This is the start of the stable review cycle for the 5.7.15 release.
There are 79 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 12 Aug 2020 15:17:47 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.7.15-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.7.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <[email protected]>
Linux 5.7.15-rc1
Guenter Roeck <[email protected]>
arm64: kaslr: Use standard early random function
Bruno Meneguele <[email protected]>
ima: move APPRAISE_BOOTPARAM dependency on ARCH_POLICY to runtime
Paolo Abeni <[email protected]>
mptcp: fix bogus sendmsg() return code under pressure
Paolo Abeni <[email protected]>
mptcp: be careful on subflow creation
Jianfeng Wang <[email protected]>
tcp: apply a floor of 1 for RTT samples from TCP timestamps
Willem de Bruijn <[email protected]>
selftests/net: relax cpu affinity requirement in msg_zerocopy test
Hangbin Liu <[email protected]>
Revert "vxlan: fix tos value before xmit"
Peilin Ye <[email protected]>
openvswitch: Prevent kernel-infoleak in ovs_ct_put_key()
Xin Long <[email protected]>
net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task()
wenxu <[email protected]>
net/sched: act_ct: fix miss set mru for ovs after defrag in act_ct
Lorenzo Bianconi <[email protected]>
net: mvpp2: fix memory leak in mvpp2_rx
Stefan Roese <[email protected]>
net: macb: Properly handle phylink on at91sam9x
Lorenzo Bianconi <[email protected]>
net: gre: recompute gre csum for sctp over gre tunnels
Nikolay Aleksandrov <[email protected]>
net: bridge: clear bridge's private skb space on xmit
Stephen Hemminger <[email protected]>
hv_netvsc: do not use VF device if link is down
YueHaibing <[email protected]>
dpaa2-eth: Fix passing zero to 'PTR_ERR' warning
Vincent Duvert <[email protected]>
appletalk: Fix atalk_proc_init() return path
Jakub Kicinski <[email protected]>
devlink: ignore -EOPNOTSUPP errors on dumpit
Herbert Xu <[email protected]>
rhashtable: Restore RCU marking on rhash_lock_head
Johan Hovold <[email protected]>
net: lan78xx: replace bogus endpoint lookup
Ido Schimmel <[email protected]>
vxlan: Ensure FDB dump is performed under RCU
David Howells <[email protected]>
rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
Xiyu Yang <[email protected]>
ipv6: Fix nexthop refcnt leak when creating ipv6 route info
Cong Wang <[email protected]>
ipv6: fix memory leaks on IPV6_ADDRFORM path
Ido Schimmel <[email protected]>
ipv4: Silence suspicious RCU usage warning
Nicolas Chauvet <[email protected]>
PCI: tegra: Revert tegra124 raw_violation_fixup
Christophe Leroy <[email protected]>
Revert "powerpc/kasan: Fix shadow pages allocation failure"
Frank van der Linden <[email protected]>
xattr: break delegations in {set,remove}xattr
Philippe Duplessis-Guindon <[email protected]>
tools lib traceevent: Fix memory leak in process_dynamic_array_len
Xin Xiong <[email protected]>
atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent
Francesco Ruggeri <[email protected]>
igb: reinit_locked() should be called with rtnl_lock
Julian Squires <[email protected]>
cfg80211: check vendor command doit pointer before use
Qiushi Wu <[email protected]>
firmware: Fix a reference count leak.
