[PATCH 4.4 00/64] 4.4.271-rc2 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 4.4.271 release.
There are 64 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu, 03 Jun 2021 10:30:37 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.271-rc2.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 4.4.271-rc2

Jan Beulich <JBeulich@xxxxxxxx>
    x86/entry/64: Add instruction suffix

Jan Beulich <JBeulich@xxxxxxxx>
    x86/asm: Add instruction suffixes to bitops

H. Peter Anvin <hpa@xxxxxxxxx>
    x86, asm: change the GEN_*_RMWcc() macros to not quote the condition

Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx>
    usb: core: reduce power-on-good delay time of root hub

Lin Ma <linma@xxxxxxxxxx>
    bluetooth: eliminate the potential race condition when removing the HCI controller

Mike Kravetz <mike.kravetz@xxxxxxxxxx>
    hugetlbfs: hugetlb_fault_mutex_hash() cleanup

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
    MIPS: ralink: export rt_sysc_membase for rt2880_wdt.c

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
    MIPS: alchemy: xxs1500: add gpio-au1000.h header file

Taehee Yoo <ap420073@xxxxxxxxx>
    sch_dsmark: fix a NULL deref in qdisc_reset()

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    scsi: libsas: Use _safe() loop in sas_resume_port()

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    staging: emxx_udc: fix loop in _nbu2ss_nuke()

Taehee Yoo <ap420073@xxxxxxxxx>
    mld: fix panic in mld_newpack()

Zhen Lei <thunder.leizhen@xxxxxxxxxx>
    net: bnx2: Fix error return code in bnx2_init_board()

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
    net: netcp: Fix an error message

xinhui pan <xinhui.pan@xxxxxxx>
    drm/amdgpu: Fix a use-after-free

Josef Bacik <josef@xxxxxxxxxxxxxx>
    btrfs: do not BUG_ON in link_to_fixup_dir

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
    openrisc: Define memory barrier mb

Matt Wang <wwentao@xxxxxxxxxx>
    scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    media: gspca: properly check for errors in po1030_probe()

Alaa Emad <alaaemadhossney.ae@xxxxxxxxx>
    media: dvb: Add check on sp8870_readreg return

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    libertas: register sysfs groups properly

Phillip Potter <phil@xxxxxxxxxxxxxxxx>
    isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io

Tom Seewald <tseewald@xxxxxxxxx>
    char: hpet: add checks after calling ioremap

Du Cheng <ducheng2@xxxxxxxxx>
    net: caif: remove BUG_ON(dev == NULL) in caif_xmit

Anirudh Rayabharam <mail@xxxxxxxxxxxxx>
    net: fujitsu: fix potential null-ptr-deref

Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
    platform/x86: hp_accel: Avoid invoking _INI to speed up resume

Jean Delvare <jdelvare@xxxxxxx>
    i2c: i801: Don't generate an interrupt on bus reset

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx>
    i2c: s3c2410: fix possible NULL pointer deref on read message after write

Xin Long <lucien.xin@xxxxxxxxx>
    tipc: skb_linearize the head skb when reassembling msgs

Hoang Le <hoang.h.le@xxxxxxxxxxxxxx>
    Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv"

Vladyslav Tarasiuk <vladyslavt@xxxxxxxxxx>
    net/mlx4: Fix EEPROM dump support

Zhang Xiaoxu <zhangxiaoxu5@xxxxxxxxxx>
    NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
    NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    NFS: fix an incorrect limit in filelayout_decode_layout()

Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxxxxx>
    Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails

Lukas Wunner <lukas@xxxxxxxxx>
    spi: spi-sh: Fix use-after-free on unbind

William A. Kennington III <wak@xxxxxxxxxx>
    spi: Fix use-after-free with devm_spi_alloc_*

Pavel Skripkin <paskripkin@xxxxxxxxx>
    net: usb: fix memory leak in smsc75xx_bind

Zolton Jheng <s6668c2t@xxxxxxxxx>
    USB: serial: pl2303: add device id for ADLINK ND-6530 GC

Dominik Andreas Schorpp <dominik.a.schorpp@xxxxxx>
    USB: serial: ftdi_sio: add IDs for IDS GmbH Products

