This is the start of the stable review cycle for the 4.18.8 release. There are 197 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat Sep 15 13:17:57 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.18.8-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.18.8-rc1 Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> ASoC: wm8994: Fix missing break in switch Robert Munteanu <rombert@xxxxxxxxxx> HID: redragon: fix num lock and caps lock LEDs Arnd Bergmann <arnd@xxxxxxxx> x86: kvm: avoid unused variable warning Junaid Shahid <junaids@xxxxxxxxxx> kvm: x86: Set highest physical address bits in non-present/reserved SPTEs Randy Dunlap <rdunlap@xxxxxxxxxxxxx> kbuild: make missing $DEPMOD a Warning instead of an Error Juergen Gross <jgross@xxxxxxxx> x86/xen: don't write ptes directly in 32-bit PV guests Juergen Gross <jgross@xxxxxxxx> x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear Joel Fernandes (Google) <joel@xxxxxxxxxxxxxxxxx> debugobjects: Make stack check warning more informative Michel Dänzer <michel.daenzer@xxxxxxx> drm/amdgpu: Don't warn on destroying a pinned BO Michel Dänzer <michel.daenzer@xxxxxxx> drm/amdgpu: Warn and update pin_size values when destroying a pinned BO Michel Dänzer <michel.daenzer@xxxxxxx> drm/amdgpu: Make pin_size values atomic Michel Dänzer <michel.daenzer@xxxxxxx> drm/amdgpu: Keep track of amount of pinned CPU visible VRAM Chuanhua Lei <chuanhua.lei@xxxxxxxxxxxxxxx> x86/tsc: Prevent result truncation on 32bit Jani Nikula <jani.nikula@xxxxxxxxx> drm/i915: set DP Main Stream Attribute for color range on DDI platforms Nadav Amit <namit@xxxxxxxxxx> mm: respect arch_dup_mmap() return value Randy Dunlap <rdunlap@xxxxxxxxxxxxx> uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name Jan-Marek Glogowski <glogow@xxxxxxxxxx> drm/i915: Re-apply "Perform link quality check, unconditionally during long pulse" Christian König <christian.koenig@xxxxxxx> drm/amdgpu: fix incorrect use of drm_file->pid Christian König <christian.koenig@xxxxxxx> drm/amdgpu: fix incorrect use of fcheck Likun Gao <Likun.Gao@xxxxxxx> drm/amdgpu:add VCN booting with firmware loaded by PSP Likun Gao <Likun.Gao@xxxxxxx> drm/amdgpu:add VCN support in PSP driver Likun Gao <Likun.Gao@xxxxxxx> drm/amdgpu:add new firmware id for VCN James Zhu <jzhums@xxxxxxxxx> drm/amdgpu:add tmr mc address into amdgpu_firmware_info James Zhu <jzhums@xxxxxxxxx> drm/amdgpu: update tmr mc address Mikita Lipski <mikita.lipski@xxxxxxx> drm/amd/display: Check if clock source in use before disabling Mikita Lipski <mikita.lipski@xxxxxxx> drm/amd/display: Pass connector id when executing VBIOS CT Sandy Huang <hjc@xxxxxxxxxxxxxx> drm/rockchip: vop: fix irq disabled after vop driver probed Heiko Stuebner <heiko@xxxxxxxxx> drm/rockchip: vop: split out core clock enablement into separate functions Julia Lawall <Julia.Lawall@xxxxxxx> drm/rockchip: lvds: add missing of_node_put Harry Wentland <harry.wentland@xxxxxxx> drm/amd/display: Report non-DP display as disconnected without EDID Leo (Sunpeng) Li <sunpeng.li@xxxxxxx> drm/amd/display: Use requested HDMI aspect ratio Mikita Lipski <mikita.lipski@xxxxxxx> drm/amd/display: update clk for various HDMI color depths Mikita Lipski <mikita.lipski@xxxxxxx> drm/amd/display: Don't share