This is the start of the stable review cycle for the 4.14.196 release. There are 91 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 03 Sep 2020 15:09:01 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.196-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.14.196-rc1 Hector Martin <marcan@xxxxxxxxx> ALSA: usb-audio: Update documentation comment for MS2109 quirk Peilin Ye <yepeilin.cs@xxxxxxxxx> HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx> tpm: Unify the mismatching TPM space buffer sizes Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: check the right error variable in btrfs_del_dir_entries_in_log Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> usb: storage: Add unusual_uas entry for Sony PSZ drives Tom Rix <trix@xxxxxxxxxx> USB: cdc-acm: rework notification_buffer resizing Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> USB: gadget: u_f: Unbreak offset calculation in VLAs Brooke Basile <brookebasile@xxxxxxxxx> USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() Brooke Basile <brookebasile@xxxxxxxxx> USB: gadget: u_f: add overflow checks to VLA macros Kees Cook <keescook@xxxxxxxxxxxx> overflow.h: Add allocation size calculation helpers Tang Bin <tangbin@xxxxxxxxxxxxxxxxxxxx> usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe() Cyril Roelandt <tipecaml@xxxxxxxxx> USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> USB: quirks: Add no-lpm quirk for another Raydium touchscreen Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: uas: Add quirk for PNY Pro Elite Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: yurex: Fix bad gfp argument Alex Deucher <alexander.deucher@xxxxxxx> drm/amdgpu: Fix buffer overflow in INFO ioctl Heikki Krogerus <heikki.krogerus@xxxxxxxxxxxxxxx> device property: Fix the secondary firmware node handling in set_primary_fwnode() Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> PM: sleep: core: Fix the handling of pending runtime resume requests Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> xhci: Do warm-reset when both CAS and XDEV_RESUME are set Thomas Gleixner <tglx@xxxxxxxxxxxxx> XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information. Jan Kara <jack@xxxxxxx> writeback: Fix sync livelock due to b_dirty_time processing Jan Kara <jack@xxxxxxx> writeback: Avoid skipping inode writeback Jan Kara <jack@xxxxxxx> writeback: Protect inode->i_io_list with inode->i_lock Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx> serial: 8250: change lock order in serial8250_do_startup() Valmer Huhn <valmer.huhn@xxxxxxxxxxxxxxxxx> serial: 8250_exar: Fix number of ports for Commtech PCIe cards Lukas Wunner <lukas@xxxxxxxxx> serial: pl011: Don't leak amba_ports entry on driver register error Lukas Wunner <lukas@xxxxxxxxx> serial: pl011: Fix oops on -EPROBE_DEFER Tamseel Shams <m.shams@xxxxxxxxxxx> serial: samsung: Removes the IRQ not found warning George Kennedy <george.kennedy@xxxxxxxxxx> vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize() Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> vt: defer kfree() of vc_screenbuf in vc_do_resize() Evgeny Novikov <novikov@xxxxxxxxx> USB: lvtest: return proper error code in probe George Kennedy <george.kennedy@xxxxxxxxxx> fbcon: prevent user font height or width change from causing potential out-of-bounds access