This is the start of the stable review cycle for the 4.4.163 release. There are 114 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat Nov 10 21:50:28 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.163-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.4.163-rc1 Nathan Chancellor <natechancellor@xxxxxxxxx> x86/time: Correct the attribute on jiffies' definition Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/percpu: Fix this_cpu_read() Phil Auld <pauld@xxxxxxxxxx> sched/fair: Fix throttle_list starvation with low CFS quota Mikhail Nikiforov <jackxviichaos@xxxxxxxxx> Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15IGM Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: fix the usbfs flag sanitization for control transfers Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> usb: gadget: storage: Fix Spectre v1 vulnerability Tobias Herzog <t-herzog@xxxxxx> cdc-acm: correct counting of UART states in serial state notification Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> IB/ucm: Fix Spectre v1 vulnerability Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> RDMA/ucma: Fix Spectre v1 vulnerability Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> ptp: fix Spectre v1 vulnerability Al Viro <viro@xxxxxxxxxxxxxxxxxx> cachefiles: fix the race between cachefiles_bury_object() and rmdir(2) Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx> ahci: don't ignore result code of ahci_reset_controller() Jia-Ju Bai <baijiaju1990@xxxxxxx> crypto: shash - Fix a sleep-in-atomic bug in shash_setkey_unaligned Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> mremap: properly flush TLB before releasing the page Ido Schimmel <idosch@xxxxxxxxxxxx> rtnetlink: Disallow FDB configuration for non-Ethernet device Jason Wang <jasowang@xxxxxxxxxx> vhost: Fix Spectre V1 vulnerability Cong Wang <xiyou.wangcong@xxxxxxxxx> net: drop skb on failure in ip_check_defrag() Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx> sctp: fix race on sctp_id2asoc Heiner Kallweit <hkallweit1@xxxxxxxxx> r8169: fix NAPI handling under high load Niklas Cassel <niklas.cassel@xxxxxxxxxx> net: stmmac: Fix stmmac_mdio_reset() when building stmmac as modules Wenwen Wang <wang6495@xxxxxxx> net: socket: fix a missing-check bug Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx> net: sched: gred: pass the right attribute to gred_change_table_def() David Ahern <dsahern@xxxxxxxxx> net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs Stefano Brivio <sbrivio@xxxxxxxxxx> ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: mcast: fix a use-after-free in inet6_mc_check Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx> net: bridge: remove ipv6 zero address check in mcast queries Hangbin Liu <liuhangbin@xxxxxxxxx> bridge: do not add port to router list when receives query with source 0.0.0.0 Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx> perf tools: Disable parallelism for 'make clean' Kimmo Rautkoski <ext-kimmo.rautkoski@xxxxxxxxxxx> mtd: spi-nor: Add support for is25wp series chips Khazhismel Kumykov <khazhy@xxxxxxxxxx> fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters() Sascha Hauer <s.hauer@xxxxxxxxxxxxxx> ARM: dts: imx53-qsb: disable 1.2GHz OPP Maciej