[PATCH 4.20 000/117] 4.20.6-stable review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 4.20.6 release.
There are 117 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu Jan 31 11:31:34 UTC 2019.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.20.6-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.20.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 4.20.6-rc1

Christoph Hellwig <hch@xxxxxx>
    ide: fix a typo in the settings proc file name

Lorenzo Bianconi <lorenzo.bianconi@xxxxxxxxxx>
    mt76x0: phy: unify calibration between mt76x0u and mt76x0e

Stanislaw Gruszka <sgruszka@xxxxxxxxxx>
    mt76x0: antenna select corrections

Stanislaw Gruszka <sgruszka@xxxxxxxxxx>
    mt76x0: do not perform MCU calibration for MT7630

Stanislaw Gruszka <sgruszka@xxxxxxxxxx>
    mt76x02: assure we update gain after scan

Stanislaw Gruszka <sgruszka@xxxxxxxxxx>
    mt76x02: run calibration after scanning

Stanislaw Gruszka <sgruszka@xxxxxxxxxx>
    mt76x0: use band parameter for LC calibration

Stanislaw Gruszka <sgruszka@xxxxxxxxxx>
    mt76x0: do not overwrite other MT_BBP(AGC, 8) fields

Jack Pham <jackp@xxxxxxxxxxxxxx>
    usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup

Michal Hocko <mhocko@xxxxxxxx>
    Revert "mm, memory_hotplug: initialize struct pages for the full memory section"

Dexuan Cui <decui@xxxxxxxxxxxxx>
    vmbus: fix subchannel removal

Dexuan Cui <decui@xxxxxxxxxxxxx>
    Drivers: hv: vmbus: Remove the useless API vmbus_get_outgoing_channel()

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: fix inner map masking to prevent oob under speculation

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: fix sanitation of alu op with pointer / scalar type from different paths

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: prevent out of bounds speculation on pointer arithmetic

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: fix check_map_access smin_value test when pointer contains offset

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: restrict unknown scalars of mixed signed bounds for unprivileged

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: restrict stack pointer arithmetic for unprivileged

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: restrict map value pointer arithmetic for unprivileged

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: enable access to ax register also from verifier rewrite

Raju Rangoju <rajur@xxxxxxxxxxx>
    nvmet-rdma: fix null dereference under heavy load

Israel Rukshin <israelr@xxxxxxxxxxxx>
    nvmet-rdma: Add unlikely for response allocated check

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: move tmp variable into ax register in interpreter

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: move {prev_,}insn_idx into verifier env

Neil Armstrong <narmstrong@xxxxxxxxxxxx>
    drm/meson: Fix atomic mode switching regression

Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
    vt: invoke notifier on screen size change

Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
    vt: always call notifier with the console lock held

Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
    vt: make vt_console_print() compatible with the unicode screen buffer

Uwe Kleine-KÃnig <u.kleine-koenig@xxxxxxxxxxxxxx>
    can: flexcan: fix NULL pointer exception during bringup

Oliver Hartkopp <socketcan@xxxxxxxxxxxx>
    can: bcm: check timer values before ktime conversion

Manfred Schlaegl <manfred.schlaegl@xxxxxxxxxxxxx>
    can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by removing it

Marc Zyngier <marc.zyngier@xxxxxxx>
    irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
    net: sun: cassini: Cleanup license conflict

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
    posix-cpu-timers: Unbreak timer rearming

Jan Beulich <JBeulich@xxxxxxxx>
    x86/entry/64/compat: Fix stack switching for XEN PV

Daniel Drake <drake@xxxxxxxxxxxx>
    x86/kaslr: Fix incorrect i8254 outb() parameters

Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
    x86/selftests/pkeys: Fork() to check for state being preserved

Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
    x86/pkeys: Properly copy pkey state at fork()

Tom Roeder <tmroeder@xxxxxxxxxx>
    kvm: x86/vmx: Use kzalloc for cached_vmcs12

Sean Christopherson <sean.j.christopherson@xxxxxxxxx>
    KVM: x86: WARN_ONCE if sending a PV IPI returns a fatal error

Sean Christopherson <sean.j.christopherson@xxxxxxxxx>
    KVM: x86: Fix PV IPIs for 32-bit KVM host

