[PATCH 4.19 00/99] 4.19.17-stable review

From: Greg Kroah-Hartman
Date: Mon Jan 21 2019 - 09:00:31 EST

This is the start of the stable review cycle for the 4.19.17 release.
There are 99 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed Jan 23 13:48:56 UTC 2019.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.17-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.19.17-rc1

Shuah Khan <shuah@xxxxxxxxxx>
selftests: Fix test errors related to lib.mk khdr target

Ivan Mironov <mironov.ivan@xxxxxxxxx>
drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock

Jaegeuk Kim <jaegeuk@xxxxxxxxxx>
loop: drop caches if offset or block_size are changed

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl()

Jan Kara <jack@xxxxxxx>
loop: Get rid of 'nested' acquisition of loop_ctl_mutex

Jan Kara <jack@xxxxxxx>
loop: Avoid circular locking dependency between loop_ctl_mutex and bd_mutex

Jan Kara <jack@xxxxxxx>
loop: Fix deadlock when calling blkdev_reread_part()

Jan Kara <jack@xxxxxxx>
loop: Move loop_reread_partitions() out of loop_ctl_mutex

Jan Kara <jack@xxxxxxx>
loop: Move special partition reread handling in loop_clr_fd()

Jan Kara <jack@xxxxxxx>
loop: Push loop_ctl_mutex down to loop_change_fd()

Jan Kara <jack@xxxxxxx>
loop: Push loop_ctl_mutex down to loop_set_fd()

Jan Kara <jack@xxxxxxx>
loop: Push loop_ctl_mutex down to loop_set_status()

Jan Kara <jack@xxxxxxx>
loop: Push loop_ctl_mutex down to loop_get_status()

Jan Kara <jack@xxxxxxx>
loop: Push loop_ctl_mutex down into loop_clr_fd()

Jan Kara <jack@xxxxxxx>
loop: Split setting of lo_state from loop_clr_fd

Jan Kara <jack@xxxxxxx>
loop: Push lo_ctl_mutex down into individual ioctls

Jan Kara <jack@xxxxxxx>
loop: Get rid of loop_index_mutex

Jan Kara <jack@xxxxxxx>
loop: Fold __loop_release into loop_release

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
block/loop: Use global lock for ioctl() operation.

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
block/loop: Don't grab "struct file" for vfs_getattr() operation.

Ying Xue <ying.xue@xxxxxxxxxxxxx>
tipc: fix uninit-value in tipc_nl_compat_doit

Ying Xue <ying.xue@xxxxxxxxxxxxx>
tipc: fix uninit-value in tipc_nl_compat_name_table_dump

Ying Xue <ying.xue@xxxxxxxxxxxxx>
tipc: fix uninit-value in tipc_nl_compat_link_set

Ying Xue <ying.xue@xxxxxxxxxxxxx>
tipc: fix uninit-value in tipc_nl_compat_bearer_enable

Ying Xue <ying.xue@xxxxxxxxxxxxx>
tipc: fix uninit-value in tipc_nl_compat_link_reset_stats

Ying Xue <ying.xue@xxxxxxxxxxxxx>
tipc: fix uninit-value in in tipc_conn_rcv_sub

Xin Long <lucien.xin@xxxxxxxxx>
sctp: allocate sctp_sockaddr_entry with kzalloc

Jan Kara <jack@xxxxxxx>
blockdev: Fix livelocks on loop device

Stephen Smalley <sds@xxxxxxxxxxxxx>
selinux: fix GPF on invalid policy

Yufen Yu <yuyufen@xxxxxxxxxx>
block: use rcu_work instead of call_rcu to avoid sleep in softirq

Shakeel Butt <shakeelb@xxxxxxxxxx>
netfilter: ebtables: account ebt_table_info to kmemcg

J. Bruce Fields <bfields@xxxxxxxxxx>
sunrpc: handle ENOMEM in rpcb_getport_async

Hans Verkuil <hverkuil@xxxxxxxxx>
media: vb2: vb2_mmap: move lock up

James Morris <james.morris@xxxxxxxxxxxxx>
LSM: Check for NULL cred-security on free

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv6: make icmp6_send() robust against null skb->dev