W. Rozycki <macro@xxxxxxxxxxxxxx> MIPS: DEC: Fix an int-handler.S CPU_DADDI_WORKAROUNDS regression Christian Grönke <c.groenke@xxxxxxxxxx> igb: Remove superfluous reset to PHY and page 0 selection Matt Redfearn <matt.redfearn@xxxxxxxxxx> MIPS: microMIPS: Fix decoding of swsp16 instruction Raghava Aditya Renukunta <RaghavaAditya.Renukunta@xxxxxxxxxxxxx> scsi: aacraid: Fix typo in blink status Paolo Abeni <pabeni@xxxxxxxxxx> bonding: avoid defaulting hard_header_len to ETH_HLEN on slave removal Gustavo A. R. Silva <garsilva@xxxxxxxxxxxxxx> PM / devfreq: tegra: fix error return code in tegra_devfreq_probe() Gustavo A. R. Silva <garsilva@xxxxxxxxxxxxxx> ASoC: spear: fix error return code in spdif_in_probe() Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> spi: xlp: fix error return code in xlp_spi_probe() Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> spi/bcm63xx: fix error return code in bcm63xx_spi_probe() Matt Redfearn <matt.redfearn@xxxxxxxxxx> MIPS: Handle non word sized instructions when examining frame Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> spi/bcm63xx-hspi: fix error return code in bcm63xx_hsspi_probe() Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> usb: dwc3: omap: fix error return code in dwc3_omap_probe() Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> usb: ehci-omap: fix error return code in ehci_hcd_omap_probe() Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> usb: imx21-hcd: fix error return code in imx21_probe() Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> gpio: msic: fix error return code in platform_msic_gpio_probe() David S. Miller <davem@xxxxxxxxxxxxx> sparc64: Fix exception handling in UltraSPARC-III memcpy. Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> gpu: host1x: fix error return code in host1x_probe() Mike Kravetz <mike.kravetz@xxxxxxxxxx> sparc64 mm: Fix more TSB sizing issues Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> video: fbdev: pxa3xx_gcu: fix error return code in pxa3xx_gcu_probe() Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> tty: serial: sprd: fix error return code in sprd_probe() Guillaume Nault <g.nault@xxxxxxxxxxxx> l2tp: hold socket before dropping lock in l2tp_ip{, 6}_recv() Peter S. Housel <housel@xxxxxxx> brcmfmac: Fix glom_skb leak in brcmf_sdiod_recv_chain Alexander Duyck <aduyck@xxxxxxxxxxxx> gro: Allow tunnel stacking in the case of FOU/GUE Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> vti6: flush x-netns xfrm cache when vti interface is removed Takashi Iwai <tiwai@xxxxxxx> ALSA: timer: Fix zero-division by continue of uninitialized instance Mark Rustad <mark.d.rustad@xxxxxxxxx> ixgbe: Correct X550EM_x revision check Emil Tantilov <emil.s.tantilov@xxxxxxxxx> ixgbe: fix RSS limit for X550 Tariq Toukan <tariqt@xxxxxxxxxxxx> net/mlx5e: Correctly handle RSS indirection table when changing number of channels Tariq Toukan <tariqt@xxxxxxxxxxxx> net/mlx5e: Fix LRO modify William Dauchy <william@xxxxxxxxx> ixgbevf: Fix handling of NAPI budget when multiple queues are enabled per vector Ashish Samant <ashish.samant@xxxxxxxxxx> fuse: Dont call set_page_dirty_lock() for ITER_BVEC pages for async_dio Pavel Roskin <plroskin@xxxxxxxxx> drm/nouveau/fbcon: fix oops