This is the start of the stable review cycle for the 5.3.16 release. There are 105 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 13 Dec 2019 14:56:06 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.3.16-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.3.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.3.16-rc1 Jann Horn <jannh@xxxxxxxxxx> binder: Handle start==NULL in binder_update_page_range() Jann Horn <jannh@xxxxxxxxxx> binder: Prevent repeated use of ->mmap() via NULL mapping Jann Horn <jannh@xxxxxxxxxx> binder: Fix race between mmap() and binder_alloc_print_pages() Nicolas Pitre <nico@xxxxxxxxxxx> vcs: prevent write access to vcsu devices Wei Wang <wvw@xxxxxxxxxx> thermal: Fix deadlock in thermal thermal_zone_device_check Jan Kara <jack@xxxxxxx> iomap: Fix pipe page leakage during splicing Viresh Kumar <viresh.kumar@xxxxxxxxxx> RDMA/qib: Validate ->show()/store() callbacks before calling them Johan Hovold <johan@xxxxxxxxxx> can: ucan: fix non-atomic allocation in completion handler Gregory CLEMENT <gregory.clement@xxxxxxxxxxx> spi: Fix NULL pointer when setting SPI_CS_HIGH for GPIO CS Gregory CLEMENT <gregory.clement@xxxxxxxxxxx> spi: Fix SPI_CS_HIGH setting when using native and GPIO CS Gregory CLEMENT <gregory.clement@xxxxxxxxxxx> spi: atmel: Fix CS high support Patrice Chotard <patrice.chotard@xxxxxx> spi: stm32-qspi: Fix kernel oops when unbinding driver Frieder Schrempf <frieder.schrempf@xxxxxxxxxx> spi: spi-fsl-qspi: Clear TDH bits in FLSHCR register Navid Emamdoost <navid.emamdoost@xxxxxxxxx> crypto: user - fix memory leak in crypto_reportstat Navid Emamdoost <navid.emamdoost@xxxxxxxxx> crypto: user - fix memory leak in crypto_report Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx> crypto: ecdh - fix big endian bug in ECC library Mark Salter <msalter@xxxxxxxxxx> crypto: ccp - fix uninitialized list head Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx> crypto: geode-aes - switch to skcipher for cbc(aes) fallback Ayush Sawal <ayush.sawal@xxxxxxxxxxx> crypto: af_alg - cast ki_complete ternary op to int Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> crypto: atmel-aes - Fix IV handling when req->nbytes < ivsize Christian Lamparter <chunkeey@xxxxxxxxx> crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: x86: Grab KVM's srcu lock when setting nested state Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: x86: Remove a spurious export of a static function Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: x86: do not modify masked bits of shared MSRs Zenghui Yu <yuzenghui@xxxxxxxxxx> KVM: arm/arm64: vgic: Don't rely on the wrong pending table Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: nVMX: Always write vmcs02.GUEST_CR3 during nested VM-Enter Greg Kurz <groug@xxxxxxxx> KVM: PPC: Book3S HV: XIVE: Set kvm->arch.xive when VPs are allocated Greg Kurz <groug@xxxxxxxx> KVM: PPC: Book3S HV: XIVE: Fix potential page leak on error path Greg Kurz <groug@xxxxxxxx> KVM: PPC: Book3S HV: XIVE: Free previous EQ page when setting up a new one Marek Szyprowski <m.szyprowski@xxxxxxxxxxx> arm64: dts: exynos: Revert "Remove unneeded address space mapping for soc node" Dan Carpenter <dan.carpenter@xxxxxxxxxx> drm/i810: Prevent underflow in ioctl Sean Paul <seanpaul@xxxxxxxxxxxx> drm: damage_helper: Fix race checking plane->state->fb Johan Hovold <johan@xxxxxxxxxx> drm/msm: fix