[PATCH 4.10 05/63] net/mlx5e: Fix wrong CQE decompression

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Tariq Toukan [ Upstream commit 36154be40a28e4afaa0416da2681d80b7e2ca319 ] In cqe compression with striding RQ, the decompression of the CQE field wqe_counter was done with a wrong wraparound

[PATCH 4.10 16/63] geneve: lock RCU on TX path

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Jakub Kicinski [ Upstream commit a717e3f740803cc88bd5c9a70c93504f6a368663 ] There is no guarantees that callers of the TX path will hold the RCU lock. Grab it explicitly. Fixes: fceb9c3e382

[PATCH 4.10 20/63] net: dont call strlen() on the user buffer in packet_bind_spkt()

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Potapenko [ Upstream commit 540e2894f7905538740aaf122bd8e0548e1c34a4 ] KMSAN (KernelMemorySanitizer, a new error detection tool) reports use of uninitialized memory in packet_bind_s

[PATCH 4.10 22/63] ipv6: orphan skbs in reassembly unit

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 48cac18ecf1de82f76259a54402c3adb7839ad01 ] Andrey reported a use-after-free in IPv6 stack. Issue here is that we free the socket while it still has skb in TX p

[PATCH 4.10 23/63] dccp: Unlock sock before calling sk_free()

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Arnaldo Carvalho de Melo [ Upstream commit d5afb6f9b6bb2c57bd0c05e76e12489dc0d037d9 ] The code where sk_clone() came from created a new socket and locked it, but then, on the error path didn'

[PATCH 4.10 19/63] net: bridge: allow IPv6 when multicast flood is disabled

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Mike Manning [ Upstream commit 8953de2f02ad7b15e4964c82f9afd60f128e4e98 ] Even with multicast flooding turned off, IPv6 ND should still work so that IPv6 connectivity is provided. Allow this

[PATCH v4] usb: hub: Fix error loop seen after hub communication errors

While stress testing a usb controller using a bind/unbind looop, the following error loop was observed. usb 7-1.2: new low-speed USB device number 3 using xhci-hcd usb 7-1.2: hub failed to enable device, error -108 usb 7-1-port2: cannot disable (err = -22) usb 7-1-port2: couldn't allocate usb_devi

Re: [PATCH 2/4] perf annotate: Avoid division by zero when calculating percent

Em Mon, Mar 20, 2017 at 11:56:55AM +0900, Taeung Song escreveu: > Currently perf-annotate with --print-line can print > -nan(0x8) because of division by zero > when calculating percent. > > So if a sum of samples is zero, skip calculating percent. Tried to reproduce it here, couldn't,

[PATCH 4.10 26/63] amd-xgbe: Dont overwrite SFP PHY mod_absent settings

4.10-stable review patch. If anyone has any objections, please let me know. -- From: "Lendacky, Thomas" [ Upstream commit 2697ea5a859b83ca49511dcfd98daf42584eb3cf ] If an SFP module is not present, xgbe_phy_sfp_phy_settings() should return after applying the default settings.

[PATCH 4.10 10/63] ipv4: add missing initialization for flowi4_uid

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Julian Anastasov [ Upstream commit 8bcfd0925ef15f072ba1e7bee2c25e9e1b5fd6ca ] Avoid matching of random stack value for uid when rules are looked up on input route or when RP filter is used. P

[PATCH 4.10 12/63] sctp: set sin_port for addr param when checking duplicate address

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit 2e3ce5bc2aa938653c3866aa7f4901a1f199b1c8 ] Commit b8607805dd15 ("sctp: not copying duplicate addrs to the assoc's bind address list") tried to check for duplicate a

[PATCH 4.10 41/63] mpls: Do not decrement alive counter for unregister events

4.10-stable review patch. If anyone has any objections, please let me know. -- From: David Ahern [ Upstream commit 79099aab38c8f5c746748b066ae74ba984fe2cc8 ] Multipath routes can be rendered usesless when a device in one of the paths is deleted. For example: $ ip -f mpls ro

[PATCH 4.10 09/63] vxlan: dont allow overwrite of config src addr

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Brian Russell [ Upstream commit 1158632b5a2dcce0786c1b1b99654e81cc867981 ] When using IPv6 transport and a default dst, a pointer to the configured source address is passed into the route loo

