This is the start of the stable review cycle for the 4.4.167 release. There are 91 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu Dec 13 15:15:44 UTC 2018. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.167-rc1... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 4.4.167-rc1

Emmanuel Grumbach emmanuel.grumbach@intel.com mac80211: ignore NullFunc frames in the duplicate detection

Felix Fietkau nbd@nbd.name mac80211: fix reordering of buffered broadcast packets

Felix Fietkau nbd@nbd.name mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext

Ben Greear greearb@candelatech.com mac80211: Clear beacon_int in ieee80211_do_stop

Vasyl Vavrychuk vasyl.vavrychuk@globallogic.com mac80211_hwsim: Timer should be initialized before device registered

Macpaul Lin macpaul@gmail.com kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var()

Peter Shih pihsun@chromium.org tty: serial: 8250_mtk: always resume the device in probe.

Paulo Alcantara palcantara@suse.com cifs: Fix separator when building path from dentry

Greg Kroah-Hartman gregkh@linuxfoundation.org Staging: lustre: remove two build warnings

Mathias Nyman mathias.nyman@linux.intel.com xhci: Prevent U1/U2 link pm states if exit latency is too long

Bin Liu b-liu@ti.com dmaengine: cppi41: delete channel from pending list when stop channel

Chuck Lever chuck.lever@oracle.com SUNRPC: Fix leak of krb5p encode pages

Halil Pasic pasic@linux.ibm.com virtio/s390: fix race in ccw_io_helper()

Halil Pasic pasic@linux.ibm.com virtio/s390: avoid race on vcdev->config

Takashi Iwai tiwai@suse.de ALSA: pcm: Fix interval evaluation with openmin/max

Takashi Iwai tiwai@suse.de ALSA: pcm: Call snd_pcm_unlink() conditionally at closing

Chanho Min chanho.min@lge.com ALSA: pcm: Fix starvation on down_write_nonblock()

Kai-Heng Feng kai.heng.feng@canonical.com ALSA: hda: Add support for AMD Stoney Ridge

Hui Peng benquike@gmail.com ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c

Mathias Payer mathias.payer@nebelwelt.net USB: check usb_get_extra_descriptor for proper size

Alexander Theissen alex.theissen@me.com usb: appledisplay: Add 27" Apple Cinema Display

Harry Pan harry.pan@intel.com usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device

Yangtao Li tiny.windzz@gmail.com net: amd: add missing of_node_put()

Pan Bian bianpan2016@163.com iommu/vt-d: Use memunmap to free memremap

Vincent Chen vincentc@andestech.com net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts

Aya Levin ayal@mellanox.com net/mlx4: Fix UBSAN warning of signed integer overflow

Tariq Toukan tariqt@mellanox.com net/mlx4_core: Fix uninitialized variable compilation warning

Jack Morgenstein jackm@dev.mellanox.co.il net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command

Denis Bolotin denis.bolotin@cavium.com qed: Fix reading wrong value in loop condition

Denis Bolotin denis.bolotin@cavium.com qed: Fix PTT leak in qed_drain()

Sudarsana Reddy Kalluru sudarsana.kalluru@cavium.com bnx2x: Assign unique DMAE channel number for FW DMAE transactions.

Sven Eckelmann sven@narfation.org batman-adv: Expand merged fragment buffer for full packet

Fabrizio Castro fabrizio.castro@bp.renesas.com can: rcar_can: Fix erroneous registration

Geert Uytterhoeven geert+renesas@glider.be iommu/ipmmu-vmsa: Fix crash on early domain free

Lu Baolu baolu.lu@linux.intel.com iommu/vt-d: Fix NULL pointer dereference in prq_event_thread()

Arnd Bergmann arnd@arndb.de usb: gadget: dummy: fix nonsensical comparisons

Simon Guo wei.guo.simon@gmail.com mm: mlock: avoid increase mm->locked_vm on mlock() when already mlock2(,MLOCK_ONFAULT)

Pavel Tikhomirov ptikhomirov@virtuozzo.com mm: cleancache: fix corruption on missed inode invalidation

Alexey Brodkin abrodkin@synopsys.com arc: [devboards] Add support of NFSv3 ACL

Kevin Hilman khilman@baylibre.com ARC: change defconfig defaults to ARCv2

Filipe Manana fdmanana@suse.com Btrfs: fix use-after-free when dumping free space

Nikolay Borisov nborisov@suse.com btrfs: Always try all copies when reading extent buffers

Adam Wong adam@adamwong.me Input: elan_i2c - add support for ELAN0621 touchpad

Noah Westervelt nwestervelt@outlook.com Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR

Patrick Gaskin patrick@pgaskin.net Input: elan_i2c - add ELAN0620 to the ACPI table

Christian Hoff christian_hoff@gmx.net Input: matrix_keypad - check for errors from of_get_named_gpio()

Cameron Gutman aicommander@gmail.com Input: xpad - quirk all PDP Xbox One gamepads

Wei Yongjun yongjun_wei@trendmicro.com.cn leds: leds-gpio: Fix return value check in create_gpio_led()

Milo Kim milo.kim@ti.com leds: turn off the LED and wait for completion on unregistering LED class device