Ranjani Sridharan <[email protected]>
ALSA: hda: fix NULL pointer dereference during suspend
René van Dorst <[email protected]>
net: ethernet: mtk_eth_soc: Always call mtk_gmac0_rgmii_adjust() for mt7623
Rustam Kovhaev <[email protected]>
usb: hso: check for return value in hso_serial_common_create()
Wolfram Sang <[email protected]>
i2c: slave: add sanity check when unregistering
Wolfram Sang <[email protected]>
i2c: slave: improve sanity check when registering
laurent brando <[email protected]>
net: mscc: ocelot: fix hardware timestamp dequeue logic
Sam Ravnborg <[email protected]>
drm/drm_fb_helper: fix fbdev with sparc64
Jitao Shi <[email protected]>
drm/panel: Fix auo, kd101n80-45na horizontal noise on edges of panel
Laurentiu Palcu <[email protected]>
drm/bridge/adv7511: set the bridge type properly
Kai-Heng Feng <[email protected]>
nvme-pci: prevent SK hynix PC400 from using Write Zeroes command
Pavel Begunkov <[email protected]>
io_uring: fix lockup in io_fail_links()
Ben Skeggs <[email protected]>
drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure
Ben Skeggs <[email protected]>
drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason
Ben Skeggs <[email protected]>
drm/nouveau/kms/tu102: wait for core update to complete when assigning windows
Christoph Hellwig <[email protected]>
net/9p: validate fds in p9_fd_open
Peilin Ye <[email protected]>
bpf: Fix NULL pointer dereference in __btf_resolve_helper_id()
Dmitry Osipenko <[email protected]>
gpio: max77620: Fix missing release of interrupt
Johan Hovold <[email protected]>
leds: 88pm860x: fix use-after-free on unbind
Johan Hovold <[email protected]>
leds: lm3533: fix use-after-free on unbind
Johan Hovold <[email protected]>
leds: da903x: fix use-after-free on unbind
Johan Hovold <[email protected]>
leds: lm36274: fix use-after-free on unbind
Johan Hovold <[email protected]>
leds: wm831x-status: fix use-after-free on unbind
Greg Kroah-Hartman <[email protected]>
mtd: properly check all write ioctls for permissions
Yunhai Zhang <[email protected]>
vgacon: Fix for missing check in scrollback handling
Kees Cook <[email protected]>
lkdtm/heap: Avoid edge and middle of slabs
Matthias Maennich <[email protected]>
scripts: add dummy report mode to add_namespace.cocci
Eric Biggers <[email protected]>
Smack: fix use-after-free in smk_write_relabel_self()
Jann Horn <[email protected]>
binder: Prevent context manager from incrementing ref 0
Adam Ford <[email protected]>
omapfb: dss: Fix max fclk divider for omap36xx
Peilin Ye <[email protected]>
Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
Peilin Ye <[email protected]>
Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt()
Peilin Ye <[email protected]>
Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
Dinghao Liu <[email protected]>
Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode
Rustam Kovhaev <[email protected]>
staging: rtl8712: handle firmware load failure
Suren Baghdasaryan <[email protected]>
staging: android: ashmem: Fix lockdep warning for write operation
Takashi Iwai <[email protected]>
ALSA: seq: oss: Serialize ioctls
Connor McAdams <[email protected]>
ALSA: hda/ca0132 - Fix AE-5 microphone selection commands.
Connor McAdams <[email protected]>
ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value.
Connor McAdams <[email protected]>
ALSA: hda/ca0132 - Add new quirk ID for Recon3D.