[PATCH 4.10 25/63] amd-xgbe: Be sure to set MDIO modes on device (re)start

4.10-stable review patch. If anyone has any objections, please let me know. -- From: "Lendacky, Thomas" [ Upstream commit b42c6761fd1651f564491b53016046c9ebf0b2a9 ] The MDIO register mode is set when the device is probed. But when the device is brought down and then back up,

[PATCH 4.10 56/63] x86/kasan: Fix boot with KASAN=y and PROFILE_ANNOTATED_BRANCHES=y

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Andrey Ryabinin commit be3606ff739d1c1be36389f8737c577ad87e1f57 upstream. The kernel doesn't boot with both PROFILE_ANNOTATED_BRANCHES=y and KASAN=y options selected. With branch profiling ena

[PATCH] drm/gma500: fix memory leak on edid

From: Colin Ian King edid is allocated on the call to psb_intel_sdvo_get_edid but not kfree'd at all, causing a memory leak. Fix this by kfree'ing the edid. (This may be null, but kfree can handle null frees). Detected by CoverityScan, CID#1090730 ("Resource Leak") Fixes: 5736995b473b ("gma50

Re: [PATCH] fs/pstore: Perform erase from a worker

On Fri, Mar 17, 2017 at 2:52 AM, Chris Wilson wrote: > In order to prevent a cyclic recursion between psi->read_mutex and the > inode_lock, we need to move the pse->erase to a worker. > > [ 605.374955] == > [ 605.381281] [ INFO: possible circul

[PATCH 4.10 61/63] locking/rwsem: Fix down_write_killable() for CONFIG_RWSEM_GENERIC_SPINLOCK=y

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Niklas Cassel commit 17fcbd590d0c3e35bd9646e2215f86586378bc42 upstream. We hang if SIGKILL has been sent, but the task is stuck in down_read() (after do_exit()), even though no task is doing d

[PATCH 4.10 60/63] futex: Add missing error handling to FUTEX_REQUEUE_PI

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 9bbb25afeb182502ca4f2c4f3f88af0681b34cae upstream. Thomas spotted that fixup_pi_state_owner() can return errors and we fail to unlock the rt_mutex in that case. Reported

[PATCH 4.10 59/63] futex: Fix potential use-after-free in FUTEX_REQUEUE_PI

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit c236c8e95a3d395b0494e7108f0d41cf36ec107c upstream. While working on the futex code, I stumbled over this potential use-after-free scenario. Dmitry triggered it later with

[PATCH 4.10 49/63] arm64: KVM: VHE: Clear HCR_TGE when invalidating guest TLBs

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Marc Zyngier commit 68925176296a8b995e503349200e256674bfe5ac upstream. When invalidating guest TLBs, special care must be taken to actually shoot the guest TLBs and not the host ones if we're

[PATCH 4.10 50/63] irqchip/gicv3-its: Add workaround for QDF2400 ITS erratum 0065

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Shanker Donthineni commit 90922a2d03d84de36bf8a9979d62580102f31a92 upstream. On Qualcomm Datacenter Technologies QDF2400 SoCs, the ITS hardware implementation uses 16Bytes for Interrupt Transl

[PATCH 4.10 62/63] crypto: powerpc - Fix initialisation of crc32c context

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Axtens commit aa2be9b3d6d2d699e9ca7cbfc00867c80e5da213 upstream. Turning on crypto self-tests on a POWER8 shows: alg: hash: Test 1 failed for crc32c-vpmsum : ff ff ff f

[PATCH 4.10 04/63] net/mlx5e: Update MPWQE stride size when modifying CQE compress state

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Saeed Mahameed [ Upstream commit 6dc4b54e77282caf17f0ff72aa32dd296037fbc0 ] When the admin enables/disables cqe compression, updating mpwqe stride size is required: CQE compress ON ==> s

[PATCH 4.9 18/93] ipv6: orphan skbs in reassembly unit

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 48cac18ecf1de82f76259a54402c3adb7839ad01 ] Andrey reported a use-after-free in IPv6 stack. Issue here is that we free the socket while it still has skb in TX pa

