[PATCH 5.0 00/89] 5.0.11-stable review

From: Greg Kroah-Hartman
Date: Tue Apr 30 2019 - 07:48:37 EST


This is the start of the stable review cycle for the 5.0.11 release.
There are 89 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu 02 May 2019 11:35:03 AM UTC.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.0.11-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.0.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 5.0.11-rc1

Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
net/tls: don't leak IV and record seq when offload fails

Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
net/tls: avoid potential deadlock in tls_set_device_offload_rx()

Maxim Mikityanskiy <maximmi@xxxxxxxxxxxx>
net/mlx5e: Fix use-after-free after xdp_return_frame

Maxim Mikityanskiy <maximmi@xxxxxxxxxxxx>
net/mlx5e: Fix the max MTU check in case of XDP

Petr Machata <petrm@xxxxxxxxxxxx>
mlxsw: spectrum: Put MC TCs into DWRR mode

Ido Schimmel <idosch@xxxxxxxxxxxx>
mlxsw: pci: Reincrease PCI reset timeout

Tao Ren <taoren@xxxxxx>
net/ncsi: handle overflow when incrementing mac address

Ilias Apalodimas <ilias.apalodimas@xxxxxxxxxx>
net: socionext: replace napi_alloc_frag with the netdev variant on init

Hangbin Liu <liuhangbin@xxxxxxxxx>
team: fix possible recursive locking when add slaves

Su Bao Cheng <baocheng.su@xxxxxxxxxxx>
stmmac: pci: Adjust IOT2000 matching

Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
net/tls: fix refcount adjustment in fallback

Vinod Koul <vkoul@xxxxxxxxxx>
net: stmmac: move stmmac_check_ether_addr() to driver probe

Eric Dumazet <edumazet@xxxxxxxxxx>
net/rose: fix unbound loop in rose_loopback_timer()

Zhu Yanjun <yanjun.zhu@xxxxxxxxxx>
net: rds: exchange of 8K and 1M pool

Erez Alfasi <ereza@xxxxxxxxxxxx>
net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query

Amit Cohen <amitc@xxxxxxxxxxxx>
mlxsw: spectrum: Fix autoneg status in ethtool

ZhangXiaoxu <zhangxiaoxu5@xxxxxxxxxx>
ipv4: set the tcp_min_rtt_wlen range from 0 to one day

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv4: add sanity checks in ipv4_link_failure()

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
rdma: fix build errors on s390 and MIPS due to bad ZERO_PAGE use

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
x86/retpolines: Disable switch jump tables when retpolines are enabled

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
x86, retpolines: Raise limit for generating indirect calls from switch-case

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
Fix aio_poll() races

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
aio: store event at final iocb_put()

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
aio: keep io_event in aio_kiocb

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
aio: fold lookup_kiocb() into its sole caller

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
pin iocb through aio.

Eric Dumazet <edumazet@xxxxxxxxxx>
rxrpc: fix race condition in rxrpc_input_packet()

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
net/rds: Check address length before reading address family

YueHaibing <yuehaibing@xxxxxxxxxx>
net: netrom: Fix error cleanup path of nr_proto_init

Xin Long <lucien.xin@xxxxxxxxx>
tipc: check link name with right length in tipc_nl_compat_link_set

Xin Long <lucien.xin@xxxxxxxxx>
tipc: check bearer name with right length in tipc_nl_compat_bearer_enable

Yue Haibing <yuehaibing@xxxxxxxxxx>
fm10k: Fix a potential NULL pointer dereference

Florian Westphal <fw@xxxxxxxxx>
netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.

Johannes Berg <johannes.berg@xxxxxxxxx>
mac80211_hwsim: calculate if_combination.max_interfaces

luca abeni <luca.abeni@xxxxxxxxxxxxxxx>
sched/deadline: Correctly handle active 0-lag timers

Todd Kjos <tkjos@xxxxxxxxxxx>
binder: fix handling of misaligned binder object

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
workqueue: Try to catch flush_work() without INIT_WORK().

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
slip: make slhc_free() silently accept an error pointer

Xin Long <lucien.xin@xxxxxxxxx>
tipc: handle the err returned from cmd header function

Dongli Zhang <dongli.zhang@xxxxxxxxxx>
loop: do not print warn message if partition scan is successful

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
ext4: fix some error pointer dereferences

Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
USB: Consolidate LPM checks to avoid enabling LPM twice

Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
USB: Add new USB LPM helpers

Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
drm/vc4: Fix compilation error reported by kbuild test bot

Dave Airlie <airlied@xxxxxxxxxx>
Revert "drm/i915/fbdev: Actually configure untiled displays"

Christian KÃnig <christian.koenig@xxxxxxx>
drm/ttm: fix re-init of global structures

Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
drm/vc4: Fix memory leak during gpu reset.

