[PATCH 5.4 000/115] 5.4.215-rc2 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 5.4.215 release.
There are 115 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed, 28 Sep 2022 16:35:25 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.215-rc2.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 5.4.215-rc2

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    xfs: fix use-after-free when aborting corrupt attr inactivation

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    xfs: fix an ABBA deadlock in xfs_rename

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    xfs: don't commit sunit/swidth updates to disk if that would cause repair failures

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    xfs: split the sunit parameter update into two parts

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    xfs: refactor agfl length computation function

Brian Foster <bfoster@xxxxxxxxxx>
    xfs: use bitops interface for buf log item AIL flag check

Brian Foster <bfoster@xxxxxxxxxx>
    xfs: stabilize insert range start boundary to avoid COW writeback race

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    xfs: fix some memory leaks in log recovery

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    xfs: always log corruption errors

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    xfs: constify the buffer pointer arguments to error functions

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    xfs: convert EIO to EFSCORRUPTED when log contents are invalid

kaixuxia <xiakaixu1987@xxxxxxxxx>
    xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename()

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    xfs: attach dquots and reserve quota blocks during unwritten conversion

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    xfs: range check ri_cnt when recovering log items

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    xfs: add missing assert in xfs_fsmap_owner_from_rmap

Christoph Hellwig <hch@xxxxxx>
    xfs: slightly tweak an assert in xfs_fs_map_blocks

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    xfs: replace -EIO with -EFSCORRUPTED for corrupt metadata

Jan Kara <jack@xxxxxxx>
    ext4: make directory inode spreading reflect flexbg size

Luís Henriques <lhenriques@xxxxxxx>
    ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
    workqueue: don't skip lockdep work dependency in cancel_work_sync()

Nathan Huckleberry <nhuck@xxxxxxxxxx>
    drm/rockchip: Fix return type of cdn_dp_connector_mode_valid

Yao Wang1 <Yao.Wang1@xxxxxxx>
    drm/amd/display: Limit user regamma to a valid value

Hamza Mahfooz <hamza.mahfooz@xxxxxxx>
    drm/amdgpu: use dirty framebuffer helper

Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
    Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region

Stefan Metzmacher <metze@xxxxxxxxx>
    cifs: always initialize struct msghdr smb_msg completely

Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx>
    usb: xhci-mtk: fix issue of out-of-bounds array access

Stefan Haberland <sth@xxxxxxxxxxxxx>
    s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup

Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx>
    serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting

Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx>
    serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting

Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx>
    serial: Create uart_xmit_advance()

Hangyu Hua <hbh25y@xxxxxxxxx>
    net: sched: fix possible refcount leak in tc_new_tfilter()

Sean Anderson <seanga2@xxxxxxxxx>
    net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD

Adrian Hunter <adrian.hunter@xxxxxxxxx>
    perf kcore_copy: Do not check /proc/modules is unchanged

Lieven Hey <lieven.hey@xxxxxxxx>
    perf jit: Include program header in ELF files

Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
    can: gs_usb: gs_can_open(): fix race dev->can.state condition

Florian Westphal <fw@xxxxxxxxx>
    netfilter: ebtables: fix memory leak when blob is malformed

Vladimir Oltean <vladimir.oltean@xxxxxxx>
    net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs

Vladimir Oltean <vladimir.oltean@xxxxxxx>
    net/sched: taprio: avoid disabling offload when it was never enabled

Liang He <windhl@xxxxxxx>
    of: mdio: Add of_node_put() when breaking out of for_each_xx

Michal Jaron <michalx.jaron@xxxxxxxxx>
    i40e: Fix set max_tx_rate when it is lower than 1 Mbps

Michal Jaron <michalx.jaron@xxxxxxxxx>
    i40e: Fix VF set max MTU size

Michal Jaron <michalx.jaron@xxxxxxxxx>
    iavf: Fix set max MTU size with port VLAN and jumbo frames

Norbert Zulinski <norbertx.zulinski@xxxxxxxxx>
    iavf: Fix bad page state

Serge Semin <Sergey.Semin@xxxxxxxxxxxxxxxxxxxx>
    MIPS: Loongson32: Fix PHY-mode being left unspecified

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
    MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko

Benjamin Poirier <bpoirier@xxxxxxxxxx>
    net: team: Unsync device addresses on ndo_stop

Lu Wei <luwei32@xxxxxxxxxx>
    ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header

Brett Creeley <brett.creeley@xxxxxxxxx>
    iavf: Fix cached head and tail value for iavf_get_tx_pending

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
    netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()

David Leadbeater <dgl@xxxxxx>
    netfilter: nf_conntrack_irc: Tighten matching on DCC message

Igor Ryzhov <iryzhov@xxxxxxxxxx>
    netfilter: nf_conntrack_sip: fix ct_sip_walk_headers

