[PATCH 4.20 00/52] 4.20.17-stable review

-- NOTE, this is going to be the LAST 4.20.y release. After this one, 4.20 will be end-of-life. Please move to the 5.0.y tree at this point in time, or let me know why that is not possible. -- This is the start of the stable review cycle for the 4.20.17 release. T

[PATCH 0/2] w1: DS2408 fixes

Hi, I prepared a two fixes related with 1wire and DS2408. In short the problem was that a single DS2408 slave was properly setting the output value to a channel access write but the command was returning error. Moreover when there was a write of a 0xff value (all inputs off, there was also no pro

[PATCH 5.0 09/43] net: hsr: fix memory leak in hsr_dev_finalize()

5.0-stable review patch. If anyone has any objections, please let me know. -- From: Mao Wenan [ Upstream commit 3dc6da493a29dbeda9f13b637bd9c02c414b2261 ] If hsr_add_port(hsr, hsr_dev, HSR_PT_MASTER) failed to add port, it directly returns res and forgets to free the node that

[PATCH 4.20 04/52] l2tp: fix infoleak in l2tp_ip6_recvmsg()

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 163d1c3d6f17556ed3c340d3789ea93be95d6c28 ] Back in 2013 Hannes took care of most of such leaks in commit bceaa90240b6 ("inet: prevent leakage of uninitialized me

[PATCH 4.20 01/52] connector: fix unsafe usage of ->real_parent

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Li RongQing [ Upstream commit 6d2b0f02f5a07a4bf02e4cbc90d7eaa85cac2986 ] proc_exit_connector() uses ->real_parent lockless. This is not safe that its parent can go away at any moment, so use R

[PATCH 4.20 21/52] vxlan: Fix GRO cells race condition between receive and link delete

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Stefano Brivio [ Upstream commit ad6c9986bcb627c7c22b8f9e9a934becc27df87c ] If we receive a packet while deleting a VXLAN device, there's a chance vxlan_rcv() is called at the same time as vxl

[PATCH 4.20 20/52] tcp: handle inet_csk_reqsk_queue_add() failures

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Guillaume Nault [ Upstream commit 9d3e1368bb45893a75a5dfb7cd21fdebfa6b47af ] Commit 7716682cc58e ("tcp/dccp: fix another race at listener dismantle") let inet_csk_reqsk_queue_add() fail, and

[PATCH 4.20 26/52] net: sched: flower: insert new filter to idr after setting its mask

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Vlad Buslov [ Upstream commit ecb3dea400d3beaf611ce76ac7a51d4230492cf2 ] When adding new filter to flower classifier, fl_change() inserts it to handle_idr before initializing filter extensions

[PATCH 4.20 28/52] net/x25: fix a race in x25_bind()

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 797a22bd5298c2674d927893f46cadf619dad11d ] syzbot was able to trigger another soft lockup [1] I first thought it was the O(N^2) issue I mentioned in my prior fi

[PATCH 4.20 27/52] tcp: repaired skbs must init their tso_segs

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit bf50b606cfd85ac8d3d0adb711f3e22204059848 ] syzbot reported a WARN_ON(!tcp_skb_pcount(skb)) in tcp_send_loss_probe() [1] This was caused by TCP_REPAIR sent skbs

[PATCH 4.20 17/52] sctp: remove sched init from sctp_stream_init

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit 2e990dfd13974d9eae493006f42ffb48707970ef ] syzbot reported a NULL-ptr deref caused by that sched->init() in sctp_stream_init() set stream->rr_next = NULL. kasan:

[PATCH 4.20 24/52] net/mlx4_core: Fix locking in SRIOV mode when switching between events and polling

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Jack Morgenstein [ Upstream commit c07d27927f2f2e96fcd27bb9fb330c9ea65612d0 ] In procedures mlx4_cmd_use_events() and mlx4_cmd_use_polling(), we need to guarantee that there are no FW commands

[PATCH 4.20 22/52] vxlan: test dev->flags & IFF_UP before calling gro_cells_receive()

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 59cbf56fcd98ba2a715b6e97c4e43f773f956393 ] Same reasons than the ones explained in commit 4179cb5a4c92 ("vxlan: test dev->flags & IFF_UP before calling netif_rx(

