[PATCH 4.14 00/92] 4.14.113-stable review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 4.14.113 release.
There are 92 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat Apr 20 16:03:26 UTC 2019.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.113-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 4.14.113-rc1

Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
    mm: hide incomplete nr_indirectly_reclaimable in sysfs

Lars Persson <lars.persson@xxxxxxxx>
    net: stmmac: Set dma ring length before enabling the DMA

Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
    tools include: Adopt linux/bits.h

Balbir Singh <sblbir@xxxxxxxx>
    bpf: Fix selftests are changes for CVE 2019-7308

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: fix sanitation rewrite in case of non-pointers

Xu Yu <xuyu@xxxxxxxxxxxxxxxxx>
    bpf: do not restore dst_reg when cur_state is freed

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: fix inner map masking to prevent oob under speculation

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: fix sanitation of alu op with pointer / scalar type from different paths

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: prevent out of bounds speculation on pointer arithmetic

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: fix check_map_access smin_value test when pointer contains offset

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: restrict unknown scalars of mixed signed bounds for unprivileged

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: restrict stack pointer arithmetic for unprivileged

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: restrict map value pointer arithmetic for unprivileged

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: enable access to ax register also from verifier rewrite

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: move tmp variable into ax register in interpreter

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: move {prev_,}insn_idx into verifier env

Alexei Starovoitov <ast@xxxxxx>
    bpf: fix stack state printing in verifier log

Craig Gallek <kraig@xxxxxxxxxx>
    bpf: fix verifier NULL pointer dereference

Alexei Starovoitov <ast@xxxxxx>
    bpf: fix verifier memory leaks

Alexei Starovoitov <ast@xxxxxx>
    bpf: reduce verifier memory consumption

Mikulas Patocka <mpatocka@xxxxxxxxxx>
    dm: disable CRYPTO_TFM_REQ_MAY_SLEEP to fix a GFP_KERNEL recursion deadlock

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: fix use after free in bpf_evict_inode

Pi-Hsun Shih <pihsun@xxxxxxxxxxxx>
    include/linux/swap.h: use offsetof() instead of custom __swapoffset macro

Stanislaw Gruszka <sgruszka@xxxxxxxxxx>
    lib/div64.c: off by one in shift

YueHaibing <yuehaibing@xxxxxxxxxx>
    appletalk: Fix use-after-free in atalk_proc_exit

Kevin Wang <kevin1.wang@xxxxxxx>
    drm/amdkfd: use init_mqd function to allocate object for hid_mqd (CI)

Yang Shi <yang.shi@xxxxxxxxxx>
    ARM: 8839/1: kprobe: make patch_lock a raw_spinlock_t

Ilia Mirkin <imirkin@xxxxxxxxxxxx>
    drm/nouveau/volt/gf117: fix speedo readout register

Leo Yan <leo.yan@xxxxxxxxxx>
    coresight: cpu-debug: Support for CA73 CPUs

Zhang Rui <rui.zhang@xxxxxxxxx>
    Revert "ACPI / EC: Remove old CLEAR_ON_RESUME quirk"

Lars Persson <lars.persson@xxxxxxxx>
    crypto: axis - fix for recursive locking from bottom half

Hsin-Yi, Wang <hsinyi@xxxxxxxxxxxx>
    drm/panel: panel-innolux: set display off in innolux_panel_unprepare

Christophe Leroy <christophe.leroy@xxxxxx>
    lkdtm: Add tests for NULL pointer dereference

Christophe Leroy <christophe.leroy@xxxxxx>
    lkdtm: Print real addresses

Dmitry Osipenko <digetx@xxxxxxxxx>
    soc/tegra: pmc: Drop locking from tegra_powergate_is_powered()

Julia Cartwright <julia@xxxxxx>
    iommu/dmar: Fix buffer overflow during PCI bus notification

Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
    crypto: sha512/arm - fix crash bug in Thumb2 build

Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
    crypto: sha256/arm - fix crash bug in Thumb2 build

Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
    kernel: hung_task.c: disable on suspend

Steve French <stfrench@xxxxxxxxxxxxx>
    cifs: fallback to older infolevels on findfirst queryinfo retry

ndesaulniers@xxxxxxxxxx <ndesaulniers@xxxxxxxxxx>
    compiler.h: update definition of unreachable()