clk source between DP and HDMI Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> drm/amd/display: fix type of variable Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80 Lubosz Sarnecki <lubosz.sarnecki@xxxxxxxxxxxxx> drm/edid: Quirk Vive Pro VR headset non-desktop. Rex Zhu <rex.zhu@xxxxxxx> drm/amd/pp/Polaris12: Fix a chunk of registers missed to program Evan Quan <evan.quan@xxxxxxx> drm/amd/powerplay: fixed uninitialized value Rex Zhu <rex.zhu@xxxxxxx> drm/amd/pp: Convert voltage unit in mV*4 to mV on CZ/ST Michel Dänzer <michel.daenzer@xxxxxxx> drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode Rex Zhu <rex.zhu@xxxxxxx> drm/amdgpu: fix a reversed condition Alex Deucher <alexander.deucher@xxxxxxx> drm/amdgpu: update uvd_v6_0_ring_vm_funcs to use new nop packet Rodrigo Vivi <rodrigo.vivi@xxxxxxxxx> drm/i915: Free write_buf that we allocated with kzalloc. Fredrik Schön <fredrikschon@xxxxxxxxx> drm/i915: Increase LSPCON timeout Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/i915: Nuke the LVDS lid notifier Chris Wilson <chris@xxxxxxxxxxxxxxxxxx> drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks" David Sterba <dsterba@xxxxxxxx> btrfs: fix mount and ioctl device scan ioctl race David Sterba <dsterba@xxxxxxxx> btrfs: reorder initialization before the mount locks uuid_mutex David Sterba <dsterba@xxxxxxxx> btrfs: lift uuid_mutex to callers of btrfs_parse_early_options David Sterba <dsterba@xxxxxxxx> btrfs: lift uuid_mutex to callers of btrfs_scan_one_device Anand Jain <anand.jain@xxxxxxxxxx> btrfs: use device_list_mutex when removing stale devices Anand Jain <anand.jain@xxxxxxxxxx> btrfs: rename local devices for fs_devices in btrfs_free_stale_devices( Anand Jain <anand.jain@xxxxxxxxxx> btrfs: extend locked section when adding a new device in device_list_add Anand Jain <anand.jain@xxxxxxxxxx> btrfs: do btrfs_free_stale_devices outside of device_list_add Marc Zyngier <marc.zyngier@xxxxxxx> ARM: rockchip: Force CONFIG_PM on Rockchip systems Marc Zyngier <marc.zyngier@xxxxxxx> arm64: rockchip: Force CONFIG_PM on Rockchip systems Bart Van Assche <bart.vanassche@xxxxxxx> btrfs: Fix a C compliance issue Qu Wenruo <wqu@xxxxxxxx> btrfs: Don't remove block group that still has pinned down bytes David Sterba <dsterba@xxxxxxxx> btrfs: lift uuid_mutex to callers of btrfs_open_devices Qu Wenruo <wqu@xxxxxxxx> btrfs: check-integrity: Fix NULL pointer dereference for degraded mount Qu Wenruo <wqu@xxxxxxxx> btrfs: tree-checker: Detect invalid and empty essential trees Qu Wenruo <wqu@xxxxxxxx> btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized Anand Jain <anand.jain@xxxxxxxxxx> btrfs: fix in-memory value of total_devices after seed device deletion Misono Tomohiro <misono.tomohiro@xxxxxxxxxxxxxx> btrfs: replace: Reset on-disk dev stats value after replace Qu Wenruo <wqu@xxxxxxxx> btrfs: Exit gracefully when chunk map cannot be inserted to the tree Lucas Stach <l.stach@xxxxxxxxxxxxxx> drm/etnaviv: fix crash in GPU suspend when init failed due to buffer placement Jim Mattson <jmattson@xxxxxxxxxx> kvm: nVMX: Fix fault vector for VMX operation at CPL > 0 Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: vmx: track host_state.loaded using a loaded_vmcs pointer David Francis <David.Francis@xxxxxxx> drm/amd/display: Read back max backlight value at boot Levin Du <djw@xxxxxxxxxxxxx> clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399 Mahesh Salgaonkar <mahesh@xxxxxxxxxxxxxxxxxx> powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX. Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx> um: fix parallel building with O= option Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/64s: Make rfi_flush_fallback a little more robust Randy Dunlap <rdunlap@xxxxxxxxxxxxx> powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning Steve French <stfrench@xxxxxxxxxxxxx> smb3: if server does not support posix do not allow posix mount option Steve French <stfrench@xxxxxxxxxxxxx> SMB3: Number of requests sent should be displayed for SMB3 not just CIFS Aurelien Aptel <aaptel@xxxxxxxx> CIFS: fix memory leak and remove dead code Steve French <stfrench@xxxxxxxxxxxxx> smb3: fix reset of bytes read and written stats Bart Van Assche <bart.vanassche@xxxxxxx> cfq: Suppress compiler warnings about comparisons YueHaibing <yuehaibing@xxxxxxxxxx> RDS: IB: fix 'passing zero to ERR_PTR()' warning nixiaoming <nixiaoming@xxxxxxxxxx> selinux: cleanup dentry and inodes on error in selinuxfs Breno Leitao <leitao@xxxxxxxxxx> selftests/powerpc: Kill child processes on SIGINT Ralf Goebel <ralf.goebel@xxxxxxxxxxxxxxxxxxxxxx> iommu/omap: Fix cache flushes on L2 table entries Matthias Kaehlcke <mka@xxxxxxxxxxxx> ASoC: rt5677: Fix initialization of rt5677_of_match.data Ian Abbott <abbotti@xxxxxxxxx> staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice John Pittman <jpittman@xxxxxxxxxx> dm kcopyd: avoid softlockup in run_complete_job Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxx> PCI: mvebu: Fix I/O space end address calculation Roger Pau Monne <roger.pau@xxxxxxxxxx> xen/balloon: fix balloon initialization for PVH Dom0 Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> Input: do not use WARN() in input_alloc_absinfo() Wei Yongjun <weiyongjun1@xxxxxxxxxx> NFSv4: Fix error handling in nfs4_sp4_select_mode() Dan Carpenter <dan.carpenter@xxxxxxxxxx> scsi: aic94xx: fix an error code in aic94xx_init() Jianchao Wang <jianchao.w.wang@xxxxxxxxxx> blk-mq: count the hctx as active before allocating tag Hans de Goede <hdegoede@xxxxxxxxxx> ACPI / scan: Initialize status to ACPI_STA_DEFAULT Stefan Haberland <sth@xxxxxxxxxxxxx> s390/dasd: fix panic for failed online processing Stefan Haberland <sth@xxxxxxxxxxxxx> s390/dasd: fix hanging offline processing due to canceled worker Winnie Chang <winnie.chang@xxxxxxxxxxx> brcmfmac: fix brcmf_wiphy_wowl_params() NULL pointer dereference Greg Edwards <gedwards@xxxxxxx> block: bvec_nr_vecs() returns value for wrong slab Sandipan Das <sandipan@xxxxxxxxxxxxx> perf probe powerpc: Fix trace event post-processing Dan Carpenter <dan.carpenter@xxxxxxxxxx> powerpc: Fix size calculation using resource_size() Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/uaccess: Enable get_user(u64, *p) on 32-bit Yonghong Song <yhs@xxxxxx> bpf: fix bpffs non-array map seq_show issue Anton Vasilyev <vasilyev@xxxxxxxxx> pinctrl: axp209: Fix NULL pointer dereference after allocation Chao Yu <yuchao0@xxxxxxxxxx> f2fs: fix to clear PG_checked flag in set_page_dirty() Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx> net/9p: fix error path of p9_virtio_probe Tomas Bortoli <tomasbortoli@xxxxxxxxx> net/9p/trans_fd.c: fix race by holding the lock Jonas Gorski <jonas.gorski@xxxxxxxxx> irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP Dan Carpenter <dan.carpenter@xxxxxxxxxx> irqchip/stm32: Fix init error handling Palmer Dabbelt <palmer@xxxxxxxxxx> RISC-V: Use KBUILD_CFLAGS instead of KCFLAGS when building the vDSO Chao Yu <yuchao0@xxxxxxxxxx> f2fs: fix avoid race between truncate and background GC Chao Yu <yuchao0@xxxxxxxxxx> f2fs: avoid race between zero_range and background GC Benno Evers <bevers@xxxxxxxxxxxxxx> perf tools: Check for null when copying nsinfo. Denis Efremov <efremov@xxxxxxxxx> coccicheck: return proper error code on fail Nicholas Kazlauskas <nicholas.kazlauskas@xxxxxxx> drm/amd/display: Guard against null crtc in CRC IRQ Myron Stowe <myron.stowe@xxxxxxxxxx> PCI: Match Root Port's MPS to endpoint's MPSS as necessary Jian Shen <shenjian15@xxxxxxxxxx> net: hns3: Fix for phy link issue when using marvell phy driver Jens Axboe <axboe@xxxxxxxxx> block: don't warn for flush on read-only device Xi Wang <wangxi11@xxxxxxxxxx> net: hns3: Fix for command format parsing error in hclge_is_all_function_id_zero Kim Phillips <kim.phillips@xxxxxxx> perf arm spe: Fix uninitialized record error variable Erik Schmauss <erik.schmauss@xxxxxxxxx> ACPICA: ACPICA: add status check for acpi_hw_read before assigning return value Gal Pressman <pressmangal@xxxxxxxxx> RDMA/hns: Fix usage of bitmap allocation functions return values Richard Weinberger <richard@xxxxxx> ubi: Initialize Fastmap checkmapping correctly Daniel Borkmann <daniel@xxxxxxxxxxxxx> tcp, ulp: add alias for all ulp modules Florian Westphal <fw@xxxxxxxxx> netfilter: fix memory leaks on netlink_dump_start error Aleh Filipovich <aleh@xxxxxxxxxx> platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360 Michal Hocko <mhocko@xxxxxxxx> netfilter: x_tables: do not fail xt_alloc_table_info too easilly Guenter Roeck <linux@xxxxxxxxxxxx> mfd: sm501: Set coherent_dma_mask when creating subdevices Tan Hu <tan.hu@xxxxxxxxxx> ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() Philipp Rudo <prudo@xxxxxxxxxxxxx> s390/kdump: Fix memleak in nt_vmcoreinfo Florian Westphal <fw@xxxxxxxxx> netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses Jesper Dangaard Brouer <brouer@xxxxxxxxxx> samples/bpf: all XDP samples should unload xdp/bpf prog on SIGTERM Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf, sockmap: fix leakage of smap_psock_map_entry Tariq Toukan <tariqt@xxxxxxxxxxxx> net/xdp: Fix suspicious RCU usage warning Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf, sockmap: fix sock_map_ctx_update_elem race with exist/noexist Daniel Borkmann <daniel@xxxxxxxxxxxxx> tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf, sockmap: fix map elem deletion race with smap_stop_sock Randy Dunlap <rdunlap@xxxxxxxxxxxxx> platform/x86: intel_punit_ipc: fix build errors Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot() Mike Rapoport <rppt@xxxxxxxxxxxxxxxxxx> mm: make DEFERRED_STRUCT_PAGE_INIT explicitly depend on SPARSEMEM Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx> mm/fadvise.c: fix signed overflow UBSAN