[PATCH 4.4 10/65] ARC: perf: map generic branches to correct hardware condition

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eugeniy Paltsev commit 3affbf0e154ee351add6fcc254c59c3f3947fa8f upstream. So far we've mapped branches to "ijmp" which also counts conditional branches NOT taken. This makes us different from o

[PATCH 4.9 00/30] 4.9.155-stable review

This is the start of the stable review cycle for the 4.9.155 release. There are 30 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Feb 6 10:35:37 UTC 2019. Anything receiv

[PATCH 4.4 11/65] s390/early: improve machine detection

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Christian Borntraeger commit 03aa047ef2db4985e444af6ee1c1dd084ad9fb4c upstream. Right now the early machine detection code check stsi 3.2.2 for "KVM" and set MACHINE_IS_VM if this is different.

[PATCH 4.14 25/46] ARM: cns3xxx: Fix writing to wrong PCI config registers after alignment

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Koen Vandeputte commit 65dbb423cf28232fed1732b779249d6164c5999b upstream. Originally, cns3xxx used its own functions for mapping, reading and writing config registers. Commit 802b7c06adc7 ("A

[PATCH 4.19 14/74] ravb: expand rx descriptor data to accommodate hw checksum

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Simon Horman [ Upstream commit 12da64300fbc76b875900445f4146c3dc617d43e ] EtherAVB may provide a checksum of packet data appended to packet data. In order to allow this checksum to be received

[PATCH 4.14 27/46] arm64: hyp-stub: Forbid kprobing of the hyp-stub

4.14-stable review patch. If anyone has any objections, please let me know. -- From: James Morse commit 8fac5cbdfe0f01254d9d265c6aa1a95f94f58595 upstream. The hyp-stub is loaded by the kernel's early startup code at EL2 during boot, before KVM takes ownership later. The hyp-st

[PATCH 4.19 10/74] net/mlx4_core: Add masking for a few queries on HCA caps

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Aya Levin [ Upstream commit a40ded6043658444ee4dd6ee374119e4e98b33fc ] Driver reads the query HCA capabilities without the corresponding masks. Without the correct masks, the base addresses of

[PATCH 4.19 01/74] Fix "net: ipv4: do not handle duplicate fragments as overlapping"

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Greg Kroah-Hartman ade446403bfb ("net: ipv4: do not handle duplicate fragments as overlapping") was backported to many stable trees, but it had a problem that was "accidentally" fixed by the up

[PATCH 4.19 15/74] sctp: improve the events for sctp stream reset

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit 2e6dc4d95110becfe0ff4c3d4749c33ea166e9e7 ] This patch is to improve sctp stream reset events in 4 places: 1. In sctp_process_strreset_outreq(), the flag should al

[PATCH 4.14 24/46] NFS: Fix up return value on fatal errors in nfs_page_async_flush()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit 8fc75bed96bb94e23ca51bd9be4daf65c57697bf upstream. Ensure that we return the fatal error value that caused us to exit nfs_page_async_flush(). Fixes: c373fff7bd25 ("NFSv

[PATCH 4.14 42/46] mm: migrate: dont rely on __PageMovable() of newpage after unlocking it

4.14-stable review patch. If anyone has any objections, please let me know. -- From: David Hildenbrand commit e0a352fabce61f730341d119fbedf71ffdb8663f upstream. We had a race in the old balloon compaction code before b1123ea6d3b3 ("mm: balloon: use general non-lru movable page

[PATCH 4.14 28/46] arm64: hibernate: Clean the __hyp_text to PoC after resume

4.14-stable review patch. If anyone has any objections, please let me know. -- From: James Morse commit f7daa9c8fd191724b9ab9580a7be55cd1a67d799 upstream. During resume hibernate restores all physical memory. Any memory that is accessed with the MMU disabled needs to be cleane

[PATCH 4.14 23/46] selftests/seccomp: Enhance per-arch ptrace syscall skip tests

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Kees Cook commit ed5f13261cb65b02c611ae9971677f33581d4286 upstream. Passing EPERM during syscall skipping was confusing since the test wasn't actually exercising the errno evaluation -- it was