Sean Christopherson <sean.j.christopherson@xxxxxxxxx>
    KVM: nVMX: restore host state in nested_vmx_vmexit for VMFail

Ronald TschalÃr <ronald@xxxxxxxxxxxxx>
    ACPI / SBS: Fix GPE storm on recent MacBookPro's

Maciej Åenczykowski <maze@xxxxxxxxxx>
    usbip: fix vhci_hcd controller counting

Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
    ARM: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms

Julian Sax <jsbc@xxxxxx>
    HID: i2c-hid: override HID descriptors for certain devices

Brad Love <brad@xxxxxxxxxxxxxxxx>
    media: au0828: cannot kfree dev before usb disconnect

Nathan Fontenot <nfont@xxxxxxxxxxxxxxxxxx>
    powerpc/pseries: Remove prrn_work workqueue

Michal Simek <michal.simek@xxxxxxxxxx>
    serial: uartps: console_setup() can't be placed to init section

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
    netfilter: xt_cgroup: shrink size of v2 path

Chao Yu <yuchao0@xxxxxxxxxx>
    f2fs: fix to do sanity check with current segment number

Dinu-Razvan Chis-Serban <justcsdr@xxxxxxxxx>
    9p locks: add mount option for lock retry interval

Gertjan Halkes <gertjan@xxxxxxxxxx>
    9p: do not trust pdu content for stat item size

Siva Rebbagondla <siva.rebbagondla@xxxxxxxxxxxxxxxxxx>
    rsi: improve kernel thread handling to fix kernel panic

Robert Jarzmik <robert.jarzmik@xxxxxxx>
    gpio: pxa: handle corner case of unprobed device

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
    ext4: prohibit fstrim in norecovery mode

Steve French <stfrench@xxxxxxxxxxxxx>
    fix incorrect error code mapping for OBJECTID_NOT_FOUND

Nathan Chancellor <natechancellor@xxxxxxxxx>
    x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error

Lu Baolu <baolu.lu@xxxxxxxxxxxxxxx>
    iommu/vt-d: Check capability before disabling protected memory

YueHaibing <yuehaibing@xxxxxxxxxx>
    drm/nouveau/debugfs: Fix check of pm_runtime_get_sync failure

Matthew Whitehead <tedheadster@xxxxxxxxx>
    x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors

Aditya Pakki <pakki001@xxxxxxx>
    x86/hpet: Prevent potential NULL pointer dereference

Jianguo Chen <chenjianguo3@xxxxxxxxxx>
    irqchip/mbigen: Don't clear eventid when freeing an MSI

Changbin Du <changbin.du@xxxxxxxxx>
    perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test()

Changbin Du <changbin.du@xxxxxxxxx>
    perf tests: Fix memory leak by expr__find_other() in test__expr()

Changbin Du <changbin.du@xxxxxxxxx>
    perf tests: Fix a memory leak of cpu_map object in the openat_syscall_event_on_all_cpus test

Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
    perf evsel: Free evsel->counts in perf_evsel__exit()

Changbin Du <changbin.du@xxxxxxxxx>
    perf hist: Add missing map__put() in error case

Changbin Du <changbin.du@xxxxxxxxx>
    perf top: Fix error handling in cmd_top()

Changbin Du <changbin.du@xxxxxxxxx>
    perf build-id: Fix memory leak in print_sdt_events()

Changbin Du <changbin.du@xxxxxxxxx>
    perf config: Fix a memory leak in collect_config()

Changbin Du <changbin.du@xxxxxxxxx>
    perf config: Fix an error in the config template documentation

Changbin Du <changbin.du@xxxxxxxxx>
    perf list: Don't forget to drop the reference to the allocated thread_map

David Arcari <darcari@xxxxxxxxxx>
    tools/power turbostat: return the exit status of a command

Matteo Croce <mcroce@xxxxxxxxxx>
    x86/mm: Don't leak kernel addresses

Maurizio Lombardi <mlombard@xxxxxxxxxx>
    scsi: iscsi: flush running unbind operations when removing a session

Zhang Rui <rui.zhang@xxxxxxxxx>
    thermal/intel_powerclamp: fix truncated kthread name

