[PATCH 4.4 00/85] 4.4.238-rc1 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 4.4.238 release.
There are 85 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu, 01 Oct 2020 10:59:03 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.238-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 4.4.238-rc1

Jiri Slaby <jslaby@xxxxxxx>
    ata: sata_mv, avoid trigerrable BUG_ON

Jiri Slaby <jslaby@xxxxxxx>
    ata: make qc_prep return ata_completion_errors

Jiri Slaby <jslaby@xxxxxxx>
    ata: define AC_ERR_OK

Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
    lib/string.c: implement stpcpy

Masami Hiramatsu <mhiramat@xxxxxxxxxx>
    kprobes: Fix to check probe enabled before disarm_kprobe_ftrace()

Jiri Slaby <jslaby@xxxxxxx>
    tty: vt, consw->con_scrolldelta cleanup

Wei Li <liwei391@xxxxxxxxxx>
    MIPS: Add the missing 'CPU_1074K' into __get_cpu_type()

Tom Rix <trix@xxxxxxxxxx>
    ALSA: asihpi: fix iounmap in error handler

Linus Lüssing <linus.luessing@xxxxxxxxx>
    batman-adv: mcast/TT: fix wrongly dropped or rerouted packets

Jing Xiangfeng <jingxiangfeng@xxxxxxxxxx>
    atm: eni: fix the missed pci_disable_device() for eni_init_one()

Linus Lüssing <ll@xxxxxxxxxxxxxxxxxx>
    batman-adv: bla: fix type misuse for backbone_gw hash indexing

Maximilian Luz <luzmaximilian@xxxxxxxxx>
    mwifiex: Increase AES key storage size to 256 bits

Ilya Leoshkevich <iii@xxxxxxxxxxxxx>
    s390/init: add missing __init annotations

Zeng Tao <prime.zeng@xxxxxxxxxxxxx>
    vfio/pci: fix racy on error and request eventfd ctx

Alex Williamson <alex.williamson@xxxxxxxxxx>
    vfio/pci: Clear error and request eventfd ctx after releasing

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
    x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline

Boris Brezillon <boris.brezillon@xxxxxxxxxxxxx>
    mtd: parser: cmdline: Support MTD names containing one or more colons

Jeff Layton <jlayton@xxxxxxxxxx>
    ceph: fix potential race in ceph_check_caps

Dinghao Liu <dinghao.liu@xxxxxxxxxx>
    mtd: rawnand: omap_elm: Fix runtime PM imbalance on error

Adrian Hunter <adrian.hunter@xxxxxxxxx>
    perf kcore_copy: Fix module map when there are no modules loaded

Qian Cai <cai@xxxxxx>
    vfio/pci: fix memory leaks of eventfd ctx

Shreyas Joshi <shreyas.joshi@xxxxxxxxx>
    printk: handle blank console arguments passed in.

Alexander Duyck <alexander.h.duyck@xxxxxxxxxxxxxxx>
    e1000: Do not perform reset in reset_task if we are already down

Colin Ian King <colin.king@xxxxxxxxxxxxx>
    USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int

Miklos Szeredi <mszeredi@xxxxxxxxxx>
    fuse: don't check refcount after stealing page

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: hda: Fix potential race in unsol event handler

Jonathan Bakker <xc-racer2@xxxxxxx>
    tty: serial: samsung: Correct clock selection logic

Tang Bin <tangbin@xxxxxxxxxxxxxxxxxxxx>
    USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe()

Sonny Sasaka <sonnysasaka@xxxxxxxxxxxx>
    Bluetooth: Handle Inquiry Cancel error after Inquiry Complete

Jonathan Bakker <xc-racer2@xxxxxxx>
    phy: samsung: s5pv210-usb2: Add delay after reset

Cong Wang <xiyou.wangcong@xxxxxxxxx>
    atm: fix a memory leak of vcc->user_back

Krzysztof Kozlowski <krzk@xxxxxxxxxx>
    dt-bindings: sound: wm8994: Correct required supplies based on actual implementaion

Madhuparna Bhowmik <madhuparnabhowmik10@xxxxxxxxx>
    drivers: char: tlclk.c: Avoid data race between init and interrupt handler

