From patchwork Tue Jan 15 07:16:11 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Juerg Haefliger X-Patchwork-Id: 1025037 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=none (mailfrom) smtp.mailfrom=lists.ubuntu.com (client-ip=91.189.94.19; helo=huckleberry.canonical.com; envelope-from=kernel-team-bounces@lists.ubuntu.com; receiver=) Authentication-Results: ozlabs.org; dmarc=fail (p=none dis=none) header.from=canonical.com Received: from huckleberry.canonical.com (huckleberry.canonical.com [91.189.94.19]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 43f1pz0ynmz9sBZ; Tue, 15 Jan 2019 18:16:26 +1100 (AEDT) Received: from localhost ([127.0.0.1] helo=huckleberry.canonical.com) by huckleberry.canonical.com with esmtp (Exim 4.86_2) (envelope-from ) id 1gjIxN-0003cd-VG; Tue, 15 Jan 2019 07:16:17 +0000 Received: from youngberry.canonical.com ([91.189.89.112]) by huckleberry.canonical.com with esmtps (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.86_2) (envelope-from ) id 1gjIxL-0003cX-47 for kernel-team@lists.ubuntu.com; Tue, 15 Jan 2019 07:16:15 +0000 Received: from mail-ed1-f69.google.com ([209.85.208.69]) by youngberry.canonical.com with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.76) (envelope-from ) id 1gjIxK-0002ye-T4 for kernel-team@lists.ubuntu.com; Tue, 15 Jan 2019 07:16:14 +0000 Received: by mail-ed1-f69.google.com with SMTP id l45so770391edb.1 for ; Mon, 14 Jan 2019 23:16:14 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:message-id:mime-version :content-transfer-encoding; bh=Dj36iLOxMyYTrf2ehKxGH2f148aY3aiaH7jE8em6lcQ=; b=OIKyCAlTmmFdaS4o4lJlnY9n7Q3OrIXEMrlPvFd0NNny7wEH3FkrqS/4LgKt8v2jvl S1Qppw8r4YPAAVp8g1RQ5LOEYN5aUfNpYOz07Sssu4Vl6pffR8OdjLnBmuPWvY0+hx7p NjKfeMKOvaogFTfAuN5gkxaKsfvdAY9bd1EOiQLhK6qFKeoZIiYfFWHODvnxrZZ7AASW rEDhlV3SEgCWy+fGFp6XVOYcmBjoMPb6yqJvd6Xg3+hGUcLpIus1O5/Qp7sUhTKzd08A d1HCmZSEO7VIZb05ztpKxZ3x7I5WK2HKTpWNr/O/lzsXXHhLE2G5BO5zpe+YKuvt1+er l5Vg== X-Gm-Message-State: AJcUukffd+ObCsJAquU8E7GjFlGZuG/c6dY0FOHtISPWL9+k5Dmj7x5u W+n6wOeJCz2YmrUcup0hImipJjH5avZxMUNiDJ1zW1rzCk14SI3Ydz0lKvFAAXI0Q3JvPc13WDA 31o9C2GO8gmLzy715EYsLc7Xn4knUJmladaOvIjJO+Q== X-Received: by 2002:a50:9624:: with SMTP id y33mr2226565eda.206.1547536574177; Mon, 14 Jan 2019 23:16:14 -0800 (PST) X-Google-Smtp-Source: ALg8bN54YildvDLTG2Th0CyW87MG3YUALHAZKpLNrDl763Ke7fK++6pF06DducFehuXo3hwTuccOPg== X-Received: by 2002:a50:9624:: with SMTP id y33mr2226542eda.206.1547536573589; Mon, 14 Jan 2019 23:16:13 -0800 (PST) Received: from gollum.fritz.box ([81.221.192.120]) by smtp.gmail.com with ESMTPSA id e14sm4687919edb.79.2019.01.14.23.16.12 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 14 Jan 2019 23:16:12 -0800 (PST) From: Juerg Haefliger X-Google-Original-From: Juerg Haefliger To: kernel-team@lists.ubuntu.com Subject: [SRU][Xenial][PULL] Xenial update: 4.4.168 upstream stable release (LP: #1811080) Date: Tue, 15 Jan 2019 08:16:11 +0100 Message-Id: <20190115071611.8517-1-juergh@canonical.com> X-Mailer: git-send-email 2.19.1 MIME-Version: 1.0 X-BeenThere: kernel-team@lists.ubuntu.com X-Mailman-Version: 2.1.20 Precedence: list List-Id: Kernel team discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: kernel-team-bounces@lists.ubuntu.com Sender: "kernel-team" SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: 4.4.168 upstream stable release from git://git.kernel.org/ Linux 4.4.168 selftests: Move networking/timestamping from Documentation rocker: fix rocker_tlv_put_* functions for KASAN staging: speakup: Replace strncpy with memcpy matroxfb: fix size of memcpy media: dvb-frontends: fix i2c access helpers for KASAN proc: do not access cmdline nor environ from file-backed