mbox series

[SRU,Xenial,PULL] Xenial update: 4.4.168 upstream stable release (LP: #1811080)

Message ID 20190115071611.8517-1-juergh@canonical.com
State New
Headers show
Series [SRU,Xenial,PULL] Xenial update: 4.4.168 upstream stable release (LP: #1811080) | expand

Pull-request

git://git.launchpad.net/~juergh/+git/xenial-linux update-4.4.168

Message

Juerg Haefliger Jan. 15, 2019, 7:16 a.m. UTC
SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       4.4.168 upstream stable release
       from git://git.kernel.org/

            
Linux 4.4.168
selftests: Move networking/timestamping from Documentation
rocker: fix rocker_tlv_put_* functions for KASAN
staging: speakup: Replace strncpy with memcpy
matroxfb: fix size of memcpy
media: dvb-frontends: fix i2c access helpers for KASAN
proc: do not access cmdline nor environ from file-backed areas
proc: don't use FOLL_FORCE for reading cmdline and environment
mm: replace access_remote_vm() write parameter with gup_flags
mm: replace __access_remote_vm() write parameter with gup_flags
mm: replace get_user_pages() write/force parameters with gup_flags
mm: replace get_vaddr_frames() write/force parameters with gup_flags
mm: replace get_user_pages_locked() write/force parameters with gup_flags
mm: replace get_user_pages_unlocked() write/force parameters with gup_flags
mm/nommu.c: Switch __get_user_pages_unlocked() to use __get_user_pages()
mm: remove write/force parameters from __get_user_pages_unlocked()
mm: remove write/force parameters from __get_user_pages_locked()
sr: pass down correctly sized SCSI sense buffer
swiotlb: clean up reporting
hugetlbfs: fix bug in pgoff overflow checking
hugetlbfs: check for pgoff value overflow
hugetlbfs: fix offset overflow in hugetlbfs mmap
mm/hugetlb.c: don't call region_abort if region_chg fails
posix-timers: Sanitize overrun handling
wil6210: missing length check in wmi_set_ie
bpf: Prevent memory disambiguation attack
bpf/verifier: Pass instruction index to check_mem_access() and check_xadd()
bpf/verifier: Add spi variable to check_stack_write()
bpf: support 8-byte metafield access
KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD
x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP
x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL
KVM: SVM: Move spec control call after restore of GS
x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest
x86/bugs, KVM: Support the combination of guest and host IBRS
x86/uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec
x86/usercopy: Replace open coded stac/clac with __uaccess_{begin, end}
x86: Introduce __uaccess_begin_nospec() and uaccess_try_nospec
x86: fix SMAP in 32-bit environments
x86: reorganize SMAP handling in user space accesses
KVM/x86: Remove indirect MSR op calls from SPEC_CTRL
KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL
KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL
KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES
KVM/x86: Add IBPB support
KVM: VMX: make MSR bitmaps per-VCPU
KVM: VMX: introduce alloc_loaded_vmcs
KVM: nVMX: Eliminate vmcs02 pool
KVM: nVMX: mark vmcs12 pages dirty on L2 exit
KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC
ALSA: pcm: remove SNDRV_PCM_IOCTL1_INFO internal command
pstore: Convert console write to use ->write_buf
ocfs2: fix potential use after free
debugobjects: avoid recursive calls with kmemleak
hfsplus: do not free node before using
hfs: do not free node before using
ocfs2: fix deadlock caused by ocfs2_defrag_extent()
fscache, cachefiles: remove redundant variable 'cache'
fscache: fix race between enablement and dropping of object
xen: xlate_mmu: add missing header to fix 'W=1' warning
drm/ast: fixed reading monitor EDID not stable issue
net: hisilicon: remove unexpected free_netdev
ixgbe: recognize 1000BaseLX SFP modules as 1Gbps
net: thunderx: fix NULL pointer dereference in nic_remove
KVM: x86: fix empty-body warnings
USB: omap_udc: fix USB gadget functionality on Palm Tungsten E
USB: omap_udc: fix omap_udc_start() on 15xx machines
USB: omap_udc: fix crashes on probe error and module removal
USB: omap_udc: use devm_request_irq()
bpf: fix check of allowed specifiers in bpf_trace_printk
exportfs: do not read dentry after free
ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE
ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE
Btrfs: send, fix infinite loop due to directory rename dependencies
hwmon: (w83795) temp4_type has writable permission
ASoC: dapm: Recalculate audio map forcely when card instantiated
hwmon: (ina2xx) Fix current value calculation
s390/cpum_cf: Reject request for sampling in event initialization
sysv: return 'err' instead of 0 in __sysv_write_inode
ARM: OMAP1: ams-delta: Fix possible use of uninitialized field
ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup
neighbour: Avoid writing before skb->head in neigh_hh_output()
tun: forbid iface creation with rtnl ops
tcp: fix NULL ref in tail loss probe
rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
net: Prevent invalid access to skb->prev in __qdisc_drop_all
net: phy: don't allow __set_phy_supported to add unsupported modes
net: 8139cp: fix a BUG triggered by changing mtu with network traffic
ipv6: Check available headroom in ip6_xmit() even without options

Compile-tested all architectures. Ran release regressions tests (locally).

