-spmi-sdam.c                     |    1 +
 drivers/of/address.c                               |   21 +-
 drivers/pinctrl/aspeed/pinctrl-aspeed.c            |    2 +-
 drivers/pinctrl/intel/pinctrl-intel.c              |   16 +-
 drivers/pinctrl/pinctrl-single.c                   |    2 +
 drivers/platform/x86/dell-wmi.c                    |    3 +
 drivers/scsi/iscsi_tcp.c                           |    9 +-
 drivers/scsi/scsi_scan.c                           |    7 +-
 drivers/spi/spi-dw-core.c                          |    2 +-
 drivers/target/target_core_file.c                  |    4 +-
 drivers/target/target_core_tmr.c                   |    4 +-
 drivers/tty/serial/8250/8250_dma.c                 |   26 +-
 drivers/tty/vt/vc_screen.c                         |    9 +-
 drivers/usb/core/quirks.c                          |    3 +
 drivers/usb/dwc3/dwc3-qcom.c                       |   10 +-
 drivers/usb/gadget/function/f_fs.c                 |    4 +-
 drivers/usb/typec/altmodes/displayport.c           |    8 +-
 drivers/vhost/net.c                                |    3 +
 drivers/vhost/vhost.c                              |    3 +-
 drivers/vhost/vhost.h                              |    1 +
 drivers/video/fbdev/core/fbcon.c                   |    7 +-
 drivers/video/fbdev/smscufx.c                      |   46 +-
 drivers/watchdog/diag288_wdt.c                     |   15 +-
 drivers/xen/pvcalls-back.c                         |    8 +-
 fs/btrfs/volumes.c                                 |   22 +-
 fs/btrfs/zlib.c                                    |    2 +-
 fs/ceph/mds_client.c                               |    6 +
 fs/cifs/file.c                                     |    4 +-
 fs/f2fs/gc.c                                       |   18 +-
 fs/proc/task_mmu.c                                 |    4 +-
 fs/squashfs/squashfs_fs.h                          |    2 +-
 fs/squashfs/squashfs_fs_sb.h                       |    2 +-
 fs/squashfs/xattr.h                                |    4 +-
 fs/squashfs/xattr_id.c                             |    4 +-
 include/linux/hugetlb.h                            |   19 +-
 include/linux/nvmem-provider.h                     |    4 +-
 include/linux/util_macros.h                        |   12 +
 include/uapi/linux/ip.h                            |    1 +
 include/uapi/linux/ipv6.h                          |    1 +
 kernel/bpf/verifier.c                              |  102 +-
 kernel/trace/bpf_trace.c                           |    3 +-
 kernel/trace/trace.c                               |    3 -
 mm/gup.c                                           |    2 +-
 mm/hugetlb.c                                       |    6 +-
 mm/memory-failure.c                                |    2 +-
 mm/memory_hotplug.c                                |    2 +-
 mm/mempolicy.c                                     |    5 +-
 mm/migrate.c                                       |    7 +-
 mm/page_alloc.c                                    |    5 +-
 mm/swapfile.c                                      |    1 +
 net/bridge/br_netfilter_hooks.c                    |    1 +
 net/can/j1939/address-claim.c                      |   40 +
 net/can/j1939/transport.c                          |    4 -
 net/ipv4/tcp_bpf.c                                 |    4 +-
 net/netrom/af_netrom.c                             |    5 +
 net/openvswitch/datapath.c                         |   12 +-
 net/qrtr/ns.c                                      |    5 +-
 net/rds/message.c                                  |    6 +-
 net/x25/af_x25.c                                   |    6 +
 net/xfrm/xfrm_compat.c                             |    4 +-
 net/xfrm/xfrm_input.c                              |    3 +-
 sound/pci/hda/patch_realtek.c                      |    3 +
 sound/pci/hda/patch_via.c                          |    3 +
 sound/pci/lx6464es/lx_core.c                       |   11 +-
 sound/synth/emux/emux_nrpn.c                       |    3 +
 tools/testing/selftests/net/forwarding/lib.sh      |    4 +-
 tools/testing/selftests/net/udpgso_bench.sh        |   24 +-
 tools/testing/selftests/net/udpgso_bench_rx.c      |    4 +-
 tools/testing/selftests/net/udpgso_bench_tx.c      |   36 +-
 119 files changed, 1552 insertions(+), 839 deletions(-)