This is the start of the stable review cycle for the 4.19.149 release. There are 245 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 01 Oct 2020 10:59:03 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.149-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.19.149-rc1 Marc Zyngier <maz@xxxxxxxxxx> KVM: arm64: Assume write fault on S1PTW permission fault on instruction fetch Jiri Slaby <jslaby@xxxxxxx> ata: sata_mv, avoid trigerrable BUG_ON Jiri Slaby <jslaby@xxxxxxx> ata: make qc_prep return ata_completion_errors Jiri Slaby <jslaby@xxxxxxx> ata: define AC_ERR_OK Muchun Song <songmuchun@xxxxxxxxxxxxx> kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE Christian Borntraeger <borntraeger@xxxxxxxxxx> s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl Gao Xiang <hsiangkao@xxxxxxxxxx> mm, THP, swap: fix allocating cluster for swapfile by mistake Masami Hiramatsu <mhiramat@xxxxxxxxxx> kprobes: Fix to check probe enabled before disarm_kprobe_ftrace() Jan Höppner <hoeppner@xxxxxxxxxxxxx> s390/dasd: Fix zero write for FBA devices Tom Rix <trix@xxxxxxxxxx> tracing: fix double free Tom Lendacky <thomas.lendacky@xxxxxxx> KVM: SVM: Add a dedicated INVD intercept routine Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: x86: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE Wei Li <liwei391@xxxxxxxxxx> MIPS: Add the missing 'CPU_1074K' into __get_cpu_type() Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxx> regmap: fix page selection for noinc reads Tom Rix <trix@xxxxxxxxxx> ALSA: asihpi: fix iounmap in error handler Yonghong Song <yhs@xxxxxx> bpf: Fix a rcu warning for bpffs map pretty-print Linus Lüssing <linus.luessing@xxxxxxxxx> batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh Linus Lüssing <linus.luessing@xxxxxxxxx> batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Add missing include for in_interrupt() Martin Cerveny <m.cerveny@xxxxxxxxxxxx> drm/sun4i: sun8i-csc: Secondary CSC register correction Dmitry Bogdanov <dbogdanov@xxxxxxxxxxx> net: qed: RDMA personality shouldn't fail VF load Marek Szyprowski <m.szyprowski@xxxxxxxxxxx> drm/vc4/vc4_hdmi: fill ASoC card owner Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: Fix clobbering of r2 in bpf_gen_ld_abs Eric Dumazet <edumazet@xxxxxxxxxx> mac802154: tx: fix use-after-free Linus Lüssing <linus.luessing@xxxxxxxxx> batman-adv: mcast/TT: fix wrongly dropped or rerouted packets Jing Xiangfeng <jingxiangfeng@xxxxxxxxxx> atm: eni: fix the missed pci_disable_device() for eni_init_one() Linus Lüssing <ll@xxxxxxxxxxxxxxxxxx> batman-adv: bla: fix type misuse for backbone_gw hash indexing Maximilian Luz <luzmaximilian@xxxxxxxxx> mwifiex: Increase AES key storage size to 256 bits Tianjia Zhang <tianjia.zhang@xxxxxxxxxxxxxxxxx> clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() Tom Rix <trix@xxxxxxxxxx> ieee802154/adf7242: check status of adf7242_read_reg Liu Jian <liujian56@xxxxxxxxxx> ieee802154: fix one possible memleak in ca8210_dev_com_init Josh Poimboeuf <jpoimboe@xxxxxxxxxx> objtool: Fix noreturn detection for ignored functions Hans de Goede <hdegoede@xxxxxxxxxx> i2c: core: Call i2c_acpi_install_space_handler() before i2c_acpi_register_devices() Dennis Li <Dennis.Li@xxxxxxx> drm/amdkfd: fix a memory leak issue Sven Schnelle <svens@xxxxxxxxxxxxx> lockdep: fix order in trace_hardirqs_off_caller() Ilya Leoshkevich <iii@xxxxxxxxxxxxx> s390/init: add missing __init annotations Palmer Dabbelt <palmerdabbelt@xxxxxxxxxx> RISC-V: Take text_mutex in ftrace_init_nop() Hans de Goede <hdegoede@xxxxxxxxxx> ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1 Sylwester Nawrocki <s.nawrocki@xxxxxxxxxxx> ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect functions Sylwester Nawrocki <s.nawrocki@xxxxxxxxxxx> ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811 Anthony Iliopoulos <ailiop@xxxxxxxx> nvme: explicitly update mpath disk capacity on revalidation Tonghao Zhang <xiangxia.m.yue@xxxxxxxxx> net: openvswitch: use div_u64() for 64-by-32 divisions Jin Yao <yao.jin@xxxxxxxxxxxxxxx> perf parse-events: Use strcmp() to