without fbdev emulation Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: generally move prog destruction to RCU deferral Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> usb-storage: fix bogus hardware error messages for ATA pass-thru devices WANG Cong <xiyou.wangcong@xxxxxxxxx> sch_red: update backlog as well Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx> sparc/pci: Refactor dev_archdata initialization into pci_init_dev_archdata Ewan D. Milne <emilne@xxxxxxxxxx> scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state Jonathan Basseri <misterikkit@xxxxxxxxxx> xfrm: Clear sk_dst_cache when applying per-socket policy. Catalin Marinas <catalin.marinas@xxxxxxx> arm64: Fix potential race with hardware DBM in ptep_set_access_flags() Mark Syms <mark.syms@xxxxxxxxxx> CIFS: handle guest access errors to Windows shares Geert Uytterhoeven <geert+renesas@xxxxxxxxx> ASoC: wm8940: Enable cache usage to fix crashes on resume Geert Uytterhoeven <geert+renesas@xxxxxxxxx> ASoC: ak4613: Enable cache usage to fix crashes on resume Maciej W. Rozycki <macro@xxxxxxxxxx> MIPS: Fix FCSR Cause bit handling for correct SIGFPE issue Vladis Dronov <vdronov@xxxxxxxxxx> usbvision: revert commit 588afcc1 Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx> perf/core: Don't leak event in the syscall error path Raghava Aditya Renukunta <RaghavaAditya.Renukunta@xxxxxxxxxxxxx> aacraid: Start adapter after updating number of MSIX vectors Prarit Bhargava <prarit@xxxxxxxxxx> x86/PCI: Mark Broadwell-EP Home Agent 1 as having non-compliant BARs Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx> tpm: fix: return rc when devm_add_action() fails Arnd Bergmann <arnd@xxxxxxxx> thermal: allow u8500-thermal driver to be a module Arnd Bergmann <arnd@xxxxxxxx> thermal: allow spear-thermal driver to be a module Jeff Mahoney <jeffm@xxxxxxxx> btrfs: don't create or leak aliased root while cleaning up orphans Peter Zijlstra <peterz@xxxxxxxxxxxxx> sched/cgroup: Fix cgroup entity load tracking tear-down Florian Fainelli <f.fainelli@xxxxxxxxx> um: Avoid longjmp/setjmp symbol clashes with libpthread.a Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: orphan skbs in reassembly unit Eugenia Emantayev <eugenia@xxxxxxxxxxxx> net/mlx4_en: Resolve dividing by zero in 32-bit system Mateusz Jurczyk <mjurczyk@xxxxxxxxxx> af_iucv: Move sockaddr length checks to before accessing sa_family in bind and connect handlers Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx> radix-tree: fix radix_tree_iter_retry() for tagged iterators. Jiri Kosina <jkosina@xxxxxxx> btrfs: cleaner_kthread() doesn't need explicit freeze Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx> x86/mm/pat: Prevent hang during boot when mapping pages Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx> ARM: dts: apq8064: add ahci ports-implemented mask Steven Rostedt (Red Hat) <rostedt@xxxxxxxxxxx> tracing: Skip more functions when doing stack tracing of events Paul Bolle <pebolle@xxxxxxxxxx> ser_gigaset: use container_of() instead of detour David Herrmann <dh.herrmann@xxxxxxxxx> net: drop write-only stack variable Johannes Berg <johannes.berg@xxxxxxxxx> ipv6: suppress sparse warnings in IP6_ECN_set_ce() Eric Biggers <ebiggers@xxxxxxxxxx> KEYS: put keyring if install_session_keyring_to_cred() fails Wenwen Wang <wang6495@xxxxxxx> net: cxgb3_main: fix a missing-check bug Jiri Olsa <jolsa@xxxxxxxxxx> perf/ring_buffer: Prevent concurent ring buffer access Florian Fainelli <f.fainelli@xxxxxxxxx> smsc95xx: Check for Wake-on-LAN modes Florian Fainelli <f.fainelli@xxxxxxxxx> smsc75xx: Check for Wake-on-LAN modes Florian Fainelli <f.fainelli@xxxxxxxxx> r8152: Check for supported Wake-on-LAN Modes Florian Fainelli <f.fainelli@xxxxxxxxx> sr9800: Check for supported Wake-on-LAN modes Florian Fainelli <f.fainelli@xxxxxxxxx> lan78xx: Check for supported Wake-on-LAN modes Florian Fainelli <f.fainelli@xxxxxxxxx> ax88179_178a: Check for supported Wake-on-LAN modes Florian Fainelli <f.fainelli@xxxxxxxxx> asix: Check for supported Wake-on-LAN modes Lubomir Rintel <lkundrak@xxxxx> pxa168fb: prepare the clock Matias Karhumaa <matias.karhumaa@xxxxxxxxx> Bluetooth: SMP: fix crash in unpairing Martin Willi <martin@xxxxxxxxxxxxxx> mac80211_hwsim: do not omit multicast announce of first added radio Sean Tranchetti <stranche@xxxxxxxxxxxxxx> xfrm: validate template mode Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx> ARM: 8799/1: mm: fix pci_ioremap_io() offset check Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx> cfg80211: reg: Init wiphy_idx in regulatory_hint_core() Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx> mac80211: Always report TX status Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxxxxx> xfrm6: call kfree_skb when skb is toobig Steffen Klassert <steffen.klassert@xxxxxxxxxxx> xfrm: Validate address prefix lengths in the xfrm selector. ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/imx53-qsb-common.dtsi | 11 ++++ arch/arm/boot/dts/qcom-apq8064.dtsi | 3 +- arch/arm/mm/ioremap.c | 2 +- arch/arm64/mm/fault.c | 15 ++--- arch/mips/dec/int-handler.S | 34 ++-------- arch/mips/include/asm/fpu_emulator.h | 13 ++++ arch/mips/include/asm/switch_to.h | 18 ++++++ arch/mips/include/uapi/asm/inst.h | 2 +- arch/mips/kernel/mips-r2-to-r6-emul.c | 10 +-- arch/mips/kernel/process.c | 11 ++-- arch/mips/kernel/ptrace.c | 7 +-- arch/mips/kernel/traps.c | 72 ++++++++++++---------- arch/sparc/include/asm/page_64.h | 1 + arch/sparc/kernel/pci.c | 29 ++++++--- arch/sparc/lib/U3memcpy.S | 4 +- arch/sparc/mm/fault_64.c | 1 + arch/sparc/mm/tlb.c | 35 +++++++++-- arch/sparc/mm/tsb.c | 18 ++++-- arch/um/Makefile | 4 ++ arch/x86/include/asm/percpu.h | 8 +-- arch/x86/kernel/time.c | 2 +- arch/x86/mm/pageattr.c | 21 ++++--- arch/x86/pci/fixup.c | 7 +++ arch/x86/um/setjmp_32.S | 16 ++--- arch/x86/um/setjmp_64.S | 16 ++--- crypto/shash.c | 2 +- drivers/ata/ahci.c | 5 +- drivers/char/tpm/tpm-chip.c | 6 +- drivers/devfreq/tegra-devfreq.c | 6 +- drivers/gpio/gpio-msic.c | 4 +- drivers/gpu/drm/nouveau/nouveau_fbcon.c | 7 ++- drivers/gpu/host1x/dev.c | 4 +- drivers/infiniband/core/ucm.c | 3 + drivers/infiniband/core/ucma.c | 3 + drivers/input/mouse/elan_i2c_core.c | 1 + drivers/isdn/gigaset/ser-gigaset.c | 9 +-- drivers/media/usb/usbvision/usbvision-video.c | 7 --- drivers/mfd/db8500-prcmu.c | 3 + drivers/mtd/spi-nor/spi-nor.c | 6 ++ drivers/net/bonding/bond_main.c | 2 +- drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 