[PATCH 4.4 000/124] 4.4.146-stable review

From: Greg Kroah-Hartman
Date: Sat Aug 04 2018 - 05:07:50 EST


This is the start of the stable review cycle for the 4.4.146 release.
There are 124 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Mon Aug 6 08:26:39 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.146-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.4.146-rc1

Tony Battersby <tonyb@xxxxxxxxxxxxxxx>
scsi: sg: fix minor memory leak in error path

Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
crypto: padlock-aes - Fix Nano workaround data corruption

Roman Kagan <rkagan@xxxxxxxxxxxxx>
kvm: x86: vmx: fix vpid leak

Jiang Biao <jiang.biao2@xxxxxxxxxx>
virtio_balloon: fix another race between migration and ballooning

Jeremy Cline <jcline@xxxxxxxxxx>
net: socket: fix potential spectre v1 gadget in socketcall

Anton Vasilyev <vasilyev@xxxxxxxxx>
can: ems_usb: Fix memory leak on ems_usb_disconnect()

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
squashfs: more metadata hardenings

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
squashfs: more metadata hardening

Jeremy Cline <jcline@xxxxxxxxxx>
netlink: Fix spectre v1 gadget in netlink_create()

Florian Fainelli <f.fainelli@xxxxxxxxx>
net: dsa: Do not suspend/resume closed slave_dev

Eric Dumazet <edumazet@xxxxxxxxxx>
inet: frag: enforce memory limits earlier

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: add one more quick ack after after ECN events

Yousuk Seung <ysseung@xxxxxxxxxx>
tcp: refactor tcp_ecn_check_ce to remove sk type cast

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: do not aggressively quick ack after ECN events

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: add max_quickacks param to tcp_incr_quickack and tcp_enter_quickack_mode

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: do not force quickack when receiving out-of-order packets

Eugeniy Paltsev <Eugeniy.Paltsev@xxxxxxxxxxxx>
NET: stmmac: align DMA stuff to largest cache line length

Dmitry Safonov <dima@xxxxxxxxxx>
netlink: Don't shift with UB on nlk->ngroups

Dmitry Safonov <dima@xxxxxxxxxx>
netlink: Do not subscribe to non-existent groups

Xiao Liang <xiliang@xxxxxxxxxx>
xen-netfront: wait xenbus state change when load module manually

Stefan Wahren <stefan.wahren@xxxxxxxx>
net: lan78xx: fix rx handling before first packet is send

tangpengpeng <tangpengpeng@xxxxxxxxx>
net: fix amd-xgbe flow-control issue

Lorenzo Bianconi <lorenzo.bianconi@xxxxxxxxxx>
ipv4: remove BUG_ON() from fib_compute_spec_dst

Andrea Adami <andrea.adami@xxxxxxxxx>
ASoC: pxa: Fix module autoload for platform drivers

Eric Engestrom <eric.engestrom@xxxxxxxxxx>
dmaengine: pxa_dma: remove duplicate const qualifier

Theodore Ts'o <tytso@xxxxxxx>
ext4: check for allocation block validity with block group locked

Theodore Ts'o <tytso@xxxxxxx>
ext4: fix inline data updates with checksums enabled

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
squashfs: be more careful about metadata corruption

Theodore Ts'o <tytso@xxxxxxx>
random: mix rdrand with entropy sent in from userspace

Josà Roberto de Souza <jose.souza@xxxxxxxxx>
drm: Add DP PSR2 sink enable bit

Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxxx>
media: si470x: fix __be16 annotations

Shivasharan S <shivasharan.srikanteshwara@xxxxxxxxxxxx>
scsi: megaraid_sas: Increase timeout by 1 sec for non-RAID fastpath IOs

Xose Vazquez Perez <xose.vazquez@xxxxxxxxx>
scsi: scsi_dh: replace too broad "TP9" string with the exact models

Suman Anna <s-anna@xxxxxx>
media: omap3isp: fix unbalanced dma_iommu_mapping

Tudor-Dan Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
crypto: authenc - don't leak pointers to authenc keys

Tudor-Dan Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
crypto: authencesn - don't leak pointers to authenc keys

Dominik Bozek <dominikx.bozek@xxxxxxxxx>
usb: hub: Don't wait for connect state at resume for powered-off ports

Michal Simek <michal.simek@xxxxxxxxxx>
microblaze: Fix simpleImage format generation

