This is the start of the stable review cycle for the 4.19.126 release. There are 92 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 04 Jun 2020 10:16:52 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.126-rc2.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.19.126-rc2 Liviu Dudau <liviu@xxxxxxxxxxx> mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap() Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build Qiushi Wu <wu000273@xxxxxxx> bonding: Fix reference count leak in bond_sysfs_slave_add. Eric Dumazet <edumazet@xxxxxxxxxx> crypto: chelsio/chtls: properly set tp->lsndtime Qiushi Wu <wu000273@xxxxxxx> qlcnic: fix missing release in qlcnic_83xx_interrupt_test. Björn Töpel <bjorn.topel@xxxxxxxxx> xsk: Add overflow check for u64 division, stored into u32 Michael Chan <michael.chan@xxxxxxxxxxxx> bnxt_en: Fix accumulation of bp->net_stats_prev. Xin Long <lucien.xin@xxxxxxxxx> esp6: get the right proto for transport mode in esp6_gso_encap Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nfnetlink_cthelper: unbreak userspace helper support Phil Sutter <phil@xxxxxx> netfilter: ipset: Fix subcounter update skip Michael Braun <michael-dev@xxxxxxxxxxxxx> netfilter: nft_reject_bridge: enable reject with bridge vlan Xin Long <lucien.xin@xxxxxxxxx> ip_vti: receive ipip packet by calling ip_tunnel_rcv Jeremy Sowden <jeremy@xxxxxxxxxx> vti4: eliminated some duplicate code. Antony Antony <antony@xxxxxxxxxxx> xfrm: fix error in comment Xin Long <lucien.xin@xxxxxxxxx> xfrm: fix a NULL-ptr deref in xfrm_local_error Xin Long <lucien.xin@xxxxxxxxx> xfrm: fix a warning in xfrm_policy_insert_list Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> xfrm interface: fix oops when deleting a x-netns interface Xin Long <lucien.xin@xxxxxxxxx> xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output Xin Long <lucien.xin@xxxxxxxxx> xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input Al Viro <viro@xxxxxxxxxxxxxxxxxx> copy_xstate_to_kernel(): don't leave parts of destination uninitialized Alexander Dahl <post@xxxxxxxxxxx> x86/dma: Fix max PFN arithmetic overflow on 32 bit systems Linus Lüssing <ll@xxxxxxxxxxxxxxxxxx> mac80211: mesh: fix discovery timer re-arming issue / crash Jason Gunthorpe <jgg@xxxxxxxx> RDMA/core: Fix double destruction of uobject Sarthak Garg <sartgarg@xxxxxxxxxxxxxx> mmc: core: Fix recursive locking issue in CQE recovery path Helge Deller <deller@xxxxxx> parisc: Fix kernel panic in mem_init() Qiushi Wu <wu000273@xxxxxxx> iommu: Fix reference count leak in iommu_group_alloc. Arnd Bergmann <arnd@xxxxxxxx> include/asm-generic/topology.h: guard cpumask_of_node() macro argument Alexander Potapenko <glider@xxxxxxxxxx> fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() Valentine Fatiev <valentinef@xxxxxxxxxxxx> IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode Jerry Lee <leisurelysw24@xxxxxxxxx> libceph: ignore pool overlay and cache logic on redirects Kailang Yang <kailang@xxxxxxxxxxx> ALSA: hda/realtek - Add new codec supported for ALC287 Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio Eric W. Biederman <ebiederm@xxxxxxxxxxxx> exec: Always set