This is the start of the stable review cycle for the 4.4.249 release. There are 132 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Wed, 30 Dec 2020 12:48:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.249-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gre...@linuxfoundation.org> Linux 4.4.249-rc1 Jubin Zhong <zhongju...@huawei.com> PCI: Fix pci_slot_release() NULL pointer dereference SeongJae Park <sjp...@amazon.de> xenbus/xenbus_backend: Disallow pending watch messages SeongJae Park <sjp...@amazon.de> xen/xenbus: Count pending messages for each watch SeongJae Park <sjp...@amazon.de> xen/xenbus/xen_bus_type: Support will_handle watch callback SeongJae Park <sjp...@amazon.de> xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() SeongJae Park <sjp...@amazon.de> xen/xenbus: Allow watches discard events before queueing Jonathan Cameron <jonathan.came...@huawei.com> iio:pressure:mpl3115: Force alignment of buffer Qinglang Miao <miaoqingl...@huawei.com> iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume Sven Eckelmann <s...@narfation.org> mtd: parser: cmdline: Fix parsing of part-names with colons Lukas Wunner <lu...@wunner.de> spi: rb4xx: Don't leak SPI master in probe error path Dave Kleikamp <dave.kleik...@oracle.com> jfs: Fix array index bounds check in dbAdjTree Zhe Li <lizh...@huawei.com> jffs2: Fix GC exit abnormally Luis Henriques <lhenriq...@suse.de> ceph: fix race in concurrent __ceph_remove_cap invocations Chunguang Xu <broo...@tencent.com> ext4: fix a memory leak of ext4_free_data Pavel Machek <pa...@denx.de> btrfs: fix return value mixup in btrfs_get_extent Filipe Manana <fdman...@suse.com> Btrfs: fix selftests failure due to uninitialized i_mode in test inodes Qu Wenruo <w...@suse.com> btrfs: scrub: Don't use inode page cache in scrub_handle_errored_block() Qu Wenruo <w...@suse.com> btrfs: quota: Set rescan progress to (u64)-1 if we hit last leaf Johan Hovold <jo...@kernel.org> USB: serial: keyspan_pda: fix write unthrottling Johan Hovold <jo...@kernel.org> USB: serial: keyspan_pda: fix tx-unthrottle use-after-free Johan Hovold <jo...@kernel.org> USB: serial: keyspan_pda: fix write-wakeup use-after-free Johan Hovold <jo...@kernel.org> USB: serial: keyspan_pda: fix stalled writes Johan Hovold <jo...@kernel.org> USB: serial: keyspan_pda: fix write deadlock Johan Hovold <jo...@kernel.org> USB: serial: keyspan_pda: fix dropped unthrottle interrupts Johan Hovold <jo...@kernel.org> USB: serial: mos7720: fix parallel-port state restore Athira Rajeev <atraj...@linux.vnet.ibm.com> powerpc/perf: Exclude kernel samples while counting events in user space. Ian Abbott <abbo...@mev.co.uk> staging: comedi: mf6x4: Fix AI end-of-conversion detection Stefan Haberland <s...@linux.ibm.com> s390/dasd: fix list corruption of lcu list Stefan Haberland <s...@linux.ibm.com> s390/dasd: fix list corruption of pavgroup group list Takashi Iwai <ti...@suse.de> ALSA: pcm: oss: Fix a few more UBSAN fixes Hui Wang <hui.w...@canonical.com> ACPI: PNP: compare the string length in the matching_id() Daniel Scally <djrsca...@gmail.com> Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" Arnd Bergmann <a...@arndb.de> Input: cyapa_gen6 - fix out-of-bounds stack access Lukas Wunner <lu...@wunner.de> media: netup_unidvb: Don't leak SPI master in probe error path Sean Young <s...@mess.org> media: sunxi-cir: ensure IR is handled when it is continuous Alan Stern <st...@rowland.harvard.edu> media: gspca: Fix memory leak in probe Simon Beginn <li...