[PATCH 4.4 000/114] 4.4.300-rc1 review

From: Greg Kroah-Hartman
Date: Mon Jan 24 2022 - 13:49:15 EST


This is the start of the stable review cycle for the 4.4.300 release.
There are 114 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed, 26 Jan 2022 18:39:11 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.300-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.4.300-rc1

Miaoqian Lin <linmq006@xxxxxxxxx>
lib82596: Fix IRQ check in sni_82596_probe

Sergey Shtylyov <s.shtylyov@xxxxxx>
bcmgenet: add WOL IRQ check

Kevin Bracey <kevin@xxxxxxxxx>
net_sched: restore "mpu xxx" handling

Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_xdmac: Fix at_xdmac_lld struct definition

Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_xdmac: Fix lld view setting

Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_xdmac: Print debug message after realeasing the lock

Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_xdmac: Don't start transactions at tx_submit level

Eric Dumazet <edumazet@xxxxxxxxxx>
netns: add schedule point in ops_exit_list()

Robert Hancock <robert.hancock@xxxxxxxxxx>
net: axienet: fix number of TX ring slots for available check

Robert Hancock <robert.hancock@xxxxxxxxxx>
net: axienet: Wait for PhyRstCmplt after core reset

Eric Dumazet <edumazet@xxxxxxxxxx>
af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress

Miaoqian Lin <linmq006@xxxxxxxxx>
parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries

Tobias Waldekranz <tobias@xxxxxxxxxxxxxx>
net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module

Tobias Waldekranz <tobias@xxxxxxxxxxxxxx>
powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses

Theodore Ts'o <tytso@xxxxxxx>
ext4: don't use the orphan list when migrating an inode

Ye Bin <yebin10@xxxxxxxxxx>
ext4: Fix BUG_ON in ext4_bread when write quota data

Luís Henriques <lhenriques@xxxxxxx>
ext4: set csum seed in tmp inode while migrating to extents

Petr Cvachoucek <cvachoucek@xxxxxxxxx>
ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers

Yauhen Kharuzhy <jekhor@xxxxxxxxx>
power: bq25890: Enable continuous conversion for ADC at charging

Christoph Hellwig <hch@xxxxxx>
scsi: sr: Don't use GFP_DMA

Tianjia Zhang <tianjia.zhang@xxxxxxxxxxxxxxxxx>
MIPS: Octeon: Fix build errors using clang

Lakshmi Sowjanya D <lakshmi.sowjanya.d@xxxxxxxxx>
i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters

Takashi Iwai <tiwai@xxxxxxx>
ALSA: seq: Set upper limit of processed events

Christophe Leroy <christophe.leroy@xxxxxxxxxx>
w1: Misuse of get_user()/put_user() reported by sparse

Joakim Tjernlund <joakim.tjernlund@xxxxxxxxxxxx>
i2c: mpc: Correct I2C reset procedure

Michael Ellerman <mpe@xxxxxxxxxxxxxx>
powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING

Heiner Kallweit <hkallweit1@xxxxxxxxx>
i2c: i801: Don't silently correct invalid transfer size

Julia Lawall <Julia.Lawall@xxxxxxx>
powerpc/btext: add missing of_node_put

Julia Lawall <Julia.Lawall@xxxxxxx>
powerpc/cell: add missing of_node_put

Julia Lawall <Julia.Lawall@xxxxxxx>
powerpc/powernv: add missing of_node_put

Julia Lawall <Julia.Lawall@xxxxxxx>
powerpc/6xx: add missing of_node_put

John David Anglin <dave.anglin@xxxxxxxx>
parisc: Avoid calling faulthandler_disabled() twice

Lukas Wunner <lukas@xxxxxxxxx>
serial: core: Keep mctrl register state and cached copy in sync

Lukas Wunner <lukas@xxxxxxxxx>
serial: pl010: Drop CR register reset on set_termios

Joe Thornber <ejt@xxxxxxxxxx>
dm space map common: add bounds check to sm_ll_lookup_bitmap()

Joe Thornber <ejt@xxxxxxxxxx>
dm btree: add a defensive bounds check to insert_at()

Florian Fainelli <f.fainelli@xxxxxxxxx>
net: mdio: Demote probed message to debug print

Josef Bacik <josef@xxxxxxxxxxxxxx>
btrfs: remove BUG_ON(!eie) in find_parent_nodes

Josef Bacik <josef@xxxxxxxxxxxxxx>
btrfs: remove BUG_ON() in find_parent_nodes()

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
ACPICA: Utilities: Avoid deleting the same object twice in a row

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
um: registers: Rename function names to avoid conflicts and build problems

