[PATCH 4.14 000/106] 4.14.257-rc1 review

From: Greg Kroah-Hartman
Date: Mon Dec 06 2021 - 10:06:21 EST


This is the start of the stable review cycle for the 4.14.257 release.
There are 106 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed, 08 Dec 2021 14:55:37 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.257-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.14.257-rc1

Helge Deller <deller@xxxxxx>
parisc: Mark cr16 CPU clocksource unstable on all SMP machines

Johan Hovold <johan@xxxxxxxxxx>
serial: core: fix transmit-buffer reset and memleak

Pierre Gondois <Pierre.Gondois@xxxxxxx>
serial: pl011: Add ACPI SBSA UART match id

Sven Eckelmann <sven@xxxxxxxxxxxxx>
tty: serial: msm_serial: Deactivate RX DMA for polling support

Joerg Roedel <jroedel@xxxxxxx>
x86/64/mm: Map all kernel memory into trampoline_pgd

Badhri Jagan Sridharan <badhri@xxxxxxxxxx>
usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
xhci: Fix commad ring abort, write all 64 bits to CRCR register.

Maciej W. Rozycki <macro@xxxxxxxxxxx>
vgacon: Propagate console boot parameters before calling `vc_resize'

Helge Deller <deller@xxxxxx>
parisc: Fix "make install" on newer debian releases

Helge Deller <deller@xxxxxx>
parisc: Fix KBUILD_IMAGE for self-extracting kernel

Tony Lu <tonylu@xxxxxxxxxxxxxxxxx>
net/smc: Keep smc_close_final rc during active close

William Kucharski <william.kucharski@xxxxxxxxxx>
net/rds: correct socket tunable error in rds_tcp_tune()

Sven Schuchmann <schuchmann@xxxxxxxxxxxxxxxxx>
net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ is available

Zhou Qingyang <zhou1615@xxxxxxx>
net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()

Arnd Bergmann <arnd@xxxxxxxx>
siphash: use _unaligned version by default

Benjamin Poirier <bpoirier@xxxxxxxxxx>
net: mpls: Fix notifications when deleting a device

Zhou Qingyang <zhou1615@xxxxxxx>
net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
natsemi: xtensa: fix section mismatch warnings

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
fget: check that the fd still exists after getting a ref to it

Jens Axboe <axboe@xxxxxxxxx>
fs: add fget_many() and fput_many()

Baokun Li <libaokun1@xxxxxxxxxx>
sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl

Baokun Li <libaokun1@xxxxxxxxxx>
sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl

Masami Hiramatsu <mhiramat@xxxxxxxxxx>
kprobes: Limit max data_size of the kretprobe instances

Stephen Suryaputra <ssuryaextr@xxxxxxxxx>
vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit

Ian Rogers <irogers@xxxxxxxxxx>
perf hist: Fix memory leak of a perf_hpp_fmt

Teng Qi <starmiku1207184332@xxxxxxxxx>
net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()

zhangyue <zhangyue1@xxxxxxxxxx>
net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound

Teng Qi <starmiku1207184332@xxxxxxxxx>
ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()

Mike Christie <michael.christie@xxxxxxxxxx>
scsi: iscsi: Unblock session then wake up error handler

Manaf Meethalavalappu Pallikunhi <manafm@xxxxxxxxxxxxxx>
thermal: core: Reset previous low and high trip during thermal zone init

Wang Yugui <wangyugui@xxxxxxxxxxxx>
btrfs: check-integrity: fix a warning on write caching disabled disk

Vasily Gorbik <gor@xxxxxxxxxxxxx>
s390/setup: avoid using memblock_enforce_memory_limit

Slark Xiao <slark_xiao@xxxxxxx>
platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep

liuguoqiang <liuguoqiang@xxxxxxxxxxxxx>
net: return correct error code

Mike Kravetz <mike.kravetz@xxxxxxxxxx>
hugetlb: take PMD sharing into account when flushing tlb/caches

Benjamin Coddington <bcodding@xxxxxxxxxx>
NFSv42: Fix pagecache invalidation after COPY/CLONE

Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
ipc: WARN if trying to remove ipc object which is absent

Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
shm: extend forced shm destroy to support objects from several IPC nses