Fabio Estevam <festevam@xxxxxxx>
    arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma

zain wang <wzz@xxxxxxxxxxxxxx>
    arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz

Brian Norris <briannorris@xxxxxxxxxxxx>
    arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob

Chao Yu <chao.yu@xxxxxxxx>
    mm/slub: fix to return errno if kmalloc() fails

Ard Biesheuvel <ardb@xxxxxxxxxx>
    efi: libstub: check Shim mode using MokSBStateRT

Callum Osmotherly <callum.osmotherly@xxxxxxxxx>
    ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop

Luke D. Jones <luke@xxxxxxxxxx>
    ALSA: hda/realtek: Add quirk for ASUS GA503R laptop

Luke D. Jones <luke@xxxxxxxxxx>
    ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack

Luke D. Jones <luke@xxxxxxxxxx>
    ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: hda/realtek: Re-arrange quirk table entries

huangwenhui <huangwenhuia@xxxxxxxxxxxxx>
    ALSA: hda/realtek: Add quirk for Huawei WRT-WX9

Kai Vehmanen <kai.vehmanen@xxxxxxxxxxxxxxx>
    ALSA: hda: add Intel 5 Series / 3400 PCI DID

Mohan Kumar <mkumard@xxxxxxxxxx>
    ALSA: hda/tegra: set depop delay for tegra

jerry meng <jerry-meng@xxxxxxxxxxx>
    USB: serial: option: add Quectel RM520N

Carl Yin(殷张成) <carl.yin@xxxxxxxxxxx>
    USB: serial: option: add Quectel BG95 0x0203 composition

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
    USB: core: Fix RST error in hub.c

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Revert "usb: add quirks for Lenovo OneLink+ Dock"

Pawel Laszczak <pawell@xxxxxxxxxxx>
    usb: cdns3: fix issue with rearming ISO OUT endpoint

Piyush Mehta <piyush.mehta@xxxxxxx>
    usb: gadget: udc-xilinx: replace memcpy with memcpy_toio

Jean-Francois Le Fillatre <jflf_kernel@xxxxxxx>
    usb: add quirks for Lenovo OneLink+ Dock

Sergiu Moga <sergiu.moga@xxxxxxxxxxxxx>
    tty: serial: atmel: Preserve previous USART mode if RS485 disabled

Lino Sanfilippo <LinoSanfilippo@xxxxxx>
    serial: atmel: remove redundant assignment in rs485_config

Codrin.Ciubotariu@xxxxxxxxxxxxx <Codrin.Ciubotariu@xxxxxxxxxxxxx>
    tty/serial: atmel: RS485 & ISO7816: wait for TXRDY before sending data

Siddh Raman Pant <code@xxxxxxxx>
    wifi: mac80211: Fix UAF in ieee80211_scan_rx()

Ikjoon Jang <ikjn@xxxxxxxxxxxx>
    usb: xhci-mtk: relax TT periodic bandwidth allocation

Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx>
    usb: xhci-mtk: allow multiple Start-Split in a microframe

Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx>
    usb: xhci-mtk: add some schedule error number

Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx>
    usb: xhci-mtk: add a function to (un)load bandwidth info

Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx>
    usb: xhci-mtk: use @sch_tt to check whether need do TT schedule

Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx>
    usb: xhci-mtk: add only one extra CS for FS/LS INTR

Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx>
    usb: xhci-mtk: get the microframe boundary for ESIT

Wesley Cheng <quic_wcheng@xxxxxxxxxxx>
    usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop

Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx>
    usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()

Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx>
    usb: dwc3: gadget: Refactor pullup()

Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx>
    usb: dwc3: gadget: Prevent repeat pullup()

Wesley Cheng <quic_wcheng@xxxxxxxxxxx>
    usb: dwc3: Issue core soft reset before enabling run/stop

Wesley Cheng <wcheng@xxxxxxxxxxxxxx>
    usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: hda/sigmatel: Fix unused variable warning for beep power change

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
    cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()

Hyunwoo Kim <imv4bel@xxxxxxxxx>
    video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write

Youling Tang <tangyouling@xxxxxxxxxxx>
    mksysmap: Fix the mismatch of 'L0' symbols in System.map

Alexander Sverdlin <alexander.sverdlin@xxxxxxxxx>
    MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()

David Howells <dhowells@xxxxxxxxxx>
    afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked

jerry.meng <jerry-meng@xxxxxxxxxxx>
    net: usb: qmi_wwan: add Quectel RM520N

Mohan Kumar <mkumard@xxxxxxxxxx>
    ALSA: hda/tegra: Align BDL entry to 4KB boundary

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: hda/sigmatel: Keep power up while beep is enabled

David Howells <dhowells@xxxxxxxxxx>
    rxrpc: Fix calc of resend age

David Howells <dhowells@xxxxxxxxxx>
    rxrpc: Fix local destruction being repeated