Signed-off-by: Juerg Haefliger <juergh@canonical.com>
---

The following changes since commit 10d1abb1745d28aad00f0b549e50b88ec07fb936:

  netfilter: nf_conncount: don't skip eviction when age is negative (2019-01-10 17:23:37 +0100)

are available in the Git repository at:

  git://git.launchpad.net/~juergh/+git/xenial-linux update-4.4.168

for you to fetch changes up to 6bbb2652eae9925a577a741f25bfdb70e0573b35:

  Linux 4.4.168 (2019-01-11 10:12:20 +0100)

----------------------------------------------------------------
Aaro Koskinen (4):
      USB: omap_udc: use devm_request_irq()
      USB: omap_udc: fix crashes on probe error and module removal
      USB: omap_udc: fix omap_udc_start() on 15xx machines
      USB: omap_udc: fix USB gadget functionality on Palm Tungsten E

Alexei Starovoitov (2):
      bpf: support 8-byte metafield access
      bpf: Prevent memory disambiguation attack

Arnd Bergmann (2):
      media: dvb-frontends: fix i2c access helpers for KASAN
      rocker: fix rocker_tlv_put_* functions for KASAN

Ashok Raj (1):
      KVM/x86: Add IBPB support

Ben Hutchings (3):
      bpf/verifier: Add spi variable to check_stack_write()
      bpf/verifier: Pass instruction index to check_mem_access() and check_xadd()
      mm/nommu.c: Switch __get_user_pages_unlocked() to use __get_user_pages()

Christoph Paasch (1):
      net: Prevent invalid access to skb->prev in __qdisc_drop_all

Colin Ian King (1):
      fscache, cachefiles: remove redundant variable 'cache'

Dan Williams (1):
      [Fix] x86/uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec

David Matlack (1):
      KVM: nVMX: mark vmcs12 pages dirty on L2 exit

Eric Dumazet (1):
      rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices

Greg Kroah-Hartman (1):
      Linux 4.4.168

Guenter Roeck (1):
      staging: speakup: Replace strncpy with memcpy

Heiner Kallweit (1):
      net: phy: don't allow __set_phy_supported to add unsupported modes

Huacai Chen (1):
      hwmon: (w83795) temp4_type has writable permission

Janusz Krzysztofik (1):
      ARM: OMAP1: ams-delta: Fix possible use of uninitialized field

Jens Axboe (1):
      sr: pass down correctly sized SCSI sense buffer

Jim Mattson (1):
      KVM: nVMX: Eliminate vmcs02 pool

Josh Elsasser (1):
      ixgbe: recognize 1000BaseLX SFP modules as 1Gbps

KarimAllah Ahmed (2):
      KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL
      KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL

Kees Cook (1):
      swiotlb: clean up reporting

Larry Chen (1):
      ocfs2: fix deadlock caused by ocfs2_defrag_extent()

Linus Torvalds (1):
      proc: don't use FOLL_FORCE for reading cmdline and environment

Lior David (1):
      wil6210: missing length check in wmi_set_ie

Lorenzo Bianconi (1):
      net: thunderx: fix NULL pointer dereference in nic_remove

Lorenzo Stoakes (8):
      mm: remove write/force parameters from __get_user_pages_locked()
      mm: remove write/force parameters from __get_user_pages_unlocked()
      mm: replace get_user_pages_unlocked() write/force parameters with gup_flags
      mm: replace get_user_pages_locked() write/force parameters with gup_flags
      mm: replace get_vaddr_frames() write/force parameters with gup_flags
      mm: replace get_user_pages() write/force parameters with gup_flags
      mm: replace __access_remote_vm() write parameter with gup_flags
      mm: replace access_remote_vm() write parameter with gup_flags

Martynas Pumputis (1):
      bpf: fix check of allowed specifiers in bpf_trace_printk

Mike Kravetz (4):
      mm/hugetlb.c: don't call region_abort if region_chg fails
      hugetlbfs: fix offset overflow in hugetlbfs mmap
      hugetlbfs: check for pgoff value overflow
      hugetlbfs: fix bug in pgoff overflow checking

Namhyung Kim (1):
      pstore: Convert console write to use ->write_buf

Nathan Chancellor (1):
      ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup

NeilBrown (1):
      fscache: fix race between enablement and dropping of object

Nicolas Dichtel (1):
      tun: forbid iface creation with rtnl ops

Nicolin Chen (1):
      hwmon: (ina2xx) Fix current value calculation

Pan Bian (5):
      exportfs: do not read dentry after free
      net: hisilicon: remove unexpected free_netdev
      hfs: do not free node before using
      hfsplus: do not free node before using
      ocfs2: fix potential use after free

Paolo Bonzini (3):
      KVM: VMX: introduce alloc_loaded_vmcs
      KVM: VMX: make MSR bitmaps per-VCPU
      KVM/x86: Remove indirect MSR op calls from SPEC_CTRL

Peter Ujfalusi (2):
      ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE
      ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE

Qian Cai (1):
      debugobjects: avoid recursive calls with kmemleak

Radim Krčmář (1):
      KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC

Robbie Ko (1):
      Btrfs: send, fix infinite loop due to directory rename dependencies

Shuah Khan (1):
      selftests: Move networking/timestamping from Documentation

Srikanth Boddepalli (1):
      xen: xlate_mmu: add missing header to fix 'W=1' warning

