4.4.183-stable review

This is the start of the stable review cycle for the 4.4.183 release. There are 84 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat 22 Jun 2019 05:42:15 PM UTC. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.183-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.4.183-rc1

Alexander Lochmann <[email protected]>
Abort file_remove_privs() for non-reg. files

Andrea Arcangeli <[email protected]>
coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping

Greg Kroah-Hartman <[email protected]>
Revert "crypto: crypto4xx - properly set IV after de- and encrypt"

Jason Yan <[email protected]>
scsi: libsas: delete sas port if expander discover failed

Varun Prakash <[email protected]>
scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()

Yoshihiro Shimoda <[email protected]>
net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs

Paul Mackerras <[email protected]>
KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list

Randy Dunlap <[email protected]>
ia64: fix build errors by exporting paddr_to_nid()

Sahitya Tummala <[email protected]>

    configfs: Fix use-after-free when accessing sd->s_dentry

Yingjoe Chen <[email protected]>
i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr

Kees Cook <[email protected]>
net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()

Randy Dunlap <[email protected]>
gpio: fix gpio-adp5588 build errors

Peter Zijlstra <[email protected]>

    perf/ring_buffer: Add ordering to rb->nest increment

Yabin Cui <[email protected]>
perf/ring_buffer: Fix exposing a temporarily decreased data_head

Frank van der Linden <[email protected]>
x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor

Dan Carpenter <[email protected]>
mISDN: make sure device name is NUL terminated

John Paul Adrian Glaubitz <[email protected]>
sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg

Eric Dumazet <[email protected]>
neigh: fix use-after-free read in pneigh_get_next

Jeremy Sowden <[email protected]>
lapb: fixed leak of control-blocks.

Eric Dumazet <[email protected]>
ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero

Ivan Vecera <[email protected]>
be2net: Fix number of Rx queues used for flow hashing

Eric Dumazet <[email protected]>
ax25: fix inconsistent lock state in ax25_destroy_timer

Daniele Palmas <[email protected]>

    USB: serial: option: add Telit 0x1260 and 0x1261 compositions

Jörgen Storvist <[email protected]>
USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode

Chris Packham <[email protected]>
USB: serial: pl2303: add Allied Telesis VT-Kit3

Kai-Heng Feng <[email protected]>
USB: usb-storage: Add new ID to ums-realtek

Marco Zatta <[email protected]>
USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.

Murray McAllister <[email protected]>
drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()

Murray McAllister <[email protected]>
drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read

Christian Borntraeger <[email protected]>
KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION

Paolo Bonzini <[email protected]>
KVM: x86/pmu: do not mask the value that is written to fixed PMUs

Bernd Eckstein <[email protected]>
usbnet: ipheth: fix racing condition

Colin Ian King <[email protected]>
scsi: bnx2fc: fix incorrect cast to u64 on shift operation

James Smart <[email protected]>
scsi: lpfc: add check for loss of ndlp when sending RRQ

Young Xiao <[email protected]>
Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var

S.j. Wang <[email protected]>
ASoC: cs42xx8: Add regcache mask dirty

Tejun Heo <[email protected]>
cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()

Coly Li <[email protected]>
bcache: fix stack corruption by PRECEDING_KEY()

Russell King <[email protected]>
i2c: acorn: fix i2c warning

Jann Horn <[email protected]>
ptrace: restore smp_rmb() in __ptrace_may_access()

Eric W. Biederman <[email protected]>
signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO

Wengang Wang <[email protected]>
fs/ocfs2: fix race in ocfs2_dentry_attach_lock()

Shakeel Butt <[email protected]>
mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node

Hans de Goede <[email protected]>
libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk

Takashi Iwai <[email protected]>
ALSA: seq: Cover unsubscribe_port() in list_mutex

Greg Kroah-Hartman <[email protected]>
Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections"

ZhangXiaoxu <[email protected]>
futex: Fix futex lock the wrong page

Marek Szyprowski <[email protected]>
ARM: exynos: Fix undefined instruction during Exynos5422 resume

Phong Hoang <[email protected]>
pwm: Fix deadlock warning when removing PWM device

Krzysztof Kozlowski <[email protected]>
ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa

Christoph Vogtländer <[email protected]>
pwm: tiehrpwm: Update shadow register for disabling PWMs

Andy Shevchenko <[email protected]>
dmaengine: idma64: Use actual device for DMA transfers

Tony Lindgren <[email protected]>
gpio: gpio-omap: add check for off wake capable gpios

Kangjie Lu <[email protected]>
PCI: xilinx: Check for __get_free_pages() failure

Kangjie Lu <[email protected]>
video: imsttfb: fix potential NULL pointer dereferences

