[PATCH 4.4 00/84] 4.4.183-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 4.4.183 release.
There are 84 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat 22 Jun 2019 05:42:15 PM UTC.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.183-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 4.4.183-rc1

Alexander Lochmann <alexander.lochmann@tu-dortmund.de>
    Abort file_remove_privs() for non-reg. files

Andrea Arcangeli <aarcange@redhat.com>
    coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Revert "crypto: crypto4xx - properly set IV after de- and encrypt"

Jason Yan <yanaijie@huawei.com>
    scsi: libsas: delete sas port if expander discover failed

Varun Prakash <varun@chelsio.com>
    scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()

Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
    net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs

Paul Mackerras <paulus@ozlabs.org>
    KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list

Randy Dunlap <rdunlap@infradead.org>
    ia64: fix build errors by exporting paddr_to_nid()

Sahitya Tummala <stummala@codeaurora.org>
    configfs: Fix use-after-free when accessing sd->s_dentry

Yingjoe Chen <yingjoe.chen@mediatek.com>
    i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr

Kees Cook <keescook@chromium.org>
    net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()

Randy Dunlap <rdunlap@infradead.org>
    gpio: fix gpio-adp5588 build errors

Peter Zijlstra <peterz@infradead.org>
    perf/ring_buffer: Add ordering to rb->nest increment

Yabin Cui <yabinc@google.com>
    perf/ring_buffer: Fix exposing a temporarily decreased data_head

Frank van der Linden <fllinden@amazon.com>
    x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor

Dan Carpenter <dan.carpenter@oracle.com>
    mISDN: make sure device name is NUL terminated

John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>
    sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg

Eric Dumazet <edumazet@google.com>
    neigh: fix use-after-free read in pneigh_get_next

Jeremy Sowden <jeremy@azazel.net>
    lapb: fixed leak of control-blocks.

Eric Dumazet <edumazet@google.com>
    ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero

Ivan Vecera <ivecera@redhat.com>
    be2net: Fix number of Rx queues used for flow hashing

Eric Dumazet <edumazet@google.com>
    ax25: fix inconsistent lock state in ax25_destroy_timer

Daniele Palmas <dnlplm@gmail.com>
    USB: serial: option: add Telit 0x1260 and 0x1261 compositions

Jörgen Storvist <jorgen.storvist@gmail.com>
    USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode

Chris Packham <chris.packham@alliedtelesis.co.nz>
    USB: serial: pl2303: add Allied Telesis VT-Kit3

Kai-Heng Feng <kai.heng.feng@canonical.com>
    USB: usb-storage: Add new ID to ums-realtek

Marco Zatta <marco@zatta.me>
    USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.

Murray McAllister <murray.mcallister@gmail.com>
    drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()

Murray McAllister <murray.mcallister@gmail.com>
    drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read

Christian Borntraeger <borntraeger@de.ibm.com>
    KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION

Paolo Bonzini <pbonzini@redhat.com>
    KVM: x86/pmu: do not mask the value that is written to fixed PMUs

Bernd Eckstein <3erndeckstein@gmail.com>
    usbnet: ipheth: fix racing condition

Colin Ian King <colin.king@canonical.com>
    scsi: bnx2fc: fix incorrect cast to u64 on shift operation

James Smart <jsmart2021@gmail.com>
    scsi: lpfc: add check for loss of ndlp when sending RRQ

Young Xiao <YangX92@hotmail.com>
    Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var

S.j. Wang <shengjiu.wang@nxp.com>
    ASoC: cs42xx8: Add regcache mask dirty

Tejun Heo <tj@kernel.org>
    cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()

Coly Li <colyli@suse.de>
    bcache: fix stack corruption by PRECEDING_KEY()

Russell King <rmk+kernel@armlinux.org.uk>
    i2c: acorn: fix i2c warning

Jann Horn <jannh@google.com>
    ptrace: restore smp_rmb() in __ptrace_may_access()

Eric W. Biederman <ebiederm@xmission.com>
    signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO

Wengang Wang <wen.gang.wang@oracle.com>
    fs/ocfs2: fix race in ocfs2_dentry_attach_lock()

Shakeel Butt <shakeelb@google.com>
    mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node

Hans de Goede <hdegoede@redhat.com>
    libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk

Takashi Iwai <tiwai@suse.de>
    ALSA: seq: Cover unsubscribe_port() in list_mutex

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections"

ZhangXiaoxu <zhangxiaoxu5@huawei.com>
    futex: Fix futex lock the wrong page

Marek Szyprowski <m.szyprowski@samsung.com>
    ARM: exynos: Fix undefined instruction during Exynos5422 resume

Phong Hoang <phong.hoang.wz@renesas.com>
    pwm: Fix deadlock warning when removing PWM device

Krzysztof Kozlowski <krzk@kernel.org>
    ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa

Christoph Vogtländer <c.vogtlaender@sigma-surface-science.com>
    pwm: tiehrpwm: Update shadow register for disabling PWMs

Andy Shevchenko <andriy.shevchenko@linux.intel.com>
    dmaengine: idma64: Use actual device for DMA transfers