[PATCH 4.14 43/46] md/raid5: fix out of memory during raid cache recovery

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Alexei Naberezhnov commit 483cbbeddd5fe2c80fd4141ff0748fa06c4ff146 upstream. This fixes the case when md array assembly fails because of raid cache recovery unable to allocate a stripe, despit

[PATCH 4.14 20/46] CIFS: Do not count -ENODATA as failure for query directory

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Pavel Shilovsky commit 8e6e72aeceaaed5aeeb1cb43d3085de7ceb14f79 upstream. Signed-off-by: Pavel Shilovsky Signed-off-by: Steve French CC: Stable Signed-off-by: Greg Kroah-Hartman --- fs/c

[PATCH 4.14 40/46] mm, oom: fix use-after-free in oom_kill_process

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Shakeel Butt commit cefc7ef3c87d02fc9307835868ff721ea12cc597 upstream. Syzbot instance running on upstream kernel found a use-after-free bug in oom_kill_process. On further inspection it seem

[PATCH 4.14 26/46] arm64: kaslr: ensure randomized quantities are clean also when kaslr is off

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Ard Biesheuvel commit 8ea235932314311f15ea6cf65c1393ed7e31af70 upstream. Commit 1598ecda7b23 ("arm64: kaslr: ensure randomized quantities are clean to the PoC") added cache maintenance to ensu

[PATCH 3.18 10/31] x86/kaslr: Fix incorrect i8254 outb() parameters

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Drake commit 7e6fc2f50a3197d0e82d1c0e86282976c9e6c8a4 upstream. The outb() function takes parameters value and port, in that order. Fix the parameters used in the kalsr i8254 fallback

[PATCH 4.14 04/46] l2tp: copy 4 more bytes to linear part if necessary

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Jacob Wen [ Upstream commit 91c524708de6207f59dd3512518d8a1c7b434ee3 ] The size of L2TPv2 header with all optional fields is 14 bytes. l2tp_udp_recv_core only moves 10 bytes to the linear part

[PATCH 4.14 30/46] gpio: pcf857x: Fix interrupts on multiple instances

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Roger Quadros commit 2486e67374aa8b7854c2de32869642c2873b3d53 upstream. When multiple instances of pcf857x chips are present, a fix up message [1] is printed during the probe of the 2nd and la

[PATCH 4.4 65/65] ipv4: frags: precedence bug in ip_expire()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 70837ffe3085c9a91488b52ca13ac84424da1042 upstream. We accidentally removed the parentheses here, but they are required because '!' has higher precedence than '&'. Fixes: f

[PATCH 3.18 04/31] s390/smp: fix CPU hotplug deadlock with CPU rescan

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Gerald Schaefer commit b7cb707c373094ce4008d4a6ac9b6b366ec52da5 upstream. smp_rescan_cpus() is called without the device_hotplug_lock, which can lead to a dedlock when a new CPU is found and i

[PATCH 4.14 41/46] mm: hwpoison: use do_send_sig_info() instead of force_sig()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Naoya Horiguchi commit 6376360ecbe525a9c17b3d081dfd88ba3e4ed65b upstream. Currently memory_failure() is racy against process's exiting, which results in kernel crash by null pointer dereferenc

[PATCH 4.19 06/74] l2tp: copy 4 more bytes to linear part if necessary

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Jacob Wen [ Upstream commit 91c524708de6207f59dd3512518d8a1c7b434ee3 ] The size of L2TPv2 header with all optional fields is 14 bytes. l2tp_udp_recv_core only moves 10 bytes to the linear part

[PATCH 4.19 05/74] ipvlan, l3mdev: fix broken l3s mode wrt local routes

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann [ Upstream commit d5256083f62e2720f75bb3c5a928a0afe47d6bc3 ] While implementing ipvlan l3 and l3s mode for kubernetes CNI plugin, I ran into the issue that while l3 mode is wor