[PATCH 4.20 06/52] lan743x: Fix TX Stall Issue

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Bryan Whitehead [ Upstream commit deb6bfabdbb634e91f36a4e9cb00a7137d72d886 ] It has been observed that tx queue may stall while downloading from certain web sites (example www.speedtest.net)

[PATCH 4.20 30/52] net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Kalash Nainwal [ Upstream commit 97f0082a0592212fc15d4680f5a4d80f79a1687c ] Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255 to keep legacy software happy. This is similar to what wa

[PATCH 4.20 16/52] rxrpc: Fix client call queueing, waiting for channel

4.20-stable review patch. If anyone has any objections, please let me know. -- From: David Howells [ Upstream commit 69ffaebb90369ce08657b5aea4896777b9d6e8fc ] rxrpc_get_client_conn() adds a new call to the front of the waiting_calls queue if the connection it's going to use a

[PATCH 4.20 23/52] net/mlx4_core: Fix reset flow when in command polling mode

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Jack Morgenstein [ Upstream commit e15ce4b8d11227007577e6dc1364d288b8874fbe ] As part of unloading a device, the driver switches from FW command event mode to FW command polling mode. Part of

[PATCH 4.20 31/52] ipv6: route: purge exception on removal

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Abeni [ Upstream commit f5b51fe804ec2a6edce0f8f6b11ea57283f5857b ] When a netdevice is unregistered, we flush the relevant exception via rt6_sync_down_dev() -> fib6_ifdown() -> fib6_del(

[PATCH 4.20 07/52] net: hns3: add dma_rmb() for rx description

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Jian Shen [ Upstream commit d394d33bee22421b39a0bcdc51ca6d68ba308625 ] HW can not guarantee complete write desc->rx.size, even though HNS3_RXD_VLD_B has been set. Driver needs to add dma_rmb()

[PATCH 4.20 19/52] tcp: Dont access TCP_SKB_CB before initializing it

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Christoph Paasch [ Upstream commit f2feaefdabb0a6253aa020f65e7388f07a9ed47c ] Since commit eeea10b83a13 ("tcp: add tcp_v4_fill_cb()/tcp_v4_restore_cb()"), tcp_vX_fill_cb is only called after t

[PATCH 4.20 32/52] team: use operstate consistently for linkup

4.20-stable review patch. If anyone has any objections, please let me know. -- From: George Wilkie [ Upstream commit 8c7a77267eec81dd81af8412f29e50c0b1082548 ] When a port is added to a team, its initial state is derived from netif_carrier_ok rather than netif_oper_up. If it i

[PATCH 4.20 38/52] missing barriers in some of unix_sock ->addr and ->path accesses

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Al Viro [ Upstream commit ae3b564179bfd06f32d051b9e5d72ce4b2a07c37 ] Several u->addr and u->path users are not holding any locks in common with unix_bind(). unix_state_lock() is useless for t

[PATCH 4.20 44/52] ALSA: hda - add more quirks for HP Z2 G4 and HP Z240

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Jaroslav Kysela commit 167897f4b32c2bc18b3b6183029a33fb420a114e upstream. Apply the HP_MIC_NO_PRESENCE fixups for the more HP Z2 G4 and HP Z240 models. Reported-by: Jeff Burrell Signed-off-b

[PATCH 4.20 33/52] ipvlan: disallow userns cap_net_admin to change global mode/flags

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann [ Upstream commit 7cc9f7003a969d359f608ebb701d42cafe75b84a ] When running Docker with userns isolation e.g. --userns-remap="default" and spawning up some containers with CAP_NE

[PATCH 4.20 41/52] ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit 7dc661bd8d3261053b69e4e2d0050cd1ee540fc1 upstream. ALSA bebob driver has an entry for Focusrite Saffire Pro 10 I/O. The entry matches vendor_id in root directory and mo

[PATCH 4.20 09/52] net/hsr: fix possible crash in add_timer()

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 1e027960edfaa6a43f9ca31081729b716598112b ] syzbot found another add_timer() issue, this time in net/hsr [1] Let's use mod_timer() which is safe. [1] kernel BUG