cap_ambient in cap_bprm_set_creds Chris Chiu <chiu@xxxxxxxxxxxx> ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC Takashi Iwai <tiwai@xxxxxxx> ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround Changming Liu <liu.changm@xxxxxxxxxxxxxxxx> ALSA: hwdep: fix a left shifting 1 by 31 UB bug Qiushi Wu <wu000273@xxxxxxx> RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() Peng Hao <richard.peng@xxxxxxxx> mmc: block: Fix use-after-free issue for rpmb Hamish Martin <hamish.martin@xxxxxxxxxxxxxxxxxxx> ARM: dts: bcm: HR2: Fix PPI interrupt types Vincent Stehlé <vincent.stehle@xxxxxxxxxxx> ARM: dts: bcm2835-rpi-zero-w: Fix led polarity Robert Beckett <bob.beckett@xxxxxxxxxxxxx> ARM: dts/imx6q-bx50v3: Set display interface clock parents Kaike Wan <kaike.wan@xxxxxxxxx> IB/qib: Call kobject_put() when kobject_init_and_add() fails Takashi Iwai <tiwai@xxxxxxx> gpio: exar: Fix bad handling for ida_simple_get error path Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ARM: uaccess: fix DACR mismatch with nested exceptions Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ARM: uaccess: integrate uaccess_save and uaccess_restore Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h Stefan Agner <stefan@xxxxxxxx> ARM: 8843/1: use unified assembler in headers Łukasz Stelmach <l.stelmach@xxxxxxxxxxx> ARM: 8970/1: decompressor: increase tag size Wei Yongjun <weiyongjun1@xxxxxxxxxx> Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() Evan Green <evgreen@xxxxxxxxxxxx> Input: synaptics-rmi4 - really fix attn_data use-after-free Kevin Locke <kevin@xxxxxxxxxxxxxxx> Input: i8042 - add ThinkPad S230u to i8042 reset list Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> Input: dlink-dir685-touchkeys - fix a typo in driver name Łukasz Patron <priv.luk@xxxxxxxxx> Input: xpad - add custom init packet for Xbox One S controllers Brendan Shanks <bshanks@xxxxxxxxxxxxxxx> Input: evdev - call input_flush_device() on release(), not flush() James Hilliard <james.hilliard1@xxxxxxxxx> Input: usbtouchscreen - add support for BonXeon TP Matteo Croce <mcroce@xxxxxxxxxx> samples: bpf: Fix build error Steve French <stfrench@xxxxxxxxxxxxx> cifs: Fix null pointer check in cifs_read Kefeng Wang <wangkefeng.wang@xxxxxxxxxx> riscv: stacktrace: Fix undefined reference to `walk_stackframe' Denis V. Lunev <den@xxxxxxxxxx> IB/i40iw: Remove bogus call to netdev_master_upper_dev_get() Arnd Bergmann <arnd@xxxxxxxx> net: freescale: select CONFIG_FIXED_PHY where needed Masahiro Yamada <masahiroy@xxxxxxxxxx> usb: gadget: legacy: fix redundant initialization warnings Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> usb: dwc3: pci: Enable extcon driver for Intel Merrifield Lei Xue <carmark.dlut@xxxxxxxxx> cachefiles: Fix race between read_waiter and read_copier involving op->to_do Bob Peterson <rpeterso@xxxxxxxxxx> gfs2: move privileged user check to gfs2_quota_lock_check Chuhong Yuan <hslester96@xxxxxxxxx> net: microchip: encx24j600: add missed kthread_stop Andrew Oakley <andrew@xxxxxxxxxxxxx> ALSA: usb-audio: add mapping for ASRock TRX40 Creator Stephen Warren <swarren@xxxxxxxxxx> gpio: tegra: mask GPIO IRQs during IRQ shutdown Johan