[PATCH 4.4 00/61] 4.4.235-rc2 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 4.4.235 release.
There are 61 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri, 04 Sep 2020 07:47:57 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.235-rc2.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 4.4.235-rc2

Hector Martin <marcan@xxxxxxxxx>
    ALSA: usb-audio: Update documentation comment for MS2109 quirk

Peilin Ye <yepeilin.cs@xxxxxxxxx>
    HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()

Josef Bacik <josef@xxxxxxxxxxxxxx>
    btrfs: check the right error variable in btrfs_del_dir_entries_in_log

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
    usb: storage: Add unusual_uas entry for Sony PSZ drives

Tang Bin <tangbin@xxxxxxxxxxxxxxxxxxxx>
    usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe()

Cyril Roelandt <tipecaml@xxxxxxxxx>
    USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge

Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
    USB: quirks: Add no-lpm quirk for another Raydium touchscreen

Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx>
    usb: uas: Add quirk for PNY Pro Elite

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
    USB: yurex: Fix bad gfp argument

Heikki Krogerus <heikki.krogerus@xxxxxxxxxxxxxxx>
    device property: Fix the secondary firmware node handling in set_primary_fwnode()

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
    PM: sleep: core: Fix the handling of pending runtime resume requests

Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
    xhci: Do warm-reset when both CAS and XDEV_RESUME are set

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
    XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information.

Jan Kara <jack@xxxxxxx>
    writeback: Fix sync livelock due to b_dirty_time processing

Jan Kara <jack@xxxxxxx>
    writeback: Avoid skipping inode writeback

Jan Kara <jack@xxxxxxx>
    writeback: Protect inode->i_io_list with inode->i_lock

Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx>
    serial: 8250: change lock order in serial8250_do_startup()

Lukas Wunner <lukas@xxxxxxxxx>
    serial: pl011: Don't leak amba_ports entry on driver register error

Tamseel Shams <m.shams@xxxxxxxxxxx>
    serial: samsung: Removes the IRQ not found warning

George Kennedy <george.kennedy@xxxxxxxxxx>
    vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
    vt: defer kfree() of vc_screenbuf in vc_do_resize()

Evgeny Novikov <novikov@xxxxxxxxx>
    USB: lvtest: return proper error code in probe

George Kennedy <george.kennedy@xxxxxxxxxx>
    fbcon: prevent user font height or width change from causing potential out-of-bounds access

Sumera Priyadarsini <sylphrenadin@xxxxxxxxx>
    net: gianfar: Add of_node_put() before goto statement

Stanley Chu <stanley.chu@xxxxxxxxxxxx>
    scsi: ufs: Fix possible infinite loop in ufshcd_hold

Vineeth Vijayan <vneethv@xxxxxxxxxxxxx>
    s390/cio: add cond_resched() in the slow_eval_known_fn() loop

zhangyi (F) <yi.zhang@xxxxxxxxxx>
    jbd2: abort journal if free a async write error metadata buffer

Lukas Czerner <lczerner@xxxxxxxxxx>
    jbd2: make sure jh have b_transaction set in refile/unfile_buffer

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
    i2c: rcar: in slave mode, clear NACK earlier

Zhi Chen <zhichen@xxxxxxxxxxxxxx>
    Revert "ath10k: fix DMA related firmware crashes on multiple devices"

Changming Liu <charley.ashbringer@xxxxxxxxx>
    USB: sisusbvga: Fix a potential UB casued by left shifting a negative value

Arnd Bergmann <arnd@xxxxxxxx>
    powerpc/spufs: add CONFIG_COREDUMP dependency

Evgeny Novikov <novikov@xxxxxxxxx>
    media: davinci: vpif_capture: fix potential double free

Jason Baron <jbaron@xxxxxxxxxx>
    EDAC/ie31200: Fallback if host bridge device is already initialized

Javed Hasan <jhasan@xxxxxxxxxxx>
    scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del()

Xiubo Li <xiubli@xxxxxxxxxx>
    ceph: fix potential mdsc use-after-free crash

Jing Xiangfeng <jingxiangfeng@xxxxxxxxxx>
    scsi: iscsi: Do not put host in iscsi_set_flashnode_param()