Stefano Brivio (2):
      ipv6: Check available headroom in ip6_xmit() even without options
      neighbour: Avoid writing before skb->head in neigh_hh_output()

Su Yanjun (1):
      net: 8139cp: fix a BUG triggered by changing mtu with network traffic

Sudip Mukherjee (1):
      matroxfb: fix size of memcpy

Takashi Sakamoto (1):
      ALSA: pcm: remove SNDRV_PCM_IOCTL1_INFO internal command

Thomas Richter (1):
      s390/cpum_cf: Reject request for sampling in event initialization

Tom Lendacky (1):
      [Fix] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD

Tzung-Bi Shih (1):
      ASoC: dapm: Recalculate audio map forcely when card instantiated

Willy Tarreau (1):
      proc: do not access cmdline nor environ from file-backed areas

Y.C. Chen (1):
      drm/ast: fixed reading monitor EDID not stable issue

Yi Wang (1):
      KVM: x86: fix empty-body warnings

Yuchung Cheng (1):
      tcp: fix NULL ref in tail loss probe

YueHaibing (1):
      sysv: return 'err' instead of 0 in __sysv_write_inode

 Documentation/Makefile                             |   3 +-
 Documentation/networking/Makefile                  |   1 -
 Documentation/networking/timestamping/Makefile     |  14 -
 Makefile                                           |   2 +-
 arch/arm/mach-omap1/board-ams-delta.c              |   3 +
 arch/arm/mach-omap2/prm44xx.c                      |   2 +-
 arch/cris/arch-v32/drivers/cryptocop.c             |   4 +-
 arch/ia64/kernel/err_inject.c                      |   2 +-
 arch/mips/mm/gup.c                                 |   2 +-
 arch/s390/kernel/perf_cpum_cf.c                    |   2 +
 arch/s390/mm/gup.c                                 |   2 +-
 arch/sh/mm/gup.c                                   |   3 +-
 arch/sparc/mm/gup.c                                |   3 +-
 arch/x86/include/asm/kvm_host.h                    |   2 -
 arch/x86/include/asm/uaccess_32.h                  |   8 +-
 arch/x86/kvm/cpuid.c                               |  20 +-
 arch/x86/kvm/cpuid.h                               |  32 +
 arch/x86/kvm/lapic.c                               |   2 +-
 arch/x86/kvm/svm.c                                 | 134 +++-
 arch/x86/kvm/vmx.c                                 | 706 +++++++++++----------
 arch/x86/lib/usercopy_32.c                         |   2 +-
 arch/x86/mm/gup.c                                  |   2 +-
 arch/x86/mm/mpx.c                                  |   3 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |   6 +-
 drivers/gpu/drm/ast/ast_mode.c                     |  36 +-
 drivers/gpu/drm/exynos/exynos_drm_g2d.c            |   3 +-
 drivers/gpu/drm/i915/i915_gem_userptr.c            |   6 +-
 drivers/gpu/drm/radeon/radeon_ttm.c                |   2 +-
 drivers/gpu/drm/via/via_dmablit.c                  |   4 +-
 drivers/hwmon/ina2xx.c                             |   2 +-
 drivers/hwmon/w83795.c                             |   2 +-
 drivers/infiniband/core/umem.c                     |   6 +-
 drivers/infiniband/core/umem_odp.c                 |   7 +-
 drivers/infiniband/hw/mthca/mthca_memfree.c        |   4 +-
 drivers/infiniband/hw/qib/qib_user_pages.c         |   3 +-
 drivers/infiniband/hw/usnic/usnic_uiom.c           |   5 +-
 drivers/media/dvb-frontends/ascot2e.c              |   4 +-
 drivers/media/dvb-frontends/cxd2841er.c            |   4 +-
 drivers/media/dvb-frontends/horus3a.c              |   4 +-
 drivers/media/dvb-frontends/itd1000.c              |   5 +-
 drivers/media/dvb-frontends/mt312.c                |   5 +-
 drivers/media/dvb-frontends/stb0899_drv.c          |   3 +-
 drivers/media/dvb-frontends/stb6100.c              |   6 +-
 drivers/media/dvb-frontends/stv0367.c              |   4 +-
 drivers/media/dvb-frontends/stv090x.c              |   4 +-
 drivers/media/dvb-frontends/stv6110x.c             |   4 +-
 drivers/media/dvb-frontends/zl10039.c              |   4 +-
 drivers/media/pci/ivtv/ivtv-udma.c                 |   3 +-
 drivers/media/pci/ivtv/ivtv-yuv.c                  |   8 +-
 drivers/media/platform/omap/omap_vout.c            |   2 +-
 drivers/media/v4l2-core/videobuf-dma-sg.c          |   7 +-
 drivers/media/v4l2-core/videobuf2-memops.c         |   6 +-
 drivers/misc/mic/scif/scif_rma.c                   |   3 +-
 drivers/misc/sgi-gru/grufault.c                    |   2 +-
 drivers/net/ethernet/cavium/thunder/nic_main.c     |   3 +
 drivers/net/ethernet/hisilicon/hip04_eth.c         |   4 +-
 drivers/net/ethernet/intel/ixgbe/ixgbe_x550.c      |   4 +-