Kangjie Lu <[email protected]>
video: hgafb: fix potential NULL pointer dereference

Kangjie Lu <[email protected]>
PCI: rcar: Fix a potential NULL pointer dereference

Tyrel Datwyler <[email protected]>
PCI: rpadlpar: Fix leaked device_node references in add/remove paths

Andrey Smirnov <[email protected]>
ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA

Andrey Smirnov <[email protected]>
ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA

Andrey Smirnov <[email protected]>
ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA

Douglas Anderson <[email protected]>
clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288

Nathan Chancellor <[email protected]>
soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher

Enrico Granata <[email protected]>
platform/chrome: cros_ec_proto: check for NULL transfer function

Wenwen Wang <[email protected]>
x86/PCI: Fix PCI IRQ routing table memory leak

J. Bruce Fields <[email protected]>
nfsd: allow fh_want_write to be called twice

Kirill Smelkov <[email protected]>
fuse: retrieve: cap requested size to negotiated max_write

Jorge Ramirez-Ortiz <[email protected]>
nvmem: core: fix read buffer in place

Takashi Iwai <[email protected]>
ALSA: hda - Register irq handler after the chip initialization

Lu Baolu <[email protected]>
iommu/vt-d: Set intel_iommu_gfx_mapped correctly

Chao Yu <[email protected]>
f2fs: fix to do sanity check on valid block count of segment

Chao Yu <[email protected]>
f2fs: fix to avoid panic in do_recover_data()

Miroslav Lichvar <[email protected]>
ntp: Allow TAI-UTC offset to be set to zero

Matt Redfearn <[email protected]>
drm/bridge: adv7511: Fix low refresh rate selection

Stephane Eranian <[email protected]>
perf/x86/intel: Allow PEBS multi-entry in watermark mode

Tony Lindgren <[email protected]>
mfd: twl6040: Fix device init errors for ACCCTL register

Binbin Wu <[email protected]>
mfd: intel-lpss: Set the device in reset state when init

Cyrill Gorcunov <[email protected]>
kernel/sys.c: prctl: fix false positive in validate_prctl_map()

Yue Hu <[email protected]>
mm/cma_debug.c: fix the break condition in cma_maxchunk_get()

Yue Hu <[email protected]>
mm/cma.c: fix crash on CMA allocation if bitmap allocation fails

Mike Kravetz <[email protected]>
hugetlbfs: on restore reserve error path retain subpool reservation

Li Rongqing <[email protected]>
ipc: prevent lockup on alloc_msg and free_msg

Christian Brauner <[email protected]>
sysctl: return -EINVAL if val violates minmax

Hou Tao <[email protected]>
fs/fat/file.c: issue flush after the writeback of FAT

-------------

Diffstat:

 Makefile                                       |  4 +--
 arch/arm/boot/dts/exynos5420-arndale-octa.dts  |  2 ++
 arch/arm/boot/dts/imx6qdl.dtsi                 |  2 +-
 arch/arm/boot/dts/imx6sl.dtsi                  |  2 +-
 arch/arm/boot/dts/imx6sx.dtsi                  |  2 +-
 arch/arm/mach-exynos/suspend.c                 | 19 ++++++++++++++
 arch/ia64/mm/numa.c                            |  1 +
 arch/powerpc/include/asm/kvm_host.h            |  1 +
 arch/powerpc/kvm/book3s.c                      |  1 +
 arch/powerpc/kvm/book3s_rtas.c                 | 14 +++++------
 arch/s390/kvm/kvm-s390.c                       | 35 +++++++++++++++-----------
 arch/x86/kernel/cpu/amd.c                      |  7 ++++--
 arch/x86/kernel/cpu/perf_event_intel.c         |  2 +-
 arch/x86/kvm/pmu_intel.c                       | 13 ++++++----
 arch/x86/pci/irq.c                             | 10 ++++++--
 drivers/android/binder.c                       |  6 +++++
 drivers/ata/libata-core.c                      |  9 ++++---
 drivers/clk/rockchip/clk-rk3288.c              | 11 ++++++++
 drivers/crypto/amcc/crypto4xx_alg.c            |  3 +--
 drivers/crypto/amcc/crypto4xx_core.c           |  9 -------
 drivers/dma/idma64.c                           |  6 +++--
 drivers/dma/idma64.h                           |  2 ++
 drivers/gpio/Kconfig                           |  1 +
 drivers/gpio/gpio-omap.c                       | 25 ++++++++++++------
 drivers/gpu/drm/i2c/adv7511.c                  |  6 ++---
 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c        |  7 +++++-
 drivers/i2c/busses/i2c-acorn.c                 |  1 +
 drivers/i2c/i2c-dev.c                          |  1 +
 drivers/infiniband/hw/mlx4/main.c              |  3 +++
 drivers/iommu/intel-iommu.c                    |  7 +++---
 drivers/isdn/mISDN/socket.c                    |  5 ++--
 drivers/md/bcache/bset.c                       | 16 +++++++++---
 drivers/md/bcache/bset.h                       | 34 ++++++++++++++-----------
 drivers/mfd/intel-lpss.c                       |  3 +++
 drivers/mfd/twl6040.c                          | 13 +++++++++-
 drivers/misc/kgdbts.c                          |  4 +--
 drivers/net/ethernet/dec/tulip/de4x5.c         |  1 -
 drivers/net/ethernet/emulex/benet/be_ethtool.c |  2 +-
 drivers/net/ethernet/renesas/sh_eth.c          |  4 +++
 drivers/net/usb/ipheth.c                       |  3 ++-
 drivers/nvmem/core.c                           | 15 +++++++----
 drivers/pci/host/pcie-rcar.c                   |  4 +++
 drivers/pci/host/pcie-xilinx.c                 | 12 +++++++--
 drivers/pci/hotplug/rpadlpar_core.c            |  4 +++
 drivers/platform/chrome/cros_ec_proto.c        | 11 ++++++++
 drivers/pwm/core.c                             | 10 ++++----
 drivers/pwm/pwm-tiehrpwm.c                     |  2 ++
 drivers/pwm/sysfs.c                            | 14 +----------
 drivers/scsi/bnx2fc/bnx2fc_hwi.c               |  2 +-
 drivers/scsi/cxgbi/libcxgbi.c                  |  4 +++
 drivers/scsi/libsas/sas_expander.c             |  2 ++
 drivers/scsi/lpfc/lpfc_els.c                   |  5 +++-
 drivers/soc/mediatek/mtk-pmic-wrap.c           |  2 +-
 drivers/spi/spi-pxa2xx.c                       |  7 +-----
 drivers/tty/serial/8250/8250_dw.c              |  4 +--
 drivers/tty/serial/sunhv.c                     |  2 +-
 drivers/usb/core/quirks.c                      |  3 +++
 drivers/usb/serial/option.c                    |  6 +++++
 drivers/usb/serial/pl2303.c                    |  1 +
 drivers/usb/serial/pl2303.h                    |  3 +++
 drivers/usb/storage/unusual_realtek.h          |  5 ++++
 drivers/video/fbdev/hgafb.c                    |  2 ++
 drivers/video/fbdev/imsttfb.c                  |  5 ++++
 fs/configfs/dir.c                              | 14 +++++------
 fs/f2fs/recovery.c                             | 10 +++++++-
 fs/f2fs/segment.h                              |  3 +--
 fs/fat/file.c                                  | 11 +++++---
 fs/fuse/dev.c                                  |  2 +-
 fs/inode.c                                     |  9 +++++--
 fs/nfsd/vfs.h                                  |  5 +++-
 fs/ocfs2/dcache.c                              | 12 +++++++++
 fs/proc/task_mmu.c                             | 18 +++++++++++++
 fs/userfaultfd.c                               |  7 ++++++
 include/linux/cgroup.h                         | 10 ++++++--
 include/linux/mm.h                             | 21 ++++++++++++++++
 include/linux/pwm.h                            |  5 ----
 include/net/bluetooth/hci_core.h               |  3 ---
 ipc/mqueue.c                                   | 10 ++++++--
 ipc/msgutil.c                                  |  6 +++++
 kernel/cred.c                                  |  9 +++++++
 kernel/events/ring_buffer.c                    | 33 +++++++++++++++++++++---
 kernel/futex.c                                 |  4 +--
 kernel/ptrace.c                                | 20 +++++++++++++--
 kernel/sys.c                                   |  2 +-
 kernel/sysctl.c                                |  6 +++--
 kernel/time/ntp.c                              |  2 +-
 mm/cma.c                                       |  4 ++-
 mm/cma_debug.c                                 |  2 +-
 mm/hugetlb.c                                   | 21 ++++++++++++----
 mm/list_lru.c                                  |  2 +-
 mm/mmap.c                                      |  7 +++++-
 net/ax25/ax25_route.c                          |  2 ++
 net/bluetooth/hci_conn.c                       |  8 ------
 net/core/neighbour.c                           |  7 ++++++
 net/ipv6/ip6_flowlabel.c                       |  7 +++---
 net/lapb/lapb_iface.c                          |  1 +
 sound/core/seq/seq_ports.c                     |  2 +-
 sound/pci/hda/hda_intel.c                      |  6 ++---
 sound/soc/codecs/cs42xx8.c                     |  1 +
 99 files changed, 518 insertions(+), 196 deletions(-)