[PATCH 4.14 00/89] 4.14.89-stable review

From: Greg Kroah-Hartman
Date: Fri Dec 14 2018 - 07:34:16 EST


This is the start of the stable review cycle for the 4.14.89 release.
There are 89 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun Dec 16 11:57:01 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.89-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.14.89-rc1

Piotr Stankiewicz <piotr.stankiewicz@xxxxxxxxx>
IB/hfi1: Fix an out-of-bounds access in get_hw_stats

Kailang Yang <kailang@xxxxxxxxxxx>
ALSA: hda/realtek - Fixed headphone issue for ALC700

Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx>
ALSA: fireface: fix reference to wrong register for clock configuration

Guenter Roeck <linux@xxxxxxxxxxxx>
staging: speakup: Replace strncpy with memcpy

Tigran Mkrtchyan <tigran.mkrtchyan@xxxxxxx>
flexfiles: enforce per-mirror stateid only for v4 DSes

Davidlohr Bueso <dave@xxxxxxxxxxxx>
lib/rbtree-test: lower default params

Petr Mladek <pmladek@xxxxxxxx>
printk: Wake klogd when passing console_lock owner

Sergey Senozhatsky <sergey.senozhatsky.work@xxxxxxxxx>
printk: Never set console_may_schedule in console_trylock()

Petr Mladek <pmladek@xxxxxxxx>
printk: Hide console waiter logic into helpers

Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx>
printk: Add console owner and waiter logic to load balance console writes

Sasha Levin <sashal@xxxxxxxxxx>
Revert "printk: Never set console_may_schedule in console_trylock()"

Pan Bian <bianpan2016@xxxxxxx>
ocfs2: fix potential use after free

Qian Cai <cai@xxxxxx>
debugobjects: avoid recursive calls with kmemleak

Pan Bian <bianpan2016@xxxxxxx>
hfsplus: do not free node before using

Pan Bian <bianpan2016@xxxxxxx>
hfs: do not free node before using

Wei Yang <richard.weiyang@xxxxxxxxx>
mm/page_alloc.c: fix calculation of pgdat->nr_zones

Larry Chen <lchen@xxxxxxxx>
ocfs2: fix deadlock caused by ocfs2_defrag_extent()

Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
ACPI/IORT: Fix iort_get_platform_device_domain() uninitialized pointer value

Sagi Grimberg <sagi@xxxxxxxxxxx>
nvme: flush namespace scanning work just before removing namespaces

Colin Ian King <colin.king@xxxxxxxxxxxxx>
fscache, cachefiles: remove redundant variable 'cache'

NeilBrown <neilb@xxxxxxxx>
fscache: fix race between enablement and dropping of object

Kees Cook <keescook@xxxxxxxxxxxx>
pstore/ram: Correctly calculate usable PRZ bytes

Igor Druzhinin <igor.druzhinin@xxxxxxxxxx>
Revert "xen/balloon: Mark unallocated host memory as UNUSABLE"

Srikanth Boddepalli <boddepalli.srikanth@xxxxxxxxx>
xen: xlate_mmu: add missing header to fix 'W=1' warning

Y.C. Chen <yc_chen@xxxxxxxxxxxxxx>
drm/ast: fixed reading monitor EDID not stable issue

shaoyunl <shaoyun.liu@xxxxxxx>
drm/amdgpu: Add delay after enable RLC ucode

Pan Bian <bianpan2016@xxxxxxx>
net: hisilicon: remove unexpected free_netdev

Josh Elsasser <jelsasser@xxxxxxxxxxx>
ixgbe: recognize 1000BaseLX SFP modules as 1Gbps

Yunjian Wang <wangyunjian@xxxxxxxxxx>
igb: fix uninitialized variables

Kiran Kumar Modukuri <kiran.modukuri@xxxxxxxxx>
cachefiles: Fix page leak in cachefiles_read_backing_file while vmscan is active

Taehee Yoo <ap420073@xxxxxxxxx>
netfilter: nf_tables: deactivate expressions in rule replecement routine

Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
usb: gadget: u_ether: fix unsafe list iteration

Lorenzo Bianconi <lorenzo.bianconi@xxxxxxxxxx>
net: thunderx: fix NULL pointer dereference in nic_remove

