This is the start of the stable review cycle for the 4.4.215 release. There are 113 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 29 Feb 2020 13:21:24 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.215-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.4.215-rc1 Thomas Gleixner <tglx@xxxxxxxxxxxxx> xen: Enable interrupts when calling _cond_resched() Takashi Iwai <tiwai@xxxxxxx> ALSA: seq: Fix concurrent access to queue current tick/time Takashi Iwai <tiwai@xxxxxxx> ALSA: seq: Avoid concurrent access to queue flags Takashi Iwai <tiwai@xxxxxxx> ALSA: rawmidi: Avoid bit fields for state flags Aditya Pakki <pakki001@xxxxxxx> ecryptfs: replace BUG_ON with error handling code Bart Van Assche <bvanassche@xxxxxxx> scsi: Revert "target: iscsi: Wait for all commands to finish before freeing a session" Bart Van Assche <bvanassche@xxxxxxx> scsi: Revert "RDMA/isert: Fix a recently introduced regression related to logout" Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents Miaohe Lin <linmiaohe@xxxxxxxxxx> KVM: apic: avoid calculating pending eoi from an uninitialized val Oliver Upton <oupton@xxxxxxxxxx> KVM: nVMX: Check IO instruction VM-exit conditions Oliver Upton <oupton@xxxxxxxxxx> KVM: nVMX: Refactor IO bitmap checks into helper function Shijie Luo <luoshijie1@xxxxxxxxxx> ext4: add cond_resched() to __ext4_find_entry() Qian Cai <cai@xxxxxx> ext4: fix a data race in EXT4_I(inode)->i_disksize Jann Horn <jannh@xxxxxxxxxx> netfilter: xt_bpf: add overflow checks Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: nVMX: Don't emulate instructions in guest mode Eric Dumazet <edumazet@xxxxxxxxxx> vt: vt_ioctl: fix race in VT_RESIZEX Al Viro <viro@xxxxxxxxxxxxxxxxxx> VT_RESIZEX: get rid of field-by-field copyin Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms Ioanna Alifieraki <ioanna-maria.alifieraki@xxxxxxxxxxxxx> Revert "ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()" Fugang Duan <fugang.duan@xxxxxxx> tty: serial: imx: setup the correct sg entry for tx dma Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/mce/amd: Fix kobject lifetime Larry Finger <Larry.Finger@xxxxxxxxxxxx> staging: rtl8188eu: Fix potential overuse of kernel memory Larry Finger <Larry.Finger@xxxxxxxxxxxx> staging: rtl8188eu: Fix potential security hole Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: hub: Don't record a connect-change event during reset-resume Richard Dodd <richard.o.dodd@xxxxxxxxx> USB: Fix novation SourceControl XL after suspend EJ Hsu <ejh@xxxxxxxxxx> usb: uas: fix a plug & unplug racing Malcolm Priestley <tvboxspy@xxxxxxxxx> staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi. Suren Baghdasaryan <surenb@xxxxxxxxxx> staging: android: ashmem: Disallow ashmem memory from being remapped Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> floppy: check FDC index for errors before assigning it Firo Yang <firo.yang@xxxxxxxx> enic: prevent waking up stopped tx queues over watchdog reset Jaihind Yadav <jaihindyadav@xxxxxxxxxxxxxx> selinux: ensure we cleanup the internal AVC counters on error