Re: [PATCH v3] usb: hub: Fix error loop seen after hub communication errors

Hi, On Thu, Mar 16, 2017 at 12:24 PM, Guenter Roeck wrote: > @@ -1198,7 +1201,7 @@ static void hub_activate(struct usb_hub *hub, enum > hub_activation_type type) > > /* Scan all ports that need attention */ > kick_hub_wq(hub); > - > +abort: One tiny nit that could be done when a

[PATCH 4.10 37/63] uapi: fix linux/packet_diag.h userspace compilation error

4.10-stable review patch. If anyone has any objections, please let me know. -- From: "Dmitry V. Levin" [ Upstream commit 745cb7f8a5de0805cade3de3991b7a95317c7c73 ] Replace MAX_ADDR_LEN with its numeric value to fix the following linux/packet_diag.h userspace compilation error

Re: [PATCH v2 06/14] mmc: dw_mmc: simplify optional reset handling

On 20 March 2017 at 12:00, Philipp Zabel wrote: > On Mon, 2017-03-20 at 11:49 +0100, Andrzej Hajda wrote: >> On 20.03.2017 11:27, Philipp Zabel wrote: > [...] >> > diff --git a/include/linux/reset.h b/include/linux/reset.h >> > index 86b4ed75359e8..c905ff1c21ec6 100644 >> > --- a/include/linux/res

Re: [PATCH v5 38/39] media: imx: csi: fix crop rectangle reset in sink set_fmt

On Mon, Mar 20, 2017 at 06:40:21PM +0100, Philipp Zabel wrote: > On Mon, 2017-03-20 at 14:17 +, Russell King - ARM Linux wrote: > > I have tripped over a bug in media-ctl when specifying both a crop and > > compose rectangle - the --help output suggests that "," should be used > > to separate t

Re: [PATCH v21 13/13] acpi/arm64: Add SBSA Generic Watchdog support in GTDT driver

On Tue, Mar 21, 2017 at 01:57:58AM +0800, Fu Wei wrote: > On 18 March 2017 at 04:01, Mark Rutland wrote: > > On Tue, Feb 07, 2017 at 02:50:15AM +0800, fu@linaro.org wrote: > > I've not been able to find where the ACPI spec says that zero is not a > > valid GSIV. This may simply be an oversigh

[PATCH 4.10 38/63] amd-xgbe: Enable IRQs only if napi_complete_done() is true

4.10-stable review patch. If anyone has any objections, please let me know. -- From: "Lendacky, Thomas" [ Upstream commit d7aba644ffdebf756e51e26a2229055211838e89 ] Depending on the hardware, the amd-xgbe driver may use disable_irq_nosync() and enable_irq() when an interrupt

Re: [PATCH 26/26] x86/mm: allow to have userspace mappings above 47-bits

On March 19, 2017 1:26:58 AM PDT, "Kirill A. Shutemov" wrote: >On Mar 19, 2017 09:25, "Aneesh Kumar K.V" > >wrote: > >"Kirill A. Shutemov" writes: > >> On Fri, Mar 17, 2017 at 11:23:54PM +0530, Aneesh Kumar K.V wrote: >>> "Kirill A. Shutemov" writes: >>> >>> > On x86, 5-level paging enables 56-

Re: [PATCH v2 06/14] mmc: dw_mmc: simplify optional reset handling

On 20 March 2017 at 12:00, Philipp Zabel wrote: > On Mon, 2017-03-20 at 11:49 +0100, Andrzej Hajda wrote: >> On 20.03.2017 11:27, Philipp Zabel wrote: > [...] >> > diff --git a/include/linux/reset.h b/include/linux/reset.h >> > index 86b4ed75359e8..c905ff1c21ec6 100644 >> > --- a/include/linux/res

[PATCH 4.10 07/63] vxlan: correctly validate VXLAN ID against VXLAN_N_VID

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Matthias Schiffer [ Upstream commit 4e37d6911f36545b286d15073f6ff840e81c ] The incorrect check caused an off-by-one error: the maximum VID 0xff was unusable. Fixes: d342894c5d2f ("vx

[PATCH 4.10 36/63] net/tunnel: set inner protocol in network gro hooks

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Abeni [ Upstream commit 294acf1c01bace5cea5d30b510504238bf5f7c25 ] The gso code of several tunnels type (gre and udp tunnels) takes for granted that the skb->inner_protocol is properly

Re: [RFC v3 1/5] sched/core: add capacity constraints to CPU controller

On 20-Mar 13:15, Tejun Heo wrote: > Hello, > > On Tue, Feb 28, 2017 at 02:38:38PM +, Patrick Bellasi wrote: > > This patch extends the CPU controller by adding a couple of new > > attributes, capacity_min and capacity_max, which can be used to enforce > > bandwidth boosting and capping. More s

Re: [RFC 1/2] firmware class: Add stream_firmware API.

