This is the start of the stable review cycle for the 4.4.300 release. There are 114 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 26 Jan 2022 18:39:11 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.300-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.4.300-rc1 Miaoqian Lin <linmq006@xxxxxxxxx> lib82596: Fix IRQ check in sni_82596_probe Sergey Shtylyov <s.shtylyov@xxxxxx> bcmgenet: add WOL IRQ check Kevin Bracey <kevin@xxxxxxxxx> net_sched: restore "mpu xxx" handling Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> dmaengine: at_xdmac: Fix at_xdmac_lld struct definition Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> dmaengine: at_xdmac: Fix lld view setting Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> dmaengine: at_xdmac: Print debug message after realeasing the lock Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> dmaengine: at_xdmac: Don't start transactions at tx_submit level Eric Dumazet <edumazet@xxxxxxxxxx> netns: add schedule point in ops_exit_list() Robert Hancock <robert.hancock@xxxxxxxxxx> net: axienet: fix number of TX ring slots for available check Robert Hancock <robert.hancock@xxxxxxxxxx> net: axienet: Wait for PhyRstCmplt after core reset Eric Dumazet <edumazet@xxxxxxxxxx> af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress Miaoqian Lin <linmq006@xxxxxxxxx> parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries Tobias Waldekranz <tobias@xxxxxxxxxxxxxx> net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module Tobias Waldekranz <tobias@xxxxxxxxxxxxxx> powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses Theodore Ts'o <tytso@xxxxxxx> ext4: don't use the orphan list when migrating an inode Ye Bin <yebin10@xxxxxxxxxx> ext4: Fix BUG_ON in ext4_bread when write quota data Luís Henriques <lhenriques@xxxxxxx> ext4: set csum seed in tmp inode while migrating to extents Petr Cvachoucek <cvachoucek@xxxxxxxxx> ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers Yauhen Kharuzhy <jekhor@xxxxxxxxx> power: bq25890: Enable continuous conversion for ADC at charging Christoph Hellwig <hch@xxxxxx> scsi: sr: Don't use GFP_DMA Tianjia Zhang <tianjia.zhang@xxxxxxxxxxxxxxxxx> MIPS: Octeon: Fix build errors using clang Lakshmi Sowjanya D <lakshmi.sowjanya.d@xxxxxxxxx> i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters Takashi Iwai <tiwai@xxxxxxx> ALSA: seq: Set upper limit of processed events Christophe Leroy <christophe.leroy@xxxxxxxxxx> w1: Misuse of get_user()/put_user() reported by sparse Joakim Tjernlund <joakim.tjernlund@xxxxxxxxxxxx> i2c: mpc: Correct I2C reset procedure Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING Heiner Kallweit <hkallweit1@xxxxxxxxx> i2c: i801: Don't silently correct invalid transfer size Julia Lawall <Julia.Lawall@xxxxxxx> powerpc/btext: add missing of_node_put Julia Lawall <Julia.Lawall@xxxxxxx> powerpc/cell: add missing of_node_put Julia Lawall <Julia.Lawall@xxxxxxx> powerpc/powernv: add missing of_node_put Julia Lawall <Julia.Lawall@xxxxxxx> powerpc/6xx: add missing of_node_put John David Anglin <dave.anglin@xxxxxxxx> parisc: Avoid calling faulthandler_disabled() twice Lukas Wunner <lukas@xxxxxxxxx> serial: core: Keep mctrl register state and cached copy in sync Lukas Wunner <lukas@xxxxxxxxx> serial: pl010: Drop CR register reset on set_termios Joe Thornber <ejt@xxxxxxxxxx> dm space map common: add bounds check to sm_ll_lookup_bitmap() Joe Thornber <ejt@xxxxxxxxxx> dm btree: add a defensive bounds check to insert_at() Florian Fainelli <f.fainelli@xxxxxxxxx> net: mdio: Demote probed message to debug print Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: remove BUG_ON(!eie) in find_parent_nodes Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: remove BUG_ON() in find_parent_nodes() Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> ACPICA: Utilities: Avoid deleting the same object twice in a row Randy Dunlap <rdunlap@xxxxxxxxxxxxx> um: registers: Rename function names to avoid conflicts and build problems Zekun Shen <bruceshenzk@xxxxxxxxx> ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 Zhou Qingyang <zhou1615@xxxxxxx> media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() Sean Young <sean@xxxxxxxx> media: igorplugusb: receiver overflow should be reported Suresh Kumar <surkumar@xxxxxxxxxx> net: bonding: debug: avoid printing debug logs when bond is not notifying peers Johannes Berg <johannes.berg@xxxxxxxxx> iwlwifi: mvm: synchronize with FW after multicast commands Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx> media: m920x: don't use stack on USB reads Zhou Qingyang <zhou1615@xxxxxxx> media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() Xiongwei Song <sxwjean@xxxxxxxxx> floppy: Add max size check for user space request Zekun Shen <bruceshenzk@xxxxxxxxx> mwifiex: Fix skb_over_panic in mwifiex_usb_recv() Chengfeng Ye <cyeaa@xxxxxxxxxxxxxx> HSI: core: Fix return freed object in hsi_new_client Zheyu Ma <zheyuma97@xxxxxxxxx> media: b2c2: Add missing check in flexcop_pci_isr: Pavankumar Kondeti <quic_pkondeti@xxxxxxxxxxx> usb: gadget: f_fs: Use stream_open() for endpoint files Zekun Shen <bruceshenzk@xxxxxxxxx> ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply Alexander Aring <aahringo@xxxxxxxxxx> fs: dlm: filter user dlm messages for kernel locks Wei Yongjun <weiyongjun1@xxxxxxxxxx> Bluetooth: Fix debugfs entry leak in hci_register_dev() Kamal Heib <kamalheib1@xxxxxxxxx> RDMA/cxgb4: Set queue pair state when being queried Randy Dunlap <rdunlap@xxxxxxxxxxxxx> mips: bcm63xx: add support for clk_set_parent() Randy Dunlap <rdunlap@xxxxxxxxxxxxx> mips: lantiq: add support for clk_set_parent() Wei Yongjun <weiyongjun1@xxxxxxxxxx> misc: lattice-ecp3-config: Fix task hung when firmware load failed Jiasheng Jiang <jiasheng@xxxxxxxxxxx> ASoC: samsung: idma: Check of ioremap return value Arnd Bergmann <arnd@xxxxxxxx> dmaengine: pxa/mmp: stop referencing config->slave_id Avihai Horon <avihaih@xxxxxxxxxx> RDMA/core: Let ib_find_gid() continue search even after empty entry Jiasheng Jiang <jiasheng@xxxxxxxxxxx> uio: uio_dmem_genirq: Catch the Exception Kees Cook <keescook@xxxxxxxxxxxx> char/mwave: Adjust io port register size Bixuan Cui <cuibixuan@xxxxxxxxxxxxxxxxx> ALSA: oss: fix compile error when OSS_DEBUG is enabled Peiwei Hu <jlu.hpw@xxxxxxxxxxx> powerpc/prom_init: Fix improper check of prom_getprop() Takashi Iwai <tiwai@xxxxxxx> ALSA: hda: Add missing rwsem around snd_ctl_remove() calls Takashi Iwai <tiwai@xxxxxxx> ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls Takashi Iwai <tiwai@xxxxxxx> ALSA: jack: Add missing rwsem around snd_ctl_remove() calls Jan Kara <jack@xxxxxxx> ext4: avoid trim error on fs with small groups Pavel Skripkin <paskripkin@xxxxxxxxx> net: mcs7830: handle usb read errors properly Dominik Brodowski <linux@xxxxxxxxxxxxxxxxxxxx> pcmcia: fix setting of kthread task states Jiasheng Jiang <jiasheng@xxxxxxxxxxx> can: xilinx_can: xcan_probe(): check for error irq Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx> can: softing: softing_startstop(): fix set but not used variable warning Miaoqian Lin <linmq006@xxxxxxxxx> spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe Eric Dumazet <edumazet@xxxxxxxxxx> ppp: ensure minimum packet size in ppp_write() Zhou Qingyang <zhou1615@xxxxxxx> pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() Zhou Qingyang <zhou1615@xxxxxxx> pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() Wei Yongjun <weiyongjun1@xxxxxxxxxx> usb: ftdi-elan: fix memory leak on device disconnect Wang Hai <wanghai38@xxxxxxxxxx> media: msi001: fix possible null-ptr-deref in msi001_probe() Zhou Qingyang <zhou1615@xxxxxxx> media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() Zhou Qingyang <zhou1615@xxxxxxx> media: dib8000: Fix a memleak in dib8000_init() Tasos Sahanidis <tasos@xxxxxxxxxxxx> floppy: Fix hang in watchdog when disk is ejected Lino Sanfilippo <LinoSanfilippo@xxxxxx> serial: amba-pl011: do not request memory region twice Zhou Qingyang <zhou1615@xxxxxxx> drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxx> arm64: dts: qcom: msm8916: fix MMC controller aliases Florian Westphal <fw@xxxxxxxxx> netfilter: bridge: add support for pppoe filtering Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> tty: serial: atmel: Call dma_async_issue_pending() Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> tty: serial: atmel: Check return code of dmaengine_submit() Chengfeng Ye <cyeaa@xxxxxxxxxxxxxx> crypto: qce - fix uaf on qce_ahash_register_one Pavel Skripkin <paskripkin@xxxxxxxxx> Bluetooth: stop proccessing malicious adv data Wang Hai <wanghai38@xxxxxxxxxx> Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails Yifeng Li <tomli@xxxxxxxx> PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller Johan Hovold <johan@xxxxxxxxxx> can: softing_cs: softingcs_probe(): fix memleak on registration failure Johan Hovold <johan@xxxxxxxxxx> media: stk1160: fix control-message timeouts Johan Hovold <johan@xxxxxxxxxx> media: pvrusb2: fix control-message timeouts Michael Kuron <michael.kuron@xxxxxxxxx> media: dib0700: fix undefined behavior in tuner shutdown Johan Hovold <johan@xxxxxxxxxx> media: em28xx: fix control-message timeouts Johan Hovold <johan@xxxxxxxxxx> media: mceusb: fix control-message timeouts Mateusz Jończyk <mat.jonczyk@xxxxx> rtc: cmos: take rtc_lock while reading from CMOS Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx> nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() Jann Horn <jannh@xxxxxxxxxx> HID: uhid: Fix worker destroying device without any protection Larry Finger <Larry.Finger@xxxxxxxxxxxx> rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled Johan Hovold <johan@xxxxxxxxxx> media: uvcvideo: fix division by zero at stream start Nathan Chancellor <nathan@xxxxxxxxxx> drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() Brian Silverman <brian.silverman@xxxxxxxxxxxxxxxxx> can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx> can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: core: Fix bug in resuming hub's handling of wakeup requests Johan Hovold <johan@xxxxxxxxxx> Bluetooth: bfusb: fix division by zero in send path ------------- Diffstat: Makefile | 4 +-- arch/arm64/boot/dts/qcom/msm8916.dtsi | 4 +-- arch/mips/bcm63xx/clk.c | 6 ++++ arch/mips/include/asm/octeon/cvmx-bootinfo.h | 4 +-- arch/mips/lantiq/clk.c | 6 ++++ arch/parisc/kernel/traps.c | 2 +- arch/powerpc/boot/dts/fsl/qoriq-fman3l-0.dtsi | 2 ++ arch/powerpc/kernel/btext.c | 4 ++- arch/powerpc/kernel/prom_init.c | 2 +- arch/powerpc/kernel/smp.c | 2 ++ arch/powerpc/platforms/cell/iommu.c | 1 + arch/powerpc/platforms/embedded6xx/hlwd-pic.c | 1 + arch/powerpc/platforms/powernv/opal-lpc.c | 1 + arch/um/include/shared/registers.h | 4 +-- arch/um/os-Linux/registers.c | 4 +-- arch/um/os-Linux/start_up.c | 2 +- arch/x86/um/syscalls_64.c | 3 +- drivers/acpi/acpica/exoparg1.c | 3 +- drivers/acpi/acpica/utdelete.c | 1 + drivers/block/floppy.c | 6 ++-- drivers/bluetooth/bfusb.c | 3 ++ drivers/char/mwave/3780i.h | 2 +- drivers/crypto/qce/sha.c | 2 +- drivers/dma/at_xdmac.c | 32 ++++++++++------------ drivers/dma/mmp_pdma.c | 6 ---- drivers/dma/pxa_dma.c | 7 ----- drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 6 ++++ drivers/gpu/drm/i915/intel_pm.c | 6 ++-- drivers/hid/uhid.c | 29 +++++++++++++++++--- drivers/hsi/hsi.c | 1 + drivers/i2c/busses/i2c-designware-pcidrv.c | 8 +++--- drivers/i2c/busses/i2c-i801.c | 15 ++++------ drivers/i2c/busses/i2c-mpc.c | 23 ++++++++++------ drivers/infiniband/core/device.c | 3 +- drivers/infiniband/hw/cxgb4/qp.c | 1 + drivers/md/persistent-data/dm-btree.c | 8 ++++-- drivers/md/persistent-data/dm-space-map-common.c | 5 ++++ drivers/media/common/saa7146/saa7146_fops.c | 2 +- drivers/media/dvb-frontends/dib8000.c | 4 ++- drivers/media/pci/b2c2/flexcop-pci.c | 3 ++ drivers/media/pci/saa7146/hexium_gemini.c | 7 ++++- drivers/media/pci/saa7146/hexium_orion.c | 8 +++++- drivers/media/pci/saa7146/mxb.c | 8 +++++- drivers/media/rc/igorplugusb.c | 4 ++- drivers/media/rc/mceusb.c | 8 +++--- drivers/media/tuners/msi001.c | 7 +++++ drivers/media/usb/dvb-usb/dib0700_core.c | 2 -- drivers/media/usb/dvb-usb/m920x.c | 12 +++++++- drivers/media/usb/em28xx/em28xx-core.c | 4 +-- drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 8 +++--- drivers/media/usb/stk1160/stk1160-core.c | 4 +-- drivers/media/usb/uvc/uvc_video.c | 4 +++ drivers/mfd/intel-lpss-acpi.c | 7 ++++- drivers/misc/lattice-ecp3-config.c | 12 ++++---- drivers/net/bonding/bond_main.c | 6 ++-- drivers/net/can/softing/softing_cs.c | 2 +- drivers/net/can/softing/softing_fw.c | 11 ++++---- drivers/net/can/usb/gs_usb.c | 5 +++- drivers/net/can/xilinx_can.c | 7 ++++- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 10 ++++--- drivers/net/ethernet/freescale/xgmac_mdio.c | 3 +- drivers/net/ethernet/i825xx/sni_82596.c | 3 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 14 ++++++++-- drivers/net/phy/mdio_bus.c | 2 +- drivers/net/ppp/ppp_generic.c | 7 ++++- drivers/net/usb/mcs7830.c | 12 ++++++-- drivers/net/wireless/ath/ar5523/ar5523.c | 4 +++ drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +++++ drivers/net/wireless/iwlwifi/mvm/mac80211.c | 17 ++++++++++++ drivers/net/wireless/mwifiex/usb.c | 3 +- .../net/wireless/realtek/rtlwifi/rtl8192cu/hw.c | 1 + drivers/parisc/pdc_stable.c | 4 ++- drivers/pci/quirks.c | 3 ++ drivers/pcmcia/cs.c | 8 ++---- drivers/pcmcia/rsrc_nonstatic.c | 6 ++++ drivers/power/bq25890_charger.c | 4 +-- drivers/rtc/rtc-cmos.c | 3 ++ drivers/scsi/sr.c | 2 +- drivers/scsi/sr_vendor.c | 4 +-- drivers/spi/spi-meson-spifc.c | 1 + drivers/tty/serial/amba-pl010.c | 3 -- drivers/tty/serial/amba-pl011.c | 27 ++---------------- drivers/tty/serial/atmel_serial.c | 14 ++++++++++ drivers/tty/serial/serial_core.c | 3 +- drivers/uio/uio_dmem_genirq.c | 6 +++- drivers/usb/core/hcd.c | 9 +++++- drivers/usb/core/hub.c | 7 +++-- drivers/usb/gadget/function/f_fs.c | 4 +-- drivers/usb/misc/ftdi-elan.c | 1 + drivers/w1/slaves/w1_ds28e04.c | 26 ++++-------------- fs/btrfs/backref.c | 21 +++++++++++--- fs/dlm/lock.c | 9 ++++++ fs/ext4/ioctl.c | 2 -- fs/ext4/mballoc.c | 8 ++++++ fs/ext4/migrate.c | 23 ++++++++-------- fs/ext4/super.c | 2 +- fs/ubifs/super.c | 1 - include/net/sch_generic.h | 5 ++++ net/bluetooth/cmtp/core.c | 4 +-- net/bluetooth/hci_core.c | 1 + net/bluetooth/hci_event.c | 8 +++++- net/bridge/br_netfilter_hooks.c | 7 ++--- net/core/net_namespace.c | 4 ++- net/nfc/llcp_sock.c | 5 ++++ net/sched/sch_generic.c | 1 + net/unix/garbage.c | 14 ++++++++-- net/unix/scm.c | 6 ++-- sound/core/jack.c | 3 ++ sound/core/oss/pcm_oss.c | 2 +- sound/core/pcm.c | 6 +++- sound/core/seq/seq_queue.c | 14 ++++++++-- sound/pci/hda/hda_codec.c | 3 ++ sound/soc/samsung/idma.c | 2 ++ 113 files changed, 485 insertions(+), 238 deletions(-)