Matthew Garrett <matthewgarrett@xxxxxxxxxx>
    thermal/int340x_thermal: fix mode setting

Matthew Garrett <matthewgarrett@xxxxxxxxxx>
    thermal/int340x_thermal: Add additional UUIDs

Phil Elwell <phil@xxxxxxxxxxxxxxx>
    thermal: bcm2835: Fix crash in bcm2835_thermal_debugfs

Luc Van Oostenryck <luc.vanoostenryck@xxxxxxxxx>
    thermal/intel_powerclamp: fix __percpu declaration of worker_data

Colin Ian King <colin.king@xxxxxxxxxxxxx>
    ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and declaration

Arnd Bergmann <arnd@xxxxxxxx>
    mmc: davinci: remove extraneous __init annotation

Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
    IB/mlx4: Fix race condition between catas error reset and aliasguid flows

Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
    auxdisplay: hd44780: Fix memory leak on ->remove()

Kangjie Lu <kjlu@xxxxxxx>
    ALSA: sb8: add a check for request_region

Kangjie Lu <kjlu@xxxxxxx>
    ALSA: echoaudio: add a check for ioremap_nocache

Lukas Czerner <lczerner@xxxxxxxxxx>
    ext4: report real fs size after failed resize

Lukas Czerner <lczerner@xxxxxxxxxx>
    ext4: add missing brelse() in add_new_gdb_meta_bg()

Stephane Eranian <eranian@xxxxxxxxxx>
    perf/core: Restore mmap record type correctly

Corentin Labbe <clabbe@xxxxxxxxxxxx>
    arc: hsdk_defconfig: Enable CONFIG_BLK_DEV_RAM

Eugeniy Paltsev <Eugeniy.Paltsev@xxxxxxxxxxxx>
    ARC: u-boot args: check that magic number is correct