Ondrej MosnÃÄek <omosnace@xxxxxxxxxx>
audit: allow not equal op for audit by executable

Siva Rebbagondla <siva.rebbagondla@xxxxxxxxxxxxxxxxxx>
rsi: Fix 'invalid vdd' warning in mmc

Chris Novakovic <chris@xxxxxxxxxxxx>
ipconfig: Correctly initialise ic_nameservers

Luc Van Oostenryck <luc.vanoostenryck@xxxxxxxxx>
drm/gma500: fix psb_intel_lvds_mode_valid()'s return type

Dmitry Osipenko <digetx@xxxxxxxxx>
memory: tegra: Apply interrupts mask per SoC

Dmitry Osipenko <digetx@xxxxxxxxx>
memory: tegra: Do not handle spurious interrupts

Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx>
ALSA: hda/ca0132: fix build failure when a local macro is defined

Satendra Singh Thakur <satendra.t@xxxxxxxxxxx>
drm/atomic: Handling the case when setting old crtc for plane

Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxxx>
media: siano: get rid of __le32/__le16 cast warnings

Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
bpf: fix references to free_bpf_prog_info() in comments

Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
thermal: exynos: fix setting rising_threshold for Exynos5433

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
scsi: megaraid: silence a static checker bug

Wenwen Wang <wang6495@xxxxxxx>
scsi: 3w-xxxx: fix a missing-check bug

Wenwen Wang <wang6495@xxxxxxx>
scsi: 3w-9xxx: fix a missing-check bug

Thomas Richter <tmricht@xxxxxxxxxxxxx>
perf: fix invalid bit in diagnostic entry

Thomas Richter <tmricht@xxxxxxxxxxxxx>
s390/cpum_sf: Add data entry sizes to sampling trailer entry

Sean Lanigan <sean@xxxxxxxxxx>
brcmfmac: Add support for bcm43364 wireless chipset

Jane Wan <Jane.Wan@xxxxxxxxx>
mtd: rawnand: fsl_ifc: fix FSL NAND driver to read all ONFI parameter pages

Brad Love <brad@xxxxxxxxxxxxxxxx>
media: saa7164: Fix driver name in debug output

Damien Le Moal <damien.lemoal@xxxxxxx>
libata: Fix command retry decision

Wei Yongjun <yongjun_wei@xxxxxxxxxxxxxxxxx>
media: rcar_jpu: Add missing clk_disable_unprepare() on error in jpu_open()

Marc Zyngier <marc.zyngier@xxxxxxx>
dma-iommu: Fix compilation when !CONFIG_IOMMU_DMA

DaeRyong Jeong <threeearcat@xxxxxxxxx>
tty: Fix data race in tty_insert_flip_string_fixed_flag

Dmitry Torokhov <dtor@xxxxxxxxxxxx>
HID: i2c-hid: check if device is there before really probing

Jonathan NeuschÃfer <j.neuschaefer@xxxxxxx>
powerpc/embedded6xx/hlwd-pic: Prevent interrupts from being handled by Starlet

Luc Van Oostenryck <luc.vanoostenryck@xxxxxxxxx>
drm/radeon: fix mode_valid's return type

Terry Junge <terry.junge@xxxxxxxxxxxxxxx>
HID: hid-plantronics: Re-resend Update to map button for PTT products

Takashi Iwai <tiwai@xxxxxxx>
ALSA: usb-audio: Apply rate limit to warning messages in URB complete callback

Colin Ian King <colin.king@xxxxxxxxxxxxx>
media: smiapp: fix timeout checking in smiapp_read_nvm

Yufen Yu <yuyufen@xxxxxxxxxx>
md: fix NULL dereference of mddev->pers in remove_and_add_spares()

Anson Huang <Anson.Huang@xxxxxxx>
regulator: pfuze100: add .is_enable() for pfuze100_swb_regulator_ops

Takashi Iwai <tiwai@xxxxxxx>
ALSA: emu10k1: Rate-limit error messages about page errors

Maya Erez <merez@xxxxxxxxxxxxxx>
scsi: ufs: fix exception event handling

Xinming Hu <huxm@xxxxxxxxxxx>
mwifiex: correct histogram data with appropriate index

Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
PCI: pciehp: Request control of native hotplug only if supported

Julia Lawall <Julia.Lawall@xxxxxxx>
pinctrl: at91-pio4: add missing of_node_put

Christophe Leroy <christophe.leroy@xxxxxx>
powerpc/8xx: fix invalid register expression in head_8xx.S