@simonmicro.de> Input: goodix - add upside-down quirk for Teclast X98 Pro tablet Dmitry Torokhov <dmitry.torok...@gmail.com> Input: cros_ec_keyb - send 'scancodes' in addition to key events Sara Sharon <sara.sha...@intel.com> cfg80211: initialize rekey_data Christophe JAILLET <christophe.jail...@wanadoo.fr> clk: s2mps11: Fix a resource leak in error handling paths in the probe function Dan Carpenter <dan.carpen...@oracle.com> qlcnic: Fix error code in probe Zheng Zengkai <zhengzeng...@huawei.com> perf record: Fix memory leak when using '--user-regs=?' to list registers Zhang Qilong <zhangqilo...@huawei.com> clk: ti: Fix memleak in ti_fapll_synth_setup Vincent Stehlé <vincent.ste...@laposte.net> net: korina: fix return value Christophe JAILLET <christophe.jail...@wanadoo.fr> net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function Christophe JAILLET <christophe.jail...@wanadoo.fr> net: bcmgenet: Fix a resource leak in an error handling path in the probe functin Dwaipayan Ray <dwaipayanr...@gmail.com> checkpatch: fix unescaped left brace Vincent Stehlé <vincent.ste...@laposte.net> powerpc/ps3: use dma_mapping_error() Bongsu Jeon <bongsu.j...@samsung.com> nfc: s3fwrn5: Release the nfc firmware Anton Ivanov <anton.iva...@cambridgegreys.com> um: chan_xterm: Fix fd leak Dan Carpenter <dan.carpen...@oracle.com> ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() Marek Szyprowski <m.szyprow...@samsung.com> extcon: max77693: Fix modalias string Masami Hiramatsu <mhira...@kernel.org> x86/kprobes: Restore BTF if the single-stepping is cancelled Cheng Lin <cheng.lin...@zte.com.cn> nfs_common: need lock during iterate through the list Yang Yingliang <yangyingli...@huawei.com> speakup: fix uninitialized flush_lock Zhang Qilong <zhangqilo...@huawei.com> usb: oxu210hp-hcd: Fix memory leak in oxu_create Zhang Qilong <zhangqilo...@huawei.com> usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe Nathan Lynch <nath...@linux.ibm.com> powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops Zhang Changzhong <zhangchangzh...@huawei.com> scsi: fnic: Fix error return code in fnic_probe() Arnd Bergmann <a...@arndb.de> seq_buf: Avoid type mismatch for seq_buf_init Zhang Qilong <zhangqilo...@huawei.com> scsi: pm80xx: Fix error return in pm8001_pci_probe() Pali Rohár <p...@kernel.org> cpufreq: scpi: Add missing MODULE_ALIAS Pali Rohár <p...@kernel.org> cpufreq: loongson1: Add missing MODULE_ALIAS Pali Rohár <p...@kernel.org> cpufreq: highbank: Add missing MODULE_DEVICE_TABLE Keqian Zhu <zhukeqi...@huawei.com> clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI Qinglang Miao <miaoqingl...@huawei.com> dm ioctl: fix error return code in target_message Chuhong Yuan <hsleste...@gmail.com> ASoC: jz4740-i2s: add missed checks for clk_get() Jing Xiangfeng <jingxiangf...@huawei.com> memstick: r592: Fix error return in r592_probe() Yu Kuai <yuku...@huawei.com> pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() Dan Carpenter <dan.carpen...@oracle.com> media: saa7146: fix array overflow in vidioc_s_audio() NeilBrown <ne...@suse.de> NFS: switch nfsiod to be an UNBOUND workqueue. Calum Mackay <calum.mac...@oracle.com> lockd: don't use interval-based rebinding over TCP Olga Kornievskaia <ko...@netapp.com> NFSv4.2: condition READDIR's mask for security label based on LSM state Qinglang Miao <miaoqingl...@huawei.com> mips: cdmm: fix use-after-free in mips_cdmm_bus_discover Qinglang Miao <miaoqingl...