[PATCH 4.4 00/47] 4.4.140-stable review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 4.4.140 release.
There are 47 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu Jul 12 18:23:24 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.140-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 4.4.140-rc1

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    staging: comedi: quatech_daqp_cs: fix no-op loop daqp_ao_insn_write()

Jann Horn <jannh@xxxxxxxxxx>
    netfilter: nf_log: don't hold nf_log_mutex during user access

Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx>
    mtd: cfi_cmdset_0002: Change erase functions to check chip good only

Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx>
    mtd: cfi_cmdset_0002: Change erase functions to retry for error

Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx>
    mtd: cfi_cmdset_0002: Change definition naming to retry write operation

Mikulas Patocka <mpatocka@xxxxxxxxxx>
    dm bufio: don't take the lock in dm_bufio_shrink_count

Martin Kaiser <martin@xxxxxxxxx>
    mtd: rawnand: mxc: set spare area size register explicitly

Mikulas Patocka <mpatocka@xxxxxxxxxx>
    dm bufio: drop the lock when doing GFP_NOIO allocation

Douglas Anderson <dianders@xxxxxxxxxxxx>
    dm bufio: avoid sleeping while holding the dm_bufio lock

Vlastimil Babka <vbabka@xxxxxxx>
    mm, page_alloc: do not break __GFP_THISNODE by zonelist reset

Brad Love <brad@xxxxxxxxxxxxxxxx>
    media: cx25840: Use subdev host data for PLL override

Tony Luck <tony.luck@xxxxxxxxx>
    x86/mce: Fix incorrect "Machine check from unknown source" message

Yazen Ghannam <Yazen.Ghannam@xxxxxxx>
    x86/mce: Detect local MCEs properly

Daniel Rosenberg <drosen@xxxxxxxxxx>
    HID: debug: check length before copy_to_user()

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
    HID: hiddev: fix potential Spectre v1

Jason Andryuk <jandryuk@xxxxxxxxx>
    HID: i2c-hid: Fix "incomplete report" noise

Jon Derrick <jonathan.derrick@xxxxxxxxx>
    ext4: check superblock mapped prior to committing

Theodore Ts'o <tytso@xxxxxxx>
    ext4: add more mount time checks of the superblock

Theodore Ts'o <tytso@xxxxxxx>
    ext4: add more inode number paranoia checks

Theodore Ts'o <tytso@xxxxxxx>
    ext4: clear i_data in ext4_inode_info when removing inline data

Theodore Ts'o <tytso@xxxxxxx>
    ext4: include the illegal physical block in the bad map ext4_error msg

Theodore Ts'o <tytso@xxxxxxx>
    ext4: verify the depth of extent tree in ext4_find_extent()

Theodore Ts'o <tytso@xxxxxxx>
    ext4: only look at the bg_flags field if it is valid

Theodore Ts'o <tytso@xxxxxxx>
    ext4: always check block group bounds in ext4_init_block_bitmap()

Theodore Ts'o <tytso@xxxxxxx>
    ext4: make sure bitmaps and the inode table don't overlap with bg descriptors

Theodore Ts'o <tytso@xxxxxxx>
    jbd2: don't mark block as modified if the handle is out of credits

Paulo Alcantara <paulo@xxxxxxxx>
    cifs: Fix infinite loop when using hard mount option

Lars Ellenberg <lars.ellenberg@xxxxxxxxxx>
    drbd: fix access after free

Christian Borntraeger <borntraeger@xxxxxxxxxx>
    s390: Correct register corruption in critical section cleanup

Jann Horn <jannh@xxxxxxxxxx>
    scsi: sg: mitigate read/write abuse

Changbin Du <changbin.du@xxxxxxxxx>
    tracing: Fix missing return symbol in function_graph output

Cannon Matthews <cannonmatthews@xxxxxxxxxx>
    mm: hugetlb: yield when prepping struct pages

Richard Weinberger <richard@xxxxxx>
    ubi: fastmap: Correctly handle interrupted erasures in EBA

Sean Nyekjaer <sean.nyekjaer@xxxxxxxxx>
    ARM: dts: imx6q: Use correct SDMA script for SPI5 core

Taehee Yoo <ap420073@xxxxxxxxx>
    netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain()

