5.4.296-rc2 review

This is the start of the stable review cycle for the 5.4.296 release. There are 144 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 18 Jul 2025 14:12:35 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.296-rc2.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 5.4.296-rc2

Georg Kohmann <[email protected]>
net: ipv6: Discard next-hop MTU less than minimum link MTU

Jann Horn <[email protected]>
x86/mm: Disable hugetlb page table sharing on 32-bit

Hans de Goede <[email protected]>
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID

Chia-Lin Kao (AceLan) <[email protected]>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

Zhang Heng <[email protected]>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY

Nicolas Pitre <[email protected]>
vt: add missing notification when switching back to text mode

Xiaowei Li <[email protected]>
net: usb: qmi_wwan: add SIMCom 8230C composition

Thomas Fourier <[email protected]>

    atm: idt77252: Add missing `dma_map_error()`

Somnath Kotur <[email protected]>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT

Shravya KN <[email protected]>
bnxt_en: Fix DCB ETS validation

Sean Nyekjaer <[email protected]>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level

Oleksij Rempel <[email protected]>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx

Kito Xu <[email protected]>
net: appletalk: Fix device refcount leak in atrtr_create()

Wang Jinchao <[email protected]>
md/raid1: Fix stack memory use after return in raid1_reshape

Daniil Dulov <[email protected]>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()

Christian König <[email protected]>
dma-buf: fix timeout handling in dma_resv_wait_timeout v2

Nilton Perim Neto <[email protected]>
Input: xpad - support Acer NGR 200 Controller

Vicki Pfau <[email protected]>
Input: xpad - add VID for Turtle Beach controllers

Matt Reynolds <[email protected]>
Input: xpad - add support for Amazon Game Controller

Trond Myklebust <[email protected]>
NFSv4/flexfiles: Fix handling of NFS level errors in I/O

Tigran Mkrtchyan <[email protected]>
flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes

Patrisious Haddad <[email protected]>
RDMA/mlx5: Fix vport loopback for MPV device

Kuniyuki Iwashima <[email protected]>
netlink: Fix rmem check in netlink_broadcast_deliver().

Jakub Kicinski <[email protected]>
netlink: make sure we allow at least one dump skb

Uwe Kleine-König <[email protected]>
pwm: mediatek: Ensure to disable clocks in error path

Rafael J. Wysocki <[email protected]>
Revert "ACPI: battery: negate current when discharging"

Kuen-Han Tsai <[email protected]>
usb: gadget: u_serial: Fix race condition in TTY wakeup

Matthew Brost <[email protected]>
drm/sched: Increment job count before swapping tail spsc queue

Bartosz Golaszewski <[email protected]>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts

JP Kobryn <[email protected]>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel

Yazen Ghannam <[email protected]>
x86/mce: Don't remove sysfs if thresholding sysfs init fails

Yazen Ghannam <[email protected]>
x86/mce/amd: Fix threshold limit reset

David Howells <[email protected]>
rxrpc: Fix oops due to non-existence of prealloc backlog struct

Victor Nogueira <[email protected]>
net/sched: Abort __tc_modify_qdisc if parent class does not exist

Yue Haibing <[email protected]>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()

Kuniyuki Iwashima <[email protected]>
atm: clip: Fix infinite recursive call of clip_push().

Kuniyuki Iwashima <[email protected]>
atm: clip: Fix memory leak of struct clip_vcc.

Kuniyuki Iwashima <[email protected]>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().

Kuniyuki Iwashima <[email protected]>
tipc: Fix use-after-free in tipc_conn_close().

Kuniyuki Iwashima <[email protected]>

    netlink: Fix wraparounds of sk->sk_rmem_alloc.

Al Viro <[email protected]>
fix proc_sys_compare() handling of in-lookup dentries

Eric W. Biederman <[email protected]>
proc: Clear the pieces of proc_inode that proc_evict_inode cares about

Kaustabh Chakraborty <[email protected]>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling

Nathan Chancellor <[email protected]>
staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()

Ricardo Ribalda <[email protected]>
media: uvcvideo: Rollback non processed entities on error

Ricardo Ribalda <[email protected]>
media: uvcvideo: Send control events for partial succeeds

Ricardo Ribalda <[email protected]>
media: uvcvideo: Return the number of processed controls

Seiji Nishikawa <[email protected]>
ACPI: PAD: fix crash in exit_round_robin()

Andrei Kuchynski <[email protected]>
usb: typec: displayport: Fix potential deadlock

