From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.linuxfoundation.org ([140.211.169.12]:46426 "EHLO mail.linuxfoundation.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S934274AbdJJUB2 (ORCPT ); Tue, 10 Oct 2017 16:01:28 -0400 From: Greg Kroah-Hartman To: linux-kernel@vger.kernel.org Cc: Greg Kroah-Hartman , torvalds@linux-foundation.org, akpm@linux-foundation.org, linux@roeck-us.net, shuahkh@osg.samsung.com, patches@kernelci.org, ben.hutchings@codethink.co.uk, stable@vger.kernel.org Subject: [PATCH 4.13 000/160] 4.13.6-stable review Date: Tue, 10 Oct 2017 21:48:48 +0200 Message-Id: <20171010190548.690912997@linuxfoundation.org> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Sender: stable-owner@vger.kernel.org List-ID: This is the start of the stable review cycle for the 4.13.6 release. There are 160 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu Oct 12 19:05:14 UTC 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.13.6-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.13.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman Linux 4.13.6-rc1 Sudeep Holla base: arch_topology: fix section mismatch build warnings Paolo Abeni udp: fix bcast packet reception Paolo Abeni udp: perform source validation for mcast early demux Marek Szyprowski clk: samsung: exynos4: Enable VPLL and EPLL clocks for suspend/resume cycle Peng Xu nl80211: Define policy for packet pattern attributes Chanho Min mmc: core: add driver strength selection when selecting hs400es Christoph Hellwig nvme-pci: Use PCI bus address for data/queues in CMB Benjamin Block bsg-lib: fix use-after-free under memory-pressure Jani Nikula drm/i915/bios: ignore HDMI on port A Jani Nikula drm/i915: always update ELD connector type after get modes Arend Van Spriel brcmfmac: setup passive scan if requested by user-space Arend Van Spriel brcmfmac: add length check in brcmf_cfg80211_escan_handler() Martin K. Petersen scsi: sd: Do not override max_sectors_kb sysfs setting Martin K. Petersen scsi: sd: Implement blacklist option for WRITE SAME w/ UNMAP Luca Coelho iwlwifi: mvm: use IWL_HCMD_NOCOPY for MCAST_FILTER_CMD Boqun Feng kvm/x86: Avoid async PF preempting the kernel incorrectly Sam Bobroff KVM: PPC: Book3S: Fix server always zero from kvmppc_xive_get_xive() Jeffy Chen dm crypt: fix memory leak in crypt_ctr_cipher_old() Mikulas Patocka dm ioctl: fix alignment of event number in the device list Milan Broz dm crypt: reject sector_size feature if device length is not aligned to it Arnd Bergmann netlink: fix nla_put_{u8,u16,u32} for KASAN Arnd Bergmann rocker: fix rocker_tlv_put_* functions for KASAN Tsutomu Itoh Btrfs: fix overlap of fs_info::flags values Goffredo Baroncelli btrfs: avoid overflow when sector_t is 32 bit Ping Cheng HID: wacom: bits shifted too much for 9th and 10th buttons Jason Gerecke HID: wacom: Always increment hdev refcount within wacom_get_hdev_data Jason Gerecke HID: wacom: generic: Clear ABS_MISC when tool leaves proximity Jason Gerecke HID: wacom: generic: Send MSC_SERIAL and ABS_MISC when leaving prox Jason Gerecke HID: wacom: Correct coordinate system