Yi Wang <wang.yi59@xxxxxxxxxx>
x86/kvm/vmx: fix old-style function declaration

Yi Wang <wang.yi59@xxxxxxxxxx>
KVM: x86: fix empty-body warnings

Artemy Kovalyov <artemyko@xxxxxxxxxxxx>
IB/mlx5: Fix page fault handling for MW

Alin Nastac <alin.nastac@xxxxxxxxx>
netfilter: ipv6: Preserve link scope traffic original oif

Christian Hewitt <christianshewitt@xxxxxxxxx>
drm/meson: add support for 1080p25 mode

Aaro Koskinen <aaro.koskinen@xxxxxx>
USB: omap_udc: fix rejection of out transfers when DMA is used

Aaro Koskinen <aaro.koskinen@xxxxxx>
USB: omap_udc: fix USB gadget functionality on Palm Tungsten E

Aaro Koskinen <aaro.koskinen@xxxxxx>
USB: omap_udc: fix omap_udc_start() on 15xx machines

Aaro Koskinen <aaro.koskinen@xxxxxx>
USB: omap_udc: fix crashes on probe error and module removal

Aaro Koskinen <aaro.koskinen@xxxxxx>
USB: omap_udc: use devm_request_irq()

Xin Long <lucien.xin@xxxxxxxxx>
ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf

Martynas Pumputis <m@xxxxxxxxx>
bpf: fix check of allowed specifiers in bpf_trace_printk

Pan Bian <bianpan2016@xxxxxxx>
exportfs: do not read dentry after free

Peter Ujfalusi <peter.ujfalusi@xxxxxx>
ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE

Peter Ujfalusi <peter.ujfalusi@xxxxxx>
ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE

Peter Ujfalusi <peter.ujfalusi@xxxxxx>
ASoC: omap-mcbsp: Fix latency value calculation for pm_qos

Kamal Heib <kamalheib1@xxxxxxxxx>
RDMA/rdmavt: Fix rvt_create_ah function signature

Majd Dibbiny <majd@xxxxxxxxxxxx>
RDMA/mlx5: Fix fence type for IB_WR_LOCAL_INV WR

Robbie Ko <robbieko@xxxxxxxxxxxx>
Btrfs: send, fix infinite loop due to directory rename dependencies

Romain Izard <romain.izard.pro@xxxxxxxxx>
ARM: dts: at91: sama5d2: use the divided clock for SMC

Artem Savkov <asavkov@xxxxxxxxxx>
objtool: Fix segfault in .cold detection with -ffunction-sections

Artem Savkov <asavkov@xxxxxxxxxx>
objtool: Fix double-free in .cold detection error path

Trent Piepho <tpiepho@xxxxxxxxxx>
PCI: imx6: Fix link training status detection in link up check

Jiri Olsa <jolsa@xxxxxxxxxx>
perf tools: Restore proper cwd on return from mnt namespace

Huacai Chen <chenhc@xxxxxxxxxx>
hwmon: (w83795) temp4_type has writable permission

Taehee Yoo <ap420073@xxxxxxxxx>
netfilter: xt_hashlimit: fix a possible memory leak in htable_create()

Hans de Goede <hdegoede@xxxxxxxxxx>
iio/hid-sensors: Fix IIO_CHAN_INFO_RAW returning wrong values for signed numbers

Tzung-Bi Shih <tzungbi@xxxxxxxxxx>
ASoC: dapm: Recalculate audio map forcely when card instantiated

Peter Ujfalusi <peter.ujfalusi@xxxxxx>
ASoC: omap-abe-twl6040: Fix missing audio card caused by deferred probing

Nicolin Chen <nicoleotsuka@xxxxxxxxx>
hwmon: (ina2xx) Fix current value calculation

Thomas Richter <tmricht@xxxxxxxxxxxxx>
s390/cpum_cf: Reject request for sampling in event initialization

Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
ASoC: wm_adsp: Fix dma-unsafe read of scratch registers

Nicolin Chen <nicoleotsuka@xxxxxxxxx>
hwmon (ina2xx) Fix NULL id pointer in probe()

Florian Westphal <fw@xxxxxxxxx>
netfilter: nf_tables: fix use-after-free when deleting compat expressions

Florian Westphal <fw@xxxxxxxxx>
selftests: add script to stress-test nft packet path vs. control plane

YueHaibing <yuehaibing@xxxxxxxxxx>
sysv: return 'err' instead of 0 in __sysv_write_inode