Alexander Popov <alex.popov@xxxxxxxxx>
    KVM: x86: Fix single-step debugging

Thor Thayer <thor.thayer@xxxxxxxxxxxxxxx>
    EDAC, altera: Fix S10 persistent register offset

Alex Deucher <alexander.deucher@xxxxxxx>
    drm/amdgpu: Add APTX quirk for Lenovo laptop

Milan Broz <gmazyland@xxxxxxxxx>
    dm crypt: fix parsing of extended IV arguments

Joe Thornber <ejt@xxxxxxxxxx>
    dm thin: fix passdown_double_checking_shared_status()

Marc Gonzalez <marc.w.gonzalez@xxxxxxx>
    scsi: ufs: Use explicit access size in ufshcd_dump_regs

Dan Williams <dan.j.williams@xxxxxxxxx>
    acpi/nfit: Fix command-supported detection

Dan Williams <dan.j.williams@xxxxxxxxx>
    acpi/nfit: Block function zero DSMs

Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
    Input: uinput - fix undefined behavior in uinput_validate_absinfo()

Deepa Dinamani <deepa.kernel@xxxxxxxxx>
    Input: input_event - provide override for sparc64

Tom Panfil <tom@xxxxxxxxxxxxxxx>
    Input: xpad - add support for SteelSeries Stratus Duo

Ronnie Sahlberg <lsahlber@xxxxxxxxxx>
    smb3: add credits we receive from oplock/break PDUs

Pavel Shilovsky <pshilov@xxxxxxxxxxxxx>
    CIFS: Do not reconnect TCP session in add_credits()

Pavel Shilovsky <pshilov@xxxxxxxxxxxxx>
    CIFS: Fix credit calculation for encrypted reads with errors

Pavel Shilovsky <pshilov@xxxxxxxxxxxxx>
    CIFS: Fix credits calculations for reads with errors

Pavel Shilovsky <pshilov@xxxxxxxxxxxxx>
    CIFS: Fix possible hang during async MTU reads and writes

Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
    vgacon: unconfuse vc_origin when using soft scrollback

Dexuan Cui <decui@xxxxxxxxxxxxx>
    Drivers: hv: vmbus: Check for ring when getting debug info

Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
    hv_balloon: avoid touching uninitialized struct page during tail onlining

Paul Fulghum <paulkf@xxxxxxxxxxxxx>
    tty/n_hdlc: fix __might_sleep warning

Samir Virmani <samir@xxxxxxxxxxx>
    uart: Fix crash in uart_write and uart_put_char

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    tty: Handle problem if line discipline does not have receive_buf

Michael Straube <straube.linux@xxxxxxxxx>
    staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1

Remi Pommarel <repk@xxxxxxxxxxxx>
    mmc: meson-gx: Free irq in release() callback

Liming Sun <lsun@xxxxxxxxxxxx>
    mmc: dw_mmc-bluefield: : Fix the license information

Stefan Wahren <stefan.wahren@xxxxxxxx>
    mmc: sdhci-iproc: handle mmc_of_parse() errors during probe

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
    char/mwave: fix potential Spectre v1 vulnerability

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
    misc: ibmvsm: Fix potential NULL pointer dereference

David Hildenbrand <david@xxxxxxxxxx>
    s390/smp: Fix calling smp_call_ipl_cpu() from ipl CPU

Gerald Schaefer <gerald.schaefer@xxxxxxxxxx>
    s390/smp: fix CPU hotplug deadlock with CPU rescan

Christian Borntraeger <borntraeger@xxxxxxxxxx>
    s390/early: improve machine detection

Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
    s390/mm: always force a load of the primary ASCE on context switch

Vasily Gorbik <gor@xxxxxxxxxxxxx>
    s390/vdso: correct vdso mapping for compat tasks

Eugeniy Paltsev <Eugeniy.Paltsev@xxxxxxxxxxxx>
    ARC: perf: map generic branches to correct hardware condition

Eugeniy Paltsev <Eugeniy.Paltsev@xxxxxxxxxxxx>
    ARC: adjust memblock_reserve of kernel memory

Eugeniy Paltsev <Eugeniy.Paltsev@xxxxxxxxxxxx>
    ARCv2: lib: memeset: fix doing prefetchw outside of buffer

Anthony Wong <anthony.wong@xxxxxxxxxxxxx>
    ALSA: hda - Add mute LED support for HP ProBook 470 G5

Kailang Yang <kailang@xxxxxxxxxxx>
    ALSA: hda/realtek - Fix typo for ALC225 model

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
    inotify: Fix fd refcount leak in inotify_add_watch().