@huawei.com> cw1200: fix missing destroy_workqueue() on error in cw1200_init_common Sebastian Andrzej Siewior <bige...@linutronix.de> orinoco: Move context allocation after processing the skb Cristian Birsan <cristian.bir...@microchip.com> ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host Cristian Birsan <cristian.bir...@microchip.com> ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host Qinglang Miao <miaoqingl...@huawei.com> memstick: fix a double-free bug in memstick_check Zhihao Cheng <chengzhih...@huawei.com> drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe Zhang Qilong <zhangqilo...@huawei.com> soc: ti: Fix reference imbalance in knav_dma_probe Zhang Qilong <zhangqilo...@huawei.com> soc: ti: knav_qmss: fix reference leak in knav_queue_probe Christophe Leroy <christophe.le...@csgroup.eu> powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 Dmitry Torokhov <dmitry.torok...@gmail.com> Input: ads7846 - fix unaligned access on 7845 Oleksij Rempel <o.rem...@pengutronix.de> Input: ads7846 - fix integer overflow on Rt calculation Yang Yingliang <yangyingli...@huawei.com> drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() Qinglang Miao <miaoqingl...@huawei.com> media: solo6x10: fix missing snd_card_free in error handling case Necip Fazil Yildiran <fazilyildi...@gmail.com> MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA Arnd Bergmann <a...@arndb.de> RDMa/mthca: Work around -Wenum-conversion warning Vincent Bernat <vinc...@bernat.ch> net: evaluate net.ipv4.conf.all.proxy_arp_pvlan Vincent Bernat <vinc...@bernat.ch> net: evaluate net.ipvX.conf.all.ignore_routes_with_linkdown Zhang Qilong <zhangqilo...@huawei.com> spi: tegra114: fix reference leak in tegra spi ops Zhang Qilong <zhangqilo...@huawei.com> spi: tegra20-sflash: fix reference leak in tegra_sflash_resume Zhang Qilong <zhangqilo...@huawei.com> spi: tegra20-slink: fix reference leak in slink ops of tegra20 Zhang Qilong <zhangqilo...@huawei.com> spi: spi-ti-qspi: fix reference leak in ti_qspi_setup Anmol Karn <anmol.karan...@gmail.com> Bluetooth: Fix null pointer dereference in hci_event_packet() Cezary Rojewski <cezary.rojew...@intel.com> ASoC: pcm: DRAIN support reactivation Zhang Qilong <zhangqilo...@huawei.com> spi: img-spfi: fix reference leak in img_spfi_resume Christophe Leroy <christophe.le...@csgroup.eu> crypto: talitos - Fix return type of current_desc_hdr() Ard Biesheuvel <a...@kernel.org> ARM: p2v: fix handling of LPAE translation in BE mode Tom Rix <t...@redhat.com> drm/gma500: fix double free of gma_connector Peilin Ye <yepeilin...@gmail.com> Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() Antti Palosaari <cr...@iki.fi> media: msi2500: assign SPI bus number dynamically Fabio Estevam <feste...@gmail.com> usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul Will McVicker <willmcvic...@google.com> USB: gadget: f_rndis: fix bitrate for SuperSpeed and above Johan Hovold <jo...@kernel.org> USB: serial: option: add interface-number sanity check to flag handling Nicolin Chen <nicoleots...@gmail.com> soc/tegra: fuse: Fix index bug in get_process_id Thomas Gleixner <t...@linutronix.de> dm table: Remove BUG_ON(in_interrupt()) Leon Romanovsky <leo...@nvidia.com> RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait Zhang Qilong <zhangqilo...@huawei.com> can: softing: softing_netdev_open(): fix error handling Randy Dunlap <rdun...@infradead.org> scsi: bnx2i: Requires MMU Brant Merryman <brant.merry...