Daniele Palmas <dnlplm@xxxxxxxxx>
    USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011

Zheyu Ma <zheyuma97@xxxxxxxxx>
    serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'

Johan Hovold <johan@xxxxxxxxxx>
    USB: trancevibrator: fix control-request direction

YueHaibing <yuehaibing@xxxxxxxxxx>
    iio: adc: ad7793: Add missing error code in ad7793_setup()

Lucas Stankus <lucas.p.stankus@xxxxxxxxx>
    staging: iio: cdc: ad7746: avoid overwrite of num_channels

Alexander Usyskin <alexander.usyskin@xxxxxxxxx>
    mei: request autosuspend after sending rx flow control

Dongliang Mu <mudongliangabcd@xxxxxxxxx>
    misc/uss720: fix memory leak in uss720_probe

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    kgdb: fix gcc-11 warnings harder

Mikulas Patocka <mpatocka@xxxxxxxxxx>
    dm snapshot: properly fix a crash when an origin has no snapshots

Wen Gong <wgong@xxxxxxxxxxxxxx>
    mac80211: extend protection against mixed key and fragment cache attacks

Johannes Berg <johannes.berg@xxxxxxxxx>
    mac80211: do not accept/forward invalid EAPOL frames

Johannes Berg <johannes.berg@xxxxxxxxx>
    mac80211: prevent attacks on TKIP/WEP as well

Johannes Berg <johannes.berg@xxxxxxxxx>
    mac80211: check defrag PN against current frame

Johannes Berg <johannes.berg@xxxxxxxxx>
    mac80211: add fragment cache to sta_info

Johannes Berg <johannes.berg@xxxxxxxxx>
    mac80211: drop A-MSDUs on old ciphers

Mathy Vanhoef <Mathy.Vanhoef@xxxxxxxxxxx>
    cfg80211: mitigate A-MSDU aggregation attacks

Mathy Vanhoef <Mathy.Vanhoef@xxxxxxxxxxx>
    mac80211: properly handle A-MSDUs that start with an RFC 1042 header

Mathy Vanhoef <Mathy.Vanhoef@xxxxxxxxxxx>
    mac80211: prevent mixed key and fragment cache attacks

Mathy Vanhoef <Mathy.Vanhoef@xxxxxxxxxxx>
    mac80211: assure all fragments are encrypted

Johan Hovold <johan@xxxxxxxxxx>
    net: hso: fix control-request directions

Kees Cook <keescook@xxxxxxxxxxxx>
    proc: Check /proc/$pid/attr/ writes against file opener

Dongliang Mu <mudongliangabcd@xxxxxxxxx>
    NFC: nci: fix memory leak in nci_allocate_device

Mark Tomlinson <mark.tomlinson@xxxxxxxxxxxxxxxxxxx>
    netfilter: x_tables: Use correct memory barriers.

Stephen Brennan <stephen.s.brennan@xxxxxxxxxx>
    mm, vmstat: drop zone->lock in /proc/pagetypeinfo


-------------

Diffstat:

 Makefile                                        |   4 +-
 arch/mips/alchemy/board-xxs1500.c               |   1 +
 arch/mips/ralink/of.c                           |   2 +
 arch/openrisc/include/asm/barrier.h             |   9 ++
 arch/x86/entry/entry_64.S                       |   2 +-
 arch/x86/include/asm/atomic.h                   |   8 +-
 arch/x86/include/asm/atomic64_64.h              |   8 +-
 arch/x86/include/asm/bitops.h                   |  29 ++---
 arch/x86/include/asm/local.h                    |   8 +-
 arch/x86/include/asm/percpu.h                   |   2 +-
 arch/x86/include/asm/preempt.h                  |   2 +-
 arch/x86/include/asm/rmwcc.h                    |   4 +-
 drivers/char/hpet.c                             |   4 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c         |   1 +
 drivers/i2c/busses/i2c-i801.c                   |   6 +-
 drivers/i2c/busses/i2c-s3c2410.c                |   4 +-
 drivers/iio/adc/ad7793.c                        |   1 +
 drivers/isdn/hardware/mISDN/mISDNinfineon.c     |  24 ++--
 drivers/md/dm-snap.c                            |   2 +-
 drivers/media/dvb-frontends/sp8870.c            |   4 +-
 drivers/media/usb/gspca/m5602/m5602_po1030.c    |  10 +-
 drivers/misc/kgdbts.c                           |   3 +-
 drivers/misc/lis3lv02d/lis3lv02d.h              |   1 +
 drivers/misc/mei/interrupt.c                    |   3 +
 drivers/net/caif/caif_serial.c                  |   1 -
 drivers/net/ethernet/broadcom/bnx2.c            |   2 +-
 drivers/net/ethernet/fujitsu/fmvj18x_cs.c       |   5 +
 drivers/net/ethernet/mellanox/mlx4/en_ethtool.c |   4 +-
 drivers/net/ethernet/mellanox/mlx4/port.c       | 107 ++++++++++++++++-
 drivers/net/ethernet/ti/netcp_core.c            |   2 +-
 drivers/net/usb/hso.c                           |   4 +-
 drivers/net/usb/smsc75xx.c                      |   8 +-
 drivers/net/wireless/libertas/mesh.c            |  28 +----
 drivers/platform/x86/hp_accel.c                 |  22 +++-
 drivers/scsi/BusLogic.c                         |   6 +-
 drivers/scsi/BusLogic.h                         |   2 +-
 drivers/scsi/libsas/sas_port.c                  |   4 +-
 drivers/spi/spi-sh.c                            |  14 +--
 drivers/spi/spi.c                               |   9 +-
 drivers/staging/emxx_udc/emxx_udc.c             |   4 +-
 drivers/staging/iio/cdc/ad7746.c                |   1 -
 drivers/tty/serial/rp2.c                        |  52 +++------
 drivers/usb/core/hub.h                          |   6 +-
 drivers/usb/misc/trancevibrator.c               |   4 +-
 drivers/usb/misc/uss720.c                       |   1 +
 drivers/usb/serial/ftdi_sio.c                   |   3 +
 drivers/usb/serial/ftdi_sio_ids.h               |   7 ++
 drivers/usb/serial/option.c                     |   4 +
 drivers/usb/serial/pl2303.c                     |   1 +
 drivers/usb/serial/pl2303.h                     |   1 +
 fs/btrfs/tree-log.c                             |   2 -
 fs/hugetlbfs/inode.c                            |   4 +-
 fs/nfs/filelayout/filelayout.c                  |   2 +-
 fs/nfs/nfs4file.c                               |   2 +-
 fs/nfs/pagelist.c                               |  12 +-
 fs/proc/base.c                                  |   4 +
 include/linux/hugetlb.h                         |   2 +-
 include/linux/ieee80211.h                       |  10 ++
 include/linux/netfilter/x_tables.h              |   2 +-
 include/linux/spi/spi.h                         |   3 +
 include/net/nfc/nci_core.h                      |   1 +
 mm/hugetlb.c                                    |   8 +-
 mm/vmstat.c                                     |   3 +
 net/bluetooth/cmtp/core.c                       |   5 +
 net/bluetooth/hci_core.c                        |  13 ++-
 net/ipv6/mcast.c                                |   3 -
 net/mac80211/ieee80211_i.h                      |  36 +++---
 net/mac80211/iface.c                            |   9 +-
 net/mac80211/key.c                              |   7 ++
 net/mac80211/key.h                              |   2 +
 net/mac80211/rx.c                               | 148 +++++++++++++++++++-----
 net/mac80211/sta_info.c                         |   4 +
 net/mac80211/sta_info.h                         |  31 +++++
 net/mac80211/wpa.c                              |  12 +-
 net/netfilter/x_tables.c                        |   3 +
 net/nfc/nci/core.c                              |   1 +
 net/nfc/nci/hci.c                               |   5 +
 net/sched/sch_dsmark.c                          |   3 +-
 net/tipc/msg.c                                  |   9 +-
 net/tipc/socket.c                               |   5 +-
 net/wireless/util.c                             |  15 ++-
 81 files changed, 551 insertions(+), 259 deletions(-)