On Thu, Mar 9, 2017 at 6:18 PM, wrote: Hi Yi, As FPGA image sizes are increasing, this change can be really helpful. I have one comment below. Alan Tull > From: Yi Li > > Add function to load firmware in multiple chucks instead of > > loading the whole big firmware file at once. > > Signed-o

[PATCH 4.10 35/63] vrf: Fix use-after-free in vrf_xmit

4.10-stable review patch. If anyone has any objections, please let me know. -- From: David Ahern [ Upstream commit f7887d40e541f74402df0684a1463c0a0bb68c68 ] KASAN detected a use-after-free: [ 269.467067] BUG: KASAN: use-after-free in vrf_xmit+0x7f1/0x827 [vrf] at addr fff

Re: [PATCH 03/15] extcon: cht-wc: Add Intel Cherry Trail Whiskey Cove PMIC extcon driver

Hi, On 17-03-17 18:18, Andy Shevchenko wrote: On Fri, 2017-03-17 at 10:55 +0100, Hans de Goede wrote: Add a driver for charger detection / control on the Intel Cherrytrail Whiskey Cove PMIC. +Cc: Felipe for some question(s) below. drivers/extcon/extcon-cht-wc.c | 356 I would use same pat

[PATCH 4.10 33/63] dccp: fix use-after-free in dccp_feat_activate_values

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 62f8f4d9066c1c6f2474845d1ca7e2891f2ae3fd ] Dmitry reported crashes in DCCP stack [1] Problem here is that when I got rid of listener spinlock, I missed the fac

[PATCH 4.10 34/63] team: use ETH_MAX_MTU as max mtu

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Jarod Wilson [ Upstream commit 3331aa378e9bcbd0d16de9034b0c20f4050e26b4 ] This restores the ability to set a team device's mtu to anything higher than 1500. Similar to the reported issue with

[PATCH 4.10 40/63] mpls: Send route delete notifications when router module is unloaded

4.10-stable review patch. If anyone has any objections, please let me know. -- From: David Ahern [ Upstream commit e37791ec1ad785b59022ae211f63a16189bacebf ] When the mpls_router module is unloaded, mpls routes are deleted but notifications are not sent to userspace leaving u

[PATCH 4.9 02/93] net/mlx5e: Do not reduce LRO WQE size when not using build_skb

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Tariq Toukan [ Upstream commit 4078e637c12f1e0a74293f1ec9563f42bff14a03 ] When rq_type is Striding RQ, no room of SKB_RESERVE is needed as SKB allocation is not done via build_skb. Fixes: e4b

[PATCH 4.9 05/93] vti6: return GRE_KEY for vti6

4.9-stable review patch. If anyone has any objections, please let me know. -- From: David Forster [ Upstream commit 7dcdf941cdc96692ab99fd790c8cc68945514851 ] Align vti6 with vti by returning GRE_KEY flag. This enables iproute2 to display tunnel keys on "ip -6 tunnel show" S

[PATCH 4.9 19/93] dccp: Unlock sock before calling sk_free()

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Arnaldo Carvalho de Melo [ Upstream commit d5afb6f9b6bb2c57bd0c05e76e12489dc0d037d9 ] The code where sk_clone() came from created a new socket and locked it, but then, on the error path didn't

[PATCH 4.10 48/63] dccp: fix memory leak during tear-down of unsuccessful connection request

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa [ Upstream commit 72ef9c4125c7b257e3a714d62d778ab46583d6a3 ] This patch fixes a memory leak, which happens if the connection request is not fulfilled between parsing the

[PATCH 4.9 22/93] net: fix socket refcounting in skb_complete_wifi_ack()