Mathieu Malaterre <malat@xxxxxxxxxx>
powerpc/powermac: Mark variable x as unused

Mathieu Malaterre <malat@xxxxxxxxxx>
powerpc/powermac: Add missing prototype for note_bootable_part()

Mathieu Malaterre <malat@xxxxxxxxxx>
powerpc/chrp/time: Make some functions static, add missing header include

Mathieu Malaterre <malat@xxxxxxxxxx>
powerpc/32: Add a missing include header

Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx>
ath: Add regulatory mapping for Bahamas

Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx>
ath: Add regulatory mapping for Bermuda

Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx>
ath: Add regulatory mapping for Serbia

Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx>
ath: Add regulatory mapping for Tanzania

Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx>
ath: Add regulatory mapping for Uganda

Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx>
ath: Add regulatory mapping for APL2_FCCA

Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx>
ath: Add regulatory mapping for APL13_WORLD

Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx>
ath: Add regulatory mapping for ETSI8_WORLD

Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx>
ath: Add regulatory mapping for FCC3_ETSIC

Christoph Hellwig <hch@xxxxxx>
PCI: Prevent sysfs disable of device while driver is attached

Qu Wenruo <wqu@xxxxxxxx>
btrfs: qgroup: Finish rescan when hit the last leaf of extent tree

David Sterba <dsterba@xxxxxxxx>
btrfs: add barriers to btrfs_sync_log before log_commit_wait wakeups

Hans Verkuil <hans.verkuil@xxxxxxxxx>
media: videobuf2-core: don't call memop 'finish' when queueing

Eyal Reizer <eyalreizer@xxxxxxxxx>
wlcore: sdio: check for valid platform device data before suspend

Ganapathi Bhat <gbhat@xxxxxxxxxxx>
mwifiex: handle race during mwifiex_usb_disconnect

Vincent Palatin <vpalatin@xxxxxxxxxxxx>
mfd: cros_ec: Fail early if we cannot identify the EC

Kai Chieh Chuang <kaichieh.chuang@xxxxxxxxxxxx>
ASoC: dpcm: fix BE dai not hw_free and shutdown

Jian-Hong Pan <jian-hong@xxxxxxxxxxxx>
Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011

Thierry Escande <thierry.escande@xxxxxxxxxx>
Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning

Shaul Triebitz <shaul.triebitz@xxxxxxxxx>
iwlwifi: pcie: fix race in Rx buffer allocator

Kan Liang <kan.liang@xxxxxxxxx>
perf/x86/intel/uncore: Correct fixed counter index check for NHM

Kan Liang <kan.liang@xxxxxxxxx>
perf/x86/intel/uncore: Correct fixed counter index check in generic code

Shuah Khan (Samsung OSG) <shuah@xxxxxxxxxx>
usbip: usbip_detach: Fix memory, udev context and udev leak

Chao Yu <yuchao0@xxxxxxxxxx>
f2fs: fix to don't trigger writeback during recovery

Anatoly Pugachev <matorola@xxxxxxxxx>
disable loading f2fs module on PAGE_SIZE > 4KB

Leon Romanovsky <leonro@xxxxxxxxxxxx>
RDMA/mad: Convert BUG_ONs to error flows

Nicholas Piggin <npiggin@xxxxxxxxx>
powerpc/64s: Fix compiler store ordering to SLB shadow area

Stewart Smith <stewart@xxxxxxxxxxxxx>
hvc_opal: don't set tb_ticks_per_usec in udbg_init_opal_common()

Cong Wang <xiyou.wangcong@xxxxxxxxx>
infiniband: fix a possible use-after-free bug

Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
netfilter: ipset: List timing out entries with "timeout 1" instead of zero

Alexandre Belloni <alexandre.belloni@xxxxxxxxxxx>
rtc: ensure rtc_set_alarm fails when alarms are not supported

Mathieu Malaterre <malat@xxxxxxxxxx>
mm/slub.c: add __printf verification to slab_err()

Chintan Pandya <cpandya@xxxxxxxxxxxxxx>
mm: vmalloc: avoid racy handling of debugobjects in vunmap

Scott Mayhew <smayhew@xxxxxxxxxx>
nfsd: fix potential use-after-free in nfsd4_decode_getdeviceinfo

Zhouyang Jia <jiazhouyang09@xxxxxxxxx>
ALSA: fm801: add error handling for snd_ctl_add