Chris Wilson <chris@xxxxxxxxxxxxxxxxxx>
    locking/lockdep: Fix overflow in presentation of average lock-time

Aditya Pakki <pakki001@xxxxxxx>
    drm/nouveau: Fix reference count leak in nouveau_connector_detect

Aditya Pakki <pakki001@xxxxxxx>
    drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open

Peng Fan <fanpeng@xxxxxxxxxxx>
    mips/vdso: Fix resource leaks in genvdso.c

Reto Schneider <code@xxxxxxxxxxxxxxxxx>
    rtlwifi: rtl8192cu: Prevent leaking urb

Qiushi Wu <wu000273@xxxxxxx>
    PCI: Fix pci_create_slot() reference count leak

Desnes A. Nunes do Rosario <desnesn@xxxxxxxxxxxxx>
    selftests/powerpc: Purge extra count_pmc() calls of ebb selftests

Dick Kennedy <dick.kennedy@xxxxxxxxxxxx>
    scsi: lpfc: Fix shost refcount mismatch when deleting vport

Navid Emamdoost <navid.emamdoost@xxxxxxxxx>
    drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails

Navid Emamdoost <navid.emamdoost@xxxxxxxxx>
    drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config

Navid Emamdoost <navid.emamdoost@xxxxxxxxx>
    drm/amd/display: fix ref count leak in amdgpu_drm_ioctl

Navid Emamdoost <navid.emamdoost@xxxxxxxxx>
    drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms

Aditya Pakki <pakki001@xxxxxxx>
    drm/radeon: fix multiple reference count leak

Qiushi Wu <wu000273@xxxxxxx>
    drm/amdkfd: Fix reference count leaks.

Bodo Stroesser <bstroesser@xxxxxxxxxxxxxx>
    scsi: target: tcmu: Fix crash on ARM during cmd completion

Jia-Ju Bai <baijiaju@xxxxxxxxxxxxxxx>
    media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq()

Qiushi Wu <wu000273@xxxxxxx>
    ASoC: tegra: Fix reference count leaks.

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
    ALSA: pci: delete repeated words in comments

Vasant Hegde <hegdevasant@xxxxxxxxxxxxxxxxxx>
    powerpc/pseries: Do not initiate shutdown when system is running on UPS

Cong Wang <xiyou.wangcong@xxxxxxxxx>
    bonding: fix a potential double-unregister

Jarod Wilson <jarod@xxxxxxxxxx>
    bonding: show saner speed for broadcast mode

Mahesh Bandewar <maheshb@xxxxxxxxxx>
    ipvlan: fix device features

Cong Wang <xiyou.wangcong@xxxxxxxxx>
    tipc: fix uninit skb->data in tipc_nl_compat_dumpit()

Miaohe Lin <linmiaohe@xxxxxxxxxx>
    net: Fix potential wrong skb->protocol in skb_vlan_untag()


-------------

Diffstat:

 Makefile                                           |  4 +-
 arch/mips/vdso/genvdso.c                           | 10 +++
 arch/powerpc/platforms/cell/Kconfig                |  1 +
 arch/powerpc/platforms/pseries/ras.c               |  1 -
 drivers/base/core.c                                | 12 ++--
 drivers/base/power/main.c                          | 16 +++--
 drivers/edac/ie31200_edac.c                        | 50 ++++++++++++-
 drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c     | 16 +++--
 drivers/gpu/drm/amd/amdgpu/amdgpu_display.c        |  5 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c            |  3 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c            |  3 +-
 drivers/gpu/drm/amd/amdkfd/kfd_topology.c          | 20 ++++--
 drivers/gpu/drm/nouveau/nouveau_connector.c        |  4 +-
 drivers/gpu/drm/nouveau/nouveau_fbcon.c            |  4 +-
 drivers/gpu/drm/radeon/radeon_connectors.c         | 20 ++++--
 drivers/hid/usbhid/hiddev.c                        |  4 ++
 drivers/i2c/busses/i2c-rcar.c                      |  1 +
 drivers/media/pci/ttpci/av7110.c                   |  5 +-
 drivers/media/platform/davinci/vpif_capture.c      |  2 -
 drivers/net/bonding/bond_main.c                    | 24 +++++--
 drivers/net/ethernet/freescale/gianfar.c           |  4 +-
 drivers/net/ipvlan/ipvlan_main.c                   | 25 +++++--
 drivers/net/wireless/ath/ath10k/hw.h               |  2 +-
 drivers/net/wireless/realtek/rtlwifi/usb.c         |  5 +-
 drivers/pci/slot.c                                 |  6 +-
 drivers/s390/cio/css.c                             |  5 ++
 drivers/scsi/fcoe/fcoe_ctlr.c                      |  2 +-
 drivers/scsi/lpfc/lpfc_vport.c                     | 26 +++----
 drivers/scsi/scsi_transport_iscsi.c                |  2 +-
 drivers/scsi/ufs/ufshcd.c                          |  5 +-
 drivers/target/target_core_user.c                  |  9 ++-
 drivers/tty/serial/8250/8250_port.c                |  9 ++-
 drivers/tty/serial/amba-pl011.c                    |  5 +-
 drivers/tty/serial/samsung.c                       |  8 ++-
 drivers/tty/vt/vt.c                                |  5 +-
 drivers/tty/vt/vt_ioctl.c                          | 12 +++-
 drivers/usb/core/quirks.c                          |  2 +
 drivers/usb/host/ohci-exynos.c                     |  5 +-
 drivers/usb/host/xhci-hub.c                        | 19 ++---
 drivers/usb/misc/lvstest.c                         |  2 +-
 drivers/usb/misc/sisusbvga/sisusb.c                |  2 +-
 drivers/usb/misc/yurex.c                           |  2 +-
 drivers/usb/storage/unusual_devs.h                 |  2 +-
 drivers/usb/storage/unusual_uas.h                  | 14 ++++
 drivers/video/console/fbcon.c                      | 25 ++++++-
 drivers/xen/events/events_base.c                   | 16 ++---
 fs/btrfs/tree-log.c                                | 10 +--
 fs/ceph/mds_client.c                               | 14 +++-
 fs/fs-writeback.c                                  | 83 ++++++++++++----------
 fs/jbd2/transaction.c                              | 26 +++++++
 include/linux/fs.h                                 |  8 ++-
 include/trace/events/writeback.h                   | 13 ++--
 kernel/locking/lockdep_proc.c                      |  2 +-
 net/core/skbuff.c                                  |  4 +-
 net/tipc/netlink_compat.c                          | 12 +++-
 sound/pci/cs46xx/cs46xx_lib.c                      |  2 +-
 sound/pci/cs46xx/dsp_spos_scb_lib.c                |  2 +-
 sound/pci/hda/hda_codec.c                          |  2 +-
 sound/pci/hda/hda_generic.c                        |  2 +-
 sound/pci/hda/patch_sigmatel.c                     |  2 +-
 sound/pci/ice1712/prodigy192.c                     |  2 +-
 sound/pci/oxygen/xonar_dg.c                        |  2 +-
 sound/soc/tegra/tegra30_ahub.c                     |  4 +-
 sound/soc/tegra/tegra30_i2s.c                      |  4 +-
 sound/usb/quirks-table.h                           |  4 +-
 .../powerpc/pmu/ebb/back_to_back_ebbs_test.c       |  2 -
 .../selftests/powerpc/pmu/ebb/cycles_test.c        |  2 -
 .../powerpc/pmu/ebb/cycles_with_freeze_test.c      |  2 -
 .../powerpc/pmu/ebb/cycles_with_mmcr2_test.c       |  2 -
 tools/testing/selftests/powerpc/pmu/ebb/ebb.c      |  2 -
 .../powerpc/pmu/ebb/ebb_on_willing_child_test.c    |  2 -
 .../powerpc/pmu/ebb/lost_exception_test.c          |  1 -
 .../selftests/powerpc/pmu/ebb/multi_counter_test.c |  7 --
 .../powerpc/pmu/ebb/multi_ebb_procs_test.c         |  2 -
 .../selftests/powerpc/pmu/ebb/pmae_handling_test.c |  2 -
 .../powerpc/pmu/ebb/pmc56_overflow_test.c          |  2 -
 76 files changed, 445 insertions(+), 203 deletions(-)