[PATCH 4.4 000/114] 4.4.163-stable review

From: Greg Kroah-Hartman
Date: Thu Nov 08 2018 - 17:36:28 EST


This is the start of the stable review cycle for the 4.4.163 release.
There are 114 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat Nov 10 21:50:28 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.163-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.4.163-rc1

Nathan Chancellor <natechancellor@xxxxxxxxx>
x86/time: Correct the attribute on jiffies' definition

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/percpu: Fix this_cpu_read()

Phil Auld <pauld@xxxxxxxxxx>
sched/fair: Fix throttle_list starvation with low CFS quota

Mikhail Nikiforov <jackxviichaos@xxxxxxxxx>
Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15IGM

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: fix the usbfs flag sanitization for control transfers

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
usb: gadget: storage: Fix Spectre v1 vulnerability

Tobias Herzog <t-herzog@xxxxxx>
cdc-acm: correct counting of UART states in serial state notification

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
IB/ucm: Fix Spectre v1 vulnerability

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
RDMA/ucma: Fix Spectre v1 vulnerability

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
ptp: fix Spectre v1 vulnerability

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
cachefiles: fix the race between cachefiles_bury_object() and rmdir(2)

Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
ahci: don't ignore result code of ahci_reset_controller()

Jia-Ju Bai <baijiaju1990@xxxxxxx>
crypto: shash - Fix a sleep-in-atomic bug in shash_setkey_unaligned

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
mremap: properly flush TLB before releasing the page

Ido Schimmel <idosch@xxxxxxxxxxxx>
rtnetlink: Disallow FDB configuration for non-Ethernet device

Jason Wang <jasowang@xxxxxxxxxx>
vhost: Fix Spectre V1 vulnerability

Cong Wang <xiyou.wangcong@xxxxxxxxx>
net: drop skb on failure in ip_check_defrag()

Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
sctp: fix race on sctp_id2asoc

Heiner Kallweit <hkallweit1@xxxxxxxxx>
r8169: fix NAPI handling under high load

Niklas Cassel <niklas.cassel@xxxxxxxxxx>
net: stmmac: Fix stmmac_mdio_reset() when building stmmac as modules

Wenwen Wang <wang6495@xxxxxxx>
net: socket: fix a missing-check bug

Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
net: sched: gred: pass the right attribute to gred_change_table_def()

David Ahern <dsahern@xxxxxxxxx>
net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs

Stefano Brivio <sbrivio@xxxxxxxxxx>
ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv6: mcast: fix a use-after-free in inet6_mc_check

Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
net: bridge: remove ipv6 zero address check in mcast queries

Hangbin Liu <liuhangbin@xxxxxxxxx>
bridge: do not add port to router list when receives query with source 0.0.0.0

Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
perf tools: Disable parallelism for 'make clean'

Kimmo Rautkoski <ext-kimmo.rautkoski@xxxxxxxxxxx>
mtd: spi-nor: Add support for is25wp series chips

Khazhismel Kumykov <khazhy@xxxxxxxxxx>
fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters()

Sascha Hauer <s.hauer@xxxxxxxxxxxxxx>
ARM: dts: imx53-qsb: disable 1.2GHz OPP

Maciej W. Rozycki <macro@xxxxxxxxxxxxxx>
MIPS: DEC: Fix an int-handler.S CPU_DADDI_WORKAROUNDS regression

Christian GrÃnke <c.groenke@xxxxxxxxxx>
igb: Remove superfluous reset to PHY and page 0 selection

Matt Redfearn <matt.redfearn@xxxxxxxxxx>
MIPS: microMIPS: Fix decoding of swsp16 instruction

Raghava Aditya Renukunta <RaghavaAditya.Renukunta@xxxxxxxxxxxxx>
scsi: aacraid: Fix typo in blink status

Paolo Abeni <pabeni@xxxxxxxxxx>
bonding: avoid defaulting hard_header_len to ETH_HLEN on slave removal

