[PATCH 4.9 000/117] 4.9.183-stable review

From: Greg Kroah-Hartman
Date: Thu Jun 20 2019 - 14:29:28 EST


This is the start of the stable review cycle for the 4.9.183 release.
There are 117 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat 22 Jun 2019 05:42:15 PM UTC.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.183-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.9.183-rc1

Alexander Lochmann <alexander.lochmann@xxxxxxxxxxxxxx>
Abort file_remove_privs() for non-reg. files

Amit Cohen <amitc@xxxxxxxxxxxx>
mlxsw: spectrum: Prevent force of 56G

Jason Yan <yanaijie@xxxxxxxxxx>
scsi: libsas: delete sas port if expander discover failed

Lianbo Jiang <lijiang@xxxxxxxxxx>
scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask

Varun Prakash <varun@xxxxxxxxxxx>
scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()

Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs

Paul Mackerras <paulus@xxxxxxxxxx>
KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu

Paul Mackerras <paulus@xxxxxxxxxx>
KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
ia64: fix build errors by exporting paddr_to_nid()

Thomas Richter <tmricht@xxxxxxxxxxxxx>
perf record: Fix s390 missing module symbol and warning for non-root users

Shawn Landden <shawn@xxxxxxx>
perf data: Fix 'strncat may truncate' build failure with recent gcc

Sahitya Tummala <stummala@xxxxxxxxxxxxxx>
configfs: Fix use-after-free when accessing sd->s_dentry

Yingjoe Chen <yingjoe.chen@xxxxxxxxxxxx>
i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr

Kees Cook <keescook@xxxxxxxxxxxx>
net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
gpio: fix gpio-adp5588 build errors

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
perf/ring_buffer: Add ordering to rb->nest increment

Yabin Cui <yabinc@xxxxxxxxxx>
perf/ring_buffer: Fix exposing a temporarily decreased data_head

Frank van der Linden <fllinden@xxxxxxxxxx>
x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
mISDN: make sure device name is NUL terminated

Jeffrin Jose T <jeffrin@xxxxxxxxxxxxxxxxxxx>
selftests: netfilter: missing error check when setting up veth interface

Stephane Eranian <eranian@xxxxxxxxxx>
perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Revert "staging: vc04_services: prevent integer overflow in create_pagelist()"

John Paul Adrian Glaubitz <glaubitz@xxxxxxxxxxxxxxxxxxx>
sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg

Eric Dumazet <edumazet@xxxxxxxxxx>
neigh: fix use-after-free read in pneigh_get_next

Jeremy Sowden <jeremy@xxxxxxxxxx>
lapb: fixed leak of control-blocks.

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero

Ivan Vecera <ivecera@xxxxxxxxxx>
be2net: Fix number of Rx queues used for flow hashing

Eric Dumazet <edumazet@xxxxxxxxxx>
ax25: fix inconsistent lock state in ax25_destroy_timer

Baruch Siach <baruch@xxxxxxxxxx>
rtc: pcf8523: don't return invalid date when battery is low

Daniele Palmas <dnlplm@xxxxxxxxx>
USB: serial: option: add Telit 0x1260 and 0x1261 compositions

JÃrgen Storvist <jorgen.storvist@xxxxxxxxx>
USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode

Chris Packham <chris.packham@xxxxxxxxxxxxxxxxxxx>
USB: serial: pl2303: add Allied Telesis VT-Kit3

Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
USB: usb-storage: Add new ID to ums-realtek

Marco Zatta <marco@xxxxxxxx>
USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.

Martin Schiller <ms@xxxxxxxxxx>
usb: dwc2: Fix DMA cache alignment issues

Murray McAllister <murray.mcallister@xxxxxxxxx>
drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()

Murray McAllister <murray.mcallister@xxxxxxxxx>
drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read

Christian Borntraeger <borntraeger@xxxxxxxxxx>
KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION

Paolo Bonzini <pbonzini@xxxxxxxxxx>
KVM: x86/pmu: do not mask the value that is written to fixed PMUs

Bernd Eckstein <3erndeckstein@xxxxxxxxx>
usbnet: ipheth: fix racing condition

Kees Cook <keescook@xxxxxxxxxxxx>
selftests/timers: Add missing fflush(stdout) calls