Filipe Manana <fdmanana@xxxxxxxx> btrfs: fix space cache memory leak after transaction abort Hans de Goede <hdegoede@xxxxxxxxxx> HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands Athira Rajeev <atrajeev@xxxxxxxxxxxxxxxxxx> powerpc/perf: Fix soft lockups due to missed interrupt accounting Sumera Priyadarsini <sylphrenadin@xxxxxxxxx> net: gianfar: Add of_node_put() before goto statement Stanley Chu <stanley.chu@xxxxxxxxxxxx> scsi: ufs: Clean up completed request without interrupt notification Adrian Hunter <adrian.hunter@xxxxxxxxx> scsi: ufs: Improve interrupt handling for shared interrupts Stanley Chu <stanley.chu@xxxxxxxxxxxx> scsi: ufs: Fix possible infinite loop in ufshcd_hold Vineeth Vijayan <vneethv@xxxxxxxxxxxxx> s390/cio: add cond_resched() in the slow_eval_known_fn() loop Amelie Delaunay <amelie.delaunay@xxxxxx> spi: stm32: fix stm32_spi_prepare_mbr in case of odd clk_rate Xianting Tian <xianting_tian@xxxxxxx> fs: prevent BUG_ON in submit_bh_wbc() zhangyi (F) <yi.zhang@xxxxxxxxxx> jbd2: abort journal if free a async write error metadata buffer Jan Kara <jack@xxxxxxx> ext4: don't BUG on inconsistent journal feature Lukas Czerner <lczerner@xxxxxxxxxx> jbd2: make sure jh have b_transaction set in refile/unfile_buffer Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> usb: gadget: f_tcm: Fix some resource leaks in some error paths Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: rcar: in slave mode, clear NACK earlier Hou Pu <houpu@xxxxxxxxxxxxx> null_blk: fix passing of REQ_FUA flag in null_handle_rq Tianjia Zhang <tianjia.zhang@xxxxxxxxxxxxxxxxx> nvme-fc: Fix wrong return value in __nvme_fc_init_request() Sean Young <sean@xxxxxxxx> media: gpio-ir-tx: improve precision of transmitted signal due to scheduling Zhi Chen <zhichen@xxxxxxxxxxxxxx> Revert "ath10k: fix DMA related firmware crashes on multiple devices" Andrey Konovalov <andreyknvl@xxxxxxxxxx> efi: provide empty efi_enter_virtual_mode implementation Changming Liu <charley.ashbringer@xxxxxxxxx> USB: sisusbvga: Fix a potential UB casued by left shifting a negative value Arnd Bergmann <arnd@xxxxxxxx> powerpc/spufs: add CONFIG_COREDUMP dependency David Brazdil <dbrazdil@xxxxxxxxxx> KVM: arm64: Fix symbol dependency in __hyp_call_panic_nvhe Evgeny Novikov <novikov@xxxxxxxxx> media: davinci: vpif_capture: fix potential double free Jason Baron <jbaron@xxxxxxxxxx> EDAC/ie31200: Fallback if host bridge device is already initialized Javed Hasan <jhasan@xxxxxxxxxxx> scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() Xiubo Li <xiubli@xxxxxxxxxx> ceph: fix potential mdsc use-after-free crash Jing Xiangfeng <jingxiangfeng@xxxxxxxxxx> scsi: iscsi: Do not put host in iscsi_set_flashnode_param() Chris Wilson <chris@xxxxxxxxxxxxxxxxxx> locking/lockdep: Fix overflow in presentation of average lock-time Aditya Pakki <pakki001@xxxxxxx> drm/nouveau: Fix reference count leak in nouveau_connector_detect Aditya Pakki <pakki001@xxxxxxx> drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open Li Guifu <bluce.liguifu@xxxxxxxxxx> f2fs: fix use-after-free issue Hans Verkuil <hverkuil-cisco@xxxxxxxxx> cec-api: prevent leaking memory through hole in structure Peng Fan <fanpeng@xxxxxxxxxxx> mips/vdso: Fix resource leaks in genvdso.c Reto Schneider <code@xxxxxxxxxxxxxxxxx> rtlwifi: rtl8192cu: Prevent