Oliver Neukum <[email protected]>
Logitech C-270 even more broken

Kohei Enju <[email protected]>
rose: fix dangling neighbour pointers in rose_rt_device_down()

Gustavo A. R. Silva <[email protected]>
net: rose: Fix fall-through warnings for Clang

Janusz Krzysztofik <[email protected]>
drm/i915/gt: Fix timeline left held on VMA alloc error

Dan Carpenter <[email protected]>
drm/i915/selftests: Change mock_request() to return error pointers

James Clark <[email protected]>
spi: spi-fsl-dspi: Clear completion counter before initiating transfer

Vladimir Oltean <[email protected]>
spi: spi-fsl-dspi: Fix interrupt-less DMA mode taking an XSPI code path

Vladimir Oltean <[email protected]>
spi: spi-fsl-dspi: Rename fifo_{read,write} and {tx,cmd}_fifo_write

Fushuai Wang <[email protected]>
dpaa2-eth: fix xdp_rxq_info leak

Thomas Fourier <[email protected]>
ethernet: atl1: Add missing DMA mapping error checks and count errors

Filipe Manana <[email protected]>
btrfs: use btrfs_record_snapshot_destroy() during rmdir

Filipe Manana <[email protected]>
btrfs: propagate last_unlink_trans earlier when doing a rmdir

Patrisious Haddad <[email protected]>
RDMA/mlx5: Fix CC counters query for MPV

Leon Romanovsky <[email protected]>
RDMA/core: Create and destroy counters in the ib_core

Bart Van Assche <[email protected]>
scsi: ufs: core: Fix spelling of a sysfs attribute name

Maíra Canal <[email protected]>
drm/v3d: Disable interrupts before resetting the GPU

Sergey Senozhatsky <[email protected]>

    mtk-sd: reset host->mrq on prepare_data() error

Masami Hiramatsu (Google) <[email protected]>
mtk-sd: Prevent memory corruption from DMA map failure

Yue Hu <[email protected]>
mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data()

Manivannan Sadhasivam <[email protected]>
regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods

Jerome Neanne <[email protected]>
regulator: gpio: Add input_supply support in gpio_regulator_config

Rafael J. Wysocki <[email protected]>
ACPICA: Refuse to evaluate a method if arguments are missing

Johannes Berg <[email protected]>
wifi: ath6kl: remove WARN on bad firmware input

Johannes Berg <[email protected]>
wifi: mac80211: drop invalid source address OCB frames

Madhavan Srinivasan <[email protected]>
powerpc: Fix struct termio related ioctl macros

Johannes Berg <[email protected]>
ata: pata_cs5536: fix build on 32-bit UML

Takashi Iwai <[email protected]>
ALSA: sb: Force to disable DMAs once when DMA mode is changed

Lion Ackermann <[email protected]>
net/sched: Always pass notifications when child class becomes empty

Thomas Fourier <[email protected]>
nui: Fix dma_mapping_error() check

Alok Tiwari <[email protected]>
enic: fix incorrect MTU comparison in enic_change_mtu()

Raju Rangoju <[email protected]>
amd-xgbe: align CL37 AN sequence as per databook

Dan Carpenter <[email protected]>
lib: test_objagg: Set error message in check_expect_hints_stats()

Marek Szyprowski <[email protected]>
drm/exynos: fimd: Guard display clock control with runtime PM calls

Filipe Manana <[email protected]>
btrfs: fix missing error handling when searching for inode refs during log replay

Thomas Fourier <[email protected]>
scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()

Kuniyuki Iwashima <[email protected]>
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.

Mark Zhang <[email protected]>

    RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert

David Thompson <[email protected]>
platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment

Masami Hiramatsu (Google) <[email protected]>
mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data

RD Babiera <[email protected]>
usb: typec: altmodes/displayport: do not index invalid pin_assignments

Ulf Hansson <[email protected]>
Revert "mmc: sdhci: Disable SD card clock before changing parameters"

Victor Shih <[email protected]>
mmc: sdhci: Add a helper function for dump register in dynamic debug mode

HarshaVardhana S A <[email protected]>
vsock/vmci: Clear the vmci transport packet properly when initializing it

Omar Sandoval <[email protected]>
btrfs: don't abort filesystem when attempting to snapshot deleted subvolume

Dev Jain <[email protected]>
arm64: Restrict pagetable teardown to avoid false warning

Nathan Chancellor <[email protected]>
s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS

Aradhya Bhatia <[email protected]>
drm/bridge: cdns-dsi: Check return value when getting default PHY config

Aradhya Bhatia <[email protected]>
drm/bridge: cdns-dsi: Fix connecting to next bridge

Aradhya Bhatia <[email protected]>
drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()

Thierry Reding <[email protected]>
drm/tegra: Assign plane type before registration

Qasim Ijaz <[email protected]>
HID: wacom: fix kobject reference count leak

Qasim Ijaz <[email protected]>
HID: wacom: fix memory leak on sysfs attribute creation failure

Qasim Ijaz <[email protected]>
HID: wacom: fix memory leak on kobject creation failure

Heinz Mauelshagen <[email protected]>
dm-raid: fix variable in journal device check

Frédéric Danis <[email protected]>
Bluetooth: L2CAP: Fix L2CAP MTU negotiation

Kuniyuki Iwashima <[email protected]>
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().

Simon Horman <[email protected]>
net: enetc: Correct endianness handling in _enetc_rd_reg64

Tiwei Bie <[email protected]>
um: ubd: Add missing error check in start_io_thread()

Stefano Garzarella <[email protected]>
vsock/uapi: fix linux/vm_sockets.h userspace compilation errors

Lachlan Hodges <[email protected]>
wifi: mac80211: fix beacon interval calculation overflow

Al Viro <[email protected]>
attach_recursive_mnt(): do not lock the covering tree when sliding something under it

Youngjun Lee <[email protected]>
ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()

Wolfram Sang <[email protected]>
i2c: robotfuzz-osif: disable zero-length read messages

Wolfram Sang <[email protected]>
i2c: tiny-usb: disable zero-length read messages

Shin'ichiro Kawasaki <[email protected]>
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction

Weihang Li <[email protected]>
RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private

Denis Arefev <[email protected]>
media: vivid: Change the siize of the composing

Marek Szyprowski <[email protected]>
media: omap3isp: use sgtable-based scatterlist wrappers

Edward Adam Davis <[email protected]>
media: cxusb: no longer judge rbuf when the write fails

Sean Young <[email protected]>
media: cxusb: use dev_dbg() rather than hand-rolled debug

Vasiliy Kovalev <[email protected]>
jfs: validate AG parameters in dbMount() to prevent crashes

Dave Kleikamp <[email protected]>
fs/jfs: consolidate sanity checking in dbMount

Martin Blumenstingl <[email protected]>
ASoC: meson: meson-card-utils: use of_property_present() for DT parsing

Rob Herring <[email protected]>
of: Add of_property_present() helper

Michael Walle <[email protected]>

    of: property: define of_property_read_u{8,16,32,64}_array() unconditionally

Arnd Bergmann <[email protected]>
kbuild: hdrcheck: fix cross build with clang

Masahiro Yamada <[email protected]>
kbuild: add --target to correctly cross-compile UAPI headers with Clang

Masahiro Yamada <[email protected]>
bpfilter: match bit size of bpfilter_umh to that of the kernel

Masahiro Yamada <[email protected]>
kbuild: use -MMD instead of -MD to exclude system headers from dependency

Wupeng Ma <[email protected]>
VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify

George Kennedy <[email protected]>

    VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF

Kees Cook <[email protected]>
ovl: Check for NULL d_inode() in ovl_dentry_upper()

Dmitry Kandybka <[email protected]>
ceph: fix possible integer overflow in ceph_zero_objects()

Cezary Rojewski <[email protected]>
ALSA: hda: Ignore unsol events for cards being shut down

Jos Wang <[email protected]>
usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode

Robert Hodaszi <[email protected]>
usb: cdc-wdm: avoid setting WDM_READ for ZLP-s

Andy Shevchenko <[email protected]>
usb: Add checks for snprintf() calls in usb_alloc_dev()

Jakub Lewalski <[email protected]>
tty: serial: uartlite: register uart driver in init

Chen Yufeng <[email protected]>
usb: potential integer overflow in usbg_make_tpg()

Jonathan Cameron <[email protected]>
iio: pressure: zpa2326: Use aligned_s64 for the timestamp

Yu Kuai <[email protected]>
md/md-bitmap: fix dm-raid max_write_behind setting

Thomas Gessler <[email protected]>
dmaengine: xilinx_dma: Set dma_device directions

Krzysztof Kozlowski <[email protected]>
mfd: max14577: Fix wakeup source leaks on device unbind

Peng Fan <[email protected]>
mailbox: Not protect module_put with spin_lock_irqsave