Keith Busch <keith.busch@xxxxxxxxx>
    nvme-pci: initialize queue memory before interrupts

Masami Hiramatsu <mhiramat@xxxxxxxxxx>
    kprobes/x86: Do not modify singlestep buffer while resuming

Ben Hutchings <ben.hutchings@xxxxxxxxxxxxxxx>
    ipv4: Fix error return value in fib_convert_metrics()

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
    i2c: rcar: fix resume by always initializing registers before transfer

Vasanthakumar Thiagarajan <vthiagar@xxxxxxxxxxxxxxxx>
    ath10k: fix rfc1042 header retrieval in QCA4019 with eth decap mode

Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
    x86/boot: Fix early command-line parsing when matching at end

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
    n_tty: Access echo_* variables carefully.

Laura Abbott <labbott@xxxxxxxxxx>
    staging: android: ion: Return an ERR_PTR in ion_map_kernel

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
    n_tty: Fix stall at n_tty_receive_char_special().

Karoly Pados <pados@xxxxxxxx>
    USB: serial: cp210x: add Silicon Labs IDs for Windows Update

Johan Hovold <johan@xxxxxxxxxx>
    USB: serial: cp210x: add CESINEL device ids

Houston Yaroschoff <hstn@xxxxxxxxxx>
    usb: cdc_acm: Add quirk for Uniden UBC125 scanner


-------------

Diffstat:

 Makefile                                         |  4 +-
 arch/arm/boot/dts/imx6q.dtsi                     |  2 +-
 arch/s390/kernel/entry.S                         |  4 +-
 arch/x86/kernel/cpu/mcheck/mce.c                 | 51 ++++++++-----
 arch/x86/kernel/kprobes/core.c                   | 42 ++++++-----
 arch/x86/lib/cmdline.c                           | 34 ++++++---
 drivers/block/drbd/drbd_worker.c                 |  2 +-
 drivers/hid/hid-debug.c                          |  8 ++-
 drivers/hid/i2c-hid/i2c-hid.c                    |  2 +-
 drivers/hid/usbhid/hiddev.c                      | 11 +++
 drivers/i2c/busses/i2c-rcar.c                    |  3 +-
 drivers/md/dm-bufio.c                            | 31 ++++----
 drivers/media/i2c/cx25840/cx25840-core.c         | 28 ++++++--
 drivers/mtd/chips/cfi_cmdset_0002.c              | 30 +++++---
 drivers/mtd/nand/mxc_nand.c                      |  5 +-
 drivers/mtd/ubi/eba.c                            | 92 +++++++++++++++++++++++-
 drivers/net/wireless/ath/ath10k/htt_rx.c         |  5 +-
 drivers/nvme/host/pci.c                          |  4 +-
 drivers/scsi/sg.c                                | 42 ++++++++++-
 drivers/staging/android/ion/ion_heap.c           |  2 +-
 drivers/staging/comedi/drivers/quatech_daqp_cs.c |  2 +-
 drivers/tty/n_tty.c                              | 55 ++++++++------
 drivers/usb/class/cdc-acm.c                      |  3 +
 drivers/usb/serial/cp210x.c                      | 14 ++++
 fs/cifs/cifssmb.c                                | 10 ++-
 fs/cifs/smb2pdu.c                                | 18 +++--
 fs/ext4/balloc.c                                 | 21 +++---
 fs/ext4/ext4.h                                   |  5 --
 fs/ext4/ext4_extents.h                           |  1 +
 fs/ext4/extents.c                                |  6 ++
 fs/ext4/ialloc.c                                 | 14 +++-
 fs/ext4/inline.c                                 |  1 +
 fs/ext4/inode.c                                  |  7 +-
 fs/ext4/mballoc.c                                |  6 +-
 fs/ext4/super.c                                  | 86 ++++++++++++++++++----
 fs/jbd2/transaction.c                            |  9 ++-
 kernel/trace/trace_functions_graph.c             |  5 +-
 mm/hugetlb.c                                     |  1 +
 mm/page_alloc.c                                  |  2 -
 net/ipv4/fib_semantics.c                         |  2 +-
 net/netfilter/nf_log.c                           |  9 ++-
 net/netfilter/nf_tables_core.c                   |  3 +-
 42 files changed, 513 insertions(+), 169 deletions(-)