Willem de Bruijn <willemb@xxxxxxxxxx>
bpf: in __bpf_redirect_no_mac pull mac only if present

Hans Verkuil <hverkuil-cisco@xxxxxxxxx>
media: vivid: set min width/height to a value > 0

Hans Verkuil <hverkuil-cisco@xxxxxxxxx>
media: vivid: fix error handling of kthread_run

Vlad Tsyrklevich <vlad@xxxxxxxxxxxxxxx>
omap2fb: Fix stack memory disclosure

Florian La Roche <florian.laroche@xxxxxxxxxxxxxx>
fix int_sqrt64() for very large numbers

YunQiang Su <ysu@xxxxxxxxxxxx>
Disable MSI also when pcie-octeon.pcie_disable on

Heinrich Schuchardt <xypron.glpk@xxxxxx>
arm64: dts: marvell: armada-ap806: reserve PSCI area

Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
arm64: kaslr: ensure randomized quantities are clean to the PoC

Kees Cook <keescook@xxxxxxxxxxxx>
pstore/ram: Avoid allocation and leak of platform data

Johan Hovold <johan@xxxxxxxxxx>
net: dsa: realtek-smi: fix OF child-node lookup

Paul Burton <paul.burton@xxxxxxxx>
kbuild: Disable LD_DEAD_CODE_DATA_ELIMINATION with ftrace & GCC <= 4.7

Adit Ranadive <aditr@xxxxxxxxxx>
RDMA/vmw_pvrdma: Return the correct opcode when creating WR

Leon Romanovsky <leon@xxxxxxxxxx>
RDMA/nldev: Don't expose unsafe global rkey to regular user

Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
media: v4l: ioctl: Validate num_planes for debug messages

Jonathan Hunter <jonathanh@xxxxxxxxxx>
mfd: tps6586x: Handle interrupts on suspend

Julia Lawall <Julia.Lawall@xxxxxxx>
OF: properties: add missing of_node_put

Zhenyu Wang <zhenyuw@xxxxxxxxxxxxxxx>
drm/i915/gvt: Fix mmap range check

Hauke Mehrtens <hauke@xxxxxxxxxx>
MIPS: lantiq: Fix IPI interrupt handling

RafaÅ MiÅecki <rafal@xxxxxxxxxx>
MIPS: BCM47XX: Setup struct device for the SoC

Arnd Bergmann <arnd@xxxxxxxx>
mips: fix n32 compat_ipc_parse_version

Ivan Mironov <mironov.ivan@xxxxxxxxx>
scsi: sd: Fix cache_type_store()

Stanley Chu <stanley.chu@xxxxxxxxxxxx>
scsi: core: Synchronize request queue PM status only on successful resume

Kees Cook <keescook@xxxxxxxxxxxx>
Yama: Check for pid death before checking ancestry

Josef Bacik <josef@xxxxxxxxxxxxxx>
btrfs: wait on ordered extents on abort cleanup

David Sterba <dsterba@xxxxxxxx>
Revert "btrfs: balance dirty metadata pages in btrfs_finish_ordered_io"

Juergen Gross <jgross@xxxxxxxx>
xen: Fix x86 sched_clock() interface for xen

Christophe Leroy <christophe.leroy@xxxxxx>
crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK

Christophe Leroy <christophe.leroy@xxxxxx>
crypto: talitos - reorder code in talitos_edesc_alloc()

Eric Biggers <ebiggers@xxxxxxxxxx>
crypto: authenc - fix parsing key with misaligned rta_len

Eric Biggers <ebiggers@xxxxxxxxxx>
crypto: bcm - convert to use crypto_authenc_extractkeys()

Eric Biggers <ebiggers@xxxxxxxxxx>
crypto: ccree - convert to use crypto_authenc_extractkeys()

Harsh Jain <harsh@xxxxxxxxxxx>
crypto: authencesn - Avoid twice completion call in decrypt path

Aymen Sghaier <aymen.sghaier@xxxxxxx>
crypto: caam - fix zero-length buffer DMA mapping

Eric Biggers <ebiggers@xxxxxxxxxx>
crypto: sm3 - fix undefined shift by >= width of value