compare the PMU name Hou Tao <houtao1@xxxxxxxxxx> ubi: fastmap: Free unused fastmap anchor peb during detach Qu Wenruo <wqu@xxxxxxxx> btrfs: qgroup: fix data leak caused by race between writeback and truncate Zeng Tao <prime.zeng@xxxxxxxxxxxxx> vfio/pci: fix racy on error and request eventfd ctx Andy Lutomirski <luto@xxxxxxxxxx> selftests/x86/syscall_nt: Clear weird flags after each test Javed Hasan <jhasan@xxxxxxxxxxx> scsi: libfc: Skip additional kref updating work event Javed Hasan <jhasan@xxxxxxxxxxx> scsi: libfc: Handling of extra kref Sagi Grimberg <sagi@xxxxxxxxxxx> nvme: fix possible deadlock when I/O is blocked Zhang Xiaoxu <zhangxiaoxu5@xxxxxxxxxx> cifs: Fix double add page to memcg when cifs_readpages Alex Williamson <alex.williamson@xxxxxxxxxx> vfio/pci: Clear error and request eventfd ctx after releasing Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline Boris Brezillon <boris.brezillon@xxxxxxxxxxxxx> mtd: parser: cmdline: Support MTD names containing one or more colons Madhuparna Bhowmik <madhuparnabhowmik10@xxxxxxxxx> rapidio: avoid data race between file operation callbacks and mport_cdev_add(). Qian Cai <cai@xxxxxx> mm/swap_state: fix a data race in swapin_nr_pages Jeff Layton <jlayton@xxxxxxxxxx> ceph: fix potential race in ceph_check_caps Dinghao Liu <dinghao.liu@xxxxxxxxxx> PCI: tegra: Fix runtime PM imbalance on error Dinghao Liu <dinghao.liu@xxxxxxxxxx> mtd: rawnand: omap_elm: Fix runtime PM imbalance on error Dinghao Liu <dinghao.liu@xxxxxxxxxx> wlcore: fix runtime pm imbalance in wlcore_regdomain_config Dinghao Liu <dinghao.liu@xxxxxxxxxx> wlcore: fix runtime pm imbalance in wl1271_tx_work Dinghao Liu <dinghao.liu@xxxxxxxxxx> ASoC: img-i2s-out: Fix runtime PM imbalance on error Adrian Hunter <adrian.hunter@xxxxxxxxx> perf kcore_copy: Fix module map when there are no modules loaded Ian Rogers <irogers@xxxxxxxxxx> perf metricgroup: Free metric_events on error Xie XiuQi <xiexiuqi@xxxxxxxxxx> perf util: Fix memory leak of prefix_if_not_in Jiri Olsa <jolsa@xxxxxxxxxx> perf stat: Fix duration_time value for higher intervals Ian Rogers <irogers@xxxxxxxxxx> perf trace: Fix the selection for architectures to generate the errno name tables Ian Rogers <irogers@xxxxxxxxxx> perf evsel: Fix 2 memory leaks Qian Cai <cai@xxxxxx> vfio/pci: fix memory leaks of eventfd ctx David Sterba <dsterba@xxxxxxxx> btrfs: don't force read-only after error in drop snapshot Yu Chen <chenyu56@xxxxxxxxxx> usb: dwc3: Increase timeout for CmdAct cleared by device controller Shreyas Joshi <shreyas.joshi@xxxxxxxxx> printk: handle blank console arguments passed in. Dinghao Liu <dinghao.liu@xxxxxxxxxx> drm/nouveau/dispnv50: fix runtime pm imbalance on error Dinghao Liu <dinghao.liu@xxxxxxxxxx> drm/nouveau: fix runtime pm imbalance on error Dinghao Liu <dinghao.liu@xxxxxxxxxx> drm/nouveau/debugfs: fix runtime pm imbalance on error Alexander Duyck <alexander.h.duyck@xxxxxxxxxxxxxxx> e1000: Do not perform reset in reset_task if we are already down Anshuman Khandual <anshuman.khandual@xxxxxxx> arm64/cpufeature: Drop TraceFilt feature exposure from ID_DFR0 register Wei Yongjun <weiyongjun1@xxxxxxxxxx> scsi: cxlflash: Fix error return code in cxlflash_probe() Colin Ian King <colin.king@xxxxxxxxxxxxx> USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int Miklos Szeredi <mszeredi@xxxxxxxxxx> fuse: don't check refcount after stealing page Nicholas Piggin <npiggin@xxxxxxxxx> powerpc/traps: Make unrecoverable NMIs die instead of panic Takashi Iwai <tiwai@xxxxxxx> ALSA: hda: Fix potential race in unsol event handler Jonathan Bakker <xc-racer2@xxxxxxx> tty: serial: samsung: Correct clock selection logic Tuong Lien <tuong.t.lien@xxxxxxxxxxxxxx> tipc: fix memory leak in service subscripting Tang Bin <tangbin@xxxxxxxxxxxxxxxxxxxx> USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() Sonny Sasaka <sonnysasaka@xxxxxxxxxxxx> Bluetooth: Handle Inquiry Cancel error after Inquiry Complete Jonathan Bakker <xc-racer2@xxxxxxx> phy: samsung: s5pv210-usb2: Add delay after reset Jonathan Bakker <xc-racer2@xxxxxxx> power: supply: max17040: Correct voltage reading Ian Rogers <irogers@xxxxxxxxxx> perf mem2node: Avoid double free related to realloc Cong Wang <xiyou.wangcong@xxxxxxxxx> atm: fix a memory leak of vcc->user_back Krzysztof Kozlowski <krzk@xxxxxxxxxx> dt-bindings: sound: wm8994: Correct required supplies based on actual implementaion Will Deacon <will@xxxxxxxxxx> arm64: cpufeature: Relax checks for AArch32 support at EL[0-2] Wei Yongjun <weiyongjun1@xxxxxxxxxx> sparc64: vcc: Fix error return code in vcc_probe() Ivan Safonov <insafonov@xxxxxxxxx> staging:r8188eu: avoid skb_clone for amsdu to msdu conversion Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> scsi: aacraid: Fix error handling paths in aac_probe_one() Tonghao Zhang <xiangxia.m.yue@xxxxxxxxx> net: openvswitch: use u64 for meter bucket Zenghui Yu <yuzenghui@xxxxxxxxxx> KVM: arm64: vgic-its: Fix memory leak on the error path of vgic_add_lpi() Madhuparna Bhowmik <madhuparnabhowmik10@xxxxxxxxx> drivers: char: tlclk.c: Avoid data race between init and interrupt handler Douglas Anderson <dianders@xxxxxxxxxxxx> bdev: Reduce time holding bd_mutex in sync in blkdev_close() Stephane Eranian <eranian@xxxxxxxxxx> perf stat: Force error in fallback on :k events Steve Rutherford <srutherford@xxxxxxxxxx> KVM: Remove CREATE_IRQCHIP/SET_PIT2 race Raviteja Narayanam <raviteja.narayanam@xxxxxxxxxx> serial: uartps: Wait for tx_empty in console setup Nilesh Javali <njavali@xxxxxxxxxxx> scsi: qedi: Fix termination timeouts in session logout Jaewon Kim <jaewon31.kim@xxxxxxxxxxx> mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area Israel Rukshin <israelr@xxxxxxxxxxxx> nvmet-rdma: fix double free of rdma queue Qian Cai <cai@xxxxxx> mm/vmscan.c: fix data races using kswapd_classzone_idx Xianting Tian <xianting_tian@xxxxxxx> mm/filemap.c: clear page error before actual read Nathan Chancellor <natechancellor@xxxxxxxxx> mm/kmemleak.c: use address-of operator on section symbols Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFS: Fix races nfs_page_group_destroy() vs nfs_destroy_unlinked_subrequests() Stuart Hayes <stuart.w.hayes@xxxxxxxxx> PCI: pciehp: Fix MSI interrupt race Andreas Steinmetz <ast@xxxxxxxx> ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor Liu Song <liu.song11@xxxxxxxxxx> ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len Mikel Rychliski <mikel@xxxxxxxxxx> PCI: Use ioremap(), not phys_to_virt() for platform ROM Chuck Lever <chuck.lever@xxxxxxxxxx> svcrdma: Fix leak of transport addresses Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()' Don Brace <don.brace@xxxxxxxxxxxxx> scsi: hpsa: correct race condition in offload enabled Zhu Yanjun <yanjunz@xxxxxxxxxxxx> RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices Israel Rukshin <israelr@xxxxxxxxxxxx> nvme: Fix controller creation races with teardown flow John Meneghini <johnm@xxxxxxxxxx> nvme-multipath: do not reset on unknown status Gabriel Ravier <gabravier@xxxxxxxxx> tools: gpio-hammer: Avoid potential overflow in main Pratik Rajesh Sampat <psampat@xxxxxxxxxxxxx> cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> perf cpumap: Fix snprintf overflow check Vignesh Raghavendra <vigneshr@xxxxxx> serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout Peter Ujfalusi <peter.ujfalusi@xxxxxx> serial: 8250_omap: Fix sleeping function called from invalid context during probe Vignesh Raghavendra <vigneshr@xxxxxx> serial: 8250_port: Don't service RX FIFO if throttled Ian Rogers <irogers@xxxxxxxxxx> perf parse-events: Fix 3 use after frees found with clang ASAN Niklas Söderlund <niklas.soderlund+renesas@xxxxxxxxxxxx> thermal: rcar_thermal: Handle probe error gracefully Nathan Chancellor <natechancellor@xxxxxxxxx> tracing: Use address-of operator on section symbols Jordan Crouse <jcrouse@xxxxxxxxxxxxxx> drm/msm/a5xx: Always set an OPP supported hardware value Pavel Machek <pavel@xxxxxxx> drm/msm: fix leaks if initialization fails Gustavo Romero <gromero@xxxxxxxxxxxxx> KVM: PPC: Book3S HV: Treat TM-related invalid form instructions on P9 like the valid ones Jason Gunthorpe <jgg@xxxxxxxx> RDMA/cm: Remove a race freeing timewait_info Trond Myklebust <trondmy@xxxxxxxxx> nfsd: Don't add locks to closed or closing open stateids Alexandre Belloni <alexandre.belloni@xxxxxxxxxxx> rtc: ds1374: fix possible race condition Alexandre Belloni <alexandre.belloni@xxxxxxxxxxx> rtc: sa1100: fix possible race condition Stefan Berger <stefanb@xxxxxxxxxxxxx> tpm: ibmvtpm: Wait for buffer to be set before proceeding Dmitry Monakhov <dmonakhov@xxxxxxxxx> ext4: mark block bitmap corrupted when found instead of BUGON Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: mark dir corrupt when lookup-by-hash fails Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: don't ever return a stale pointer from __xfs_dir3_free_read Colin Ian King <colin.king@xxxxxxxxxxxxx> media: tda10071: fix unsigned sign extension overflow Howard Chung <howardchung@xxxxxxxxxx> Bluetooth: L2CAP: handle l2cap config request during open state Sagar Biradar <Sagar.Biradar@xxxxxxxxxxxxx> scsi: aacraid: Disabling TM path and only processing IOP reset Wen Gong <wgong@xxxxxxxxxxxxxx> ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read Rodrigo Siqueira <Rodrigo.Siqueira@xxxxxxx> drm/amd/display: Stop if retimer is not available John Clements <john.clements@xxxxxxx> drm/amdgpu: increase atombios cmd timeout Kirill A. Shutemov <kirill@xxxxxxxxxxxxx> mm: avoid data corruption on CoW fault into PFN-mapped VMA John Garry <john.garry@xxxxxxxxxx> perf jevents: Fix leak of mapfile memory Qiujun Huang <hqjagain@xxxxxxxxx> ext4: fix a data race at inode->i_disksize Wen Yang <wenyang@xxxxxxxxxxxxxxxxx> timekeeping: Prevent 32bit truncation in scale64_check_overflow() Alain Michaud <alainm@xxxxxxxxxxxx> Bluetooth: guard against controllers sending zero'd events Takashi Iwai <tiwai@xxxxxxx> media: go7007: Fix URB type for interrupt handling John Garry <john.garry@xxxxxxxxxx> bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal Qian Cai <cai@xxxxxx> random: fix data races at timer_rand_state James Morse <james.morse@xxxxxxx> firmware: arm_sdei: Use cpus_read_lock() to avoid races with cpuhp Aric Cyr <aric.cyr@xxxxxxx> drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic Dmitry Osipenko <digetx@xxxxxxxxx> dmaengine: tegra-apb: Prevent race conditions on channel's freeing Amelie Delaunay <amelie.delaunay@xxxxxx> dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all Thomas Gleixner <tglx@xxxxxxxxxxxxx> bpf: Remove recursion prevention from rcu free callback Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx> x86/pkeys: Add check for pkey "overflow" Dan Carpenter <dan.carpenter@xxxxxxxxxx> media: staging/imx: Missing assignment in imx_media_capture_device_register() Amelie Delaunay <amelie.delaunay@xxxxxx> dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: x86: fix incorrect comparison in trace event Bart Van Assche <bvanassche@xxxxxxx> RDMA/rxe: Fix configuration of atomic queue pair attributes Thomas Richter <tmricht@xxxxxxxxxxxxx> perf test: Fix test trace+probe_vfs_getname.sh on s390 Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Don't create a mixer element with bogus volume range Felix Fietkau <nbd@xxxxxxxx> mt76: clear skb pointers from rx aggregation reorder buffer during cleanup Ayush Sawal <ayush.sawal@xxxxxxxxxxx> crypto: chelsio - This fixes the kernel panic which occurs during a libkcapi test Dinh Nguyen <dinguyen@xxxxxxxxxx> clk: stratix10: use do_div() for 64-bit calculation Wen Yang <wen.yang99@xxxxxxxxxx> drm/omap: fix possible object reference leak James Smart <jsmart2021@xxxxxxxxx> scsi: lpfc: Fix coverity errors in fmdi attribute handling James Smart <jsmart2021@xxxxxxxxx> scsi: lpfc: Fix RQ buffer leakage when no IOCBs available Vasily Averin <vvs@xxxxxxxxxxxxx> selinux: sel_avc_get_stat_idx should increase position index Steve Grubb <sgrubb@xxxxxxxxxx> audit: CONFIG_CHANGE don't log internal bookkeeping as an event Qian Cai <cai@xxxxxx> skbuff: fix a data race in skb_queue_len() Mohan Kumar <mkumard@xxxxxxxxxx> ALSA: hda: Clear RIRB status before reading WP Zhuang Yanying <ann.zhuangyanying@xxxxxxxxxx> KVM: fix overflow of zero page refcount with ksm running Hillf Danton <hdanton@xxxxxxxx> Bluetooth: prefetch channel before killing sock Steven Price <steven.price@xxxxxxx> mm: pagewalk: fix termination condition in walk_pte_range() Vasily Averin <vvs@xxxxxxxxxxxxx> mm/swapfile.c: swap_next should increase position index Manish Mandlik <mmandlik@xxxxxxxxxx> Bluetooth: Fix refcount use-after-free issue Doug Smythies <doug.smythies@xxxxxxxxx> tools/power/x86/intel_pstate_tracer: changes for python 3 compatibility Sven Schnelle <svens@xxxxxxxxxxxxx> selftests/ftrace: fix glob selftest Jeff Layton <jlayton@xxxxxxxxxx> ceph: ensure we have a new cap before continuing in fill_inode Mert Dirik <mertdirik@xxxxxxxxx> ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter Vincent Whitchurch <vincent.whitchurch@xxxxxxxx> ARM: 8948/1: Prevent OOB access in stacktrace Josef Bacik <jbacik@xxxxxx> tracing: Set kernel_stack's caller size properly Maxim Mikityanskiy <maxtram95@xxxxxxxxx> Bluetooth: btrtl: Use kvmalloc for FW allocations Oliver O'Halloran <oohall@xxxxxxxxx> powerpc/eeh: Only dump stack once if an MMIO loop is detected Thomas Richter <tmricht@xxxxxxxxxxxxx> s390/cpum_sf: Use kzalloc and minor changes Matthias Fend <matthias.fend@xxxxxxxxxxxxxx> dmaengine: zynqmp_dma: fix burst length configuration Bart Van Assche <bvanassche@xxxxxxx> scsi: ufs: Fix a race condition in the tracing code Bart Van Assche <bvanassche@xxxxxxx> scsi: ufs: Make ufshcd_add_command_trace() easier to read Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> ACPI: EC: Reference count query handlers under lock Kevin Kou <qdkevin.kou@xxxxxxxxx> sctp: move trace_sctp_probe_path into sctp_outq_sack Nikhil Devshatwar <nikhil.nd@xxxxxx> media: ti-vpe: cal: Restrict DMA to avoid memory corruption Marco Elver <elver@xxxxxxxxxx> seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier Vasily Averin <vvs@xxxxxxxxxxxxx> ipv6_route_seq_next should increase position index Vasily Averin <vvs@xxxxxxxxxxxxx> rt_cpu_seq_next should increase position index Vasily Averin <vvs@xxxxxxxxxxxxx> neigh_stat_seq_next() should increase position index Darrick J. Wong <darrick.wong@xxxxxxxxxx> xfs: fix log reservation overflows when allocating large rt extents Miaohe Lin <linmiaohe@xxxxxxxxxx> KVM: arm/arm64: vgic: Fix potential double free dist->spis in __kvm_vgic_destroy() Joe Perches <joe@xxxxxxxxxxx> kernel/sys.c: avoid copying possible padding bytes in copy_to_user Tzung-Bi Shih <tzungbi@xxxxxxxxxx> ASoC: max98090: remove msleep in PLL unlocked workaround Pavel Shilovsky <pshilov@xxxxxxxxxxxxx> CIFS: Properly process SMB3 lease breaks Kusanagi Kouichi <slash@xxxxxxxxxxxxxxx> debugfs: Fix !DEBUG_FS debugfs_create_automount peter chang <dpf@xxxxxxxxxx> scsi: pm80xx: Cleanup command when a reset times out Bob Peterson <rpeterso@xxxxxxxxxx> gfs2: clean up iopen glock mess in gfs2_create_inode Bradley Bolen <bradleybolen@xxxxxxxxx> mmc: core: Fix size overflow for mmc partitions Sascha Hauer <s.hauer@xxxxxxxxxxxxxx> ubi: Fix producing anchor PEBs Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()' Brian Foster <bfoster@xxxxxxxxxx> xfs: fix attr leaf header freemap.size underflow Al Viro <viro@xxxxxxxxxxxxxxxxxx> fix dget_parent() fastpath race Pan Bian <bianpan2016@xxxxxxx> RDMA/i40iw: Fix potential use after free Pan Bian <bianpan2016@xxxxxxx> RDMA/qedr: Fix potential use after free Satendra Singh Thakur <sst2005@xxxxxxxxx> dmaengine: mediatek: hsdma_probe: fixed a memory leak when devm_request_irq fails Guoju Fang <fangguoju@xxxxxxxxx> bcache: fix a lost wake-up problem caused by mca_cannibalize_lock Divya Indi <divya.indi@xxxxxxxxxx> tracing: Adding NULL checks for trace_array descriptor pointer Ivan Lazeev <ivan.lazeev@xxxxxxxxx> tpm_crb: fix fTPM on AMD Zen+ CPUs Alex Deucher <alexander.deucher@xxxxxxx> drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table Lee Jones <lee.jones@xxxxxxxxxx> mfd: mfd-core: Protect against NULL call-back function pointer Hou Tao <houtao1@xxxxxxxxxx> mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup() Alex Deucher <alexander.deucher@xxxxxxx> drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table Stephen Kitt <steve@xxxxxxx> clk/ti/adpll: allocate room for terminating null Eric Dumazet <edumazet@xxxxxxxxxx> net: silence data-races on sk_backlog.tail James Smart <jsmart2021@xxxxxxxxx> scsi: lpfc: Fix kernel crash at lpfc_nvme_info_show during remote port bounce Pan Bian <bianpan2016@xxxxxxx> scsi: fnic: fix use after free Dmitry Osipenko <digetx@xxxxxxxxx> PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out Oleh Kravchenko <oleg@xxxxxxxxxx> leds: mlxreg: Fix possible buffer overflow Nick Desaulniers <ndesaulniers@xxxxxxxxxx> lib/string.c: implement stpcpy Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520 Hui Wang <hui.wang@xxxxxxxxxxxxx> ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged Joakim Tjernlund <joakim.tjernlund@xxxxxxxxxxxx> ALSA: usb-audio: Add delay quirk for H570e USB headsets Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/ioapic: Unbreak check_timer() Mikulas Patocka <mpatocka@xxxxxxxxxx> arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache writeback Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx> media: smiapp: Fix error handling at NVM reading Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ASoC: kirkwood: fix IRQ error handling Kangjie Lu <kjlu@xxxxxxx> gma/gma500: fix a memory disclosure bug due to uninitialized bytes Fuqian Huang <huangfq.daxian@xxxxxxxxx> m68k: q40: Fix info-leak in rtc_ioctl Balsundar P <balsundar.p@xxxxxxxxxxxxx> scsi: aacraid: fix illegal IO beyond last LBA Jia He <justin.he@xxxxxxx> mm: fix double page fault on arm64 if PTE_AF is cleared Miaoqing Pan <miaoqing@xxxxxxxxxxxxxx> ath10k: fix memory leak for tpc_stats_final Miaoqing Pan <miaoqing@xxxxxxxxxxxxxx> ath10k: fix array out-of-bounds access Chris Wilson <chris@xxxxxxxxxxxxxxxxxx> dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling) zhengbin <zhengbin13@xxxxxxxxxx> media: mc-device.c: fix memleak in media_device_register_entity Jonathan Lebon <jlebon@xxxxxxxxxx> selinux: allow labeling before policy is loaded ------------- Diffstat: Documentation/devicetree/bindings/sound/wm8994.txt | 18 ++- Documentation/driver-api/libata.rst | 2 +- Makefile | 4 +- arch/arm/include/asm/kvm_emulate.h | 11 +- arch/arm/kernel/stacktrace.c | 2 + arch/arm/kernel/traps.c | 6 +- arch/arm64/include/asm/kvm_emulate.h | 9 +- arch/arm64/kernel/cpufeature.c | 12 +- arch/arm64/kvm/hyp/switch.c | 2 +- arch/m68k/q40/config.c | 1 + arch/mips/include/asm/cpu-type.h | 1 + arch/powerpc/include/asm/kvm_asm.h | 3 + arch/powerpc/kernel/eeh.c | 2 +- arch/powerpc/kernel/traps.c | 6 +- arch/powerpc/kvm/book3s_hv_tm.c | 28 +++- arch/powerpc/kvm/book3s_hv_tm_builtin.c | 16 ++- arch/riscv/include/asm/ftrace.h | 7 + arch/riscv/kernel/ftrace.c | 19 +++ arch/s390/kernel/perf_cpum_sf.c | 9 +- arch/s390/kernel/setup.c | 6 +- arch/x86/include/asm/nospec-branch.h | 4 +- arch/x86/include/asm/pkeys.h | 5 + arch/x86/kernel/apic/io_apic.c | 1 + arch/x86/kernel/fpu/xstate.c | 9 +- arch/x86/kvm/mmutrace.h | 2 +- arch/x86/kvm/svm.c | 8 +- arch/x86/kvm/x86.c | 13 +- arch/x86/lib/usercopy_64.c | 2 +- drivers/acpi/ec.c | 16 +-- drivers/ata/acard-ahci.c | 6 +- drivers/ata/libahci.c | 6 +- drivers/ata/libata-core.c | 9 +- drivers/ata/libata-sff.c | 12 +- drivers/ata/pata_macio.c | 6 +- drivers/ata/pata_pxa.c | 8 +- drivers/ata/pdc_adma.c | 7 +- drivers/ata/sata_fsl.c | 4 +- drivers/ata/sata_inic162x.c | 4 +- drivers/ata/sata_mv.c | 34 ++--- drivers/ata/sata_nv.c | 18 ++- drivers/ata/sata_promise.c | 6 +- drivers/ata/sata_qstor.c | 8 +- drivers/ata/sata_rcar.c | 6 +- drivers/ata/sata_sil.c | 8 +- drivers/ata/sata_sil24.c | 6 +- drivers/ata/sata_sx4.c | 6 +- drivers/atm/eni.c | 2 +- drivers/base/regmap/regmap.c | 12 +- drivers/bluetooth/btrtl.c | 20 +-- drivers/bus/hisi_lpc.c | 27 +++- drivers/char/random.c | 12 +- drivers/char/tlclk.c | 17 ++- drivers/char/tpm/tpm_crb.c | 123 ++++++++++++----- drivers/char/tpm/tpm_ibmvtpm.c | 9 ++ drivers/char/tpm/tpm_ibmvtpm.h | 1 + drivers/clk/socfpga/clk-pll-s10.c | 4 +- drivers/clk/ti/adpll.c | 11 +- drivers/clocksource/h8300_timer8.c | 2 +- drivers/cpufreq/powernv-cpufreq.c | 13 +- drivers/crypto/chelsio/chcr_algo.c | 5 +- drivers/crypto/chelsio/chtls/chtls_io.c | 10 +- drivers/devfreq/tegra-devfreq.c | 4 +- drivers/dma-buf/dma-fence.c | 78 +++++------ drivers/dma/mediatek/mtk-hsdma.c | 4 +- drivers/dma/stm32-dma.c | 9 +- drivers/dma/stm32-mdma.c | 9 +- drivers/dma/tegra20-apb-dma.c | 3 +- drivers/dma/xilinx/zynqmp_dma.c | 24 ++-- drivers/firmware/arm_sdei.c | 26 ++-- drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 31 +++-- drivers/gpu/drm/amd/amdgpu/atom.c | 4 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 2 + drivers/gpu/drm/amd/display/dc/core/dc_link.c | 67 +++++----- drivers/gpu/drm/amd/display/dc/core/dc_link_ddc.c | 52 ++++---- drivers/gpu/drm/amd/powerplay/hwmgr/smu7_hwmgr.c | 7 + drivers/gpu/drm/amd/powerplay/hwmgr/vega10_hwmgr.c | 7 + drivers/gpu/drm/gma500/cdv_intel_display.c | 2 + drivers/gpu/drm/msm/adreno/a5xx_gpu.c | 27 +++- drivers/gpu/drm/msm/msm_drv.c | 6 +- drivers/gpu/drm/nouveau/dispnv50/disp.c | 4 +- drivers/gpu/drm/nouveau/nouveau_debugfs.c | 5 +- drivers/gpu/drm/nouveau/nouveau_gem.c | 4 +- .../gpu/drm/nouveau/nvkm/subdev/bios/shadowpci.c | 17 ++- drivers/gpu/drm/omapdrm/dss/omapdss-boot-init.c | 4 +- drivers/gpu/drm/radeon/radeon_bios.c | 30 +++-- drivers/gpu/drm/sun4i/sun8i_csc.h | 2 +- drivers/gpu/drm/vc4/vc4_hdmi.c | 1 + drivers/i2c/i2c-core-base.c | 2 +- drivers/infiniband/core/cm.c | 25 ++-- drivers/infiniband/hw/cxgb4/cm.c | 4 +- drivers/infiniband/hw/i40iw/i40iw_cm.c | 2 +- drivers/infiniband/hw/qedr/qedr_iw_cm.c | 2 +- drivers/infiniband/sw/rxe/rxe.c | 2 + drivers/infiniband/sw/rxe/rxe_qp.c | 7 +- drivers/leds/leds-mlxreg.c | 4 +- drivers/md/bcache/bcache.h | 1 + drivers/md/bcache/btree.c | 12 +- drivers/md/bcache/super.c | 1 + drivers/media/dvb-frontends/tda10071.c | 9 +- drivers/media/i2c/smiapp/smiapp-core.c | 3 +- drivers/media/media-device.c | 65 ++++----- drivers/media/platform/ti-vpe/cal.c | 6 +- drivers/media/usb/go7007/go7007-usb.c | 4 +- drivers/mfd/mfd-core.c | 10 ++ drivers/mmc/core/mmc.c | 9 +- drivers/mtd/chips/cfi_cmdset_0002.c | 1 - drivers/mtd/cmdlinepart.c | 23 +++- drivers/mtd/nand/raw/omap_elm.c | 1 + drivers/mtd/ubi/fastmap-wl.c | 46 ++++--- drivers/mtd/ubi/fastmap.c | 14 +- drivers/mtd/ubi/ubi.h | 6 +- drivers/mtd/ubi/wl.c | 32 ++--- drivers/mtd/ubi/wl.h | 1 - drivers/net/ethernet/intel/e1000/e1000_main.c | 18 ++- drivers/net/ethernet/qlogic/qed/qed_sriov.c | 1 + drivers/net/ieee802154/adf7242.c | 4 +- drivers/net/ieee802154/ca8210.c | 1 + drivers/net/wireless/ath/ar5523/ar5523.c | 2 + drivers/net/wireless/ath/ath10k/debug.c | 3 +- drivers/net/wireless/ath/ath10k/sdio.c | 18 ++- drivers/net/wireless/ath/ath10k/wmi.c | 49 ++++--- drivers/net/wireless/marvell/mwifiex/fw.h | 2 +- drivers/net/wireless/marvell/mwifiex/sta_cmdresp.c | 4 +- drivers/net/wireless/mediatek/mt76/agg-rx.c | 1 + drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/ti/wlcore/tx.c | 1 + drivers/nvme/host/core.c | 12 +- drivers/nvme/host/multipath.c | 21 ++- drivers/nvme/host/nvme.h | 19 ++- drivers/nvme/target/rdma.c | 30 +++-- drivers/pci/controller/pci-tegra.c | 3 +- drivers/pci/hotplug/pciehp_hpc.c | 26 +++- drivers/pci/rom.c | 17 --- drivers/phy/samsung/phy-s5pv210-usb2.c | 4 + drivers/power/supply/max17040_battery.c | 2 +- drivers/rapidio/devices/rio_mport_cdev.c | 14 +- drivers/rtc/rtc-ds1374.c | 15 ++- drivers/rtc/rtc-sa1100.c | 18 +-- drivers/s390/block/dasd_fba.c | 9 +- drivers/s390/crypto/zcrypt_api.c | 3 +- drivers/scsi/aacraid/aachba.c | 8 +- drivers/scsi/aacraid/commsup.c | 2 +- drivers/scsi/aacraid/linit.c | 46 +++++-- drivers/scsi/cxlflash/main.c | 1 + drivers/scsi/fnic/fnic_scsi.c | 3 +- drivers/scsi/hpsa.c | 80 ++++++++---- drivers/scsi/libfc/fc_rport.c | 13 +- drivers/scsi/lpfc/lpfc_attr.c | 35 ++--- drivers/scsi/lpfc/lpfc_ct.c | 137 +++++++++---------- drivers/scsi/lpfc/lpfc_hw.h | 36 +++-- drivers/scsi/lpfc/lpfc_sli.c | 4 + drivers/scsi/pm8001/pm8001_sas.c | 50 +++++-- drivers/scsi/qedi/qedi_iscsi.c | 3 + drivers/scsi/ufs/ufshcd.c | 14 +- drivers/staging/media/imx/imx-media-capture.c | 2 +- drivers/staging/rtl8188eu/core/rtw_recv.c | 19 +-- drivers/thermal/rcar_thermal.c | 6 +- drivers/tty/serial/8250/8250_omap.c | 8 +- drivers/tty/serial/8250/8250_port.c | 16 ++- drivers/tty/serial/samsung.c | 8 +- drivers/tty/serial/xilinx_uartps.c | 8 ++ drivers/tty/vcc.c | 1 + drivers/usb/dwc3/gadget.c | 2 +- drivers/usb/host/ehci-mv.c | 8 +- drivers/vfio/pci/vfio_pci.c | 13 ++ fs/block_dev.c | 10 ++ fs/btrfs/extent-tree.c | 2 - fs/btrfs/inode.c | 23 ++-- fs/ceph/caps.c | 14 +- fs/ceph/inode.c | 5 +- fs/cifs/cifsglob.h | 9 +- fs/cifs/file.c | 21 ++- fs/cifs/misc.c | 17 +-- fs/cifs/smb1ops.c | 8 +- fs/cifs/smb2misc.c | 32 +---- fs/cifs/smb2ops.c | 44 +++++-- fs/cifs/smb2pdu.h | 2 +- fs/dcache.c | 4 +- fs/ext4/inode.c | 2 +- fs/ext4/mballoc.c | 11 +- fs/fuse/dev.c | 1 - fs/gfs2/inode.c | 13 +- fs/nfs/pagelist.c | 67 ++++++---- fs/nfs/write.c | 10 +- fs/nfsd/nfs4state.c | 73 ++++++----- fs/ubifs/io.c | 16 ++- fs/xfs/libxfs/xfs_attr_leaf.c | 4 +- fs/xfs/libxfs/xfs_dir2_node.c | 1 + fs/xfs/libxfs/xfs_trans_resv.c | 96 +++++++++++--- fs/xfs/scrub/dir.c | 3 + include/linux/debugfs.h | 5 +- include/linux/libata.h | 13 +- include/linux/mmc/card.h | 2 +- include/linux/nfs_page.h | 2 + include/linux/pci.h | 1 - include/linux/seqlock.h | 11 +- include/linux/skbuff.h | 14 +- include/net/sock.h | 4 +- include/trace/events/sctp.h | 9 -- kernel/audit_watch.c | 2 - kernel/bpf/hashtab.c | 8 -- kernel/bpf/inode.c | 4 +- kernel/kprobes.c | 22 +++- kernel/printk/printk.c | 3 + kernel/sys.c | 4 +- kernel/time/timekeeping.c | 3 +- kernel/trace/trace.c | 5 +- kernel/trace/trace_entries.h | 2 +- kernel/trace/trace_events.c | 2 + kernel/trace/trace_events_hist.c | 1 - kernel/trace/trace_preemptirq.c | 4 +- lib/string.c | 24 ++++ mm/filemap.c | 8 ++ mm/kmemleak.c | 2 +- mm/memory.c | 121 +++++++++++++++-- mm/mmap.c | 2 + mm/pagewalk.c | 4 +- mm/swap_state.c | 5 +- mm/swapfile.c | 4 +- mm/vmscan.c | 45 ++++--- net/atm/lec.c | 6 + net/batman-adv/bridge_loop_avoidance.c | 145 +++++++++++++++++---- net/batman-adv/bridge_loop_avoidance.h | 4 +- net/batman-adv/routing.c | 4 + net/batman-adv/soft-interface.c | 6 +- net/bluetooth/hci_event.c | 25 +++- net/bluetooth/l2cap_core.c | 29 +++-- net/bluetooth/l2cap_sock.c | 18 ++- net/core/filter.c | 4 +- net/core/neighbour.c | 1 + net/ipv4/route.c | 1 + net/ipv4/tcp.c | 2 +- net/ipv6/ip6_fib.c | 7 +- net/llc/af_llc.c | 2 +- net/mac802154/tx.c | 8 +- net/openvswitch/meter.c | 4 +- net/openvswitch/meter.h | 2 +- net/sctp/outqueue.c | 6 + net/sunrpc/svc_xprt.c | 19 ++- net/sunrpc/xprtrdma/svc_rdma_backchannel.c | 1 + net/tipc/topsrv.c | 4 +- net/unix/af_unix.c | 11 +- security/selinux/hooks.c | 12 ++ security/selinux/selinuxfs.c | 1 + sound/hda/hdac_bus.c | 4 + sound/pci/asihpi/hpioctl.c | 4 +- sound/pci/hda/hda_controller.c | 11 +- sound/pci/hda/patch_realtek.c | 13 +- sound/soc/codecs/max98090.c | 8 +- sound/soc/codecs/wm8994.c | 10 ++ sound/soc/codecs/wm_hubs.c | 3 + sound/soc/codecs/wm_hubs.h | 1 + sound/soc/img/img-i2s-out.c | 8 +- sound/soc/intel/boards/bytcr_rt5640.c | 10 ++ sound/soc/kirkwood/kirkwood-dma.c | 2 +- sound/usb/midi.c | 29 ++++- sound/usb/mixer.c | 10 ++ sound/usb/quirks.c | 7 +- tools/gpio/gpio-hammer.c | 17 ++- tools/objtool/check.c | 2 +- tools/perf/builtin-stat.c | 2 +- tools/perf/pmu-events/jevents.c | 15 ++- tools/perf/tests/shell/lib/probe_vfs_getname.sh | 2 +- tools/perf/trace/beauty/arch_errno_names.sh | 2 +- tools/perf/util/cpumap.c | 10 +- tools/perf/util/evsel.c | 7 + tools/perf/util/mem2node.c | 3 +- tools/perf/util/metricgroup.c | 3 + tools/perf/util/parse-events.c | 9 +- tools/perf/util/sort.c | 2 +- tools/perf/util/symbol-elf.c | 7 + .../x86/intel_pstate_tracer/intel_pstate_tracer.py | 22 ++-- .../ftrace/test.d/ftrace/func-filter-glob.tc | 2 +- tools/testing/selftests/x86/syscall_nt.c | 1 + virt/kvm/arm/mmio.c | 2 +- virt/kvm/arm/mmu.c | 5 +- virt/kvm/arm/vgic/vgic-init.c | 1 + virt/kvm/arm/vgic/vgic-its.c | 11 +- virt/kvm/kvm_main.c | 1 + 279 files changed, 2370 insertions(+), 1213 deletions(-)