of touchring and pen twist Jason Gerecke HID: wacom: Properly report negative values from Intuos Pro 2 Bluetooth Aaron Armstrong Skomra HID: wacom: leds: Don't try to control the EKR's read-only LEDs Adrian Salido HID: i2c-hid: allocate hid buffers for real worst case Lyude HID: rmi: Make sure the HID device is opened on resume Suzuki K Poulose arm64: Ensure the instruction emulation is ready for userspace Baruch Siach arm64: dt marvell: Fix AP806 system controller size Amir Goldstein ovl: fix regression caused by exclusive upper/work dir protection Amir Goldstein ovl: fix missing unlock_rename() in ovl_do_copy_up() Amir Goldstein ovl: fix dentry leak in ovl_indexdir_cleanup() Amir Goldstein ovl: fix dput() of ERR_PTR in ovl_cleanup_index() Amir Goldstein ovl: fix error value printed in ovl_lookup_index() Shu Wang ftrace: Fix kmemleak in unregister_ftrace_graph Willy Tarreau auxdisplay: charlcd: properly restore atomic counter on error path Alexander Shishkin stm class: Fix a use-after-free Dexuan Cui vmbus: don't acquire the mutex in vmbus_hvsock_device_unregister() Olaf Hering Drivers: hv: fcopy: restore correct transfer length Waiman Long cgroup: Reinit cgroup_taskset structure before cgroup_migrate_execute() returns Nicolai Stange driver core: platform: Don't read past the end of "driver_override" buffer Alexander Shishkin intel_th: pci: Add Lewisburg PCH support Mark Rutland percpu: make this_cpu_generic_read() atomic w.r.t. interrupts Gustavo Romero powerpc/tm: Fix illegal TM state in signal handler Cyril Bur powerpc/64s: Use emergency stack for kernel TM Bad Thing program checks Jeremy Kerr powerpc: Fix action argument for cpufeatures-based TLB flush Anton Blanchard powerpc/powernv: Increase memory block size to 1GB on radix Takashi Iwai ALSA: usx2y: Suppress kernel warning at page allocation failures Takashi Sakamoto Revert "ALSA: echoaudio: purge contradictions between dimension matrix members and total number of members" Guneshwor Singh ALSA: compress: Remove unused variable Casey Schaufler lsm: fix smack_inode_removexattr and xattr_getsecurity memleak Sergey Senozhatsky lib/ratelimit.c: use deferred printk() version Andrea Arcangeli userfaultfd: non-cooperative: fix fork use after free Shaohua Li mm: fix data corruption caused by lazyfree page Shaohua Li mm: avoid marking swap cached page as lazyfree Christophe Leroy mm: fix RODATA_TEST failure "rodata_test: test data was not read only" Michal Hocko mm, oom_reaper: skip mm structs with mmu notifiers Alexandru Moise <00moses.alexander00@gmail.com> mm, hugetlb, soft_offline: save compound page order before page migration Kirill Tkhai ksm: fix unlocked iteration over vmas in cmp_and_merge_page() Stefan Wahren staging: vchiq_2835_arm: Fix NULL ptr dereference in free_pagelist Andrey Konovalov uwb: ensure that endpoint is interrupt Andrey Konovalov uwb: properly check kthread_run return value Lukas Wunner iio: adc: mcp320x: Fix oops on module unload Lukas Wunner iio: adc: mcp320x: Fix readout of negative voltages Fabrice Gasnier iio: adc: stm32: fix bad error check on max_channels Dragos Bogdan iio: ad7793: Fix the serial interface reset Fabrice Gasnier iio: trigger: stm32-timer: fix a corner case to write preset Fabrice Gasnier iio: trigger: stm32-timer: preset shouldn't be buffered Colin Parker IIO: BME280: Updates to Humidity readings need ctrl_reg write! Matt Fornero iio: core: Return error for failed read_reg Stefan Popa staging: iio: ad7192: Fix - use the dedicated reset function avoiding dma from stack. Dragos Bogdan iio: ad_sigma_delta: Implement a dedicated reset function Christophe JAILLET iio: adc: twl4030: Disable the vusb3v1 rugulator in the error handling path of 'twl4030_madc_probe()' Christophe JAILLET iio: adc: twl4030: Fix an error handling path in 'twl4030_madc_probe()' Kai-Heng Feng Revert "xhci: Limit USB2 port wake support for AMD Promontory hosts" Mathias Nyman xhci: set missing SuperSpeedPlus Link Protocol bit in roothub descriptor Mathias Nyman xhci: Fix sleeping with spin_lock_irq() held in ASmedia 1042A workaround Adam Wallis usb: host: xhci-plat: allow sysdev to inherit from ACPI Mathias Nyman xhci: fix wrong endpoint ESIT value shown in tracing Mathias Nyman xhci: fix finding correct bus_state structure for USB 3.1 hosts Lu Baolu usb: xhci: Free the right ring in xhci_add_endpoint() Greg Kroah-Hartman USB: fix out-of-bounds in usb_set_configuration Dmitry Fleytman usb: Increase quirk delay for USB devices Greg Kroah-Hartman USB: core: harden cdc_parse_cdc_header Alan Stern USB: uas: fix bug in handling of alternate settings Alan Stern USB: g_mass_storage: Fix deadlock when driver is unbound Dan Carpenter USB: devio: Don't corrupt user memory Dan Carpenter USB: devio: Prevent integer overflow in proc_do_submiturb() Alan Stern USB: dummy-hcd: Fix erroneous synchronization change Alan Stern USB: dummy-hcd: fix infinite-loop resubmission bug Alan Stern USB: dummy-hcd: fix connection failures (wrong speed) Bjørn Mork USB: cdc-wdm: ignore -EPIPE from GetEncapsulatedResponse Jim Dickerson usb: pci-quirks.c: Corrected timeout values used in handshake Takashi Iwai ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor Yoshihiro Shimoda usb: renesas_usbhs: fix usbhsf_fifo_clear() for RX direction Yoshihiro Shimoda usb: renesas_usbhs: fix the BCLR setting condition for non-DCP pipe Alan Stern usb-storage: fix bogus hardware error messages for ATA pass-thru devices Alan Stern usb-storage: unusual_devs entry to fix write-access regression for Seagate external drives Yoshihiro Shimoda usb: gadget: udc: renesas_usb3: Fix return value of usb3_write_pipe() Yoshihiro Shimoda usb: gadget: udc: renesas_usb3: fix Pn_RAMMAP.Pn_MPKT value Yoshihiro Shimoda usb: gadget: udc: renesas_usb3: fix for no-data control transfer Nicolas Ferre usb: gadget: udc: atmel: set vbus irqflags explicitly Alan Stern USB: gadgetfs: fix copy_to_user while holding spinlock Alan Stern USB: gadgetfs: Fix crash caused by inadequate synchronization Roger Quadros usb: gadget: core: fix ->udc_set_speed() logic Alexei Starovoitov bpf: fix bpf_tail_call() x64 JIT Nikolay Aleksandrov net: rtnetlink: fix info leak in RTM_GETSTATS call Eric Dumazet socket, bpf: fix possible use