Colin Ian King <colin.king@xxxxxxxxxxxxx>
scsi: bnx2fc: fix incorrect cast to u64 on shift operation

Mark Rutland <mark.rutland@xxxxxxx>
arm64/mm: Inhibit huge-vmap with ptdump

James Smart <jsmart2021@xxxxxxxxx>
scsi: lpfc: add check for loss of ndlp when sending RRQ

Young Xiao <YangX92@xxxxxxxxxxx>
Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var

Takashi Iwai <tiwai@xxxxxxx>
Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"

Takashi Iwai <tiwai@xxxxxxx>
ALSA: seq: Fix race of get-subscription call vs port-delete ioctls

Takashi Iwai <tiwai@xxxxxxx>
ALSA: seq: Protect in-kernel ioctl calls with mutex

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/uaccess, kcov: Disable stack protector

S.j. Wang <shengjiu.wang@xxxxxxx>
ASoC: fsl_asrc: Fix the issue about unsupported rate

S.j. Wang <shengjiu.wang@xxxxxxx>
ASoC: cs42xx8: Add regcache mask dirty

Tejun Heo <tj@xxxxxxxxxx>
cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()

Coly Li <colyli@xxxxxxx>
bcache: fix stack corruption by PRECEDING_KEY()

Russell King <rmk+kernel@xxxxxxxxxxxxxxx>
i2c: acorn: fix i2c warning

Hans Verkuil <hans.verkuil@xxxxxxxxx>
media: v4l2-ioctl: clear fields in s_parm

Jann Horn <jannh@xxxxxxxxxx>
ptrace: restore smp_rmb() in __ptrace_may_access()

Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO

Wengang Wang <wen.gang.wang@xxxxxxxxxx>
fs/ocfs2: fix race in ocfs2_dentry_attach_lock()

Shakeel Butt <shakeelb@xxxxxxxxxx>
mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node

Hans de Goede <hdegoede@xxxxxxxxxx>
libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk

Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx>
ALSA: oxfw: allow PCM capture for Stanton SCS.1m

Takashi Iwai <tiwai@xxxxxxx>
ALSA: seq: Cover unsubscribe_port() in list_mutex

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections"

Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
ARM: exynos: Fix undefined instruction during Exynos5422 resume

Phong Hoang <phong.hoang.wz@xxxxxxxxxxx>
pwm: Fix deadlock warning when removing PWM device

Krzysztof Kozlowski <krzk@xxxxxxxxxx>
ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa

Christoph VogtlÃnder <c.vogtlaender@xxxxxxxxxxxxxxxxxxxxxxxxx>
pwm: tiehrpwm: Update shadow register for disabling PWMs

Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
dmaengine: idma64: Use actual device for DMA transfers

Tony Lindgren <tony@xxxxxxxxxxx>
gpio: gpio-omap: add check for off wake capable gpios

Kangjie Lu <kjlu@xxxxxxx>
PCI: xilinx: Check for __get_free_pages() failure

Kangjie Lu <kjlu@xxxxxxx>
video: imsttfb: fix potential NULL pointer dereferences

Kangjie Lu <kjlu@xxxxxxx>
video: hgafb: fix potential NULL pointer dereference

Marek Vasut <marek.vasut+renesas@xxxxxxxxx>
PCI: rcar: Fix 64bit MSI message address handling

Kangjie Lu <kjlu@xxxxxxx>
PCI: rcar: Fix a potential NULL pointer dereference

Junxiao Chang <junxiao.chang@xxxxxxxxx>
platform/x86: intel_pmc_ipc: adding error handling

Tyrel Datwyler <tyreld@xxxxxxxxxxxxxxxxxx>
PCI: rpadlpar: Fix leaked device_node references in add/remove paths

Andrey Smirnov <andrew.smirnov@xxxxxxxxx>
ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA

Andrey Smirnov <andrew.smirnov@xxxxxxxxx>
ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA

Andrey Smirnov <andrew.smirnov@xxxxxxxxx>
ARM: dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA

Andrey Smirnov <andrew.smirnov@xxxxxxxxx>
ARM: dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA

Andrey Smirnov <andrew.smirnov@xxxxxxxxx>
ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA

Douglas Anderson <dianders@xxxxxxxxxxxx>
clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288

Nathan Chancellor <natechancellor@xxxxxxxxx>
soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher

Enrico Granata <egranata@xxxxxxxxxxxx>
platform/chrome: cros_ec_proto: check for NULL transfer function

Wenwen Wang <wang6495@xxxxxxx>
x86/PCI: Fix PCI IRQ routing table memory leak

J. Bruce Fields <bfields@xxxxxxxxxx>
nfsd: allow fh_want_write to be called twice

Kirill Smelkov <kirr@xxxxxxxxxx>
fuse: retrieve: cap requested size to negotiated max_write

Jorge Ramirez-Ortiz <jorge.ramirez-ortiz@xxxxxxxxxx>
nvmem: core: fix read buffer in place

Takashi Iwai <tiwai@xxxxxxx>
ALSA: hda - Register irq handler after the chip initialization

Lu Baolu <baolu.lu@xxxxxxxxxxxxxxx>
iommu/vt-d: Set intel_iommu_gfx_mapped correctly

Vladimir Zapolskiy <vz@xxxxxxxxx>
watchdog: fix compile time error of pretimeout governors

Georg Hofmann <georg@xxxxxxxxxxxxxxx>
watchdog: imx2_wdt: Fix set_timeout for big timeout values

Maciej Åenczykowski <maze@xxxxxxxxxx>
uml: fix a boot splat wrt use of cpu_all_mask

YueHaibing <yuehaibing@xxxxxxxxxx>
configfs: fix possible use-after-free in configfs_register_group

Chao Yu <yuchao0@xxxxxxxxxx>
f2fs: fix to do sanity check on valid block count of segment

Chao Yu <yuchao0@xxxxxxxxxx>
f2fs: fix to clear dirty inode in error path of f2fs_iget()

Chao Yu <yuchao0@xxxxxxxxxx>
f2fs: fix to avoid panic in do_recover_data()

Miroslav Lichvar <mlichvar@xxxxxxxxxx>
ntp: Allow TAI-UTC offset to be set to zero

Martin Blumenstingl <martin.blumenstingl@xxxxxxxxxxxxxx>
pwm: meson: Use the spin-lock only to protect register modifications

Josh Poimboeuf <jpoimboe@xxxxxxxxxx>
objtool: Don't use ignore flag for fake jumps

Matt Redfearn <matt.redfearn@xxxxxxxxxx>
drm/bridge: adv7511: Fix low refresh rate selection

Stephane Eranian <eranian@xxxxxxxxxx>
perf/x86/intel: Allow PEBS multi-entry in watermark mode

Tony Lindgren <tony@xxxxxxxxxxx>
mfd: twl6040: Fix device init errors for ACCCTL register

Binbin Wu <binbin.wu@xxxxxxxxx>
mfd: intel-lpss: Set the device in reset state when init

Daniel Gomez <dagmcr@xxxxxxxxx>
mfd: tps65912-spi: Add missing of table registration

Amit Kucheria <amit.kucheria@xxxxxxxxxx>
drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER

Cyrill Gorcunov <gorcunov@xxxxxxxxx>
kernel/sys.c: prctl: fix false positive in validate_prctl_map()

Qian Cai <cai@xxxxxx>
mm/slab.c: fix an infinite loop in leaks_show()

Yue Hu <huyue2@xxxxxxxxxx>
mm/cma_debug.c: fix the break condition in cma_maxchunk_get()

Yue Hu <huyue2@xxxxxxxxxx>
mm/cma.c: fix crash on CMA allocation if bitmap allocation fails

Linxu Fang <fanglinxu@xxxxxxxxxx>
mem-hotplug: fix node spanned pages when we have a node with only ZONE_MOVABLE

Mike Kravetz <mike.kravetz@xxxxxxxxxx>
hugetlbfs: on restore reserve error path retain subpool reservation

Arnd Bergmann <arnd@xxxxxxxx>
ARM: prevent tracing IPI_CPU_BACKTRACE

Li Rongqing <lirongqing@xxxxxxxxx>
ipc: prevent lockup on alloc_msg and free_msg

Christian Brauner <christian@xxxxxxxxxx>
sysctl: return -EINVAL if val violates minmax