areas proc: don't use FOLL_FORCE for reading cmdline and environment mm: replace access_remote_vm() write parameter with gup_flags mm: replace __access_remote_vm() write parameter with gup_flags mm: replace get_user_pages() write/force parameters with gup_flags mm: replace get_vaddr_frames() write/force parameters with gup_flags mm: replace get_user_pages_locked() write/force parameters with gup_flags mm: replace get_user_pages_unlocked() write/force parameters with gup_flags mm/nommu.c: Switch __get_user_pages_unlocked() to use __get_user_pages() mm: remove write/force parameters from __get_user_pages_unlocked() mm: remove write/force parameters from __get_user_pages_locked() sr: pass down correctly sized SCSI sense buffer swiotlb: clean up reporting hugetlbfs: fix bug in pgoff overflow checking hugetlbfs: check for pgoff value overflow hugetlbfs: fix offset overflow in hugetlbfs mmap mm/hugetlb.c: don't call region_abort if region_chg fails posix-timers: Sanitize overrun handling wil6210: missing length check in wmi_set_ie bpf: Prevent memory disambiguation attack bpf/verifier: Pass instruction index to check_mem_access() and check_xadd() bpf/verifier: Add spi variable to check_stack_write() bpf: support 8-byte metafield access KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL KVM: SVM: Move spec control call after restore of GS x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest x86/bugs, KVM: Support the combination of guest and host IBRS x86/uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec x86/usercopy: Replace open coded stac/clac with __uaccess_{begin, end} x86: Introduce __uaccess_begin_nospec() and uaccess_try_nospec x86: fix SMAP in 32-bit environments x86: reorganize SMAP handling in user space accesses KVM/x86: Remove indirect MSR op calls from SPEC_CTRL KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES KVM/x86: Add IBPB support KVM: VMX: make MSR bitmaps per-VCPU KVM: VMX: introduce alloc_loaded_vmcs KVM: nVMX: Eliminate vmcs02 pool KVM: nVMX: mark vmcs12 pages dirty on L2 exit KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC ALSA: pcm: remove SNDRV_PCM_IOCTL1_INFO internal command pstore: Convert console write to use ->write_buf ocfs2: fix potential use after free debugobjects: avoid recursive calls with kmemleak hfsplus: do not free node before using hfs: do not free node before using ocfs2: fix deadlock caused by ocfs2_defrag_extent() fscache, cachefiles: remove redundant variable 'cache' fscache: fix race between enablement and dropping of object xen: xlate_mmu: add missing header to fix 'W=1' warning drm/ast: fixed reading monitor EDID not stable issue net: hisilicon: remove unexpected free_netdev ixgbe: recognize 1000BaseLX SFP modules as 1Gbps net: thunderx: fix NULL pointer dereference in nic_remove KVM: x86: fix empty-body warnings USB: omap_udc: fix USB gadget functionality on Palm Tungsten E USB: omap_udc: fix omap_udc_start() on 15xx machines USB: omap_udc: fix crashes on probe error and module removal USB: omap_udc: use devm_request_irq() bpf: fix check of allowed specifiers in bpf_trace_printk exportfs: do not read dentry after free ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE Btrfs: send, fix infinite loop due to directory rename dependencies hwmon: (w83795) temp4_type has writable permission ASoC: dapm: Recalculate audio map forcely when card instantiated hwmon: (ina2xx) Fix current value calculation s390/cpum_cf: Reject request for sampling in event initialization sysv: return 'err' instead of 0 in __sysv_write_inode ARM: OMAP1: ams-delta: Fix possible use of uninitialized field ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup neighbour: Avoid writing before skb->head in neigh_hh_output() tun: forbid iface creation with rtnl ops tcp: fix NULL ref in tail loss probe rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices net: Prevent invalid access to skb->prev in __qdisc_drop_all net: phy: don't allow __set_phy_supported to add unsupported modes net: 8139cp: fix a BUG triggered by changing mtu with network traffic ipv6: Check available headroom in ip6_xmit() even without options Compile-tested all architectures. Ran release regressions tests (locally). Signed-off-by: Juerg Haefliger --- The following changes since commit 10d1abb1745d28aad00f0b549e50b88ec07fb936: netfilter: nf_conncount: don't skip eviction when age is negative (2019-01-10 17:23:37 +0100) are available in the Git repository at: git://git.launchpad.net/~juergh/+git/xenial-linux update-4.4.168 for you to fetch changes up to 6bbb2652eae9925a577a741f25bfdb70e0573b35: Linux 4.4.168 (2019-01-11 10:12:20 +0100) ---------------------------------------------------------------- Aaro Koskinen (4): USB: omap_udc: use devm_request_irq() USB: omap_udc: fix crashes on probe error and module removal USB: omap_udc: fix omap_udc_start() on 15xx machines USB: omap_udc: fix USB gadget functionality on Palm Tungsten E Alexei Starovoitov (2): bpf: support 8-byte metafield access bpf: Prevent memory disambiguation attack Arnd Bergmann (2): media: dvb-frontends: fix i2c access helpers for KASAN rocker: fix rocker_tlv_put_* functions for KASAN Ashok Raj (1): KVM/x86: Add IBPB support Ben Hutchings (3): bpf/verifier: Add spi variable to check_stack_write() bpf/verifier: Pass instruction index to check_mem_access() and check_xadd() mm/nommu.c: Switch __get_user_pages_unlocked() to use __get_user_pages() Christoph Paasch (1): net: Prevent invalid access to skb->prev in __qdisc_drop_all Colin Ian King (1): fscache, cachefiles: remove redundant variable 'cache' Dan Williams (1): [Fix] x86/uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec David Matlack (1): KVM: nVMX: mark vmcs12 pages dirty on L2 exit Eric Dumazet (1): rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices Greg Kroah-Hartman (1): Linux 4.4.168 Guenter Roeck (1): staging: speakup: Replace strncpy with memcpy Heiner Kallweit (1): net: phy: don't allow __set_phy_supported to add unsupported modes Huacai Chen (1): hwmon: (w83795) temp4_type has writable permission Janusz Krzysztofik (1): ARM: OMAP1: ams-delta: Fix possible use of uninitialized field Jens Axboe (1): sr: pass down correctly sized SCSI sense buffer Jim Mattson (1): KVM: nVMX: Eliminate vmcs02 pool Josh Elsasser (1): ixgbe: recognize 1000BaseLX SFP modules as 1Gbps KarimAllah Ahmed (2): KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL Kees Cook (1): swiotlb: clean up reporting Larry Chen (1): ocfs2: fix deadlock caused by ocfs2_defrag_extent() Linus Torvalds (1): proc: don't use FOLL_FORCE for reading cmdline and environment Lior David (1): wil6210: missing length check in wmi_set_ie Lorenzo Bianconi (1): net: thunderx: fix NULL pointer dereference in nic_remove Lorenzo Stoakes (8): mm: remove write/force parameters from __get_user_pages_locked() mm: remove write/force parameters from __get_user_pages_unlocked() mm: replace get_user_pages_unlocked() write/force parameters with gup_flags mm: replace get_user_pages_locked() write/force parameters with gup_flags mm: replace get_vaddr_frames() write/force parameters with gup_flags mm: replace get_user_pages() write/force parameters with gup_flags mm: replace __access_remote_vm() write parameter with gup_flags mm: replace access_remote_vm() write parameter with gup_flags Martynas Pumputis (1): bpf: fix check of allowed specifiers in bpf_trace_printk Mike Kravetz (4): mm/hugetlb.c: don't call region_abort if region_chg fails hugetlbfs: fix offset overflow in hugetlbfs mmap hugetlbfs: check for pgoff value overflow hugetlbfs: fix bug in pgoff overflow checking Namhyung Kim (1): pstore: Convert console write to use ->write_buf Nathan Chancellor (1): ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup NeilBrown (1): fscache: fix race between enablement and dropping of object Nicolas Dichtel (1): tun: forbid iface creation with rtnl ops Nicolin Chen (1): hwmon: (ina2xx) Fix current value calculation Pan Bian (5): exportfs: do not read dentry after free net: hisilicon: remove unexpected free_netdev hfs: do not free node before using hfsplus: do not free node before using ocfs2: fix potential use after free Paolo Bonzini (3): KVM: VMX: introduce alloc_loaded_vmcs KVM: VMX: make MSR bitmaps per-VCPU KVM/x86: Remove indirect MSR op calls from SPEC_CTRL Peter Ujfalusi (2): ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE Qian Cai (1): debugobjects: avoid recursive calls with kmemleak Radim Krčmář (1): KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC Robbie Ko (1): Btrfs: send, fix infinite loop due to directory rename dependencies Shuah Khan (1): selftests: Move networking/timestamping from Documentation Srikanth Boddepalli (1): xen: xlate_mmu: add missing header to fix 'W=1' warning Stefano Brivio (2): ipv6: Check available headroom in ip6_xmit() even without options neighbour: Avoid writing before skb->head in neigh_hh_output() Su Yanjun (1): net: 8139cp: fix a BUG triggered by changing mtu with network traffic Sudip Mukherjee (1): matroxfb: fix size of memcpy Takashi Sakamoto (1): ALSA: pcm: remove SNDRV_PCM_IOCTL1_INFO internal command Thomas Richter (1): s390/cpum_cf: Reject request for sampling in event initialization Tom Lendacky (1): [Fix] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD Tzung-Bi Shih (1): ASoC: dapm: Recalculate audio map forcely when card instantiated Willy Tarreau (1): proc: do not access cmdline nor environ from file-backed areas Y.C. Chen (1): drm/ast: fixed reading monitor EDID not stable issue Yi Wang (1): KVM: x86: fix empty-body warnings Yuchung Cheng (1): tcp: fix NULL ref in tail loss probe YueHaibing (1): sysv: return 'err' instead of 0 in __sysv_write_inode Documentation/Makefile | 3 +- Documentation/networking/Makefile | 1 - Documentation/networking/timestamping/Makefile | 14 - Makefile | 2 +- arch/arm/mach-omap1/board-ams-delta.c | 3 + arch/arm/mach-omap2/prm44xx.c | 2 +- arch/cris/arch-v32/drivers/cryptocop.c | 4 +- arch/ia64/kernel/err_inject.c | 2 +- arch/mips/mm/gup.c | 2 +- arch/s390/kernel/perf_cpum_cf.c | 2 + arch/s390/mm/gup.c | 2 +- arch/sh/mm/gup.c | 3 +- arch/sparc/mm/gup.c | 3 +- arch/x86/include/asm/kvm_host.h | 2 - arch/x86/include/asm/uaccess_32.h | 8 +- arch/x86/kvm/cpuid.c | 20 +- arch/x86/kvm/cpuid.h | 32 + arch/x86/kvm/lapic.c | 2 +- arch/x86/kvm/svm.c | 134 +++- arch/x86/kvm/vmx.c | 706 +++++++++++---------- arch/x86/lib/usercopy_32.c | 2 +- arch/x86/mm/gup.c | 2 +- arch/x86/mm/mpx.