This is the start of the stable review cycle for the 4.14.285 release. There are 237 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 25 Jun 2022 16:43:11 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.285-rc... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 4.14.285-rc1

Willy Tarreau w@1wt.eu tcp: drop the hash_32() part from the index calculation

Willy Tarreau w@1wt.eu tcp: increase source port perturb table to 2^16

Willy Tarreau w@1wt.eu tcp: dynamically allocate the perturb table used by source ports

Willy Tarreau w@1wt.eu tcp: add small random increments to the source port

Willy Tarreau w@1wt.eu tcp: use different parts of the port_offset for index and offset

Eric Dumazet edumazet@google.com tcp: add some entropy in __inet_hash_connect()

Colin Ian King colin.king@canonical.com xprtrdma: fix incorrect header size calculations

Marian Postevca posteuca@mutex.one usb: gadget: u_ether: fix regression in setting fixed MAC address

Christian Borntraeger borntraeger@linux.ibm.com s390/mm: use non-quiescing sske for KVM switch to keyed guest

James Chapman jchapman@katalix.com l2tp: fix race in pppol2tp_release with session object destroy

James Chapman jchapman@katalix.com l2tp: don't use inet_shutdown on ppp session destroy

Murilo Opsfelder Araujo muriloo@linux.ibm.com virtio-pci: Remove wrong address verification in vp_del_vqs()

Zhang Yi yi.zhang@huawei.com ext4: add reserved GDT blocks check

Ding Xiang dingxiang@cmss.chinamobile.com ext4: make variable "count" signed

Baokun Li libaokun1@huawei.com ext4: fix bug_on ext4_mb_use_inode_pa

Ilpo Järvinen ilpo.jarvinen@linux.intel.com serial: 8250: Store to lsr_save_flags after lsr read

Miaoqian Lin linmq006@gmail.com usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe

Miaoqian Lin linmq006@gmail.com usb: dwc2: Fix memory leak in dwc2_hcd_init

Robert Eckelmann longnoserob@gmail.com USB: serial: io_ti: add Agilent E5805A support

Slark Xiao slark_xiao@163.com USB: serial: option: add support for Cinterion MV31 with new baseline

Ian Abbott abbotti@mev.co.uk comedi: vmk80xx: fix expression for tx buffer size

Miaoqian Lin linmq006@gmail.com irqchip/gic/realview: Fix refcount leak in realview_gic_of_init

Masahiro Yamada masahiroy@kernel.org certs/blacklist_hashes.c: fix const confusion in certs blacklist

Mark Rutland mark.rutland@arm.com arm64: ftrace: fix branch range checks

Christophe JAILLET christophe.jaillet@wanadoo.fr net: bgmac: Fix an erroneous kfree() in bgmac_remove()

Miaoqian Lin linmq006@gmail.com misc: atmel-ssc: Fix IRQ check in ssc_probe

Vincent Whitchurch vincent.whitchurch@axis.com tty: goldfish: Fix free_irq() on remove

Aleksandr Loktionov aleksandr.loktionov@intel.com i40e: Fix call trace in setup_tx_descriptors

Trond Myklebust trond.myklebust@hammerspace.com pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE

Jason A. Donenfeld Jason@zx2c4.com random: credit cpu and bootloader seeds by default

Chen Lin chen45464546@163.com net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag

Wang Yufen wangyufen@huawei.com ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg

Xiaohui Zhang xiaohuizhang@ruc.edu.cn nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred

chengkaitao pilgrimtao@gmail.com virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed

Chengguang Xu cgxu519@mykernel.net scsi: pmcraid: Fix missing resource cleanup in error case

Chengguang Xu cgxu519@mykernel.net scsi: ipr: Fix missing/incorrect resource cleanup in error case

James Smart jsmart2021@gmail.com scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology

Wentao Wang wwentao@vmware.com scsi: vmw_pvscsi: Expand vcpuHint to 16 bits

Adam Ford aford173@gmail.com ASoC: wm8962: Fix suspend while playing music

Sergey Shtylyov s.shtylyov@omp.ru ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()