[PATCH 4.19 11/74] netrom: switch to sock timer API

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Cong Wang [ Upstream commit 63346650c1a94a92be61a57416ac88c0a47c4327 ] sk_reset_timer() and sk_stop_timer() properly handle sock refcnt for timer function. Switching to them could fix a refcou

[PATCH 4.19 03/74] ipv6: Consider sk_bound_dev_if when binding a socket to an address

4.19-stable review patch. If anyone has any objections, please let me know. -- From: David Ahern [ Upstream commit c5ee066333ebc322a24a00a743ed941a0c68617e ] IPv6 does not consider if the socket is bound to a device when binding to an address. The result is that a socket can b

[PATCH 4.19 16/74] tun: move the call to tun_set_real_num_queues

4.19-stable review patch. If anyone has any objections, please let me know. -- From: George Amanakis [ Upstream commit 3a03cb8456cc1d61c467a5375e0a10e5207b948c ] Call tun_set_real_num_queues() after the increment of tun->numqueues since the former depends on it. Otherwise, the

[PATCH 4.14 46/46] fanotify: fix handling of events on child sub-directory

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Amir Goldstein commit b469e7e47c8a075cc08bcd1e85d4365134bdcdd5 upstream. When an event is reported on a sub-directory and the parent inode has a mark mask with FS_EVENT_ON_CHILD|FS_ISDIR, the

[PATCH 4.19 13/74] net: set default network namespace in init_dummy_netdev()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Josh Elsasser [ Upstream commit 35edfdc77f683c8fd27d7732af06cf6489af60a5 ] Assign a default net namespace to netdevs created by init_dummy_netdev(). Fixes a NULL pointer dereference caused by

[PATCH 4.19 08/74] net: ip_gre: always reports o_key to userspace

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Lorenzo Bianconi [ Upstream commit feaf5c796b3f0240f10d0d6d0b686715fd58a05b ] Erspan protocol (version 1 and 2) relies on o_key to configure session id header field. However TUNNEL_KEY bit is

[PATCH 4.19 34/74] CIFS: Fix trace command logging for SMB2 reads and writes

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Pavel Shilovsky commit 7d42e72fe8ee5ab70b1af843dd7d8615e6fb0abe upstream. Currently we log success once we send an async IO request to the server. Instead we need to analyse a response and the

[PATCH 4.19 31/74] virtio_net: Use xdp_return_frame to free xdp_frames on destroying vqs

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Toshiaki Makita [ Upstream commit 07b344f494ddda9f061b396407c96df8c46c82b5 ] put_page() can work as a fallback for freeing xdp_frames, but the appropriate way is to use xdp_return_frame(). Fi

Re: [PATCH] PCI: Consider alignment of hot-added bridges when distributing available resources

Hi, Please indicate in the $subject that this is second version of the patch as explained in: https://www.kernel.org/doc/html/latest/process/submitting-patches.html#the-canonical-patch-format For example here the $subject should look like [PATCH v2] PCI: Consider alignment of hot-added bri

[PATCH 4.19 22/74] ip6mr: Fix notifiers call on mroute_clean_tables()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Nir Dotan [ Upstream commit 146820cc240f4389cf33481c058d9493aef95e25 ] When the MC route socket is closed, mroute_clean_tables() is called to cleanup existing routes. Mistakenly notifiers call

[PATCH 4.19 09/74] net: ip_gre: use erspan key field for tunnel lookup

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Lorenzo Bianconi [ Upstream commit cb73ee40b1b381eaf3749e6dbeed567bb38e5258 ] Use ERSPAN key header field as tunnel key in gre_parse_header routine since ERSPAN protocol sets the key field of

[PATCH 4.19 36/74] fs/dcache: Fix incorrect nr_dentry_unused accounting in shrink_dcache_sb()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Waiman Long commit 1dbd449c9943e3145148cc893c2461b72ba6fef0 upstream. The nr_dentry_unused per-cpu counter tracks dentries in both the LRU lists and the shrink lists where the DCACHE_LRU_LIST