Pali Rohár <[email protected]>
cifs: Fix cifs_query_path_info() for Windows NT servers

-------------

Diffstat:

 Documentation/ABI/testing/sysfs-driver-ufs         |   2 +-
 Makefile                                           |   4 +-
 arch/arm64/mm/mmu.c                                |   3 +-
 arch/powerpc/include/uapi/asm/ioctls.h             |   8 +-
 arch/s390/Makefile                                 |   2 +-
 arch/s390/purgatory/Makefile                       |   2 +-
 arch/um/drivers/ubd_user.c                         |   2 +-
 arch/x86/Kconfig                                   |   2 +-
 arch/x86/kernel/cpu/mce/amd.c                      |  15 +-
 arch/x86/kernel/cpu/mce/core.c                     |   8 +-
 arch/x86/kernel/cpu/mce/intel.c                    |   1 +
 drivers/acpi/acpi_pad.c                            |   7 +-
 drivers/acpi/acpica/dsmethod.c                     |   7 +
 drivers/acpi/battery.c                             |  19 +-
 drivers/ata/pata_cs5536.c                          |   2 +-
 drivers/atm/idt77252.c                             |   5 +
 drivers/dma-buf/dma-resv.c                         |   5 +-
 drivers/dma/xilinx/xilinx_dma.c                    |   2 +
 drivers/gpu/drm/bridge/cdns-dsi.c                  |  11 +-
 drivers/gpu/drm/exynos/exynos7_drm_decon.c         |   4 +
 drivers/gpu/drm/exynos/exynos_drm_fimd.c           |  12 +
 drivers/gpu/drm/i915/gt/intel_ringbuffer.c         |   3 +-
 drivers/gpu/drm/i915/selftests/i915_request.c      |  20 +-
 drivers/gpu/drm/i915/selftests/mock_request.c      |   2 +-
 drivers/gpu/drm/tegra/dc.c                         |  12 +-
 drivers/gpu/drm/tegra/hub.c                        |   4 +-
 drivers/gpu/drm/tegra/hub.h                        |   3 +-
 drivers/gpu/drm/v3d/v3d_drv.h                      |   9 +
 drivers/gpu/drm/v3d/v3d_gem.c                      |   2 +
 drivers/gpu/drm/v3d/v3d_irq.c                      |  36 ++-
 drivers/hid/hid-ids.h                              |   5 +
 drivers/hid/hid-quirks.c                           |   3 +
 drivers/hid/wacom_sys.c                            |   6 +-
 drivers/i2c/busses/i2c-robotfuzz-osif.c            |   6 +
 drivers/i2c/busses/i2c-tiny-usb.c                  |   6 +
 drivers/iio/pressure/zpa2326.c                     |   2 +-
 drivers/infiniband/core/device.c                   |   1 +
 drivers/infiniband/core/iwcm.c                     |  38 +--
 drivers/infiniband/core/iwcm.h                     |   2 +-
 .../infiniband/core/uverbs_std_types_counters.c    |  17 +-
 drivers/infiniband/hw/mlx5/devx.c                  |   2 +-
 drivers/infiniband/hw/mlx5/main.c                  |  55 ++--
 drivers/input/joystick/xpad.c                      |   5 +
 drivers/input/keyboard/atkbd.c                     |   3 +-
 drivers/mailbox/mailbox.c                          |   2 +-
 drivers/md/dm-raid.c                               |   2 +-
 drivers/md/md-bitmap.c                             |   2 +-
 drivers/md/raid1.c                                 |   1 +
 drivers/media/platform/omap3isp/ispccdc.c          |   8 +-
 drivers/media/platform/omap3isp/ispstat.c          |   6 +-
 drivers/media/platform/vivid/vivid-vid-cap.c       |   2 +-
 drivers/media/usb/dvb-usb/cxusb.c                  |  36 ++-
 drivers/media/usb/uvc/uvc_ctrl.c                   |  61 +++--
 drivers/mfd/max14577.c                             |   1 +
 drivers/misc/vmw_vmci/vmci_host.c                  |   9 +-
 drivers/mmc/host/mtk-sd.c                          |  39 ++-
 drivers/mmc/host/sdhci.c                           |   9 +-
 drivers/mmc/host/sdhci.h                           |  16 ++
 drivers/net/can/m_can/m_can.c                      |   2 +-
 drivers/net/ethernet/amd/xgbe/xgbe-common.h        |   2 +
 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c          |   9 +
 drivers/net/ethernet/amd/xgbe/xgbe.h               |   4 +-
 drivers/net/ethernet/atheros/atlx/atl1.c           |  78 ++++--
 drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c      |   2 +
 drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c      |   2 +-
 drivers/net/ethernet/cisco/enic/enic_main.c        |   4 +-
 drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c   |  26 +-
 drivers/net/ethernet/freescale/enetc/enetc_hw.h    |   2 +-
 drivers/net/ethernet/sun/niu.c                     |  31 ++-
 drivers/net/ethernet/sun/niu.h                     |   4 +
 drivers/net/phy/microchip.c                        |   2 +-
 drivers/net/usb/qmi_wwan.c                         |   1 +
 drivers/net/wireless/ath/ath6kl/bmi.c              |   4 +-
 drivers/net/wireless/zydas/zd1211rw/zd_mac.c       |   6 +-
 drivers/pinctrl/qcom/pinctrl-msm.c                 |  20 ++
 drivers/platform/mellanox/mlxbf-tmfifo.c           |   3 +-
 drivers/pwm/pwm-mediatek.c                         |  15 +-
 drivers/regulator/gpio-regulator.c                 |  19 +-
 drivers/scsi/qla4xxx/ql4_os.c                      |   2 +
 drivers/scsi/ufs/ufs-sysfs.c                       |   4 +-
 drivers/spi/spi-fsl-dspi.c                         |  55 ++--
 drivers/staging/rtl8723bs/core/rtw_security.c      |  46 +---
 drivers/tty/serial/uartlite.c                      |  15 +-
 drivers/tty/vt/vt.c                                |   1 +
 drivers/usb/class/cdc-wdm.c                        |  23 +-
 drivers/usb/core/quirks.c                          |   3 +-
 drivers/usb/core/usb.c                             |  14 +-
 drivers/usb/gadget/function/f_tcm.c                |   4 +-
 drivers/usb/gadget/function/u_serial.c             |   6 +-
 drivers/usb/typec/altmodes/displayport.c           |   5 +-
 fs/btrfs/inode.c                                   |  36 +--
 fs/btrfs/ioctl.c                                   |   3 +
 fs/btrfs/tree-log.c                                |   4 +-
 fs/ceph/file.c                                     |   2 +-
 fs/cifs/misc.c                                     |   8 +
 fs/jfs/jfs_dmap.c                                  |  41 +--
 fs/namespace.c                                     |   8 +-
 fs/nfs/flexfilelayout/flexfilelayout.c             | 144 +++++++---
 fs/nfs/inode.c                                     |  17 +-
 fs/overlayfs/util.c                                |   4 +-
 fs/proc/inode.c                                    |  16 +-
 fs/proc/proc_sysctl.c                              |  18 +-
 include/drm/spsc_queue.h                           |   4 +-
 include/linux/of.h                                 | 291 ++++++++++-----------
 include/linux/regulator/gpio-regulator.h           |   2 +
 include/linux/usb/typec_dp.h                       |   1 +
 include/rdma/ib_verbs.h                            |   7 +-
 include/uapi/linux/vm_sockets.h                    |   4 +
 init/Kconfig                                       |   4 +-
 lib/test_objagg.c                                  |   4 +-
 net/appletalk/ddp.c                                |   1 +
 net/atm/clip.c                                     |  64 +++--
 net/atm/resources.c                                |   3 +-
 net/bluetooth/l2cap_core.c                         |   9 +-
 net/bpfilter/Makefile                              |   5 +-
 net/ipv6/route.c                                   |   3 +-
 net/mac80211/rx.c                                  |   4 +
 net/mac80211/util.c                                |   2 +-
 net/netlink/af_netlink.c                           |  90 ++++---
 net/rose/rose_route.c                              |  15 +-
 net/rxrpc/call_accept.c                            |   3 +
 net/sched/sch_api.c                                |  42 +--
 net/tipc/topsrv.c                                  |   2 +
 net/vmw_vsock/vmci_transport.c                     |   4 +-
 scripts/Kbuild.include                             |   2 +-
 scripts/Makefile.host                              |   4 +-
 scripts/Makefile.lib                               |   8 +-
 sound/isa/sb/sb16_main.c                           |   4 +
 sound/pci/hda/hda_bind.c                           |   2 +-
 sound/soc/meson/meson-card-utils.c                 |   2 +-
 sound/usb/stream.c                                 |   2 +
 usr/include/Makefile                               |   6 +-
 132 files changed, 1183 insertions(+), 685 deletions(-)