Douglas Anderson <dianders@xxxxxxxxxxxx>
    bdev: Reduce time holding bd_mutex in sync in blkdev_close()

Steve Rutherford <srutherford@xxxxxxxxxx>
    KVM: Remove CREATE_IRQCHIP/SET_PIT2 race

Jaewon Kim <jaewon31.kim@xxxxxxxxxxx>
    mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area

Xianting Tian <xianting_tian@xxxxxxx>
    mm/filemap.c: clear page error before actual read

Andreas Steinmetz <ast@xxxxxxxx>
    ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor

Liu Song <liu.song11@xxxxxxxxxx>
    ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
    SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()'

Peter Ujfalusi <peter.ujfalusi@xxxxxx>
    serial: 8250_omap: Fix sleeping function called from invalid context during probe

Nathan Chancellor <natechancellor@xxxxxxxxx>
    tracing: Use address-of operator on section symbols

Stefan Berger <stefanb@xxxxxxxxxxxxx>
    tpm: ibmvtpm: Wait for buffer to be set before proceeding

Colin Ian King <colin.king@xxxxxxxxxxxxx>
    media: tda10071: fix unsigned sign extension overflow

Howard Chung <howardchung@xxxxxxxxxx>
    Bluetooth: L2CAP: handle l2cap config request during open state

John Clements <john.clements@xxxxxxx>
    drm/amdgpu: increase atombios cmd timeout

Alain Michaud <alainm@xxxxxxxxxxxx>
    Bluetooth: guard against controllers sending zero'd events

Takashi Iwai <tiwai@xxxxxxx>
    media: go7007: Fix URB type for interrupt handling

Dmitry Osipenko <digetx@xxxxxxxxx>
    dmaengine: tegra-apb: Prevent race conditions on channel's freeing

Wen Yang <wen.yang99@xxxxxxxxxx>
    drm/omap: fix possible object reference leak

James Smart <jsmart2021@xxxxxxxxx>
    scsi: lpfc: Fix RQ buffer leakage when no IOCBs available

Vasily Averin <vvs@xxxxxxxxxxxxx>
    selinux: sel_avc_get_stat_idx should increase position index

Steve Grubb <sgrubb@xxxxxxxxxx>
    audit: CONFIG_CHANGE don't log internal bookkeeping as an event

Qian Cai <cai@xxxxxx>
    skbuff: fix a data race in skb_queue_len()

Hillf Danton <hdanton@xxxxxxxx>
    Bluetooth: prefetch channel before killing sock

Steven Price <steven.price@xxxxxxx>
    mm: pagewalk: fix termination condition in walk_pte_range()

Manish Mandlik <mmandlik@xxxxxxxxxx>
    Bluetooth: Fix refcount use-after-free issue

Mert Dirik <mertdirik@xxxxxxxxx>
    ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter

Josef Bacik <jbacik@xxxxxx>
    tracing: Set kernel_stack's caller size properly

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
    ACPI: EC: Reference count query handlers under lock

Marco Elver <elver@xxxxxxxxxx>
    seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier

Vasily Averin <vvs@xxxxxxxxxxxxx>
    rt_cpu_seq_next should increase position index

Vasily Averin <vvs@xxxxxxxxxxxxx>
    neigh_stat_seq_next() should increase position index

Joe Perches <joe@xxxxxxxxxxx>
    kernel/sys.c: avoid copying possible padding bytes in copy_to_user

Brian Foster <bfoster@xxxxxxxxxx>
    xfs: fix attr leaf header freemap.size underflow

Guoju Fang <fangguoju@xxxxxxxxx>
    bcache: fix a lost wake-up problem caused by mca_cannibalize_lock

Divya Indi <divya.indi@xxxxxxxxxx>
    tracing: Adding NULL checks for trace_array descriptor pointer

Lee Jones <lee.jones@xxxxxxxxxx>
    mfd: mfd-core: Protect against NULL call-back function pointer

Hou Tao <houtao1@xxxxxxxxxx>
    mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup()

Dmitry Osipenko <digetx@xxxxxxxxx>
    PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out

Russell King <rmk+kernel@xxxxxxxxxxxxxxx>
    ASoC: kirkwood: fix IRQ error handling

Kangjie Lu <kjlu@xxxxxxx>
    gma/gma500: fix a memory disclosure bug due to uninitialized bytes

