This is the start of the stable review cycle for the 4.4.139 release. There are 105 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Tue Jul 3 15:31:30 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.139-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.4.139-rc1 Szymon Janc <szymon.janc@xxxxxxxxxxx> Bluetooth: Fix connection if directed advertising and privacy is used Bjørn Mork <bjorn@xxxxxxx> cdc_ncm: avoid padding beyond end of skb Mike Snitzer <snitzer@xxxxxxxxxx> dm thin: handle running out of data space vs concurrent discard Keith Busch <keith.busch@xxxxxxxxx> block: Fix transfer when chunk sectors exceeds max Maxime Chevallier <maxime.chevallier@xxxxxxxxxxx> spi: Fix scatterlist elements size in spi_map_buf Liu Bo <bo.li.liu@xxxxxxxxxx> Btrfs: fix unexpected cow in run_delalloc_nocow Takashi Iwai <tiwai@xxxxxxx> ALSA: hda/realtek - Add a quirk for FSC ESPRIMO U9210 ??? <kt.liao@xxxxxxxxxx> Input: elantech - fix V4 report decoding for module with middle key Aaron Ma <aaron.ma@xxxxxxxxxxxxx> Input: elantech - enable middle button of touchpads on ThinkPad P52 Ben Hutchings <ben.hutchings@xxxxxxxxxxxxxxx> Input: elan_i2c_smbus - fix more potential stack buffer overflows Jan Kara <jack@xxxxxxx> udf: Detect incorrect directory size Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx> xen: Remove unnecessary BUG_ON from __unbind_from_irq() Alexandr Savca <alexandr.savca@xxxxxxxxxxxx> Input: elan_i2c - add ELAN0618 (Lenovo v330 15IKB) ACPI ID Kees Cook <keescook@xxxxxxxxxxxx> video: uvesafb: Fix integer overflow in allocation Dave Wysochanski <dwysocha@xxxxxxxxxx> NFSv4: Fix possible 1-byte stack overflow in nfs_idmap_read_and_verify_message Scott Mayhew <smayhew@xxxxxxxxxx> nfsd: restrict rd_maxcount to svc_max_payload in nfsd_encode_readdir Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxxx> media: dvb_frontend: fix locking issues at dvb_frontend_get_event() Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> media: cx231xx: Add support for AverMedia DVD EZMaker 7 Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxxx> media: v4l2-compat-ioctl32: prevent go past max size Adrian Hunter <adrian.hunter@xxxxxxxxx> perf intel-pt: Fix packet decoding of CYC packets Adrian Hunter <adrian.hunter@xxxxxxxxx> perf intel-pt: Fix "Unexpected indirect branch" error Adrian Hunter <adrian.hunter@xxxxxxxxx> perf intel-pt: Fix MTC timing after overflow Adrian Hunter <adrian.hunter@xxxxxxxxx> perf intel-pt: Fix decoding to accept CBR between FUP and corresponding TIP Adrian Hunter <adrian.hunter@xxxxxxxxx> perf intel-pt: Fix sync_switch INTEL_PT_SS_NOT_TRACING Adrian Hunter <adrian.hunter@xxxxxxxxx> perf tools: Fix symbol and object code resolution for vdso32 and vdsox32 Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> mfd: intel-lpss: Program REMAP register in PIO mode Johan Hovold <johan@xxxxxxxxxx> backlight: tps65217_bl: Fix Device Tree node lookup