Zhouyang Jia <jiazhouyang09@xxxxxxxxx>
ALSA: emu10k1: add error handling for snd_ctl_add

Juergen Gross <jgross@xxxxxxxx>
xen/netfront: raise max number of slots in xennet_get_responses()

Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx>
tracing: Quiet gcc warning about maybe unused link variable

Artem Savkov <asavkov@xxxxxxxxxx>
tracing/kprobes: Fix trace_probe flags on enable_trace_kprobe() failure

Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx>
tracing: Fix possible double free in event_enable_trigger_func()

Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx>
tracing: Fix double free of event_trigger_data

KT Liao <kt.liao@xxxxxxxxxx>
Input: elan_i2c - add another ACPI ID for Lenovo Ideapad 330-15AST

Chen-Yu Tsai <wens@xxxxxxxx>
Input: i8042 - add Lenovo LaVie Z to the i8042 reset list

Donald Shanty III <dshanty@xxxxxxxxxxxxxx>
Input: elan_i2c - add ACPI ID for lenovo ideapad 330

Paul Burton <paul.burton@xxxxxxxx>
MIPS: Fix off-by-one in pci_resource_to_user()


-------------

Diffstat:

Makefile | 4 +-
arch/microblaze/boot/Makefile | 10 +++--
arch/mips/include/asm/pci.h | 2 +-
arch/powerpc/kernel/head_8xx.S | 2 +-
arch/powerpc/kernel/pci_32.c | 1 +
arch/powerpc/mm/slb.c | 8 ++--
arch/powerpc/platforms/chrp/time.c | 6 ++-
arch/powerpc/platforms/embedded6xx/hlwd-pic.c | 5 +++
arch/powerpc/platforms/powermac/bootx_init.c | 4 +-
arch/powerpc/platforms/powermac/setup.c | 1 +
arch/s390/include/asm/cpu_mf.h | 6 ++-
arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
.../x86/kernel/cpu/perf_event_intel_uncore_nhmex.c | 2 +-
arch/x86/kvm/vmx.c | 7 ++--
crypto/authenc.c | 1 +
crypto/authencesn.c | 1 +
drivers/acpi/pci_root.c | 4 +-
drivers/ata/libata-eh.c | 12 ++++--
drivers/bluetooth/btusb.c | 3 ++
drivers/bluetooth/hci_qca.c | 2 +-
drivers/char/random.c | 10 ++++-
drivers/crypto/padlock-aes.c | 8 +++-
drivers/dma/pxa_dma.c | 2 +-
drivers/gpu/drm/drm_atomic.c | 4 +-
drivers/gpu/drm/gma500/psb_intel_drv.h | 2 +-
drivers/gpu/drm/gma500/psb_intel_lvds.c | 2 +-
drivers/gpu/drm/radeon/radeon_connectors.c | 10 ++---
drivers/hid/hid-plantronics.c | 6 ++-
drivers/hid/i2c-hid/i2c-hid.c | 8 ++++
drivers/infiniband/core/mad.c | 11 +++--
drivers/infiniband/core/ucma.c | 6 ++-
drivers/input/mouse/elan_i2c_core.c | 2 +
drivers/input/serio/i8042-x86ia64io.h | 7 ++++
drivers/md/md.c | 3 ++
drivers/media/common/siano/smsendian.c | 14 +++----
drivers/media/i2c/smiapp/smiapp-core.c | 11 +++--
drivers/media/pci/saa7164/saa7164-fw.c | 3 +-
drivers/media/platform/omap3isp/isp.c | 7 ++--
drivers/media/platform/rcar_jpu.c | 4 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 6 +--
drivers/media/v4l2-core/videobuf2-core.c | 9 ++--
drivers/memory/tegra/mc.c | 22 +++-------
drivers/memory/tegra/mc.h | 9 ++++
drivers/memory/tegra/tegra114.c | 2 +
drivers/memory/tegra/tegra124.c | 6 +++
drivers/memory/tegra/tegra210.c | 3 ++
drivers/memory/tegra/tegra30.c | 2 +