Gustavo A. R. Silva <garsilva@xxxxxxxxxxxxxx>
PM / devfreq: tegra: fix error return code in tegra_devfreq_probe()

Gustavo A. R. Silva <garsilva@xxxxxxxxxxxxxx>
ASoC: spear: fix error return code in spdif_in_probe()

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
spi: xlp: fix error return code in xlp_spi_probe()

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
spi/bcm63xx: fix error return code in bcm63xx_spi_probe()

Matt Redfearn <matt.redfearn@xxxxxxxxxx>
MIPS: Handle non word sized instructions when examining frame

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
spi/bcm63xx-hspi: fix error return code in bcm63xx_hsspi_probe()

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
usb: dwc3: omap: fix error return code in dwc3_omap_probe()

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
usb: ehci-omap: fix error return code in ehci_hcd_omap_probe()

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
usb: imx21-hcd: fix error return code in imx21_probe()

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
gpio: msic: fix error return code in platform_msic_gpio_probe()

David S. Miller <davem@xxxxxxxxxxxxx>
sparc64: Fix exception handling in UltraSPARC-III memcpy.

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
gpu: host1x: fix error return code in host1x_probe()

Mike Kravetz <mike.kravetz@xxxxxxxxxx>
sparc64 mm: Fix more TSB sizing issues

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
video: fbdev: pxa3xx_gcu: fix error return code in pxa3xx_gcu_probe()

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
tty: serial: sprd: fix error return code in sprd_probe()

Guillaume Nault <g.nault@xxxxxxxxxxxx>
l2tp: hold socket before dropping lock in l2tp_ip{, 6}_recv()

Peter S. Housel <housel@xxxxxxx>
brcmfmac: Fix glom_skb leak in brcmf_sdiod_recv_chain

Alexander Duyck <aduyck@xxxxxxxxxxxx>
gro: Allow tunnel stacking in the case of FOU/GUE

Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
vti6: flush x-netns xfrm cache when vti interface is removed

Takashi Iwai <tiwai@xxxxxxx>
ALSA: timer: Fix zero-division by continue of uninitialized instance

Mark Rustad <mark.d.rustad@xxxxxxxxx>
ixgbe: Correct X550EM_x revision check

Emil Tantilov <emil.s.tantilov@xxxxxxxxx>
ixgbe: fix RSS limit for X550

Tariq Toukan <tariqt@xxxxxxxxxxxx>
net/mlx5e: Correctly handle RSS indirection table when changing number of channels

Tariq Toukan <tariqt@xxxxxxxxxxxx>
net/mlx5e: Fix LRO modify

William Dauchy <william@xxxxxxxxx>
ixgbevf: Fix handling of NAPI budget when multiple queues are enabled per vector

Ashish Samant <ashish.samant@xxxxxxxxxx>
fuse: Dont call set_page_dirty_lock() for ITER_BVEC pages for async_dio

Pavel Roskin <plroskin@xxxxxxxxx>
drm/nouveau/fbcon: fix oops without fbdev emulation

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf: generally move prog destruction to RCU deferral

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
usb-storage: fix bogus hardware error messages for ATA pass-thru devices

WANG Cong <xiyou.wangcong@xxxxxxxxx>
sch_red: update backlog as well

Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
sparc/pci: Refactor dev_archdata initialization into pci_init_dev_archdata

Ewan D. Milne <emilne@xxxxxxxxxx>
scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state

Jonathan Basseri <misterikkit@xxxxxxxxxx>
xfrm: Clear sk_dst_cache when applying per-socket policy.