[PATCH 4.19 33/74] CIFS: Do not count -ENODATA as failure for query directory

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Pavel Shilovsky commit 8e6e72aeceaaed5aeeb1cb43d3085de7ceb14f79 upstream. Signed-off-by: Pavel Shilovsky Signed-off-by: Steve French CC: Stable Signed-off-by: Greg Kroah-Hartman --- fs/c

[PATCH 4.19 32/74] virtio_net: Differentiate sk_buff and xdp_frame on freeing

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Toshiaki Makita [ Upstream commit 5050471d35d1316ba32dfcbb409978337eb9e75e I had to fold commit df133f3f9625 ("virtio_net: bulk free tx skbs") into this to make it work. ] We do not rese

[PATCH 4.19 00/74] 4.19.20-stable review

This is the start of the stable review cycle for the 4.19.20 release. There are 74 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Feb 6 10:35:34 UTC 2019. Anything receiv

[PATCH 4.19 26/74] virtio_net: Dont enable NAPI when interface is down

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Toshiaki Makita [ Upstream commit 8be4d9a492f88b96d4d3a06c6cbedbc40ca14c83 ] Commit 4e09ff536284 ("virtio-net: disable NAPI only when enabled during XDP set") tried to fix inappropriate NAPI e

[PATCH 4.19 23/74] Revert "net/mlx5e: E-Switch, Initialize eswitch only if eswitch manager"

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Bodong Wang [ Upstream commit 4e046de0f50e04acd48eb373d6a9061ddf014e0c ] This reverts commit 5f5991f36dce1e69dd8bd7495763eec2e28f08e7. With the original commit, eswitch instance will not be i

[PATCH 4.19 24/74] sctp: set chunk transport correctly when its a new asoc

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit 4ff40b86262b73553ee47cc3784ce8ba0f220bd8 ] In the paths: sctp_sf_do_unexpected_init() -> sctp_make_init_ack() sctp_sf_do_dupcook_a/b()() -> sctp_sf_do_5

[PATCH 4.19 27/74] virtio_net: Dont call free_old_xmit_skbs for xdp_frames

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Toshiaki Makita [ Upstream commit 534da5e856334fb54cb0272a9fb3afec28ea3aed ] When napi_tx is enabled, virtnet_poll_cleantx() called free_old_xmit_skbs() even for xdp send queue. This is bogus

[PATCH 4.19 21/74] net/mlx5e: Allow MAC invalidation while spoofchk is ON

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Aya Levin [ Upstream commit 9d2cbdc5d334967c35b5f58c7bf3208e17325647 ] Prior to this patch the driver prohibited spoof checking on invalid MAC. Now the user can set this configuration if it wi

[PATCH 4.19 51/74] mmc: bcm2835: Fix DMA channel leak on probe error

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Lukas Wunner commit 8c9620b1cc9b69e82fa8d4081d646d0016b602e7 upstream. The BCM2835 MMC host driver requests a DMA channel on probe but neglects to release the channel in the probe error path.

[PATCH 4.19 52/74] mmc: mediatek: fix incorrect register setting of hs400_cmd_int_delay

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Chaotian Jing commit 3751e008da0df4384031bd66a516c0292f915605 upstream. to set cmd internal delay, need set PAD_TUNE register but not PAD_CMD_TUNE register. Signed-off-by: Chaotian Jing Fixe

[PATCH 4.19 54/74] ALSA: hda/realtek - Fixed hp_pin no value

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Kailang Yang commit 693abe11aa6b27aed6eb8222162f8fb986325cef upstream. Fix hp_pin always no value. [More notes on the changes: The hp_pin value that is referred in alc294_hp_init() is alway

[PATCH 4.19 19/74] net: ip6_gre: always reports o_key to userspace

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Lorenzo Bianconi [ Upstream commit c706863bc8902d0c2d1a5a27ac8e1ead5d06b79d ] As Erspan_v4, Erspan_v6 protocol relies on o_key to configure session id header field. However TUNNEL_KEY bit is c

[PATCH 4.19 43/74] arm64: hyp-stub: Forbid kprobing of the hyp-stub

4.19-stable review patch. If anyone has any objections, please let me know. -- From: James Morse commit 8fac5cbdfe0f01254d9d265c6aa1a95f94f58595 upstream. The hyp-stub is loaded by the kernel's early startup code at EL2 during boot, before KVM takes ownership later. The hyp-st