17 +++++ drivers/net/ethernet/intel/igb/e1000_82575.c | 11 ---- drivers/net/ethernet/intel/ixgbe/ixgbe.h | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe_type.h | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe_x550.c | 9 +-- drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 2 + drivers/net/ethernet/mellanox/mlx4/en_clock.c | 5 +- drivers/net/ethernet/mellanox/mlx5/core/en.h | 2 + .../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 30 ++++++--- drivers/net/ethernet/realtek/r8169.c | 8 +-- drivers/net/ethernet/stmicro/stmmac/stmmac_mdio.c | 2 +- drivers/net/usb/asix_common.c | 3 + drivers/net/usb/ax88179_178a.c | 3 + drivers/net/usb/lan78xx.c | 17 ++--- drivers/net/usb/r8152.c | 3 + drivers/net/usb/smsc75xx.c | 3 + drivers/net/usb/smsc95xx.c | 3 + drivers/net/usb/sr9800.c | 3 + drivers/net/wireless/brcm80211/brcmfmac/bcmsdh.c | 7 +-- drivers/net/wireless/mac80211_hwsim.c | 3 +- drivers/ptp/ptp_chardev.c | 4 ++ drivers/scsi/aacraid/linit.c | 2 +- drivers/scsi/aacraid/src.c | 2 +- drivers/scsi/scsi_scan.c | 5 +- drivers/scsi/scsi_sysfs.c | 8 ++- drivers/spi/spi-bcm63xx-hsspi.c | 4 +- drivers/spi/spi-bcm63xx.c | 4 +- drivers/spi/spi-xlp.c | 4 +- drivers/thermal/Kconfig | 6 +- drivers/tty/serial/sprd_serial.c | 4 +- drivers/usb/class/cdc-acm.c | 14 ++--- drivers/usb/core/devio.c | 4 +- drivers/usb/dwc3/dwc3-omap.c | 4 +- drivers/usb/gadget/function/f_mass_storage.c | 3 + drivers/usb/host/ehci-omap.c | 4 +- drivers/usb/host/imx21-hcd.c | 6 +- drivers/usb/storage/transport.c | 14 ++++- drivers/vhost/vhost.c | 2 + drivers/video/fbdev/pxa168fb.c | 6 +- drivers/video/fbdev/pxa3xx-gcu.c | 4 +- fs/btrfs/disk-io.c | 6 +- fs/btrfs/disk-io.h | 2 + fs/btrfs/root-tree.c | 27 +++++--- fs/cachefiles/namei.c | 2 +- fs/cifs/connect.c | 3 + fs/fat/fatent.c | 1 + fs/fuse/file.c | 6 +- fs/fuse/fuse_i.h | 1 + include/linux/bpf.h | 5 -- include/linux/radix-tree.h | 1 + include/net/inet_ecn.h | 3 +- include/scsi/scsi_device.h | 1 + kernel/bpf/arraymap.c | 4 +- kernel/bpf/syscall.c | 13 +--- kernel/events/core.c | 5 +- kernel/sched/core.c | 4 +- kernel/sched/fair.c | 59 ++++++++++++------ kernel/sched/sched.h | 4 +- kernel/trace/trace.c | 19 +++++- mm/huge_memory.c | 6 +- mm/mremap.c | 21 +++++-- net/bluetooth/mgmt.c | 7 +-- net/bluetooth/smp.c | 29 +++++++-- net/bluetooth/smp.h | 3 +- net/bridge/br_multicast.c | 9 ++- net/core/rtnetlink.c | 10 +++ net/ipv4/fou.c | 16 +++++ net/ipv4/ip_fragment.c | 12 ++-- net/ipv6/addrconf.c | 6 +- net/ipv6/ip6_vti.c | 31 ++++++++++ net/ipv6/mcast.c | 16 ++--- net/ipv6/ndisc.c | 3 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 1 + net/ipv6/xfrm6_output.c | 2 + net/iucv/af_iucv.c | 8 +-- net/l2tp/l2tp_ip.c | 11 ++-- net/l2tp/l2tp_ip6.c | 11 ++-- net/mac80211/status.c | 7 +-- net/sched/sch_gred.c | 2 +- net/sched/sch_red.c | 4 ++ net/sctp/socket.c | 5 +- net/socket.c | 11 +++- net/unix/af_unix.c | 5 +- net/wireless/reg.c | 1 + net/xfrm/xfrm_state.c | 1 + net/xfrm/xfrm_user.c | 15 +++++ security/keys/process_keys.c | 7 ++- sound/core/timer.c | 14 +++++ sound/soc/codecs/ak4613.c | 1 + sound/soc/codecs/wm8940.c | 1 + sound/soc/spear/spdif_in.c | 6 +- tools/perf/Makefile | 4 +- 134 files changed, 737 insertions(+), 388 deletions(-)