-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arc/configs/hsdk_defconfig                    |   1 +
 arch/arc/kernel/head.S                             |   1 +
 arch/arc/kernel/setup.c                            |   8 +
 arch/arm/crypto/sha256-armv4.pl                    |   3 +-
 arch/arm/crypto/sha256-core.S_shipped              |   3 +-
 arch/arm/crypto/sha512-armv4.pl                    |   3 +-
 arch/arm/crypto/sha512-core.S_shipped              |   3 +-
 arch/arm/kernel/patch.c                            |   6 +-
 arch/arm/plat-samsung/Kconfig                      |   2 +-
 arch/powerpc/kernel/rtasd.c                        |  17 +-
 arch/x86/kernel/cpu/cyrix.c                        |  14 +-
 arch/x86/kernel/hpet.c                             |   2 +
 arch/x86/kernel/hw_breakpoint.c                    |   1 +
 arch/x86/kernel/mpparse.c                          |   4 +-
 arch/x86/kvm/vmx.c                                 | 173 ++++-
 drivers/acpi/ec.c                                  |  53 ++
 drivers/acpi/sbs.c                                 |   8 +-
 drivers/auxdisplay/hd44780.c                       |   2 +
 drivers/base/node.c                                |   7 +-
 drivers/crypto/axis/artpec6_crypto.c               |  28 +-
 drivers/gpio/gpio-pxa.c                            |   6 +
 drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_cik.c   |  52 +-
 drivers/gpu/drm/nouveau/include/nvkm/subdev/volt.h |   1 +
 drivers/gpu/drm/nouveau/nouveau_debugfs.c          |   2 +-
 drivers/gpu/drm/nouveau/nvkm/engine/device/base.c  |   2 +-
 drivers/gpu/drm/nouveau/nvkm/subdev/volt/Kbuild    |   1 +
 drivers/gpu/drm/nouveau/nvkm/subdev/volt/gf117.c   |  60 ++
 drivers/gpu/drm/panel/panel-innolux-p079zca.c      |  11 +-
 drivers/hid/i2c-hid/Makefile                       |   3 +
 drivers/hid/i2c-hid/{i2c-hid.c => i2c-hid-core.c}  |  56 +-
 drivers/hid/i2c-hid/i2c-hid-dmi-quirks.c           | 376 ++++++++++
 drivers/hid/i2c-hid/i2c-hid.h                      |  20 +
 drivers/hwtracing/coresight/coresight-cpu-debug.c  |   4 +
 drivers/infiniband/hw/mlx4/alias_GUID.c            |   2 +-
 drivers/iommu/dmar.c                               |   2 +-
 drivers/iommu/intel-iommu.c                        |   3 +
 drivers/irqchip/irq-mbigen.c                       |   3 +
 drivers/md/dm-crypt.c                              |  10 +-
 drivers/md/dm-integrity.c                          |   4 +-
 drivers/media/usb/au0828/au0828-core.c             |   1 -
 drivers/misc/lkdtm.h                               |   2 +
 drivers/misc/lkdtm_core.c                          |   2 +
 drivers/misc/lkdtm_perms.c                         |  36 +-
 drivers/mmc/host/davinci_mmc.c                     |   2 +-
 drivers/net/ethernet/netronome/nfp/bpf/verifier.c  |   9 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |   6 +-
 drivers/net/wireless/rsi/rsi_common.h              |   1 -
 drivers/scsi/scsi_transport_iscsi.c                |   2 +
 drivers/soc/tegra/pmc.c                            |   8 +-
 drivers/thermal/broadcom/bcm2835_thermal.c         |   9 +-
 drivers/thermal/int340x_thermal/int3400_thermal.c  |  21 +-
 drivers/thermal/intel_powerclamp.c                 |   4 +-
 drivers/tty/serial/xilinx_uartps.c                 |   2 +-
 fs/9p/v9fs.c                                       |  21 +
 fs/9p/v9fs.h                                       |   1 +
 fs/9p/vfs_dir.c                                    |   8 +-
 fs/9p/vfs_file.c                                   |   6 +-
 fs/cifs/inode.c                                    |  67 +-
 fs/cifs/smb2maperror.c                             |   3 +-
 fs/ext4/ioctl.c                                    |   7 +
 fs/ext4/resize.c                                   |  17 +-
 fs/f2fs/super.c                                    |  34 +-
 include/linux/atalk.h                              |   2 +-
 include/linux/bpf_verifier.h                       |  29 +-
 include/linux/compiler.h                           |   5 +-
 include/linux/filter.h                             |  10 +-
 include/linux/swap.h                               |   4 +-
 include/uapi/linux/netfilter/xt_cgroup.h           |  16 +
 kernel/bpf/core.c                                  |  51 +-
 kernel/bpf/inode.c                                 |  32 +-
 kernel/bpf/map_in_map.c                            |  17 +-
 kernel/bpf/verifier.c                              | 804 +++++++++++++++------
 kernel/events/core.c                               |   2 +
 kernel/hung_task.c                                 |  30 +-
 lib/div64.c                                        |   4 +-
 net/9p/protocol.c                                  |   3 +-
 net/appletalk/atalk_proc.c                         |   2 +-
 net/appletalk/ddp.c                                |  37 +-
 net/appletalk/sysctl_net_atalk.c                   |   5 +-
 net/netfilter/xt_cgroup.c                          |  72 ++
 sound/drivers/opl3/opl3_voice.h                    |   2 +-
 sound/isa/sb/sb8.c                                 |   4 +
 sound/pci/echoaudio/echoaudio.c                    |   5 +
 tools/include/linux/bitops.h                       |   7 +-
 tools/include/linux/bits.h                         |  26 +
 tools/perf/Documentation/perf-config.txt           |   2 +-
 tools/perf/builtin-top.c                           |   5 +-
 tools/perf/check-headers.sh                        |   1 +
 tools/perf/tests/evsel-tp-sched.c                  |   1 +
 tools/perf/tests/expr.c                            |   5 +-
 tools/perf/tests/openat-syscall-all-cpus.c         |   4 +-
 tools/perf/util/build-id.c                         |   1 +
 tools/perf/util/config.c                           |   3 +-
 tools/perf/util/evsel.c                            |   1 +
 tools/perf/util/hist.c                             |   4 +-
 tools/perf/util/parse-events.c                     |   2 +
 tools/power/x86/turbostat/turbostat.c              |   3 +
 tools/testing/selftests/bpf/test_verifier.c        |   6 +
 tools/usb/usbip/libsrc/vhci_driver.c               |   2 +-
 100 files changed, 1939 insertions(+), 500 deletions(-)