From patchwork Tue Aug 18 20:24:51 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Kamal Mostafa X-Patchwork-Id: 1347266 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=none (no SPF record) smtp.mailfrom=lists.ubuntu.com (client-ip=91.189.94.19; helo=huckleberry.canonical.com; envelope-from=kernel-team-bounces@lists.ubuntu.com; receiver=) Authentication-Results: ozlabs.org; dmarc=fail (p=none dis=none) header.from=canonical.com Received: from huckleberry.canonical.com (huckleberry.canonical.com [91.189.94.19]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 4BWMpm3TPZz9sPC; Wed, 19 Aug 2020 06:25:04 +1000 (AEST) Received: from localhost ([127.0.0.1] helo=huckleberry.canonical.com) by huckleberry.canonical.com with esmtp (Exim 4.86_2) (envelope-from ) id 1k88AG-0007zW-UN; Tue, 18 Aug 2020 20:25:00 +0000 Received: from youngberry.canonical.com ([91.189.89.112]) by huckleberry.canonical.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.86_2) (envelope-from ) id 1k88AE-0007zJ-O7 for kernel-team@lists.ubuntu.com; Tue, 18 Aug 2020 20:24:58 +0000 Received: from 3.general.kamal.us.vpn ([10.172.68.53] helo=ascalon) by youngberry.canonical.com with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.86_2) (envelope-from ) id 1k88AE-0003BF-66 for kernel-team@lists.ubuntu.com; Tue, 18 Aug 2020 20:24:58 +0000 Received: from kamal by ascalon with local (Exim 4.90_1) (envelope-from ) id 1k88AB-0006b9-2Y for kernel-team@lists.ubuntu.com; Tue, 18 Aug 2020 13:24:55 -0700 From: Kamal Mostafa To: kernel-team@lists.ubuntu.com Subject: [SRU][Bionic][PULL] Bionic upstream stable patchset 2020-08-18+ Date: Tue, 18 Aug 2020 13:24:51 -0700 Message-Id: <20200818202451.25201-1-kamal@canonical.com> X-Mailer: git-send-email 2.17.1 X-BeenThere: kernel-team@lists.ubuntu.com X-Mailman-Version: 2.1.20 Precedence: list List-Id: Kernel team discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Errors-To: kernel-team-bounces@lists.ubuntu.com Sender: "kernel-team" This pull request (117 commits) includes the following Bionic stable patchsets: Bionic update: upstream stable patchset 2020-08-11 Ported from the following upstream stable releases: v4.14.191, v4.19.136, v4.14.192, v4.19.137, v4.14.193, v4.19.138 https://bugs.launchpad.net/bugs/1891228 Bionic update: upstream stable patchset 2020-08-18 Ported from the following upstream stable releases: v4.19.139 https://bugs.launchpad.net/bugs/1892091 -Kamal ----- The following changes since commit f4daf25f7f8608d1c14c85ea0b73c9e1e1eb2dba: UBUNTU: Ubuntu-4.15.0-114.115 (2020-08-11 10:58:21 +0200) are available in the Git repository at: git://kernel.ubuntu.com/ubuntu-stable/ubuntu-stable-bionic.git stable-next for you to fetch changes up to 20c1c8487a8d0874cb998a44200d03065ad5457e: UBUNTU: upstream stable to v4.19.139 (2020-08-18 11:35:18 -0700) ---------------------------------------------------------------- Adam Ford (1): omapfb: dss: Fix max fclk divider for omap36xx Andrea Righi (1): xen-netfront: fix potential deadlock in xennet_remove() Andrii Nakryiko (1): bpf: Fix map leak in HASH_OF_MAPS map Ben Skeggs (2): drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure Christoph Hellwig (1): net/9p: validate fds in p9_fd_open Cong Wang (2): qrtr: orphan socket in qrtr_release() ipv6: fix memory leaks on IPV6_ADDRFORM path Dan Carpenter (1): AX.25: Prevent integer overflows in connect and sendmsg David Howells (2): rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA rxrpc: Fix race between recvmsg and sendmsg on immediate call failure Dexuan Cui (1): Drivers: hv: vmbus: Ignore CHANNELMSG_TL_CONNECT_RESULT(23) Dominique Martinet (1): 9p/trans_fd: abort p9_read_work if req status changed Eran Ben Elisha (1): net/mlx5: Verify Hardware supports requested ptp function on a given pin Eric Biggers (1): Smack: fix use-after-free in smk_write_relabel_self() Erik Ekman (1): USB: serial: qcserial: add EM7305 QDL product ID Forest Crossman (2): usb: xhci: define IDs for various ASMedia host controllers usb: xhci: Fix ASMedia ASM1142 DMA addressing Francesco Ruggeri (1): igb: reinit_locked() should be called with rtnl_lock Frank van der Linden (1): xattr: break delegations in {set,remove}xattr Geert Uytterhoeven (1): usb: hso: Fix debug compile warning on sparc32 Greg Kroah-Hartman (2): USB: iowarrior: fix up report size handling for some devices mtd: properly check all write ioctls for permissions Grygorii Strashko (1): ARM: percpu.h: fix build error Grzegorz Siwik (1): i40e: Wrong truncation from u16 to u8 Hangbin Liu (1): Revert "vxlan: fix tos value before xmit" Hui Wang (1): Revert "ALSA: hda: call runtime_allow() for all hda controllers" Ido Schimmel (4): mlxsw: core: Increase scope of RCU read-side critical section mlxsw: core: Free EMAD transactions using kfree_rcu() ipv4: Silence suspicious RCU usage warning vxlan: Ensure FDB dump is performed under RCU Jaegeuk Kim (1): f2fs: check memory boundary by insane namelen Jakub Kicinski (1): mlx4: disable device on shutdown Jann Horn (1): binder: Prevent context manager from incrementing ref 0 Jiang Ying (1): ext4: fix direct I/O read error Johan Hovold (7): net: lan78xx: add missing endpoint sanity check net: lan78xx: fix transfer-buffer memory leak leds: wm831x-status: fix use-after-free on unbind leds: da903x: fix use-after-free on unbind leds: lm3533: fix use-after-free on unbind leds: 88pm860x: fix use-after-free on unbind net: lan78xx: replace bogus endpoint lookup Josh Poimboeuf (1): x86/unwind/orc: Fix ORC for newly forked tasks Julian Squires (1): cfg80211: check vendor command doit pointer before use Kamal Mostafa (4): UBUNTU: upstream stable to v4.14.191, v4.19.136 UBUNTU: upstream stable to v4.14.192, v4.19.137 UBUNTU: upstream stable to v4.14.193, v4.19.138 UBUNTU: upstream stable to v4.19.139 Landen Chao (1): net: ethernet: mtk_eth_soc: fix MTU warnings Laurence Oberman (1): qed: Disable "MFW indication via attention" SPAM every 5 minutes Liam Beguin (1): parisc: add support for cmpxchg on u8 pointers Linus Torvalds (2): random32: remove net_rand_state from the latent entropy gcc plugin random32: move the pseudo-random 32-bit definitions to prandom.h Lorenzo Bianconi (1): net: gre: recompute gre csum for sctp over gre tunnels Martyna Szapar (1): i40e: Memory leak in i40e_config_iwarp_qvlist Miaohe Lin (1): net: udp: Fix wrong clean up for IS_UDPLITE macro Michael Karcher (1): sh: Fix validation of system call number Navid Emamdoost (7): crypto: ccp - Release all allocated memory if sha type is invalid media: rc: prevent memory leak in cx23888_ir_probe ath9k_htc: release allocated buffer if timed out ath9k: release allocated buffer if timed out nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame cxgb4: add missing release on skb in uld_send() drm/amdgpu: fix multiple memory leaks in acp_hw_init Peilin Ye (8): AX.25: Fix out-of-bounds read in ax25_connect() AX.25: Prevent out-of-bounds read in ax25_sendmsg() drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() rds: Prevent kernel-infoleak in rds_notify_queue_get() Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() openvswitch: Prevent kernel-infoleak in