Xiaolei Wang <xiaolei.wang@xxxxxxxxxxxxx>
    regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()

Takashi Iwai <tiwai@xxxxxxx>
    ASoC: nau8824: Fix semaphore unbalance at error paths

Chandan Babu R <chandan.babu@xxxxxxxxxx>
    iomap: iomap that extends beyond EOF should be marked dirty

Chandan Babu R <chandan.babu@xxxxxxxxxx>
    MAINTAINERS: add Chandan as xfs maintainer for 5.4.y

Stefan Metzmacher <metze@xxxxxxxxx>
    cifs: don't send down the destination address to sendmsg for a SOCK_STREAM

Ronnie Sahlberg <lsahlber@xxxxxxxxxx>
    cifs: revalidate mapping when doing direct writes

Yipeng Zou <zouyipeng@xxxxxxxxxx>
    tracing: hold caller_addr to hardirq_{enable,disable}_ip

Borislav Petkov <bp@xxxxxxx>
    task_stack, x86/cea: Force-inline stack helpers

Sasha Levin <sashal@xxxxxxxxxx>
    ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC

Yang Yingliang <yangyingliang@xxxxxxxxxx>
    parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()

Stuart Menefy <stuart.menefy@xxxxxxxxxxxxxxxx>
    drm/meson: Fix OSD1 RGB to YCbCr coefficient

Stuart Menefy <stuart.menefy@xxxxxxxxxxxxxxxx>
    drm/meson: Correct OSD1 global alpha value

Pali Rohár <pali@xxxxxxxxxx>
    gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
    NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0

Sergey Shtylyov <s.shtylyov@xxxxxx>
    of: fdt: fix off-by-one error in unflatten_dt_nodes()


-------------

Diffstat:

 MAINTAINERS                                        |   3 +-
 Makefile                                           |   4 +-
 arch/arm64/boot/dts/rockchip/rk3399-gru-bob.dts    |   5 +
 .../boot/dts/rockchip/rk3399-gru-chromebook.dtsi   |   9 ++
 arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi      |   1 -
 arch/mips/cavium-octeon/octeon-irq.c               |  10 ++
 arch/mips/lantiq/clk.c                             |   1 +
 arch/mips/loongson32/common/platform.c             |  16 +-
 arch/x86/include/asm/cpu_entry_area.h              |   2 +-
 drivers/firmware/efi/libstub/secureboot.c          |   8 +-
 drivers/gpio/gpio-mpc8xxx.c                        |   1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_display.c        |   2 +
 .../drm/amd/display/modules/color/color_gamma.c    |   4 +
 drivers/gpu/drm/meson/meson_plane.c                |   2 +-
 drivers/gpu/drm/meson/meson_viu.c                  |   2 +-
 drivers/gpu/drm/rockchip/cdn-dp-core.c             |   5 +-
 drivers/hv/vmbus_drv.c                             |  10 +-
 drivers/net/can/usb/gs_usb.c                       |   4 +-
 drivers/net/ethernet/intel/i40e/i40e_main.c        |  32 +++-
 drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c |  20 +++
 drivers/net/ethernet/intel/iavf/iavf_txrx.c        |   9 +-
 drivers/net/ethernet/intel/iavf/iavf_virtchnl.c    |   7 +-
 drivers/net/ethernet/sun/sunhme.c                  |   4 +-
 drivers/net/ipvlan/ipvlan_core.c                   |   6 +-
 drivers/net/team/team.c                            |  24 ++-
 drivers/net/usb/qmi_wwan.c                         |   1 +
 drivers/of/fdt.c                                   |   2 +-
 drivers/of/of_mdio.c                               |   1 +
 drivers/parisc/ccio-dma.c                          |   1 +
 drivers/regulator/pfuze100-regulator.c             |   2 +-
 drivers/s390/block/dasd_alias.c                    |   9 +-
 drivers/tty/serial/atmel_serial.c                  |  32 ++--
 drivers/tty/serial/serial-tegra.c                  |   5 +-
 drivers/tty/serial/tegra-tcu.c                     |   2 +-
 drivers/usb/cdns3/gadget.c                         |   1 +
 drivers/usb/core/hub.c                             |   2 +-
 drivers/usb/dwc3/core.c                            |   2 +-
 drivers/usb/dwc3/core.h                            |   4 +
 drivers/usb/dwc3/gadget.c                          |  81 +++++-----
 drivers/usb/host/xhci-mtk-sch.c                    | 149 ++++++++++--------
 drivers/usb/host/xhci-mtk.h                        |   2 -
 drivers/usb/serial/option.c                        |   6 +
 drivers/video/fbdev/pxa3xx-gcu.c                   |   2 +-
 fs/afs/misc.c                                      |   1 +
 fs/cifs/connect.c                                  |   7 +-
 fs/cifs/file.c                                     |   3 +
 fs/cifs/transport.c                                |   6 +-
 fs/ext4/extents.c                                  |   4 +
 fs/ext4/ialloc.c                                   |   2 +-
 fs/nfs/super.c                                     |  27 ++--
 fs/xfs/libxfs/xfs_alloc.c                          |  27 +++-
 fs/xfs/libxfs/xfs_attr_leaf.c                      |  12 +-
 fs/xfs/libxfs/xfs_bmap.c                           |  16 +-
 fs/xfs/libxfs/xfs_btree.c                          |   5 +-
 fs/xfs/libxfs/xfs_da_btree.c                       |  24 ++-
 fs/xfs/libxfs/xfs_dir2.c                           |   4 +-
 fs/xfs/libxfs/xfs_dir2_leaf.c                      |   4 +-
 fs/xfs/libxfs/xfs_dir2_node.c                      |  12 +-
 fs/xfs/libxfs/xfs_dir2_sf.c                        |  28 +++-
 fs/xfs/libxfs/xfs_ialloc.c                         |  64 ++++++++
 fs/xfs/libxfs/xfs_ialloc.h                         |   1 +
 fs/xfs/libxfs/xfs_inode_fork.c                     |   6 +
 fs/xfs/libxfs/xfs_refcount.c                       |   4 +-
 fs/xfs/libxfs/xfs_rtbitmap.c                       |   6 +-
 fs/xfs/xfs_acl.c                                   |  15 +-
 fs/xfs/xfs_attr_inactive.c                         |  10 +-
 fs/xfs/xfs_attr_list.c                             |   5 +-
 fs/xfs/xfs_bmap_item.c                             |   7 +-
 fs/xfs/xfs_bmap_util.c                             |  12 ++
 fs/xfs/xfs_buf_item.c                              |   2 +-
 fs/xfs/xfs_dquot.c                                 |   2 +-
 fs/xfs/xfs_error.c                                 |  27 +++-
 fs/xfs/xfs_error.h                                 |   7 +-
 fs/xfs/xfs_extfree_item.c                          |   5 +-
 fs/xfs/xfs_fsmap.c                                 |   1 +
 fs/xfs/xfs_inode.c                                 |  40 ++++-
 fs/xfs/xfs_inode_item.c                            |   5 +-
 fs/xfs/xfs_iomap.c                                 |  17 +++
 fs/xfs/xfs_iops.c                                  |  10 +-
 fs/xfs/xfs_log_recover.c                           |  72 ++++++---
 fs/xfs/xfs_message.c                               |   2 +-
 fs/xfs/xfs_message.h                               |   2 +-
 fs/xfs/xfs_mount.c                                 | 168 ++++++++++++++-------
 fs/xfs/xfs_pnfs.c                                  |   4 +-
 fs/xfs/xfs_qm.c                                    |  13 +-
 fs/xfs/xfs_refcount_item.c                         |   5 +-
 fs/xfs/xfs_rmap_item.c                             |   9 +-
 fs/xfs/xfs_trace.h                                 |  21 +++
 include/linux/iomap.h                              |   2 +
 include/linux/sched/task_stack.h                   |   2 +-
 include/linux/serial_core.h                        |  17 +++
 kernel/cgroup/cgroup-v1.c                          |   3 +
 kernel/trace/trace_preemptirq.c                    |   4 +-
 kernel/workqueue.c                                 |   6 +-
 mm/slub.c                                          |   5 +-
 net/bridge/netfilter/ebtables.c                    |   4 +-
 net/mac80211/scan.c                                |  11 +-
 net/netfilter/nf_conntrack_irc.c                   |  34 ++++-
 net/netfilter/nf_conntrack_sip.c                   |   4 +-
 net/netfilter/nfnetlink_osf.c                      |   4 +-
 net/rxrpc/call_event.c                             |   2 +-
 net/rxrpc/local_object.c                           |   3 +
 net/sched/cls_api.c                                |   1 +
 net/sched/sch_taprio.c                             |  18 ++-
 scripts/mksysmap                                   |   2 +-
 sound/core/oss/pcm_oss.c                           |   5 +-
 sound/pci/hda/hda_intel.c                          |   2 +
 sound/pci/hda/hda_tegra.c                          |   3 +-
 sound/pci/hda/patch_hdmi.c                         |   1 +
 sound/pci/hda/patch_realtek.c                      |  31 +++-
 sound/pci/hda/patch_sigmatel.c                     |  24 +++
 sound/soc/codecs/nau8824.c                         |  17 ++-
 tools/perf/util/genelf.c                           |  14 ++
 tools/perf/util/genelf.h                           |   4 +
 tools/perf/util/symbol-elf.c                       |   7 +-
 115 files changed, 1059 insertions(+), 390 deletions(-)