[PATCH 4.19 50/74] gfs2: Revert "Fix loop in gfs2_rbm_find"

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Andreas Gruenbacher commit e74c98ca2d6ae4376cc15fa2a22483430909d96b upstream. This reverts commit 2d29f6b96d8f80322ed2dd895bca590491c38d34. It turns out that the fix can lead to a ~20 percent

[PATCH 4.19 57/74] platform/x86: asus-nb-wmi: Drop mapping of 0x33 and 0x34 scan codes

4.19-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 71b12beaf12f21a53bfe100795d0797f1035b570 ] According to Asus firmware engineers, the meaning of these codes is only to notify the OS that the screen brightness has been turned on/off

[PATCH 4.19 55/74] IB/hfi1: Remove overly conservative VM_EXEC flag check

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Michael J. Ruhl commit 7709b0dc265f28695487712c45f02bbd1f98415d upstream. Applications that use the stack for execution purposes cause userspace PSM jobs to fail during mmap(). Both Fortran (

[PATCH 4.19 59/74] Btrfs: fix deadlock when allocating tree block during leaf/node split

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Filipe Manana commit a6279470762c19ba97e454f90798373dccdf6148 upstream. When splitting a leaf or node from one of the trees that are modified when flushing pending block groups (extent, chunk,

[PATCH 4.19 42/74] arm64: Do not issue IPIs for user executable ptes

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Catalin Marinas commit 132fdc379eb143932d209a20fd581e1ce7630960 upstream. Commit 3b8c9f1cdfc5 ("arm64: IPI each CPU after invalidating the I-cache for kernel mappings") was aimed at fixing the

[PATCH 4.19 56/74] platform/x86: asus-nb-wmi: Map 0x35 to KEY_SCREENLOCK

4.19-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit b3f2f3799a972d3863d0fdc2ab6287aef6ca631f ] When the OS registers to handle events from the display off hotkey the EC will send a notification with 0x35 for every key press, independe

[PATCH 4.19 49/74] gpio: sprd: Fix incorrect irq type setting for the async EIC

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Neo Hou commit f785ffb61605734b518afa766d1b5445e9f38c8d upstream. When setting async EIC as IRQ_TYPE_EDGE_BOTH type, we missed to set the SPRD_EIC_ASYNC_INTMODE register to 0, which means dete

[PATCH 4.19 40/74] ARM: cns3xxx: Fix writing to wrong PCI config registers after alignment

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Koen Vandeputte commit 65dbb423cf28232fed1732b779249d6164c5999b upstream. Originally, cns3xxx used its own functions for mapping, reading and writing config registers. Commit 802b7c06adc7 ("A

[PATCH 4.19 71/74] of: overlay: use prop add changeset entry for property in new nodes

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Frank Rowand commit 6b4955ba7bc05e40c8c41071cc121bc26ca65277 upstream. The changeset entry 'update property' was used for new properties in an overlay instead of 'add property'. The decision

[PATCH 4.19 69/74] of: overlay: add tests to validate kfrees from overlay removal

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Frank Rowand commit 144552c786925314c1e7cb8f91a71dae1aca8798 upstream. Add checks: - attempted kfree due to refcount reaching zero before overlay is removed - properties linked to an o

[PATCH 4.19 73/74] md/raid5: fix out of memory during raid cache recovery

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Alexei Naberezhnov commit 483cbbeddd5fe2c80fd4141ff0748fa06c4ff146 upstream. This fixes the case when md array assembly fails because of raid cache recovery unable to allocate a stripe, despit

[PATCH 4.19 72/74] of: overlay: do not duplicate properties from overlay for new nodes

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Frank Rowand commit 8814dc46bd9e347d4de55ec5bf8f16ea54470499 upstream. When allocating a new node, add_changeset_node() was duplicating the properties from the respective node in the overlay i

