This is the start of the stable review cycle for the 4.4.22 release. There are 118 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat Sep 24 17:29:17 UTC 2016. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.22-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.4.22-rc1 Al Viro <viro@xxxxxxxxxxxxxxxxxx> ia64: copy_from_user() should zero the destination on access_ok() failure Thomas Gleixner <tglx@xxxxxxxxxxxxx> genirq/msi: Fix broken debug output Al Viro <viro@xxxxxxxxxxxxxxxxxx> ppc32: fix copy_from_user() Al Viro <viro@xxxxxxxxxxxxxxxxxx> sparc32: fix copy_from_user() Al Viro <viro@xxxxxxxxxxxxxxxxxx> mn10300: copy_from_user() should zero on access_ok() failure... Al Viro <viro@xxxxxxxxxxxxxxxxxx> nios2: copy_from_user() should zero the tail of destination Al Viro <viro@xxxxxxxxxxxxxxxxxx> openrisc: fix copy_from_user() Al Viro <viro@xxxxxxxxxxxxxxxxxx> parisc: fix copy_from_user() Al Viro <viro@xxxxxxxxxxxxxxxxxx> metag: copy_from_user() should zero the destination on access_ok() failure Al Viro <viro@xxxxxxxxxxxxxxxxxx> alpha: fix copy_from_user() Al Viro <viro@xxxxxxxxxxxxxxxxxx> asm-generic: make copy_from_user() zero the destination properly Al Viro <viro@xxxxxxxxxxxxxxxxxx> mips: copy_from_user() must zero the destination on access_ok() failure Al Viro <viro@xxxxxxxxxxxxxxxxxx> hexagon: fix strncpy_from_user() error return Al Viro <viro@xxxxxxxxxxxxxxxxxx> sh: fix copy_from_user() Al Viro <viro@xxxxxxxxxxxxxxxxxx> score: fix copy_from_user() and friends Al Viro <viro@xxxxxxxxxxxxxxxxxx> blackfin: fix copy_from_user() Al Viro <viro@xxxxxxxxxxxxxxxxxx> cris: buggered copy_from_user/copy_to_user/clear_user Al Viro <viro@xxxxxxxxxxxxxxxxxx> frv: fix clear_user() Al Viro <viro@xxxxxxxxxxxxxxxxxx> asm-generic: make get_user() clear the destination on errors Vineet Gupta <Vineet.Gupta1@xxxxxxxxxxxx> ARC: uaccess: get_user to zero out dest in cause of fault Al Viro <viro@xxxxxxxxxxxxxxxxxx> s390: get_user() should zero on failure Al Viro <viro@xxxxxxxxxxxxxxxxxx> score: fix __get_user/get_user Al Viro <viro@xxxxxxxxxxxxxxxxxx> nios2: fix __get_user() Al Viro <viro@xxxxxxxxxxxxxxxxxx> sh64: failing __get_user() should zero Al Viro <viro@xxxxxxxxxxxxxxxxxx> m32r: fix __get_user() Al Viro <viro@xxxxxxxxxxxxxxxxxx> mn10300: failing __get_user() and get_user() should zero Al Viro <viro@xxxxxxxxxxxxxxxxxx> fix minor infoleak in get_user_ex() Al Viro <viro@xxxxxxxxxxxxxxxxxx> microblaze: fix copy_from_user() Al Viro <viro@xxxxxxxxxxxxxxxxxx> avr32: fix copy_from_user() Al Viro <viro@xxxxxxxxxxxxxxxxxx> microblaze: fix __get_user() Al Viro <viro@xxxxxxxxxxxxxxxxxx> fix iov_iter_fault_in_readable() Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx> irqchip/atmel-aic: Fix potential deadlock in ->xlate() Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx> genirq: Provide irq_gc_{lock_irqsave,unlock_irqrestore}() helpers Kristian H. Kristensen <hoegsberg@xxxxxxxxx> drm: Only use compat ioctl for addfb2 on X86/IA64 Jan Leupold <leupold@xxxxxxxxxxxxxxxxxxxxx> drm: atmel-hlcdc: Fix vertical scaling Arnd Bergmann <arnd@xxxxxxxx> net: simplify napi_synchronize() to avoid warnings Arnd Bergmann <arnd@xxxxxxxx> kconfig: tinyconfig: provide whole choice