[PATCH 4.20 46/52] ALSA: hda/realtek - Reduce click noise on Dell Precision 5820 headphone

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit c0ca5eced22215c1e03e3ad479f8fab0bbb30772 upstream. Dell Precision 5820 with ALC3234 codec (which is equivalent with ALC255) shows click noises at (runtime) PM resume on the

[PATCH 4.20 47/52] ALSA: hda/realtek: Enable headset MIC of Acer TravelMate X514-51T with ALC255

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Jian-Hong Pan commit cbc05fd6708c1744ee6a61cb4c461ff956d30524 upstream. The Acer TravelMate X514-51T with ALC255 cannot detect the headset MIC until ALC255_FIXUP_ACER_HEADSET_MIC quirk applied

[PATCH 4.20 40/52] perf/x86: Fixup typo in stub functions

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit f764c58b7faa26f5714e6907f892abc2bc0de4f8 upstream. Guenter reported a build warning for CONFIG_CPU_SUP_INTEL=n: > With allmodconfig-CONFIG_CPU_SUP_INTEL, this patch re

[PATCH 4.20 37/52] net/smc: fix smc_poll in SMC_INIT state

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Ursula Braun [ Upstream commit d7cf4a3bf3a83c977a29055e1c4ffada7697b31f ] smc_poll() returns with mask bit EPOLLPRI if the connection urg_state is SMC_URG_VALID. Since SMC_URG_VALID is zero, s

[PATCH 4.20 39/52] f2fs: wait on atomic writes to count F2FS_CP_WB_DATA

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Jaegeuk Kim commit 31867b23d7d1ee3535136c6a410a6cf56f666bfc upstream. Otherwise, we can get wrong counts incurring checkpoint hang. IO_W (CP: -24, Data: 24, Flush: ( 001), Discar

[PATCH 4.20 42/52] ALSA: firewire-motu: fix construction of PCM frame for capture direction

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit f97a0944a72b26a2bece72516294e112a890f98a upstream. In data blocks of common isochronous packet for MOTU devices, PCM frames are multiplexed in a shape of '24 bit * 4 Au

[PATCH 4.20 49/52] perf/x86/intel: Make dev_attr_allow_tsx_force_abort static

4.20-stable review patch. If anyone has any objections, please let me know. -- From: kbuild test robot commit c634dc6bdedeb0b2c750fc611612618a85639ab2 upstream. Fixes: 400816f60c54 ("perf/x86/intel: Implement support for TSX Force Abort") Signed-off-by: kbuild test robot Sign

[PATCH 4.20 10/52] net: sit: fix UBSAN Undefined behaviour in check_6rd

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Miaohe Lin [ Upstream commit a843dc4ebaecd15fca1f4d35a97210f72ea1473b ] In func check_6rd,tunnel->ip6rd.relay_prefixlen may equal to 32,so UBSAN complain about it. UBSAN: Undefined behaviour

[PATCH 4.20 50/52] Its wrong to add len to sector_nr in raid10 reshape twice

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Xiao Ni commit b761dcf1217760a42f7897c31dcb649f59b2333e upstream. In reshape_request it already adds len to sector_nr already. It's wrong to add len to sector_nr again after adding pages to b

[PATCH 4.20 14/52] ravb: Decrease TxFIFO depth of Q3 and Q2 to one

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Masaru Nagai [ Upstream commit ae9819e339b451da7a86ab6fe38ecfcb6814e78a ] Hardware has the CBS (Credit Based Shaper) which affects only Q3 and Q2. When updating the CBS settings, even if the d

[PATCH 4.20 51/52] drm: Block fb changes for async plane updates

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Kazlauskas commit 25dc194b34dd5919dd07b8873ee338182e15df9d upstream. The prepare_fb call always happens on new_plane_state. The drm_atomic_helper_cleanup_planes checks to see if plan

[PATCH 4.19 13/52] ravb: Decrease TxFIFO depth of Q3 and Q2 to one

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Masaru Nagai [ Upstream commit ae9819e339b451da7a86ab6fe38ecfcb6814e78a ] Hardware has the CBS (Credit Based Shaper) which affects only Q3 and Q2. When updating the CBS settings, even if the d