Heiner Kallweit <hkallweit1@xxxxxxxxx>
r8169: load Realtek PHY driver module before r8169

Willem de Bruijn <willemb@xxxxxxxxxx>
ip: on queued skb use skb_header_pointer instead of pskb_may_pull

Willem de Bruijn <willemb@xxxxxxxxxx>
bonding: update nest level on unlink

Heiner Kallweit <hkallweit1@xxxxxxxxx>
r8169: don't try to read counters if chip is in a PCI power-save state

Cong Wang <xiyou.wangcong@xxxxxxxxx>
smc: move unhash as early as possible in smc_release()

Bryan Whitehead <Bryan.Whitehead@xxxxxxxxxxxxx>
lan743x: Remove phy_read from link status change function

Stanislav Fomichev <sdf@xxxxxxxxxx>
tun: publish tfile after it's fully initialized

Yuchung Cheng <ycheng@xxxxxxxxxx>
tcp: change txhash on SYN-data timeout

Jason Gunthorpe <jgg@xxxxxxxx>
packet: Do not leak dev refcounts on error exit

JianJhen Chen <kchen@xxxxxxxxxxxx>
net: bridge: fix a bug on using a neighbour cache entry without checking its state

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv6: fix kernel-infoleak in ipv6_local_error()

Mark Rutland <mark.rutland@xxxxxxx>
arm64: Don't trap host pointer auth use to EL2

Mark Rutland <mark.rutland@xxxxxxx>
arm64/kvm: consistently handle host HCR_EL2 flags

Varun Prakash <varun@xxxxxxxxxxx>
scsi: target: iscsi: cxgbit: fix csk leak - 2

Varun Prakash <varun@xxxxxxxxxxx>
scsi: target: iscsi: cxgbit: fix csk leak

Sasha Levin <sashal@xxxxxxxxxx>
Revert "scsi: target: iscsi: cxgbit: fix csk leak"

Loic Poulain <loic.poulain@xxxxxxxxxx>
mmc: sdhci-msm: Disable CDR function on TX

Florian Westphal <fw@xxxxxxxxx>
netfilter: nf_conncount: fix argument order to find_next_bit

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nf_conncount: speculative garbage collection on empty lists

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nf_conncount: move all list iterations under spinlock

Florian Westphal <fw@xxxxxxxxx>
netfilter: nf_conncount: merge lookup and add functions

Florian Westphal <fw@xxxxxxxxx>
netfilter: nf_conncount: restart search when nodes have been erased

Florian Westphal <fw@xxxxxxxxx>
netfilter: nf_conncount: split gc in two phases

Florian Westphal <fw@xxxxxxxxx>
netfilter: nf_conncount: don't skip eviction when age is negative

Shawn Bohrer <sbohrer@xxxxxxxxxxxxxx>
netfilter: nf_conncount: replace CONNCOUNT_LOCK_SLOTS with CONNCOUNT_SLOTS

Oliver Hartkopp <socketcan@xxxxxxxxxxxx>
can: gw: ensure DLC boundaries after CAN frame modification

Dmitry Safonov <dima@xxxxxxxxxx>
tty: Don't hold ldisc lock in tty_reopen() if ldisc present

Dmitry Safonov <dima@xxxxxxxxxx>
tty: Simplify tty->count math in tty_reopen()

Dmitry Safonov <dima@xxxxxxxxxx>
tty: Hold tty_ldisc_lock() during tty_reopen()

Dmitry Safonov <dima@xxxxxxxxxx>
tty/ldsem: Wake up readers after timed out down_write()


-------------

Diffstat:

Makefile | 4 +-
arch/arm64/boot/dts/marvell/armada-ap806.dtsi | 17 +
arch/arm64/include/asm/kvm_arm.h | 3 +
arch/arm64/kernel/head.S | 5 +-
arch/arm64/kernel/kaslr.c | 8 +-
arch/arm64/kvm/hyp/switch.c | 2 +-
arch/mips/Kconfig | 1 +
arch/mips/bcm47xx/setup.c | 31 ++
arch/mips/lantiq/irq.c | 68 +---
arch/mips/pci/msi-octeon.c | 4 +-
arch/x86/xen/time.c | 12 +-
block/partition-generic.c | 8 +-
crypto/authenc.c | 14 +-
crypto/authencesn.c | 2 +-
crypto/sm3_generic.c | 2 +-
drivers/block/loop.c | 443 +++++++++++++--------
drivers/block/loop.h | 1 -
drivers/crypto/Kconfig | 1 +
drivers/crypto/bcm/cipher.c | 44 +-
drivers/crypto/caam/caamhash.c | 15 +-
drivers/crypto/ccree/cc_aead.c | 40 +-
drivers/crypto/talitos.c | 26 +-
drivers/gpu/drm/drm_fb_helper.c | 7 +-
drivers/gpu/drm/i915/gvt/kvmgt.c | 14 +-
drivers/infiniband/core/nldev.c | 4 -
drivers/infiniband/hw/vmw_pvrdma/pvrdma.h | 35 +-
drivers/infiniband/hw/vmw_pvrdma/pvrdma_qp.c | 6 +
drivers/media/common/videobuf2/videobuf2-core.c | 11 +-
drivers/media/platform/vivid/vivid-kthread-cap.c | 5 +-
drivers/media/platform/vivid/vivid-kthread-out.c | 5 +-
drivers/media/platform/vivid/vivid-vid-common.c | 2 +-
drivers/media/v4l2-core/v4l2-ioctl.c | 4 +-
drivers/mfd/tps6586x.c | 24 ++
drivers/mmc/host/sdhci-msm.c | 43 +-
drivers/net/bonding/bond_main.c | 3 +
drivers/net/dsa/realtek-smi.c | 18 +-
drivers/net/ethernet/microchip/lan743x_main.c | 11 +-
drivers/net/ethernet/realtek/r8169.c | 7 +-
drivers/net/tun.c | 11 +-
drivers/of/property.c | 1 +
drivers/scsi/scsi_pm.c | 26 +-
drivers/scsi/sd.c | 6 +
drivers/target/iscsi/cxgbit/cxgbit_cm.c | 23 +-
drivers/tty/tty_io.c | 22 +-
drivers/tty/tty_ldsem.c | 10 +
drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c | 2 +
drivers/xen/events/events_base.c | 2 +-
fs/block_dev.c | 28 +-
fs/btrfs/disk-io.c | 8 +
fs/btrfs/inode.c | 3 -
fs/pstore/ram.c | 9 +-
include/linux/bcma/bcma_soc.h | 1 +
include/linux/genhd.h | 2 +-
include/net/netfilter/nf_conntrack_count.h | 19 +-
include/uapi/rdma/vmw_pvrdma-abi.h | 1 +
init/Kconfig | 1 +
lib/int_sqrt.c | 2 +-
net/bridge/br_netfilter_hooks.c | 2 +-
net/bridge/netfilter/ebtables.c | 6 +-
net/can/gw.c | 30 +-
net/core/filter.c | 21 +-
net/core/lwt_bpf.c | 1 +
net/ipv4/ip_sockglue.c | 12 +-
net/ipv4/tcp_timer.c | 2 +-
net/ipv6/datagram.c | 11 +-
net/ipv6/icmp.c | 8 +-
net/netfilter/nf_conncount.c | 290 ++++++--------
net/netfilter/nft_connlimit.c | 14 +-
net/packet/af_packet.c | 4 +-
net/sctp/ipv6.c | 5 +-
net/sctp/protocol.c | 4 +-
net/smc/af_smc.c | 4 +-
net/sunrpc/rpcb_clnt.c | 8 +
net/tipc/netlink_compat.c | 50 ++-
net/tipc/topsrv.c | 2 +-
security/security.c | 7 +
security/selinux/ss/policydb.c | 3 +-
security/yama/yama_lsm.c | 4 +-
tools/testing/selftests/android/Makefile | 2 +-
tools/testing/selftests/futex/functional/Makefile | 1 +
tools/testing/selftests/gpio/Makefile | 1 +
tools/testing/selftests/kvm/Makefile | 2 +-
tools/testing/selftests/lib.mk | 8 +-
.../selftests/networking/timestamping/Makefile | 1 +
tools/testing/selftests/vm/Makefile | 1 +
85 files changed, 977 insertions(+), 654 deletions(-)