complaint Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx> powerpc/topology: Get topology for shared processors at boot Jerome Brunet <jbrunet@xxxxxxxxxxxx> pwm: meson: Fix mux clock names Michael J. Ruhl <michael.j.ruhl@xxxxxxxxx> IB/hfi1: Invalid NUMA node information can cause a divide by zero Hans de Goede <hdegoede@xxxxxxxxxx> i2c: core: ACPI: Make acpi_gsb_i2c_read_bytes() check i2c_transfer return value Arnd Bergmann <arnd@xxxxxxxx> x86/mce: Add notifier_block forward declaration Suzuki K Poulose <suzuki.poulose@xxxxxxx> virtio: pci-legacy: Validate queue pfn Dan Carpenter <dan.carpenter@xxxxxxxxxx> apparmor: fix an error code in __aa_create_ns() Randy Dunlap <rdunlap@xxxxxxxxxxxxx> scripts: modpost: check memory allocation results Johannes Berg <johannes.berg@xxxxxxxxx> workqueue: re-add lockdep dependencies for flushing Johannes Berg <johannes.berg@xxxxxxxxx> workqueue: skip lockdep wq dependency in cancel_work_sync() OGAWA Hirofumi <hirofumi@xxxxxxxxxxxxxxxxxx> fat: validate ->i_start before using James Morse <james.morse@xxxxxxx> fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries Marc Zyngier <marc.zyngier@xxxxxxx> iommu/rockchip: Move irq request past pm_runtime_enable Ernesto A. Fernández <ernesto.mnd.fernandez@xxxxxxxxx> hfsplus: fix NULL dereference in hfsplus_lookup() Marc Zyngier <marc.zyngier@xxxxxxx> iommu/rockchip: Handle errors returned from PM framework Arnd Bergmann <arnd@xxxxxxxx> reiserfs: change j_timestamp type to time64_t Arnd Bergmann <arnd@xxxxxxxx> fs/proc/vmcore.c: hide vmcoredd_mmap_dumps() for nommu builds Jann Horn <jannh@xxxxxxxxxx> fork: don't copy inconsistent signal handler state to child Laura Abbott <labbott@xxxxxxxxxx> sunrpc: Don't use stack buffer with scatterlist Ernesto A. Fernández <ernesto.mnd.fernandez@xxxxxxxxx> hfs: prevent crash on exit from failed search Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> hfsplus: don't return 0 when fill_super() failed Ronnie Sahlberg <lsahlber@xxxxxxxxxx> cifs: check if SMB2 PDU size has been padded and suppress the warning Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx> hv_netvsc: ignore devices that are not PCI Jason Wang <jasowang@xxxxxxxxxx> vhost: correctly check the iova range when waking virtqueue Ido Schimmel <idosch@xxxxxxxxxxxx> mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge Xin Long <lucien.xin@xxxxxxxxx> sctp: hold transport before accessing its asoc in sctp_transport_get_next Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx> nfp: wait for posted reconfigs when disabling the device Haishuang Yan <yanhaishuang@xxxxxxxxxxxxxxxxxxxx> ip6_vti: fix a null pointer deference when destroy vti6 tunnel Haishuang Yan <yanhaishuang@xxxxxxxxxxxxxxxxxxxx> ip6_vti: fix creating fallback tunnel device for vti6 Jerome Brunet <jbrunet@xxxxxxxxxxxx> Revert "net: stmmac: Do not keep rearming the coalesce timer in stmmac_xmit" Azat Khuzhin <a3at.mail@xxxxxxxxx> r8169: set RxConfig after tx/rx is enabled for RTL8169sb/8110sb devices Tariq Toukan <tariqt@xxxxxxxxxxxx> net/mlx5: Fix SQ offset in QPs with small RQ David Ahern <dsahern@xxxxxxxxx> net/ipv6: Put lwtstate when destroying fib6_info David Ahern <dsahern@xxxxxxxxx> net/ipv6: Only update MTU metric if it set Hangbin Liu <liuhangbin@xxxxxxxxx> net/ipv6: init ip6 anycast rt->dst.input as ip6_input Alexey Kodanev <alexey.kodanev@xxxxxxxxxx> ipv6: don't get lwtstate twice in ip6_rt_copy_init() Ahmad Fatoum <a.fatoum@xxxxxxxxxxxxxx> net: macb: Fix regression breaking non-MDIO fixed-link PHYs Xin Long <lucien.xin@xxxxxxxxx> erspan: set erspan_ver to 1 by default when adding an erspan dev Xin Long <lucien.xin@xxxxxxxxx> sctp: remove useless start_fail from sctp_ht_iter in proc Haiqing Bai <Haiqing.Bai@xxxxxxxxxxxxx> tipc: fix the big/little endian issue in tipc_dest Dexuan Cui <decui@xxxxxxxxxxxxx> hv_netvsc: Fix a deadlock by getting rtnl lock earlier in netvsc_probe() Cong Wang <xiyou.wangcong@xxxxxxxxx> tipc: fix a missing rhashtable_walk_exit() Davide Caratti <dcaratti@xxxxxxxxxx> net/sched: act_pedit: fix dump of extended layered op Michael Chan <michael.chan@xxxxxxxxxxxx> bnxt_en: Do not adjust max_cp_rings by the ones used by RDMA. Michael Chan <michael.chan@xxxxxxxxxxxx> bnxt_en: Clean up unused functions. Vlad Buslov <vladbu@xxxxxxxxxxxx> net: sched: action_ife: take reference to meta module Cong Wang <xiyou.wangcong@xxxxxxxxx> act_ife: fix a potential deadlock Cong Wang <xiyou.wangcong@xxxxxxxxx> act_ife: move tcfa_lock down to where necessary Alexey Kodanev <alexey.kodanev@xxxxxxxxxx> vti6: remove !skb->ignore_df check from vti6_xmit() Florian Westphal <fw@xxxxxxxxx> tcp: do not restart timewait timer on rst reception Anthony Wong <anthony.wong@xxxxxxxxxx> r8169: add support for NCube 8168 network card Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> r8152: disable RX aggregation on new Dell TB16 dock Manish Chopra <manish.chopra@xxxxxxxxxx> qlge: Fix netdev features configuration. Kees Cook <keescook@xxxxxxxxxxxx> net: sched: Fix memory exposure from short TCA_U32_SEL Anssi Hannula <anssi.hannula@xxxxxxxxxx> net: macb: do not disable MDIO bus at open/close time Doug Berger <opendmb@xxxxxxxxx> net: bcmgenet: use MAC link status for fixed phy Eric Dumazet <edumazet@xxxxxxxxxx> ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT state Cong Wang <xiyou.wangcong@xxxxxxxxx> act_ife: fix a potential use-after-free ------------- Diffstat: Makefile | 4 +- arch/arm/mach-rockchip/Kconfig | 1 + arch/arm64/Kconfig.platforms | 1 + arch/powerpc/include/asm/topology.h | 5 + arch/powerpc/include/asm/uaccess.h | 13 +- arch/powerpc/kernel/exceptions-64s.S | 6 + arch/powerpc/kernel/smp.c | 5 + arch/powerpc/mm/numa.c | 20 +-- arch/powerpc/platforms/85xx/t1042rdb_diu.c | 4 + arch/powerpc/platforms/pseries/ras.c | 2 +- arch/powerpc/sysdev/mpic_msgr.c | 2 +- arch/riscv/kernel/vdso/Makefile | 4 +- arch/s390/kernel/crash_dump.c | 17 ++- arch/um/Makefile | 3 +- arch/x86/include/asm/mce.h | 1 + arch/x86/include/asm/pgtable-3level.h | 7 +- arch/x86/kernel/tsc.c | 4 +- arch/x86/kvm/mmu.c | 43 ++++++- arch/x86/kvm/vmx.c | 26 ++-- arch/x86/kvm/x86.c | 12 +- arch/x86/xen/mmu_pv.c | 7 +- block/bio.c | 2 +- block/blk-core.c | 4 +- block/blk-mq-tag.c | 3 + block/blk-mq.c | 8 +- block/cfq-iosched.c | 22 ++-- drivers/acpi/acpica/hwregs.c | 9 +- drivers/acpi/scan.c | 5 +- drivers/clk/rockchip/clk-rk3399.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu.h | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 23 ++-- drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 38 ++++-- drivers/gpu/drm/amd/amdgpu/amdgpu_pm.