Charles Keepax ckeepax@opensource.cirrus.com ASoC: cs42l56: Correct typo in minimum level for SX volume controls

Charles Keepax ckeepax@opensource.cirrus.com ASoC: cs42l52: Correct TLV for Bypass Volume

Charles Keepax ckeepax@opensource.cirrus.com ASoC: cs53l30: Correct number of volume levels on SX controls

Charles Keepax ckeepax@opensource.cirrus.com ASoC: cs42l52: Fix TLV scales for mixer controls

Jason A. Donenfeld Jason@zx2c4.com random: account for arch randomness in bits

Jason A. Donenfeld Jason@zx2c4.com random: mark bootloader randomness code as __init

Jason A. Donenfeld Jason@zx2c4.com random: avoid checking crng_ready() twice in random_init()

Nicolai Stange nstange@suse.de crypto: drbg - make reseeding from get_random_bytes() synchronous

Stephan Müller smueller@chronox.de crypto: drbg - always try to free Jitter RNG instance

Nicolai Stange nstange@suse.de crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed()

Nicolai Stange nstange@suse.de crypto: drbg - track whether DRBG was seeded with !rng_is_initialized()

Nicolai Stange nstange@suse.de crypto: drbg - prepare for more fine-grained tracking of seeding state

Stephan Müller smueller@chronox.de crypto: drbg - always seeded with SP800-90B compliant noise source

Stephan Mueller smueller@chronox.de crypto: drbg - add FIPS 140-2 CTRNG for noise source

Jason A. Donenfeld Jason@zx2c4.com Revert "random: use static branch for crng_ready()"

Jason A. Donenfeld Jason@zx2c4.com random: check for signals after page of pool writes

Jens Axboe axboe@kernel.dk random: wire up fops->splice_{read,write}_iter()

Jens Axboe axboe@kernel.dk random: convert to using fops->write_iter()

Jason A. Donenfeld Jason@zx2c4.com random: move randomize_page() into mm where it belongs

Jason A. Donenfeld Jason@zx2c4.com random: move initialization functions out of hot pages

Jason A. Donenfeld Jason@zx2c4.com random: use proper return types on get_random_{int,long}_wait()

Jason A. Donenfeld Jason@zx2c4.com random: remove extern from functions in header

Jason A. Donenfeld Jason@zx2c4.com random: use static branch for crng_ready()

Jason A. Donenfeld Jason@zx2c4.com random: credit architectural init the exact amount

Jason A. Donenfeld Jason@zx2c4.com random: handle latent entropy and command line from random_init()

Jason A. Donenfeld Jason@zx2c4.com random: use proper jiffies comparison macro

Jason A. Donenfeld Jason@zx2c4.com random: remove ratelimiting for in-kernel unseeded randomness

Jason A. Donenfeld Jason@zx2c4.com random: avoid initializing twice in credit race

Jason A. Donenfeld Jason@zx2c4.com random: use symbolic constants for crng_init states

Jason A. Donenfeld Jason@zx2c4.com siphash: use one source of truth for siphash permutations

Jason A. Donenfeld Jason@zx2c4.com random: help compiler out with fast_mix() by using simpler arguments

Jason A. Donenfeld Jason@zx2c4.com random: do not use input pool from hard IRQs

Jason A. Donenfeld Jason@zx2c4.com random: order timer entropy functions below interrupt functions

Jason A. Donenfeld Jason@zx2c4.com random: do not pretend to handle premature next security model

Jason A. Donenfeld Jason@zx2c4.com random: do not use batches when !crng_ready()

Jason A. Donenfeld Jason@zx2c4.com random: insist on random_get_entropy() existing in order to simplify

Jason A. Donenfeld Jason@zx2c4.com xtensa: use fallback for random_get_entropy() instead of zero

Jason A. Donenfeld Jason@zx2c4.com sparc: use fallback for random_get_entropy() instead of zero

Jason A. Donenfeld Jason@zx2c4.com um: use fallback for random_get_entropy() instead of zero

Jason A. Donenfeld Jason@zx2c4.com x86/tsc: Use fallback for random_get_entropy() instead of zero