blocks to avoid warnings Arnd Bergmann <arnd@xxxxxxxx> soc: qcom/spm: shut up uninitialized variable warning Arnd Bergmann <arnd@xxxxxxxx> pinctrl: at91-pio4: use %pr format string for resource Arnd Bergmann <arnd@xxxxxxxx> mmc: dw_mmc: use resource_size_t to store physical address Mika Kuoppala <mika.kuoppala@xxxxxxxxxxxxxxx> drm/i915: Avoid pointer arithmetic in calculating plane surface offset Mike Danese <mikedanese@xxxxxxxxxx> mpssd: fix buffer overflow warning Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> gma500: remove annoying deprecation warning Wei Yongjun <weiyongjun1@xxxxxxxxxx> ipv6: addrconf: fix dev refcont leak when DAD failed Balbir Singh <bsingharora@xxxxxxxxx> sched/core: Fix a race between try_to_wake_up() and a woken up task Johannes Berg <johannes.berg@xxxxxxxxx> Revert "wext: Fix 32 bit iwpriv compatibility issue with 64 bit Kernel" Felix Fietkau <nbd@xxxxxxxx> ath9k: fix using sta->drv_priv before initializing it Guoqing Jiang <gqjiang@xxxxxxxx> md-cluster: make md-cluster also can work when compiled into kernel Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> xhci: fix null pointer dereference in stop command timeout function Miklos Szeredi <mszeredi@xxxxxxxxxx> fuse: direct-io: don't dirty ITER_BVEC pages Chris Mason <clm@xxxxxx> Btrfs: remove root_log_ctx from ctx list before btrfs_sync_log returns Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx> crypto: cryptd - initialize child shash_desc on import Will Deacon <will.deacon@xxxxxxx> arm64: spinlocks: implement smp_mb__before_spinlock() as smp_mb() Icenowy Zheng <icenowy@xxxxxxxx> pinctrl: sunxi: fix uart1 CTS/RTS pins at PG on A23/A33 James Hartley <james.hartley@xxxxxxxxxx> pinctrl: pistachio: fix mfio pll_lock pinmux Mikulas Patocka <mpatocka@xxxxxxxxxx> dm crypt: fix error with too large bios Mikulas Patocka <mpatocka@xxxxxxxxxx> dm log writes: move IO accounting earlier to fix error path Vladimir Zapolskiy <vz@xxxxxxxxx> dm log writes: fix check of kthread_run() return value Pawel Moll <pawel.moll@xxxxxxx> bus: arm-ccn: Fix XP watchpoint settings bitmask Pawel Moll <pawel.moll@xxxxxxx> bus: arm-ccn: Do not attempt to configure XPs for cycle counter Pawel Moll <pawel.moll@xxxxxxx> bus: arm-ccn: Fix PMU handling of MN Lee Jones <lee.jones@xxxxxxxxxx> ARM: dts: STiH407-family: Provide interconnect clock for consumption in ST SDHCI Johan Hovold <johan@xxxxxxxxxx> ARM: dts: overo: fix gpmc nand on boards with ethernet Johan Hovold <johan@xxxxxxxxxx> ARM: dts: overo: fix gpmc nand cs0 range Fabio Estevam <fabio.estevam@xxxxxxx> ARM: dts: imx6qdl: Fix SPDIF regression Sebastian Reichel <sre@xxxxxxxxxx> ARM: OMAP3: hwmod data: Add sysc information for DSI Simon Baatz <gmbnomis@xxxxxxxxx> ARM: kirkwood: ib62x0: fix size of u-boot environment partition Anson Huang <Anson.Huang@xxxxxxx> ARM: imx6: add missing BM_CLPCR_BYPASS_PMIC_READY setting for imx6sx Peter Chen <peter.chen@xxxxxxx> ARM: imx6: add missing BM_CLPCR_BYP_MMDC_CH0_LPM_HS setting for imx6ul Keerthy <j-keerthy@xxxxxx> ARM: AM43XX: hwmod: Fix RSTST register offset for pruss Zefan Li <lizefan@xxxxxxxxxx> cpuset: make sure new tasks conform to the current config of the cpuset David Daney <david.daney@xxxxxxxxxx> net: thunderx: Fix OOPs with ethtool --register-dump Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx> cxl: use pcibios_free_controller_deferred() when removing vPHBs Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: change bInterval default to 10 ms Lee Jones <lee.jones@xxxxxxxxxx> ARM: dts: STiH410: Handle interconnect clock required by EHCI/OHCI (USB) Clemens Gruber <clemens.gruber@xxxxxxxxxxxx> usb: chipidea: udc: fix NULL ptr dereference in isr_setup_status_phase Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx> usb: renesas_usbhs: fix clearing the {BRDY,BEMP}STS condition Daniele Palmas <dnlplm@xxxxxxxxx> USB: serial: simple: add support for another Infineon flashloader Jimi Damon <jdamon@xxxxxxxxxxx> serial: 8250: added acces i/o products quad and octal serial cards Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> serial: 8250_mid: fix divide error bug if baud rate is 0 Colin Ian King <colin.king@xxxxxxxxxxxxx> iio: ensure ret is initialized to zero before entering do loop Gregor Boirie <gregor.boirie@xxxxxxxxxx> iio:core: fix IIO_VAL_FRACTIONAL sign handling Linus Walleij <linus.walleij@xxxxxxxxxx> iio: accel: kxsd9: Fix scaling bug Kweh, Hock Leong <hock.leong.kweh@xxxxxxxxx> iio: fix pressure data output unit in hid-sensor-attributes Olof Johansson <olof@xxxxxxxxx> iio: accel: bmc150: reset chip at init time Anders Darander <anders@xxxxxxxxxxxxxx> iio: adc: at91: unbreak channel adc channel 3 Lars-Peter Clausen <lars@xxxxxxxxxx> iio: ad799x: Fix buffered capture for ad7991/ad7995/ad7999 Vignesh R <vigneshr@xxxxxx> iio: adc: ti_am335x_adc: Increase timeout value waiting for ADC sample Vignesh R <vigneshr@xxxxxx> iio: adc: ti_am335x_adc: Protect FIFO1 from concurrent access Caesar Wang <wxt@xxxxxxxxxxxxxx> iio: adc: rockchip_saradc: reset saradc controller before programming it Alison Schofield <amsfield22@xxxxxxxxx> iio: proximity: as3935: set up buffer timestamps for non-zero values Linus Walleij <linus.walleij@xxxxxxxxxx> iio: accel: kxsd9: Fix raw read return Suzuki K Poulose <suzuki.poulose@xxxxxxx> kvm-arm: Unmap shadow pagetables properly Emanuel Czirai <icanrealizeum@xxxxxxxxx> x86/AMD: Apply erratum 665 on machines without a BIOS fix Steven Rostedt <rostedt@xxxxxxxxxxx> x86/paravirt: Do not trace _paravirt_ident_*() functions Vineet Gupta <vgupta@xxxxxxxxxxxx> ARC: mm: fix build breakage with STRICT_MM_TYPECHECKS Jason Gunthorpe <jgunthorpe@xxxxxxxxxxxxxxxxxxxx> IB/uverbs: Fix race between uverbs_close and remove_one Mike Snitzer <snitzer@xxxxxxxxxx> dm flakey: fix reads to be issued if drop_writes configured Mateusz Guzik <mguzik@xxxxxxxxxx> audit: fix exe_file access in audit_exe_compare Mateusz Guzik <mguzik@xxxxxxxxxx> mm: introduce get_task_exe_file Thiago Jung Bauermann <bauerman@xxxxxxxxxxxxxxxxxx> kexec: fix double-free when failing to relocate the purgatory Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4.1: Fix the CREATE_SESSION slot number accounting Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> pNFS: Ensure LAYOUTGET and LAYOUTRETURN are properly serialised Chuck Lever <chuck.lever@xxxxxxxxxx> nfsd: Close race between nfsd4_release_lockowner and nfsd4_lock Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4.x: Fix a refcount leak in nfs_callback_up_net Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> pNFS: The client must not do I/O to the DS if it's lease has expired Tejun Heo <tj@xxxxxxxxxx> kernfs: don't depend on d_find_any_alias() when generating notifications Paul Mackerras <paulus@xxxxxxxxxx> powerpc/mm: Don't alias user region to other regions below PAGE_OFFSET Mukesh Ojha <mukesh02@xxxxxxxxxxxxxxxxxx> powerpc/powernv : Drop reference added by kset_find_obj() Nicholas Piggin <npiggin@xxxxxxxxx> powerpc/tm: do not use r13 for tabort_syscall Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx> tipc: move linearization of buffers to generic code Wenwei Tao <ww.tao0320@xxxxxxxxx> lightnvm: put bio before return Eric Biggers <ebiggers@xxxxxxxxxx> fscrypto: require write access to mount to set encryption policy Paolo Bonzini <pbonzini@xxxxxxxxxx> Revert "KVM: x86: fix missed hardware breakpoints" James Hogan <james.hogan@xxxxxxxxxx> MIPS: KVM: Check for pfn noslot case Chen-Yu Tsai <wens@xxxxxxxx> clocksource/drivers/sun4i: Clear interrupts after stopping timer in probe function Eric Biggers <ebiggers@xxxxxxxxxx> fscrypto: add authorization check for setting encryption policy Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> ext4: use __GFP_NOFAIL in ext4_free_blocks() ------------- Diffstat: .../bindings/iio/adc/rockchip-saradc.txt | 7 ++ Documentation/mic/mpssd/mpssd.c | 4 +- Makefile | 4 +- arch/alpha/include/asm/uaccess.h | 19 ++- arch/arc/include/asm/pgtable.h | 3 +- arch/arc/include/asm/uaccess.h | 11 +- arch/arm/boot/dts/imx6qdl.dtsi | 2 +- arch/arm/boot/dts/kirkwood-ib62x0.dts | 2 +- arch/arm/boot/dts/omap3-overo-base.dtsi | 4 +- .../boot/dts/omap3-overo-chestnut43-common.dtsi | 2 - arch/arm/boot/dts/omap3-overo-tobi-common.dtsi | 2 - arch/arm/boot/dts/omap3-overo-tobiduo-common.dtsi | 3 - arch/arm/boot/dts/stih407-family.dtsi | 10 +- arch/arm/boot/dts/stih410.dtsi | 12 +- arch/arm/kvm/arm.c | 2 - arch/arm/kvm/mmu.c | 1 + arch/arm/mach-imx/pm-imx6.c | 4 +- .../mach-omap2/omap_hwmod_33xx_43xx_ipblock_data.c | 1 + arch/arm/mach-omap2/omap_hwmod_3xxx_data.c | 12 ++ arch/arm/mach-omap2/prcm43xx.h | 1 + arch/arm64/include/asm/spinlock.h | 10 ++ arch/avr32/include/asm/uaccess.h | 11 +- arch/avr32/kernel/avr32_ksyms.c | 2 +- arch/avr32/lib/copy_user.S | 4 +- arch/blackfin/include/asm/uaccess.h | 9 +- arch/cris/include/asm/uaccess.h | 71 +++++------ arch/frv/include/asm/uaccess.h | 12 +- arch/hexagon/include/asm/uaccess.h | 3 +- arch/ia64/include/asm/uaccess.h | 20 ++- arch/m32r/include/asm/uaccess.h | 2 +- arch/metag/include/asm/uaccess.h | 3 +- arch/microblaze/include/asm/uaccess.h | 11 +- arch/mips/include/asm/uaccess.h | 3 + arch/mips/kvm/tlb.c | 2 +- arch/mn10300/include/asm/uaccess.h | 1 + arch/mn10300/lib/usercopy.c | 4 +- arch/nios2/include/asm/uaccess.h | 13 +- arch/openrisc/include/asm/uaccess.h | 35 ++---- arch/parisc/include/asm/uaccess.h | 6 +- arch/powerpc/include/asm/uaccess.h | 21 +--- arch/powerpc/kernel/entry_64.S | 12 +- arch/powerpc/mm/slb_low.S | 7 +- arch/powerpc/platforms/powernv/opal-dump.c | 7 +- arch/powerpc/platforms/powernv/opal-elog.c | 7 +- arch/s390/include/asm/uaccess.h | 8 +- arch/score/include/asm/uaccess.h | 46 +++---- arch/sh/include/asm/uaccess.h | 5 +- arch/sh/include/asm/uaccess_64.h | 1 + arch/sparc/include/asm/uaccess_32.h | 4 +- arch/x86/configs/tiny.config | 2 + arch/x86/include/asm/uaccess.h | 6 +- arch/x86/kernel/cpu/amd.c | 12 ++ arch/x86/kernel/paravirt.c | 4 +- arch/x86/kvm/x86.c | 1 - crypto/cryptd.c | 9 +- drivers/bus/arm-ccn.c | 27 +++- drivers/clocksource/sun4i_timer.c | 9 +- drivers/gpu/drm/atmel-hlcdc/atmel_hlcdc_plane.c | 10 +- drivers/gpu/drm/drm_ioc32.c | 4 + drivers/gpu/drm/gma500/cdv_intel_dp.c | 2 +- drivers/gpu/drm/i915/intel_display.c | 16 +-- drivers/gpu/drm/i915/intel_drv.h | 6 +- drivers/gpu/drm/i915/intel_sprite.c | 2 +- drivers/iio/accel/bmc150-accel-core.c | 11 ++ drivers/iio/accel/kxsd9.c | 2 + drivers/iio/adc/Kconfig | 1 + drivers/iio/adc/ad799x.c | 1 + drivers/iio/adc/at91_adc.c | 4 +- drivers/iio/adc/rockchip_saradc.c | 30 +++++ drivers/iio/adc/ti_am335x_adc.c | 16 ++- .../iio/common/hid-sensors/hid-sensor-attributes.c | 4 +- drivers/iio/industrialio-buffer.c | 4 +- drivers/iio/industrialio-core.c | 5 +- drivers/iio/proximity/as3935.c | 2 +- drivers/infiniband/core/uverbs.h | 1 + drivers/infiniband/core/uverbs_main.c | 37 ++++-- drivers/irqchip/irq-atmel-aic.c | 5 +- drivers/irqchip/irq-atmel-aic5.c | 5 +- drivers/lightnvm/rrpc.c | 4 +- drivers/md/dm-crypt.c | 7 ++ drivers/md/dm-flakey.c | 27 ++-- drivers/md/dm-log-writes.c | 6 +- drivers/md/md.c | 12 +- drivers/misc/cxl/vphb.c | 10 +- drivers/mmc/host/dw_mmc-pltfm.c | 2 +- drivers/mmc/host/dw_mmc.c | 2 +- drivers/net/ethernet/cavium/thunder/nic_reg.h | 1 - .../net/ethernet/cavium/thunder/nicvf_ethtool.c | 5 +- drivers/net/wireless/ath/ath9k/main.c | 8 +- drivers/pci/host-bridge.c | 1 + drivers/pinctrl/pinctrl-at91-pio4.c | 2 +- drivers/pinctrl/pinctrl-pistachio.c | 12 +- drivers/pinctrl/sunxi/pinctrl-sun8i-a23.c | 4 +- drivers/pinctrl/sunxi/pinctrl-sun8i-a33.c | 4 +- drivers/soc/qcom/spm.c | 2 +- drivers/tty/serial/8250/8250_mid.c | 3 + drivers/tty/serial/8250/8250_pci.c | 139 +++++++++++++++++++++ drivers/usb/chipidea/udc.c | 9 ++ drivers/usb/core/config.c | 28 +++-- drivers/usb/host/xhci-ring.c | 6 +- drivers/usb/renesas_usbhs/mod.c | 11 +- drivers/usb/serial/usb-serial-simple.c | 3 +- fs/btrfs/tree-log.c | 1 + fs/ext4/crypto_policy.c | 3 + fs/ext4/ioctl.c | 6 + fs/ext4/mballoc.c | 47 ++++--- fs/f2fs/crypto_policy.c | 3 + fs/fuse/file.c | 7 +- fs/kernfs/file.c | 28 +++-- fs/nfs/callback.c | 1 + fs/nfs/nfs4proc.c | 12 +- fs/nfs/pnfs.c | 4 + fs/nfsd/nfs4state.c | 40 +++--- fs/proc/base.c | 7 +- include/asm-generic/uaccess.h | 20 +-- include/linux/irq.h | 10 ++ include/linux/mfd/ti_am335x_tscadc.h | 8 +- include/linux/mm.h | 1 + include/linux/mmc/dw_mmc.h | 2 +- include/linux/netdevice.h | 11 +- include/linux/uio.h | 2 +- kernel/audit_watch.c | 8 +- kernel/configs/tiny.config | 8 ++ kernel/cpuset.c | 15 +++ kernel/fork.c | 23 ++++ kernel/irq/msi.c | 1 + kernel/kexec_file.c | 3 + kernel/sched/core.c | 22 ++++ lib/iov_iter.c | 24 +--- net/ipv6/addrconf.c | 2 + net/tipc/link.c | 2 + net/tipc/name_distr.c | 1 + net/tipc/udp_media.c | 5 - net/wireless/wext-core.c | 25 +--- 134 files changed, 895 insertions(+), 449 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html