This is the start of the stable review cycle for the 5.0.11 release. There are 89 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu 02 May 2019 11:35:03 AM UTC. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.0.11-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.0.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.0.11-rc1 Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx> net/tls: don't leak IV and record seq when offload fails Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx> net/tls: avoid potential deadlock in tls_set_device_offload_rx() Maxim Mikityanskiy <maximmi@xxxxxxxxxxxx> net/mlx5e: Fix use-after-free after xdp_return_frame Maxim Mikityanskiy <maximmi@xxxxxxxxxxxx> net/mlx5e: Fix the max MTU check in case of XDP Petr Machata <petrm@xxxxxxxxxxxx> mlxsw: spectrum: Put MC TCs into DWRR mode Ido Schimmel <idosch@xxxxxxxxxxxx> mlxsw: pci: Reincrease PCI reset timeout Tao Ren <taoren@xxxxxx> net/ncsi: handle overflow when incrementing mac address Ilias Apalodimas <ilias.apalodimas@xxxxxxxxxx> net: socionext: replace napi_alloc_frag with the netdev variant on init Hangbin Liu <liuhangbin@xxxxxxxxx> team: fix possible recursive locking when add slaves Su Bao Cheng <baocheng.su@xxxxxxxxxxx> stmmac: pci: Adjust IOT2000 matching Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx> net/tls: fix refcount adjustment in fallback Vinod Koul <vkoul@xxxxxxxxxx> net: stmmac: move stmmac_check_ether_addr() to driver probe Eric Dumazet <edumazet@xxxxxxxxxx> net/rose: fix unbound loop in rose_loopback_timer() Zhu Yanjun <yanjun.zhu@xxxxxxxxxx> net: rds: exchange of 8K and 1M pool Erez Alfasi <ereza@xxxxxxxxxxxx> net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query Amit Cohen <amitc@xxxxxxxxxxxx> mlxsw: spectrum: Fix autoneg status in ethtool ZhangXiaoxu <zhangxiaoxu5@xxxxxxxxxx> ipv4: set the tcp_min_rtt_wlen range from 0 to one day Eric Dumazet <edumazet@xxxxxxxxxx> ipv4: add sanity checks in ipv4_link_failure() Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> rdma: fix build errors on s390 and MIPS due to bad ZERO_PAGE use Daniel Borkmann <daniel@xxxxxxxxxxxxx> x86/retpolines: Disable switch jump tables when retpolines are enabled Daniel Borkmann <daniel@xxxxxxxxxxxxx> x86, retpolines: Raise limit for generating indirect calls from switch-case Al Viro <viro@xxxxxxxxxxxxxxxxxx> Fix aio_poll() races Al Viro <viro@xxxxxxxxxxxxxxxxxx> aio: store event at final iocb_put() Al Viro <viro@xxxxxxxxxxxxxxxxxx> aio: keep io_event in aio_kiocb Al Viro <viro@xxxxxxxxxxxxxxxxxx> aio: fold lookup_kiocb() into its sole caller Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> pin iocb through aio. Eric Dumazet <edumazet@xxxxxxxxxx> rxrpc: fix race condition in rxrpc_input_packet() Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> net/rds: Check address length before reading address family YueHaibing <yuehaibing@xxxxxxxxxx> net: netrom: Fix error cleanup path of nr_proto_init Xin Long <lucien.xin@xxxxxxxxx> tipc: check link name with right length in tipc_nl_compat_link_set Xin Long <lucien.xin@xxxxxxxxx> tipc: check bearer name with right length in tipc_nl_compat_bearer_enable Yue Haibing <yuehaibing@xxxxxxxxxx> fm10k: Fix a potential NULL pointer dereference Florian Westphal <fw@xxxxxxxxx> netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family. Johannes Berg <johannes.berg@xxxxxxxxx> mac80211_hwsim: calculate if_combination.max_interfaces luca abeni <luca.abeni@xxxxxxxxxxxxxxx> sched/deadline: Correctly handle active 0-lag timers Todd Kjos <tkjos@xxxxxxxxxxx> binder: fix handling of misaligned binder object Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> workqueue: Try to catch flush_work() without INIT_WORK(). Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> slip: make slhc_free() silently accept an error pointer Xin Long <lucien.xin@xxxxxxxxx> tipc: handle the err returned from cmd header function Dongli Zhang <dongli.zhang@xxxxxxxxxx> loop: do not print warn message if partition scan is successful Dan Carpenter <dan.carpenter@xxxxxxxxxx> ext4: fix some error pointer dereferences Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> USB: Consolidate LPM checks to avoid enabling LPM twice Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> USB: Add new USB LPM helpers Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx> drm/vc4: Fix compilation error reported by kbuild test bot Dave Airlie <airlied@xxxxxxxxxx> Revert "drm/i915/fbdev: Actually configure untiled displays" Christian König <christian.koenig@xxxxxxx> drm/ttm: fix re-init of global structures Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx> drm/vc4: Fix memory leak during gpu reset. Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/mm/radix: Make Radix require HUGETLB_PAGE Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx> ARM: 8857/1: efi: enable CP15 DMB instructions before cleaning the cache Shun-Chih Yu <shun-chih.yu@xxxxxxxxxxxx> dmaengine: mediatek-cqdma: fix wrong register usage in mtk_cqdma_start Achim Dahlhoff <Achim.Dahlhoff@xxxxxxxxxxxx> dmaengine: sh: rcar-dmac: Fix glitch in dmaengine_tx_status Dirk Behme <dirk.behme@xxxxxxxxxxxx> dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid Alex Williamson <alex.williamson@xxxxxxxxxx> vfio/type1: Limit DMA mappings per container Lucas Stach <l.stach@xxxxxxxxxxxxxx> Input: synaptics-rmi4 - write config register values to the right offset Harry Pan <harry.pan@xxxxxxxxx> perf/x86/intel: Update KBL Package C-state events to also include PC8/PC9/PC10 counters NeilBrown <neilb@xxxxxxxx> sunrpc: don't mark uninitialised items as VALID. Jeff Layton <jlayton@xxxxxxxxxx> nfsd: wake blocked file lock waiters before sending callback Jeff Layton <jlayton@xxxxxxxxxx> nfsd: wake waiters blocked on file_lock before deleting it Trond Myklebust <trondmy@xxxxxxxxx> nfsd: Don't release the callback slot unless it was actually held Yan, Zheng <zyan@xxxxxxxxxx> ceph: fix ci->i_head_snapc leak Jeff Layton <jlayton@xxxxxxxxxx> ceph: ensure d_name stability in ceph_dentry_hash() Jeff Layton <jlayton@xxxxxxxxxx> ceph: only use d_name directly when parent is locked Xie XiuQi <xiexiuqi@xxxxxxxxxx> sched/numa: Fix a possible divide-by-zero Jason Gunthorpe <jgg@xxxxxxxx> RDMA/ucontext: Fix regression with disassociate Jason Gunthorpe <jgg@xxxxxxxx> RDMA/mlx5: Use rdma_user_map_io for mapping BAR pages Jason Gunthorpe <jgg@xxxxxxxx> RDMA/mlx5: Do not allow the user to write to the clock page Josh Collier <josh.d.collier@xxxxxxxxx> IB/rdmavt: Fix frwr memory registration Bjorn Andersson <bjorn.andersson@xxxxxxxxxx> arm64: mm: Ensure tail of unaligned initrd is reserved Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx> mm: do not boost watermarks to avoid fragmentation for the DISCONTIG memory model Peter Zijlstra <peterz@xxxxxxxxxxxxx> trace: Fix preempt_enable_no_resched() abuse Aurelien Jarno <aurelien@xxxxxxxxxxx> MIPS: scall64-o32: Fix indirect syscall number load YueHaibing <yuehaibing@xxxxxxxxxx> lib/Kconfig.debug: fix build error without CONFIG_BLOCK Jérôme Glisse <jglisse@xxxxxxxxxx> zram: pass down the bvec we need to read into in the work struct Baolin Wang <baolin.wang@xxxxxxxxxx> gpio: eic: sprd: Fix incorrect irq type setting for the sync EIC Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> crypto: lrw - Fix atomic sleep when walking skcipher Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> crypto: xts - Fix atomic sleep when walking skcipher Jann Horn <jannh@xxxxxxxxxx> tracing: Fix buffer_ref pipe ops Wenwen Wang <wang6495@xxxxxxx> tracing: Fix a memory leak by early error exit in trace_pid_write() Frank Sorenson <sorenson@xxxxxxxxxx> cifs: do not attempt cifs operation on smb2+ rename error Jérôme Glisse <jglisse@xxxxxxxxxx> cifs: fix page reference leak with readv/writev Ronnie Sahlberg <lsahlber@xxxxxxxxxx> cifs: fix memory leak in SMB2_read Paolo Valente <paolo.valente@xxxxxxxxxx> block, bfq: fix use after free in bfq_bfqq_expire YueHaibing <yuehaibing@xxxxxxxxxx> fs/proc/proc_sysctl.c: Fix a NULL pointer dereference Kailang Yang <kailang@xxxxxxxxxxx> ALSA: hda/realtek - Move to ACT_INIT