[PATCH 4.19 65/74] mm, oom: fix use-after-free in oom_kill_process

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Shakeel Butt commit cefc7ef3c87d02fc9307835868ff721ea12cc597 upstream. Syzbot instance running on upstream kernel found a use-after-free bug in oom_kill_process. On further inspection it seem

[PATCH 4.19 67/74] mm: migrate: dont rely on __PageMovable() of newpage after unlocking it

4.19-stable review patch. If anyone has any objections, please let me know. -- From: David Hildenbrand commit e0a352fabce61f730341d119fbedf71ffdb8663f upstream. We had a race in the old balloon compaction code before b1123ea6d3b3 ("mm: balloon: use general non-lru movable page

[PATCH 4.20 02/80] ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Yohei Kanemaru [ Upstream commit ef489749aae508e6f17886775c075f12ff919fb1 ] skb->cb may contain data from previous layers (in an observed case IPv4 with L3 Master Device). In the observed scen

[PATCH 4.20 00/80] 4.20.7-stable review

This is the start of the stable review cycle for the 4.20.7 release. There are 80 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Feb 6 10:35:33 UTC 2019. Anything receive

[PATCH 4.20 06/80] net: ip_gre: always reports o_key to userspace

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Lorenzo Bianconi [ Upstream commit feaf5c796b3f0240f10d0d6d0b686715fd58a05b ] Erspan protocol (version 1 and 2) relies on o_key to configure session id header field. However TUNNEL_KEY bit is

[PATCH 4.20 08/80] net/ipv6: dont return positive numbers when nothing was dumped

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Jakub Kicinski [ Upstream commit 1518039f6b5ac794313c24c76f85cead0cd60f6c ] in6_dump_addrs() returns a positive 1 if there was nothing to dump. This return value can not be passed as return fr

[PATCH 4.20 17/80] vhost: fix OOB in get_rx_bufs()

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Jason Wang [ Upstream commit b46a0bf78ad7b150ef5910da83859f7f5a514ffd ] After batched used ring updating was introduced in commit e2b3b35eb989 ("vhost_net: batch used ring update in rx"). We t

[PATCH 4.20 21/80] ip6mr: Fix notifiers call on mroute_clean_tables()

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Nir Dotan [ Upstream commit 146820cc240f4389cf33481c058d9493aef95e25 ] When the MC route socket is closed, mroute_clean_tables() is called to cleanup existing routes. Mistakenly notifiers call

[PATCH 4.20 47/80] arm64: hyp-stub: Forbid kprobing of the hyp-stub

4.20-stable review patch. If anyone has any objections, please let me know. -- From: James Morse commit 8fac5cbdfe0f01254d9d265c6aa1a95f94f58595 upstream. The hyp-stub is loaded by the kernel's early startup code at EL2 during boot, before KVM takes ownership later. The hyp-st

[PATCH 4.20 10/80] netrom: switch to sock timer API

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Cong Wang [ Upstream commit 63346650c1a94a92be61a57416ac88c0a47c4327 ] sk_reset_timer() and sk_stop_timer() properly handle sock refcnt for timer function. Switching to them could fix a refcou

[PATCH 4.20 28/80] virtio_net: Dont call free_old_xmit_skbs for xdp_frames

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Toshiaki Makita [ Upstream commit 534da5e856334fb54cb0272a9fb3afec28ea3aed ] When napi_tx is enabled, virtnet_poll_cleantx() called free_old_xmit_skbs() even for xdp send queue. This is bogus

[PATCH 4.20 44/80] ARM: cns3xxx: Fix writing to wrong PCI config registers after alignment

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Koen Vandeputte commit 65dbb423cf28232fed1732b779249d6164c5999b upstream. Originally, cns3xxx used its own functions for mapping, reading and writing config registers. Commit 802b7c06adc7 ("A

[PATCH 4.20 45/80] arm64: kaslr: ensure randomized quantities are clean also when kaslr is off

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Ard Biesheuvel commit 8ea235932314311f15ea6cf65c1393ed7e31af70 upstream. Commit 1598ecda7b23 ("arm64: kaslr: ensure randomized quantities are clean to the PoC") added cache maintenance to ensu