[PATCH 4.19 16/52] sctp: remove sched init from sctp_stream_init

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit 2e990dfd13974d9eae493006f42ffb48707970ef ] syzbot reported a NULL-ptr deref caused by that sched->init() in sctp_stream_init() set stream->rr_next = NULL. kasan:

[PATCH 4.20 13/52] pptp: dst_release sk_dst_cache in pptp_sock_destruct

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit 9417d81f4f8adfe20a12dd1fadf73a618cbd945d ] sk_setup_caps() is called to set sk->sk_dst_cache in pptp_connect, so we have to dst_release(sk->sk_dst_cache) in pptp_soc

[PATCH 4.19 02/52] gro_cells: make sure device is up in gro_cells_receive()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 2a5ff07a0eb945f291e361aa6f6becca8340ba46 ] We keep receiving syzbot reports [1] that show that tunnels do not play the rcu/IFF_UP rules properly. At device dism

[PATCH 4.19 10/52] net/x25: fix use-after-free in x25_device_event()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 95d6ebd53c79522bf9502dbc7e89e0d63f94dae4 ] In case of failure x25_connect() does a x25_neigh_put(x25->neighbour) but forgets to clear x25->neighbour pointer, thu

[PATCH 4.19 11/52] net/x25: reset state in x25_connect()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit ee74d0bd4325efb41e38affe5955f920ed973f23 ] In case x25_connect() fails and frees the socket neighbour, we also need to undo the change done to x25->state. Befor

[PATCH 4.19 15/52] rxrpc: Fix client call queueing, waiting for channel

4.19-stable review patch. If anyone has any objections, please let me know. -- From: David Howells [ Upstream commit 69ffaebb90369ce08657b5aea4896777b9d6e8fc ] rxrpc_get_client_conn() adds a new call to the front of the waiting_calls queue if the connection it's going to use a

RE: [PATCH 2/2] platform/x86: intel_pmc_core: Allow to dump debug registers on S0ix failure

>-Original Message- >From: Rajat Jain >Sent: Thursday, March 14, 2019 3:51 AM >To: Bhardwaj, Rajneesh ; Somayaji, Vishwanath >; Darren Hart ; Andy >Shevchenko ; platform-driver-...@vger.kernel.org; linux- >ker...@vger.kernel.org >Cc: Rajat Jain ; furq...@google.com; >evgr...@google.com;

[PATCH 4.19 18/52] tcp: Dont access TCP_SKB_CB before initializing it

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Christoph Paasch [ Upstream commit f2feaefdabb0a6253aa020f65e7388f07a9ed47c ] Since commit eeea10b83a13 ("tcp: add tcp_v4_fill_cb()/tcp_v4_restore_cb()"), tcp_vX_fill_cb is only called after t

[PATCH 4.19 20/52] vxlan: Fix GRO cells race condition between receive and link delete

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Stefano Brivio [ Upstream commit ad6c9986bcb627c7c22b8f9e9a934becc27df87c ] If we receive a packet while deleting a VXLAN device, there's a chance vxlan_rcv() is called at the same time as vxl

[PATCH 4.19 23/52] net/mlx4_core: Fix locking in SRIOV mode when switching between events and polling

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Jack Morgenstein [ Upstream commit c07d27927f2f2e96fcd27bb9fb330c9ea65612d0 ] In procedures mlx4_cmd_use_events() and mlx4_cmd_use_polling(), we need to guarantee that there are no FW commands

[PATCH 4.19 24/52] net/mlx4_core: Fix qp mtt size calculation

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Jack Morgenstein [ Upstream commit 8511a653e9250ef36b95803c375a7be0e2edb628 ] Calculation of qp mtt size (in function mlx4_RST2INIT_wrapper) ultimately depends on function roundup_pow_of_two.