leaking urb Qiushi Wu <wu000273@xxxxxxx> PCI: Fix pci_create_slot() reference count leak Aditya Pakki <pakki001@xxxxxxx> omapfb: fix multiple reference count leaks due to pm_runtime_get_sync Desnes A. Nunes do Rosario <desnesn@xxxxxxxxxxxxx> selftests/powerpc: Purge extra count_pmc() calls of ebb selftests Dick Kennedy <dick.kennedy@xxxxxxxxxxxx> scsi: lpfc: Fix shost refcount mismatch when deleting vport Navid Emamdoost <navid.emamdoost@xxxxxxxxx> drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails Navid Emamdoost <navid.emamdoost@xxxxxxxxx> drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config Navid Emamdoost <navid.emamdoost@xxxxxxxxx> drm/amd/display: fix ref count leak in amdgpu_drm_ioctl Navid Emamdoost <navid.emamdoost@xxxxxxxxx> drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms Aditya Pakki <pakki001@xxxxxxx> drm/radeon: fix multiple reference count leak Qiushi Wu <wu000273@xxxxxxx> drm/amdkfd: Fix reference count leaks. Robin Murphy <robin.murphy@xxxxxxx> iommu/iova: Don't BUG on invalid PFNs Bodo Stroesser <bstroesser@xxxxxxxxxxxxxx> scsi: target: tcmu: Fix crash on ARM during cmd completion Luis Chamberlain <mcgrof@xxxxxxxxxx> blktrace: ensure our debugfs dir exists Jia-Ju Bai <baijiaju@xxxxxxxxxxxxxxx> media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() Alexey Kardashevskiy <aik@xxxxxxxxx> powerpc/xive: Ignore kmemleak false positives Stephan Gerhold <stephan@xxxxxxxxxxx> arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs Qiushi Wu <wu000273@xxxxxxx> ASoC: tegra: Fix reference count leaks. Randy Dunlap <rdunlap@xxxxxxxxxxxxx> ALSA: pci: delete repeated words in comments Mark Tomlinson <mark.tomlinson@xxxxxxxxxxxxxxxxxxx> gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY Mahesh Bandewar <maheshb@xxxxxxxxxx> ipvlan: fix device features Cong Wang <xiyou.wangcong@xxxxxxxxx> tipc: fix uninit skb->data in tipc_nl_compat_dumpit() Miaohe Lin <linmiaohe@xxxxxxxxxx> net: Fix potential wrong skb->protocol in skb_vlan_untag() Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/64s: Don't init FSCR_DSCR in __init_FSCR() ------------- Diffstat: Makefile | 4 +- arch/arm64/boot/dts/qcom/msm8916-pins.dtsi | 2 +- arch/arm64/kvm/hyp/switch.c | 2 +- arch/mips/vdso/genvdso.c | 10 +++ arch/powerpc/kernel/cpu_setup_power.S | 2 +- arch/powerpc/perf/core-book3s.c | 4 ++ arch/powerpc/platforms/cell/Kconfig | 1 + arch/powerpc/sysdev/xive/native.c | 2 + drivers/base/core.c | 12 ++-- drivers/base/power/main.c | 16 +++-- drivers/block/null_blk.c | 2 +- drivers/char/tpm/tpm-chip.c | 9 +-- drivers/char/tpm/tpm.h | 6 +- drivers/char/tpm/tpm2-space.c | 26 ++++--- drivers/char/tpm/tpmrm-dev.c | 2 +- drivers/edac/ie31200_edac.c | 50 ++++++++++++- drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 16 +++-- drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 7 +- drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 20 ++++-- drivers/gpu/drm/nouveau/nouveau_connector.c | 4 +- drivers/gpu/drm/nouveau/nouveau_fbcon.c | 4 +- drivers/gpu/drm/radeon/radeon_connectors.c | 20 ++++-- drivers/hid/i2c-hid/i2c-hid-core.c | 22 +++--- drivers/hid/usbhid/hiddev.c | 4 ++ drivers/i2c/busses/i2c-rcar.c | 1 + drivers/iommu/iova.c | 4 +- drivers/md/dm-table.c | 10 +-- drivers/media/cec/cec-api.c | 8 ++- drivers/media/pci/ttpci/av7110.c | 5 +- drivers/media/platform/davinci/vpif_capture.c | 2 - drivers/media/rc/gpio-ir-tx.c | 7 +- drivers/mfd/intel-lpss-pci.c | 3 + drivers/net/ethernet/freescale/gianfar.c | 4 +- drivers/net/ipvlan/ipvlan_main.c | 27 +++++-- drivers/net/wireless/ath/ath10k/hw.h | 2 +- drivers/net/wireless/realtek/rtlwifi/usb.c | 5 +- drivers/nvme/host/fc.c | 4 +- drivers/pci/slot.c | 6 +- drivers/s390/cio/css.c | 5 ++ drivers/scsi/fcoe/fcoe_ctlr.c | 2 +- drivers/scsi/lpfc/lpfc_vport.c | 26 +++---- drivers/scsi/scsi_transport_iscsi.c | 2 +- drivers/scsi/ufs/ufshcd.c | 14 ++-- drivers/spi/spi-stm32.c | 3 +- drivers/target/target_core_user.c | 9 ++- drivers/tty/serial/8250/8250_exar.c | 24 ++++++- drivers/tty/serial/8250/8250_port.c | 9 ++- drivers/tty/serial/amba-pl011.c | 16 +++-- drivers/tty/serial/samsung.c | 8 ++- drivers/tty/vt/vt.c | 5 +- drivers/tty/vt/vt_ioctl.c | 12 +++- drivers/usb/class/cdc-acm.c | 22 +++--- drivers/usb/core/quirks.c | 2 + drivers/usb/gadget/function/f_ncm.c | 81 +++++++++++++++++---- drivers/usb/gadget/function/f_tcm.c | 7 +- drivers/usb/gadget/u_f.h | 38 +++++++--- drivers/usb/host/ohci-exynos.c | 5 +- drivers/usb/host/xhci-hub.c | 19 ++--- drivers/usb/misc/lvstest.c | 2 +- drivers/usb/misc/sisusbvga/sisusb.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/storage/unusual_devs.h | 2 +- drivers/usb/storage/unusual_uas.h | 14 ++++ drivers/video/fbdev/core/fbcon.c | 25 ++++++- drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/dsi.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/dss.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/hdmi4.c | 5 +- drivers/video/fbdev/omap2/omapfb/dss/hdmi5.c | 5 +- drivers/video/fbdev/omap2/omapfb/dss/venc.c | 7 +- drivers/xen/events/events_base.c | 16 ++--- fs/btrfs/disk-io.c | 1 + fs/btrfs/free-space-cache.c | 2 +- fs/btrfs/tree-log.c | 10 +-- fs/buffer.c | 9 +++ fs/ceph/mds_client.c | 14 +++- fs/ext4/super.c | 75 +++++++++++-------- fs/f2fs/super.c | 5 +- fs/fs-writeback.c | 83 ++++++++++++---------- fs/jbd2/transaction.c | 26 +++++++ include/linux/efi.h | 4 ++ include/linux/fs.h | 8 ++- include/linux/overflow.h | 73 +++++++++++++++++++ include/trace/events/writeback.h | 13 ++-- kernel/locking/lockdep_proc.c | 2 +- kernel/trace/blktrace.c | 12 ++++ net/core/skbuff.c | 4 +- net/ipv6/ip6_tunnel.c | 10 ++- net/tipc/netlink_compat.c | 12 +++- sound/pci/cs46xx/cs46xx_lib.c | 2 +- sound/pci/cs46xx/dsp_spos_scb_lib.c | 2 +- sound/pci/hda/hda_codec.c | 2 +- sound/pci/hda/hda_generic.c | 2 +- sound/pci/hda/patch_sigmatel.c | 2 +- sound/pci/ice1712/prodigy192.c | 2 +- sound/pci/oxygen/xonar_dg.c | 2 +- sound/soc/tegra/tegra30_ahub.c | 4 +- sound/soc/tegra/tegra30_i2s.c | 4 +- sound/usb/quirks-table.h | 4 +- .../powerpc/pmu/ebb/back_to_back_ebbs_test.c | 2 - .../selftests/powerpc/pmu/ebb/cycles_test.c | 2 - .../powerpc/pmu/ebb/cycles_with_freeze_test.c | 2 - .../powerpc/pmu/ebb/cycles_with_mmcr2_test.c | 2 - tools/testing/selftests/powerpc/pmu/ebb/ebb.c | 2 - .../powerpc/pmu/ebb/ebb_on_willing_child_test.c | 2 - .../powerpc/pmu/ebb/lost_exception_test.c | 1 - .../selftests/powerpc/pmu/ebb/multi_counter_test.c | 7 -- .../powerpc/pmu/ebb/multi_ebb_procs_test.c | 2 - .../selftests/powerpc/pmu/ebb/pmae_handling_test.c | 2 - .../powerpc/pmu/ebb/pmc56_overflow_test.c | 2 - 112 files changed, 826 insertions(+), 342 deletions(-)