drivers/mfd/cros_ec.c | 6 ++-
drivers/mtd/nand/fsl_ifc_nand.c | 17 ++++----
drivers/net/can/usb/ems_usb.c | 1 +
drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 4 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 2 +-
drivers/net/usb/lan78xx.c | 2 +
drivers/net/wireless/ath/regd.h | 5 +++
drivers/net/wireless/ath/regd_common.h | 13 ++++++
drivers/net/wireless/brcm80211/brcmfmac/bcmsdh.c | 1 +
drivers/net/wireless/iwlwifi/pcie/rx.c | 2 +
drivers/net/wireless/mwifiex/usb.c | 3 ++
drivers/net/wireless/mwifiex/util.c | 8 ++--
drivers/net/wireless/rsi/rsi_91x_sdio.c | 2 -
drivers/net/wireless/ti/wlcore/sdio.c | 5 +++
drivers/net/xen-netfront.c | 10 ++++-
drivers/pci/pci-sysfs.c | 15 ++++---
drivers/pinctrl/pinctrl-at91-pio4.c | 4 +-
drivers/regulator/pfuze100-regulator.c | 1 +
drivers/rtc/interface.c | 5 +++
drivers/scsi/3w-9xxx.c | 5 +++
drivers/scsi/3w-xxxx.c | 3 ++
drivers/scsi/megaraid.c | 3 ++
drivers/scsi/megaraid/megaraid_sas_fusion.c | 3 ++
drivers/scsi/scsi_dh.c | 5 ++-
drivers/scsi/sg.c | 1 +
drivers/scsi/ufs/ufshcd.c | 2 +
drivers/thermal/samsung/exynos_tmu.c | 1 +
drivers/tty/hvc/hvc_opal.c | 1 -
drivers/tty/pty.c | 3 ++
drivers/usb/core/hub.c | 4 ++
drivers/virtio/virtio_balloon.c | 2 +
fs/btrfs/qgroup.c | 19 +++++++++
fs/btrfs/tree-log.c | 10 ++++-
fs/ext4/balloc.c | 3 ++
fs/ext4/ialloc.c | 3 ++
fs/ext4/inline.c | 19 +++++----
fs/ext4/inode.c | 16 ++++----
fs/f2fs/segment.c | 3 ++
fs/f2fs/super.c | 6 +++
fs/nfsd/nfs4xdr.c | 2 +
fs/squashfs/block.c | 2 +
fs/squashfs/cache.c | 3 ++
fs/squashfs/file.c | 8 +++-
fs/squashfs/fragment.c | 17 ++++----
fs/squashfs/squashfs_fs.h | 6 +++
fs/squashfs/squashfs_fs_sb.h | 1 +
fs/squashfs/super.c | 5 ++-
include/drm/drm_dp_helper.h | 1 +
include/linux/dma-iommu.h | 1 +
include/linux/mmc/sdio_ids.h | 1 +
include/linux/netfilter/ipset/ip_set_timeout.h | 10 ++++-
include/net/tcp.h | 2 +-
include/soc/tegra/mc.h | 2 +
kernel/auditfilter.c | 2 +-
kernel/auditsc.c | 2 +
kernel/bpf/verifier.c | 4 +-
kernel/trace/trace_events_trigger.c | 18 +++++---
kernel/trace/trace_kprobe.c | 15 ++++++-
mm/slub.c | 2 +-
mm/vmalloc.c | 3 +-
net/dsa/slave.c | 6 +++
net/ipv4/fib_frontend.c | 4 +-
net/ipv4/inet_fragment.c | 10 ++---
net/ipv4/ipconfig.c | 13 ++++++
net/ipv4/tcp_dctcp.c | 4 +-
net/ipv4/tcp_input.c | 48 +++++++++++-----------
net/netlink/af_netlink.c | 7 ++++
net/socket.c | 2 +
sound/pci/emu10k1/emupcm.c | 4 +-
sound/pci/emu10k1/memory.c | 6 +--
sound/pci/fm801.c | 16 ++++++--
sound/pci/hda/patch_ca0132.c | 8 +++-
sound/soc/pxa/brownstone.c | 1 +
sound/soc/pxa/mioa701_wm9713.c | 1 +
sound/soc/pxa/mmp-pcm.c | 1 +
sound/soc/pxa/mmp-sspa.c | 1 +
sound/soc/pxa/palm27x.c | 1 +
sound/soc/pxa/pxa-ssp.c | 1 +
sound/soc/pxa/pxa2xx-ac97.c | 1 +
sound/soc/pxa/pxa2xx-pcm.c | 1 +
sound/soc/soc-pcm.c | 6 ++-
sound/usb/pcm.c | 2 +-
tools/usb/usbip/src/usbip_detach.c | 9 ++--
130 files changed, 532 insertions(+), 208 deletions(-)