after free Guillaume Nault l2tp: fix l2tp_eth module loading Parthasarathy Bhuvaragan tipc: use only positive error codes in messages Paolo Abeni IPv4: early demux can return an error code Xin Long ip6_tunnel: update mtu properly for ARPHRD_ETHER tunnel device in tx path Xin Long ip6_gre: ip6gre_tap device should keep dst Jason A. Donenfeld netlink: do not proceed if dump's start() errs Roi Dayan net/mlx5e: IPoIB, Fix access to invalid memory address Christoph Paasch net: Set sk_prot_creator when cloning sockets to the right proto Vivien Didelot net: dsa: mv88e6xxx: lock mutex when freeing IRQs Willem de Bruijn packet: only test po->has_vnet_hdr once in packet_snd Willem de Bruijn packet: in packet_do_bind, test fanout with bind_lock held Florian Fainelli net: dsa: Fix network device registration order Andrew Lunn net: dsa: mv88e6xxx: Allow dsa and cpu ports in multiple vlans Alexander Potapenko tun: bail out from tun_get_user() if the skb is empty Sabrina Dubroca l2tp: fix race condition in l2tp_tunnel_delete Alexey Kodanev vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit Timur Tabi net: qcom/emac: specify the correct size when mapping a DMA buffer Thomas Meyer net: stmmac: Cocci spatch "of_table" Konstantin Khlebnikov net_sched: always reset qdisc backlog in qdisc_reset() Meng Xu isdn/i4l: fetch the ppp_write buffer in one shot Edward Cree net: change skb->mac_header when Generic XDP calls adjust_head Yonghong Song bpf: one perf event close won't free bpf program attached by another perf event Willem de Bruijn packet: hold bind lock when rebinding to fanout hook Mike Manning net: ipv6: fix regression of no RTM_DELADDR sent after DAD failure Christian Lamparter net: emac: Fix napi poll list corruption Eric Dumazet tcp: fastopen: fix on syn-data transmit failure Eric Dumazet bpf: do not disable/enable BH in bpf_map_free_id() Eric Dumazet 8139too: revisit napi_complete_done() usage Davide Caratti net/sched: cls_matchall: fix crash when used with classful qdisc Xin Long ip6_tunnel: do not allow loading ip6_tunnel if ipv6 is disabled in cmdline Fahad Kunnathadi net: phy: Fix mask value write on gmii2rgmii converter speed register Xin Long ip6_gre: skb_push ipv6hdr before packing the header in ip6gre_header Subash Abhinov Kasiviswanathan udpv6: Fix the checksum computation when HW checksum does not apply Eric Dumazet tcp: fix data delivery rate Edward Cree bpf/verifier: reject BPF_ALU64|BPF_END Eric Dumazet tcp: update skb->skb_mstamp more carefully Dan Carpenter sctp: potential read out of bounds in sctp_ulpevent_type_enabled() Jiri Pirko net: sched: fix use-after-free in tcf_action_destroy and tcf_del_walker Eric Dumazet net_sched: gen_estimator: fix scaling error in bytes/packets samples Nikolay Aleksandrov net: bonding: fix tlb_dynamic_lb default value Yuval Mintz mlxsw: spectrum: Prevent mirred-related crash on removal Christophe JAILLET openvswitch: Fix an error handling path in 'ovs_nla_init_match_and_action()' Kosuke Tatsukawa net: bonding: Fix transmit load balancing in balance-alb mode if specified by sysfs Arkadi Sharshevsky mlxsw: spectrum: Fix