Huacai Chen <[email protected]>
ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops
Hui Wang <[email protected]>
Revert "ALSA: hda: call runtime_allow() for all hda controllers"
Forest Crossman <[email protected]>
usb: xhci: Fix ASMedia ASM1142 DMA addressing
Forest Crossman <[email protected]>
usb: xhci: define IDs for various ASMedia host controllers
Greg Kroah-Hartman <[email protected]>
USB: iowarrior: fix up report size handling for some devices
Erik Ekman <[email protected]>
USB: serial: qcserial: add EM7305 QDL product ID
Stanley Chu <[email protected]>
scsi: ufs: Fix and simplify setup_xfer_req variant operation
-------------
Diffstat:
Makefile | 4 +-
arch/arm64/kernel/kaslr.c | 12 +--
arch/powerpc/include/asm/kasan.h | 2 +
arch/powerpc/mm/init_32.c | 2 +
arch/powerpc/mm/kasan/kasan_init_32.c | 4 +-
drivers/android/binder.c | 15 ++-
drivers/atm/atmtcp.c | 10 +-
drivers/firmware/qemu_fw_cfg.c | 7 +-
drivers/gpio/gpio-max77620.c | 5 +-
drivers/gpu/drm/bochs/bochs_kms.c | 1 +
drivers/gpu/drm/bridge/adv7511/adv7511_drv.c | 1 +
drivers/gpu/drm/drm_fb_helper.c | 6 +-
drivers/gpu/drm/nouveau/dispnv50/disp.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_fbcon.c | 3 +-
drivers/gpu/drm/panel/panel-boe-tv101wum-nl6.c | 6 +-
drivers/i2c/i2c-core-slave.c | 7 +-
drivers/leds/leds-88pm860x.c | 14 ++-
drivers/leds/leds-da903x.c | 14 ++-
drivers/leds/leds-lm3533.c | 12 ++-
drivers/leds/leds-lm36274.c | 15 ++-
drivers/leds/leds-wm831x-status.c | 14 ++-
drivers/misc/lkdtm/heap.c | 9 +-
drivers/mtd/mtdchar.c | 56 +++++++++--
drivers/net/ethernet/cadence/macb_main.c | 11 ++-
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 6 +-
drivers/net/ethernet/intel/igb/igb_main.c | 9 ++
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 1 +
drivers/net/ethernet/mediatek/mtk_eth_soc.c | 19 +++-
drivers/net/ethernet/mscc/ocelot.c | 10 +-
drivers/net/hyperv/netvsc_drv.c | 7 +-
drivers/net/usb/hso.c | 5 +-
drivers/net/usb/lan78xx.c | 117 ++++++-----------------
drivers/net/vxlan.c | 10 +-
drivers/nvme/host/pci.c | 2 +
drivers/pci/controller/pci-tegra.c | 32 -------
drivers/scsi/ufs/ufshcd.c | 9 +-
drivers/staging/android/ashmem.c | 12 +++
drivers/staging/rtl8188eu/core/rtw_mlme.c | 4 +-
drivers/staging/rtl8712/hal_init.c | 3 +-
drivers/staging/rtl8712/usb_intf.c | 11 ++-
drivers/usb/host/xhci-pci.c | 10 +-
drivers/usb/misc/iowarrior.c | 35 +++++--
drivers/usb/serial/qcserial.c | 1 +
drivers/video/console/vgacon.c | 4 +
drivers/video/fbdev/omap2/omapfb/dss/dss.c | 2 +-
fs/io_uring.c | 3 +-
fs/xattr.c | 84 ++++++++++++++--
include/drm/drm_mode_config.h | 12 +++
include/linux/rhashtable.h | 56 +++++------
include/linux/skbuff.h | 1 +
include/linux/xattr.h | 2 +
include/net/addrconf.h | 1 +
include/net/sch_generic.h | 3 +-
kernel/bpf/btf.c | 5 +
lib/rhashtable.c | 35 ++++---
net/9p/trans_fd.c | 24 +++--
net/appletalk/atalk_proc.c | 2 +
net/bluetooth/hci_event.c | 11 ++-
net/bridge/br_device.c | 2 +
net/core/devlink.c | 24 +++--
net/ipv4/fib_trie.c | 2 +-
net/ipv4/gre_offload.c | 13 ++-
net/ipv4/tcp_input.c | 2 +
net/ipv6/anycast.c | 17 +++-
net/ipv6/ipv6_sockglue.c | 1 +
net/ipv6/route.c | 8 +-
net/mptcp/protocol.c | 3 +-
net/mptcp/subflow.c | 6 ++
net/openvswitch/conntrack.c | 38 ++++----
net/openvswitch/flow.c | 1 +