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 6 +- drivers/gpu/drm/ast/ast_mode.c | 36 +- drivers/gpu/drm/exynos/exynos_drm_g2d.c | 3 +- drivers/gpu/drm/i915/i915_gem_userptr.c | 6 +- drivers/gpu/drm/radeon/radeon_ttm.c | 2 +- drivers/gpu/drm/via/via_dmablit.c | 4 +- drivers/hwmon/ina2xx.c | 2 +- drivers/hwmon/w83795.c | 2 +- drivers/infiniband/core/umem.c | 6 +- drivers/infiniband/core/umem_odp.c | 7 +- drivers/infiniband/hw/mthca/mthca_memfree.c | 4 +- drivers/infiniband/hw/qib/qib_user_pages.c | 3 +- drivers/infiniband/hw/usnic/usnic_uiom.c | 5 +- drivers/media/dvb-frontends/ascot2e.c | 4 +- drivers/media/dvb-frontends/cxd2841er.c | 4 +- drivers/media/dvb-frontends/horus3a.c | 4 +- drivers/media/dvb-frontends/itd1000.c | 5 +- drivers/media/dvb-frontends/mt312.c | 5 +- drivers/media/dvb-frontends/stb0899_drv.c | 3 +- drivers/media/dvb-frontends/stb6100.c | 6 +- drivers/media/dvb-frontends/stv0367.c | 4 +- drivers/media/dvb-frontends/stv090x.c | 4 +- drivers/media/dvb-frontends/stv6110x.c | 4 +- drivers/media/dvb-frontends/zl10039.c | 4 +- drivers/media/pci/ivtv/ivtv-udma.c | 3 +- drivers/media/pci/ivtv/ivtv-yuv.c | 8 +- drivers/media/platform/omap/omap_vout.c | 2 +- drivers/media/v4l2-core/videobuf-dma-sg.c | 7 +- drivers/media/v4l2-core/videobuf2-memops.c | 6 +- drivers/misc/mic/scif/scif_rma.c | 3 +- drivers/misc/sgi-gru/grufault.c | 2 +- drivers/net/ethernet/cavium/thunder/nic_main.c | 3 + drivers/net/ethernet/hisilicon/hip04_eth.c | 4 +- drivers/net/ethernet/intel/ixgbe/ixgbe_x550.c | 4 +- drivers/net/ethernet/realtek/8139cp.c | 5 + drivers/net/ethernet/rocker/rocker.c | 24 +- drivers/net/phy/phy_device.c | 19 +- drivers/net/tun.c | 6 +- drivers/net/wireless/ath/wil6210/wmi.c | 8 +- drivers/scsi/sr_ioctl.c | 21 +- drivers/scsi/st.c | 5 +- drivers/staging/rdma/hfi1/user_pages.c | 2 +- drivers/staging/rdma/ipath/ipath_user_pages.c | 2 +- drivers/staging/speakup/kobjects.c | 4 +- drivers/usb/gadget/udc/omap_udc.c | 87 +-- drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 2 +- drivers/video/fbdev/pvr2fb.c | 2 +- drivers/virt/fsl_hypervisor.c | 4 +- drivers/xen/xlate_mmu.c | 1 + fs/btrfs/send.c | 11 +- fs/cachefiles/rdwr.c | 3 - fs/exec.c | 9 +- fs/exportfs/expfs.c | 2 +- fs/fscache/object.c | 3 + fs/hfs/btree.c | 3 +- fs/hfsplus/btree.c | 3 +- fs/hugetlbfs/inode.c | 30 +- fs/ocfs2/export.c | 2 +- fs/ocfs2/move_extents.c | 47 +- fs/proc/base.c | 19 +- fs/pstore/platform.c | 4 +- fs/sysv/inode.c | 2 +- include/linux/mm.h | 15 +- include/net/neighbour.h | 28 +- include/sound/pcm.h | 2 +- kernel/bpf/verifier.c | 98 ++- kernel/events/uprobes.c | 4 +- kernel/trace/bpf_trace.c | 8 +- lib/debugobjects.c | 3 +- lib/swiotlb.c | 20 +- mm/frame_vector.c | 9 +- mm/gup.c | 42 +- mm/hugetlb.c | 12 +- mm/memory.c | 18 +- mm/mempolicy.c | 2 +- mm/nommu.c | 42 +- mm/process_vm_access.c | 6 +- mm/util.c | 2 +- net/ceph/pagevec.c | 2 +- net/core/rtnetlink.c | 3 + net/ipv4/tcp_output.c | 12 +- net/ipv6/ip6_output.c | 42 +- net/sched/sch_netem.c | 3 + security/tomoyo/domain.c | 3 +- sound/core/pcm_lib.c | 2 - sound/core/pcm_native.c | 6 +- sound/soc/omap/omap-dmic.c | 9 + sound/soc/omap/omap-mcpdm.c | 43 +- sound/soc/soc-core.c | 1 + .../selftests}/networking/timestamping/.gitignore | 0 .../selftests/networking/timestamping/Makefile | 8 + .../networking/timestamping/hwtstamp_config.c | 0 .../networking/timestamping/timestamping.c | 0 .../networking/timestamping/txtimestamp.c | 0 ubuntu/i915/i915_gem_userptr.c | 6 +- ubuntu/vbox/r0drv/linux/memobj-r0drv-linux.c | 5 +- virt/kvm/async_pf.c | 2 +- virt/kvm/kvm_main.c | 11 +- 121 files changed, 1179 insertions(+), 749 deletions(-) delete mode 100644 Documentation/networking/Makefile delete mode 100644 Documentation/networking/timestamping/Makefile rename {Documentation => tools/testing/selftests}/networking/timestamping/.gitignore (100%) create mode 100644 tools/testing/selftests/networking/timestamping/Makefile rename {Documentation => tools/testing/selftests}/networking/timestamping/hwtstamp_config.c (100%) rename {Documentation => tools/testing/selftests}/networking/timestamping/timestamping.c (100%) rename {Documentation => tools/testing/selftests}/networking/timestamping/txtimestamp.c (100%)