This is the start of the stable review cycle for the 4.4.140 release. There are 47 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu Jul 12 18:23:24 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.140-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.4.140-rc1 Dan Carpenter <dan.carpenter@xxxxxxxxxx> staging: comedi: quatech_daqp_cs: fix no-op loop daqp_ao_insn_write() Jann Horn <jannh@xxxxxxxxxx> netfilter: nf_log: don't hold nf_log_mutex during user access Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx> mtd: cfi_cmdset_0002: Change erase functions to check chip good only Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx> mtd: cfi_cmdset_0002: Change erase functions to retry for error Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx> mtd: cfi_cmdset_0002: Change definition naming to retry write operation Mikulas Patocka <mpatocka@xxxxxxxxxx> dm bufio: don't take the lock in dm_bufio_shrink_count Martin Kaiser <martin@xxxxxxxxx> mtd: rawnand: mxc: set spare area size register explicitly Mikulas Patocka <mpatocka@xxxxxxxxxx> dm bufio: drop the lock when doing GFP_NOIO allocation Douglas Anderson <dianders@xxxxxxxxxxxx> dm bufio: avoid sleeping while holding the dm_bufio lock Vlastimil Babka <vbabka@xxxxxxx> mm, page_alloc: do not break __GFP_THISNODE by zonelist reset Brad Love <brad@xxxxxxxxxxxxxxxx> media: cx25840: Use subdev host data for PLL override Tony Luck <tony.luck@xxxxxxxxx> x86/mce: Fix incorrect "Machine check from unknown source" message Yazen Ghannam <Yazen.Ghannam@xxxxxxx> x86/mce: Detect local MCEs properly Daniel Rosenberg <drosen@xxxxxxxxxx> HID: debug: check length before copy_to_user() Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> HID: hiddev: fix potential Spectre v1 Jason Andryuk <jandryuk@xxxxxxxxx> HID: i2c-hid: Fix "incomplete report" noise Jon Derrick <jonathan.derrick@xxxxxxxxx> ext4: check superblock mapped prior to committing Theodore Ts'o <tytso@xxxxxxx> ext4: add more mount time checks of the superblock Theodore Ts'o <tytso@xxxxxxx> ext4: add more inode number paranoia checks Theodore Ts'o <tytso@xxxxxxx> ext4: clear i_data in ext4_inode_info when removing inline data Theodore Ts'o <tytso@xxxxxxx> ext4: include the illegal physical block in the bad map ext4_error msg Theodore Ts'o <tytso@xxxxxxx> ext4: verify the depth of extent tree in ext4_find_extent() Theodore Ts'o <tytso@xxxxxxx> ext4: only look at the bg_flags field if it is valid Theodore Ts'o <tytso@xxxxxxx> ext4: always check block group bounds in ext4_init_block_bitmap() Theodore Ts'o <tytso@xxxxxxx> ext4: make sure bitmaps and the inode table don't overlap with bg descriptors Theodore Ts'o <tytso@xxxxxxx> jbd2: don't mark block as modified if the handle is out of credits Paulo Alcantara <paulo@xxxxxxxx> cifs: Fix infinite loop when using hard mount option Lars Ellenberg <lars.ellenberg@xxxxxxxxxx> drbd: fix access after free Christian Borntraeger <borntraeger@xxxxxxxxxx> s390: Correct register corruption in critical section cleanup Jann Horn <jannh@xxxxxxxxxx> scsi: sg: mitigate read/write abuse Changbin Du <changbin.du@xxxxxxxxx> tracing: Fix missing return