memleak on release Jan Kara <jack@xxxxxxx> jbd2: Fix possible overflow in jbd2_log_space_left() Tejun Heo <tj@xxxxxxxxxx> kernfs: fix ino wrap-around detection J. Bruce Fields <bfields@xxxxxxxxxx> nfsd: restore NFSv3 ACL support Trond Myklebust <trondmy@xxxxxxxxx> nfsd: Ensure CLONE persists data and metadata changes to the target file Jouni Hogander <jouni.hogander@xxxxxxxxxx> can: slcan: Fix use-after-free Read in slcan_open Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> tty: vt: keyboard: reject invalid keycodes Pavel Shilovsky <pshilov@xxxxxxxxxxxxx> CIFS: Fix SMB2 oplock break processing Pavel Shilovsky <pshilov@xxxxxxxxxxxxx> CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect Joerg Roedel <jroedel@xxxxxxx> x86/mm/32: Sync only to VMALLOC_END in vmalloc_sync_all() Sean Young <sean@xxxxxxxx> media: rc: mark input device as pointing stick Navid Emamdoost <navid.emamdoost@xxxxxxxxx> Input: Fix memory leak in psxpad_spi_probe Mike Leach <mike.leach@xxxxxxxxxx> coresight: etm4x: Fix input validation for sysfs. Hans de Goede <hdegoede@xxxxxxxxxx> Input: goodix - add upside-down quirk for Teclast X89 tablet Hans Verkuil <hverkuil-cisco@xxxxxxxxx> Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers Lucas Stach <l.stach@xxxxxxxxxxxxxx> Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash Hans Verkuil <hverkuil-cisco@xxxxxxxxx> Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus Takashi Iwai <tiwai@xxxxxxx> ALSA: hda: Modify stream stripe mask only when needed Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> ALSA: hda - Add mute led support for HP ProBook 645 G4 Takashi Iwai <tiwai@xxxxxxx> ALSA: pcm: oss: Avoid potential buffer overflows Kailang Yang <kailang@xxxxxxxxxxx> ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 Hui Wang <hui.wang@xxxxxxxxxxxxx> ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop Jian-Hong Pan <jian-hong@xxxxxxxxxxxx> ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> SUNRPC: Avoid RPC delays when exiting suspend Jens Axboe <axboe@xxxxxxxxx> io_uring: ensure req->submit is copied when req is deferred Miklos Szeredi <mszeredi@xxxxxxxxxx> fuse: verify attributes Miklos Szeredi <mszeredi@xxxxxxxxxx> fuse: verify nlink Jens Axboe <axboe@xxxxxxxxx> io_uring: transform send/recvmsg() -ERESTARTSYS to -EINTR Wen Yang <wenyang@xxxxxxxxxxxxxxxxx> i2c: core: fix use after free in of_i2c_notify Chuhong Yuan <hslester96@xxxxxxxxx> net: ep93xx_eth: fix mismatch of request_mem_region in remove David Howells <dhowells@xxxxxxxxxx> afs: Fix race in commit bulk status fetch Yonglong Liu <liuyonglong@xxxxxxxxxx> net: hns3: fix ETS bandwidth validation bug Yunsheng Lin <linyunsheng@xxxxxxxxxx> net: hns3: reallocate SSU' buffer size when pfc_en changes Ulrich Hecht <uli+renesas@xxxxxxxx> ravb: implement MTU change while device is up Chuhong Yuan <hslester96@xxxxxxxxx> rsxx: add missed destroy_workqueue calls in remove Ilya Dryomov <idryomov@xxxxxxxxx> rbd: silence bogus uninitialized warning in rbd_object_map_update_finish() Vitaly Kuznetsov <vkuznets@xxxxxxxxxx> selftests: kvm: fix build with glibc >= 2.30 Yunhao Tian <t123yh@xxxxxxxxxxx> drm/sun4i: tcon: Set min division of TCON0_DCLK to 1. Xiaochen Shen <xiaochen.shen@xxxxxxxxx> x86/resctrl: Fix potential lockdep warning paulhsia <paulhsia@xxxxxxxxxxxx> ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed() Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx> perf/core: Consistently fail fork on allocation failures Vincent Guittot <vincent.guittot@xxxxxxxxxx> sched/pelt: Fix update of blocked PELT ordering Peter Zijlstra <peterz@xxxxxxxxxxxxx> sched/core: Avoid spurious lock dependencies Pan Bian <bianpan2016@xxxxxxx> Input: cyttsp4_core - fix use after free bug Junichi Nomura <j-nomura@xxxxxxxxxxxxx> block: check bi_size overflow before merge Xiaodong Xu <stid.smth@xxxxxxxxx> xfrm: release device reference for invalid state Stephan Gerhold <stephan@xxxxxxxxxxx> NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error Chiou, Cooper <cooper.chiou@xxxxxxxxx> ALSA: hda: Add Cometlake-S PCI ID Al Viro <viro@xxxxxxxxxxxxxxxxxx> ecryptfs: fix unlink and rmdir in face of underlying fs modifications Al Viro <viro@xxxxxxxxxxxxxxxxxx> audit_get_nd(): don't unlock parent too early Al Viro <viro@xxxxxxxxxxxxxxxxxx> exportfs_decode_fh(): negative pinned may become positive without the parent locked Al Viro <viro@xxxxxxxxxxxxxxxxxx> cgroup: don't put ERR_PTR() into fc->root Mordechay Goodstein <mordechay.goodstein@xxxxxxxxx> iwlwifi: pcie: don't consider IV len in A-MSDU Wenpeng Liang <liangwenpeng@xxxxxxxxxx> RDMA/hns: Correct the value of srq_desc_size Sirong Wang <wangsirong@xxxxxxxxxx> RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN Thomas Bogendoerfer <tbogendoerfer@xxxxxxx> MIPS: SGI-IP27: fix exception handler replication Al Viro <viro@xxxxxxxxxxxxxxxxxx> autofs: fix a leak in autofs_expire_indirect() Guillem Jover <guillem@xxxxxxxxxxx> aio: Fix io_pgetevents() struct __compat_aio_sigset layout Chuhong Yuan <hslester96@xxxxxxxxx> serial: ifx6x60: add missed pm_runtime_disable Fabrice Gasnier <fabrice.gasnier@xxxxxx> serial: stm32: fix clearing interrupt error flags Jiangfeng Xiao <xiaojiangfeng@xxxxxxxxxx> serial: serial_core: Perform NULL checks for break_ctl ops Vincent Whitchurch <vincent.whitchurch@xxxxxxxx> serial: pl011: Fix DMA ->flush_buffer() Jeffrey Hugo <jeffrey.l.hugo@xxxxxxxxx> tty: serial: msm_serial: Fix flow control Peng Fan <peng.fan@xxxxxxx> tty: serial: fsl_lpuart: use the sg count from dma_map_sg Michał Mirosław <mirq-linux@xxxxxxxxxxxx> usb: gadget: u_serial: add missing port entry locking Dmitry Safonov <0x7f454c46@xxxxxxxxx> time: Zero the upper 32-bits in __kernel_timespec on 32-bit Arnd Bergmann <arnd@xxxxxxxx> lp: fix sparc64 LPSETTIMEOUT ioctl Tuowen Zhao <ztuowen@xxxxxxxxx> sparc64: implement ioremap_uc Adrian Hunter <adrian.hunter@xxxxxxxxx> perf scripts python: exported-sql-viewer.py: Fix use of TRUE with SQLite Jon Hunter <jonathanh@xxxxxxxxxx> arm64: tegra: Fix 'active-low' warning for Jetson TX1 regulator Navid Emamdoost <navid.emamdoost@xxxxxxxxx> rsi: release skb if rsi_prepare_beacon fails ------------- Diffstat: Makefile | 4 +- arch/arm64/boot/dts/exynos/exynos5433.dtsi | 6 +- arch/arm64/boot/dts/exynos/exynos7.dtsi | 6 +- arch/arm64/boot/dts/nvidia/tegra210-p2597.dtsi | 2 +- arch/mips/sgi-ip27/Kconfig | 7 --- arch/mips/sgi-ip27/ip27-init.c | 21 ++----- arch/mips/sgi-ip27/ip27-memory.c | 4 -- arch/powerpc/kvm/book3s_xive.c | 11 ++-- arch/powerpc/kvm/book3s_xive_native.c | 46 +++++++++------ arch/sparc/include/asm/io_64.h | 1 + arch/x86/kernel/cpu/resctrl/rdtgroup.c | 4 -- arch/x86/kvm/vmx/nested.c | 10 ++++ arch/x86/kvm/vmx/vmx.c | 10 +++- arch/x86/kvm/x86.c | 17 ++++-- arch/x86/mm/fault.c | 2 +- arch/x86/pci/fixup.c | 11 ++++ block/bio.c | 2 +- crypto/af_alg.c | 2 +- crypto/crypto_user_base.c | 4 +- crypto/crypto_user_stat.c | 4 +- crypto/ecc.c | 3 +- drivers/android/binder_alloc.c | 41 ++++++++------ drivers/block/rbd.c | 2 +- drivers/block/rsxx/core.c | 2 + drivers/char/lp.c | 4 ++ drivers/crypto/amcc/crypto4xx_core.c | 6 +- drivers/crypto/atmel-aes.c | 53 ++++++++++-------- drivers/crypto/ccp/ccp-dmaengine.c | 1 + drivers/crypto/geode-aes.c | 57 +++++++++++-------- drivers/crypto/geode-aes.h | 2 +- drivers/gpu/drm/drm_damage_helper.c | 8 ++- drivers/gpu/drm/i810/i810_dma.c | 4 +- drivers/gpu/drm/msm/msm_debugfs.c | 6 +- drivers/gpu/drm/sun4i/sun4i_tcon.c | 2 +- .../hwtracing/coresight/coresight-etm4x-sysfs.c | 21 ++++--- drivers/i2c/i2c-core-of.c | 4 +- drivers/infiniband/hw/hns/hns_roce_hem.h | 2 +- drivers/infiniband/hw/hns/hns_roce_srq.c | 2 +- drivers/infiniband/hw/qib/qib_sysfs.c | 6 ++ drivers/input/joystick/psxpad-spi.c | 2 +- drivers/input/mouse/synaptics.c | 1 + drivers/input/rmi4/rmi_f34v7.c | 3 + drivers/input/rmi4/rmi_smbus.c | 2 - drivers/input/touchscreen/cyttsp4_core.c | 7 --- drivers/input/touchscreen/goodix.c | 9 +++ drivers/media/rc/rc-main.c | 1 + drivers/net/can/slcan.c | 1 + drivers/net/can/usb/ucan.c | 2 +- drivers/net/ethernet/cirrus/ep93xx_eth.c | 5 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 19 ++++++- drivers/net/ethernet/renesas/ravb.h | 3 +- drivers/net/ethernet/renesas/ravb_main.c | 26 +++++---- drivers/net/wireless/intel/iwlwifi/pcie/tx-gen2.c | 20 +++---- drivers/net/wireless/rsi/rsi_91x_mgmt.c | 1 + drivers/nfc/nxp-nci/i2c.c | 6 +- drivers/spi/spi-atmel.c | 6 +- drivers/spi/spi-fsl-qspi.c | 38 +++++++++++-- drivers/spi/spi-stm32-qspi.c | 3 +- drivers/spi/spi.c | 19 ++++--- drivers/thermal/thermal_core.c | 4 +- drivers/tty/serial/amba-pl011.c | 6 +- drivers/tty/serial/fsl_lpuart.c | 4 +- drivers/tty/serial/ifx6x60.c | 3 + drivers/tty/serial/msm_serial.c | 6 +- drivers/tty/serial/serial_core.c | 2 +- drivers/tty/serial/stm32-usart.c | 6 +- drivers/tty/vt/keyboard.c | 2 +- drivers/tty/vt/vc_screen.c | 3 + drivers/usb/gadget/function/u_serial.c | 2 + fs/afs/dir.c | 7 ++- fs/aio.c | 10 ++-- fs/autofs/expire.c | 5 +- fs/cifs/file.c | 7 ++- fs/cifs/smb2misc.c | 7 +-- fs/ecryptfs/inode.c | 65 +++++++++++++--------- fs/exportfs/expfs.c | 31 +++++++---- fs/fuse/dir.c | 25 ++++++--- fs/fuse/fuse_i.h | 2 + fs/fuse/readdir.c | 2 +- fs/io_uring.c | 9 ++- fs/iomap/direct-io.c | 9 ++- fs/kernfs/dir.c | 5 +- fs/nfsd/nfs4proc.c | 3 +- fs/nfsd/nfssvc.c | 3 +- fs/nfsd/vfs.c | 8 ++- fs/nfsd/vfs.h | 2 +- include/linux/jbd2.h | 4 +- include/linux/kernfs.h | 1 + include/sound/hdaudio.h | 1 + kernel/audit_watch.c | 2 +- kernel/cgroup/cgroup.c | 5 +- kernel/events/core.c | 2 +- kernel/sched/core.c | 3 +- kernel/sched/fair.c | 29 +++++++--- kernel/time/time.c | 3 +- net/sunrpc/sched.c | 2 +- net/xfrm/xfrm_input.c | 3 + sound/core/oss/linear.c | 2 + sound/core/oss/mulaw.c | 2 + sound/core/oss/route.c | 2 + sound/core/pcm_lib.c | 8 ++- sound/hda/hdac_stream.c | 19 ++++--- sound/pci/hda/hda_intel.c | 3 + sound/pci/hda/patch_conexant.c | 1 + sound/pci/hda/patch_hdmi.c | 5 ++ sound/pci/hda/patch_realtek.c | 18 +++++- tools/perf/scripts/python/exported-sql-viewer.py | 10 +++- tools/testing/selftests/kvm/lib/assert.c | 4 +- virt/kvm/arm/vgic/vgic-v3.c | 6 +- 109 files changed, 597 insertions(+), 350 deletions(-)