Jason A. Donenfeld Jason@zx2c4.com nios2: use fallback for random_get_entropy() instead of zero

Jason A. Donenfeld Jason@zx2c4.com arm: use fallback for random_get_entropy() instead of zero

Jason A. Donenfeld Jason@zx2c4.com mips: use fallback for random_get_entropy() instead of just c0 random

Jason A. Donenfeld Jason@zx2c4.com m68k: use fallback for random_get_entropy() instead of zero

Jason A. Donenfeld Jason@zx2c4.com timekeeping: Add raw clock fallback for random_get_entropy()

Jason A. Donenfeld Jason@zx2c4.com powerpc: define get_cycles macro for arch-override

Jason A. Donenfeld Jason@zx2c4.com alpha: define get_cycles macro for arch-override

Jason A. Donenfeld Jason@zx2c4.com parisc: define get_cycles macro for arch-override

Jason A. Donenfeld Jason@zx2c4.com s390: define get_cycles macro for arch-override

Jason A. Donenfeld Jason@zx2c4.com ia64: define get_cycles macro for arch-override

Jason A. Donenfeld Jason@zx2c4.com init: call time_init() before rand_initialize()

Jason A. Donenfeld Jason@zx2c4.com random: fix sysctl documentation nits

Jason A. Donenfeld Jason@zx2c4.com random: document crng_fast_key_erasure() destination possibility

Jason A. Donenfeld Jason@zx2c4.com random: make random_get_entropy() return an unsigned long

Jason A. Donenfeld Jason@zx2c4.com random: check for signals every PAGE_SIZE chunk of /dev/[u]random

Jann Horn jannh@google.com random: check for signal_pending() outside of need_resched() check

Jason A. Donenfeld Jason@zx2c4.com random: do not allow user to keep crng key around on stack

Jan Varho jan.varho@gmail.com random: do not split fast init input in add_hwgenerator_randomness()

Jason A. Donenfeld Jason@zx2c4.com random: mix build-time latent entropy into pool at init

Jason A. Donenfeld Jason@zx2c4.com random: re-add removed comment about get_random_{u32,u64} reseeding

Jason A. Donenfeld Jason@zx2c4.com random: treat bootloader trust toggle the same way as cpu trust toggle

Jason A. Donenfeld Jason@zx2c4.com random: skip fast_init if hwrng provides large chunk of entropy

Jason A. Donenfeld Jason@zx2c4.com random: check for signal and try earlier when generating entropy

Jason A. Donenfeld Jason@zx2c4.com random: reseed more often immediately after booting

Jason A. Donenfeld Jason@zx2c4.com random: make consistent usage of crng_ready()

Jason A. Donenfeld Jason@zx2c4.com random: use SipHash as interrupt entropy accumulator

Jason A. Donenfeld Jason@zx2c4.com random: replace custom notifier chain with standard one

Jason A. Donenfeld Jason@zx2c4.com random: don't let 644 read-only sysctls be written to

Jason A. Donenfeld Jason@zx2c4.com random: give sysctl_random_min_urandom_seed a more sensible value

Jason A. Donenfeld Jason@zx2c4.com random: do crng pre-init loading in worker rather than irq

Jason A. Donenfeld Jason@zx2c4.com random: unify cycles_t and jiffies usage and types

Jason A. Donenfeld Jason@zx2c4.com random: cleanup UUID handling

Jason A. Donenfeld Jason@zx2c4.com random: only wake up writers after zap if threshold was passed

Jason A. Donenfeld Jason@zx2c4.com random: round-robin registers as ulong, not u32

Jason A. Donenfeld Jason@zx2c4.com random: clear fast pool, crng, and batches in cpuhp bring up

Jason A. Donenfeld Jason@zx2c4.com random: pull add_hwgenerator_randomness() declaration into random.h

Jason A. Donenfeld Jason@zx2c4.com random: check for crng_init == 0 in add_device_randomness()