[PATCH 4.20 30/80] virtio_net: Fix out of bounds access of sq

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Toshiaki Makita [ Upstream commit 1667c08a9d31c7cdf09f4890816bfbf20b685495 ] When XDP is disabled, curr_queue_pairs + smp_processor_id() can be larger than max_queue_pairs. There is no guarant

[PATCH 4.20 07/80] net: ip_gre: use erspan key field for tunnel lookup

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Lorenzo Bianconi [ Upstream commit cb73ee40b1b381eaf3749e6dbeed567bb38e5258 ] Use ERSPAN key header field as tunnel key in gre_parse_header routine since ERSPAN protocol sets the key field of

[PATCH 4.20 42/80] selftests/seccomp: Enhance per-arch ptrace syscall skip tests

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Kees Cook commit ed5f13261cb65b02c611ae9971677f33581d4286 upstream. Passing EPERM during syscall skipping was confusing since the test wasn't actually exercising the errno evaluation -- it was

[PATCH 4.20 31/80] virtio_net: Dont process redirected XDP frames when XDP is disabled

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Toshiaki Makita [ Upstream commit 03aa6d34868c07b2b1b8b2db080602d7ec528173 ] Commit 8dcc5b0ab0ec ("virtio_net: fix ndo_xdp_xmit crash towards dev not ready for XDP") tried to avoid access to u

[PATCH 4.20 15/80] tun: move the call to tun_set_real_num_queues

4.20-stable review patch. If anyone has any objections, please let me know. -- From: George Amanakis [ Upstream commit 3a03cb8456cc1d61c467a5375e0a10e5207b948c ] Call tun_set_real_num_queues() after the increment of tun->numqueues since the former depends on it. Otherwise, the

[PATCH 4.20 46/80] arm64: Do not issue IPIs for user executable ptes

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Catalin Marinas commit 132fdc379eb143932d209a20fd581e1ce7630960 upstream. Commit 3b8c9f1cdfc5 ("arm64: IPI each CPU after invalidating the I-cache for kernel mappings") was aimed at fixing the

[PATCH 4.20 32/80] virtio_net: Use xdp_return_frame to free xdp_frames on destroying vqs

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Toshiaki Makita [ Upstream commit 07b344f494ddda9f061b396407c96df8c46c82b5 ] put_page() can work as a fallback for freeing xdp_frames, but the appropriate way is to use xdp_return_frame(). Fi

[PATCH 4.20 65/80] platform/x86: asus-nb-wmi: Drop mapping of 0x33 and 0x34 scan codes

4.20-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 71b12beaf12f21a53bfe100795d0797f1035b570 ] According to Asus firmware engineers, the meaning of these codes is only to notify the OS that the screen brightness has been turned on/off

[PATCH 4.20 70/80] oom, oom_reaper: do not enqueue same task twice

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Tetsuo Handa commit 9bcdeb51bd7d2ae9fe65ea4d60643d2aeef5bfe3 upstream. Arkadiusz reported that enabling memcg's group oom killing causes strange memcg statistics where there is no task in a me

[PATCH 4.20 61/80] IB/uverbs: Fix OOPs in uverbs_user_mmap_disassociate

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Yishai Hadas commit 7b21b69ab203136fdc153c7707fa6c409e523c2e upstream. The vma->vm_mm can become impossible to get before rdma_umap_close() is called, in this case we must not try to get an mm

[PATCH 4.20 52/80] gpio: sprd: Fix the incorrect data register

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Neo Hou commit 09d158d52d2bceda736797a61b6c13d7fc83707b upstream. Since differnt type EICs have its own data register to read, thus fix the incorrect data register. Fixes: 25518e024e3a ("gpio

[PATCH 4.20 66/80] Btrfs: fix deadlock when allocating tree block during leaf/node split

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Filipe Manana commit a6279470762c19ba97e454f90798373dccdf6148 upstream. When splitting a leaf or node from one of the trees that are modified when flushing pending block groups (extent, chunk,

[PATCH 4.20 69/80] mm/hugetlb.c: teach follow_hugetlb_page() to handle FOLL_NOWAIT