state Christophe Leroy <christophe.leroy@xxxxxx> powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64 Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx> intel_th: gth: Fix an off-by-one in output unassigning Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: bogus EBUSY in helper removal from transaction Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: bogus EBUSY when deleting set after flush ------------- Diffstat: Documentation/networking/ip-sysctl.txt | 1 + Documentation/sysctl/vm.txt | 16 +- Makefile | 4 +- arch/arm/boot/compressed/head.S | 16 +- arch/arm64/mm/init.c | 2 +- arch/mips/kernel/scall64-o32.S | 2 +- arch/powerpc/configs/skiroot_defconfig | 1 + arch/powerpc/kernel/vdso32/gettimeofday.S | 2 +- arch/powerpc/platforms/Kconfig.cputype | 2 +- arch/x86/Makefile | 9 + arch/x86/events/intel/cstate.c | 10 +- block/bfq-iosched.c | 15 +- block/bfq-iosched.h | 2 +- block/bfq-wf2q.c | 17 +- crypto/lrw.c | 6 +- crypto/xts.c | 6 +- drivers/android/binder_alloc.c | 18 +- drivers/block/loop.c | 5 +- drivers/block/zram/zram_drv.c | 5 +- drivers/dma/mediatek/mtk-cqdma.c | 2 +- drivers/dma/sh/rcar-dmac.c | 30 +++- drivers/gpio/gpio-eic-sprd.c | 1 + drivers/gpu/drm/i915/intel_fbdev.c | 12 +- drivers/gpu/drm/ttm/ttm_bo.c | 10 +- drivers/gpu/drm/ttm/ttm_memory.c | 5 +- drivers/gpu/drm/vc4/vc4_crtc.c | 2 +- drivers/hwtracing/intel_th/gth.c | 2 +- drivers/infiniband/core/uverbs.h | 1 + drivers/infiniband/core/uverbs_main.c | 52 +++++- drivers/infiniband/hw/mlx5/main.c | 10 +- drivers/infiniband/sw/rdmavt/mr.c | 17 +- drivers/input/rmi4/rmi_f11.c | 2 +- drivers/net/ethernet/intel/fm10k/fm10k_main.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 24 ++- drivers/net/ethernet/mellanox/mlx5/core/en/xdp.h | 3 +- .../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 5 +- drivers/net/ethernet/mellanox/mlx5/core/port.c | 4 - drivers/net/ethernet/mellanox/mlxsw/pci_hw.h | 2 +- drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 6 +- drivers/net/ethernet/socionext/netsec.c | 11 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 4 +- drivers/net/ethernet/stmicro/stmmac/stmmac_pci.c | 8 +- drivers/net/slip/slhc.c | 2 +- drivers/net/team/team.c | 7 + drivers/net/wireless/mac80211_hwsim.c | 19 +- drivers/usb/core/driver.c | 23 ++- drivers/usb/core/hub.c | 16 +- drivers/usb/core/message.c | 3 +- drivers/usb/core/sysfs.c | 5 +- drivers/usb/core/usb.h | 10 +- drivers/vfio/vfio_iommu_type1.c | 14 ++ fs/aio.c | 200 +++++++++------------ fs/ceph/dir.c | 6 +- fs/ceph/mds_client.c | 70 ++++++-- fs/ceph/snap.c | 7 +- fs/cifs/file.c | 15 +- fs/cifs/inode.c | 4 + fs/cifs/misc.c | 23 ++- fs/cifs/smb2pdu.c | 1 + fs/ext4/xattr.c | 3 + fs/nfs/super.c | 3 +- fs/nfsd/nfs4callback.c | 8 +- fs/nfsd/nfs4state.c | 12 +- fs/nfsd/state.h | 1 + fs/proc/proc_sysctl.c | 6 +- fs/splice.c | 4 +- include/drm/ttm/ttm_bo_driver.h | 1 - include/linux/etherdevice.h | 12 ++ include/linux/pipe_fs_i.h | 1 + include/net/netfilter/nf_tables.h | 6 + include/net/netrom.h | 2 +- kernel/sched/deadline.c | 3 +- kernel/sched/fair.c | 4 + kernel/trace/ring_buffer.c | 2 +- kernel/trace/trace.c | 33 ++-- kernel/workqueue.c | 3 + lib/Kconfig.debug | 1 + mm/page_alloc.c | 13 ++ net/bridge/netfilter/ebtables.c | 3 +- net/ipv4/route.c | 32 +++- net/ipv4/sysctl_net_ipv4.c | 5 +- net/ncsi/ncsi-rsp.c | 6 +- net/netfilter/nf_tables_api.c | 28 ++- net/netfilter/nft_dynset.c | 13 +- net/netfilter/nft_lookup.c | 13 +- net/netfilter/nft_objref.c | 32 +++- net/netrom/af_netrom.c | 76 +++++--- net/netrom/nr_loopback.c | 2 +- net/netrom/nr_route.c | 2 +- net/netrom/sysctl_net_netrom.c | 5 +- net/rds/af_rds.c | 3 + net/rds/bind.c | 2 + net/rds/ib_fmr.c | 11 ++ net/rds/ib_rdma.c | 3 - net/rose/rose_loopback.c | 27 +-- net/rxrpc/input.c | 12 +- net/rxrpc/local_object.c | 3 +- net/sunrpc/cache.c | 3 + net/tipc/netlink_compat.c | 24 ++- net/tls/tls_device.c | 4 +- net/tls/tls_device_fallback.c | 13 +- net/tls/tls_main.c | 5 +- net/tls/tls_sw.c | 3 + sound/pci/hda/patch_realtek.c | 41 +++-- 105 files changed, 874 insertions(+), 396 deletions(-)