Markus Hofstaetter markus.hofstaetter@ait.ac.at leds: call led_pwm_set() in leds-pwm to enforce default LED_OFF

Laura Abbott labbott@redhat.com kgdboc: Fix warning with module build

Laura Abbott labbott@redhat.com kgdboc: Fix restrict error

Kees Cook keescook@chromium.org scsi: csiostor: Avoid content leaks and casts

Takashi Iwai tiwai@suse.de ALSA: trident: Suppress gcc string warning

Martin Wilck mwilck@suse.com scsi: scsi_devinfo: cleanly zero-pad devinfo strings

Sam Bobroff sbobroff@linux.ibm.com drm/ast: Fix incorrect free on ioregs

Dmitry V. Levin ldv@altlinux.org mips: fix mips_get_syscall_arg o32 check

Mathias Kresin dev@kresin.me MIPS: ralink: Fix mt7620 nd_sd pinmux

Andrea Parri andrea.parri@amarulasolutions.com uprobes: Fix handle_swbp() vs. unregister() + register() race once more

Sagi Grimberg sagi@grimberg.me iser: set sector for ambiguous mr status errors

Arnd Bergmann arnd@arndb.de kdb: use memmove instead of overlapping memcpy

Arnd Bergmann arnd@arndb.de staging: rts5208: fix gcc-8 logic error warning

Arnd Bergmann arnd@arndb.de scsi: bfa: convert to strlcpy/strlcat

Arnd Bergmann arnd@arndb.de drm: gma500: fix logic error

Sultan Alsawaf sultanxda@gmail.com ip_tunnel: Fix name string concatenate in __ip_tunnel_create()

Guenter Roeck linux@roeck-us.net kernfs: Replace strncpy with memcpy

Linus Torvalds torvalds@linux-foundation.org unifdef: use memcpy instead of strncpy

Guenter Roeck linux@roeck-us.net kobject: Replace strncpy with memcpy

Stephen Rothwell sfr@canb.auug.org.au disable stringop truncation warnings for now

Arnd Bergmann arnd@arndb.de exec: avoid gcc-8 warning for get_task_comm

Xiongfeng Wang xiongfeng.wang@linaro.org Kbuild: suppress packed-not-aligned warning for default setting only

YueHaibing yuehaibing@huawei.com misc: mic/scif: fix copy-paste error in scif_create_remote_lookup

Michael Niewöhner linux@mniewoehner.de usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series

Kai-Heng Feng kai.heng.feng@canonical.com USB: usb-storage: Add new IDs to ums-realtek

Josef Bacik josef@toxicpanda.com btrfs: release metadata before running delayed refs

Richard Genoud richard.genoud@gmail.com dmaengine: at_hdmac: fix module unloading

Richard Genoud richard.genoud@gmail.com dmaengine: at_hdmac: fix memory leak in at_dma_xlate()

Pan Bian bianpan2016@163.com ext2: fix potential use after free

Takashi Iwai tiwai@suse.de ALSA: sparc: Fix invalid snd_free_pages() at error path

Takashi Iwai tiwai@suse.de ALSA: control: Fix race between adding and removing a user element

Takashi Iwai tiwai@suse.de ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write

Takashi Iwai tiwai@suse.de ALSA: wss: Fix invalid snd_free_pages() at error path

Filipe Manana fdmanana@suse.com Btrfs: ensure path name is null terminated at btrfs_control_ioctl

Max Filippov jcmvbkbc@gmail.com xtensa: fix coprocessor context offset definitions

Max Filippov jcmvbkbc@gmail.com xtensa: enable coprocessors that are being flushed

Junaid Shahid junaids@google.com kvm: mmu: Fix race in emulated page table writes

Bernd Eckstein 3erndeckstein@gmail.com usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2

Julian Wiedmann jwi@linux.ibm.com s390/qeth: fix length check in SNMP processing

Pan Bian bianpan2016@163.com rapidio/rionet: do not free skb before reading its length

Sasha Levin sashal@kernel.org Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()"

Matthias Schwarzott zzam@gentoo.org media: em28xx: Fix use-after-free when disconnecting

-------------

Diffstat:

Makefile | 7 ++- arch/arc/Kconfig | 2 +- arch/arc/Makefile | 2 +- arch/arc/configs/axs101_defconfig | 2 + arch/arc/configs/axs103_defconfig | 1 + arch/arc/configs/axs103_smp_defconfig | 1 + arch/arc/configs/nsim_700_defconfig | 1 + arch/arc/configs/nsimosci_defconfig | 2 + arch/arc/configs/nsimosci_hs_defconfig | 1 + arch/arc/configs/nsimosci_hs_smp_defconfig | 1 + arch/arc/configs/tb10x_defconfig | 1 + arch/arc/configs/vdk_hs38_defconfig | 1 + arch/arc/configs/vdk_hs38_smp_defconfig | 1 + arch/mips/include/asm/syscall.h | 2 +- arch/mips/ralink/mt7620.c | 2 +- arch/x86/kvm/mmu.c | 27 +++------ arch/xtensa/kernel/asm-offsets.c | 16 +++--- arch/xtensa/kernel/process.c | 5 +- drivers/dma/at_hdmac.c | 10 +++- drivers/dma/cppi41.c | 16 +++++- drivers/gpu/drm/ast/ast_main.c | 3 +- drivers/gpu/drm/gma500/mdfld_intel_display.c | 2 +- drivers/infiniband/ulp/iser/iser_verbs.c | 7 +-- drivers/input/joystick/xpad.c | 16 ++---- drivers/input/keyboard/matrix_keypad.c | 23 +++++--- drivers/input/mouse/elan_i2c_core.c | 3 + drivers/iommu/intel-iommu.c | 2 +- drivers/iommu/intel-svm.c | 2 +- drivers/iommu/ipmmu-vmsa.c | 3 + drivers/leds/led-class.c | 5 +- drivers/leds/leds-gpio.c | 4 +- drivers/leds/leds-pwm.c | 1 + drivers/media/usb/em28xx/em28xx-dvb.c | 3 +- drivers/misc/mic/scif/scif_rma.c | 2 +- drivers/net/can/rcar_can.c | 5 +- drivers/net/ethernet/amd/sunlance.c | 4 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x.h | 7 +++ drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 1 + drivers/net/ethernet/faraday/ftmac100.c | 7 +-- drivers/net/ethernet/mellanox/mlx4/alloc.c | 2 +- drivers/net/ethernet/mellanox/mlx4/mlx4.h | 4 +- drivers/net/ethernet/mellanox/mlx4/mr.c | 1 + drivers/net/ethernet/qlogic/qed/qed_int.c | 2 + drivers/net/ethernet/qlogic/qed/qed_main.c | 2 +- drivers/net/rionet.c | 2 +- drivers/net/usb/ipheth.c | 10 ++-- drivers/net/wireless/mac80211_hwsim.c | 8 +-- drivers/net/wireless/ti/wlcore/cmd.c | 6 -- drivers/s390/net/qeth_core_main.c | 27 ++++----- drivers/s390/virtio/virtio_ccw.c | 17 +++++- drivers/scsi/bfa/bfa_fcbuild.c | 8 +-- drivers/scsi/bfa/bfa_fcs.c | 78 ++++++++++++------------- drivers/scsi/bfa/bfa_fcs_lport.c | 62 ++++++++------------ drivers/scsi/bfa/bfa_ioc.c | 2 +- drivers/scsi/bfa/bfa_svc.c | 4 +- drivers/scsi/bfa/bfad.c | 20 +++---- drivers/scsi/bfa/bfad_attr.c | 2 +- drivers/scsi/bfa/bfad_bsg.c | 6 +- drivers/scsi/csiostor/csio_lnode.c | 43 ++++++++------ drivers/scsi/scsi_devinfo.c | 22 +++---- drivers/staging/lustre/lustre/lmv/lmv_obd.c | 2 +- drivers/staging/rts5208/sd.c | 6 -- drivers/tty/serial/8250/8250_mtk.c | 16 +++--- drivers/tty/serial/kgdboc.c | 47 ++++++++------- drivers/usb/core/hub.c | 2 +- drivers/usb/core/quirks.c | 7 +++ drivers/usb/core/usb.c | 6 +- drivers/usb/gadget/udc/dummy_hcd.c | 9 ++- drivers/usb/host/hwa-hc.c | 2 +- drivers/usb/host/xhci.c | 16 ++++++ drivers/usb/misc/appledisplay.c | 1 + drivers/usb/storage/unusual_realtek.h | 10 ++++ fs/btrfs/disk-io.c | 10 +--- fs/btrfs/free-space-cache.c | 2 + fs/btrfs/super.c | 1 + fs/btrfs/transaction.c | 6 +- fs/cifs/dir.c | 2 +- fs/exec.c | 7 +-- fs/ext2/xattr.c | 2 +- fs/kernfs/symlink.c | 2 +- include/linux/sched.h | 7 ++- include/linux/usb.h | 4 +- include/sound/pcm_params.h | 4 +- kernel/debug/kdb/kdb_support.c | 4 +- kernel/events/uprobes.c | 12 +++- lib/kobject.c | 2 +- mm/mlock.c | 3 + mm/truncate.c | 8 ++- net/batman-adv/fragmentation.c | 2 +- net/ipv4/ip_tunnel.c | 4 +- net/mac80211/iface.c | 2 + net/mac80211/rx.c | 1 + net/mac80211/status.c | 2 + net/mac80211/tx.c | 4 +- net/sunrpc/auth_gss/auth_gss.c | 4 ++ scripts/Makefile.extrawarn | 3 + scripts/unifdef.c | 4 +- sound/core/control.c | 80 +++++++++++++++----------- sound/core/pcm_native.c | 14 +++-- sound/isa/wss/wss_lib.c | 2 - sound/pci/ac97/ac97_codec.c | 2 +- sound/pci/hda/hda_intel.c | 4 ++ sound/pci/trident/trident.c | 2 +- sound/sparc/cs4231.c | 8 +-- sound/usb/card.c | 5 +- 105 files changed, 490 insertions(+), 382 deletions(-)