Zekun Shen <bruceshenzk@xxxxxxxxx>
ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream

Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0

Zhou Qingyang <zhou1615@xxxxxxx>
media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach()

Sean Young <sean@xxxxxxxx>
media: igorplugusb: receiver overflow should be reported

Suresh Kumar <surkumar@xxxxxxxxxx>
net: bonding: debug: avoid printing debug logs when bond is not notifying peers

Johannes Berg <johannes.berg@xxxxxxxxx>
iwlwifi: mvm: synchronize with FW after multicast commands

Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx>
media: m920x: don't use stack on USB reads

Zhou Qingyang <zhou1615@xxxxxxx>
media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach()

Xiongwei Song <sxwjean@xxxxxxxxx>
floppy: Add max size check for user space request

Zekun Shen <bruceshenzk@xxxxxxxxx>
mwifiex: Fix skb_over_panic in mwifiex_usb_recv()

Chengfeng Ye <cyeaa@xxxxxxxxxxxxxx>
HSI: core: Fix return freed object in hsi_new_client

Zheyu Ma <zheyuma97@xxxxxxxxx>
media: b2c2: Add missing check in flexcop_pci_isr:

Pavankumar Kondeti <quic_pkondeti@xxxxxxxxxxx>
usb: gadget: f_fs: Use stream_open() for endpoint files

Zekun Shen <bruceshenzk@xxxxxxxxx>
ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply

Alexander Aring <aahringo@xxxxxxxxxx>
fs: dlm: filter user dlm messages for kernel locks

Wei Yongjun <weiyongjun1@xxxxxxxxxx>
Bluetooth: Fix debugfs entry leak in hci_register_dev()

Kamal Heib <kamalheib1@xxxxxxxxx>
RDMA/cxgb4: Set queue pair state when being queried

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
mips: bcm63xx: add support for clk_set_parent()

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
mips: lantiq: add support for clk_set_parent()

Wei Yongjun <weiyongjun1@xxxxxxxxxx>
misc: lattice-ecp3-config: Fix task hung when firmware load failed

Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
ASoC: samsung: idma: Check of ioremap return value

Arnd Bergmann <arnd@xxxxxxxx>
dmaengine: pxa/mmp: stop referencing config->slave_id

Avihai Horon <avihaih@xxxxxxxxxx>
RDMA/core: Let ib_find_gid() continue search even after empty entry

Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
uio: uio_dmem_genirq: Catch the Exception

Kees Cook <keescook@xxxxxxxxxxxx>
char/mwave: Adjust io port register size

Bixuan Cui <cuibixuan@xxxxxxxxxxxxxxxxx>
ALSA: oss: fix compile error when OSS_DEBUG is enabled

Peiwei Hu <jlu.hpw@xxxxxxxxxxx>
powerpc/prom_init: Fix improper check of prom_getprop()

Takashi Iwai <tiwai@xxxxxxx>
ALSA: hda: Add missing rwsem around snd_ctl_remove() calls

Takashi Iwai <tiwai@xxxxxxx>
ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls

Takashi Iwai <tiwai@xxxxxxx>
ALSA: jack: Add missing rwsem around snd_ctl_remove() calls

Jan Kara <jack@xxxxxxx>
ext4: avoid trim error on fs with small groups

Pavel Skripkin <paskripkin@xxxxxxxxx>
net: mcs7830: handle usb read errors properly

Dominik Brodowski <linux@xxxxxxxxxxxxxxxxxxxx>
pcmcia: fix setting of kthread task states

Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
can: xilinx_can: xcan_probe(): check for error irq

Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
can: softing: softing_startstop(): fix set but not used variable warning

Miaoqian Lin <linmq006@xxxxxxxxx>
spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe

Eric Dumazet <edumazet@xxxxxxxxxx>
ppp: ensure minimum packet size in ppp_write()

Zhou Qingyang <zhou1615@xxxxxxx>
pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region()

Zhou Qingyang <zhou1615@xxxxxxx>
pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region()

Wei Yongjun <weiyongjun1@xxxxxxxxxx>
usb: ftdi-elan: fix memory leak on device disconnect

Wang Hai <wanghai38@xxxxxxxxxx>
media: msi001: fix possible null-ptr-deref in msi001_probe()

Zhou Qingyang <zhou1615@xxxxxxx>
media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()

Zhou Qingyang <zhou1615@xxxxxxx>
media: dib8000: Fix a memleak in dib8000_init()

Tasos Sahanidis <tasos@xxxxxxxxxxxx>
floppy: Fix hang in watchdog when disk is ejected

Lino Sanfilippo <LinoSanfilippo@xxxxxx>
serial: amba-pl011: do not request memory region twice