Jason A. Donenfeld Jason@zx2c4.com random: unify early init crng load accounting

Jason A. Donenfeld Jason@zx2c4.com random: do not take pool spinlock at boot

Jason A. Donenfeld Jason@zx2c4.com random: defer fast pool mixing to worker

Jason A. Donenfeld Jason@zx2c4.com random: rewrite header introductory comment

Jason A. Donenfeld Jason@zx2c4.com random: group sysctl functions

Jason A. Donenfeld Jason@zx2c4.com random: group userspace read/write functions

Jason A. Donenfeld Jason@zx2c4.com random: group entropy collection functions

Jason A. Donenfeld Jason@zx2c4.com random: group entropy extraction functions

Jason A. Donenfeld Jason@zx2c4.com random: group initialization wait functions

Jason A. Donenfeld Jason@zx2c4.com random: remove whitespace and reorder includes

Jason A. Donenfeld Jason@zx2c4.com random: remove useless header comment

Jason A. Donenfeld Jason@zx2c4.com random: introduce drain_entropy() helper to declutter crng_reseed()

Jason A. Donenfeld Jason@zx2c4.com random: deobfuscate irq u32/u64 contributions

Jason A. Donenfeld Jason@zx2c4.com random: add proper SPDX header

Jason A. Donenfeld Jason@zx2c4.com random: remove unused tracepoints

Jason A. Donenfeld Jason@zx2c4.com random: remove ifdef'd out interrupt bench

Jason A. Donenfeld Jason@zx2c4.com random: tie batched entropy generation to base_crng generation

Jason A. Donenfeld Jason@zx2c4.com random: zero buffer after reading entropy from userspace

Jason A. Donenfeld Jason@zx2c4.com random: remove outdated INT_MAX >> 6 check in urandom_read()

Jason A. Donenfeld Jason@zx2c4.com random: use hash function for crng_slow_load()

Jason A. Donenfeld Jason@zx2c4.com random: absorb fast pool into input pool after fast load

Jason A. Donenfeld Jason@zx2c4.com random: do not xor RDRAND when writing into /dev/random

Jason A. Donenfeld Jason@zx2c4.com random: ensure early RDSEED goes through mixer on init

Jason A. Donenfeld Jason@zx2c4.com random: inline leaves of rand_initialize()

Jason A. Donenfeld Jason@zx2c4.com random: use RDSEED instead of RDRAND in entropy extraction

Dominik Brodowski linux@dominikbrodowski.net random: fix locking in crng_fast_load()

Jason A. Donenfeld Jason@zx2c4.com random: remove batched entropy locking

Eric Biggers ebiggers@google.com random: remove use_input_pool parameter from crng_reseed()

Jason A. Donenfeld Jason@zx2c4.com random: make credit_entropy_bits() always safe

Jason A. Donenfeld Jason@zx2c4.com random: always wake up entropy writers after extraction

Jason A. Donenfeld Jason@zx2c4.com random: use linear min-entropy accumulation crediting

Jason A. Donenfeld Jason@zx2c4.com random: simplify entropy debiting

Jason A. Donenfeld Jason@zx2c4.com random: use computational hash for entropy extraction

Dominik Brodowski linux@dominikbrodowski.net random: only call crng_finalize_init() for primary_crng

Dominik Brodowski linux@dominikbrodowski.net random: access primary_pool directly rather than through pointer

Dominik Brodowski linux@dominikbrodowski.net random: continually use hwgenerator randomness

Jason A. Donenfeld Jason@zx2c4.com random: simplify arithmetic function flow in account()

Jason A. Donenfeld Jason@zx2c4.com random: access input_pool_data directly rather than through pointer

Jason A. Donenfeld Jason@zx2c4.com random: cleanup fractional entropy shift constants

Jason A. Donenfeld Jason@zx2c4.com random: prepend remaining pool constants with POOL_

Jason A. Donenfeld Jason@zx2c4.com random: de-duplicate INPUT_POOL constants

Jason A. Donenfeld Jason@zx2c4.com random: remove unused OUTPUT_POOL constants

Jason A. Donenfeld Jason@zx2c4.com random: rather than entropy_store abstraction, use global

Linus Torvalds torvalds@linux-foundation.org random: try to actively add entropy rather than passively wait for it