 drivers/net/ethernet/realtek/8139cp.c              |   5 +
 drivers/net/ethernet/rocker/rocker.c               |  24 +-
 drivers/net/phy/phy_device.c                       |  19 +-
 drivers/net/tun.c                                  |   6 +-
 drivers/net/wireless/ath/wil6210/wmi.c             |   8 +-
 drivers/scsi/sr_ioctl.c                            |  21 +-
 drivers/scsi/st.c                                  |   5 +-
 drivers/staging/rdma/hfi1/user_pages.c             |   2 +-
 drivers/staging/rdma/ipath/ipath_user_pages.c      |   2 +-
 drivers/staging/speakup/kobjects.c                 |   4 +-
 drivers/usb/gadget/udc/omap_udc.c                  |  87 +--
 drivers/video/fbdev/matrox/matroxfb_Ti3026.c       |   2 +-
 drivers/video/fbdev/pvr2fb.c                       |   2 +-
 drivers/virt/fsl_hypervisor.c                      |   4 +-
 drivers/xen/xlate_mmu.c                            |   1 +
 fs/btrfs/send.c                                    |  11 +-
 fs/cachefiles/rdwr.c                               |   3 -
 fs/exec.c                                          |   9 +-
 fs/exportfs/expfs.c                                |   2 +-
 fs/fscache/object.c                                |   3 +
 fs/hfs/btree.c                                     |   3 +-
 fs/hfsplus/btree.c                                 |   3 +-
 fs/hugetlbfs/inode.c                               |  30 +-
 fs/ocfs2/export.c                                  |   2 +-
 fs/ocfs2/move_extents.c                            |  47 +-
 fs/proc/base.c                                     |  19 +-
 fs/pstore/platform.c                               |   4 +-
 fs/sysv/inode.c                                    |   2 +-
 include/linux/mm.h                                 |  15 +-
 include/net/neighbour.h                            |  28 +-
 include/sound/pcm.h                                |   2 +-
 kernel/bpf/verifier.c                              |  98 ++-
 kernel/events/uprobes.c                            |   4 +-
 kernel/trace/bpf_trace.c                           |   8 +-
 lib/debugobjects.c                                 |   3 +-
 lib/swiotlb.c                                      |  20 +-
 mm/frame_vector.c                                  |   9 +-
 mm/gup.c                                           |  42 +-
 mm/hugetlb.c                                       |  12 +-
 mm/memory.c                                        |  18 +-
 mm/mempolicy.c                                     |   2 +-
 mm/nommu.c                                         |  42 +-
 mm/process_vm_access.c                             |   6 +-
 mm/util.c                                          |   2 +-
 net/ceph/pagevec.c                                 |   2 +-
 net/core/rtnetlink.c                               |   3 +
 net/ipv4/tcp_output.c                              |  12 +-
 net/ipv6/ip6_output.c                              |  42 +-
 net/sched/sch_netem.c                              |   3 +
 security/tomoyo/domain.c                           |   3 +-
 sound/core/pcm_lib.c                               |   2 -
 sound/core/pcm_native.c                            |   6 +-
 sound/soc/omap/omap-dmic.c                         |   9 +
 sound/soc/omap/omap-mcpdm.c                        |  43 +-
 sound/soc/soc-core.c                               |   1 +
 .../selftests}/networking/timestamping/.gitignore  |   0
 .../selftests/networking/timestamping/Makefile     |   8 +
 .../networking/timestamping/hwtstamp_config.c      |   0
 .../networking/timestamping/timestamping.c         |   0
 .../networking/timestamping/txtimestamp.c          |   0
 ubuntu/i915/i915_gem_userptr.c                     |   6 +-
 ubuntu/vbox/r0drv/linux/memobj-r0drv-linux.c       |   5 +-
 virt/kvm/async_pf.c                                |   2 +-
 virt/kvm/kvm_main.c                                |  11 +-
 121 files changed, 1179 insertions(+), 749 deletions(-)
 delete mode 100644 Documentation/networking/Makefile
 delete mode 100644 Documentation/networking/timestamping/Makefile
 rename {Documentation => tools/testing/selftests}/networking/timestamping/.gitignore (100%)
 create mode 100644 tools/testing/selftests/networking/timestamping/Makefile
 rename {Documentation => tools/testing/selftests}/networking/timestamping/hwtstamp_config.c (100%)
 rename {Documentation => tools/testing/selftests}/networking/timestamping/timestamping.c (100%)
 rename {Documentation => tools/testing/selftests}/networking/timestamping/txtimestamp.c (100%)