Dinh Nguyen <dinguyen@xxxxxxxxxx>
    clk: socfpga: stratix10: fix naming convention for the fixed-clocks

Dinh Nguyen <dinguyen@xxxxxxxxxx>
    clk: socfpga: stratix10: fix rate calculation for pll clocks

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
    clk: zynqmp: Fix memory allocation in zynqmp_clk_setup

b-ak <anur.bhargav@xxxxxxxxx>
    ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
    ASoC: rt5514-spi: Fix potential NULL pointer dereference

Kangjie Lu <kjlu@xxxxxxx>
    ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages

Yan, Zheng <zyan@xxxxxxxxxx>
    ceph: clear inode pointer when snap realm gets dropped by its inode

Charles Yeh <charlesyeh522@xxxxxxxxx>
    USB: serial: pl2303: add new PID to support PL2303TB

Max Schulze <max.schulze@xxxxxxxxx>
    USB: serial: simple: add Motorola Tetra TPG2200 device id

Karoly Pados <pados@xxxxxxxx>
    USB: serial: ftdi_sio: fix GPIO not working in autosuspend

Lubomir Rintel <lkundrak@xxxxx>
    USB: EHCI: ehci-mv: add MODULE_DEVICE_TABLE

Christian Lamparter <chunkeey@xxxxxxxxx>
    USB: leds: fix regression in usbport led trigger

Tomas Winkler <tomas.winkler@xxxxxxxxx>
    mei: me: add denverton innovation engine device IDs

Alexander Usyskin <alexander.usyskin@xxxxxxxxx>
    mei: me: mark LBG devices as having dma support

Chuck Lever <chuck.lever@xxxxxxxxxx>
    SUNRPC: Address Kerberos performance/behavior regression

Russell King <rmk+kernel@xxxxxxxxxxxxxxx>
    ARM: fix the cockup in the previous patch

Willem de Bruijn <willemb@xxxxxxxxxx>
    tcp: allow MSG_ZEROCOPY transmission also in CLOSE_WAIT state

Hangbin Liu <liuhangbin@xxxxxxxxx>
    ip6_gre: update version related info when changing link

Andrew Lunn <andrew@xxxxxxx>
    net: phy: marvell: Fix deadlock from wrong locking

Xin Long <lucien.xin@xxxxxxxxx>
    erspan: build the header with the right proto according to erspan_ver

Olivier Matz <olivier.matz@xxxxxxxxx>
    ip6_gre: fix tunnel list corruption for x-netns

Willem de Bruijn <willemb@xxxxxxxxxx>
    udp: with udp_segment release on error path

Ivan Vecera <ivecera@xxxxxxxxxx>
    net/sched: cls_flower: allocate mask dynamically in fl_change()

Ido Schimmel <idosch@xxxxxxxxxxxx>
    mlxsw: pci: Ring CQ's doorbell before RDQ's

Nir Dotan <nird@xxxxxxxxxxxx>
    mlxsw: spectrum_fid: Update dummy FID index

Ido Schimmel <idosch@xxxxxxxxxxxx>
    net: ipv4: Fix memory leak in network namespace dismantle

Nir Dotan <nird@xxxxxxxxxxxx>
    mlxsw: pci: Increase PCI SW reset timeout

Jason Wang <jasowang@xxxxxxxxxx>
    vhost: log dirty page correctly

Ross Lagerwall <ross.lagerwall@xxxxxxxxxx>
    openvswitch: Avoid OOB read when parsing flow nlattrs

Cong Wang <xiyou.wangcong@xxxxxxxxx>
    net_sched: refetch skb protocol for each filter

Davide Caratti <dcaratti@xxxxxxxxxx>
    net/sched: act_tunnel_key: fix memory leak in case of action replace

Camelia Groza <camelia.groza@xxxxxxx>
    net: phy: phy driver features are mandatory

Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxx>
    net: phy: mdio_bus: add missing device_del() in mdiobus_register() error handling

Andrew Lunn <andrew@xxxxxxx>
    net: phy: marvell: Errata for mv88e6390 internal PHYs