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit dd4f10722aeb10f4f582948839f066bebe44e5fb ] TX skbs do not necessarily hold a reference on skb->sk->sk_refcnt By the time TX completion happens, sk_refcnt might b

[PATCH 4.10 08/63] vti6: return GRE_KEY for vti6

4.10-stable review patch. If anyone has any objections, please let me know. -- From: David Forster [ Upstream commit 7dcdf941cdc96692ab99fd790c8cc68945514851 ] Align vti6 with vti by returning GRE_KEY flag. This enables iproute2 to display tunnel keys on "ip -6 tunnel show"

[PATCH 4.10 54/63] x86/unwind: Fix last frame check for aligned function stacks

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Josh Poimboeuf commit 87a6b2975f0d340c75b7488d22d61d2f98fb8abf upstream. Pavel Machek reported the following warning on x86-32: WARNING: kernel stack frame pointer at f50cdf98 in swapper/2:

[PATCH 4.10 13/63] net sched actions: decrement module reference count after table flush.

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Roman Mashak [ Upstream commit edb9d1bff4bbe19b8ae0e71b1f38732591a9eeb2 ] When tc actions are loaded as a module and no actions have been installed, flushing them would result in actions remo

[PATCH 4.9 17/93] net: net_enable_timestamp() can be called from irq contexts

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 13baa00ad01bb3a9f893e3a08cbc2d072fc0c15d ] It is now very clear that silly TCP listeners might play with enabling/disabling timestamping while new children are a

[PATCH 4.10 42/63] ipv6: make ECMP route replacement less greedy

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Sabrina Dubroca [ Upstream commit 67e194007be08d071294456274dd53e0a04fdf90 ] Commit 27596472473a ("ipv6: fix ECMP route replacement") introduced a loop that removes all siblings of an ECMP ro

[PATCH 4.9 04/93] vxlan: correctly validate VXLAN ID against VXLAN_N_VID

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Matthias Schiffer [ Upstream commit 4e37d6911f36545b286d15073f6ff840e81c ] The incorrect check caused an off-by-one error: the maximum VID 0xff was unusable. Fixes: d342894c5d2f ("vxl

[PATCH 4.10 11/63] ipv4: mask tos for input route

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Julian Anastasov [ Upstream commit 6e28099d38c0e50d62c1afc054e37e573adf3d21 ] Restore the lost masking of TOS in input route code to allow ip rules to match it properly. Problem [1] noticed

[PATCH 4.10 55/63] x86/tsc: Fix ART for TSC_KNOWN_FREQ

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 44fee88cea43d3c2cac962e0439cb10a3cabff6d upstream. Subhransu reported that convert_art_to_tsc() isn't working for him. The ART to TSC relation is only set up for systems

[PATCH 4.10 57/63] x86/intel_rdt: Put group node in rdtgroup_kn_unlock

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Jiri Olsa commit 49ec8f5b6ae3ab60385492cad900ffc8a523c895 upstream. The rdtgroup_kn_unlock waits for the last user to release and put its node. But it's calling kernfs_put on the node which ca

[PATCH 4.9 08/93] net sched actions: decrement module reference count after table flush.

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Roman Mashak [ Upstream commit edb9d1bff4bbe19b8ae0e71b1f38732591a9eeb2 ] When tc actions are loaded as a module and no actions have been installed, flushing them would result in actions remov

[PATCH 4.9 03/93] net/mlx5e: Fix wrong CQE decompression

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Tariq Toukan [ Upstream commit 36154be40a28e4afaa0416da2681d80b7e2ca319 ] In cqe compression with striding RQ, the decompression of the CQE field wqe_counter was done with a wrong wraparound v

[PATCH 4.9 21/93] tcp: fix various issues for sockets morphing to listen state

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 02b2faaf0af1d85585f6d6980e286d53612acfc2 ] Dmitry Vyukov reported a divide by 0 triggered by syzkaller, exploiting tcp_disconnect() path that was never really co

[PATCH 4.9 07/93] ipv4: mask tos for input route

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Julian Anastasov [ Upstream commit 6e28099d38c0e50d62c1afc054e37e573adf3d21 ] Restore the lost masking of TOS in input route code to allow ip rules to match it properly. Problem [1] noticed b

[PATCH 4.10 58/63] x86/perf: Fix CR4.PCE propagation to use active_mm instead of mm