Comments

Stefan Bader Feb. 1, 2019, 11:40 a.m. UTC | #1
On 15.01.19 08:16, Juerg Haefliger wrote:
> 
>     SRU Justification
> 
>     Impact:
>        The upstream process for stable tree updates is quite similar
>        in scope to the Ubuntu SRU process, e.g., each patch has to
>        demonstrably fix a bug, and each patch is vetted by upstream
>        by originating either directly from a mainline/stable Linux tree or
>        a minimally backported form of that patch. The following upstream
>        stable patches should be included in the Ubuntu kernel:
> 
>        4.4.168 upstream stable release
>        from git://git.kernel.org/
> 
>             
> Linux 4.4.168
> selftests: Move networking/timestamping from Documentation
> rocker: fix rocker_tlv_put_* functions for KASAN
> staging: speakup: Replace strncpy with memcpy
> matroxfb: fix size of memcpy
> media: dvb-frontends: fix i2c access helpers for KASAN
> proc: do not access cmdline nor environ from file-backed areas
> proc: don't use FOLL_FORCE for reading cmdline and environment
> mm: replace access_remote_vm() write parameter with gup_flags
> mm: replace __access_remote_vm() write parameter with gup_flags
> mm: replace get_user_pages() write/force parameters with gup_flags
> mm: replace get_vaddr_frames() write/force parameters with gup_flags
> mm: replace get_user_pages_locked() write/force parameters with gup_flags
> mm: replace get_user_pages_unlocked() write/force parameters with gup_flags
> mm/nommu.c: Switch __get_user_pages_unlocked() to use __get_user_pages()
> mm: remove write/force parameters from __get_user_pages_unlocked()
> mm: remove write/force parameters from __get_user_pages_locked()
> sr: pass down correctly sized SCSI sense buffer
> swiotlb: clean up reporting
> hugetlbfs: fix bug in pgoff overflow checking
> hugetlbfs: check for pgoff value overflow
> hugetlbfs: fix offset overflow in hugetlbfs mmap
> mm/hugetlb.c: don't call region_abort if region_chg fails
> posix-timers: Sanitize overrun handling
> wil6210: missing length check in wmi_set_ie
> bpf: Prevent memory disambiguation attack
> bpf/verifier: Pass instruction index to check_mem_access() and check_xadd()
> bpf/verifier: Add spi variable to check_stack_write()
> bpf: support 8-byte metafield access
> KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD
> x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP
> x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL
> KVM: SVM: Move spec control call after restore of GS
> x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest
> x86/bugs, KVM: Support the combination of guest and host IBRS
> x86/uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec
> x86/usercopy: Replace open coded stac/clac with __uaccess_{begin, end}
> x86: Introduce __uaccess_begin_nospec() and uaccess_try_nospec
> x86: fix SMAP in 32-bit environments
> x86: reorganize SMAP handling in user space accesses
> KVM/x86: Remove indirect MSR op calls from SPEC_CTRL
> KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL
> KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL
> KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES
> KVM/x86: Add IBPB support
> KVM: VMX: make MSR bitmaps per-VCPU
> KVM: VMX: introduce alloc_loaded_vmcs
> KVM: nVMX: Eliminate vmcs02 pool
> KVM: nVMX: mark vmcs12 pages dirty on L2 exit
> KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC
> ALSA: pcm: remove SNDRV_PCM_IOCTL1_INFO internal command
> pstore: Convert console write to use ->write_buf
> ocfs2: fix potential use after free
> debugobjects: avoid recursive calls with kmemleak
> hfsplus: do not free node before using
> hfs: do not free node before using
> ocfs2: fix deadlock caused by ocfs2_defrag_extent()
> fscache, cachefiles: remove redundant variable 'cache'
> fscache: fix race between enablement and dropping of object
> xen: xlate_mmu: add missing header to fix 'W=1' warning
> drm/ast: fixed reading monitor EDID not stable issue
> net: hisilicon: remove unexpected free_netdev
> ixgbe: recognize 1000BaseLX SFP modules as 1Gbps
> net: thunderx: fix NULL pointer dereference in nic_remove
> KVM: x86: fix empty-body warnings
> USB: omap_udc: fix USB gadget functionality on Palm Tungsten E
> USB: omap_udc: fix omap_udc_start() on 15xx machines
> USB: omap_udc: fix crashes on probe error and module removal
> USB: omap_udc: use devm_request_irq()
> bpf: fix check of allowed specifiers in bpf_trace_printk
> exportfs: do not read dentry after free
> ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE
> ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE
> Btrfs: send, fix infinite loop due to directory rename dependencies
> hwmon: (w83795) temp4_type has writable permission
> ASoC: dapm: Recalculate audio map forcely when card instantiated
> hwmon: (ina2xx) Fix current value calculation
> s390/cpum_cf: Reject request for sampling in event initialization
> sysv: return 'err' instead of 0 in __sysv_write_inode
> ARM: OMAP1: ams-delta: Fix possible use of uninitialized field
> ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup
> neighbour: Avoid writing before skb->head in neigh_hh_output()