[PATCH 4.19 26/52] mdio_bus: Fix use-after-free on device_register fails

4.19-stable review patch. If anyone has any objections, please let me know. -- From: YueHaibing [ Upstream commit 6ff7b060535e87c2ae14dd8548512abfdda528fb ] KASAN has found use-after-free in fixed_mdio_bus_init, commit 0c692d07842a ("drivers/net/phy/mdio_bus.c: call put_device

[PATCH 4.19 29/52] team: use operstate consistently for linkup

4.19-stable review patch. If anyone has any objections, please let me know. -- From: George Wilkie [ Upstream commit 8c7a77267eec81dd81af8412f29e50c0b1082548 ] When a port is added to a team, its initial state is derived from netif_carrier_ok rather than netif_oper_up. If it i

[PATCH 4.19 21/52] vxlan: test dev->flags & IFF_UP before calling gro_cells_receive()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 59cbf56fcd98ba2a715b6e97c4e43f773f956393 ] Same reasons than the ones explained in commit 4179cb5a4c92 ("vxlan: test dev->flags & IFF_UP before calling netif_rx(

[PATCH 4.19 28/52] ipv6: route: purge exception on removal

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Abeni [ Upstream commit f5b51fe804ec2a6edce0f8f6b11ea57283f5857b ] When a netdevice is unregistered, we flush the relevant exception via rt6_sync_down_dev() -> fib6_ifdown() -> fib6_del(

[PATCH 4.19 32/52] ipv6: route: enforce RCU protection in ip6_route_check_nh_onlink()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Abeni [ Upstream commit bf1dc8bad1d42287164d216d8efb51c5cd381b18 ] We need a RCU critical section around rt6_info->from deference, and proper annotation. Fixes: 4ed591c8ab44 ("net/ipv6:

[PATCH 4.19 03/52] ipv4/route: fail early when inet dev is missing

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Abeni [ Upstream commit 22c74764aa2943ecdf9f07c900d8a9c8ba6c9265 ] If a non local multicast packet reaches ip_route_input_rcu() while the ingress device IPv4 private data (in_dev) is NUL

[PATCH 4.19 30/52] ipvlan: disallow userns cap_net_admin to change global mode/flags

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann [ Upstream commit 7cc9f7003a969d359f608ebb701d42cafe75b84a ] When running Docker with userns isolation e.g. --userns-remap="default" and spawning up some containers with CAP_NE

[PATCH 4.19 34/52] net/smc: fix smc_poll in SMC_INIT state

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Ursula Braun [ Upstream commit d7cf4a3bf3a83c977a29055e1c4ffada7697b31f ] smc_poll() returns with mask bit EPOLLPRI if the connection urg_state is SMC_URG_VALID. Since SMC_URG_VALID is zero, s

[PATCH 4.19 04/52] l2tp: fix infoleak in l2tp_ip6_recvmsg()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 163d1c3d6f17556ed3c340d3789ea93be95d6c28 ] Back in 2013 Hannes took care of most of such leaks in commit bceaa90240b6 ("inet: prevent leakage of uninitialized me

[PATCH 4.19 06/52] lan743x: Fix TX Stall Issue

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Bryan Whitehead [ Upstream commit deb6bfabdbb634e91f36a4e9cb00a7137d72d886 ] It has been observed that tx queue may stall while downloading from certain web sites (example www.speedtest.net)

[PATCH 4.19 35/52] missing barriers in some of unix_sock ->addr and ->path accesses

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Al Viro [ Upstream commit ae3b564179bfd06f32d051b9e5d72ce4b2a07c37 ] Several u->addr and u->path users are not holding any locks in common with unix_bind(). unix_state_lock() is useless for t

[PATCH 4.19 49/52] drm: Block fb changes for async plane updates

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Kazlauskas commit 25dc194b34dd5919dd07b8873ee338182e15df9d upstream. The prepare_fb call always happens on new_plane_state. The drm_atomic_helper_cleanup_planes checks to see if plan

[PATCH 4.19 41/52] ALSA: hda: Extend i915 component bind timeout

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit cfc35f9c128cea8fce6a5513b1de50d36f3b209f upstream. I set 10 seconds for the timeout of the i915 audio component binding with a hope that recent machines are fast enough to

