This is the start of the stable review cycle for the 4.19.67 release. There are 91 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri 16 Aug 2019 04:55:34 PM UTC. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.67-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.19.67-rc1 Luca Coelho <luciano.coelho@xxxxxxxxx> iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support Luca Coelho <luciano.coelho@xxxxxxxxx> iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41 Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx> iwlwifi: mvm: fix an out-of-bound access Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx> iwlwifi: don't unmap as page memory that was mapped as single Brian Norris <briannorris@xxxxxxxxxxxx> mwifiex: fix 802.11n/WPA detection Wanpeng Li <wanpengli@xxxxxxxxxxx> KVM: Fix leak vCPU's VMCS value into other pCPU Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4: Fix an Oops in nfs4_do_setattr Steve French <stfrench@xxxxxxxxxxxxx> smb3: send CAP_DFS capability during session setup Pavel Shilovsky <pshilov@xxxxxxxxxxxxx> SMB3: Fix deadlock in validate negotiate hits reconnect Vivek Goyal <vgoyal@xxxxxxxxxx> dax: dax_layout_busy_page() should not unmap cow pages Brian Norris <briannorris@xxxxxxxxxxxx> mac80211: don't WARN on short WMM parameters from AP Takashi Iwai <tiwai@xxxxxxx> ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457) Takashi Iwai <tiwai@xxxxxxx> ALSA: hda - Don't override global PCM hw info flag Wenwen Wang <wenwen@xxxxxxxxxx> ALSA: hiface: fix multiple memory leak bugs Wenwen Wang <wenwen@xxxxxxxxxx> ALSA: firewire: fix a memory leak bug Stanislav Lisovskiy <stanislav.lisovskiy@xxxxxxxxx> drm/i915: Fix wrong escape clock divisor init for GLK Guenter Roeck <linux@xxxxxxxxxxxx> hwmon: (nct7802) Fix wrong detection of in4 presence Tomas Bortoli <tomasbortoli@xxxxxxxxx> can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices Tomas Bortoli <tomasbortoli@xxxxxxxxx> can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices Wenwen Wang <wenwen@xxxxxxxxxx> ALSA: usb-audio: fix a memory leak bug Nick Desaulniers <ndesaulniers@xxxxxxxxxx> x86/purgatory: Do not use __builtin_memcpy and __builtin_memset Roderick Colenbrander <roderick@xxxxxxxxxx> HID: sony: Fix race condition between rumble and device remove. Halil Pasic <pasic@xxxxxxxxxxxxx> s390/dma: provide proper ARCH_ZONE_DMA_BITS value Leonard Crestez <leonard.crestez@xxxxxxx> perf/core: Fix creating kernel counters for PMUs that override event->cpu Peter Zijlstra <peterz@xxxxxxxxxxxxx> tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop Wenwen Wang <wenwen@xxxxxxxxxx> test_firmware: fix a memory leak bug Hannes Reinecke <hare@xxxxxxx> scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG Tyrel Datwyler <tyreld@xxxxxxxxxxxxxxxxxx> scsi: ibmvfc: fix WARN_ON during event pool release Junxiao Bi <junxiao.bi@xxxxxxxxxx> scsi: megaraid_sas: fix panic on loading firmware crashdump Arnd Bergmann <arnd@xxxxxxxx> ARM: dts: bcm: bcm47094: add missing #cells for mdio-bus-mux Arnd Bergmann <arnd@xxxxxxxx> ARM: davinci: fix sleep.S build error on ARMv4 Marta Rybczynska <mrybczyn@xxxxxxxxx> nvme: fix multipath crash when ANA is deactivated Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx> ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id() Arnd Bergmann <arnd@xxxxxxxx> drbd: dynamically allocate shash descriptor Arnaldo Carvalho de Melo <acme@xxxxxxxxxx> perf probe: Avoid calling freeing routine multiple times for same pointer Jiri Olsa <jolsa@xxxxxxxxxx> perf tools: Fix proper buffer size for feature processing Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxx> ALSA: compress: Be more restrictive about when a drain is allowed Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxx> ALSA: compress: Don't allow paritial drain operations on capture streams Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxx> ALSA: compress: Prevent bypasses of set_params Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxx> ALSA: compress: Fix regression on compressed capture streams Julian Wiedmann <jwi@xxxxxxxxxxxxx> s390/qdio: add sanity checks to the fast-requeue path Wen Yang <wen.yang99@xxxxxxxxxx> cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init() Qian Cai <cai@xxxxxx> drm: silence variable 'conn' set but not used Björn Gerhart <gerhart@xxxxxxxxx> hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 Navid Emamdoost <navid.emamdoost@xxxxxxxxx> allocate_flower_entry: should check for null deref Brian Norris <briannorris@xxxxxxxxxxxx> mac80211: don't warn about CW params when not using them John Crispin <john@xxxxxxxxxxx> nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN Thomas Tai <thomas.tai@xxxxxxxxxx> iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND Tai Man <taiman.wong@xxxxxxx> drm/amd/display: Increase size of audios array Alvin Lee <alvin.lee2@xxxxxxx> drm/amd/display: Only enable audio if speaker allocation exists Julian Parkin <julian.parkin@xxxxxxx> drm/amd/display: Fix dc_create failure handling and 666 color depths Tai Man <taiman.wong@xxxxxxx> drm/amd/display: use encoder's engine id to find matched free audio device SivapiriyanKumarasamy <sivapiriyan.kumarasamy@xxxxxxx> drm/amd/display: Wait for backlight programming completion in set backlight level Mauro Carvalho Chehab <mchehab+samsung@xxxxxxxxxx> scripts/sphinx-pre-install: fix script for RHEL/CentOS Laura Garcia Liebana <nevola@xxxxxxxxx> netfilter: nft_hash: fix symhash with modulus one Florian Westphal <fw@xxxxxxxxx> netfilter: conntrack: always store window size un-scaled Miaohe Lin <linmiaohe@xxxxxxxxxx> netfilter: Fix rpfilter dropping vrf packets by mistake Farhan Ali <alifm@xxxxxxxxxxxxx> vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn Florian Westphal <fw@xxxxxxxxx> netfilter: nfnetlink: avoid deadlock due to synchronous request_module Stephane Grosjean <s.grosjean@xxxxxxxxxxxxxxx> can: peak_usb: fix potential double kfree_skb() Nikita Yushchenko <nikita.yoush@xxxxxxxxxxxxxxxxxx> can: rcar_canfd: fix possible IRQ storm on high load Guenter Roeck <linux@xxxxxxxxxxxx> usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests Guenter Roeck <linux@xxxxxxxxxxxx> usb: typec: tcpm: Add NULL check before dereferencing config Li Jun <jun.li@xxxxxxx> usb: typec: tcpm: remove tcpm dir if no children Li Jun <jun.li@xxxxxxx> usb: typec: tcpm: free log buf memory when remove debug file Suzuki K Poulose <suzuki.poulose@xxxxxxx> usb: yurex: Fix use-after-free in yurex_delete Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx> usb: host: xhci-rcar: Fix timeout in xhci_suspend() Andreas Gruenbacher <agruenba@xxxxxxxxxx> gfs2: gfs2_walk_metadata fix Nick Desaulniers <ndesaulniers@xxxxxxxxxx> x86/purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS Thomas Richter <tmricht@xxxxxxxxxxxxx> perf record: Fix module size on s390 Adrian Hunter <adrian.hunter@xxxxxxxxx> perf db-export: Fix thread__exec_comm() Thomas Richter <tmricht@xxxxxxxxxxxxx> perf annotate: Fix s390 gap between kernel end and module start Joerg Roedel <jroedel@xxxxxxx> mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() Joerg Roedel <jroedel@xxxxxxx> x86/mm: Sync also unmappings in vmalloc_sync_all() Joerg Roedel <jroedel@xxxxxxx> x86/mm: Check for pfn instead of page in vmalloc_sync_one() Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> Input: synaptics - enable RMI mode for HP Spectre X360 Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> Input: elantech - enable SMBus on new (2018+) systems Oliver Neukum <oneukum@xxxxxxxx> Input: usbtouchscreen - initialize PM mutex before using it Mikulas Patocka <mpatocka@xxxxxxxxxx> loop: set PF_MEMALLOC_NOIO for the worker thread Kevin Hao <haokexin@xxxxxxxxx> mmc: cavium: Add the missing dma unmap when the dma has finished. Kevin Hao <haokexin@xxxxxxxxx> mmc: cavium: Set the correct dma max segment size for mmc_host Wenwen Wang <wenwen@xxxxxxxxxx> sound: fix a memory leak bug Oliver Neukum <oneukum@xxxxxxxx> usb: iowarrior: fix deadlock on disconnect Gavin Li <git@xxxxxxxxxxxxxx> usb: usbfs: fix double-free of usb memory upon submiturb error Gary R Hook <gary.hook@xxxxxxx> crypto: ccp - Ignore tag length when decrypting GCM ciphertext Gary R Hook <gary.hook@xxxxxxx> crypto: ccp - Add support for valid authsize values less than 16 Gary R Hook <gary.hook@xxxxxxx> crypto: ccp - Fix oops