> tun: forbid iface creation with rtnl ops
> tcp: fix NULL ref in tail loss probe
> rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
> net: Prevent invalid access to skb->prev in __qdisc_drop_all
> net: phy: don't allow __set_phy_supported to add unsupported modes
> net: 8139cp: fix a BUG triggered by changing mtu with network traffic
> ipv6: Check available headroom in ip6_xmit() even without options
> 
> Compile-tested all architectures. Ran release regressions tests (locally).
> 
> Signed-off-by: Juerg Haefliger <juergh@canonical.com>
> ---
> 
> The following changes since commit 10d1abb1745d28aad00f0b549e50b88ec07fb936:
> 
>   netfilter: nf_conncount: don't skip eviction when age is negative (2019-01-10 17:23:37 +0100)
> 
> are available in the Git repository at:
> 
>   git://git.launchpad.net/~juergh/+git/xenial-linux update-4.4.168
> 
> for you to fetch changes up to 6bbb2652eae9925a577a741f25bfdb70e0573b35:
> 
>   Linux 4.4.168 (2019-01-11 10:12:20 +0100)
> 
> ----------------------------------------------------------------
> Aaro Koskinen (4):
>       USB: omap_udc: use devm_request_irq()
>       USB: omap_udc: fix crashes on probe error and module removal
>       USB: omap_udc: fix omap_udc_start() on 15xx machines
>       USB: omap_udc: fix USB gadget functionality on Palm Tungsten E
> 
> Alexei Starovoitov (2):
>       bpf: support 8-byte metafield access
>       bpf: Prevent memory disambiguation attack
> 
> Arnd Bergmann (2):
>       media: dvb-frontends: fix i2c access helpers for KASAN
>       rocker: fix rocker_tlv_put_* functions for KASAN
> 
> Ashok Raj (1):
>       KVM/x86: Add IBPB support
> 
> Ben Hutchings (3):
>       bpf/verifier: Add spi variable to check_stack_write()
>       bpf/verifier: Pass instruction index to check_mem_access() and check_xadd()
>       mm/nommu.c: Switch __get_user_pages_unlocked() to use __get_user_pages()
> 
> Christoph Paasch (1):
>       net: Prevent invalid access to skb->prev in __qdisc_drop_all
> 
> Colin Ian King (1):
>       fscache, cachefiles: remove redundant variable 'cache'
> 
> Dan Williams (1):
>       [Fix] x86/uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec
> 
> David Matlack (1):
>       KVM: nVMX: mark vmcs12 pages dirty on L2 exit
> 
> Eric Dumazet (1):
>       rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
> 
> Greg Kroah-Hartman (1):
>       Linux 4.4.168
> 
> Guenter Roeck (1):
>       staging: speakup: Replace strncpy with memcpy
> 
> Heiner Kallweit (1):
>       net: phy: don't allow __set_phy_supported to add unsupported modes
> 
> Huacai Chen (1):
>       hwmon: (w83795) temp4_type has writable permission
> 
> Janusz Krzysztofik (1):
>       ARM: OMAP1: ams-delta: Fix possible use of uninitialized field
> 
> Jens Axboe (1):
>       sr: pass down correctly sized SCSI sense buffer
> 
> Jim Mattson (1):
>       KVM: nVMX: Eliminate vmcs02 pool
> 
> Josh Elsasser (1):
>       ixgbe: recognize 1000BaseLX SFP modules as 1Gbps
> 
> KarimAllah Ahmed (2):
>       KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL
>       KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL
> 
> Kees Cook (1):
>       swiotlb: clean up reporting
> 
> Larry Chen (1):
>       ocfs2: fix deadlock caused by ocfs2_defrag_extent()
> 
> Linus Torvalds (1):
>       proc: don't use FOLL_FORCE for reading cmdline and environment
> 
> Lior David (1):
>       wil6210: missing length check in wmi_set_ie
> 
> Lorenzo Bianconi (1):
>       net: thunderx: fix NULL pointer dereference in nic_remove
> 
> Lorenzo Stoakes (8):
>       mm: remove write/force parameters from __get_user_pages_locked()
>       mm: remove write/force parameters from __get_user_pages_unlocked()
>       mm: replace get_user_pages_unlocked() write/force parameters with gup_flags
>       mm: replace get_user_pages_locked() write/force parameters with gup_flags
>       mm: replace get_vaddr_frames() write/force parameters with gup_flags
>       mm: replace get_user_pages() write/force parameters with gup_flags
>       mm: replace __access_remote_vm() write parameter with gup_flags
>       mm: replace access_remote_vm() write parameter with gup_flags
> 
> Martynas Pumputis (1):
>       bpf: fix check of allowed specifiers in bpf_trace_printk
> 
> Mike Kravetz (4):
>       mm/hugetlb.c: don't call region_abort if region_chg fails
>       hugetlbfs: fix offset overflow in hugetlbfs mmap
>       hugetlbfs: check for pgoff value overflow
>       hugetlbfs: fix bug in pgoff overflow checking
> 
> Namhyung Kim (1):
>       pstore: Convert console write to use ->write_buf
> 
> Nathan Chancellor (1):
>       ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup
> 
> NeilBrown (1):
>       fscache: fix race between enablement and dropping of object
> 
> Nicolas Dichtel (1):
>       tun: forbid iface creation with rtnl ops
> 
> Nicolin Chen (1):
>       hwmon: (ina2xx) Fix current value calculation
> 
> Pan Bian (5):
>       exportfs: do not read dentry after free
>       net: hisilicon: remove unexpected free_netdev
>       hfs: do not free node before using
>       hfsplus: do not free node before using