Janusz Krzysztofik <jmkrzyszt@xxxxxxxxx>
ARM: OMAP1: ams-delta: Fix possible use of uninitialized field

Adam Ford <aford173@xxxxxxxxx>
ARM: dts: logicpd-somlv: Fix interrupt on mmc3_dat1

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
staging: rtl8723bs: Fix the return value in case of error in 'rtw_wx_read32()'

Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
ASoC: rsnd: fixup clock start checker

Nathan Chancellor <natechancellor@xxxxxxxxx>
ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup

Jason Wang <jasowang@xxxxxxxxxx>
virtio-net: keep vnet header zeroed after processing XDP

Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
tun: forbid iface creation with rtnl ops

Yuchung Cheng <ycheng@xxxxxxxxxx>
tcp: fix NULL ref in tail loss probe

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: Do not underestimate rwnd_limited

Xin Long <lucien.xin@xxxxxxxxx>
sctp: kfree_rcu asoc

Eric Dumazet <edumazet@xxxxxxxxxx>
rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices

Christoph Paasch <cpaasch@xxxxxxxxx>
net: Prevent invalid access to skb->prev in __qdisc_drop_all

Heiner Kallweit <hkallweit1@xxxxxxxxx>
net: phy: don't allow __set_phy_supported to add unsupported modes

Eran Ben Elisha <eranbe@xxxxxxxxxxxx>
net/mlx4_en: Change min MTU size to ETH_MIN_MTU

Tarick Bedeir <tarick@xxxxxxxxxx>
net/mlx4_core: Correctly set PFC param if global pause is turned off.

Su Yanjun <suyj.fnst@xxxxxxxxxxxxxx>
net: 8139cp: fix a BUG triggered by changing mtu with network traffic

Shmulik Ladkani <shmulik@xxxxxxxxxxxxxxxx>
ipv6: sr: properly initialize flowi6 prior passing to ip6_route_output

Stefano Brivio <sbrivio@xxxxxxxxxx>
neighbour: Avoid writing before skb->head in neigh_hh_output()

Stefano Brivio <sbrivio@xxxxxxxxxx>
ipv6: Check available headroom in ip6_xmit() even without options

Jiri Wiesner <jwiesner@xxxxxxxx>
ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changes


-------------

Diffstat:

Makefile | 4 +-
arch/arm/boot/dts/logicpd-som-lv.dtsi | 2 +-
arch/arm/boot/dts/sama5d2.dtsi | 2 +-
arch/arm/mach-omap1/board-ams-delta.c | 3 +
arch/arm/mach-omap2/prm44xx.c | 2 +-
arch/s390/kernel/perf_cpum_cf.c | 2 +
arch/x86/kvm/lapic.c | 2 +-
arch/x86/kvm/vmx.c | 8 +-
arch/x86/xen/enlighten.c | 78 ----------
arch/x86/xen/setup.c | 6 +-
drivers/acpi/arm64/iort.c | 2 +-
drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 7 +-
drivers/gpu/drm/ast/ast_mode.c | 36 ++++-
drivers/gpu/drm/meson/meson_venc.c | 1 +
drivers/hid/hid-sensor-custom.c | 2 +-
drivers/hid/hid-sensor-hub.c | 13 +-
drivers/hwmon/ina2xx.c | 6 +-
drivers/hwmon/w83795.c | 2 +-
drivers/iio/accel/hid-sensor-accel-3d.c | 5 +-
drivers/iio/gyro/hid-sensor-gyro-3d.c | 5 +-
drivers/iio/humidity/hid-sensor-humidity.c | 3 +-
drivers/iio/light/hid-sensor-als.c | 8 +-
drivers/iio/light/hid-sensor-prox.c | 8 +-
drivers/iio/magnetometer/hid-sensor-magn-3d.c | 8 +-
drivers/iio/orientation/hid-sensor-incl-3d.c | 8 +-
drivers/iio/pressure/hid-sensor-press.c | 8 +-
drivers/iio/temperature/hid-sensor-temperature.c | 3 +-
drivers/infiniband/hw/hfi1/chip.c | 3 +-
drivers/infiniband/hw/hfi1/hfi.h | 2 +
drivers/infiniband/hw/hfi1/verbs.c | 2 +-
drivers/infiniband/hw/mlx5/odp.c | 1 +
drivers/infiniband/hw/mlx5/qp.c | 19 +--
drivers/infiniband/sw/rdmavt/ah.c | 4 +-
drivers/infiniband/sw/rdmavt/ah.h | 3 +-
drivers/net/ethernet/cavium/thunder/nic_main.c | 3 +
drivers/net/ethernet/hisilicon/hip04_eth.c | 4 +-
drivers/net/ethernet/intel/igb/e1000_i210.c | 1 +
drivers/net/ethernet/intel/ixgbe/ixgbe_x550.c | 4 +-
drivers/net/ethernet/mellanox/mlx4/en_ethtool.c | 4 +-
drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 4 +-
drivers/net/ethernet/mellanox/mlx4/mlx4_en.h | 1 -
drivers/net/ethernet/realtek/8139cp.c | 5 +
drivers/net/phy/phy_device.c | 19 ++-
drivers/net/tun.c | 6 +-
drivers/net/virtio_net.c | 14 +-
drivers/nvme/host/core.c | 4 +-
drivers/pci/dwc/pci-imx6.c | 10 +-
drivers/rtc/rtc-hid-sensor-time.c | 2 +-
drivers/staging/rtl8723bs/os_dep/ioctl_linux.c | 2 +-
drivers/staging/speakup/kobjects.c | 4 +-
drivers/usb/gadget/function/u_ether.c | 11 +-
drivers/usb/gadget/udc/omap_udc.c | 88 ++++--------
drivers/xen/balloon.c | 65 ++-------
drivers/xen/xlate_mmu.c | 1 +
fs/btrfs/send.c | 11 +-
fs/cachefiles/rdwr.c | 9 +-
fs/exportfs/expfs.c | 2 +-
fs/fscache/object.c | 3 +
fs/hfs/btree.c | 3 +-
fs/hfsplus/btree.c | 3 +-
fs/nfs/flexfilelayout/flexfilelayout.c | 6 +-
fs/ocfs2/export.c | 2 +-
fs/ocfs2/move_extents.c | 47 +++---
fs/pstore/ram.c | 15 +-
fs/sysv/inode.c | 2 +-
include/linux/hid-sensor-hub.h | 4 +-
include/linux/pstore.h | 5 +-
include/net/neighbour.h | 28 +++-
include/net/sctp/structs.h | 2 +
include/xen/balloon.h | 5 -
kernel/printk/printk.c | 160 ++++++++++++++++++++-
kernel/trace/bpf_trace.c | 8 +-
lib/debugobjects.c | 5 +-
lib/interval_tree_test.c | 4 +-
lib/rbtree_test.c | 2 +-
mm/page_alloc.c | 4 +-
net/core/rtnetlink.c | 3 +
net/ipv4/ip_fragment.c | 7 +
net/ipv4/tcp_output.c | 17 ++-
net/ipv6/ip6_output.c | 42 +++---
net/ipv6/netfilter.c | 3 +-
net/ipv6/netfilter/nf_conntrack_reasm.c | 8 +-
net/ipv6/reassembly.c | 8 +-
net/ipv6/seg6_iptunnel.c | 1 +
net/netfilter/ipvs/ip_vs_ctl.c | 3 +
net/netfilter/nf_tables_api.c | 20 +--
net/netfilter/nft_compat.c | 3 +-
net/netfilter/xt_hashlimit.c | 9 +-
net/sched/sch_netem.c | 3 +
net/sctp/associola.c | 2 +-
sound/firewire/fireface/ff-protocol-ff400.c | 2 +-
sound/pci/hda/patch_realtek.c | 33 +++++
sound/soc/codecs/wm_adsp.c | 37 ++---
sound/soc/omap/omap-abe-twl6040.c | 67 ++++-----
sound/soc/omap/omap-dmic.c | 9 ++
sound/soc/omap/omap-mcbsp.c | 6 +-
sound/soc/omap/omap-mcpdm.c | 43 +++++-
sound/soc/sh/rcar/ssi.c | 2 +-
sound/soc/soc-core.c | 1 +
tools/objtool/elf.c | 19 ++-
tools/perf/util/namespaces.c | 17 ++-
tools/perf/util/namespaces.h | 1 +
tools/testing/selftests/Makefile | 1 +
tools/testing/selftests/netfilter/Makefile | 6 +
tools/testing/selftests/netfilter/config | 2 +
.../selftests/netfilter/nft_trans_stress.sh | 78 ++++++++++
106 files changed, 820 insertions(+), 483 deletions(-)