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 5 + drivers/gpu/drm/amd/amdgpu/amdgpu_sched.c | 21 +--- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.h | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.h | 4 + drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.c | 17 +-- drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c | 20 ++- drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/psp_v10_0.c | 3 + drivers/gpu/drm/amd/amdgpu/uvd_v6_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/vcn_v1_0.c | 40 ++++-- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 10 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crc.c | 10 +- .../gpu/drm/amd/display/dc/bios/command_table.c | 18 +++ drivers/gpu/drm/amd/display/dc/core/dc_link.c | 11 ++ drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 68 ++++++++--- drivers/gpu/drm/amd/display/dc/dc.h | 1 + .../gpu/drm/amd/display/dc/dce/dce_link_encoder.c | 4 +- .../drm/amd/display/dc/dce100/dce100_resource.c | 2 +- .../drm/amd/display/dc/dce110/dce110_compressor.c | 2 +- .../amd/display/dc/dce110/dce110_hw_sequencer.c | 4 +- .../gpu/drm/amd/display/dc/dce80/dce80_resource.c | 3 + drivers/gpu/drm/amd/display/dc/inc/resource.h | 5 + .../gpu/drm/amd/powerplay/hwmgr/smu7_powertune.c | 43 +++++++ drivers/gpu/drm/amd/powerplay/hwmgr/smu8_hwmgr.c | 5 +- drivers/gpu/drm/amd/powerplay/hwmgr/vega12_hwmgr.c | 2 +- drivers/gpu/drm/drm_edid.c | 6 +- drivers/gpu/drm/etnaviv/etnaviv_gpu.c | 1 + drivers/gpu/drm/i915/i915_drv.c | 10 -- drivers/gpu/drm/i915/i915_drv.h | 8 -- drivers/gpu/drm/i915/i915_reg.h | 1 + drivers/gpu/drm/i915/intel_ddi.c | 4 + drivers/gpu/drm/i915/intel_dp.c | 33 ++--- drivers/gpu/drm/i915/intel_hdmi.c | 8 +- drivers/gpu/drm/i915/intel_lpe_audio.c | 4 +- drivers/gpu/drm/i915/intel_lspcon.c | 2 +- drivers/gpu/drm/i915/intel_lvds.c | 136 +-------------------- drivers/gpu/drm/rockchip/rockchip_drm_vop.c | 69 +++++++---- drivers/gpu/drm/rockchip/rockchip_lvds.c | 4 +- drivers/hid/hid-redragon.c | 26 +--- drivers/i2c/i2c-core-acpi.c | 8 +- drivers/infiniband/hw/hfi1/affinity.c | 24 +++- drivers/infiniband/hw/hns/hns_roce_pd.c | 2 +- drivers/infiniband/hw/hns/hns_roce_qp.c | 5 +- drivers/input/input.c | 16 ++- drivers/iommu/omap-iommu.c | 4 +- drivers/iommu/rockchip-iommu.c | 45 ++++--- drivers/irqchip/irq-bcm7038-l1.c | 4 + drivers/irqchip/irq-stm32-exti.c | 25 ++-- drivers/md/dm-kcopyd.c | 2 + drivers/mfd/sm501.c | 1 + drivers/mtd/ubi/vtbl.c | 20 +-- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 9 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 3 +- drivers/net/ethernet/broadcom/bnxt/bnxt_sriov.c | 7 +- drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.c | 20 --- drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.h | 1 - drivers/net/ethernet/broadcom/genet/bcmgenet.h | 3 + drivers/net/ethernet/broadcom/genet/bcmmii.c | 10 +- drivers/net/ethernet/cadence/macb_main.c | 36 ++++-- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 2 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_mdio.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/wq.c | 5 +- drivers/net/ethernet/mellanox/mlxsw/spectrum.h | 2 + .