Catalin Marinas <catalin.marinas@xxxxxxx>
arm64: Fix potential race with hardware DBM in ptep_set_access_flags()

Mark Syms <mark.syms@xxxxxxxxxx>
CIFS: handle guest access errors to Windows shares

Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
ASoC: wm8940: Enable cache usage to fix crashes on resume

Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
ASoC: ak4613: Enable cache usage to fix crashes on resume

Maciej W. Rozycki <macro@xxxxxxxxxx>
MIPS: Fix FCSR Cause bit handling for correct SIGFPE issue

Vladis Dronov <vdronov@xxxxxxxxxx>
usbvision: revert commit 588afcc1

Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
perf/core: Don't leak event in the syscall error path

Raghava Aditya Renukunta <RaghavaAditya.Renukunta@xxxxxxxxxxxxx>
aacraid: Start adapter after updating number of MSIX vectors

Prarit Bhargava <prarit@xxxxxxxxxx>
x86/PCI: Mark Broadwell-EP Home Agent 1 as having non-compliant BARs

Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
tpm: fix: return rc when devm_add_action() fails

Arnd Bergmann <arnd@xxxxxxxx>
thermal: allow u8500-thermal driver to be a module

Arnd Bergmann <arnd@xxxxxxxx>
thermal: allow spear-thermal driver to be a module

Jeff Mahoney <jeffm@xxxxxxxx>
btrfs: don't create or leak aliased root while cleaning up orphans

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
sched/cgroup: Fix cgroup entity load tracking tear-down

Florian Fainelli <f.fainelli@xxxxxxxxx>
um: Avoid longjmp/setjmp symbol clashes with libpthread.a

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv6: orphan skbs in reassembly unit

Eugenia Emantayev <eugenia@xxxxxxxxxxxx>
net/mlx4_en: Resolve dividing by zero in 32-bit system

Mateusz Jurczyk <mjurczyk@xxxxxxxxxx>
af_iucv: Move sockaddr length checks to before accessing sa_family in bind and connect handlers

Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
radix-tree: fix radix_tree_iter_retry() for tagged iterators.

Jiri Kosina <jkosina@xxxxxxx>
btrfs: cleaner_kthread() doesn't need explicit freeze

Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
x86/mm/pat: Prevent hang during boot when mapping pages

Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx>
ARM: dts: apq8064: add ahci ports-implemented mask

Steven Rostedt (Red Hat) <rostedt@xxxxxxxxxxx>
tracing: Skip more functions when doing stack tracing of events

Paul Bolle <pebolle@xxxxxxxxxx>
ser_gigaset: use container_of() instead of detour

David Herrmann <dh.herrmann@xxxxxxxxx>
net: drop write-only stack variable

Johannes Berg <johannes.berg@xxxxxxxxx>
ipv6: suppress sparse warnings in IP6_ECN_set_ce()

Eric Biggers <ebiggers@xxxxxxxxxx>
KEYS: put keyring if install_session_keyring_to_cred() fails

Wenwen Wang <wang6495@xxxxxxx>
net: cxgb3_main: fix a missing-check bug

Jiri Olsa <jolsa@xxxxxxxxxx>
perf/ring_buffer: Prevent concurent ring buffer access

Florian Fainelli <f.fainelli@xxxxxxxxx>
smsc95xx: Check for Wake-on-LAN modes

Florian Fainelli <f.fainelli@xxxxxxxxx>
smsc75xx: Check for Wake-on-LAN modes

Florian Fainelli <f.fainelli@xxxxxxxxx>
r8152: Check for supported Wake-on-LAN Modes

Florian Fainelli <f.fainelli@xxxxxxxxx>
sr9800: Check for supported Wake-on-LAN modes

Florian Fainelli <f.fainelli@xxxxxxxxx>
lan78xx: Check for supported Wake-on-LAN modes

Florian Fainelli <f.fainelli@xxxxxxxxx>
ax88179_178a: Check for supported Wake-on-LAN modes

Florian Fainelli <f.fainelli@xxxxxxxxx>
asix: Check for supported Wake-on-LAN modes

Lubomir Rintel <lkundrak@xxxxx>
pxa168fb: prepare the clock

Matias Karhumaa <matias.karhumaa@xxxxxxxxx>
Bluetooth: SMP: fix crash in unpairing

Martin Willi <martin@xxxxxxxxxxxxxx>
mac80211_hwsim: do not omit multicast announce of first added radio

Sean Tranchetti <stranche@xxxxxxxxxxxxxx>
xfrm: validate template mode

Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
ARM: 8799/1: mm: fix pci_ioremap_io() offset check

Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
cfg80211: reg: Init wiphy_idx in regulatory_hint_core()

Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
mac80211: Always report TX status

Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxxxxx>
xfrm6: call kfree_skb when skb is toobig

Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
xfrm: Validate address prefix lengths in the xfrm selector.