Jonker <jbx6244@xxxxxxxxx> ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi Johan Jonker <jbx6244@xxxxxxxxx> ARM: dts: rockchip: swap clock-names of gpu nodes Johan Jonker <jbx6244@xxxxxxxxx> arm64: dts: rockchip: swap interrupts interrupt-names rk3399 gpu node Johan Jonker <jbx6244@xxxxxxxxx> arm64: dts: rockchip: fix status for &gmac2phy in rk3328-evb.dts Johan Jonker <jbx6244@xxxxxxxxx> ARM: dts: rockchip: fix phy nodename for rk3228-evb Jiri Pirko <jiri@xxxxxxxxxxxx> mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails Qiushi Wu <wu000273@xxxxxxx> net/mlx4_core: fix a memory leak bug. Qiushi Wu <wu000273@xxxxxxx> net: sun: fix missing release regions in cas_init_one(). Roi Dayan <roid@xxxxxxxxxxxx> net/mlx5: Annotate mutex destroy for root ns Moshe Shemesh <moshe@xxxxxxxxxxxx> net/mlx5e: Update netdev txq on completions during closure Jere Leppänen <jere.leppanen@xxxxxxxxx> sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed Neil Horman <nhorman@xxxxxxxxxxxxx> sctp: Don't add the shutdown timer if its already been added Marc Payne <marc.payne@xxxxxxxxxxxx> r8152: support additional Microsoft Surface Ethernet Adapter variant Roman Mashak <mrv@xxxxxxxxxxxx> net sched: fix reporting the first-time use timestamp Yuqi Jin <jinyuqi@xxxxxxxxxx> net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" Manivannan Sadhasivam <manivannan.sadhasivam@xxxxxxxxxx> net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() Moshe Shemesh <moshe@xxxxxxxxxxxx> net/mlx5: Add command entry handling completion Vadim Fedorenko <vfedorenko@xxxxxxxx> net: ipip: fix wrong address family in init error path Martin KaFai Lau <kafai@xxxxxx> net: inet_csk: Fix so_reuseport bind-address cache in tb->fast* Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx> __netif_receive_skb_core: pass skb by reference DENG Qingfang <dqfext@xxxxxxxxx> net: dsa: mt7530: fix roaming from DSA user ports Vladimir Oltean <vladimir.oltean@xxxxxxx> dpaa_eth: fix usage as DSA master, try 3 Eric Dumazet <edumazet@xxxxxxxxxx> ax25: fix setsockopt(SO_BINDTODEVICE) ------------- Diffstat: Makefile | 4 +- arch/arm/boot/compressed/vmlinux.lds.S | 2 +- arch/arm/boot/dts/bcm-hr2.dtsi | 6 +- arch/arm/boot/dts/bcm2835-rpi-zero-w.dts | 2 +- arch/arm/boot/dts/imx6q-b450v3.dts | 7 -- arch/arm/boot/dts/imx6q-b650v3.dts | 7 -- arch/arm/boot/dts/imx6q-b850v3.dts | 11 -- arch/arm/boot/dts/imx6q-bx50v3.dtsi | 15 +++ arch/arm/boot/dts/rk3036.dtsi | 2 +- arch/arm/boot/dts/rk3228-evb.dts | 2 +- arch/arm/boot/dts/rk322x.dtsi | 6 +- arch/arm/boot/dts/rk3xxx.dtsi | 2 +- arch/arm/include/asm/assembler.h | 83 +-------------- arch/arm/include/asm/uaccess-asm.h | 117 +++++++++++++++++++++ arch/arm/include/asm/vfpmacros.h | 8 +- arch/arm/kernel/entry-armv.S | 11 +- arch/arm/kernel/entry-header.S | 9 +- arch/arm/lib/bitops.h | 8 +- arch/arm64/boot/dts/rockchip/rk3328-evb.dts | 2 +- arch/arm64/boot/dts/rockchip/rk3399.dtsi | 8 +- arch/parisc/mm/init.c | 2 +- arch/riscv/kernel/stacktrace.c | 2 +- arch/x86/include/asm/dma.h | 2 +- arch/x86/kernel/fpu/xstate.c | 86 ++++++++------- drivers/crypto/chelsio/chtls/chtls_io.c | 2 +- drivers/gpio/gpio-exar.c | 7 +- drivers/gpio/gpio-tegra.c | 1 + drivers/infiniband/core/rdma_core.c | 19 ++-- drivers/infiniband/hw/i40iw/i40iw_cm.c | 8 -- drivers/infiniband/hw/qib/qib_sysfs.c | 9 +- drivers/infiniband/hw/vmw_pvrdma/pvrdma_main.c | 2 +- drivers/infiniband/ulp/ipoib/ipoib.h | 4 + drivers/infiniband/ulp/ipoib/ipoib_cm.c | 15 +-- drivers/infiniband/ulp/ipoib/ipoib_ib.c | 9 +- drivers/infiniband/ulp/ipoib/ipoib_main.c | 10 +- drivers/input/evdev.c | 19 +--- drivers/input/joystick/xpad.c | 12 +++ drivers/input/keyboard/dlink-dir685-touchkeys.c | 2 +- drivers/input/rmi4/rmi_driver.c | 5 +- drivers/input/serio/i8042-x86ia64io.h | 7 ++ drivers/input/touchscreen/usbtouchscreen.c | 1 + drivers/iommu/iommu.c | 2 +- drivers/mmc/core/block.c | 2 +- drivers/mmc/core/queue.c | 13 +-- drivers/net/bonding/bond_sysfs_slave.c | 4 +- drivers/net/dsa/mt7530.c | 9 +- drivers/net/dsa/mt7530.h | 1 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2 +- drivers/net/ethernet/freescale/Kconfig | 2 + drivers/net/ethernet/freescale/dpaa/Kconfig | 1 + drivers/net/ethernet/freescale/dpaa/dpaa_eth.c | 2 +- drivers/net/ethernet/mellanox/mlx4/fw.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 14 +++ drivers/net/ethernet/mellanox/mlx5/core/en_tx.c | 6 +- drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 6 ++ drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 14 ++- drivers/net/ethernet/mellanox/mlxsw/switchx2.c | 8 ++ drivers/net/ethernet/microchip/encx24j600.c | 5 +- .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c | 4 +- drivers/net/ethernet/sun/cassini.c | 3 +- drivers/net/usb/cdc_ether.c | 11 +- drivers/net/usb/r8152.c | 1 + drivers/usb/dwc3/dwc3-pci.c | 1 + drivers/usb/gadget/legacy/inode.c | 3 +- fs/binfmt_elf.c | 2 +- fs/cachefiles/rdwr.c | 2 +- fs/cifs/file.c | 2 +- fs/gfs2/quota.c | 3 +- fs/gfs2/quota.h | 3 +- include/asm-generic/topology.h | 2 +- include/linux/mlx5/driver.h | 1 + include/linux/mm.h | 15 ++- include/linux/netfilter/nf_conntrack_pptp.h | 2 +- include/net/act_api.h | 3 +- include/rdma/uverbs_std_types.h | 2 +- include/uapi/linux/xfrm.h | 2 +- mm/vmalloc.c | 2 +- net/ax25/af_ax25.c | 6 +- net/bridge/netfilter/nft_reject_bridge.c | 6 ++ net/ceph/osd_client.c | 4 +- net/core/dev.c | 20 +++- net/dsa/tag_mtk.c | 15 +++ net/ipv4/inet_connection_sock.c | 43 ++++---- net/ipv4/ip_vti.c | 75 +++++++------ net/ipv4/ipip.c | 2 +- net/ipv4/netfilter/nf_nat_pptp.c | 7 +- net/ipv4/route.c | 14 ++- net/ipv6/esp6_offload.c | 9 +- net/mac80211/mesh_hwmp.c | 7 ++ net/netfilter/ipset/ip_set_list_set.c | 2 +- net/netfilter/nf_conntrack_pptp.c | 62 ++++++----- net/netfilter/nfnetlink_cthelper.c | 3 +- net/qrtr/qrtr.c | 2 +- net/sctp/sm_sideeffect.c | 14 ++- net/sctp/sm_statefuns.c | 9 +- net/xdp/xdp_umem.c | 8 +- net/xfrm/xfrm_input.c | 2 +- net/xfrm/xfrm_interface.c | 21 ++++ net/xfrm/xfrm_output.c | 15 +-- net/xfrm/xfrm_policy.c | 7 +- samples/bpf/lwt_len_hist_user.c | 2 - security/commoncap.c | 1 + sound/core/hwdep.c | 4 +- sound/pci/hda/patch_realtek.c | 39 +++++-- sound/usb/mixer.c | 8 ++ sound/usb/mixer_maps.c | 24 +++++ sound/usb/quirks-table.h | 26 +++++ 107 files changed, 723 insertions(+), 427 deletions(-)