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Andy Lutomirski commit 5dc855d44c2ad960a86f593c60461f1ae1566b6d upstream. If one thread mmaps a perf event while another thread in the same mm is in some context where active_mm != mm (which c

[PATCH 4.10 44/63] bridge: drop netfilter fake rtable unconditionally

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Florian Westphal [ Upstream commit a13b2082ece95247779b9995c4e91b4246bed023 ] Andreas reports kernel oops during rmmod of the br_netfilter module. Hannes debugged the oops down to a NULL rt6i

[PATCH 4.9 06/93] vxlan: dont allow overwrite of config src addr

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Brian Russell [ Upstream commit 1158632b5a2dcce0786c1b1b99654e81cc867981 ] When using IPv6 transport and a default dst, a pointer to the configured source address is passed into the route look

[PATCH 4.9 20/93] strparser: destroy workqueue on module exit

4.9-stable review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit f78ef7cd9a0686b979679d0de061c6dbfd8d649e ] Fixes: 43a0c6751a32 ("strparser: Stream parser for messages") Cc: Tom Herbert Signed-off-by: Cong Wang Signed-off-by: D

[PATCH 4.10 43/63] ipv6: avoid write to a possibly cloned skb

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Florian Westphal [ Upstream commit 79e49503efe53a8c51d8b695bedc8a346c5e4a87 ] ip6_fragment, in case skb has a fraglist, checks if the skb is cloned. If it is, it will move to the 'slow path'

[PATCH 4.10 24/63] amd-xgbe: Stop the PHY before releasing interrupts

4.10-stable review patch. If anyone has any objections, please let me know. -- From: "Lendacky, Thomas" [ Upstream commit 402168b4c2dc0734b8fbd282eff77da0275c5129 ] Some configurations require the use of the hardware's MDIO support to communicate with external PHYs. The MDIO

[PATCH 4.10 06/63] sctp: deny peeloff operation on asocs with threads sleeping on it

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Marcelo Ricardo Leitner [ Upstream commit dfcb9f4f99f1e9a49e43398a7bfbf56927544af1 ] commit 2dcab5984841 ("sctp: avoid BUG_ON on sctp_wait_for_sndbuf") attempted to avoid a BUG_ON call when t

[PATCH 4.10 28/63] strparser: destroy workqueue on module exit

4.10-stable review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit f78ef7cd9a0686b979679d0de061c6dbfd8d649e ] Fixes: 43a0c6751a32 ("strparser: Stream parser for messages") Cc: Tom Herbert Signed-off-by: Cong Wang Signed-off-by:

[PATCH 4.10 31/63] net: fix socket refcounting in skb_complete_tx_timestamp()

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 9ac25fc063751379cb77434fef9f3b088cd3e2f7 ] TX skbs do not necessarily hold a reference on skb->sk->sk_refcnt By the time TX completion happens, sk_refcnt might

[PATCH 4.10 30/63] net: fix socket refcounting in skb_complete_wifi_ack()

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit dd4f10722aeb10f4f582948839f066bebe44e5fb ] TX skbs do not necessarily hold a reference on skb->sk->sk_refcnt By the time TX completion happens, sk_refcnt might

[PATCH 4.10 32/63] net/sched: act_skbmod: remove unneeded rcu_read_unlock in tcf_skbmod_dump

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Alexey Khoroshilov [ Upstream commit 6c4dc75c251721f517e9daeb5370ea606b5b35ce ] Found by Linux Driver Verification project (linuxtesting.org). Signed-off-by: Alexey Khoroshilov Acked-by: Ja

[PATCH 4.10 29/63] tcp: fix various issues for sockets morphing to listen state

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 02b2faaf0af1d85585f6d6980e286d53612acfc2 ] Dmitry Vyukov reported a divide by 0 triggered by syzkaller, exploiting tcp_disconnect() path that was never really c

[PATCH 4.10 27/63] bonding: use ETH_MAX_MTU as max mtu

4.10-stable review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit 31c05415f5b471fd333fe42629788364faea8e0d ] This restores the ability of setting bond device's mtu to 9000. Fixes: 91572088e3fd ("net: use core MTU range checking