Ross Lagerwall <ross.lagerwall@xxxxxxxxxx>
    net: Fix usage of pskb_trim_rcsum

Yunjian Wang <wangyunjian@xxxxxxxxxx>
    net: bridge: Fix ethernet header pointer before check skb forwardable

Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
    amd-xgbe: Fix mdio access for non-zero ports and clause 45 PHYs


-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arc/include/asm/perf_event.h                  |   3 +-
 arch/arc/lib/memset-archs.S                        |  40 ++-
 arch/arc/mm/init.c                                 |   3 +-
 arch/arm/mm/proc-macros.S                          |   4 +-
 arch/s390/include/asm/mmu_context.h                |   7 +-
 arch/s390/kernel/early.c                           |   4 +-
 arch/s390/kernel/setup.c                           |   2 +
 arch/s390/kernel/smp.c                             |  11 +-
 arch/s390/kernel/vdso.c                            |   5 +-
 arch/x86/entry/entry_64_compat.S                   |   6 +-
 arch/x86/include/asm/mmu_context.h                 |  18 +
 arch/x86/kernel/kvm.c                              |   7 +-
 arch/x86/kvm/vmx.c                                 |  12 +-
 arch/x86/kvm/x86.c                                 |   5 +-
 arch/x86/lib/kaslr.c                               |   4 +-
 drivers/acpi/nfit/core.c                           |  61 +++-
 drivers/char/mwave/mwavedd.c                       |   7 +
 drivers/clk/socfpga/clk-pll-s10.c                  |   2 +-
 drivers/clk/socfpga/clk-s10.c                      |  20 +-
 drivers/clk/zynqmp/clkc.c                          |   4 +-
 drivers/edac/altera_edac.h                         |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c   |   1 +
 drivers/gpu/drm/meson/meson_crtc.c                 |  23 +-
 drivers/gpu/drm/meson/meson_drv.c                  |   5 +
 drivers/hv/channel.c                               |  10 +-
 drivers/hv/channel_mgmt.c                          |  44 ---
 drivers/hv/hv_balloon.c                            |  10 +-
 drivers/hv/ring_buffer.c                           |  31 +-
 drivers/hv/vmbus_drv.c                             |  91 +++--
 drivers/ide/ide-proc.c                             |   2 +-
 drivers/input/joystick/xpad.c                      |   3 +
 drivers/input/misc/uinput.c                        |   5 +-
 drivers/irqchip/irq-gic-v3-its.c                   |  25 +-
 drivers/md/dm-crypt.c                              |  25 +-
 drivers/md/dm-thin-metadata.c                      |   4 +-
 drivers/md/dm-thin-metadata.h                      |   2 +-
 drivers/md/dm-thin.c                               |  10 +-
 drivers/misc/ibmvmc.c                              |   7 +-
 drivers/misc/mei/hw-me-regs.h                      |   2 +
 drivers/misc/mei/pci-me.c                          |   4 +-
 drivers/mmc/host/dw_mmc-bluefield.c                |   5 -
 drivers/mmc/host/meson-gx-mmc.c                    |  18 +-
 drivers/mmc/host/sdhci-iproc.c                     |   5 +-
 drivers/net/can/dev.c                              |  27 +-
 drivers/net/can/flexcan.c                          |   2 +-
 drivers/net/ethernet/amd/xgbe/xgbe-common.h        |   2 -
 drivers/net/ethernet/amd/xgbe/xgbe-dev.c           |  22 +-
 drivers/net/ethernet/mellanox/mlxsw/pci.c          |  12 +-
 drivers/net/ethernet/mellanox/mlxsw/pci_hw.h       |   3 +-
 drivers/net/ethernet/mellanox/mlxsw/spectrum_fid.c |   4 +-
 drivers/net/ethernet/sun/cassini.c                 |  15 +-
 drivers/net/ethernet/sun/cassini.h                 |  15 +-
 drivers/net/phy/marvell.c                          |  37 ++-
 drivers/net/phy/mdio_bus.c                         |   1 +
 drivers/net/phy/phy_device.c                       |   5 +
 drivers/net/ppp/pppoe.c                            |   1 +
 drivers/net/wireless/mediatek/mt76/mt76.h          |   1 +
 drivers/net/wireless/mediatek/mt76/mt76x0/main.c   |   9 +-
 drivers/net/wireless/mediatek/mt76/mt76x0/mt76x0.h |   5 +
 drivers/net/wireless/mediatek/mt76/mt76x0/phy.c    | 170 +++-------