Zhou Qingyang <zhou1615@xxxxxxx>
drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode()

Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxx>
arm64: dts: qcom: msm8916: fix MMC controller aliases

Florian Westphal <fw@xxxxxxxxx>
netfilter: bridge: add support for pppoe filtering

Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
tty: serial: atmel: Call dma_async_issue_pending()

Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
tty: serial: atmel: Check return code of dmaengine_submit()

Chengfeng Ye <cyeaa@xxxxxxxxxxxxxx>
crypto: qce - fix uaf on qce_ahash_register_one

Pavel Skripkin <paskripkin@xxxxxxxxx>
Bluetooth: stop proccessing malicious adv data

Wang Hai <wanghai38@xxxxxxxxxx>
Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails

Yifeng Li <tomli@xxxxxxxx>
PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller

Johan Hovold <johan@xxxxxxxxxx>
can: softing_cs: softingcs_probe(): fix memleak on registration failure

Johan Hovold <johan@xxxxxxxxxx>
media: stk1160: fix control-message timeouts

Johan Hovold <johan@xxxxxxxxxx>
media: pvrusb2: fix control-message timeouts

Michael Kuron <michael.kuron@xxxxxxxxx>
media: dib0700: fix undefined behavior in tuner shutdown

Johan Hovold <johan@xxxxxxxxxx>
media: em28xx: fix control-message timeouts

Johan Hovold <johan@xxxxxxxxxx>
media: mceusb: fix control-message timeouts

Mateusz Jończyk <mat.jonczyk@xxxxx>
rtc: cmos: take rtc_lock while reading from CMOS

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx>
nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()

Jann Horn <jannh@xxxxxxxxxx>
HID: uhid: Fix worker destroying device without any protection

Larry Finger <Larry.Finger@xxxxxxxxxxxx>
rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled

Johan Hovold <johan@xxxxxxxxxx>
media: uvcvideo: fix division by zero at stream start

Nathan Chancellor <nathan@xxxxxxxxxx>
drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()

Brian Silverman <brian.silverman@xxxxxxxxxxxxxxxxx>
can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}

Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data

Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: core: Fix bug in resuming hub's handling of wakeup requests

Johan Hovold <johan@xxxxxxxxxx>
Bluetooth: bfusb: fix division by zero in send path


-------------

Diffstat:

Makefile | 4 +--
arch/arm64/boot/dts/qcom/msm8916.dtsi | 4 +--
arch/mips/bcm63xx/clk.c | 6 ++++
arch/mips/include/asm/octeon/cvmx-bootinfo.h | 4 +--
arch/mips/lantiq/clk.c | 6 ++++
arch/parisc/kernel/traps.c | 2 +-
arch/powerpc/boot/dts/fsl/qoriq-fman3l-0.dtsi | 2 ++
arch/powerpc/kernel/btext.c | 4 ++-
arch/powerpc/kernel/prom_init.c | 2 +-
arch/powerpc/kernel/smp.c | 2 ++
arch/powerpc/platforms/cell/iommu.c | 1 +
arch/powerpc/platforms/embedded6xx/hlwd-pic.c | 1 +
arch/powerpc/platforms/powernv/opal-lpc.c | 1 +
arch/um/include/shared/registers.h | 4 +--
arch/um/os-Linux/registers.c | 4 +--
arch/um/os-Linux/start_up.c | 2 +-
arch/x86/um/syscalls_64.c | 3 +-
drivers/acpi/acpica/exoparg1.c | 3 +-
drivers/acpi/acpica/utdelete.c | 1 +
drivers/block/floppy.c | 6 ++--
drivers/bluetooth/bfusb.c | 3 ++
drivers/char/mwave/3780i.h | 2 +-
drivers/crypto/qce/sha.c | 2 +-
drivers/dma/at_xdmac.c | 32 ++++++++++------------
drivers/dma/mmp_pdma.c | 6 ----
drivers/dma/pxa_dma.c | 7 -----
drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 6 ++++
drivers/gpu/drm/i915/intel_pm.c | 6 ++--
drivers/hid/uhid.c | 29 +++++++++++++++++---
drivers/hsi/hsi.c | 1 +
drivers/i2c/busses/i2c-designware-pcidrv.c | 8 +++---
drivers/i2c/busses/i2c-i801.c | 15 ++++------
drivers/i2c/busses/i2c-mpc.c | 23 ++++++++++------
drivers/infiniband/core/device.c | 3 +-
drivers/infiniband/hw/cxgb4/qp.c | 1 +
drivers/md/persistent-data/dm-btree.c | 8 ++++--
drivers/md/persistent-data/dm-space-map-common.c | 5 ++++
drivers/media/common/saa7146/saa7146_fops.c | 2 +-
drivers/media/dvb-frontends/dib8000.c | 4 ++-
drivers/media/pci/b2c2/flexcop-pci.c | 3 ++
drivers/media/pci/saa7146/hexium_gemini.c | 7 ++++-
drivers/media/pci/saa7146/hexium_orion.c | 8 +++++-
drivers/media/pci/saa7146/mxb.c | 8 +++++-
drivers/media/rc/igorplugusb.c | 4 ++-
drivers/media/rc/mceusb.c | 8 +++---
drivers/media/tuners/msi001.c | 7 +++++
drivers/media/usb/dvb-usb/dib0700_core.c | 2 --
drivers/media/usb/dvb-usb/m920x.c | 12 +++++++-
drivers/media/usb/em28xx/em28xx-core.c | 4 +--
drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 8 +++---
drivers/media/usb/stk1160/stk1160-core.c | 4 +--
drivers/media/usb/uvc/uvc_video.c | 4 +++
drivers/mfd/intel-lpss-acpi.c | 7 ++++-
drivers/misc/lattice-ecp3-config.c | 12 ++++----
drivers/net/bonding/bond_main.c | 6 ++--
drivers/net/can/softing/softing_cs.c | 2 +-
drivers/net/can/softing/softing_fw.c | 11 ++++----
drivers/net/can/usb/gs_usb.c | 5 +++-
drivers/net/can/xilinx_can.c | 7 ++++-
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 10 ++++---
drivers/net/ethernet/freescale/xgmac_mdio.c | 3 +-
drivers/net/ethernet/i825xx/sni_82596.c | 3 +-
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 14 ++++++++--
drivers/net/phy/mdio_bus.c | 2 +-
drivers/net/ppp/ppp_generic.c | 7 ++++-
drivers/net/usb/mcs7830.c | 12 ++++++--
drivers/net/wireless/ath/ar5523/ar5523.c | 4 +++
drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +++++
drivers/net/wireless/iwlwifi/mvm/mac80211.c | 17 ++++++++++++
drivers/net/wireless/mwifiex/usb.c | 3 +-
.../net/wireless/realtek/rtlwifi/rtl8192cu/hw.c | 1 +
drivers/parisc/pdc_stable.c | 4 ++-
drivers/pci/quirks.c | 3 ++
drivers/pcmcia/cs.c | 8 ++----
drivers/pcmcia/rsrc_nonstatic.c | 6 ++++
drivers/power/bq25890_charger.c | 4 +--
drivers/rtc/rtc-cmos.c | 3 ++
drivers/scsi/sr.c | 2 +-
drivers/scsi/sr_vendor.c | 4 +--
drivers/spi/spi-meson-spifc.c | 1 +
drivers/tty/serial/amba-pl010.c | 3 --
drivers/tty/serial/amba-pl011.c | 27 ++----------------
drivers/tty/serial/atmel_serial.c | 14 ++++++++++
drivers/tty/serial/serial_core.c | 3 +-
drivers/uio/uio_dmem_genirq.c | 6 +++-
drivers/usb/core/hcd.c | 9 +++++-
drivers/usb/core/hub.c | 7 +++--
drivers/usb/gadget/function/f_fs.c | 4 +--
drivers/usb/misc/ftdi-elan.c | 1 +
drivers/w1/slaves/w1_ds28e04.c | 26 ++++--------------
fs/btrfs/backref.c | 21 +++++++++++---
fs/dlm/lock.c | 9 ++++++
fs/ext4/ioctl.c | 2 --
fs/ext4/mballoc.c | 8 ++++++
fs/ext4/migrate.c | 23 ++++++++--------
fs/ext4/super.c | 2 +-
fs/ubifs/super.c | 1 -
include/net/sch_generic.h | 5 ++++
net/bluetooth/cmtp/core.c | 4 +--
net/bluetooth/hci_core.c | 1 +
net/bluetooth/hci_event.c | 8 +++++-
net/bridge/br_netfilter_hooks.c | 7 ++---
net/core/net_namespace.c | 4 ++-
net/nfc/llcp_sock.c | 5 ++++
net/sched/sch_generic.c | 1 +
net/unix/garbage.c | 14 ++++++++--
net/unix/scm.c | 6 ++--
sound/core/jack.c | 3 ++
sound/core/oss/pcm_oss.c | 2 +-
sound/core/pcm.c | 6 +++-
sound/core/seq/seq_queue.c | 14 ++++++++--
sound/pci/hda/hda_codec.c | 3 ++
sound/soc/samsung/idma.c | 2 ++
113 files changed, 485 insertions(+), 238 deletions(-)