Re: [External] Re: vmscan: Reclaim unevictable pages

Hi, Pankaj, On 18.03.2019 12:09, Pankaj Suryawanshi wrote: > > Hello > > shrink_page_list() returns , number of pages reclaimed, when pages is > unevictable it returns VM_BUG_ON_PAGE(PageLRU(page) || > PageUnevicatble(page),page); the general idea is shrink_page_list() can't iterate PageUnevi

[PATCH 4.19 08/52] net/hsr: fix possible crash in add_timer()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 1e027960edfaa6a43f9ca31081729b716598112b ] syzbot found another add_timer() issue, this time in net/hsr [1] Let's use mod_timer() which is safe. [1] kernel BUG

[PATCH 4.19 00/52] 4.19.30-stable review

This is the start of the stable review cycle for the 4.19.30 release. There are 52 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Mar 20 08:39:59 UTC 2019. Anything receiv

[PATCH 4.19 37/52] f2fs: wait on atomic writes to count F2FS_CP_WB_DATA

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Jaegeuk Kim commit 31867b23d7d1ee3535136c6a410a6cf56f666bfc upstream. Otherwise, we can get wrong counts incurring checkpoint hang. IO_W (CP: -24, Data: 24, Flush: ( 001), Discar

[PATCH 4.19 07/52] net: hsr: fix memory leak in hsr_dev_finalize()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Mao Wenan [ Upstream commit 3dc6da493a29dbeda9f13b637bd9c02c414b2261 ] If hsr_add_port(hsr, hsr_dev, HSR_PT_MASTER) failed to add port, it directly returns res and forgets to free the node tha

[PATCH 4.19 48/52] Its wrong to add len to sector_nr in raid10 reshape twice

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Xiao Ni commit b761dcf1217760a42f7897c31dcb649f59b2333e upstream. In reshape_request it already adds len to sector_nr already. It's wrong to add len to sector_nr again after adding pages to b

[PATCH 4.19 40/52] ALSA: firewire-motu: fix construction of PCM frame for capture direction

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit f97a0944a72b26a2bece72516294e112a890f98a upstream. In data blocks of common isochronous packet for MOTU devices, PCM frames are multiplexed in a shape of '24 bit * 4 Au

[PATCH 4.19 51/52] i40e: report correct statistics when XDP is enabled

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Björn Töpel commit cdec2141c24ef177d929765c5a6f95549c266fb3 upstream. When XDP is enabled, the driver will report incorrect statistics. Received frames will reported as transmitted frames. Th

[PATCH 4.19 38/52] perf/x86: Fixup typo in stub functions

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit f764c58b7faa26f5714e6907f892abc2bc0de4f8 upstream. Guenter reported a build warning for CONFIG_CPU_SUP_INTEL=n: > With allmodconfig-CONFIG_CPU_SUP_INTEL, this patch re

[PATCH 4.19 39/52] ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit 7dc661bd8d3261053b69e4e2d0050cd1ee540fc1 upstream. ALSA bebob driver has an entry for Focusrite Saffire Pro 10 I/O. The entry matches vendor_id in root directory and mo

[PATCH 4.19 43/52] ALSA: hda/realtek: Enable audio jacks of ASUS UX362FA with ALC294

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Jian-Hong Pan commit 8bb37a2a4d7c02affef554f5dc05f6d2e39c31f9 upstream. The ASUS UX362FA with ALC294 cannot detect the headset MIC and outputs through the internal speaker and the headphone.

[PATCH 4.19 45/52] ALSA: hda/realtek: Enable headset MIC of Acer TravelMate X514-51T with ALC255

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Jian-Hong Pan commit cbc05fd6708c1744ee6a61cb4c461ff956d30524 upstream. The Acer TravelMate X514-51T with ALC255 cannot detect the headset MIC until ALC255_FIXUP_ACER_HEADSET_MIC quirk applied

Re: [PATCH net-next 2/3] net: phy: add amlogic g12a mdio mux support

On Sun, 2019-03-17 at 17:14 +0100, Andrew Lunn wrote: > On Thu, Mar 14, 2019 at 03:01:34PM +0100, Jerome Brunet wrote: > > Add support for the mdio mux and internal phy glue of the g12a SoC family > > > > Signed-off-by: Jerome Brunet > > --- > > drivers/net/phy/Kconfig | 10 + > >