in avc_update() Zhiqiang Liu <liuzhiqiang26@xxxxxxxxxx> brd: check and limit max_part par Shubhrajyoti Datta <shubhrajyoti.datta@xxxxxxxxxx> microblaze: Prevent the overflow of the start Zenghui Yu <yuzenghui@xxxxxxxxxx> irqchip/gic-v3-its: Reference to its_invall_cmd descriptor when building INVALL Coly Li <colyli@xxxxxxx> bcache: explicity type cast in bset_bkey_last() Yunfeng Ye <yeyunfeng@xxxxxxxxxx> reiserfs: prevent NULL pointer dereference in reiserfs_insert_item() Nathan Chancellor <natechancellor@xxxxxxxxx> lib/scatterlist.c: adjust indentation in __sg_alloc_table wangyan <wangyan122@xxxxxxxxxx> ocfs2: fix a NULL pointer dereference when call ocfs2_update_inode_fsync_trans() Daniel Vetter <daniel.vetter@xxxxxxxx> radeon: insert 10ms sleep in dce5_crtc_load_lut Vasily Averin <vvs@xxxxxxxxxxxxx> trigger_next should increase position index Ben Skeggs <bskeggs@xxxxxxxxxx> drm/nouveau/disp/nv50-: prevent oops when no channel method map provided Colin Ian King <colin.king@xxxxxxxxxxxxx> iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop Nathan Chancellor <natechancellor@xxxxxxxxx> hostap: Adjust indentation in prism2_hostapd_add_sta Vincenzo Frascino <vincenzo.frascino@xxxxxxx> ARM: 8951/1: Fix Kexec compilation issue. zhangyi (F) <yi.zhang@xxxxxxxxxx> jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record Peter Große <pegro@xxxxxxxxx> ALSA: hda - Add docking station support for Lenovo Thinkpad T420s Vasily Gorbik <gor@xxxxxxxxxxxxx> s390/ftrace: generate traced function stack frame Brandon Maier <brandon.maier@xxxxxxxxxxxxxxxxxxx> remoteproc: Initialize rproc_class before use Dan Carpenter <dan.carpenter@xxxxxxxxxx> ide: serverworks: potential overflow in svwks_set_pio_mode() Dan Carpenter <dan.carpenter@xxxxxxxxxx> cmd64x: potential buffer overflow in cmd64x_program_timings() Nick Black <nlb@xxxxxxxxxx> scsi: iscsi: Don't destroy session if there are outstanding connections Will Deacon <will@xxxxxxxxxx> iommu/arm-smmu-v3: Use WRITE_ONCE() when changing validity of an STE Navid Emamdoost <navid.emamdoost@xxxxxxxxx> drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add YueHaibing <yuehaibing@xxxxxxxxxx> drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler Geert Uytterhoeven <geert+renesas@xxxxxxxxx> driver core: Print device when resources present in really_probe() Logan Gunthorpe <logang@xxxxxxxxxxxx> PCI: Don't disable bridge BARs when assigning bus resources Chen Zhou <chenzhou10@xxxxxxxxxx> ASoC: atmel: fix build error with CONFIG_SND_ATMEL_SOC_DMA=m Arnd Bergmann <arnd@xxxxxxxx> wan: ixp4xx_hss: fix compile-testing on 64-bit Philipp Zabel <p.zabel@xxxxxxxxxxxxxx> Input: edt-ft5x06 - work around first register access error Paul E. McKenney <paulmck@xxxxxxxxxx> rcu: Use WRITE_ONCE() for assignments to ->pprev for hlist_nulls Dmitry Osipenko <digetx@xxxxxxxxx> soc/tegra: fuse: Correct straps' address for older Tegra124 device trees Shuah Khan <skhan@xxxxxxxxxxxxxxxxxxx> usbip: Fix unsafe unaligned pointer usage Andrey Zhizhikin <andrey.z@xxxxxxxxx> tools lib api fs: Fix gcc9 