Hou Tao <houtao1@xxxxxxxxxx>
fs/fat/file.c: issue flush after the writeback of FAT

Kangjie Lu <kjlu@xxxxxxx>
rapidio: fix a NULL pointer dereference when create_workqueue() fails


-------------

Diffstat:

Makefile | 4 +--
arch/arm/boot/dts/exynos5420-arndale-octa.dts | 2 ++
arch/arm/boot/dts/imx6qdl.dtsi | 2 +-
arch/arm/boot/dts/imx6sl.dtsi | 2 +-
arch/arm/boot/dts/imx6sx.dtsi | 2 +-
arch/arm/boot/dts/imx6ul.dtsi | 2 +-
arch/arm/boot/dts/imx7s.dtsi | 4 +--
arch/arm/include/asm/hardirq.h | 1 +
arch/arm/kernel/smp.c | 6 +++-
arch/arm/mach-exynos/suspend.c | 19 ++++++++++++
arch/arm64/mm/mmu.c | 11 +++++--
arch/ia64/mm/numa.c | 1 +
arch/powerpc/include/asm/kvm_host.h | 1 +
arch/powerpc/kvm/book3s.c | 1 +
arch/powerpc/kvm/book3s_hv.c | 9 +-----
arch/powerpc/kvm/book3s_rtas.c | 14 ++++-----
arch/s390/kvm/kvm-s390.c | 35 +++++++++++++---------
arch/um/kernel/time.c | 2 +-
arch/x86/events/intel/core.c | 2 +-
arch/x86/events/intel/ds.c | 28 ++++++++---------
arch/x86/kernel/cpu/amd.c | 7 +++--
arch/x86/kvm/pmu_intel.c | 13 ++++----
arch/x86/pci/irq.c | 10 +++++--
drivers/ata/libata-core.c | 9 ++++--
drivers/clk/rockchip/clk-rk3288.c | 11 +++++++
drivers/dma/idma64.c | 6 ++--
drivers/dma/idma64.h | 2 ++
drivers/gpio/Kconfig | 1 +
drivers/gpio/gpio-omap.c | 25 +++++++++++-----
drivers/gpu/drm/bridge/adv7511/adv7511_drv.c | 6 ++--
drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 7 ++++-
drivers/i2c/busses/i2c-acorn.c | 1 +
drivers/i2c/i2c-dev.c | 1 +
drivers/iommu/intel-iommu.c | 7 +++--
drivers/isdn/mISDN/socket.c | 5 ++--
drivers/md/bcache/bset.c | 16 ++++++++--
drivers/md/bcache/bset.h | 34 ++++++++++++---------
drivers/media/v4l2-core/v4l2-ioctl.c | 17 ++++++++++-
drivers/mfd/intel-lpss.c | 3 ++
drivers/mfd/tps65912-spi.c | 1 +
drivers/mfd/twl6040.c | 13 +++++++-
drivers/misc/kgdbts.c | 4 +--
drivers/net/ethernet/dec/tulip/de4x5.c | 1 -
drivers/net/ethernet/emulex/benet/be_ethtool.c | 2 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 4 +++
drivers/net/ethernet/renesas/sh_eth.c | 4 +++
drivers/net/usb/ipheth.c | 3 +-
drivers/nvmem/core.c | 15 ++++++----
drivers/pci/host/pcie-rcar.c | 10 +++++--
drivers/pci/host/pcie-xilinx.c | 12 ++++++--
drivers/pci/hotplug/rpadlpar_core.c | 4 +++
drivers/platform/chrome/cros_ec_proto.c | 11 +++++++
drivers/platform/x86/intel_pmc_ipc.c | 6 +++-
drivers/pwm/core.c | 10 +++----
drivers/pwm/pwm-meson.c | 25 +++++++++++-----
drivers/pwm/pwm-tiehrpwm.c | 2 ++
drivers/pwm/sysfs.c | 14 +--------
drivers/rapidio/rio_cm.c | 8 +++++
drivers/rtc/rtc-pcf8523.c | 32 +++++++++++++++-----
drivers/scsi/bnx2fc/bnx2fc_hwi.c | 2 +-
drivers/scsi/cxgbi/libcxgbi.c | 4 +++