net/rxrpc/call_object.c | 27 ++++--
net/rxrpc/conn_object.c | 8 +-
net/rxrpc/recvmsg.c | 2 +-
net/rxrpc/sendmsg.c | 3 +
net/sched/act_ct.c | 8 +-
net/sched/cls_api.c | 1 +
net/wireless/nl80211.c | 6 +-
scripts/coccinelle/misc/add_namespace.cocci | 8 +-
scripts/nsdeps | 2 +-
security/integrity/ima/Kconfig | 2 +-
security/integrity/ima/ima_appraise.c | 6 ++
security/smack/smackfs.c | 13 ++-
sound/core/seq/oss/seq_oss.c | 8 +-
sound/pci/hda/hda_codec.c | 8 ++
sound/pci/hda/hda_intel.c | 1 -
sound/pci/hda/patch_ca0132.c | 12 ++-
sound/pci/hda/patch_realtek.c | 114 ++++++++++++++++++++++
tools/lib/traceevent/event-parse.c | 1 +
tools/testing/selftests/net/msg_zerocopy.c | 5 +-
90 files changed, 778 insertions(+), 358 deletions(-)
From: Rustam Kovhaev <[email protected]>
commit b4383c971bc5263efe2b0915ba67ebf2bf3f1ee5 upstream.
when firmware fails to load we should not call unregister_netdev()
this patch fixes a race condition between rtl871x_load_fw_cb() and
r871xu_dev_remove() and fixes the bug reported by syzbot
Reported-by: [email protected]
Link: https://syzkaller.appspot.com/bug?extid=80899a8a8efe8968cde7
Signed-off-by: Rustam Kovhaev <[email protected]>
Cc: stable <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Greg Kroah-Hartman <[email protected]>
---
drivers/staging/rtl8712/hal_init.c | 3 ++-
drivers/staging/rtl8712/usb_intf.c | 11 ++++++++---
2 files changed, 10 insertions(+), 4 deletions(-)
--- a/drivers/staging/rtl8712/hal_init.c
+++ b/drivers/staging/rtl8712/hal_init.c
@@ -33,7 +33,6 @@ static void rtl871x_load_fw_cb(const str
{
struct _adapter *adapter = context;
- complete(&adapter->rtl8712_fw_ready);
if (!firmware) {
struct usb_device *udev = adapter->dvobjpriv.pusbdev;
struct usb_interface *usb_intf = adapter->pusb_intf;
@@ -41,11 +40,13 @@ static void rtl871x_load_fw_cb(const str
dev_err(&udev->dev, "r8712u: Firmware request failed\n");
usb_put_dev(udev);
usb_set_intfdata(usb_intf, NULL);
+ complete(&adapter->rtl8712_fw_ready);
return;
}
adapter->fw = firmware;
/* firmware available - start netdev */
register_netdev(adapter->pnetdev);
+ complete(&adapter->rtl8712_fw_ready);
}
static const char firmware_file[] = "rtlwifi/rtl8712u.bin";
--- a/drivers/staging/rtl8712/usb_intf.c
+++ b/drivers/staging/rtl8712/usb_intf.c
@@ -595,13 +595,17 @@ static void r871xu_dev_remove(struct usb
if (pnetdev) {
struct _adapter *padapter = netdev_priv(pnetdev);
- usb_set_intfdata(pusb_intf, NULL);
- release_firmware(padapter->fw);
/* never exit with a firmware callback pending */
wait_for_completion(&padapter->rtl8712_fw_ready);
+ pnetdev = usb_get_intfdata(pusb_intf);
+ usb_set_intfdata(pusb_intf, NULL);
+ if (!pnetdev)
+ goto firmware_load_fail;
+ release_firmware(padapter->fw);
if (drvpriv.drv_registered)
padapter->surprise_removed = true;
- unregister_netdev(pnetdev); /* will call netdev_close() */
+ if (pnetdev->reg_state != NETREG_UNINITIALIZED)
+ unregister_netdev(pnetdev); /* will call netdev_close() */
flush_scheduled_work();
udelay(1);
/* Stop driver mlme relation timer */
@@ -614,6 +618,7 @@ static void r871xu_dev_remove(struct usb
*/
usb_put_dev(udev);
}
+firmware_load_fail:
/* If we didn't unplug usb dongle and remove/insert module, driver
* fails on sitesurvey for the first time when device is up.