by properly managing allocated structures Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> staging: android: ion: Bail out upon SIGKILL when allocating memory. Ivan Bornyakov <brnkv.i1@xxxxxxxxx> staging: gasket: apex: fix copy-paste typo Joe Perches <joe@xxxxxxxxxxx> iio: adc: max9611: Fix misuse of GENMASK macro Gwendal Grignou <gwendal@xxxxxxxxxxxx> iio: cros_ec_accel_legacy: Fix incorrect channel setting ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/bcm47094-linksys-panamera.dts | 3 + arch/arm/mach-davinci/sleep.S | 1 + arch/powerpc/kvm/powerpc.c | 5 + arch/s390/include/asm/page.h | 2 + arch/x86/boot/string.c | 8 + arch/x86/include/asm/kvm_host.h | 1 + arch/x86/kvm/svm.c | 6 + arch/x86/kvm/vmx.c | 6 + arch/x86/kvm/x86.c | 16 ++ arch/x86/mm/fault.c | 15 +- arch/x86/purgatory/Makefile | 36 ++++- arch/x86/purgatory/purgatory.c | 6 + arch/x86/purgatory/string.c | 25 ---- drivers/acpi/arm64/iort.c | 4 +- drivers/block/drbd/drbd_receiver.c | 14 +- drivers/block/loop.c | 2 +- drivers/cpufreq/pasemi-cpufreq.c | 23 ++- drivers/crypto/ccp/ccp-crypto-aes-galois.c | 14 ++ drivers/crypto/ccp/ccp-ops.c | 33 +++-- drivers/firmware/Kconfig | 5 +- drivers/firmware/iscsi_ibft.c | 4 + drivers/gpu/drm/amd/display/dc/core/dc.c | 6 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 11 +- drivers/gpu/drm/amd/display/dc/dce/dce_abm.c | 4 + drivers/gpu/drm/amd/display/dc/inc/core_types.h | 2 +- drivers/gpu/drm/amd/display/dc/inc/hw/hw_shared.h | 1 + drivers/gpu/drm/drm_framebuffer.c | 2 +- drivers/gpu/drm/i915/vlv_dsi_pll.c | 4 +- drivers/hid/hid-sony.c | 15 +- drivers/hwmon/nct6775.c | 3 +- drivers/hwmon/nct7802.c | 6 +- drivers/iio/accel/cros_ec_accel_legacy.c | 1 - drivers/iio/adc/max9611.c | 2 +- drivers/input/mouse/elantech.c | 54 ++++--- drivers/input/mouse/synaptics.c | 1 + drivers/input/touchscreen/usbtouchscreen.c | 2 + drivers/mmc/host/cavium.c | 4 +- drivers/net/can/rcar/rcar_canfd.c | 9 +- drivers/net/can/usb/peak_usb/pcan_usb_core.c | 8 +- drivers/net/can/usb/peak_usb/pcan_usb_fd.c | 2 +- drivers/net/can/usb/peak_usb/pcan_usb_pro.c | 2 +- .../net/ethernet/chelsio/cxgb4/cxgb4_tc_flower.c | 3 +- drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 29 +++- drivers/net/wireless/intel/iwlwifi/pcie/tx.c | 2 + drivers/net/wireless/marvell/mwifiex/main.h | 1 + drivers/net/wireless/marvell/mwifiex/scan.c | 3 +- drivers/nvme/host/multipath.c | 8 +- drivers/nvme/host/nvme.h | 6 +- drivers/s390/cio/qdio_main.c | 12 +- drivers/s390/cio/vfio_ccw_cp.c | 4 +- drivers/scsi/device_handler/scsi_dh_alua.c | 7 +- drivers/scsi/ibmvscsi/ibmvfc.c | 2 +- drivers/scsi/megaraid/megaraid_sas_base.c | 3 + drivers/staging/android/ion/ion_page_pool.c | 3 + drivers/staging/gasket/apex_driver.c | 2 +- drivers/tty/tty_ldsem.c | 5 +- drivers/usb/core/devio.c | 2 - drivers/usb/host/xhci-rcar.c | 9 +- drivers/usb/misc/iowarrior.c | 7 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/typec/tcpm.c | 58 +++++--- fs/cifs/smb2pdu.c | 7 +- fs/dax.c | 2 +- fs/gfs2/bmap.c | 164 +++++++++++++-------- fs/nfs/nfs4proc.c | 2 +- include/linux/ccp.h | 2 + include/linux/kvm_host.h | 1 + include/sound/compress_driver.h | 5 +- include/uapi/linux/nl80211.h | 2 +- kernel/events/core.c | 2 +- lib/test_firmware.c | 5 +- mm/vmalloc.c | 9 ++ net/ipv4/netfilter/ipt_rpfilter.c | 1 + net/ipv6/netfilter/ip6t_rpfilter.c | 8 +- net/mac80211/driver-ops.c | 13 +- net/mac80211/mlme.c | 10 ++ net/netfilter/nf_conntrack_proto_tcp.c | 8 +- net/netfilter/nfnetlink.c | 2 +- net/netfilter/nft_hash.c | 2 +- scripts/sphinx-pre-install | 2 +- sound/core/compress_offload.c | 60 ++++++-- sound/firewire/packets-buffer.c | 2 +- sound/pci/hda/hda_controller.c | 13 +- sound/pci/hda/hda_controller.h | 2 +- sound/pci/hda/hda_intel.c | 63 +++++++- sound/sound_core.c | 3 +- sound/usb/hiface/pcm.c | 11 +- sound/usb/stream.c | 1 + tools/perf/arch/s390/util/machine.c | 31 +++- tools/perf/builtin-probe.c | 10 ++ tools/perf/util/header.c | 2 +- tools/perf/util/machine.c | 3 +- tools/perf/util/machine.h | 2 +- tools/perf/util/symbol.c | 7 +- tools/perf/util/symbol.h | 1 + tools/perf/util/thread.c | 12 +- virt/kvm/kvm_main.c | 25 +++- 98 files changed, 738 insertions(+), 297 deletions(-)