[PATCH 4.9 00/83] 4.9.191-stable review

From: Greg Kroah-Hartman
Date: Wed Sep 04 2019 - 14:00:04 EST

This is the start of the stable review cycle for the 4.9.191 release.
There are 83 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri 06 Sep 2019 05:50:23 PM UTC.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.


greg k-h

Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.9.191-rc1

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
x86/ptrace: fix up botched merge of spectrev1 fix

Andrew Cooks <andrew.cooks@xxxxxxxxxxxx>
i2c: piix4: Fix port selection for AMD Family 16h Model 30h

Marc Zyngier <maz@xxxxxxxxxx>
KVM: arm/arm64: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI

Heyi Guo <guoheyi@xxxxxxxxxx>
KVM: arm/arm64: vgic: Fix potential deadlock when ap_list is long

Johannes Berg <johannes.berg@xxxxxxxxx>
mac80211: fix possible sta leak

Hodaszi, Robert <Robert.Hodaszi@xxxxxxxx>
Revert "cfg80211: fix processing world regdomain when non modular"

Nadav Amit <namit@xxxxxxxxxx>
VMCI: Release resource if the work is already queued

Ding Xiang <dingxiang@xxxxxxxxxxxxxxxxxxxx>
stm class: Fix a double free of stm_source_device

Ulf Hansson <ulf.hansson@xxxxxxxxxx>
mmc: core: Fix init of SD cards reporting an invalid VDD range

Eugen Hristev <eugen.hristev@xxxxxxxxxxxxx>
mmc: sdhci-of-at91: add quirk for broken HS200

Sebastian Mayr <me@xxxxxx>
uprobes/x86: Fix detection of 32-bit user mode

Ricardo Neri <ricardo.neri-calderon@xxxxxxxxxxxxxxx>
ptrace,x86: Make user_64bit_mode() available to 32-bit builds

Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
USB: storage: ums-realtek: Whitelist auto-delink support

Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
USB: storage: ums-realtek: Update module parameter description for auto_delink_en

Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
usb: host: xhci: rcar: Fix typo in compatible string matching

Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
usb: host: ohci: fix a race condition between shutdown and irq

Peter Chen <peter.chen@xxxxxxx>
usb: chipidea: udc: don't do hardware access if gadget has stopped

Oliver Neukum <oneukum@xxxxxxxx>
USB: cdc-wdm: fix race between write and disconnect due to flag abuse

Henk van der Laan <opensource@xxxxxxxxxxxxxx>
usb-storage: Add new JMS567 revision to unusual_devs

Henry Burns <henryburns@xxxxxxxxxx>
mm/zsmalloc.c: fix race condition in zs_destroy_pool

Bandan Das <bsd@xxxxxxxxxx>
x86/apic: Include the LDR when clearing out APIC registers

Bandan Das <bsd@xxxxxxxxxx>
x86/apic: Do not initialize LDR and DFR for bigsmp

Sean Christopherson <sean.j.christopherson@xxxxxxxxx>
KVM: x86: Don't update RIP or do single-step on faulting emulation

Takashi Iwai <tiwai@xxxxxxx>
ALSA: seq: Fix potential concurrent access to the deleted pool

Takashi Iwai <tiwai@xxxxxxx>
ALSA: line6: Fix memory leak at line6_init_pcm() error path

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: make sure EPOLLOUT wont be missed

Hui Peng <benquike@xxxxxxxxx>
ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit

Hui Peng <benquike@xxxxxxxxx>
ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term

Tim Froidcoeur <tim.froidcoeur@xxxxxxxxxxxx>
tcp: fix tcp_rtx_queue_tail in case of empty retransmit queue

Pedro Sousa <sousa@xxxxxxxxxxxx>
scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value

Stefan Wahren <wahrenst@xxxxxxx>
watchdog: bcm2835_wdt: Fix module autoload

Adrian Vladu <avladu@xxxxxxxxxxxxxxxxxxxxxx>
tools: hv: fix KVP and VSS daemons exit code

Hans Ulli Kroll <ulli.kroll@xxxxxxxxxxxxxx>
usb: host: fotg2: restart hcd after port reset

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
i2c: emev2: avoid race when unregistering slave client

Wenwen Wang <wenwen@xxxxxxxxxx>
xen/blkback: fix memory leaks

Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
usb: gadget: composite: Clear "suspended" on reset/disconnect

Robin Murphy <robin.murphy@xxxxxxx>
iommu/dma: Handle SG length overflow better

Arnd Bergmann <arnd@xxxxxxxx>
dmaengine: ste_dma40: fix unneeded variable warning

Tom Lendacky <thomas.lendacky@xxxxxxx>
x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h

Sasha Levin <sashal@xxxxxxxxxx>
Revert "perf test 6: Fix missing kvm module load for s390"

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT

Henry Burns <henryburns@xxxxxxxxxx>
mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely

Vlastimil Babka <vbabka@xxxxxxx>
mm, page_owner: handle THP splits correctly

Michael Kelley <mikelley@xxxxxxxxxxxxx>
genirq: Properly pair kobject_del() with kobject_add()

Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm table: fix invalid memory accesses with too high sector number

ZhangXiaoxu <zhangxiaoxu5@xxxxxxxxxx>
dm space map metadata: fix missing store of apply_bops() return value

ZhangXiaoxu <zhangxiaoxu5@xxxxxxxxxx>
dm btree: fix order of block initialization in btree_split_beneath

John Hubbard <jhubbard@xxxxxxxxxx>
x86/boot: Fix boot regression caused by bootparam sanitizing

John Hubbard <jhubbard@xxxxxxxxxx>
x86/boot: Save fields explicitly, zero out everything else

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
x86/apic: Handle missing global clockevent gracefully

Sean Christopherson <sean.j.christopherson@xxxxxxxxx>
x86/retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386

Oleg Nesterov <oleg@xxxxxxxxxx>
userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx

Bartosz Golaszewski <bgolaszewski@xxxxxxxxxxxx>
gpiolib: never report open-drain/source lines as 'input' to user-space

Mikulas Patocka <mpatocka@xxxxxxxxxx>
Revert "dm bufio: fix deadlock with loop device"

Jason Gerecke <jason.gerecke@xxxxxxxxx>
HID: wacom: Correct distance scale for 2nd-gen Intuos devices

Aaron Armstrong Skomra <skomra@xxxxxxxxx>
HID: wacom: correct misreported EKR ring values

Naresh Kamboju <naresh.kamboju () linaro ! org>
selftests: kvm: Adding config fragments

Jin Yao <yao.jin@xxxxxxxxxxxxxxx>
perf pmu-events: Fix missing "cpu_clk_unhalted.core" event

Colin Ian King <colin.king@xxxxxxxxxxxxx>
drm/vmwgfx: fix memory leak when too many retries have occurred

Valdis Kletnieks <valdis.kletnieks@xxxxxx>
x86/lib/cpu: Address missing prototypes warning

Jens Axboe <axboe@xxxxxxxxx>
libata: add SG safety checks in SFF pio transfers

Jiangfeng Xiao <xiaojiangfeng@xxxxxxxxxx>
net: hisilicon: Fix dma_map_single failed on arm64

Jiangfeng Xiao <xiaojiangfeng@xxxxxxxxxx>
net: hisilicon: fix hip04-xmit never return TX_BUSY

Jiangfeng Xiao <xiaojiangfeng@xxxxxxxxxx>
net: hisilicon: make hip04_tx_reclaim non-reentrant

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
net: cxgb3_main: Fix a resource leak in a error path in 'init_one()'

Nicolas Saenz Julienne <nsaenzjulienne@xxxxxxx>
HID: input: fix a4tech horizontal wheel custom usage

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim()

Wang Xiayang <xywang.sjtu@xxxxxxxxxxx>
can: peak_usb: force the string buffer NULL-terminated

Wang Xiayang <xywang.sjtu@xxxxxxxxxxx>
can: sja1000: force the string buffer NULL-terminated

Jiri Olsa <jolsa@xxxxxxxxxx>
perf bench numa: Fix cpu0 binding

Juliana Rodrigueiro <juliana.rodrigueiro@xxxxxxxxxxxxx>
isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack

Jia-Ju Bai <baijiaju1990@xxxxxxxxx>
isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain()

Bob Ham <bob.ham@xxxxxxx>
net: usb: qmi_wwan: Add the BroadMobi BM818 card

Peter Ujfalusi <peter.ujfalusi@xxxxxx>
ASoC: ti: davinci-mcasp: Correct slot_width posed constraint

Navid Emamdoost <navid.emamdoost@xxxxxxxxx>
st_nci_hci_connectivity_event_received: null check the allocation

Navid Emamdoost <navid.emamdoost@xxxxxxxxx>
st21nfca_connectivity_event_received: null check the allocation

Ricard Wanderlof <ricard.wanderlof@xxxxxxxx>
ASoC: Fail card instantiation if DAI format setup fails

Rasmus Villemoes <rasmus.villemoes@xxxxxxxxx>
can: dev: call netif_carrier_off() in register_candev()

Thomas Falcon <tlfalcon@xxxxxxxxxxxxx>
bonding: Force slave speed check after link state recovery for 802.3ad

Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxx>
ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks

Wenwen Wang <wenwen@xxxxxxxxxx>
netfilter: ebtables: fix a memory leak bug in compat

Thomas Bogendoerfer <tbogendoerfer@xxxxxxx>
MIPS: kernel: only use i8253 clocksource with periodic clockevent

Ilya Trukhanov <lahvuun@xxxxxxxxx>
HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT



Documentation/kernel-parameters.txt | 7 ++
Makefile | 4 +-
arch/mips/kernel/i8253.c | 3 +-
arch/x86/include/asm/bootparam_utils.h | 60 +++++++++++----
arch/x86/include/asm/msr-index.h | 1 +
arch/x86/include/asm/nospec-branch.h | 2 +-
arch/x86/include/asm/ptrace.h | 6 +-
arch/x86/kernel/apic/apic.c | 72 ++++++++++++++----
arch/x86/kernel/apic/bigsmp_32.c | 24 +-----
arch/x86/kernel/cpu/amd.c | 66 +++++++++++++++++
arch/x86/kernel/ptrace.c | 3 +-
arch/x86/kernel/uprobes.c | 17 +++--
arch/x86/kvm/x86.c | 9 ++-
arch/x86/lib/cpu.c | 1 +
arch/x86/power/cpu.c | 86 ++++++++++++++++++----
drivers/ata/libata-sff.c | 6 ++
drivers/block/xen-blkback/xenbus.c | 6 +-
drivers/dma/ste_dma40.c | 4 +-
drivers/gpio/gpiolib.c | 6 +-
drivers/gpu/drm/vmwgfx/vmwgfx_msg.c | 4 +-
drivers/hid/hid-a4tech.c | 30 +++++++-
drivers/hid/hid-tmff.c | 12 +++
drivers/hid/wacom_wac.c | 4 +-
drivers/hwtracing/stm/core.c | 1 -
drivers/i2c/busses/i2c-emev2.c | 16 +++-
drivers/i2c/busses/i2c-piix4.c | 12 ++-
drivers/iommu/dma-iommu.c | 2 +-
drivers/isdn/hardware/mISDN/hfcsusb.c | 13 +++-
drivers/md/dm-bufio.c | 4 +-
drivers/md/dm-table.c | 5 +-
drivers/md/persistent-data/dm-btree.c | 31 ++++----
drivers/md/persistent-data/dm-space-map-metadata.c | 2 +-
drivers/misc/vmw_vmci/vmci_doorbell.c | 6 +-
drivers/mmc/core/sd.c | 6 ++
drivers/mmc/host/sdhci-of-at91.c | 3 +
drivers/net/bonding/bond_main.c | 9 +++
drivers/net/can/dev.c | 2 +
drivers/net/can/sja1000/peak_pcmcia.c | 2 +-
drivers/net/can/usb/peak_usb/pcan_usb_core.c | 2 +-
drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 5 +-
drivers/net/ethernet/hisilicon/hip04_eth.c | 28 ++++---
drivers/net/usb/qmi_wwan.c | 1 +
drivers/nfc/st-nci/se.c | 2 +
drivers/nfc/st21nfca/se.c | 2 +
drivers/scsi/ufs/unipro.h | 2 +-
drivers/usb/chipidea/udc.c | 32 ++++++--
drivers/usb/class/cdc-wdm.c | 16 +++-
drivers/usb/gadget/composite.c | 1 +
drivers/usb/host/fotg210-hcd.c | 4 +
drivers/usb/host/ohci-hcd.c | 15 +++-
drivers/usb/host/xhci-rcar.c | 2 +-
drivers/usb/storage/realtek_cr.c | 15 ++--
drivers/usb/storage/unusual_devs.h | 2 +-
drivers/watchdog/bcm2835_wdt.c | 1 +
fs/nfs/nfs4_fs.h | 3 +-
fs/nfs/nfs4client.c | 5 +-
fs/nfs/nfs4state.c | 27 +++++--
fs/userfaultfd.c | 25 ++++---
fs/xfs/xfs_iops.c | 1 +
include/net/tcp.h | 4 +
kernel/irq/irqdesc.c | 15 +++-
mm/huge_memory.c | 4 +
mm/zsmalloc.c | 78 ++++++++++++++++++--
net/bridge/netfilter/ebtables.c | 4 +-
net/core/stream.c | 16 ++--
net/mac80211/cfg.c | 9 ++-
net/wireless/reg.c | 2 +-
sound/core/seq/seq_clientmgr.c | 3 +-
sound/core/seq/seq_fifo.c | 17 +++++
sound/core/seq/seq_fifo.h | 2 +
sound/soc/davinci/davinci-mcasp.c | 43 ++++++++---
sound/soc/soc-core.c | 7 +-
sound/soc/soc-dapm.c | 8 +-
sound/usb/line6/pcm.c | 18 ++---
sound/usb/mixer.c | 30 ++++++--
tools/hv/hv_kvp_daemon.c | 2 +
tools/hv/hv_vss_daemon.c | 2 +
tools/perf/bench/numa.c | 6 +-
tools/perf/pmu-events/jevents.c | 1 +
tools/perf/tests/parse-events.c | 27 -------
tools/testing/selftests/kvm/config | 3 +
virt/kvm/arm/vgic/vgic-mmio.c | 18 +++++
virt/kvm/arm/vgic/vgic-v2.c | 5 +-
virt/kvm/arm/vgic/vgic-v3.c | 5 +-
virt/kvm/arm/vgic/vgic.c | 7 ++
85 files changed, 808 insertions(+), 266 deletions(-)