[PATCH 4.9 00/78] 4.9.235-rc1 review

From: Greg Kroah-Hartman
Date: Tue Sep 01 2020 - 13:14:14 EST


This is the start of the stable review cycle for the 4.9.235 release.
There are 78 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu, 03 Sep 2020 15:09:01 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.235-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.9.235-rc1

Hector Martin <marcan@xxxxxxxxx>
ALSA: usb-audio: Update documentation comment for MS2109 quirk

Peilin Ye <yepeilin.cs@xxxxxxxxx>
HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()

Josef Bacik <josef@xxxxxxxxxxxxxx>
btrfs: check the right error variable in btrfs_del_dir_entries_in_log

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
usb: storage: Add unusual_uas entry for Sony PSZ drives

Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
USB: gadget: u_f: Unbreak offset calculation in VLAs

Brooke Basile <brookebasile@xxxxxxxxx>
USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb()

Brooke Basile <brookebasile@xxxxxxxxx>
USB: gadget: u_f: add overflow checks to VLA macros

Kees Cook <keescook@xxxxxxxxxxxx>
overflow.h: Add allocation size calculation helpers

Tang Bin <tangbin@xxxxxxxxxxxxxxxxxxxx>
usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe()

Cyril Roelandt <tipecaml@xxxxxxxxx>
USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge

Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
USB: quirks: Add no-lpm quirk for another Raydium touchscreen

Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx>
usb: uas: Add quirk for PNY Pro Elite

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: yurex: Fix bad gfp argument

Heikki Krogerus <heikki.krogerus@xxxxxxxxxxxxxxx>
device property: Fix the secondary firmware node handling in set_primary_fwnode()

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
PM: sleep: core: Fix the handling of pending runtime resume requests

Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
xhci: Do warm-reset when both CAS and XDEV_RESUME are set

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information.

Jan Kara <jack@xxxxxxx>
writeback: Fix sync livelock due to b_dirty_time processing

Jan Kara <jack@xxxxxxx>
writeback: Avoid skipping inode writeback

Jan Kara <jack@xxxxxxx>
writeback: Protect inode->i_io_list with inode->i_lock

Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx>
serial: 8250: change lock order in serial8250_do_startup()

Lukas Wunner <lukas@xxxxxxxxx>
serial: pl011: Don't leak amba_ports entry on driver register error

Lukas Wunner <lukas@xxxxxxxxx>
serial: pl011: Fix oops on -EPROBE_DEFER

Tamseel Shams <m.shams@xxxxxxxxxxx>
serial: samsung: Removes the IRQ not found warning

George Kennedy <george.kennedy@xxxxxxxxxx>
vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
vt: defer kfree() of vc_screenbuf in vc_do_resize()

Evgeny Novikov <novikov@xxxxxxxxx>
USB: lvtest: return proper error code in probe

George Kennedy <george.kennedy@xxxxxxxxxx>
fbcon: prevent user font height or width change from causing potential out-of-bounds access

Filipe Manana <fdmanana@xxxxxxxx>
btrfs: fix space cache memory leak after transaction abort

Hans de Goede <hdegoede@xxxxxxxxxx>
HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands

Athira Rajeev <atrajeev@xxxxxxxxxxxxxxxxxx>
powerpc/perf: Fix soft lockups due to missed interrupt accounting

Sumera Priyadarsini <sylphrenadin@xxxxxxxxx>
net: gianfar: Add of_node_put() before goto statement

Adrian Hunter <adrian.hunter@xxxxxxxxx>
scsi: ufs: Improve interrupt handling for shared interrupts

Stanley Chu <stanley.chu@xxxxxxxxxxxx>
scsi: ufs: Fix possible infinite loop in ufshcd_hold

Vineeth Vijayan <vneethv@xxxxxxxxxxxxx>
s390/cio: add cond_resched() in the slow_eval_known_fn() loop

Xianting Tian <xianting_tian@xxxxxxx>
fs: prevent BUG_ON in submit_bh_wbc()

zhangyi (F) <yi.zhang@xxxxxxxxxx>
jbd2: abort journal if free a async write error metadata buffer

Lukas Czerner <lczerner@xxxxxxxxxx>
jbd2: make sure jh have b_transaction set in refile/unfile_buffer

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
usb: gadget: f_tcm: Fix some resource leaks in some error paths

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
i2c: rcar: in slave mode, clear NACK earlier

Zhi Chen <zhichen@xxxxxxxxxxxxxx>
Revert "ath10k: fix DMA related firmware crashes on multiple devices"

Andrey Konovalov <andreyknvl@xxxxxxxxxx>
efi: provide empty efi_enter_virtual_mode implementation

Changming Liu <charley.ashbringer@xxxxxxxxx>
USB: sisusbvga: Fix a potential UB casued by left shifting a negative value

Arnd Bergmann <arnd@xxxxxxxx>
powerpc/spufs: add CONFIG_COREDUMP dependency

David Brazdil <dbrazdil@xxxxxxxxxx>
KVM: arm64: Fix symbol dependency in __hyp_call_panic_nvhe