Juergen Gross <jgross@xxxxxxxx>
tty: hvc: replace BUG_ON() with negative return value

Juergen Gross <jgross@xxxxxxxx>
xen/netfront: don't trust the backend response data blindly

Juergen Gross <jgross@xxxxxxxx>
xen/netfront: disentangle tx_skb_freelist

Juergen Gross <jgross@xxxxxxxx>
xen/netfront: don't read data from request on the ring page

Juergen Gross <jgross@xxxxxxxx>
xen/netfront: read response from backend only once

Juergen Gross <jgross@xxxxxxxx>
xen/blkfront: don't trust the backend response data blindly

Juergen Gross <jgross@xxxxxxxx>
xen/blkfront: don't take local copy of a request from the ring page

Juergen Gross <jgross@xxxxxxxx>
xen/blkfront: read response from backend only once

Juergen Gross <jgross@xxxxxxxx>
xen: sync include/xen/interface/io/ring.h with Xen's newest version

Miklos Szeredi <mszeredi@xxxxxxxxxx>
fuse: release pipe buf after last use

Lin Ma <linma@xxxxxxxxxx>
NFC: add NCI_UNREG flag to eliminate the race

David Hildenbrand <david@xxxxxxxxxx>
proc/vmcore: fix clearing user buffer by properly using clear_user()

Nadav Amit <namit@xxxxxxxxxx>
hugetlbfs: flush TLBs correctly after huge_pmd_unshare

Marek Behún <marek.behun@xxxxxx>
arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function

Miquel Raynal <miquel.raynal@xxxxxxxxxxx>
arm64: dts: marvell: armada-37xx: declare PCIe reset pin

Marek Behún <kabel@xxxxxxxxxx>
pinctrl: armada-37xx: Correct PWM pins definitions

Gregory CLEMENT <gregory.clement@xxxxxxxxxxx>
pinctrl: armada-37xx: add missing pin: PCIe1 Wakeup

Marek Behún <marek.behun@xxxxxx>
pinctrl: armada-37xx: Correct mpp definitions

Pali Rohár <pali@xxxxxxxxxx>
PCI: aardvark: Fix checking for link up via LTSSM state

Pali Rohár <pali@xxxxxxxxxx>
PCI: aardvark: Fix link training

Frederick Lawler <fred@xxxxxxxxxxxx>
PCI: Add PCI_EXP_LNKCTL2_TLS* macros

Pali Rohár <pali@xxxxxxxxxx>
PCI: aardvark: Fix PCIe Max Payload Size setting

Pali Rohár <pali@xxxxxxxxxx>
PCI: aardvark: Configure PCIe resources from 'ranges' DT property

Evan Wang <xswang@xxxxxxxxxxx>
PCI: aardvark: Remove PCIe outbound window configuration

Pali Rohár <pali@xxxxxxxxxx>
PCI: aardvark: Update comment about disabling link training

Pali Rohár <pali@xxxxxxxxxx>
PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link()

Pali Rohár <pali@xxxxxxxxxx>
PCI: aardvark: Fix compilation on s390

Pali Rohár <pali@xxxxxxxxxx>
PCI: aardvark: Don't touch PCIe registers if no card connected

Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxx>
PCI: aardvark: Introduce an advk_pcie_valid_device() helper

Pali Rohár <pali@xxxxxxxxxx>
PCI: aardvark: Indicate error in 'val' when config read fails

Pali Rohár <pali@xxxxxxxxxx>
PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros

Pali Rohár <pali@xxxxxxxxxx>
PCI: aardvark: Issue PERST via GPIO

Marek Behún <marek.behun@xxxxxx>
PCI: aardvark: Improve link training

Pali Rohár <pali@xxxxxxxxxx>
PCI: aardvark: Train link immediately after enabling training

Remi Pommarel <repk@xxxxxxxxxxxx>
PCI: aardvark: Wait for endpoint to be ready before training link

Wen Yang <wen.yang99@xxxxxxxxxx>
PCI: aardvark: Fix a leaked reference by adding missing of_node_put()

Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
PCI: aardvark: Fix I/O space page leak

David Hildenbrand <david@xxxxxxxxxx>
s390/mm: validate VMA in PGSTE manipulation functions

Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx>
tracing: Check pid filtering when creating events

Stefano Garzarella <sgarzare@xxxxxxxxxx>
vhost/vsock: fix incorrect used length reported to the guest

Tony Lu <tonylu@xxxxxxxxxxxxxxxxx>
net/smc: Don't call clcsock shutdown twice when smc shutdown

Huang Pei <huangpei@xxxxxxxxxxx>
MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows

Thomas Zeitlhofer <thomas.zeitlhofer+lkml@xxxxxxxx>
PM: hibernate: use correct mode for swsusp_close()

Tony Lu <tonylu@xxxxxxxxxxxxxxxxx>
net/smc: Ensure the active closing peer first closes clcsock

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv6: fix typos in __ip6_finish_output()

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
drm/vc4: fix error code in vc4_create_object()

Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxx>
scsi: mpt3sas: Fix kernel panic during drive powercycle test

Takashi Iwai <tiwai@xxxxxxx>
ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
NFSv42: Don't fail clone() unless the OP_CLONE operation failed

Alexander Aring <aahringo@xxxxxxxxxx>
net: ieee802154: handle iftypes as u32

Takashi Iwai <tiwai@xxxxxxx>
ASoC: topology: Add missing rwsem around snd_ctl_remove() calls

Florian Fainelli <f.fainelli@xxxxxxxxx>
ARM: dts: BCM5301X: Add interrupt properties to GPIO node

Florian Fainelli <f.fainelli@xxxxxxxxx>
ARM: dts: BCM5301X: Fix I2C controller interrupt

yangxingwu <xingwu.yang@xxxxxxxxx>
netfilter: ipvs: Fix reuse connection if RS weight is 0

Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx>
tracing: Fix pid filtering when triggers are attached

Stefano Stabellini <stefano.stabellini@xxxxxxxxxx>
xen: detect uninitialized xenbus in xenbus_init

Stefano Stabellini <stefano.stabellini@xxxxxxxxxx>
xen: don't continue xenstore initialization in case of errors

Miklos Szeredi <mszeredi@xxxxxxxxxx>
fuse: fix page stealing

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()

Jason Gerecke <killertofu@xxxxxxxxx>
HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts

Hans Verkuil <hverkuil-cisco@xxxxxxxxx>
media: cec: copy sequence field for the reply

Takashi Iwai <tiwai@xxxxxxx>
ALSA: ctxfi: Fix out-of-range access

Todd Kjos <tkjos@xxxxxxxxxx>
binder: fix test regression due to sender_euid change

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
usb: hub: Fix locking issues with address0_mutex

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
usb: hub: Fix usb enumeration issue due to address0 race

Mingjie Zhang <superzmj@xxxxxxxxxxx>
USB: serial: option: add Fibocom FM101-GL variants

Daniele Palmas <dnlplm@xxxxxxxxx>
USB: serial: option: add Telit LE910S1 0x9200 composition


-------------

Diffstat:

.../pinctrl/marvell,armada-37xx-pinctrl.txt | 26 +-
Documentation/networking/ipvs-sysctl.txt | 3 +-
Makefile | 4 +-
arch/arm/boot/dts/bcm5301x.dtsi | 4 +-
arch/arm/include/asm/tlb.h | 8 +
arch/arm/mach-socfpga/core.h | 2 +-
arch/arm/mach-socfpga/platsmp.c | 8 +-
arch/arm64/boot/dts/marvell/armada-3720-db.dts | 3 +
.../boot/dts/marvell/armada-3720-espressobin.dts | 3 +
arch/arm64/boot/dts/marvell/armada-37xx.dtsi | 9 +
arch/ia64/include/asm/tlb.h | 10 +
arch/mips/Kconfig | 2 +-
arch/parisc/Makefile | 5 +
arch/parisc/install.sh | 1 +
arch/parisc/kernel/time.c | 24 +-
arch/s390/include/asm/tlb.h | 14 +
arch/s390/kernel/setup.c | 3 -
arch/s390/mm/pgtable.c | 13 +
arch/sh/include/asm/tlb.h | 10 +
arch/um/include/asm/tlb.h | 12 +
arch/x86/realmode/init.c | 12 +-
drivers/android/binder.c | 2 +-
drivers/ata/sata_fsl.c | 20 +-
drivers/block/xen-blkfront.c | 126 ++++--
drivers/gpu/drm/vc4/vc4_bo.c | 2 +-
drivers/hid/wacom_wac.c | 8 +-
drivers/hid/wacom_wac.h | 1 +
drivers/media/cec/cec-adap.c | 1 +
drivers/net/ethernet/dec/tulip/de4x5.c | 34 +-
drivers/net/ethernet/hisilicon/hns/hns_dsaf_misc.c | 4 +
drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 9 +-
drivers/net/ethernet/natsemi/xtsonic.c | 2 +-
.../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c | 10 +-
drivers/net/usb/lan78xx.c | 2 +-
drivers/net/vrf.c | 2 +
drivers/net/xen-netfront.c | 257 +++++++-----
drivers/pci/host/pci-aardvark.c | 463 +++++++++++++++++----
drivers/pinctrl/mvebu/pinctrl-armada-37xx.c | 28 +-
drivers/platform/x86/thinkpad_acpi.c | 12 -
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 2 +-
drivers/scsi/scsi_transport_iscsi.c | 6 +-
drivers/staging/rtl8192e/rtl8192e/rtl_core.c | 3 +-
drivers/staging/typec/tcpm.c | 4 -
drivers/thermal/thermal_core.c | 2 +
drivers/tty/hvc/hvc_xen.c | 17 +-
drivers/tty/serial/amba-pl011.c | 1 +
drivers/tty/serial/msm_serial.c | 3 +
drivers/tty/serial/serial_core.c | 13 +-
drivers/usb/core/hub.c | 23 +-
drivers/usb/host/xhci-ring.c | 21 +-
drivers/usb/serial/option.c | 5 +
drivers/vhost/vsock.c | 2 +-
drivers/video/console/vgacon.c | 14 +-
drivers/xen/xenbus/xenbus_probe.c | 27 +-
fs/btrfs/disk-io.c | 14 +-
fs/file.c | 19 +-
fs/file_table.c | 9 +-
fs/fuse/dev.c | 14 +-
fs/nfs/nfs42proc.c | 5 +-
fs/nfs/nfs42xdr.c | 3 +-
fs/proc/vmcore.c | 15 +-
include/asm-generic/tlb.h | 2 +
include/linux/file.h | 2 +
include/linux/fs.h | 4 +-
include/linux/ipc_namespace.h | 15 +
include/linux/kprobes.h | 2 +
include/linux/sched/task.h | 2 +-
include/linux/shm.h | 13 +-
include/linux/siphash.h | 14 +-
include/net/nfc/nci_core.h | 1 +
include/net/nl802154.h | 7 +-
include/uapi/linux/pci_regs.h | 5 +
include/xen/interface/io/ring.h | 293 +++++++------
ipc/shm.c | 176 ++++++--
ipc/util.c | 6 +-
kernel/kprobes.c | 3 +
kernel/power/hibernate.c | 6 +-
kernel/trace/trace.h | 24 +-
kernel/trace/trace_events.c | 7 +
lib/siphash.c | 12 +-
mm/hugetlb.c | 72 +++-
mm/memory.c | 10 +
net/ipv4/devinet.c | 2 +-
net/ipv4/tcp_cubic.c | 5 +-
net/ipv6/ip6_output.c | 2 +-
net/mpls/af_mpls.c | 68 ++-
net/netfilter/ipvs/ip_vs_core.c | 8 +-
net/nfc/nci/core.c | 19 +-
net/rds/tcp.c | 2 +-
net/smc/af_smc.c | 8 +-
net/smc/smc_close.c | 10 +
sound/pci/ctxfi/ctamixer.c | 14 +-
sound/pci/ctxfi/ctdaio.c | 16 +-
sound/pci/ctxfi/ctresource.c | 7 +-
sound/pci/ctxfi/ctresource.h | 4 +-
sound/pci/ctxfi/ctsrc.c | 7 +-
sound/soc/soc-topology.c | 3 +
tools/perf/ui/hist.c | 28 +-
tools/perf/util/hist.h | 1 -
99 files changed, 1591 insertions(+), 670 deletions(-)