Tony Lindgren <tony@atomide.com>
    gpio: gpio-omap: add check for off wake capable gpios

Kangjie Lu <kjlu@umn.edu>
    PCI: xilinx: Check for __get_free_pages() failure

Kangjie Lu <kjlu@umn.edu>
    video: imsttfb: fix potential NULL pointer dereferences

Kangjie Lu <kjlu@umn.edu>
    video: hgafb: fix potential NULL pointer dereference

Kangjie Lu <kjlu@umn.edu>
    PCI: rcar: Fix a potential NULL pointer dereference

Tyrel Datwyler <tyreld@linux.vnet.ibm.com>
    PCI: rpadlpar: Fix leaked device_node references in add/remove paths

Andrey Smirnov <andrew.smirnov@gmail.com>
    ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA

Andrey Smirnov <andrew.smirnov@gmail.com>
    ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA

Andrey Smirnov <andrew.smirnov@gmail.com>
    ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA

Douglas Anderson <dianders@chromium.org>
    clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288

Nathan Chancellor <natechancellor@gmail.com>
    soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher

Enrico Granata <egranata@chromium.org>
    platform/chrome: cros_ec_proto: check for NULL transfer function

Wenwen Wang <wang6495@umn.edu>
    x86/PCI: Fix PCI IRQ routing table memory leak

J. Bruce Fields <bfields@redhat.com>
    nfsd: allow fh_want_write to be called twice

Kirill Smelkov <kirr@nexedi.com>
    fuse: retrieve: cap requested size to negotiated max_write

Jorge Ramirez-Ortiz <jorge.ramirez-ortiz@linaro.org>
    nvmem: core: fix read buffer in place

Takashi Iwai <tiwai@suse.de>
    ALSA: hda - Register irq handler after the chip initialization

Lu Baolu <baolu.lu@linux.intel.com>
    iommu/vt-d: Set intel_iommu_gfx_mapped correctly

Chao Yu <yuchao0@huawei.com>
    f2fs: fix to do sanity check on valid block count of segment

Chao Yu <yuchao0@huawei.com>
    f2fs: fix to avoid panic in do_recover_data()

Miroslav Lichvar <mlichvar@redhat.com>
    ntp: Allow TAI-UTC offset to be set to zero

Matt Redfearn <matt.redfearn@thinci.com>
    drm/bridge: adv7511: Fix low refresh rate selection

Stephane Eranian <eranian@google.com>
    perf/x86/intel: Allow PEBS multi-entry in watermark mode

Tony Lindgren <tony@atomide.com>
    mfd: twl6040: Fix device init errors for ACCCTL register

Binbin Wu <binbin.wu@intel.com>
    mfd: intel-lpss: Set the device in reset state when init

Cyrill Gorcunov <gorcunov@gmail.com>
    kernel/sys.c: prctl: fix false positive in validate_prctl_map()

Yue Hu <huyue2@yulong.com>
    mm/cma_debug.c: fix the break condition in cma_maxchunk_get()

Yue Hu <huyue2@yulong.com>
    mm/cma.c: fix crash on CMA allocation if bitmap allocation fails

Mike Kravetz <mike.kravetz@oracle.com>
    hugetlbfs: on restore reserve error path retain subpool reservation

Li Rongqing <lirongqing@baidu.com>
    ipc: prevent lockup on alloc_msg and free_msg

Christian Brauner <christian@brauner.io>
    sysctl: return -EINVAL if val violates minmax

Hou Tao <houtao1@huawei.com>
    fs/fat/file.c: issue flush after the writeback of FAT


-------------

Diffstat:

 Makefile                                       |  4 +--
 arch/arm/boot/dts/exynos5420-arndale-octa.dts  |  2 ++
 arch/arm/boot/dts/imx6qdl.dtsi                 |  2 +-
 arch/arm/boot/dts/imx6sl.dtsi                  |  2 +-
 arch/arm/boot/dts/imx6sx.dtsi                  |  2 +-
 arch/arm/mach-exynos/suspend.c                 | 19 ++++++++++++++
 arch/ia64/mm/numa.c                            |  1 +
 arch/powerpc/include/asm/kvm_host.h            |  1 +
 arch/powerpc/kvm/book3s.c                      |  1 +
 arch/powerpc/kvm/book3s_rtas.c                 | 14 +++++------
 arch/s390/kvm/kvm-s390.c                       | 35 +++++++++++++++-----------
 arch/x86/kernel/cpu/amd.c                      |  7 ++++--
 arch/x86/kernel/cpu/perf_event_intel.c         |  2 +-
 arch/x86/kvm/pmu_intel.c                       | 13 ++++++----
 arch/x86/pci/irq.c                             | 10 ++++++--
 drivers/android/binder.c                       |  6 +++++
 drivers/ata/libata-core.c                      |  9 ++++---
 drivers/clk/rockchip/clk-rk3288.c              | 11 ++++++++
 drivers/crypto/amcc/crypto4xx_alg.c            |  3 +--
 drivers/crypto/amcc/crypto4xx_core.c           |  9 -------
 drivers/dma/idma64.c                           |  6 +++--
 drivers/dma/idma64.h                           |  2 ++
 drivers/gpio/Kconfig                           |  1 +
 drivers/gpio/gpio-omap.c                       | 25 ++++++++++++------
 drivers/gpu/drm/i2c/adv7511.c                  |  6 ++---
 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c        |  7 +++++-
 drivers/i2c/busses/i2c-acorn.c                 |  1 +
 drivers/i2c/i2c-dev.c                          |  1 +
 drivers/infiniband/hw/mlx4/main.c              |  3 +++
 drivers/iommu/intel-iommu.c                    |  7 +++---
 drivers/isdn/mISDN/socket.c                    |  5 ++--
 drivers/md/bcache/bset.c                       | 16 +++++++++---
 drivers/md/bcache/bset.h                       | 34 ++++++++++++++-----------
 drivers/mfd/intel-lpss.c                       |  3 +++
 drivers/mfd/twl6040.c                          | 13 +++++++++-
 drivers/misc/kgdbts.c                          |  4 +--
 drivers/net/ethernet/dec/tulip/de4x5.c         |  1 -
 drivers/net/ethernet/emulex/benet/be_ethtool.c |  2 +-
 drivers/net/ethernet/renesas/sh_eth.c          |  4 +++
 drivers/net/usb/ipheth.c                       |  3 ++-
 drivers/nvmem/core.c                           | 15 +++++++----
 drivers/pci/host/pcie-rcar.c                   |  4 +++
 drivers/pci/host/pcie-xilinx.c                 | 12 +++++++--
 drivers/pci/hotplug/rpadlpar_core.c            |  4 +++
 drivers/platform/chrome/cros_ec_proto.c        | 11 ++++++++
 drivers/pwm/core.c                             | 10 ++++----
 drivers/pwm/pwm-tiehrpwm.c                     |  2 ++
 drivers/pwm/sysfs.c                            | 14 +----------
 drivers/scsi/bnx2fc/bnx2fc_hwi.c               |  2 +-
 drivers/scsi/cxgbi/libcxgbi.c                  |  4 +++
 drivers/scsi/libsas/sas_expander.c             |  2 ++
 drivers/scsi/lpfc/lpfc_els.c                   |  5 +++-
 drivers/soc/mediatek/mtk-pmic-wrap.c           |  2 +-
 drivers/spi/spi-pxa2xx.c                       |  7 +-----
 drivers/tty/serial/8250/8250_dw.c              |  4 +--
 drivers/tty/serial/sunhv.c                     |  2 +-
 drivers/usb/core/quirks.c                      |  3 +++
 drivers/usb/serial/option.c                    |  6 +++++
 drivers/usb/serial/pl2303.c                    |  1 +
 drivers/usb/serial/pl2303.h                    |  3 +++
 drivers/usb/storage/unusual_realtek.h          |  5 ++++
 drivers/video/fbdev/hgafb.c                    |  2 ++
 drivers/video/fbdev/imsttfb.c                  |  5 ++++
 fs/configfs/dir.c                              | 14 +++++------
 fs/f2fs/recovery.c                             | 10 +++++++-
 fs/f2fs/segment.h                              |  3 +--
 fs/fat/file.c                                  | 11 +++++---
 fs/fuse/dev.c                                  |  2 +-
 fs/inode.c                                     |  9 +++++--
 fs/nfsd/vfs.h                                  |  5 +++-
 fs/ocfs2/dcache.c                              | 12 +++++++++
 fs/proc/task_mmu.c                             | 18 +++++++++++++
 fs/userfaultfd.c                               |  7 ++++++
 include/linux/cgroup.h                         | 10 ++++++--
 include/linux/mm.h                             | 21 ++++++++++++++++
 include/linux/pwm.h                            |  5 ----
 include/net/bluetooth/hci_core.h               |  3 ---
 ipc/mqueue.c                                   | 10 ++++++--
 ipc/msgutil.c                                  |  6 +++++
 kernel/cred.c                                  |  9 +++++++
 kernel/events/ring_buffer.c                    | 33 +++++++++++++++++++++---
 kernel/futex.c                                 |  4 +--
 kernel/ptrace.c                                | 20 +++++++++++++--
 kernel/sys.c                                   |  2 +-
 kernel/sysctl.c                                |  6 +++--
 kernel/time/ntp.c                              |  2 +-
 mm/cma.c                                       |  4 ++-
 mm/cma_debug.c                                 |  2 +-
 mm/hugetlb.c                                   | 21 ++++++++++++----
 mm/list_lru.c                                  |  2 +-
 mm/mmap.c                                      |  7 +++++-
 net/ax25/ax25_route.c                          |  2 ++
 net/bluetooth/hci_conn.c                       |  8 ------
 net/core/neighbour.c                           |  7 ++++++
 net/ipv6/ip6_flowlabel.c                       |  7 +++---
 net/lapb/lapb_iface.c                          |  1 +
 sound/core/seq/seq_ports.c                     |  2 +-
 sound/pci/hda/hda_intel.c                      |  6 ++---
 sound/soc/codecs/cs42xx8.c                     |  1 +
 99 files changed, 518 insertions(+), 196 deletions(-)