Jason A. Donenfeld Jason@zx2c4.com random: remove unused extract_entropy() reserved argument

Jason A. Donenfeld Jason@zx2c4.com random: remove incomplete last_data logic

Jason A. Donenfeld Jason@zx2c4.com random: cleanup integer types

Eric Biggers ebiggers@google.com crypto: chacha20 - Fix chacha20_block() keystream alignment (again)

Jason A. Donenfeld Jason@zx2c4.com random: cleanup poolinfo abstraction

Schspa Shi schspa@gmail.com random: fix typo in comments

Jann Horn jannh@google.com random: don't reset crng_init_cnt on urandom_read()

Jason A. Donenfeld Jason@zx2c4.com random: avoid superfluous call to RDRAND in CRNG extraction

Dominik Brodowski linux@dominikbrodowski.net random: early initialization of ChaCha constants

Eric Biggers ebiggers@google.com random: initialize ChaCha20 constants with correct endianness

Jason A. Donenfeld Jason@zx2c4.com random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs

Dominik Brodowski linux@dominikbrodowski.net random: harmonize "crng init done" messages

Jason A. Donenfeld Jason@zx2c4.com random: mix bootloader randomness into pool

Jason A. Donenfeld Jason@zx2c4.com random: do not re-init if crng_reseed completes before primary init

Jason A. Donenfeld Jason@zx2c4.com random: do not sign extend bytes for rotation when mixing

Jason A. Donenfeld Jason@zx2c4.com random: use BLAKE2s instead of SHA1 in extraction

Sebastian Andrzej Siewior bigeasy@linutronix.de random: remove unused irq_flags argument from add_interrupt_randomness()

Mark Brown broonie@kernel.org random: document add_hwgenerator_randomness() with other input functions

Eric Biggers ebiggers@google.com crypto: blake2s - adjust include guard naming

Eric Biggers ebiggers@google.com crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h>

Jason A. Donenfeld Jason@zx2c4.com MAINTAINERS: co-maintain random.c

Eric Biggers ebiggers@google.com random: remove dead code left over from blocking pool

Ard Biesheuvel ardb@kernel.org random: avoid arch_get_random_seed_long() when collecting IRQ randomness

Mark Rutland mark.rutland@arm.com random: add arch_get_random_*long_early()

Richard Henderson richard.henderson@linaro.org powerpc: Use bool in archrandom.h

Richard Henderson richard.henderson@linaro.org linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check

Richard Henderson richard.henderson@linaro.org linux/random.h: Use false with bool

Richard Henderson richard.henderson@linaro.org linux/random.h: Remove arch_has_random, arch_has_random_seed

Richard Henderson richard.henderson@linaro.org s390: Remove arch_has_random, arch_has_random_seed

Richard Henderson richard.henderson@linaro.org powerpc: Remove arch_has_random, arch_has_random_seed

Richard Henderson richard.henderson@linaro.org x86: Remove arch_has_random, arch_has_random_seed

Mark Rutland mark.rutland@arm.com random: avoid warnings for !CONFIG_NUMA builds

Mark Rutland mark.rutland@arm.com random: split primary/secondary crng init paths

Yangtao Li tiny.windzz@gmail.com random: remove some dead code of poolinfo

Yangtao Li tiny.windzz@gmail.com random: fix typo in add_timer_randomness()

Yangtao Li tiny.windzz@gmail.com random: Add and use pr_fmt()

Yangtao Li tiny.windzz@gmail.com random: convert to ENTROPY_BITS for better code readability

Yangtao Li tiny.windzz@gmail.com random: remove unnecessary unlikely()

Andy Lutomirski luto@kernel.org random: remove kernel.random.read_wakeup_threshold

Andy Lutomirski luto@kernel.org random: delete code to pull data into pools

Andy Lutomirski luto@kernel.org random: remove the blocking pool

Dominik Brodowski linux@dominikbrodowski.net random: fix crash on multiple early calls to add_bootloader_randomness()

Sergey Senozhatsky sergey.senozhatsky.work@gmail.com char/random: silence a lockdep splat with printk()