>       ocfs2: fix potential use after free
> 
> Paolo Bonzini (3):
>       KVM: VMX: introduce alloc_loaded_vmcs
>       KVM: VMX: make MSR bitmaps per-VCPU
>       KVM/x86: Remove indirect MSR op calls from SPEC_CTRL
> 
> Peter Ujfalusi (2):
>       ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE
>       ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE
> 
> Qian Cai (1):
>       debugobjects: avoid recursive calls with kmemleak
> 
> Radim Krčmář (1):
>       KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC
> 
> Robbie Ko (1):
>       Btrfs: send, fix infinite loop due to directory rename dependencies
> 
> Shuah Khan (1):
>       selftests: Move networking/timestamping from Documentation
> 
> Srikanth Boddepalli (1):
>       xen: xlate_mmu: add missing header to fix 'W=1' warning
> 
> Stefano Brivio (2):
>       ipv6: Check available headroom in ip6_xmit() even without options
>       neighbour: Avoid writing before skb->head in neigh_hh_output()
> 
> Su Yanjun (1):
>       net: 8139cp: fix a BUG triggered by changing mtu with network traffic
> 
> Sudip Mukherjee (1):
>       matroxfb: fix size of memcpy
> 
> Takashi Sakamoto (1):
>       ALSA: pcm: remove SNDRV_PCM_IOCTL1_INFO internal command
> 
> Thomas Richter (1):
>       s390/cpum_cf: Reject request for sampling in event initialization
> 
> Tom Lendacky (1):
>       [Fix] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD
> 
> Tzung-Bi Shih (1):
>       ASoC: dapm: Recalculate audio map forcely when card instantiated
> 
> Willy Tarreau (1):
>       proc: do not access cmdline nor environ from file-backed areas
> 
> Y.C. Chen (1):
>       drm/ast: fixed reading monitor EDID not stable issue
> 
> Yi Wang (1):
>       KVM: x86: fix empty-body warnings
> 
> Yuchung Cheng (1):
>       tcp: fix NULL ref in tail loss probe
> 
> YueHaibing (1):
>       sysv: return 'err' instead of 0 in __sysv_write_inode
> 
>  Documentation/Makefile                             |   3 +-
>  Documentation/networking/Makefile                  |   1 -
>  Documentation/networking/timestamping/Makefile     |  14 -
>  Makefile                                           |   2 +-
>  arch/arm/mach-omap1/board-ams-delta.c              |   3 +
>  arch/arm/mach-omap2/prm44xx.c                      |   2 +-
>  arch/cris/arch-v32/drivers/cryptocop.c             |   4 +-
>  arch/ia64/kernel/err_inject.c                      |   2 +-
>  arch/mips/mm/gup.c                                 |   2 +-
>  arch/s390/kernel/perf_cpum_cf.c                    |   2 +
>  arch/s390/mm/gup.c                                 |   2 +-
>  arch/sh/mm/gup.c                                   |   3 +-
>  arch/sparc/mm/gup.c                                |   3 +-
>  arch/x86/include/asm/kvm_host.h                    |   2 -
>  arch/x86/include/asm/uaccess_32.h                  |   8 +-
>  arch/x86/kvm/cpuid.c                               |  20 +-
>  arch/x86/kvm/cpuid.h                               |  32 +
>  arch/x86/kvm/lapic.c                               |   2 +-
>  arch/x86/kvm/svm.c                                 | 134 +++-
>  arch/x86/kvm/vmx.c                                 | 706 +++++++++++----------
>  arch/x86/lib/usercopy_32.c                         |   2 +-
>  arch/x86/mm/gup.c                                  |   2 +-
>  arch/x86/mm/mpx.c                                  |   3 +-
>  drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |   6 +-
>  drivers/gpu/drm/ast/ast_mode.c                     |  36 +-
>  drivers/gpu/drm/exynos/exynos_drm_g2d.c            |   3 +-
>  drivers/gpu/drm/i915/i915_gem_userptr.c            |   6 +-
>  drivers/gpu/drm/radeon/radeon_ttm.c                |   2 +-
>  drivers/gpu/drm/via/via_dmablit.c                  |   4 +-
>  drivers/hwmon/ina2xx.c                             |   2 +-
>  drivers/hwmon/w83795.c                             |   2 +-
>  drivers/infiniband/core/umem.c                     |   6 +-
>  drivers/infiniband/core/umem_odp.c                 |   7 +-
>  drivers/infiniband/hw/mthca/mthca_memfree.c        |   4 +-
>  drivers/infiniband/hw/qib/qib_user_pages.c         |   3 +-
>  drivers/infiniband/hw/usnic/usnic_uiom.c           |   5 +-
>  drivers/media/dvb-frontends/ascot2e.c              |   4 +-
>  drivers/media/dvb-frontends/cxd2841er.c            |   4 +-
>  drivers/media/dvb-frontends/horus3a.c              |   4 +-
>  drivers/media/dvb-frontends/itd1000.c              |   5 +-
>  drivers/media/dvb-frontends/mt312.c                |   5 +-
>  drivers/media/dvb-frontends/stb0899_drv.c          |   3 +-
>  drivers/media/dvb-frontends/stb6100.c              |   6 +-
>  drivers/media/dvb-frontends/stv0367.c              |   4 +-
>  drivers/media/dvb-frontends/stv090x.c              |   4 +-
>  drivers/media/dvb-frontends/stv6110x.c             |   4 +-
>  drivers/media/dvb-frontends/zl10039.c              |   4 +-
>  drivers/media/pci/ivtv/ivtv-udma.c                 |   3 +-
>  drivers/media/pci/ivtv/ivtv-yuv.c                  |   8 +-
>  drivers/media/platform/omap/omap_vout.c            |   2 +-