[PATCH 4.10 21/63] net: net_enable_timestamp() can be called from irq contexts

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 13baa00ad01bb3a9f893e3a08cbc2d072fc0c15d ] It is now very clear that silly TCP listeners might play with enabling/disabling timestamping while new children are

[PATCH 4.10 18/63] tcp/dccp: block BH for SYN processing

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 449809a66c1d0b1563dee84493e14bf3104d2d7e ] SYN processing really was meant to be handled from BH. When I got rid of BH blocking while processing socket backlog

[PATCH 4.10 00/63] 4.10.5-stable review

This is the start of the stable review cycle for the 4.10.5 release. There are 63 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Mar 22 17:47:25 UTC 2017. Anything receive

[PATCH 4.10 01/63] net/mlx5e: Register/unregister vport representors on interface attach/detach

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Saeed Mahameed [ Upstream commit 6f08a22c5fb2b9aefb8ecd8496758e7a677c1fde ] Currently vport representors are added only on driver load and removed on driver unload. Apparently we forgot to h

[PATCH 4.9 89/93] x86/perf: Fix CR4.PCE propagation to use active_mm instead of mm

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Andy Lutomirski commit 5dc855d44c2ad960a86f593c60461f1ae1566b6d upstream. If one thread mmaps a perf event while another thread in the same mm is in some context where active_mm != mm (which ca

[PATCH 4.9 90/93] futex: Fix potential use-after-free in FUTEX_REQUEUE_PI

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit c236c8e95a3d395b0494e7108f0d41cf36ec107c upstream. While working on the futex code, I stumbled over this potential use-after-free scenario. Dmitry triggered it later with

[PATCH 4.9 79/93] serial: 8250_pci: Detach low-level driver during PCI error recovery

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Gabriel Krisman Bertazi [ Upstream commit f209fa03fc9d131b3108c2e4936181eabab87416 ] During a PCI error recovery, like the ones provoked by EEH in the ppc64 platform, all IO to the device must

[PATCH 4.9 91/93] futex: Add missing error handling to FUTEX_REQUEUE_PI

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 9bbb25afeb182502ca4f2c4f3f88af0681b34cae upstream. Thomas spotted that fixup_pi_state_owner() can return errors and we fail to unlock the rt_mutex in that case. Reported-

[PATCH 4.9 55/93] PCI: Add comments about ROM BAR updating

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Bjorn Helgaas [ Upstream commit 0b457dde3cf8b7c76a60f8e960f21bbd4abdc416 ] pci_update_resource() updates a hardware BAR so its address matches the kernel's struct resource UNLESS it's a disable

[PATCH 4.9 77/93] ACPI / blacklist: add _REV quirks for Dell Precision 5520 and 3520

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Alex Hung [ Upstream commit 9523b9bf6dceef6b0215e90b2348cd646597f796 ] Precision 5520 and 3520 either hang at login and during suspend or reboot. It turns out that that adding them to acpi_rev

[PATCH 4.4 04/28] ipv4: mask tos for input route

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Julian Anastasov [ Upstream commit 6e28099d38c0e50d62c1afc054e37e573adf3d21 ] Restore the lost masking of TOS in input route code to allow ip rules to match it properly. Problem [1] noticed b

[PATCH 4.9 38/93] bpf: Detect identical PTR_TO_MAP_VALUE_OR_NULL registers

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Thomas Graf [ Upstream commit 57a09bf0a416700676e77102c28f9cfcb48267e0 ] A BPF program is required to check the return register of a map_elem_lookup() call before accessing memory. The verifie

[PATCH 4.4 02/28] [PATCH 04/41] vxlan: correctly validate VXLAN ID against VXLAN_N_VID

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Matthias Schiffer [ Upstream commit 4e37d6911f36545b286d15073f6ff840e81c ] The incorrect check caused an off-by-one error: the maximum VID 0xff was unusable. Fixes: d342894c5d2f ("vxla

[PATCH 4.4 03/28] [PATCH 05/41] vti6: return GRE_KEY for vti6

4.4-stable review patch. If anyone has any objections, please let me know. -- From: David Forster [ Upstream commit 7dcdf941cdc96692ab99fd790c8cc68945514851 ] Align vti6 with vti by returning GRE_KEY flag. This enables iproute2 to display tunnel keys on "ip -6 tunnel show" Si