Andy Lutomirski luto@kernel.org random: make /dev/random be almost like /dev/urandom

Andy Lutomirski luto@kernel.org random: ignore GRND_RANDOM in getentropy(2)

Andy Lutomirski luto@kernel.org random: add GRND_INSECURE to return best-effort non-cryptographic bytes

Andy Lutomirski luto@kernel.org random: Add a urandom_read_nowait() for random APIs that don't warn

Andy Lutomirski luto@kernel.org random: Don't wake crng_init_wait when crng_init == 1

Jason A. Donenfeld Jason@zx2c4.com lib/crypto: sha1: re-roll loops to reduce code size

Jason A. Donenfeld Jason@zx2c4.com lib/crypto: blake2s: move hmac construction into wireguard

Jason A. Donenfeld Jason@zx2c4.com crypto: blake2s - generic C library implementation and selftest

Andy Shevchenko andriy.shevchenko@linux.intel.com crypto: Deduplicate le32_to_cpu_array() and cpu_to_le32_array()

Herbert Xu herbert@gondor.apana.org.au Revert "hwrng: core - Freeze khwrng thread during suspend"

Borislav Petkov bp@alien8.de char/random: Add a newline at the end of the file

Stephen Boyd swboyd@chromium.org random: Use wait_event_freezable() in add_hwgenerator_randomness()

Hsin-Yi Wang hsinyi@chromium.org fdt: add support for rng-seed

Stephen Boyd swboyd@chromium.org random: Support freezable kthreads in add_hwgenerator_randomness()

Theodore Ts'o tytso@mit.edu random: fix soft lockup when trying to read from an uninitialized blocking pool

Vasily Gorbik gor@linux.ibm.com latent_entropy: avoid build error when plugin cflags are not set

George Spelvin lkml@sdf.org random: document get_random_int() family

Kees Cook keescook@chromium.org random: move rand_initialize() earlier

Theodore Ts'o tytso@mit.edu random: only read from /dev/random after its pool has received 128 bits

Rasmus Villemoes linux@rasmusvillemoes.dk drivers/char/random.c: make primary_crng static

Rasmus Villemoes linux@rasmusvillemoes.dk drivers/char/random.c: remove unused stuct poolinfo::poolbits

Rasmus Villemoes linux@rasmusvillemoes.dk drivers/char/random.c: constify poolinfo_table

Kees Cook keescook@chromium.org random: make CPU trust a boot parameter

Jason A. Donenfeld Jason@zx2c4.com random: Make crng state queryable

Ingo Molnar mingo@elte.hu random: remove preempt disabled region

Theodore Ts'o tytso@mit.edu random: add a config option to trust the CPU's hwrng

Tobin C. Harding me@tobin.cc random: Return nbytes filled from hw RNG

Tobin C. Harding me@tobin.cc random: Fix whitespace pre random-bytes work

Rasmus Villemoes linux@rasmusvillemoes.dk drivers/char/random.c: remove unused dont_count_entropy

Andi Kleen ak@linux.intel.com random: optimize add_interrupt_randomness

Jason A. Donenfeld Jason@zx2c4.com random: always fill buffer in get_random_bytes_wait

Eric Biggers ebiggers@google.com crypto: chacha20 - Fix keystream alignment for chacha20_block()

Al Viro viro@zeniv.linux.org.uk 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes"

-------------

Diffstat:

Documentation/admin-guide/kernel-parameters.txt | 12 + Documentation/sysctl/kernel.txt | 35 +- MAINTAINERS | 1 + Makefile | 4 +- arch/alpha/include/asm/timex.h | 1 + arch/arm/include/asm/timex.h | 1 + arch/arm64/kernel/ftrace.c | 4 +- arch/ia64/include/asm/timex.h | 1 + arch/m68k/include/asm/timex.h | 2 +- arch/mips/include/asm/timex.h | 17 +- arch/nios2/include/asm/timex.h | 3 + arch/parisc/include/asm/timex.h | 3 +- arch/powerpc/include/asm/archrandom.h | 27 +- arch/powerpc/include/asm/timex.h | 1 + arch/s390/include/asm/archrandom.h | 12 - arch/s390/include/asm/timex.h | 1 + arch/s390/mm/pgtable.c | 2 +- arch/sparc/include/asm/timex_32.h | 4 +- arch/um/include/asm/timex.h | 9 +- arch/x86/include/asm/archrandom.h | 12 +- arch/x86/include/asm/timex.h | 9 + arch/x86/include/asm/tsc.h | 7 +- arch/xtensa/include/asm/timex.h | 6 +- certs/blacklist_hashes.c | 2 +- crypto/chacha20_generic.c | 3 +- crypto/drbg.c | 220 +- crypto/md4.c | 17 - crypto/md5.c | 17 - drivers/ata/libata-core.c | 4 +- drivers/char/Kconfig | 38 +- drivers/char/hw_random/core.c | 1 + drivers/char/random.c | 3032 +++++++++-------------- drivers/hv/vmbus_drv.c | 2 +- drivers/irqchip/irq-gic-realview.c | 1 + drivers/misc/atmel-ssc.c | 4 +- drivers/net/ethernet/broadcom/bgmac-bcma.c | 1 - drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 25 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 21 +- drivers/nfc/nfcmrvl/usb.c | 16 +- drivers/of/fdt.c | 14 +- drivers/scsi/ipr.c | 4 +- drivers/scsi/lpfc/lpfc_nportdisc.c | 3 +- drivers/scsi/pmcraid.c | 2 +- drivers/scsi/vmw_pvscsi.h | 4 +- drivers/staging/comedi/drivers/vmk80xx.c | 2 +- drivers/tty/goldfish.c | 2 +- drivers/tty/serial/8250/8250_port.c | 2 + drivers/usb/dwc2/hcd.c | 2 +- drivers/usb/gadget/function/u_ether.c | 11 +- drivers/usb/gadget/udc/lpc32xx_udc.c | 1 + drivers/usb/serial/io_ti.c | 2 + drivers/usb/serial/io_usbvend.h | 1 + drivers/usb/serial/option.c | 6 + drivers/virtio/virtio_mmio.c | 1 + drivers/virtio/virtio_pci_common.c | 3 +- fs/9p/vfs_inode_dotl.c | 10 +- fs/ext4/mballoc.c | 9 + fs/ext4/namei.c | 3 +- fs/ext4/resize.c | 10 + fs/nfs/pnfs.c | 6 + include/crypto/blake2s.h | 102 + include/crypto/chacha20.h | 17 +- include/crypto/drbg.h | 18 +- include/crypto/internal/blake2s.h | 19 + include/linux/byteorder/generic.h | 17 + include/linux/cpuhotplug.h | 2 + include/linux/hw_random.h | 2 - include/linux/mm.h | 2 + include/linux/prandom.h | 23 +- include/linux/random.h | 125 +- include/linux/siphash.h | 28 + include/linux/timex.h | 10 +- include/trace/events/random.h | 316 --- include/uapi/linux/random.h | 4 +- init/main.c | 18 +- kernel/cpu.c | 11 + kernel/irq/handle.c | 2 +- kernel/time/timekeeping.c | 16 + lib/Kconfig.debug | 5 +- lib/Makefile | 2 + lib/chacha20.c | 6 +- lib/crypto/Makefile | 7 + lib/crypto/blake2s-generic.c | 111 + lib/crypto/blake2s-selftest.c | 591 +++++ lib/crypto/blake2s.c | 78 + lib/random32.c | 15 +- lib/sha1.c | 95 +- lib/siphash.c | 32 +- mm/util.c | 33 + net/ipv4/inet_hashtables.c | 34 +- net/l2tp/l2tp_ip6.c | 5 +- net/l2tp/l2tp_ppp.c | 60 +- net/sunrpc/xprtrdma/rpc_rdma.c | 4 +- sound/soc/codecs/cs42l52.c | 8 +- sound/soc/codecs/cs42l56.c | 4 +- sound/soc/codecs/cs53l30.c | 16 +- sound/soc/codecs/wm8962.c | 1 + 97 files changed, 2776 insertions(+), 2739 deletions(-)