ovs_ct_put_key() Peng Fan (1): regmap: debugfs: check count when read regmap file Philippe Duplessis-Guindon (1): tools lib traceevent: Fix memory leak in process_dynamic_array_len Pi-Hsun Shih (1): wireless: Use offsetof instead of custom macro. Qiushi Wu (1): firmware: Fix a reference count leak. Raviteja Narayanam (1): Revert "i2c: cadence: Fix the hold bit setting" Remi Pommarel (2): mac80211: mesh: Free ie data when leaving mesh mac80211: mesh: Free pending skb when destroying a mpath Rik van Riel (1): xfs: fix missed wakeup on l_flush_wait Robert Hancock (1): PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge Robin Murphy (1): arm64: csum: Fix handling of bad packets Rustam Kovhaev (1): usb: hso: check for return value in hso_serial_common_create() Sami Tolvanen (2): x86/build/lto: Fix truncated .bss with -fdata-sections arm64/alternatives: move length validation inside the subsection Sasha Levin (1): iio: imu: adis16400: fix memory leak Sergey Nemov (1): i40e: add num_vectors checker in iwarp handler Sheng Yong (1): f2fs: check if file namelen exceeds max value Stephen Hemminger (1): hv_netvsc: do not use VF device if link is down Steve Cohen (1): drm: hold gem reference until object is no longer accessed Subash Abhinov Kasiviswanathan (1): dev: Defer free of skbs in flush_backlog Suren Baghdasaryan (1): staging: android: ashmem: Fix lockdep warning for write operation Takashi Iwai (1): ALSA: seq: oss: Serialize ioctls Tanner Love (2): selftests/net: rxtimestamp: fix clang issues for target arch PowerPC selftests/net: psock_fanout: fix clang issues for target arch PowerPC Thomas Falcon (1): ibmvnic: Fix IRQ mapping disposal in error path Thomas Gleixner (1): x86/i8259: Use printk_deferred() to prevent deadlock Wang Hai (1): 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work Wanpeng Li (1): KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw disabled Wei Yongjun (1): ip6_gre: fix null-ptr-deref in ip6gre_init_net() Weilong Chen (1): rtnetlink: Fix memory(net_device) leak when ->newlink fails Will Deacon (1): ARM: 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints Willem de Bruijn (1): selftests/net: relax cpu affinity requirement in msg_zerocopy test Willy Tarreau (2): random32: update the net random state on interrupt and activity random: fix circular include dependency on arm64 after addition of percpu.h Wolfram Sang (2): i2c: slave: improve sanity check when registering i2c: slave: add sanity check when unregistering Xie He (1): drivers/net/wan/x25_asy: Fix to make it work Xin Long (2): sctp: shrink stream outq only when new outcnt < old outcnt sctp: shrink stream outq when fails to do addstream reconf Xin Xiong (1): atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent Xiongfeng Wang (1): net-sysfs: add a newline when printing 'tx_timeout' by sysfs Xiyu Yang (1): net/x25: Fix x25_neigh refcnt leak when x25 disconnect Yoshihiro Shimoda (1): net: ethernet: ravb: exit if re-initialization fails in tx timeout Yuchung Cheng (1): tcp: allow at most one TLP probe per flight YueHaibing (1): net/x25: Fix null-ptr-deref in x25_disconnect Yunhai Zhang (1): vgacon: Fix for missing check in scrollback handling arch/arm/include/asm/percpu.h | 2 + arch/arm/kernel/hw_breakpoint.c | 27 ++++- arch/arm64/include/asm/alternative.h | 4 +- arch/arm64/include/asm/checksum.h | 5 +- arch/parisc/include/asm/cmpxchg.h | 2 + arch/parisc/lib/bitops.c | 12 +++ arch/sh/kernel/entry-common.S | 6 +- arch/x86/kernel/i8259.c | 2 +- arch/x86/kernel/unwind_orc.c | 8 +- arch/x86/kernel/vmlinux.lds.S | 2 +- arch/x86/kvm/lapic.c | 2 +- debian.master/upstream-stable | 4 +- drivers/android/binder.c | 15 ++- drivers/atm/atmtcp.c | 10 +- drivers/base/regmap/regmap-debugfs.c | 6 ++ drivers/char/random.c | 1 + drivers/crypto/ccp/ccp-ops.c | 3 +- drivers/firmware/qemu_fw_cfg.c | 7 +- drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 34 ++++--- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 3 +- drivers/gpu/drm/drm_gem.c | 10 +- drivers/gpu/drm/nouveau/nouveau_fbcon.c | 3 +- drivers/hv/channel_mgmt.c | 21 ++-- drivers/hv/vmbus_drv.c | 4 + drivers/i2c/busses/i2c-cadence.c | 9 +- drivers/i2c/i2c-core-slave.c | 7 +- drivers/iio/imu/adis16400_buffer.c | 5 +- drivers/leds/leds-88pm860x.c | 14 ++- drivers/leds/leds-da903x.c | 14 ++- drivers/leds/leds-lm3533.c | 12 ++- drivers/leds/leds-wm831x-status.c | 14 ++- drivers/media/pci/cx23885/cx23888-ir.c | 5 +- drivers/mtd/mtdchar.c | 56 ++++++++-- drivers/net/ethernet/chelsio/cxgb4/sge.c | 1 + drivers/net/ethernet/ibm/ibmvnic.c | 2 +- drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 33 ++++-- drivers/net/ethernet/intel/igb/igb_main.c | 9 ++ drivers/net/ethernet/mediatek/mtk_eth_soc.c | 2 + drivers/net/ethernet/mellanox/mlx4/main.c | 2 + .../net/ethernet/mellanox/mlx5/core/lib/clock.c | 23 ++++- drivers/net/ethernet/mellanox/mlxsw/core.c | 8 +- drivers/net/ethernet/qlogic/qed/qed_int.c | 3 +- drivers/net/ethernet/renesas/ravb_main.c | 26 ++++- drivers/net/hyperv/netvsc_drv.c | 7 +- drivers/net/usb/hso.c | 10 +- drivers/net/usb/lan78xx.c | 113 ++++++--------------- drivers/net/vxlan.c | 10 +- drivers/net/wan/x25_asy.c | 21 ++-- drivers/net/wireless/ath/ath9k/htc_hst.c | 3 + drivers/net/wireless/ath/ath9k/wmi.c | 1 + drivers/net/xen-netfront.c | 64 ++++++++---- drivers/nfc/s3fwrn5/core.c | 1 + drivers/pci/quirks.c | 13 +++ drivers/staging/android/ashmem.c | 12 +++ drivers/usb/host/xhci-pci.c | 10 +- drivers/usb/misc/iowarrior.c | 35 +++++-- drivers/usb/serial/qcserial.c | 1 + drivers/video/console/vgacon.c | 4 + drivers/video/fbdev/omap2/omapfb/dss/dss.c | 2 +- fs/ext4/inode.c | 5 + fs/f2fs/dir.c | 12 ++- fs/xattr.c | 84 +++++++++++++-- fs/xfs/xfs_log.c | 9 +- include/linux/hyperv.h | 2 + include/linux/prandom.h | 78 ++++++++++++++ include/linux/random.h | 63 +----------- include/linux/tcp.h | 4 +- include/net/addrconf.h | 1 + include/uapi/linux/wireless.h | 5 +- kernel/bpf/hashtab.c | 12 ++- kernel/time/timer.c | 8 ++ lib/random32.c | 2 +- net/9p/trans_fd.c | 56 +++++++--- net/ax25/af_ax25.c | 10 +- net/bluetooth/hci_event.c | 11 +- net/core/dev.c | 2 +- net/core/net-sysfs.c | 2 +- net/core/rtnetlink.c | 3 +- net/ipv4/fib_trie.c | 2 +- net/ipv4/gre_offload.c | 13 ++- net/ipv4/tcp_input.c | 11 +- net/ipv4/tcp_output.c | 13 ++- net/ipv4/udp.c | 2 +- net/ipv6/anycast.c | 17 +++- net/ipv6/ip6_gre.c | 11 +- net/ipv6/ipv6_sockglue.c | 1 + net/ipv6/udp.c | 2 +- net/mac80211/cfg.c | 1 + net/mac80211/mesh_pathtbl.c | 1 + net/openvswitch/conntrack.c | 38 +++---- net/qrtr/qrtr.c | 1 + net/rds/recv.c | 3 +- net/rxrpc/call_object.c | 27 +++-- net/rxrpc/conn_object.c | 8 +- net/rxrpc/recvmsg.c | 4 +- net/rxrpc/sendmsg.c | 5 +- net/sctp/stream.c | 27 +++-- net/wireless/nl80211.c | 6 +- net/x25/x25_subr.c | 6 ++ security/smack/smackfs.c | 13 ++- sound/core/seq/oss/seq_oss.c | 8 +- sound/pci/hda/hda_intel.c | 1 - tools/lib/traceevent/event-parse.c | 1 + tools/testing/selftests/net/msg_zerocopy.c | 5 +- tools/testing/selftests/net/psock_fanout.c | 3 +- .../networking/timestamping/rxtimestamp.c | 3 +- 106 files changed, 929 insertions(+), 418 deletions(-) create mode 100644 include/linux/prandom.h