stringop-truncation compilation error Takashi Iwai <tiwai@xxxxxxx> ALSA: sh: Fix compile warning wrt const Geert Uytterhoeven <geert+renesas@xxxxxxxxx> pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs Valdis Kletnieks <valdis.kletnieks@xxxxxx> x86/vdso: Provide missing include file Geert Uytterhoeven <geert+renesas@xxxxxxxxx> ARM: dts: r8a7779: Add device node for ARM global timer Nathan Chancellor <natechancellor@xxxxxxxxx> scsi: aic7xxx: Adjust indentation in ahc_find_syncrate Erik Kaneda <erik.kaneda@xxxxxxxxx> ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1 Aditya Pakki <pakki001@xxxxxxx> orinoco: avoid assertion in case of NULL pointer Phong Tran <tranmanphong@xxxxxxxxx> rtlwifi: rtl_pci: Fix -Wcast-function-type Phong Tran <tranmanphong@xxxxxxxxx> iwlegacy: Fix -Wcast-function-type Phong Tran <tranmanphong@xxxxxxxxx> ipw2x00: Fix -Wcast-function-type Phong Tran <tranmanphong@xxxxxxxxx> b43legacy: Fix -Wcast-function-type Nathan Chancellor <natechancellor@xxxxxxxxx> ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status Jan Kara <jack@xxxxxxx> reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling Mao Wenan <maowenan@xxxxxxxxxx> NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu(). Miquel Raynal <miquel.raynal@xxxxxxxxxxx> regulator: rk808: Lower log level on optional GPIOs being not available yu kuai <yukuai3@xxxxxxxxxx> drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table Douglas Anderson <dianders@xxxxxxxxxxxx> clk: qcom: rcg2: Don't crash if our parent can't be found; return an error Masahiro Yamada <masahiroy@xxxxxxxxxx> kconfig: fix broken dependency in randconfig-generated .config zhangyi (F) <yi.zhang@xxxxxxxxxx> ext4, jbd2: ensure panic when aborting with zero errno Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> tracing: Fix very unlikely race of registering two stat tracers Kai Li <li.kai4@xxxxxxx> jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal Geert Uytterhoeven <geert+renesas@xxxxxxxxx> nfs: NFS_SWAP should depend on SWAP Jia-Ju Bai <baijiaju1990@xxxxxxxxx> usb: gadget: udc: fix possible sleep-in-atomic-context bugs in gr_probe() Jia-Ju Bai <baijiaju1990@xxxxxxxxx> uio: fix a sleep-in-atomic-context bug in uio_dmem_genirq_irqcontrol() Tiezhu Yang <yangtiezhu@xxxxxxxxxxx> MIPS: Loongson: Fix potential NULL dereference in loongson3_platform_init() Ard Biesheuvel <ardb@xxxxxxxxxx> efi/x86: Map the entire EFI vendor string before copying it Jia-Ju Bai <baijiaju1990@xxxxxxxxx> media: sti: bdisp: fix a possible sleep-in-atomic-context bug in bdisp_device_run() Eugen Hristev <eugen.hristev@xxxxxxxxxxxxx> media: i2c: mt9v032: fix enum mbus codes and frame sizes Geert Uytterhoeven <geert+renesas@xxxxxxxxx> pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs Vladimir Oltean <olteanv@xxxxxxxxx> gianfar: Fix TX timestamping with a stacked DSA driver Dan Carpenter <dan.carpenter@xxxxxxxxxx> brcmfmac: Fix use after free in brcmf_sdio_readframes() Paul Kocialkowski <paul.kocialkowski@xxxxxxxxxxx> drm/gma500: Fixup fbdev stolen size usage evaluation Sasha Levin <sashal@xxxxxxxxxx> Revert "KVM: VMX: Add non-canonical check on writes to RTIT address MSRs" Allen Pais <allen.pais@xxxxxxxxxx> scsi: qla2xxx: fix a potential NULL pointer dereference David Sterba <dsterba@xxxxxxxx> btrfs: print message when tree-log replay starts zhangyi (F) <yi.zhang@xxxxxxxxxx> jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer zhangyi (F) <yi.zhang@xxxxxxxxxx> jbd2: move the clearing of b_modified flag to the journal_unmap_buffer() Mike Jones <michael-a1.jones@xxxxxxxxxx> hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions. Nathan Chancellor <natechancellor@xxxxxxxxx> s390/time: Fix clk type in get_tod_clock Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> padata: Remove broken queue flushing David Sterba <dsterba@xxxxxxxx> btrfs: log message when rw remount is attempted with unclean tree-log Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix race between using extent maps and merging them Jan Kara <jack@xxxxxxx> ext4: fix checksum errors with indexed dirs Zhihao Cheng <chengzhihao1@xxxxxxxxxx> ubifs: Fix deadlock in concurrent bulk-read and writepage Arvind Sankar <nivedita@xxxxxxxxxxxx> ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 Wenwen Wang <wenwen@xxxxxxxxxx> ecryptfs: fix a memory leak bug in ecryptfs_init_messaging() Wenwen Wang <wenwen@xxxxxxxxxx> ecryptfs: fix a memory leak bug in parse_tag_1_packet() Takashi Iwai <tiwai@xxxxxxx> ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: x86: emulate RDPID Andy Lutomirski <luto@xxxxxxxxxx> x86/vdso: Use RDPID in preference to LSL when available ------------- Diffstat: Makefile | 4 +- arch/arm/Kconfig | 2 +- arch/arm/boot/dts/r8a7779.dtsi | 8 + arch/microblaze/kernel/cpu/cache.c | 3 +- arch/mips/loongson64/loongson-3/platform.c | 3 + arch/s390/include/asm/timex.h | 2 +- arch/s390/kernel/mcount.S | 15 +- arch/sh/include/cpu-sh2a/cpu/sh7269.h | 11 +- arch/x86/entry/vdso/vdso32-setup.c | 1 + arch/x86/include/asm/cpufeatures.h | 1 + arch/x86/include/asm/vgtod.h | 7 +- arch/x86/kernel/cpu/mcheck/mce_amd.c | 17 +- arch/x86/kvm/cpuid.c | 7 +- arch/x86/kvm/emulate.c | 22 +- arch/x86/kvm/lapic.c | 4 +- arch/x86/kvm/vmx.c | 102 +- arch/x86/kvm/vmx/vmx.c | 8033 -------------------- arch/x86/platform/efi/efi.c | 13 +- drivers/acpi/acpica/dsfield.c | 2 +- drivers/acpi/acpica/dswload.c | 21 + drivers/base/dd.c | 5 +- drivers/block/brd.c | 22 +- drivers/block/floppy.c | 7 +- drivers/clk/qcom/clk-rcg2.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_atombios.c | 19 +- drivers/gpu/drm/gma500/framebuffer.c | 8 +- drivers/gpu/drm/nouveau/nouveau_fence.c | 2 +- .../gpu/drm/nouveau/nvkm/engine/disp/channv50.c | 2 + drivers/gpu/drm/radeon/radeon_display.c | 2 + drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf_res.c | 4 +- drivers/hwmon/pmbus/ltc2978.c | 4 +- drivers/ide/cmd64x.c | 3 + drivers/ide/serverworks.c | 6 + drivers/infiniband/ulp/isert/ib_isert.c | 12 + drivers/input/touchscreen/edt-ft5x06.c | 7 + drivers/iommu/arm-smmu-v3.c | 3 +- drivers/irqchip/irq-gic-v3-its.c | 2 +- drivers/md/bcache/bset.h | 3 +- drivers/media/i2c/mt9v032.c | 10 +- drivers/media/platform/sti/bdisp/bdisp-hw.c | 6 +- drivers/net/ethernet/cisco/enic/enic_main.c | 2 +- drivers/net/ethernet/freescale/gianfar.c | 10 +- drivers/net/wan/ixp4xx_hss.c | 4 +- drivers/net/wireless/b43legacy/main.c | 5 +- drivers/net/wireless/brcm80211/brcmfmac/sdio.c | 1 + drivers/net/wireless/hostap/hostap_ap.c | 2 +- drivers/net/wireless/ipw2x00/ipw2100.c | 7 +- drivers/net/wireless/ipw2x00/ipw2200.c | 5 +- drivers/net/wireless/iwlegacy/3945-mac.c | 5 +- drivers/net/wireless/iwlegacy/4965-mac.c | 5 +- drivers/net/wireless/iwlegacy/common.c | 2 +- drivers/net/wireless/orinoco/orinoco_usb.c | 3 +- drivers/net/wireless/realtek/rtlwifi/pci.c | 10 +- drivers/nfc/port100.c | 2 +- drivers/pci/setup-bus.c | 20 +- drivers/pinctrl/sh-pfc/pfc-sh7264.c | 9 +- drivers/pinctrl/sh-pfc/pfc-sh7269.c | 39 +- drivers/regulator/rk808-regulator.c | 2 +- drivers/remoteproc/remoteproc_core.c | 2 +- drivers/scsi/aic7xxx/aic7xxx_core.c | 2 +- drivers/scsi/iscsi_tcp.c | 4 + drivers/scsi/qla2xxx/qla_os.c | 19 +- drivers/scsi/scsi_transport_iscsi.c | 26 +- drivers/soc/tegra/fuse/tegra-apbmisc.c | 2 +- drivers/staging/android/ashmem.c | 28 + drivers/staging/rtl8188eu/os_dep/ioctl_linux.c | 4 +- drivers/staging/vt6656/dpc.c | 2 +- drivers/target/iscsi/iscsi_target.c | 16 +- drivers/tty/serial/imx.c | 2 +- drivers/tty/vt/vt_ioctl.c | 75 +- drivers/uio/uio_dmem_genirq.c | 6 +- drivers/usb/core/hub.c | 5 - drivers/usb/core/quirks.c | 3 + drivers/usb/gadget/udc/gr_udc.c | 16 +- drivers/usb/host/xhci-pci.c | 4 +- drivers/usb/storage/uas.c | 23 +- drivers/xen/preempt.c | 4 +- fs/btrfs/disk-io.c | 1 + fs/btrfs/extent_map.c | 11 + fs/btrfs/ordered-data.c | 7 +- fs/btrfs/super.c | 2 + fs/ecryptfs/crypto.c | 6 +- fs/ecryptfs/keystore.c | 2 +- fs/ecryptfs/messaging.c | 1 + fs/ext4/dir.c | 14 +- fs/ext4/ext4.h | 7 +- fs/ext4/inode.c | 14 +- fs/ext4/namei.c | 8 + fs/jbd2/checkpoint.c | 2 +- fs/jbd2/commit.c | 50 +- fs/jbd2/journal.c | 21 +- fs/jbd2/transaction.c | 10 +- fs/nfs/Kconfig | 2 +- fs/ocfs2/journal.h | 8 +- fs/reiserfs/stree.c | 3 +- fs/reiserfs/super.c | 2 +- fs/ubifs/file.c | 5 +- include/linux/list_nulls.h | 8 +- include/linux/rculist_nulls.h | 8 +- include/scsi/iscsi_proto.h | 1 - include/sound/rawmidi.h | 6 +- ipc/sem.c | 6 +- kernel/padata.c | 45 +- kernel/trace/trace_events_trigger.c | 5 +- kernel/trace/trace_stat.c | 19 +- lib/scatterlist.c | 2 +- net/netfilter/xt_bpf.c | 3 + scripts/kconfig/confdata.c | 2 +- security/selinux/avc.c | 2 +- sound/core/seq/seq_clientmgr.c | 4 +- sound/core/seq/seq_queue.c | 29 +- sound/core/seq/seq_timer.c | 13 +- sound/core/seq/seq_timer.h | 3 +- sound/pci/hda/hda_codec.c | 2 +- sound/pci/hda/hda_eld.c | 2 +- sound/pci/hda/hda_sysfs.c | 4 +- sound/pci/hda/patch_conexant.c | 1 + sound/sh/aica.c | 4 +- sound/soc/atmel/Kconfig | 2 + sound/usb/quirks.c | 1 + sound/usb/usx2y/usX2Yhwdep.c | 2 +- tools/lib/api/fs/fs.c | 4 +- tools/usb/usbip/src/usbip_network.c | 40 +- tools/usb/usbip/src/usbip_network.h | 12 +- 124 files changed, 778 insertions(+), 8412 deletions(-)