-------------

Diffstat:

Makefile | 4 +-
arch/arm/boot/dts/imx53-qsb-common.dtsi | 11 ++++
arch/arm/boot/dts/qcom-apq8064.dtsi | 3 +-
arch/arm/mm/ioremap.c | 2 +-
arch/arm64/mm/fault.c | 15 ++---
arch/mips/dec/int-handler.S | 34 ++--------
arch/mips/include/asm/fpu_emulator.h | 13 ++++
arch/mips/include/asm/switch_to.h | 18 ++++++
arch/mips/include/uapi/asm/inst.h | 2 +-
arch/mips/kernel/mips-r2-to-r6-emul.c | 10 +--
arch/mips/kernel/process.c | 11 ++--
arch/mips/kernel/ptrace.c | 7 +--
arch/mips/kernel/traps.c | 72 ++++++++++++----------
arch/sparc/include/asm/page_64.h | 1 +
arch/sparc/kernel/pci.c | 29 ++++++---
arch/sparc/lib/U3memcpy.S | 4 +-
arch/sparc/mm/fault_64.c | 1 +
arch/sparc/mm/tlb.c | 35 +++++++++--
arch/sparc/mm/tsb.c | 18 ++++--
arch/um/Makefile | 4 ++
arch/x86/include/asm/percpu.h | 8 +--
arch/x86/kernel/time.c | 2 +-
arch/x86/mm/pageattr.c | 21 ++++---
arch/x86/pci/fixup.c | 7 +++
arch/x86/um/setjmp_32.S | 16 ++---
arch/x86/um/setjmp_64.S | 16 ++---
crypto/shash.c | 2 +-
drivers/ata/ahci.c | 5 +-
drivers/char/tpm/tpm-chip.c | 6 +-
drivers/devfreq/tegra-devfreq.c | 6 +-
drivers/gpio/gpio-msic.c | 4 +-
drivers/gpu/drm/nouveau/nouveau_fbcon.c | 7 ++-
drivers/gpu/host1x/dev.c | 4 +-
drivers/infiniband/core/ucm.c | 3 +
drivers/infiniband/core/ucma.c | 3 +
drivers/input/mouse/elan_i2c_core.c | 1 +
drivers/isdn/gigaset/ser-gigaset.c | 9 +--
drivers/media/usb/usbvision/usbvision-video.c | 7 ---
drivers/mfd/db8500-prcmu.c | 3 +
drivers/mtd/spi-nor/spi-nor.c | 6 ++
drivers/net/bonding/bond_main.c | 2 +-
drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 17 +++++
drivers/net/ethernet/intel/igb/e1000_82575.c | 11 ----
drivers/net/ethernet/intel/ixgbe/ixgbe.h | 2 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_type.h | 2 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_x550.c | 9 +--
drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 2 +
drivers/net/ethernet/mellanox/mlx4/en_clock.c | 5 +-
drivers/net/ethernet/mellanox/mlx5/core/en.h | 2 +
.../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 2 +
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 30 ++++++---
drivers/net/ethernet/realtek/r8169.c | 8 +--
drivers/net/ethernet/stmicro/stmmac/stmmac_mdio.c | 2 +-
drivers/net/usb/asix_common.c | 3 +
drivers/net/usb/ax88179_178a.c | 3 +
drivers/net/usb/lan78xx.c | 17 ++---
drivers/net/usb/r8152.c | 3 +
drivers/net/usb/smsc75xx.c | 3 +
drivers/net/usb/smsc95xx.c | 3 +