Johan Hovold <johan@xxxxxxxxxx> backlight: max8925_bl: Fix Device Tree node lookup Johan Hovold <johan@xxxxxxxxxx> backlight: as3711_bl: Fix Device Tree node lookup Florian Westphal <fw@xxxxxxxxx> xfrm: skip policies marked as dead while rehashing Tobias Brunner <tobias@xxxxxxxxxxxxxx> xfrm: Ignore socket policies when rebuilding hash tables Silvio Cesare <silvio.cesare@xxxxxxxxx> UBIFS: Fix potential integer overflow in allocation Richard Weinberger <richard@xxxxxx> ubi: fastmap: Cancel work upon detach NeilBrown <neilb@xxxxxxxx> md: fix two problems with setting the "re-add" device state. Robert Elliott <elliott@xxxxxxx> linvdimm, pmem: Preserve read-only setting for pmem devices Steffen Maier <maier@xxxxxxxxxxxxx> scsi: zfcp: fix missing REC trigger trace on enqueue without ERP thread Steffen Maier <maier@xxxxxxxxxxxxx> scsi: zfcp: fix missing REC trigger trace for all objects in ERP_FAILED Steffen Maier <maier@xxxxxxxxxxxxx> scsi: zfcp: fix missing REC trigger trace on terminate_rport_io for ERP_FAILED Steffen Maier <maier@xxxxxxxxxxxxx> scsi: zfcp: fix missing REC trigger trace on terminate_rport_io early return Steffen Maier <maier@xxxxxxxxxxxxx> scsi: zfcp: fix misleading REC trigger trace where erp_action setup failed Steffen Maier <maier@xxxxxxxxxxxxx> scsi: zfcp: fix missing SCSI trace for retry of abort / scsi_eh TMF Steffen Maier <maier@xxxxxxxxxxxxx> scsi: zfcp: fix missing SCSI trace for result of eh_host_reset_handler Himanshu Madhani <himanshu.madhani@xxxxxxxxxx> scsi: qla2xxx: Fix setting lower transfer speed if GPSC fails Martin Kelly <mkelly@xxxxxxxx> iio:buffer: make length types match kfifo types Omar Sandoval <osandov@xxxxxx> Btrfs: fix clone vs chattr NODATASUM race Geert Uytterhoeven <geert@xxxxxxxxxxxxxx> time: Make sure jiffies_to_msecs() preserves non-zero time periods Huacai Chen <chenhc@xxxxxxxxxx> MIPS: io: Add barrier after register read in inX() Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx> PCI: pciehp: Clear Presence Detect and Data Link Layer Status Changed on resume Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx> MIPS: BCM47XX: Enable 74K Core ExternalSync for PCIe erratum Joakim Tjernlund <joakim.tjernlund@xxxxxxxxxxxx> mtd: cfi_cmdset_0002: Avoid walking all chips when unlocking. Joakim Tjernlund <joakim.tjernlund@xxxxxxxxxxxx> mtd: cfi_cmdset_0002: Fix unlocking requests crossing a chip boudary Joakim Tjernlund <joakim.tjernlund@xxxxxxxxxxxx> mtd: cfi_cmdset_0002: fix SEGV unlocking multiple chips Joakim Tjernlund <joakim.tjernlund@xxxxxxxxxxxx> mtd: cfi_cmdset_0002: Use right chip in do_ppb_xxlock() Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx> mtd: cfi_cmdset_0002: Change write buffer to check correct value Leon Romanovsky <leonro@xxxxxxxxxxxx> RDMA/mlx4: Discard unknown SQP work requests Mike Marciniszyn <mike.marciniszyn@xxxxxxxxx> IB/qib: Fix DMA api warning with debug kernel Stefan M Schaeckeler <sschaeck@xxxxxxxxx> of: unittest: for strings, account for trailing \0 in property length field David Rivshin <DRivshin@xxxxxxxxxxx> ARM: 8764/1: kgdb: fix NUMREGBYTES so that gdb_regs[] is the correct size Mahesh Salgaonkar <mahesh@xxxxxxxxxxxxxxxxxx> powerpc/fadump: Unregister fadump on kexec down path. Gautham R. Shenoy <ego@xxxxxxxxxxxxxxxxxx> cpuidle: powernv: Fix promotion from snooze if next state disabled Michael Neuling <mikey@xxxxxxxxxxx> powerpc/ptrace: Fix enforcement of DAWR constraints Michael Neuling <mikey@xxxxxxxxxxx> powerpc/ptrace: Fix setting 512B aligned breakpoints with PTRACE_SET_DEBUGREG Aneesh Kumar K.V <aneesh.kumar@xxxxxxxxxxxxx> powerpc/mm/hash: Add missing isync prior to kernel stack SLB switch Miklos Szeredi <mszeredi@xxxxxxxxxx> fuse: fix control dir setup and teardown Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> fuse: don't keep dead fuse_conn at fuse_fill_super(). Miklos Szeredi <mszeredi@xxxxxxxxxx> fuse: atomic_o_trunc should truncate pagecache Amit Pundir <amit.pundir@xxxxxxxxxx> Bluetooth: hci_qca: Avoid missing rampatch failure with userspace fw loader Corey Minyard <cminyard@xxxxxxxxxx> ipmi:bt: Set the timeout before doing a capabilities check Mikulas Patocka <mpatocka@xxxxxxxxxx> branch-check: fix long->int truncation when profiling branches Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx> mips: ftrace: fix static function graph tracing Geert Uytterhoeven <geert+renesas@xxxxxxxxx> lib/vsprintf: Remove atomic-unsafe support for %pCr Alexander Sverdlin <alexander.sverdlin@xxxxxxxxx> ASoC: cirrus: i2s: Fix {TX|RX}LinCtrlData setup Alexander Sverdlin <alexander.sverdlin@xxxxxxxxx> ASoC: cirrus: i2s: Fix LRCLK configuration Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx> ASoC: dapm: delete dapm_kcontrol_data paths list before freeing it Ingo Flaschberger <ingo.flaschberger@xxxxxxxxx> 1wire: family module autoload fails because of upper/lower case mismatch. Maxim Moseychuk <franchesko.salias.hudro.pedros@xxxxxxxxx> usb: do not reset if a low-speed or full-speed device timed out Eric W. Biederman <ebiederm@xxxxxxxxxxxx> signal/xtensa: Consistenly use SIGBUS in do_unaligned_user Daniel Wagner <daniel.wagner@xxxxxxxxxxx> serial: sh-sci: Use spin_{try}lock_irqsave instead of open coding version Michael Schmitz <schmitzmic@xxxxxxxxx> m68k/mm: Adjust VM area to be unmapped by gap size for __iounmap() Dan Williams <dan.j.williams@xxxxxxxxx> x86/spectre_v1: Disable compiler optimizations over array_index_mask_nospec() Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxxxxx> fs/binfmt_misc.c: do not allow offset overflow Stefan Potyra <Stefan.Potyra@xxxxxxxxxxxxxx> w1: mxc_w1: Enable clock before calling clk_get_rate() on it Hans de Goede <hdegoede@xxxxxxxxxx> libata: Drop SanDisk SD7UB3Q*G1001 NOLPM quirk Dan Carpenter <dan.carpenter@xxxxxxxxxx> libata: zpodd: small read overflow in eject_tray() Colin Ian King <colin.king@xxxxxxxxxxxxx> libata: zpodd: make arrays cdb static, reduces object code size Tao Wang <kevin.wangtao@xxxxxxxxxxxxx> cpufreq: Fix new policy initialization during limits updates via sysfs Dennis Wassenberg <dennis.wassenberg@xxxxxxxxxxx> ALSA: hda: add dock and led support for HP ProBook 640 G4 Dennis Wassenberg <dennis.wassenberg@xxxxxxxxxxx> ALSA: hda: add dock and led support for HP EliteBook 830 G5 Bo Chen <chenbo@xxxxxxx> ALSA: hda - Handle kzalloc() failure in snd_hda_attach_pcm_stream() Qu Wenruo <wqu@xxxxxxxx> btrfs: scrub: Don't use inode pages for device replace Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> driver core: Don't ignore class_dir_create_and_add() failure. Jan Kara <jack@xxxxxxx> ext4: fix fencepost error in check for inode count overflow during resize Lukas Czerner <lczerner@xxxxxxxxxx> ext4: update mtime in ext4_punch_hole even if no blocks are released Frank van der Linden <fllinden@xxxxxxxxxx> tcp: verify the checksum of the first data segment in a new connection Xiangning Yu <yuxiangning@xxxxxxxxx> bonding: re-evaluate force_primary when the primary slave name changes Daniel Glöckner <dg@xxxxxxxxx> usb: musb: fix remote wakeup racing with suspend Liu Bo <bo.li.liu@xxxxxxxxxx> Btrfs: make raid6 rebuild retry more Eric Dumazet <edumazet@xxxxxxxxxx> tcp: do not overshoot window_clamp in tcp_rcv_space_adjust() Sasha Levin <Alexander.Levin@xxxxxxxxxxxxx> Revert "Btrfs: fix scrub to repair raid6 corruption" Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx> net/sonic: Use dma_mapping_error() Josh Hill <josh@xxxxxxxxxxxxxxx> net: qmi_wwan: Add Netgear Aircard 779S Ivan Bornyakov <brnkv.i1@xxxxxxxxx> atm: zatm: fix memcmp casting Julian Anastasov <ja@xxxxxx> ipvs: fix buffer overflow with sync daemon and service Paolo Abeni <pabeni@xxxxxxxxxx> netfilter: ebtables: handle string from userspace with care Eric Dumazet <edumazet@xxxxxxxxxx> xfrm6: avoid potential infinite loop in _decode_session6() ------------- Diffstat: Documentation/printk-formats.txt | 3 +- Makefile | 4 +- arch/arm/include/asm/kgdb.h | 2 +- arch/m68k/mm/kmap.c | 3 +- arch/mips/bcm47xx/setup.c | 6 + arch/mips/include/asm/io.h | 2 + arch/mips/include/asm/mipsregs.h | 3 + arch/mips/kernel/mcount.S | 27 ++--- arch/powerpc/kernel/entry_64.S | 1 + arch/powerpc/kernel/fadump.c | 3 + arch/powerpc/kernel/hw_breakpoint.c | 4 +- arch/powerpc/kernel/ptrace.c | 1 + arch/x86/include/asm/barrier.h | 2 +- arch/xtensa/kernel/traps.c | 2 +- drivers/ata/libata-core.c | 3 - drivers/ata/libata-zpodd.c | 4 +- drivers/atm/zatm.c | 4 +- drivers/base/core.c | 14 ++- drivers/bluetooth/hci_qca.c | 6 + drivers/char/ipmi/ipmi_bt_sm.c | 3 +- drivers/cpufreq/cpufreq.c | 2 + drivers/cpuidle/cpuidle-powernv.c | 32 +++++- drivers/iio/buffer/kfifo_buf.c | 4 +- drivers/infiniband/hw/mlx4/mad.c | 1 - drivers/infiniband/hw/qib/qib.h | 3 +- drivers/infiniband/hw/qib/qib_file_ops.c | 10 +- drivers/infiniband/hw/qib/qib_user_pages.c | 20 ++-- drivers/input/mouse/elan_i2c.h | 2 + drivers/input/mouse/elan_i2c_core.c | 3 +- drivers/input/mouse/elan_i2c_smbus.c | 10 +- drivers/input/mouse/elantech.c | 11 +- drivers/md/dm-thin.c | 11 +- drivers/md/md.c | 4 +- drivers/media/dvb-core/dvb_frontend.c | 23 ++-- drivers/media/usb/cx231xx/cx231xx-cards.c | 3 + drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 2 +- drivers/mfd/intel-lpss.c | 4 +- drivers/mtd/chips/cfi_cmdset_0002.c | 21 ++-- drivers/mtd/ubi/build.c | 3 + drivers/mtd/ubi/wl.c | 4 +- drivers/net/bonding/bond_options.c | 1 + drivers/net/ethernet/natsemi/sonic.c | 2 +- drivers/net/usb/cdc_ncm.c | 4 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/nvdimm/bus.c | 14 ++- drivers/of/unittest.c | 8 +- drivers/pci/hotplug/pciehp.h | 2 +- drivers/pci/hotplug/pciehp_core.c | 2 +- drivers/pci/hotplug/pciehp_hpc.c | 13 ++- drivers/s390/scsi/zfcp_dbf.c | 40 +++++++ drivers/s390/scsi/zfcp_erp.c | 123 ++++++++++++++++----- drivers/s390/scsi/zfcp_ext.h | 5 + drivers/s390/scsi/zfcp_scsi.c | 18 ++- drivers/scsi/qla2xxx/qla_init.c | 3 +- drivers/spi/spi.c | 10 +- drivers/tty/serial/sh-sci.c | 8 +- drivers/usb/core/hub.c | 4 +- drivers/usb/musb/musb_host.c | 5 +- drivers/usb/musb/musb_host.h | 7 +- drivers/usb/musb/musb_virthub.c | 25 +++-- drivers/video/backlight/as3711_bl.c | 33 ++++-- drivers/video/backlight/max8925_bl.c | 4 +- drivers/video/backlight/tps65217_bl.c | 4 +- drivers/video/fbdev/uvesafb.c | 3 +- drivers/w1/masters/mxc_w1.c | 20 ++-- drivers/w1/w1.c | 2 +- drivers/xen/events/events_base.c | 2 - fs/binfmt_misc.c | 12 +- fs/btrfs/inode.c | 33 +++++- fs/btrfs/ioctl.c | 12 +- fs/btrfs/scrub.c | 2 +- fs/ext4/inode.c | 36 +++--- fs/ext4/resize.c | 2 +- fs/fuse/control.c | 13 ++- fs/fuse/dir.c | 13 ++- fs/fuse/inode.c | 1 + fs/nfs/nfs4idmap.c | 5 +- fs/nfsd/nfs4xdr.c | 5 +- fs/ubifs/journal.c | 2 +- fs/udf/directory.c | 3 + include/linux/blkdev.h | 4 +- include/linux/compiler.h | 2 +- include/linux/iio/buffer.h | 6 +- include/net/bluetooth/hci_core.h | 2 +- kernel/time/time.c | 6 +- lib/vsprintf.c | 3 - net/bluetooth/hci_conn.c | 27 +++-- net/bluetooth/hci_event.c | 15 ++- net/bridge/netfilter/ebtables.c | 3 +- net/ipv4/tcp_input.c | 2 +- net/ipv4/tcp_ipv4.c | 4 + net/ipv6/tcp_ipv6.c | 4 + net/ipv6/xfrm6_policy.c | 2 +- net/netfilter/ipvs/ip_vs_ctl.c | 21 +++- net/xfrm/xfrm_policy.c | 5 + sound/pci/hda/hda_controller.c | 4 +- sound/pci/hda/patch_conexant.c | 2 + sound/pci/hda/patch_realtek.c | 1 + sound/soc/cirrus/edb93xx.c | 2 +- sound/soc/cirrus/ep93xx-i2s.c | 26 +++-- sound/soc/cirrus/snappercl15.c | 2 +- sound/soc/soc-dapm.c | 2 + tools/perf/util/dso.c | 2 + .../perf/util/intel-pt-decoder/intel-pt-decoder.c | 23 +++- .../perf/util/intel-pt-decoder/intel-pt-decoder.h | 9 ++ .../util/intel-pt-decoder/intel-pt-pkt-decoder.c | 2 +- tools/perf/util/intel-pt.c | 5 + 107 files changed, 685 insertions(+), 273 deletions(-)