Michael Ellerman <mpe@xxxxxxxxxxxxxx>
powerpc/mm/radix: Make Radix require HUGETLB_PAGE

Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
ARM: 8857/1: efi: enable CP15 DMB instructions before cleaning the cache

Shun-Chih Yu <shun-chih.yu@xxxxxxxxxxxx>
dmaengine: mediatek-cqdma: fix wrong register usage in mtk_cqdma_start

Achim Dahlhoff <Achim.Dahlhoff@xxxxxxxxxxxx>
dmaengine: sh: rcar-dmac: Fix glitch in dmaengine_tx_status

Dirk Behme <dirk.behme@xxxxxxxxxxxx>
dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid

Alex Williamson <alex.williamson@xxxxxxxxxx>
vfio/type1: Limit DMA mappings per container

Lucas Stach <l.stach@xxxxxxxxxxxxxx>
Input: synaptics-rmi4 - write config register values to the right offset

Harry Pan <harry.pan@xxxxxxxxx>
perf/x86/intel: Update KBL Package C-state events to also include PC8/PC9/PC10 counters

NeilBrown <neilb@xxxxxxxx>
sunrpc: don't mark uninitialised items as VALID.

Jeff Layton <jlayton@xxxxxxxxxx>
nfsd: wake blocked file lock waiters before sending callback

Jeff Layton <jlayton@xxxxxxxxxx>
nfsd: wake waiters blocked on file_lock before deleting it

Trond Myklebust <trondmy@xxxxxxxxx>
nfsd: Don't release the callback slot unless it was actually held

Yan, Zheng <zyan@xxxxxxxxxx>
ceph: fix ci->i_head_snapc leak

Jeff Layton <jlayton@xxxxxxxxxx>
ceph: ensure d_name stability in ceph_dentry_hash()

Jeff Layton <jlayton@xxxxxxxxxx>
ceph: only use d_name directly when parent is locked

Xie XiuQi <xiexiuqi@xxxxxxxxxx>
sched/numa: Fix a possible divide-by-zero

Jason Gunthorpe <jgg@xxxxxxxx>
RDMA/ucontext: Fix regression with disassociate

Jason Gunthorpe <jgg@xxxxxxxx>
RDMA/mlx5: Use rdma_user_map_io for mapping BAR pages

Jason Gunthorpe <jgg@xxxxxxxx>
RDMA/mlx5: Do not allow the user to write to the clock page

Josh Collier <josh.d.collier@xxxxxxxxx>
IB/rdmavt: Fix frwr memory registration

Bjorn Andersson <bjorn.andersson@xxxxxxxxxx>
arm64: mm: Ensure tail of unaligned initrd is reserved

Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx>
mm: do not boost watermarks to avoid fragmentation for the DISCONTIG memory model

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
trace: Fix preempt_enable_no_resched() abuse

Aurelien Jarno <aurelien@xxxxxxxxxxx>
MIPS: scall64-o32: Fix indirect syscall number load

YueHaibing <yuehaibing@xxxxxxxxxx>
lib/Kconfig.debug: fix build error without CONFIG_BLOCK

JÃrÃme Glisse <jglisse@xxxxxxxxxx>
zram: pass down the bvec we need to read into in the work struct

Baolin Wang <baolin.wang@xxxxxxxxxx>
gpio: eic: sprd: Fix incorrect irq type setting for the sync EIC

Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
crypto: lrw - Fix atomic sleep when walking skcipher

Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
crypto: xts - Fix atomic sleep when walking skcipher

Jann Horn <jannh@xxxxxxxxxx>
tracing: Fix buffer_ref pipe ops

Wenwen Wang <wang6495@xxxxxxx>
tracing: Fix a memory leak by early error exit in trace_pid_write()

Frank Sorenson <sorenson@xxxxxxxxxx>
cifs: do not attempt cifs operation on smb2+ rename error

JÃrÃme Glisse <jglisse@xxxxxxxxxx>
cifs: fix page reference leak with readv/writev

Ronnie Sahlberg <lsahlber@xxxxxxxxxx>
cifs: fix memory leak in SMB2_read

Paolo Valente <paolo.valente@xxxxxxxxxx>
block, bfq: fix use after free in bfq_bfqq_expire

YueHaibing <yuehaibing@xxxxxxxxxx>
fs/proc/proc_sysctl.c: Fix a NULL pointer dereference

Kailang Yang <kailang@xxxxxxxxxxx>
ALSA: hda/realtek - Move to ACT_INIT state

Christophe Leroy <christophe.leroy@xxxxxx>
powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64

Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
intel_th: gth: Fix an off-by-one in output unassigning

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nf_tables: bogus EBUSY in helper removal from transaction

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nf_tables: bogus EBUSY when deleting set after flush


-------------

Diffstat:

Documentation/networking/ip-sysctl.txt | 1 +
Documentation/sysctl/vm.txt | 16 +-
Makefile | 4 +-
arch/arm/boot/compressed/head.S | 16 +-
arch/arm64/mm/init.c | 2 +-
arch/mips/kernel/scall64-o32.S | 2 +-
arch/powerpc/configs/skiroot_defconfig | 1 +
arch/powerpc/kernel/vdso32/gettimeofday.S | 2 +-
arch/powerpc/platforms/Kconfig.cputype | 2 +-
arch/x86/Makefile | 9 +
arch/x86/events/intel/cstate.c | 10 +-
block/bfq-iosched.c | 15 +-
block/bfq-iosched.h | 2 +-
block/bfq-wf2q.c | 17 +-
crypto/lrw.c | 6 +-
crypto/xts.c | 6 +-
drivers/android/binder_alloc.c | 18 +-
drivers/block/loop.c | 5 +-
drivers/block/zram/zram_drv.c | 5 +-
drivers/dma/mediatek/mtk-cqdma.c | 2 +-
drivers/dma/sh/rcar-dmac.c | 30 +++-
drivers/gpio/gpio-eic-sprd.c | 1 +
drivers/gpu/drm/i915/intel_fbdev.c | 12 +-
drivers/gpu/drm/ttm/ttm_bo.c | 10 +-
drivers/gpu/drm/ttm/ttm_memory.c | 5 +-
drivers/gpu/drm/vc4/vc4_crtc.c | 2 +-
drivers/hwtracing/intel_th/gth.c | 2 +-
drivers/infiniband/core/uverbs.h | 1 +
drivers/infiniband/core/uverbs_main.c | 52 +++++-
drivers/infiniband/hw/mlx5/main.c | 10 +-
drivers/infiniband/sw/rdmavt/mr.c | 17 +-
drivers/input/rmi4/rmi_f11.c | 2 +-
drivers/net/ethernet/intel/fm10k/fm10k_main.c | 2 +
drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 24 ++-
drivers/net/ethernet/mellanox/mlx5/core/en/xdp.h | 3 +-
.../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 5 +-
drivers/net/ethernet/mellanox/mlx5/core/port.c | 4 -
drivers/net/ethernet/mellanox/mlxsw/pci_hw.h | 2 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 6 +-
drivers/net/ethernet/socionext/netsec.c | 11 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 4 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_pci.c | 8 +-
drivers/net/slip/slhc.c | 2 +-
drivers/net/team/team.c | 7 +
drivers/net/wireless/mac80211_hwsim.c | 19 +-
drivers/usb/core/driver.c | 23 ++-
drivers/usb/core/hub.c | 16 +-
drivers/usb/core/message.c | 3 +-
drivers/usb/core/sysfs.c | 5 +-
drivers/usb/core/usb.h | 10 +-
drivers/vfio/vfio_iommu_type1.c | 14 ++
fs/aio.c | 200 +++++++++------------
fs/ceph/dir.c | 6 +-
fs/ceph/mds_client.c | 70 ++++++--
fs/ceph/snap.c | 7 +-
fs/cifs/file.c | 15 +-
fs/cifs/inode.c | 4 +
fs/cifs/misc.c | 23 ++-
fs/cifs/smb2pdu.c | 1 +
fs/ext4/xattr.c | 3 +
fs/nfs/super.c | 3 +-
fs/nfsd/nfs4callback.c | 8 +-
fs/nfsd/nfs4state.c | 12 +-
fs/nfsd/state.h | 1 +
fs/proc/proc_sysctl.c | 6 +-
fs/splice.c | 4 +-
include/drm/ttm/ttm_bo_driver.h | 1 -
include/linux/etherdevice.h | 12 ++
include/linux/pipe_fs_i.h | 1 +
include/net/netfilter/nf_tables.h | 6 +
include/net/netrom.h | 2 +-
kernel/sched/deadline.c | 3 +-
kernel/sched/fair.c | 4 +
kernel/trace/ring_buffer.c | 2 +-
kernel/trace/trace.c | 33 ++--
kernel/workqueue.c | 3 +
lib/Kconfig.debug | 1 +
mm/page_alloc.c | 13 ++
net/bridge/netfilter/ebtables.c | 3 +-
net/ipv4/route.c | 32 +++-
net/ipv4/sysctl_net_ipv4.c | 5 +-
net/ncsi/ncsi-rsp.c | 6 +-
net/netfilter/nf_tables_api.c | 28 ++-
net/netfilter/nft_dynset.c | 13 +-
net/netfilter/nft_lookup.c | 13 +-
net/netfilter/nft_objref.c | 32 +++-
net/netrom/af_netrom.c | 76 +++++---
net/netrom/nr_loopback.c | 2 +-
net/netrom/nr_route.c | 2 +-
net/netrom/sysctl_net_netrom.c | 5 +-
net/rds/af_rds.c | 3 +
net/rds/bind.c | 2 +
net/rds/ib_fmr.c | 11 ++
net/rds/ib_rdma.c | 3 -
net/rose/rose_loopback.c | 27 +--
net/rxrpc/input.c | 12 +-
net/rxrpc/local_object.c | 3 +-
net/sunrpc/cache.c | 3 +
net/tipc/netlink_compat.c | 24 ++-
net/tls/tls_device.c | 4 +-
net/tls/tls_device_fallback.c | 13 +-
net/tls/tls_main.c | 5 +-
net/tls/tls_sw.c | 3 +
sound/pci/hda/patch_realtek.c | 41 +++--
105 files changed, 874 insertions(+), 396 deletions(-)