drivers/scsi/libsas/sas_expander.c | 2 ++
drivers/scsi/lpfc/lpfc_els.c | 5 +++-
drivers/scsi/smartpqi/smartpqi_init.c | 2 +-
drivers/soc/mediatek/mtk-pmic-wrap.c | 2 +-
drivers/spi/spi-pxa2xx.c | 7 +----
.../interface/vchiq_arm/vchiq_2835_arm.c | 9 ------
drivers/thermal/qcom/tsens.c | 3 +-
drivers/tty/serial/8250/8250_dw.c | 4 +--
drivers/tty/serial/sunhv.c | 2 +-
drivers/usb/core/quirks.c | 3 ++
drivers/usb/dwc2/hcd.c | 10 +++++--
drivers/usb/serial/option.c | 6 ++++
drivers/usb/serial/pl2303.c | 1 +
drivers/usb/serial/pl2303.h | 3 ++
drivers/usb/storage/unusual_realtek.h | 5 ++++
drivers/video/fbdev/hgafb.c | 2 ++
drivers/video/fbdev/imsttfb.c | 5 ++++
drivers/watchdog/Kconfig | 1 +
drivers/watchdog/imx2_wdt.c | 4 ++-
fs/configfs/dir.c | 31 +++++++++++--------
fs/f2fs/inode.c | 1 +
fs/f2fs/recovery.c | 10 ++++++-
fs/f2fs/segment.h | 3 +-
fs/fat/file.c | 11 +++++--
fs/fuse/dev.c | 2 +-
fs/inode.c | 9 ++++--
fs/nfsd/vfs.h | 5 +++-
fs/ocfs2/dcache.c | 12 ++++++++
include/linux/cgroup.h | 10 +++++--
include/linux/pwm.h | 5 ----
include/net/bluetooth/hci_core.h | 3 --
ipc/mqueue.c | 10 +++++--
ipc/msgutil.c | 6 ++++
kernel/Makefile | 1 +
kernel/cred.c | 9 ++++++
kernel/events/ring_buffer.c | 33 +++++++++++++++++---
kernel/ptrace.c | 20 +++++++++++--
kernel/sys.c | 2 +-
kernel/sysctl.c | 6 ++--
kernel/time/ntp.c | 2 +-
mm/cma.c | 4 ++-
mm/cma_debug.c | 2 +-
mm/hugetlb.c | 21 +++++++++----
mm/list_lru.c | 2 +-
mm/page_alloc.c | 6 ++--
mm/slab.c | 6 +++-
net/ax25/ax25_route.c | 2 ++
net/bluetooth/hci_conn.c | 8 -----
net/core/neighbour.c | 7 +++++
net/ipv6/ip6_flowlabel.c | 7 +++--
net/lapb/lapb_iface.c | 1 +
sound/core/seq/seq_clientmgr.c | 10 ++-----
sound/core/seq/seq_ports.c | 15 ++++++----
sound/core/seq/seq_ports.h | 5 ++--
sound/firewire/oxfw/oxfw.c | 3 --
sound/pci/hda/hda_intel.c | 6 ++--
sound/soc/codecs/cs42xx8.c | 1 +
sound/soc/fsl/fsl_asrc.c | 4 +--
tools/objtool/check.c | 8 +++--
tools/perf/arch/s390/util/machine.c | 9 ++++--
tools/perf/util/data-convert-bt.c | 2 +-
tools/testing/selftests/netfilter/nft_nat.sh | 6 +++-
tools/testing/selftests/timers/adjtick.c | 1 +
tools/testing/selftests/timers/leapcrash.c | 1 +
tools/testing/selftests/timers/mqueue-lat.c | 1 +
tools/testing/selftests/timers/nanosleep.c | 1 +
tools/testing/selftests/timers/nsleep-lat.c | 1 +
tools/testing/selftests/timers/raw_skew.c | 1 +
tools/testing/selftests/timers/set-tai.c | 1 +
tools/testing/selftests/timers/set-tz.c | 2 ++
tools/testing/selftests/timers/threadtest.c | 1 +
tools/testing/selftests/timers/valid-adjtimex.c | 2 ++
133 files changed, 646 insertions(+), 284 deletions(-)