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 11 ++ .../ethernet/mellanox/mlxsw/spectrum_switchdev.c | 20 +++ .../net/ethernet/netronome/nfp/nfp_net_common.c | 48 +++++--- drivers/net/ethernet/qlogic/qlge/qlge_main.c | 23 ++-- drivers/net/ethernet/realtek/r8169.c | 7 +- drivers/net/ethernet/stmicro/stmmac/stmmac.h | 1 - drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 5 +- drivers/net/hyperv/netvsc_drv.c | 16 ++- drivers/net/usb/r8152.c | 4 +- .../broadcom/brcm80211/brcmfmac/cfg80211.c | 8 +- drivers/pci/controller/pci-mvebu.c | 2 +- drivers/pci/probe.c | 12 +- drivers/pinctrl/pinctrl-axp209.c | 26 +++- drivers/platform/x86/asus-nb-wmi.c | 1 + drivers/platform/x86/intel_punit_ipc.c | 1 + drivers/pwm/pwm-meson.c | 3 +- drivers/s390/block/dasd_eckd.c | 10 +- drivers/scsi/aic94xx/aic94xx_init.c | 4 +- drivers/staging/comedi/drivers/ni_mio_common.c | 3 +- drivers/vhost/vhost.c | 2 +- drivers/virtio/virtio_pci_legacy.c | 14 ++- drivers/xen/xen-balloon.c | 2 +- fs/btrfs/check-integrity.c | 7 +- fs/btrfs/dev-replace.c | 6 + fs/btrfs/extent-tree.c | 2 +- fs/btrfs/relocation.c | 23 ++-- fs/btrfs/super.c | 44 ++++--- fs/btrfs/tree-checker.c | 15 ++- fs/btrfs/volumes.c | 94 ++++++++------ fs/cifs/cifs_debug.c | 8 ++ fs/cifs/connect.c | 8 +- fs/cifs/smb2misc.c | 7 ++ fs/cifs/smb2pdu.c | 103 ++++++++-------- fs/dcache.c | 3 +- fs/f2fs/data.c | 8 ++ fs/f2fs/file.c | 48 +++++--- fs/fat/cache.c | 19 +-- fs/fat/fat.h | 5 + fs/fat/fatent.c | 6 +- fs/hfs/brec.c | 7 +- fs/hfsplus/dir.c | 4 +- fs/hfsplus/super.c | 4 +- fs/nfs/nfs4proc.c | 2 +- fs/proc/kcore.c | 4 +- fs/proc/vmcore.c | 2 + fs/reiserfs/reiserfs.h | 2 +- include/linux/pci_ids.h | 2 + include/net/tcp.h | 4 + include/uapi/linux/keyctl.h | 2 +- kernel/bpf/inode.c | 8 +- kernel/bpf/sockmap.c | 120 ++++++++++-------- kernel/fork.c | 5 +- kernel/workqueue.c | 45 ++++--- lib/debugobjects.c | 7 +- mm/Kconfig | 2 +- mm/fadvise.c | 8 +- net/9p/trans_fd.c | 10 +- net/9p/trans_virtio.c | 3 +- net/core/xdp.c | 14 +-- net/ipv4/ip_gre.c | 3 + net/ipv4/tcp_ipv4.c | 6 + net/ipv4/tcp_minisocks.c | 3 +- net/ipv4/tcp_ulp.c | 4 +- net/ipv6/ip6_fib.c | 7 +- net/ipv6/ip6_gre.c | 1 + net/ipv6/ip6_vti.c | 7 +- net/ipv6/netfilter/ip6t_rpfilter.c | 12 +- net/ipv6/route.c | 3 +- net/netfilter/ipvs/ip_vs_core.c | 15 ++- net/netfilter/nf_conntrack_netlink.c | 26 ++-- net/netfilter/nfnetlink_acct.c | 29 ++--- net/netfilter/x_tables.c | 7 +- net/rds/ib_frmr.c | 1 + net/sched/act_ife.c | 78 +++++++----- net/sched/act_pedit.c | 18 ++- net/sched/cls_u32.c | 10 +- net/sctp/proc.c | 8 -- net/sctp/socket.c | 22 ++-- net/sunrpc/auth_gss/gss_krb5_crypto.c | 12 +- net/tipc/name_table.c | 10 +- net/tipc/name_table.h | 9 +- net/tipc/socket.c | 2 + net/tls/tls_main.c | 1 + samples/bpf/xdp_redirect_cpu_user.c | 3 +- samples/bpf/xdp_rxq_info_user.c | 3 +- scripts/coccicheck | 5 +- scripts/depmod.sh | 4 +- scripts/mod/modpost.c | 8 +- security/apparmor/policy_ns.c | 2 +- security/keys/dh.c | 2 +- security/selinux/selinuxfs.c | 33 +++-- sound/soc/codecs/rt5677.c | 2 +- sound/soc/codecs/wm8994.c | 1 + tools/perf/arch/arm64/util/arm-spe.c | 1 + tools/perf/arch/powerpc/util/sym-handling.c | 4 +- tools/perf/util/namespaces.c | 3 + tools/testing/selftests/powerpc/harness.c | 18 ++- 194 files changed, 1498 insertions(+), 954 deletions(-)