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Andrea Arcangeli commit 1ac25013fb9e4ed595cd608a406191e93520881e upstream. hugetlb needs the same fix as faultin_nopage (which was applied in commit 96312e61282a ("mm/gup.c: teach get_user_pag

[PATCH 4.20 33/80] virtio_net: Differentiate sk_buff and xdp_frame on freeing

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Toshiaki Makita [ Upstream commit 5050471d35d1316ba32dfcbb409978337eb9e75e I had to fold commit df133f3f9625 ("virtio_net: bulk free tx skbs") into this to make it work. ] We do not rese

[PATCH 4.20 51/80] gpio: pcf857x: Fix interrupts on multiple instances

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Roger Quadros commit 2486e67374aa8b7854c2de32869642c2873b3d53 upstream. When multiple instances of pcf857x chips are present, a fix up message [1] is printed during the probe of the 2nd and la

[PATCH 4.20 37/80] CIFS: Fix trace command logging for SMB2 reads and writes

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Pavel Shilovsky commit 7d42e72fe8ee5ab70b1af843dd7d8615e6fb0abe upstream. Currently we log success once we send an async IO request to the server. Instead we need to analyse a response and the

[PATCH 4.20 62/80] IB/hfi1: Remove overly conservative VM_EXEC flag check

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Michael J. Ruhl commit 7709b0dc265f28695487712c45f02bbd1f98415d upstream. Applications that use the stack for execution purposes cause userspace PSM jobs to fail during mmap(). Both Fortran (

[PATCH 4.20 64/80] platform/x86: asus-nb-wmi: Map 0x35 to KEY_SCREENLOCK

4.20-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit b3f2f3799a972d3863d0fdc2ab6287aef6ca631f ] When the OS registers to handle events from the display off hotkey the EC will send a notification with 0x35 for every key press, independe

[PATCH 4.20 38/80] CIFS: fix use-after-free of the lease keys

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Aurelien Aptel commit d339adc12a4f885b572c5412e4869af8939db854 upstream. The request buffers are freed right before copying the pointers. Use the func args instead which are identical and stil

[PATCH 4.20 26/80] net: tls: Save iv in tls_rec for async crypto requests

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Dave Watson [ Upstream commit 32eb67b93c9e3cd62cb423e30b090cdd4aa8d275 ] aead_request_set_crypt takes an iv pointer, and we change the iv soon after setting it. Some async crypto algorithms d

[PATCH 4.20 29/80] virtio_net: Fix not restoring real_num_rx_queues

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Toshiaki Makita [ Upstream commit 188313c137c4f76afd0862f50dbc185b198b9e2a ] When _virtnet_set_queues() failed we did not restore real_num_rx_queues. Fix this by placing the change of real_num

[PATCH 4.20 60/80] IB/uverbs: Fix OOPs upon device disassociation

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Yishai Hadas commit 425784aa5b029eeb80498c73a68f62c3ad1d3b3f upstream. The async_file might be freed before the disassociation has been ended, causing qp shutdown to use after free on it. Sin

[PATCH 4.20 54/80] gfs2: Revert "Fix loop in gfs2_rbm_find"

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Andreas Gruenbacher commit e74c98ca2d6ae4376cc15fa2a22483430909d96b upstream. This reverts commit 2d29f6b96d8f80322ed2dd895bca590491c38d34. It turns out that the fix can lead to a ~20 percent

[PATCH 4.20 58/80] ALSA: hda/realtek - Fixed hp_pin no value

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Kailang Yang commit 693abe11aa6b27aed6eb8222162f8fb986325cef upstream. Fix hp_pin always no value. [More notes on the changes: The hp_pin value that is referred in alc294_hp_init() is alway

[PATCH 4.20 75/80] of: overlay: add tests to validate kfrees from overlay removal

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Frank Rowand commit 144552c786925314c1e7cb8f91a71dae1aca8798 upstream. Add checks: - attempted kfree due to refcount reaching zero before overlay is removed - properties linked to an o

<    2   3   4   5   6   7   8   9   10   11   >