[PATCH 4.9 34/93] bridge: drop netfilter fake rtable unconditionally

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Florian Westphal [ Upstream commit a13b2082ece95247779b9995c4e91b4246bed023 ] Andreas reports kernel oops during rmmod of the br_netfilter module. Hannes debugged the oops down to a NULL rt6in

[PATCH 4.4 07/28] net: net_enable_timestamp() can be called from irq contexts

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 13baa00ad01bb3a9f893e3a08cbc2d072fc0c15d ] It is now very clear that silly TCP listeners might play with enabling/disabling timestamping while new children are a

[PATCH 4.4 08/28] dccp: Unlock sock before calling sk_free()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnaldo Carvalho de Melo [ Upstream commit d5afb6f9b6bb2c57bd0c05e76e12489dc0d037d9 ] The code where sk_clone() came from created a new socket and locked it, but then, on the error path didn't

[PATCH 4.4 06/28] net: dont call strlen() on the user buffer in packet_bind_spkt()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Potapenko [ Upstream commit 540e2894f7905538740aaf122bd8e0548e1c34a4 ] KMSAN (KernelMemorySanitizer, a new error detection tool) reports use of uninitialized memory in packet_bind_sp

[PATCH v2 05/18] arm64: cpu_errata: Add capability to advertise Cortex-A73 erratum 858921

In order to work around Cortex-A73 erratum 858921 in a subsequent patch, add the required capability that advertise the erratum. As the configuration option it depends on is not present yet, this has no immediate effect. Signed-off-by: Marc Zyngier --- Documentation/arm64/silicon-errata.txt | 1

[PATCH 4.4 26/28] x86/perf: Fix CR4.PCE propagation to use active_mm instead of mm

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Andy Lutomirski commit 5dc855d44c2ad960a86f593c60461f1ae1566b6d upstream. If one thread mmaps a perf event while another thread in the same mm is in some context where active_mm != mm (which ca

[PATCH v2 07/18] arm64: arch_timer: Add erratum handler for globally defined capability

Should we ever have a workaround for an erratum that is detected using a capability (and affecting the whole system), it'd be nice to have a way to probe them directly. Signed-off-by: Marc Zyngier --- arch/arm64/include/asm/arch_timer.h | 1 + drivers/clocksource/arm_arch_timer.c | 14

[PATCH 4.9 14/93] tcp/dccp: block BH for SYN processing

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 449809a66c1d0b1563dee84493e14bf3104d2d7e ] SYN processing really was meant to be handled from BH. When I got rid of BH blocking while processing socket backlog

[PATCH 4.9 15/93] net: bridge: allow IPv6 when multicast flood is disabled

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Mike Manning [ Upstream commit 8953de2f02ad7b15e4964c82f9afd60f128e4e98 ] Even with multicast flooding turned off, IPv6 ND should still work so that IPv6 connectivity is provided. Allow this b

[PATCH 4.9 16/93] net: dont call strlen() on the user buffer in packet_bind_spkt()

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Potapenko [ Upstream commit 540e2894f7905538740aaf122bd8e0548e1c34a4 ] KMSAN (KernelMemorySanitizer, a new error detection tool) reports use of uninitialized memory in packet_bind_sp

[PATCH 4.9 11/93] vxlan: lock RCU on TX path

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Jakub Kicinski [ Upstream commit 56de859e9967c070464a9a9f4f18d73f9447298e ] There is no guarantees that callers of the TX path will hold the RCU lock. Grab it explicitly. Fixes: c6fcc4fc5f8b

[PATCH 4.9 13/93] mlxsw: spectrum_router: Avoid potential packets loss

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Ido Schimmel [ Upstream commit f7df4923fa986247e93ec2cdff5ca168fff14dcf ] When the structure of the LPM tree changes (f.e., due to the addition of a new prefix), we unbind the old tree and the

[PATCH 4.9 12/93] geneve: lock RCU on TX path

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Jakub Kicinski [ Upstream commit a717e3f740803cc88bd5c9a70c93504f6a368663 ] There is no guarantees that callers of the TX path will hold the RCU lock. Grab it explicitly. Fixes: fceb9c3e3825

<    1   2   3   4   5   6   7   8   9   10   >