EEPROM access in case of SFP/SFP+ Felipe Balbi usb: dwc3: ep0: fix DMA starvation by assigning req->trb on ep0 Arnd Bergmann imx-media-of: avoid uninitialized variable warning ------------- Diffstat: Documentation/filesystems/overlayfs.txt | 5 +- Makefile | 4 +- arch/arm64/boot/dts/marvell/armada-ap806.dtsi | 4 +- arch/arm64/kernel/armv8_deprecated.c | 2 +- arch/arm64/kernel/cpufeature.c | 2 +- arch/powerpc/kernel/dt_cpu_ftrs.c | 4 +- arch/powerpc/kernel/exceptions-64s.S | 24 ++++- arch/powerpc/kernel/signal_64.c | 13 ++- arch/powerpc/kvm/book3s_xive.c | 5 +- arch/powerpc/kvm/book3s_xive.h | 1 - arch/powerpc/platforms/powernv/setup.c | 10 +- arch/x86/include/asm/kvm_para.h | 4 +- arch/x86/kernel/kvm.c | 14 ++- arch/x86/kvm/mmu.c | 2 +- arch/x86/net/bpf_jit_comp.c | 4 +- block/bsg-lib.c | 27 +++-- drivers/auxdisplay/charlcd.c | 11 ++- drivers/auxdisplay/panel.c | 11 ++- drivers/base/arch_topology.c | 14 +-- drivers/base/platform.c | 3 +- drivers/clk/samsung/clk-exynos4.c | 15 +++ drivers/gpu/drm/i915/intel_audio.c | 5 - drivers/gpu/drm/i915/intel_bios.c | 7 ++ drivers/gpu/drm/i915/intel_modes.c | 17 ++++ drivers/hid/hid-rmi.c | 13 ++- drivers/hid/i2c-hid/i2c-hid.c | 3 +- drivers/hid/wacom_sys.c | 7 +- drivers/hid/wacom_wac.c | 110 +++++++++++++++++---- drivers/hv/channel_mgmt.c | 4 - drivers/hv/hv_fcopy.c | 4 + drivers/hwtracing/intel_th/pci.c | 5 + drivers/hwtracing/stm/core.c | 2 +- drivers/iio/adc/ad7793.c | 4 +- drivers/iio/adc/ad_sigma_delta.c | 28 ++++++ drivers/iio/adc/mcp320x.c | 25 +++-- drivers/iio/adc/stm32-adc.c | 2 +- drivers/iio/adc/twl4030-madc.c | 10 +- drivers/iio/industrialio-core.c | 4 +- drivers/iio/pressure/bmp280-core.c | 2 +- drivers/iio/trigger/stm32-timer-trigger.c | 4 +- drivers/isdn/i4l/isdn_ppp.c | 37 ++++--- drivers/md/dm-core.h | 1 + drivers/md/dm-crypt.c | 5 + drivers/md/dm-ioctl.c | 37 ++++--- drivers/md/dm.c | 10 +- drivers/mmc/core/mmc.c | 36 +++---- drivers/net/bonding/bond_main.c | 17 ++-- drivers/net/bonding/bond_options.c | 3 + drivers/net/dsa/mv88e6xxx/chip.c | 6 ++ drivers/net/ethernet/ibm/emac/mal.c | 3 +- .../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 3 +- drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 38 ++++--- drivers/net/ethernet/qualcomm/emac/emac-mac.c | 3 +- drivers/net/ethernet/realtek/8139too.c | 5 +- drivers/net/ethernet/rocker/rocker_tlv.h | 48 +++++---- .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 1 + drivers/net/phy/xilinx_gmii2rgmii.c | 2 +- drivers/net/tun.c | 8 +- .../broadcom/brcm80211/brcmfmac/cfg80211.c | 37 +++---- .../broadcom/brcm80211/brcmfmac/fwil_types.h | 5 + drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 10 +- drivers/nvme/host/pci.c | 14 +-- drivers/scsi/scsi_scan.c | 3 + drivers/scsi/sd.c | 35 +++++-- drivers/staging/iio/adc/ad7192.c | 4 +- drivers/staging/media/imx/imx-media-of.c | 2 +- .../interface/vchiq_arm/vchiq_2835_arm.c | 6 +- drivers/usb/class/cdc-wdm.c | 4 +- drivers/usb/core/config.c | 16 ++- drivers/usb/core/devio.c | 11 ++- drivers/usb/core/hub.c | 2 +- drivers/usb/core/message.c | 4 + drivers/usb/dwc3/ep0.c | 7 ++ drivers/usb/gadget/function/f_mass_storage.c | 27 ++--- drivers/usb/gadget/function/f_mass_storage.h | 14 --- drivers/usb/gadget/legacy/inode.c | 46 +++++++-- drivers/usb/gadget/legacy/mass_storage.c | 26 +---- drivers/usb/gadget/udc/atmel_usba_udc.c | 4 +- drivers/usb/gadget/udc/core.c | 3 +- drivers/usb/gadget/udc/dummy_hcd.c | 56 +++++++++-- drivers/usb/gadget/udc/renesas_usb3.c | 19 +++- drivers/usb/host/pci-quirks.c | 10 +- drivers/usb/host/xhci-hub.c | 14 ++- drivers/usb/host/xhci-pci.c | 12 --- drivers/usb/host/xhci-plat.c | 16 +-- drivers/usb/host/xhci.c | 3 +- drivers/usb/host/xhci.h | 10 +- drivers/usb/renesas_usbhs/fifo.c | 21 +++- drivers/usb/storage/transport.c | 14 ++- drivers/usb/storage/uas-detect.h | 15 +-- drivers/usb/storage/uas.c | 10 +- drivers/usb/storage/unusual_devs.h | 7 ++ drivers/uwb/hwa-rc.c | 2 + drivers/uwb/uwbd.c | 12 ++- fs/btrfs/ctree.h | 2 +- fs/btrfs/extent_io.c | 2 +- fs/overlayfs/copy_up.c | 6 +- fs/overlayfs/dir.c | 20 ---- fs/overlayfs/namei.c | 1 + fs/overlayfs/overlayfs.h | 1 + fs/overlayfs/ovl_entry.h | 3 + fs/overlayfs/readdir.c | 6 +- fs/overlayfs/super.c | 27 +++-- fs/overlayfs/util.c | 24 ++++- fs/userfaultfd.c | 66 +++++++++++-- fs/xattr.c | 2 +- include/asm-generic/percpu.h | 24 ++++- include/linux/iio/adc/ad_sigma_delta.h | 3 + include/linux/mmu_notifier.h | 5 + include/linux/trace_events.h | 1 + include/net/netlink.h | 73 ++++++++++---- include/net/protocol.h | 4 +- include/net/route.h | 4 +- include/net/sctp/ulpevent.h | 6 +- include/net/tcp.h | 2 +- include/net/udp.h | 2 +- include/scsi/scsi_device.h | 1 + include/scsi/scsi_devinfo.h | 1 + include/uapi/linux/bpf.h | 2 +- include/uapi/linux/dm-ioctl.h | 4 +- include/uapi/linux/usb/ch9.h | 1 + kernel/bpf/core.c | 2 +- kernel/bpf/syscall.c | 6 +- kernel/bpf/verifier.c | 3 +- kernel/cgroup/cgroup.c | 8 ++ kernel/events/core.c | 3 +- kernel/trace/ftrace.c | 14 --- lib/ratelimit.c | 4 +- mm/ksm.c | 5 +- mm/madvise.c | 12 ++- mm/oom_kill.c | 16 +++ mm/rodata_test.c | 2 +- mm/swap.c | 4 +- mm/swap_state.c | 11 +++ net/core/dev.c | 1 + net/core/filter.c | 12 ++- net/core/gen_estimator.c | 4 +- net/core/rtnetlink.c | 3 + net/core/sock.c | 7 +- net/dsa/slave.c | 28 +++--- net/ipv4/ip_input.c | 25 +++-- net/ipv4/ip_vti.c | 3 +- net/ipv4/route.c | 46 +++++---- net/ipv4/tcp_ipv4.c | 9 +- net/ipv4/tcp_output.c | 33 +++++-- net/ipv4/udp.c | 36 ++++--- net/ipv6/addrconf.c | 5 +- net/ipv6/ip6_gre.c | 22 +++-- net/ipv6/ip6_tunnel.c | 8 +- net/ipv6/ip6_vti.c | 3 +- net/ipv6/udp.c | 1 + net/l2tp/l2tp_core.c | 10 +- net/l2tp/l2tp_core.h | 5 +- net/l2tp/l2tp_eth.c | 51 +--------- net/netlink/af_netlink.c | 7 +- net/openvswitch/datapath.c | 3 +- net/packet/af_packet.c | 28 ++++-- net/sched/act_api.c | 6 +- net/sched/cls_matchall.c | 1 + net/sched/sch_generic.c | 1 + net/tipc/msg.c | 2 +- net/wireless/nl80211.c | 14 ++- security/smack/smack_lsm.c | 55 +++++------ sound/core/compress_offload.c | 3 +- sound/pci/echoaudio/echoaudio.c | 6 +- sound/usb/card.c | 20 ++++ sound/usb/usx2y/usb_stream.c | 6 +- tools/testing/selftests/bpf/test_verifier.c | 16 +++ 168 files changed, 1390 insertions(+), 672 deletions(-)