drivers/net/usb/sr9800.c | 3 +
drivers/net/wireless/brcm80211/brcmfmac/bcmsdh.c | 7 +--
drivers/net/wireless/mac80211_hwsim.c | 3 +-
drivers/ptp/ptp_chardev.c | 4 ++
drivers/scsi/aacraid/linit.c | 2 +-
drivers/scsi/aacraid/src.c | 2 +-
drivers/scsi/scsi_scan.c | 5 +-
drivers/scsi/scsi_sysfs.c | 8 ++-
drivers/spi/spi-bcm63xx-hsspi.c | 4 +-
drivers/spi/spi-bcm63xx.c | 4 +-
drivers/spi/spi-xlp.c | 4 +-
drivers/thermal/Kconfig | 6 +-
drivers/tty/serial/sprd_serial.c | 4 +-
drivers/usb/class/cdc-acm.c | 14 ++---
drivers/usb/core/devio.c | 4 +-
drivers/usb/dwc3/dwc3-omap.c | 4 +-
drivers/usb/gadget/function/f_mass_storage.c | 3 +
drivers/usb/host/ehci-omap.c | 4 +-
drivers/usb/host/imx21-hcd.c | 6 +-
drivers/usb/storage/transport.c | 14 ++++-
drivers/vhost/vhost.c | 2 +
drivers/video/fbdev/pxa168fb.c | 6 +-
drivers/video/fbdev/pxa3xx-gcu.c | 4 +-
fs/btrfs/disk-io.c | 6 +-
fs/btrfs/disk-io.h | 2 +
fs/btrfs/root-tree.c | 27 +++++---
fs/cachefiles/namei.c | 2 +-
fs/cifs/connect.c | 3 +
fs/fat/fatent.c | 1 +
fs/fuse/file.c | 6 +-
fs/fuse/fuse_i.h | 1 +
include/linux/bpf.h | 5 --
include/linux/radix-tree.h | 1 +
include/net/inet_ecn.h | 3 +-
include/scsi/scsi_device.h | 1 +
kernel/bpf/arraymap.c | 4 +-
kernel/bpf/syscall.c | 13 +---
kernel/events/core.c | 5 +-
kernel/sched/core.c | 4 +-
kernel/sched/fair.c | 59 ++++++++++++------
kernel/sched/sched.h | 4 +-
kernel/trace/trace.c | 19 +++++-
mm/huge_memory.c | 6 +-
mm/mremap.c | 21 +++++--
net/bluetooth/mgmt.c | 7 +--
net/bluetooth/smp.c | 29 +++++++--
net/bluetooth/smp.h | 3 +-
net/bridge/br_multicast.c | 9 ++-
net/core/rtnetlink.c | 10 +++
net/ipv4/fou.c | 16 +++++
net/ipv4/ip_fragment.c | 12 ++--
net/ipv6/addrconf.c | 6 +-
net/ipv6/ip6_vti.c | 31 ++++++++++
net/ipv6/mcast.c | 16 ++---
net/ipv6/ndisc.c | 3 +-
net/ipv6/netfilter/nf_conntrack_reasm.c | 1 +
net/ipv6/xfrm6_output.c | 2 +
net/iucv/af_iucv.c | 8 +--
net/l2tp/l2tp_ip.c | 11 ++--
net/l2tp/l2tp_ip6.c | 11 ++--
net/mac80211/status.c | 7 +--
net/sched/sch_gred.c | 2 +-
net/sched/sch_red.c | 4 ++
net/sctp/socket.c | 5 +-
net/socket.c | 11 +++-
net/unix/af_unix.c | 5 +-
net/wireless/reg.c | 1 +
net/xfrm/xfrm_state.c | 1 +
net/xfrm/xfrm_user.c | 15 +++++
security/keys/process_keys.c | 7 ++-
sound/core/timer.c | 14 +++++
sound/soc/codecs/ak4613.c | 1 +
sound/soc/codecs/wm8940.c | 1 +
sound/soc/spear/spdif_in.c | 6 +-
tools/perf/Makefile | 4 +-
134 files changed, 737 insertions(+), 388 deletions(-)