[PATCH 4.14 20/34] net/mlx4_core: Fix locking in SRIOV mode when switching between events and polling

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Jack Morgenstein [ Upstream commit c07d27927f2f2e96fcd27bb9fb330c9ea65612d0 ] In procedures mlx4_cmd_use_events() and mlx4_cmd_use_polling(), we need to guarantee that there are no FW commands

[PATCH 4.14 12/34] ravb: Decrease TxFIFO depth of Q3 and Q2 to one

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Masaru Nagai [ Upstream commit ae9819e339b451da7a86ab6fe38ecfcb6814e78a ] Hardware has the CBS (Credit Based Shaper) which affects only Q3 and Q2. When updating the CBS settings, even if the d

[PATCH 4.14 18/34] vxlan: test dev->flags & IFF_UP before calling gro_cells_receive()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 59cbf56fcd98ba2a715b6e97c4e43f773f956393 ] Same reasons than the ones explained in commit 4179cb5a4c92 ("vxlan: test dev->flags & IFF_UP before calling netif_rx(

[PATCH 4.14 16/34] tcp: handle inet_csk_reqsk_queue_add() failures

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Guillaume Nault [ Upstream commit 9d3e1368bb45893a75a5dfb7cd21fdebfa6b47af ] Commit 7716682cc58e ("tcp/dccp: fix another race at listener dismantle") let inet_csk_reqsk_queue_add() fail, and

[PATCH 4.14 02/34] perf tools: Fix compile error with libunwind x86

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Wang Nan commit 44df1afdb174fd6038e419f80efd914c0b5f2f85 upstream. Fix a compile error: ... CC util/libunwind/x86_32.o In file included from util/libunwind/x86_32.c:33:0: util/lib

[PATCH 4.14 15/34] tcp: Dont access TCP_SKB_CB before initializing it

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Christoph Paasch [ Upstream commit f2feaefdabb0a6253aa020f65e7388f07a9ed47c ] Since commit eeea10b83a13 ("tcp: add tcp_v4_fill_cb()/tcp_v4_restore_cb()"), tcp_vX_fill_cb is only called after t

[PATCH 4.14 14/34] rxrpc: Fix client call queueing, waiting for channel

4.14-stable review patch. If anyone has any objections, please let me know. -- From: David Howells [ Upstream commit 69ffaebb90369ce08657b5aea4896777b9d6e8fc ] rxrpc_get_client_conn() adds a new call to the front of the waiting_calls queue if the connection it's going to use a

[PATCH 4.14 13/34] route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit ee60ad219f5c7c4fb2f047f88037770063ef785f ] The race occurs in __mkroute_output() when 2 threads lookup a dst: CPU A CPU B find_exception()

[PATCH 4.14 25/34] bonding: fix PACKET_ORIGDEV regression

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Michal Soltys [ Upstream commit 3c963a3306eada999be5ebf4f293dfa3d3945487 ] This patch fixes a subtle PACKET_ORIGDEV regression which was a side effect of fixes introduced by: 6a9e461f6fe4 bon

[PATCH 4.14 17/34] vxlan: Fix GRO cells race condition between receive and link delete

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Stefano Brivio [ Upstream commit ad6c9986bcb627c7c22b8f9e9a934becc27df87c ] If we receive a packet while deleting a VXLAN device, there's a chance vxlan_rcv() is called at the same time as vxl

[PATCH 4.14 05/34] l2tp: fix infoleak in l2tp_ip6_recvmsg()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 163d1c3d6f17556ed3c340d3789ea93be95d6c28 ] Back in 2013 Hannes took care of most of such leaks in commit bceaa90240b6 ("inet: prevent leakage of uninitialized me

[PATCH 4.14 33/34] Its wrong to add len to sector_nr in raid10 reshape twice

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Xiao Ni commit b761dcf1217760a42f7897c31dcb649f59b2333e upstream. In reshape_request it already adds len to sector_nr already. It's wrong to add len to sector_nr again after adding pages to b

[PATCH 4.14 29/34] ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit 7dc661bd8d3261053b69e4e2d0050cd1ee540fc1 upstream. ALSA bebob driver has an entry for Focusrite Saffire Pro 10 I/O. The entry matches vendor_id in root directory and mo