>  drivers/media/v4l2-core/videobuf-dma-sg.c          |   7 +-
>  drivers/media/v4l2-core/videobuf2-memops.c         |   6 +-
>  drivers/misc/mic/scif/scif_rma.c                   |   3 +-
>  drivers/misc/sgi-gru/grufault.c                    |   2 +-
>  drivers/net/ethernet/cavium/thunder/nic_main.c     |   3 +
>  drivers/net/ethernet/hisilicon/hip04_eth.c         |   4 +-
>  drivers/net/ethernet/intel/ixgbe/ixgbe_x550.c      |   4 +-
>  drivers/net/ethernet/realtek/8139cp.c              |   5 +
>  drivers/net/ethernet/rocker/rocker.c               |  24 +-
>  drivers/net/phy/phy_device.c                       |  19 +-
>  drivers/net/tun.c                                  |   6 +-
>  drivers/net/wireless/ath/wil6210/wmi.c             |   8 +-
>  drivers/scsi/sr_ioctl.c                            |  21 +-
>  drivers/scsi/st.c                                  |   5 +-
>  drivers/staging/rdma/hfi1/user_pages.c             |   2 +-
>  drivers/staging/rdma/ipath/ipath_user_pages.c      |   2 +-
>  drivers/staging/speakup/kobjects.c                 |   4 +-
>  drivers/usb/gadget/udc/omap_udc.c                  |  87 +--
>  drivers/video/fbdev/matrox/matroxfb_Ti3026.c       |   2 +-
>  drivers/video/fbdev/pvr2fb.c                       |   2 +-
>  drivers/virt/fsl_hypervisor.c                      |   4 +-
>  drivers/xen/xlate_mmu.c                            |   1 +
>  fs/btrfs/send.c                                    |  11 +-
>  fs/cachefiles/rdwr.c                               |   3 -
>  fs/exec.c                                          |   9 +-
>  fs/exportfs/expfs.c                                |   2 +-
>  fs/fscache/object.c                                |   3 +
>  fs/hfs/btree.c                                     |   3 +-
>  fs/hfsplus/btree.c                                 |   3 +-
>  fs/hugetlbfs/inode.c                               |  30 +-
>  fs/ocfs2/export.c                                  |   2 +-
>  fs/ocfs2/move_extents.c                            |  47 +-
>  fs/proc/base.c                                     |  19 +-
>  fs/pstore/platform.c                               |   4 +-
>  fs/sysv/inode.c                                    |   2 +-
>  include/linux/mm.h                                 |  15 +-
>  include/net/neighbour.h                            |  28 +-
>  include/sound/pcm.h                                |   2 +-
>  kernel/bpf/verifier.c                              |  98 ++-
>  kernel/events/uprobes.c                            |   4 +-
>  kernel/trace/bpf_trace.c                           |   8 +-
>  lib/debugobjects.c                                 |   3 +-
>  lib/swiotlb.c                                      |  20 +-
>  mm/frame_vector.c                                  |   9 +-
>  mm/gup.c                                           |  42 +-
>  mm/hugetlb.c                                       |  12 +-
>  mm/memory.c                                        |  18 +-
>  mm/mempolicy.c                                     |   2 +-
>  mm/nommu.c                                         |  42 +-
>  mm/process_vm_access.c                             |   6 +-
>  mm/util.c                                          |   2 +-
>  net/ceph/pagevec.c                                 |   2 +-
>  net/core/rtnetlink.c                               |   3 +
>  net/ipv4/tcp_output.c                              |  12 +-
>  net/ipv6/ip6_output.c                              |  42 +-
>  net/sched/sch_netem.c                              |   3 +
>  security/tomoyo/domain.c                           |   3 +-
>  sound/core/pcm_lib.c                               |   2 -
>  sound/core/pcm_native.c                            |   6 +-
>  sound/soc/omap/omap-dmic.c                         |   9 +
>  sound/soc/omap/omap-mcpdm.c                        |  43 +-
>  sound/soc/soc-core.c                               |   1 +
>  .../selftests}/networking/timestamping/.gitignore  |   0
>  .../selftests/networking/timestamping/Makefile     |   8 +
>  .../networking/timestamping/hwtstamp_config.c      |   0
>  .../networking/timestamping/timestamping.c         |   0
>  .../networking/timestamping/txtimestamp.c          |   0
>  ubuntu/i915/i915_gem_userptr.c                     |   6 +-
>  ubuntu/vbox/r0drv/linux/memobj-r0drv-linux.c       |   5 +-
>  virt/kvm/async_pf.c                                |   2 +-
>  virt/kvm/kvm_main.c                                |  11 +-
>  121 files changed, 1179 insertions(+), 749 deletions(-)
>  delete mode 100644 Documentation/networking/Makefile
>  delete mode 100644 Documentation/networking/timestamping/Makefile
>  rename {Documentation => tools/testing/selftests}/networking/timestamping/.gitignore (100%)
>  create mode 100644 tools/testing/selftests/networking/timestamping/Makefile
>  rename {Documentation => tools/testing/selftests}/networking/timestamping/hwtstamp_config.c (100%)
>  rename {Documentation => tools/testing/selftests}/networking/timestamping/timestamping.c (100%)
>  rename {Documentation => tools/testing/selftests}/networking/timestamping/txtimestamp.c (100%)
> 
Applied to xenial/master-next. Thanks.

-Stefan