 drivers/net/wireless/mediatek/mt76/mt76x0/usb.c    |   1 +
 drivers/net/wireless/mediatek/mt76/mt76x02.h       |   1 +
 .../net/wireless/mediatek/mt76/mt76x02_eeprom.h    |  10 +-
 drivers/net/wireless/mediatek/mt76/mt76x02_phy.c   |   1 +
 .../net/wireless/mediatek/mt76/mt76x2/usb_main.c   |   3 +
 drivers/nvme/target/rdma.c                         |  17 +-
 drivers/s390/char/sclp_config.c                    |   2 +
 drivers/scsi/ufs/ufshcd.c                          |  10 +-
 drivers/staging/rtl8188eu/os_dep/usb_intf.c        |   1 +
 drivers/tty/n_hdlc.c                               |   1 +
 drivers/tty/serial/serial_core.c                   |  12 +-
 drivers/tty/tty_io.c                               |   3 +-
 drivers/tty/vt/vt.c                                |  50 +--
 drivers/usb/core/ledtrig-usbport.c                 |  17 +-
 drivers/usb/dwc3/gadget.c                          |   2 +
 drivers/usb/host/ehci-mv.c                         |   1 +
 drivers/usb/serial/ftdi_sio.c                      |  15 +-
 drivers/usb/serial/pl2303.c                        |   1 +
 drivers/usb/serial/pl2303.h                        |   2 +
 drivers/usb/serial/usb-serial-simple.c             |   3 +-
 drivers/vhost/net.c                                |   3 +-
 drivers/vhost/vhost.c                              |  97 +++++-
 drivers/vhost/vhost.h                              |   3 +-
 drivers/video/console/vgacon.c                     |   7 +-
 fs/ceph/caps.c                                     |   2 +
 fs/cifs/cifssmb.c                                  |  35 +-
 fs/cifs/connect.c                                  |  21 ++
 fs/cifs/smb2misc.c                                 |   7 +
 fs/cifs/smb2ops.c                                  |  62 ++--
 fs/notify/inotify/inotify_user.c                   |   6 +-
 include/linux/bpf_verifier.h                       |  13 +
 include/linux/filter.h                             |  10 +-
 include/linux/hyperv.h                             |  22 +-
 include/linux/phy.h                                |   4 +-
 include/linux/skbuff.h                             |   1 +
 include/net/ip_fib.h                               |   2 +-
 include/uapi/linux/input.h                         |   6 +-
 kernel/bpf/core.c                                  |  54 ++-
 kernel/bpf/map_in_map.c                            |  17 +-
 kernel/bpf/verifier.c                              | 369 +++++++++++++++++----
 kernel/time/posix-cpu-timers.c                     |   1 +
 mm/page_alloc.c                                    |  12 -
 net/bridge/br_forward.c                            |   9 +-
 net/bridge/br_netfilter_ipv6.c                     |   1 +
 net/bridge/netfilter/nft_reject_bridge.c           |   1 +
 net/can/bcm.c                                      |  27 ++
 net/ipv4/fib_frontend.c                            |   4 +-
 net/ipv4/fib_trie.c                                |  15 +-
 net/ipv4/ip_gre.c                                  |  23 +-
 net/ipv4/ip_input.c                                |   1 +
 net/ipv4/tcp.c                                     |   2 +-
 net/ipv4/udp.c                                     |  16 +-
 net/ipv6/ip6_gre.c                                 |  14 +-
 net/ipv6/udp.c                                     |  16 +-
 net/openvswitch/flow_netlink.c                     |   2 +-
 net/sched/act_tunnel_key.c                         |  19 +-
 net/sched/cls_api.c                                |   3 +-
 net/sched/cls_flower.c                             |  19 +-
 net/sunrpc/xprt.c                                  |   2 +-
 sound/pci/hda/patch_conexant.c                     |   1 +
 sound/pci/hda/patch_realtek.c                      |   2 +-
 sound/soc/codecs/rt5514-spi.c                      |   2 +
 sound/soc/codecs/tlv320aic32x4.c                   |   4 +
 sound/soc/intel/atom/sst-mfld-platform-pcm.c       |   8 +-
 tools/testing/selftests/x86/protection_keys.c      |  41 ++-
 126 files changed, 1326 insertions(+), 709 deletions(-)