* Reset usb port for sitesurvey fail issue.
On 8/10/20 9:20 AM, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.7.15 release.
> There are 79 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Wed, 12 Aug 2020 15:17:47 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.7.15-rc1.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.7.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
>
Compiled and booted on my test system. No dmesg regressions.
Tested-by: Shuah Khan <[email protected]>
thanks,
-- Shuah
On Mon, 10 Aug 2020 at 20:52, Greg Kroah-Hartman
<[email protected]> wrote:
>
> This is the start of the stable review cycle for the 5.7.15 release.
> There are 79 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Wed, 12 Aug 2020 15:17:47 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.7.15-rc1.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.7.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
Results from Linaro’s test farm.
No regressions on arm64, arm, x86_64, and i386.
Summary
------------------------------------------------------------------------
kernel: 5.7.15-rc1
git repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
git branch: linux-5.7.y
git commit: 693b1e00f859c9979003e6728adb23f20c9784a2
git describe: v5.7.14-80-g693b1e00f859
Test details: https://qa-reports.linaro.org/lkft/linux-stable-rc-5.7-oe/build/v5.7.14-80-g693b1e00f859
No regressions (compared to build v5.7.14)
No fixes (compared to build v5.7.14)
Ran 34638 total tests in the following environments and test suites.
Environments
--------------
- dragonboard-410c
- hi6220-hikey
- i386
- juno-r2
- juno-r2-compat
- juno-r2-kasan
- nxp-ls2088
- qemu_arm
- qemu_arm64
- qemu_i386
- qemu_x86_64
- x15
- x86
- x86-kasan
Test Suites
-----------
* build
* install-android-platform-tools-r2600
* libhugetlbfs
* linux-log-parser
* ltp-cap_bounds-tests
* ltp-cpuhotplug-tests
* ltp-crypto-tests
* ltp-fcntl-locktests-tests
* ltp-filecaps-tests
* ltp-fs-tests
* ltp-fs_bind-tests
* ltp-fs_perms_simple-tests
* ltp-fsx-tests
* ltp-hugetlb-tests
* ltp-ipc-tests
* ltp-math-tests
* ltp-nptl-tests
* ltp-pty-tests
* ltp-securebits-tests
* ltp-syscalls-tests
* ltp-tracing-tests
* network-basic-tests
* perf
* kselftest
* kselftest/drivers
* kselftest/filesystems
* kselftest/net
* ltp-commands-tests
* ltp-containers-tests
* ltp-controllers-tests
* ltp-cve-tests
* ltp-dio-tests
* ltp-io-tests
* ltp-mm-tests
* ltp-open-posix-tests
* ltp-sched-tests
* v4l2-compliance
* igt-gpu-tools
* kselftest-vsyscall-mode-native
* kselftest-vsyscall-mode-native/drivers
* kselftest-vsyscall-mode-native/filesystems
* kselftest-vsyscall-mode-native/net
* kselftest-vsyscall-mode-none
* kselftest-vsyscall-mode-none/drivers
* kselftest-vsyscall-mode-none/filesystems
* kselftest-vsyscall-mode-none/net
* ssuite
--
Linaro LKFT
https://lkft.linaro.org
On Mon, Aug 10, 2020 at 05:20:19PM +0200, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.7.15 release.
> There are 79 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Wed, 12 Aug 2020 15:17:47 +0000.
> Anything received after that time might be too late.
>
Build results:
total: 155 pass: 155 fail: 0
Qemu test results:
total: 431 pass: 431 fail: 0
Guenter