Evgeny Novikov <novikov@xxxxxxxxx>
media: davinci: vpif_capture: fix potential double free

Jason Baron <jbaron@xxxxxxxxxx>
EDAC/ie31200: Fallback if host bridge device is already initialized

Javed Hasan <jhasan@xxxxxxxxxxx>
scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del()

Xiubo Li <xiubli@xxxxxxxxxx>
ceph: fix potential mdsc use-after-free crash

Jing Xiangfeng <jingxiangfeng@xxxxxxxxxx>
scsi: iscsi: Do not put host in iscsi_set_flashnode_param()

Chris Wilson <chris@xxxxxxxxxxxxxxxxxx>
locking/lockdep: Fix overflow in presentation of average lock-time

Aditya Pakki <pakki001@xxxxxxx>
drm/nouveau: Fix reference count leak in nouveau_connector_detect

Aditya Pakki <pakki001@xxxxxxx>
drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open

Hans Verkuil <hverkuil-cisco@xxxxxxxxx>
cec-api: prevent leaking memory through hole in structure

Peng Fan <fanpeng@xxxxxxxxxxx>
mips/vdso: Fix resource leaks in genvdso.c

Reto Schneider <code@xxxxxxxxxxxxxxxxx>
rtlwifi: rtl8192cu: Prevent leaking urb

Qiushi Wu <wu000273@xxxxxxx>
PCI: Fix pci_create_slot() reference count leak

Aditya Pakki <pakki001@xxxxxxx>
omapfb: fix multiple reference count leaks due to pm_runtime_get_sync

Desnes A. Nunes do Rosario <desnesn@xxxxxxxxxxxxx>
selftests/powerpc: Purge extra count_pmc() calls of ebb selftests

Dick Kennedy <dick.kennedy@xxxxxxxxxxxx>
scsi: lpfc: Fix shost refcount mismatch when deleting vport

Navid Emamdoost <navid.emamdoost@xxxxxxxxx>
drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails

Navid Emamdoost <navid.emamdoost@xxxxxxxxx>
drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config

Navid Emamdoost <navid.emamdoost@xxxxxxxxx>
drm/amd/display: fix ref count leak in amdgpu_drm_ioctl

Navid Emamdoost <navid.emamdoost@xxxxxxxxx>
drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms

Aditya Pakki <pakki001@xxxxxxx>
drm/radeon: fix multiple reference count leak

Qiushi Wu <wu000273@xxxxxxx>
drm/amdkfd: Fix reference count leaks.

Robin Murphy <robin.murphy@xxxxxxx>
iommu/iova: Don't BUG on invalid PFNs

Bodo Stroesser <bstroesser@xxxxxxxxxxxxxx>
scsi: target: tcmu: Fix crash on ARM during cmd completion

Jia-Ju Bai <baijiaju@xxxxxxxxxxxxxxx>
media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq()

Stephan Gerhold <stephan@xxxxxxxxxxx>
arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep

Qiushi Wu <wu000273@xxxxxxx>
ASoC: tegra: Fix reference count leaks.

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
ALSA: pci: delete repeated words in comments

Mark Tomlinson <mark.tomlinson@xxxxxxxxxxxxxxxxxxx>
gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY

Mahesh Bandewar <maheshb@xxxxxxxxxx>
ipvlan: fix device features

Cong Wang <xiyou.wangcong@xxxxxxxxx>
tipc: fix uninit skb->data in tipc_nl_compat_dumpit()

Miaohe Lin <linmiaohe@xxxxxxxxxx>
net: Fix potential wrong skb->protocol in skb_vlan_untag()

Jarod Wilson <jarod@xxxxxxxxxx>
bonding: show saner speed for broadcast mode

Cong Wang <xiyou.wangcong@xxxxxxxxx>
bonding: fix a potential double-unregister


-------------

Diffstat:

Makefile | 4 +-
arch/arm64/boot/dts/qcom/msm8916-pins.dtsi | 2 +-
arch/arm64/kvm/hyp/switch.c | 2 +-
arch/mips/vdso/genvdso.c | 10 +++
arch/powerpc/perf/core-book3s.c | 4 ++
arch/powerpc/platforms/cell/Kconfig | 1 +
drivers/base/core.c | 12 ++--
drivers/base/power/main.c | 16 +++--
drivers/edac/ie31200_edac.c | 50 ++++++++++++-
drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 16 +++--
drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 3 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 3 +-
drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 20 ++++--
drivers/gpu/drm/nouveau/nouveau_connector.c | 4 +-
drivers/gpu/drm/nouveau/nouveau_fbcon.c | 4 +-
drivers/gpu/drm/radeon/radeon_connectors.c | 20 ++++--
drivers/hid/i2c-hid/i2c-hid-core.c | 22 +++---
drivers/hid/usbhid/hiddev.c | 4 ++
drivers/i2c/busses/i2c-rcar.c | 1 +
drivers/iommu/iova.c | 4 +-
drivers/md/dm-table.c | 10 +--
drivers/media/pci/ttpci/av7110.c | 5 +-
drivers/media/platform/davinci/vpif_capture.c | 2 -
drivers/net/bonding/bond_main.c | 24 +++++--
drivers/net/ethernet/freescale/gianfar.c | 4 +-
drivers/net/ipvlan/ipvlan_main.c | 25 +++++--
drivers/net/wireless/ath/ath10k/hw.h | 2 +-
drivers/net/wireless/realtek/rtlwifi/usb.c | 5 +-
drivers/pci/slot.c | 6 +-
drivers/s390/cio/css.c | 5 ++
drivers/scsi/fcoe/fcoe_ctlr.c | 2 +-
drivers/scsi/lpfc/lpfc_vport.c | 26 +++----
drivers/scsi/scsi_transport_iscsi.c | 2 +-
drivers/scsi/ufs/ufshcd.c | 11 +--
drivers/staging/media/cec/cec-api.c | 8 ++-
drivers/target/target_core_user.c | 9 ++-
drivers/tty/serial/8250/8250_port.c | 9 ++-
drivers/tty/serial/amba-pl011.c | 16 +++--
drivers/tty/serial/samsung.c | 8 ++-
drivers/tty/vt/vt.c | 5 +-
drivers/tty/vt/vt_ioctl.c | 12 +++-
drivers/usb/core/quirks.c | 2 +
drivers/usb/gadget/function/f_ncm.c | 81 +++++++++++++++++----
drivers/usb/gadget/function/f_tcm.c | 7 +-
drivers/usb/gadget/u_f.h | 38 +++++++---
drivers/usb/host/ohci-exynos.c | 5 +-
drivers/usb/host/xhci-hub.c | 19 ++---
drivers/usb/misc/lvstest.c | 2 +-
drivers/usb/misc/sisusbvga/sisusb.c | 2 +-
drivers/usb/misc/yurex.c | 2 +-
drivers/usb/storage/unusual_devs.h | 2 +-
drivers/usb/storage/unusual_uas.h | 14 ++++
drivers/video/console/fbcon.c | 25 ++++++-
drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 7 +-
drivers/video/fbdev/omap2/omapfb/dss/dsi.c | 7 +-
drivers/video/fbdev/omap2/omapfb/dss/dss.c | 7 +-
drivers/video/fbdev/omap2/omapfb/dss/hdmi4.c | 5 +-
drivers/video/fbdev/omap2/omapfb/dss/hdmi5.c | 5 +-
drivers/video/fbdev/omap2/omapfb/dss/venc.c | 7 +-
drivers/xen/events/events_base.c | 16 ++---
fs/btrfs/disk-io.c | 1 +
fs/btrfs/free-space-cache.c | 2 +-
fs/btrfs/tree-log.c | 10 +--
fs/buffer.c | 9 +++
fs/ceph/mds_client.c | 14 +++-
fs/ext4/super.c | 7 --
fs/fs-writeback.c | 83 ++++++++++++----------
fs/jbd2/transaction.c | 26 +++++++
include/linux/efi.h | 4 ++
include/linux/fs.h | 8 ++-
include/linux/overflow.h | 73 +++++++++++++++++++
include/trace/events/writeback.h | 13 ++--
kernel/locking/lockdep_proc.c | 2 +-
net/core/skbuff.c | 4 +-
net/ipv6/ip6_tunnel.c | 10 ++-
net/tipc/netlink_compat.c | 12 +++-
sound/pci/cs46xx/cs46xx_lib.c | 2 +-
sound/pci/cs46xx/dsp_spos_scb_lib.c | 2 +-
sound/pci/hda/hda_codec.c | 2 +-
sound/pci/hda/hda_generic.c | 2 +-
sound/pci/hda/patch_sigmatel.c | 2 +-
sound/pci/ice1712/prodigy192.c | 2 +-
sound/pci/oxygen/xonar_dg.c | 2 +-
sound/soc/tegra/tegra30_ahub.c | 4 +-
sound/soc/tegra/tegra30_i2s.c | 4 +-
sound/usb/quirks-table.h | 4 +-
.../powerpc/pmu/ebb/back_to_back_ebbs_test.c | 2 -
.../selftests/powerpc/pmu/ebb/cycles_test.c | 2 -
.../powerpc/pmu/ebb/cycles_with_freeze_test.c | 2 -
.../powerpc/pmu/ebb/cycles_with_mmcr2_test.c | 2 -
tools/testing/selftests/powerpc/pmu/ebb/ebb.c | 2 -
.../powerpc/pmu/ebb/ebb_on_willing_child_test.c | 2 -
.../powerpc/pmu/ebb/lost_exception_test.c | 1 -
.../selftests/powerpc/pmu/ebb/multi_counter_test.c | 7 --
.../powerpc/pmu/ebb/multi_ebb_procs_test.c | 2 -
.../selftests/powerpc/pmu/ebb/pmae_handling_test.c | 2 -
.../powerpc/pmu/ebb/pmc56_overflow_test.c | 2 -
98 files changed, 710 insertions(+), 276 deletions(-)