@silabs.com> USB: serial: cp210x: enable usb generic throttle/unthrottle Alexander Sverdlin <alexander.sverd...@gmail.com> serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access Takashi Iwai <ti...@suse.de> ALSA: pcm: oss: Fix potential out-of-bounds shift Thomas Gleixner <t...@linutronix.de> USB: sisusbvga: Make console support depend on BROKEN Li Jun <jun...@nxp.com> xhci: Give USB2 ports time to enter U3 in bus suspend Takashi Iwai <ti...@suse.de> ALSA: usb-audio: Fix control 'access overflow' errors from chmap Takashi Iwai <ti...@suse.de> ALSA: usb-audio: Fix potential out-of-bounds shift Oliver Neukum <oneu...@suse.com> USB: add RESET_RESUME quirk for Snapscan 1212 Bui Quang Minh <minhquangbu...@gmail.com> USB: dummy-hcd: Fix uninitialized array use in init() Zhang Changzhong <zhangchangzh...@huawei.com> net: bridge: vlan: fix error return code in __vlan_add() Fugang Duan <fugang.d...@nxp.com> net: stmmac: delete the eee_ctrl_timer after napi disabled Neal Cardwell <ncardw...@google.com> tcp: fix cwnd-limited bug for TSO deferral where we send nothing Moshe Shemesh <mo...@mellanox.com> net/mlx4_en: Avoid scheduling restart task if it is already running Lukas Wunner <lu...@wunner.de> spi: Prevent adding devices below an unregistering controller Coiby Xu <coiby...@gmail.com> pinctrl: amd: remove debounce filter setting in IRQ type setting Chris Chiu <c...@endlessos.org> Input: i8042 - add Acer laptops to the i8042 reset list Dmitry Torokhov <dmitry.torok...@gmail.com> Input: cm109 - do not stomp on control URB Timo Witte <timo.wi...@gmail.com> platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE Vineet Gupta <vgu...@synopsys.com> ARC: stack unwinding: don't assume non-current task is sleeping Nathan Chancellor <natechancel...@gmail.com> spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe Lukas Wunner <lu...@wunner.de> spi: bcm2835aux: Fix use-after-free on unbind ------------- Diffstat: Documentation/networking/ip-sysctl.txt | 3 ++ Makefile | 4 +- arch/arc/kernel/stacktrace.c | 23 ++++++--- arch/arm/boot/dts/at91-sama5d3_xplained.dts | 7 +++ arch/arm/boot/dts/at91-sama5d4_xplained.dts | 7 +++ arch/arm/kernel/head.S | 6 +-- arch/mips/bcm47xx/Kconfig | 1 + arch/powerpc/include/asm/cputable.h | 5 -- arch/powerpc/perf/core-book3s.c | 10 ++++ arch/powerpc/platforms/pseries/suspend.c | 1 - arch/um/drivers/xterm.c | 5 ++ arch/x86/kernel/kprobes/core.c | 5 ++ drivers/acpi/acpi_pnp.c | 3 ++ drivers/acpi/resource.c | 2 +- drivers/block/xen-blkback/xenbus.c | 3 +- drivers/bus/mips_cdmm.c | 4 +- drivers/clk/clk-s2mps11.c | 1 + drivers/clk/ti/fapll.c | 11 +++- drivers/clocksource/arm_arch_timer.c | 23 ++++++--- drivers/cpufreq/highbank-cpufreq.c | 7 +++ drivers/cpufreq/ls1x-cpufreq.c | 1 + drivers/cpufreq/scpi-cpufreq.c | 1 + drivers/crypto/talitos.c | 6 +-- drivers/extcon/extcon-max77693.c | 2 +- drivers/gpu/drm/gma500/cdv_intel_dp.c | 2 +- drivers/gpu/drm/omapdrm/omap_dmm_tiler.c | 1 + drivers/iio/adc/rockchip_saradc.c | 2 +- drivers/iio/pressure/mpl3115.c | 9 +++- drivers/infiniband/core/cm.c | 2 + drivers/infiniband/hw/mthca/mthca_cq.c | 2 +- drivers/infiniband/hw/mthca/mthca_dev.h | 1 - drivers/input/keyboard/cros_ec_keyb.c | 1 + drivers/input/misc/cm109.c | 7 ++- drivers/input/mouse/cyapa_gen6.c | 2 +- drivers/input/serio/i8042-x86ia64io.h | 42 +++++++++++++++ drivers/input/touchscreen/ads7846.c | 8 +-- drivers/input/touchscreen/goodix.c | 12 +++++ drivers/md/dm-ioctl.c | 1 + drivers/md/dm-table.c | 6 --- drivers/media/pci/netup_unidvb/netup_unidvb_spi.c | 5 +- drivers/media/pci/saa7146/mxb.c | 19 +++---- drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +- drivers/media/rc/sunxi-cir.c | 2 + drivers/media/usb/gspca/gspca.c | 1 + drivers/media/usb/msi2500/msi2500.c | 2 +- drivers/memstick/core/memstick.c | 1 - drivers/memstick/host/r592.c | 12 +++-- drivers/mtd/cmdlinepart.c | 14 ++++- drivers/net/can/softing/softing_main.c | 9 +++- drivers/net/ethernet/allwinner/sun4i-emac.c | 7 ++- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 4 +- drivers/net/ethernet/korina.c | 2 +- drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 17 +++--- drivers/net/ethernet/mellanox/mlx4/mlx4_en.h | 7 ++- drivers/net/ethernet/qlogic/qlcnic/qlcnic_main.c | 1 + drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 13 +++-- drivers/net/wireless/cw1200/main.c | 2 + drivers/net/wireless/orinoco/orinoco_usb.c | 14 ++--- drivers/net/xen-netback/xenbus.c | 4 +- drivers/nfc/s3fwrn5/firmware.c | 4 +- drivers/pci/slot.c | 6 +-- drivers/pinctrl/pinctrl-amd.c | 7 --- drivers/pinctrl/pinctrl-falcon.c | 14 +++-- drivers/platform/x86/acer-wmi.c | 1 + drivers/ps3/ps3stor_lib.c | 2 +- drivers/s390/block/dasd_alias.c | 3 +- drivers/scsi/bnx2i/Kconfig | 1 + drivers/scsi/fnic/fnic_main.c | 1 + drivers/scsi/pm8001/pm8001_init.c | 3 +- drivers/soc/tegra/fuse/speedo-tegra210.c | 2 +- drivers/soc/ti/knav_dma.c | 13 ++++- drivers/soc/ti/knav_qmss_queue.c | 4 +- drivers/spi/Kconfig | 3 ++ drivers/spi/spi-bcm2835aux.c | 17 +++--- drivers/spi/spi-img-spfi.c | 4 +- drivers/spi/spi-rb4xx.c | 2 +- drivers/spi/spi-tegra114.c | 2 + drivers/spi/spi-tegra20-sflash.c | 1 + drivers/spi/spi-tegra20-slink.c | 2 + drivers/spi/spi-ti-qspi.c | 1 + drivers/spi/spi.c | 21 +++++++- drivers/staging/comedi/drivers/mf6x4.c | 3 +- drivers/staging/speakup/speakup_dectlk.c | 2 +- drivers/tty/serial/8250/8250_omap.c | 5 -- drivers/usb/chipidea/ci_hdrc_imx.c | 3 +- drivers/usb/core/quirks.c | 3 ++ drivers/usb/gadget/function/f_rndis.c | 4 +- drivers/usb/gadget/udc/dummy_hcd.c | 2 +- drivers/usb/host/ehci-omap.c | 1 + drivers/usb/host/oxu210hp-hcd.c | 4 +- drivers/usb/host/xhci-hub.c | 4 ++ drivers/usb/misc/sisusbvga/Kconfig | 2 +- drivers/usb/serial/cp210x.c | 2 + drivers/usb/serial/keyspan_pda.c | 63 ++++++++++++----------- drivers/usb/serial/mos7720.c | 2 + drivers/usb/serial/option.c | 23 ++++++++- drivers/xen/xen-pciback/xenbus.c | 2 +- drivers/xen/xenbus/xenbus_client.c | 8 ++- drivers/xen/xenbus/xenbus_probe.c | 1 + drivers/xen/xenbus/xenbus_probe.h | 2 + drivers/xen/xenbus/xenbus_probe_backend.c | 7 +++ drivers/xen/xenbus/xenbus_xs.c | 38 +++++++++----- fs/btrfs/inode.c | 2 +- fs/btrfs/qgroup.c | 4 +- fs/btrfs/scrub.c | 17 +++--- fs/btrfs/tests/btrfs-tests.c | 8 ++- fs/ceph/caps.c | 11 +++- fs/ext4/mballoc.c | 1 + fs/jffs2/readinode.c | 16 ++++++ fs/jfs/jfs_dmap.h | 2 +- fs/lockd/host.c | 20 +++---- fs/nfs/inode.c | 2 +- fs/nfs/nfs4proc.c | 10 +++- fs/nfs_common/grace.c | 6 ++- include/linux/inetdevice.h | 4 +- include/linux/seq_buf.h | 2 +- include/linux/trace_seq.h | 4 +- include/xen/xenbus.h | 15 +++++- net/bluetooth/hci_event.c | 17 +++--- net/bridge/br_vlan.c | 4 +- net/ipv4/tcp_output.c | 9 ++-- net/wireless/nl80211.c | 2 +- scripts/checkpatch.pl | 2 +- sound/core/oss/pcm_oss.c | 28 ++++++---- sound/soc/codecs/wm_adsp.c | 5 +- sound/soc/jz4740/jz4740-i2s.c | 4 ++ sound/soc/soc-pcm.c | 2 + sound/usb/format.c | 2 + sound/usb/stream.c | 6 +-- tools/perf/util/parse-regs-options.c | 2 +- 130 files changed, 624 insertions(+), 255 deletions(-)