Fuqian Huang <huangfq.daxian@xxxxxxxxx>
    m68k: q40: Fix info-leak in rtc_ioctl

Balsundar P <balsundar.p@xxxxxxxxxxxxx>
    scsi: aacraid: fix illegal IO beyond last LBA

Lukas Wunner <lukas@xxxxxxxxx>
    serial: 8250: Avoid error message on reprobe

Wei Wang <weiwan@xxxxxxxxxx>
    ip: fix tos reflection in ack and reset packets

Eric Dumazet <edumazet@xxxxxxxxxx>
    net: add __must_check to skb_put_padto()

Xin Long <lucien.xin@xxxxxxxxx>
    tipc: use skb_unshare() instead in tipc_buf_append()

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    hdlc_ppp: add range checks in ppp_cp_parse_cr()

Ben Hutchings <ben@xxxxxxxxxxxxxxx>
    mtd: Fix comparison in map_word_andequal()

Shamir Rabinovitch <shamir.rabinovitch@xxxxxxxxxx>
    RDMA/ucma: ucma_context reference leak in error path

Chengming Zhou <zhouchengming@xxxxxxxxxxxxx>
    ftrace: Setup correct FTRACE_FL_REGS flags for module

Muchun Song <songmuchun@xxxxxxxxxxxxx>
    kprobes: fix kill kprobe which has been marked as gone

Rustam Kovhaev <rkovhaev@xxxxxxxxx>
    KVM: fix memory leak in kvm_io_bus_unregister_dev()

Mark Salyzyn <salyzyn@xxxxxxxxxxx>
    af_key: pfkey_dump needs parameter validation


-------------

Diffstat:

 Documentation/DocBook/libata.tmpl                  |  2 +-
 Documentation/devicetree/bindings/sound/wm8994.txt | 18 ++++++++----
 Makefile                                           |  4 +--
 arch/m68k/q40/config.c                             |  1 +
 arch/mips/include/asm/cpu-type.h                   |  1 +
 arch/s390/kernel/setup.c                           |  6 ++--
 arch/x86/include/asm/nospec-branch.h               |  4 +--
 arch/x86/kvm/x86.c                                 | 10 +++++--
 drivers/acpi/ec.c                                  | 16 +++-------
 drivers/ata/acard-ahci.c                           |  6 ++--
 drivers/ata/libahci.c                              |  6 ++--
 drivers/ata/libata-core.c                          |  9 ++++--
 drivers/ata/libata-sff.c                           | 12 +++++---
 drivers/ata/pata_macio.c                           |  6 ++--
 drivers/ata/pata_pxa.c                             |  8 +++--
 drivers/ata/pdc_adma.c                             |  7 +++--
 drivers/ata/sata_fsl.c                             |  4 ++-
 drivers/ata/sata_inic162x.c                        |  4 ++-
 drivers/ata/sata_mv.c                              | 34 ++++++++++++----------
 drivers/ata/sata_nv.c                              | 18 +++++++-----
 drivers/ata/sata_promise.c                         |  6 ++--
 drivers/ata/sata_qstor.c                           |  8 +++--
 drivers/ata/sata_rcar.c                            |  6 ++--
 drivers/ata/sata_sil.c                             |  8 +++--
 drivers/ata/sata_sil24.c                           |  6 ++--
 drivers/ata/sata_sx4.c                             |  6 ++--
 drivers/atm/eni.c                                  |  2 +-
 drivers/char/tlclk.c                               | 17 ++++++-----
 drivers/char/tpm/tpm_ibmvtpm.c                     |  9 ++++++
 drivers/char/tpm/tpm_ibmvtpm.h                     |  1 +
 drivers/devfreq/tegra-devfreq.c                    |  4 ++-
 drivers/dma/tegra20-apb-dma.c                      |  3 +-
 drivers/gpu/drm/amd/amdgpu/atom.c                  |  4 +--
 drivers/gpu/drm/gma500/cdv_intel_display.c         |  2 ++
 drivers/infiniband/core/ucma.c                     |  6 ++--
 drivers/md/bcache/bcache.h                         |  1 +
 drivers/md/bcache/btree.c                          | 12 +++++---
 drivers/md/bcache/super.c                          |  1 +
 drivers/media/dvb-frontends/tda10071.c             |  9 +++---
 drivers/media/usb/go7007/go7007-usb.c              |  4 ++-
 drivers/mfd/mfd-core.c                             | 10 +++++++
 drivers/mtd/chips/cfi_cmdset_0002.c                |  1 -
 drivers/mtd/cmdlinepart.c                          | 23 +++++++++++++--
 drivers/mtd/nand/omap_elm.c                        |  1 +
 drivers/net/ethernet/intel/e1000/e1000_main.c      | 18 +++++++++---
 drivers/net/wan/hdlc_ppp.c                         | 16 ++++++----
 drivers/net/wireless/ath/ar5523/ar5523.c           |  2 ++
 drivers/net/wireless/mwifiex/fw.h                  |  2 +-
 drivers/net/wireless/mwifiex/sta_cmdresp.c         |  4 +--
 drivers/phy/phy-s5pv210-usb2.c                     |  4 +++
 drivers/scsi/aacraid/aachba.c                      |  8 ++---
 drivers/scsi/lpfc/lpfc_sli.c                       |  4 +++
 drivers/tty/serial/8250/8250_core.c                | 11 +++++--
 drivers/tty/serial/8250/8250_omap.c                |  2 +-
 drivers/tty/serial/samsung.c                       |  8 ++---
 drivers/tty/vt/vt.c                                |  2 +-
 drivers/usb/host/ehci-mv.c                         |  8 ++---
 drivers/vfio/pci/vfio_pci.c                        | 13 +++++++++
 drivers/video/fbdev/omap2/dss/omapdss-boot-init.c  |  4 ++-
 fs/block_dev.c                                     | 10 +++++++
 fs/ceph/caps.c                                     | 14 ++++++++-
 fs/fuse/dev.c                                      |  1 -
 fs/ubifs/io.c                                      | 16 ++++++++--
 fs/xfs/libxfs/xfs_attr_leaf.c                      |  4 ++-
 include/linux/libata.h                             | 13 +++++----
 include/linux/mtd/map.h                            |  2 +-
 include/linux/seqlock.h                            | 11 +++++--
 include/linux/skbuff.h                             | 16 ++++++++--
 kernel/audit_watch.c                               |  2 --
 kernel/kprobes.c                                   | 14 +++++++--
 kernel/printk/printk.c                             |  3 ++
 kernel/sys.c                                       |  4 ++-
 kernel/trace/ftrace.c                              |  9 ++++--
 kernel/trace/trace.c                               |  5 +++-
 kernel/trace/trace_entries.h                       |  2 +-
 kernel/trace/trace_events.c                        |  2 ++
 lib/string.c                                       | 24 +++++++++++++++
 mm/filemap.c                                       |  8 +++++
 mm/mmap.c                                          |  2 ++
 mm/pagewalk.c                                      |  4 +--
 net/atm/lec.c                                      |  6 ++++
 net/batman-adv/bridge_loop_avoidance.c             |  7 +++--
 net/batman-adv/routing.c                           |  4 +++
 net/bluetooth/hci_event.c                          | 25 ++++++++++++++--
 net/bluetooth/l2cap_core.c                         | 29 ++++++++++--------
 net/bluetooth/l2cap_sock.c                         | 18 ++++++++++--
 net/core/neighbour.c                               |  1 +
 net/ipv4/ip_output.c                               |  3 +-
 net/ipv4/route.c                                   |  1 +
 net/key/af_key.c                                   |  7 +++++
 net/sunrpc/svc_xprt.c                              | 19 ++++++++----
 net/tipc/msg.c                                     |  3 +-
 net/unix/af_unix.c                                 | 11 +++++--
 security/selinux/selinuxfs.c                       |  1 +
 sound/hda/hdac_bus.c                               |  4 +++
 sound/pci/asihpi/hpioctl.c                         |  4 +--
 sound/soc/kirkwood/kirkwood-dma.c                  |  2 +-
 sound/usb/midi.c                                   | 29 ++++++++++++++----
 tools/perf/util/symbol-elf.c                       |  7 +++++
 virt/kvm/kvm_main.c                                | 21 +++++++------
 100 files changed, 581 insertions(+), 219 deletions(-)