symbol in function_graph output Cannon Matthews <cannonmatthews@xxxxxxxxxx> mm: hugetlb: yield when prepping struct pages Richard Weinberger <richard@xxxxxx> ubi: fastmap: Correctly handle interrupted erasures in EBA Sean Nyekjaer <sean.nyekjaer@xxxxxxxxx> ARM: dts: imx6q: Use correct SDMA script for SPI5 core Taehee Yoo <ap420073@xxxxxxxxx> netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain() Keith Busch <keith.busch@xxxxxxxxx> nvme-pci: initialize queue memory before interrupts Masami Hiramatsu <mhiramat@xxxxxxxxxx> kprobes/x86: Do not modify singlestep buffer while resuming Ben Hutchings <ben.hutchings@xxxxxxxxxxxxxxx> ipv4: Fix error return value in fib_convert_metrics() Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: rcar: fix resume by always initializing registers before transfer Vasanthakumar Thiagarajan <vthiagar@xxxxxxxxxxxxxxxx> ath10k: fix rfc1042 header retrieval in QCA4019 with eth decap mode Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx> x86/boot: Fix early command-line parsing when matching at end Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> n_tty: Access echo_* variables carefully. Laura Abbott <labbott@xxxxxxxxxx> staging: android: ion: Return an ERR_PTR in ion_map_kernel Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> n_tty: Fix stall at n_tty_receive_char_special(). Karoly Pados <pados@xxxxxxxx> USB: serial: cp210x: add Silicon Labs IDs for Windows Update Johan Hovold <johan@xxxxxxxxxx> USB: serial: cp210x: add CESINEL device ids Houston Yaroschoff <hstn@xxxxxxxxxx> usb: cdc_acm: Add quirk for Uniden UBC125 scanner ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/imx6q.dtsi | 2 +- arch/s390/kernel/entry.S | 4 +- arch/x86/kernel/cpu/mcheck/mce.c | 51 ++++++++----- arch/x86/kernel/kprobes/core.c | 42 ++++++----- arch/x86/lib/cmdline.c | 34 ++++++--- drivers/block/drbd/drbd_worker.c | 2 +- drivers/hid/hid-debug.c | 8 ++- drivers/hid/i2c-hid/i2c-hid.c | 2 +- drivers/hid/usbhid/hiddev.c | 11 +++ drivers/i2c/busses/i2c-rcar.c | 3 +- drivers/md/dm-bufio.c | 31 ++++---- drivers/media/i2c/cx25840/cx25840-core.c | 28 ++++++-- drivers/mtd/chips/cfi_cmdset_0002.c | 30 +++++--- drivers/mtd/nand/mxc_nand.c | 5 +- drivers/mtd/ubi/eba.c | 92 +++++++++++++++++++++++- drivers/net/wireless/ath/ath10k/htt_rx.c | 5 +- drivers/nvme/host/pci.c | 4 +- drivers/scsi/sg.c | 42 ++++++++++- drivers/staging/android/ion/ion_heap.c | 2 +- drivers/staging/comedi/drivers/quatech_daqp_cs.c | 2 +- drivers/tty/n_tty.c | 55 ++++++++------ drivers/usb/class/cdc-acm.c | 3 + drivers/usb/serial/cp210x.c | 14 ++++ fs/cifs/cifssmb.c | 10 ++- fs/cifs/smb2pdu.c | 18 +++-- fs/ext4/balloc.c | 21 +++--- fs/ext4/ext4.h | 5 -- fs/ext4/ext4_extents.h | 1 + fs/ext4/extents.c | 6 ++ fs/ext4/ialloc.c | 14 +++- fs/ext4/inline.c | 1 + fs/ext4/inode.c | 7 +- fs/ext4/mballoc.c | 6 +- fs/ext4/super.c | 86 ++++++++++++++++++---- fs/jbd2/transaction.c | 9 ++- kernel/trace/trace_functions_graph.c | 5 +- mm/hugetlb.c | 1 + mm/page_alloc.c | 2 - net/ipv4/fib_semantics.c | 2 +- net/netfilter/nf_log.c | 9 ++- net/netfilter/nf_tables_core.c | 3 +- 42 files changed, 513 insertions(+), 169 deletions(-)