[PATCH 4.14 03/34] gro_cells: make sure device is up in gro_cells_receive()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 2a5ff07a0eb945f291e361aa6f6becca8340ba46 ] We keep receiving syzbot reports [1] that show that tunnels do not play the rcu/IFF_UP rules properly. At device dism

[PATCH 4.14 26/34] missing barriers in some of unix_sock ->addr and ->path accesses

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Al Viro [ Upstream commit ae3b564179bfd06f32d051b9e5d72ce4b2a07c37 ] Several u->addr and u->path users are not holding any locks in common with unix_bind(). unix_state_lock() is useless for t

Re: [PATCH] x86/kvm/hyper-v: avoid spurious pending stimer on vCPU init

On Wed, Mar 13, 2019 at 06:13:42PM +0100, Vitaly Kuznetsov wrote: > When userspace initializes guest vCPUs it may want to zero all supported > MSRs including Hyper-V related ones including HV_X64_MSR_STIMERn_CONFIG/ > HV_X64_MSR_STIMERn_COUNT. With commit f3b138c5d89a ("kvm/x86: Update SynIC > time

[PATCH 4.14 30/34] ALSA: firewire-motu: fix construction of PCM frame for capture direction

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit f97a0944a72b26a2bece72516294e112a890f98a upstream. In data blocks of common isochronous packet for MOTU devices, PCM frames are multiplexed in a shape of '24 bit * 4 Au

[PATCH 4.14 04/34] ipv4/route: fail early when inet dev is missing

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Abeni [ Upstream commit 22c74764aa2943ecdf9f07c900d8a9c8ba6c9265 ] If a non local multicast packet reaches ip_route_input_rcu() while the ingress device IPv4 private data (in_dev) is NUL

[PATCH 4.14 28/34] perf/x86: Fixup typo in stub functions

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit f764c58b7faa26f5714e6907f892abc2bc0de4f8 upstream. Guenter reported a build warning for CONFIG_CPU_SUP_INTEL=n: > With allmodconfig-CONFIG_CPU_SUP_INTEL, this patch re

[PATCH 4.14 23/34] mdio_bus: Fix use-after-free on device_register fails

4.14-stable review patch. If anyone has any objections, please let me know. -- From: YueHaibing [ Upstream commit 6ff7b060535e87c2ae14dd8548512abfdda528fb ] KASAN has found use-after-free in fixed_mdio_bus_init, commit 0c692d07842a ("drivers/net/phy/mdio_bus.c: call put_device

[PATCH 4.14 22/34] net/x25: fix a race in x25_bind()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 797a22bd5298c2674d927893f46cadf619dad11d ] syzbot was able to trigger another soft lockup [1] I first thought it was the O(N^2) issue I mentioned in my prior fi

[PATCH 4.9 12/31] tcp: handle inet_csk_reqsk_queue_add() failures

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Guillaume Nault [ Upstream commit 9d3e1368bb45893a75a5dfb7cd21fdebfa6b47af ] Commit 7716682cc58e ("tcp/dccp: fix another race at listener dismantle") let inet_csk_reqsk_queue_add() fail, and a

[PATCH 4.9 11/31] route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit ee60ad219f5c7c4fb2f047f88037770063ef785f ] The race occurs in __mkroute_output() when 2 threads lookup a dst: CPU A CPU B find_exception()

[PATCH 4.14 09/34] net/x25: fix use-after-free in x25_device_event()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 95d6ebd53c79522bf9502dbc7e89e0d63f94dae4 ] In case of failure x25_connect() does a x25_neigh_put(x25->neighbour) but forgets to clear x25->neighbour pointer, thu

[PATCH 4.14 06/34] net: hsr: fix memory leak in hsr_dev_finalize()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Mao Wenan [ Upstream commit 3dc6da493a29dbeda9f13b637bd9c02c414b2261 ] If hsr_add_port(hsr, hsr_dev, HSR_PT_MASTER) failed to add port, it directly returns res and forgets to free the node tha

<    1   2   3   4   5   6   7   8   9   10   >