This is the start of the stable review cycle for the 4.9.96 release. There are 95 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Tue Apr 24 13:51:53 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.96-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.96-rc1 Wanpeng Li <wanpeng.li@xxxxxxxxxxx> block/mq: fix potential deadlock during cpu hotplug Greg Thelen <gthelen@xxxxxxxxxx> writeback: safer lock nesting Amir Goldstein <amir73il@xxxxxxxxx> fanotify: fix logic of events on child Matthew Wilcox <mawilcox@xxxxxxxxxxxxx> mm/filemap.c: fix NULL pointer in page_cache_tree_insert() Ian Kent <raven@xxxxxxxxxx> autofs: mount point create should honour passed in mode Al Viro <viro@xxxxxxxxxxxxxxxxxx> Don't leak MNT_INTERNAL away from internal mounts Al Viro <viro@xxxxxxxxxxxxxxxxxx> rpc_pipefs: fix double-dput() Al Viro <viro@xxxxxxxxxxxxxxxxxx> orangefs_kill_sb(): deal with allocation failures Al Viro <viro@xxxxxxxxxxxxxxxxxx> hypfs_kill_super(): deal with failed allocations Al Viro <viro@xxxxxxxxxxxxxxxxxx> jffs2_kill_sb(): deal with failed allocations Jan Kara <jack@xxxxxxx> udf: Fix leak of UTF-16 surrogates into encoded strings Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/lib: Fix off-by-one in alternate feature patching Michael Neuling <mikey@xxxxxxxxxxx> powerpc/eeh: Fix enabling bridge MMIO windows Matt Redfearn <matt.redfearn@xxxxxxxx> MIPS: memset.S: Fix clobber of v1 in last_fixup Matt Redfearn <matt.redfearn@xxxxxxxx> MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup Matt Redfearn <matt.redfearn@xxxxxxxx> MIPS: memset.S: EVA & fault support for small_memset Matt Redfearn <matt.redfearn@xxxxxxxx> MIPS: uaccess: Add micromips clobbers to bzero invocation Rodrigo Rivas Costa <rodrigorivascosta@xxxxxxxxx> HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device Theodore Ts'o <tytso@xxxxxxx> random: add new ioctl RNDRESEEDCRNG Theodore Ts'o <tytso@xxxxxxx> random: crng_reseed() should lock the crng instance that it is modifying Theodore Ts'o <tytso@xxxxxxx> random: set up the NUMA crng instances after the CRNG is fully initialized Theodore Ts'o <tytso@xxxxxxx> random: fix crng_ready() test David Wang <davidwang@xxxxxxxxxxx> ALSA: hda - New VIA controller suppor no-snoop path Takashi Iwai <tiwai@xxxxxxx> ALSA: rawmidi: Fix missing input substream checks in compat ioctls Fabián Inostroza <soulsonceonfire@xxxxxxxxx> ALSA: line6: Use correct endpoint type for midi output Paul Parsons <lost.distance@xxxxxxxxx> drm/radeon: Fix PCIe lane width calculation Marc Zyngier <marc.zyngier@xxxxxxx> drm/rockchip: Clear all interrupts before requesting the IRQ Alex Deucher <alexander.deucher@xxxxxxx> drm/amdgpu: Fix PCIe lane width calculation Bas Nieuwenhuizen <basni@xxxxxxxxxxxx> drm/amdgpu: Fix always_valid bos multiple LRU insertions. Alex Deucher <alexander.deucher@xxxxxxx> drm/amdgpu: Add an ATPX quirk for hybrid laptop Theodore Ts'o <tytso@xxxxxxx> ext4: don't allow r/w mounts if metadata blocks overlap the superblock Takashi Iwai <tiwai@xxxxxxx> ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation Takashi Iwai <tiwai@xxxxxxx> ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls Takashi Iwai <tiwai@xxxxxxx> ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams Takashi Iwai <tiwai@xxxxxxx> ALSA: pcm: Avoid potential races between OSS ioctls and read/write Takashi Iwai <tiwai@xxxxxxx> ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation Alex Williamson <alex.williamson@xxxxxxxxxx> vfio/pci: Virtualize Maximum Read Request Size Igor Pylypiv <igor.pylypiv@xxxxxxxxx> watchdog: f71808e_wdt: Fix WD_EN register read Sean Wang <sean.wang@xxxxxxxxxxxx> dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4 Mikhail Lappo <mikhail.lappo@xxxxxxxxxxx> thermal: imx: Fix race condition in imx_thermal_probe() Ryo Kodama <ryo.kodama.vz@xxxxxxxxxxx> pwm: rcar: Fix a condition to prevent mismatch value setting to duty Boris Brezillon <boris.brezillon@xxxxxxxxxxx> clk: bcm2835: De-assert/assert PLL reset signal when appropriate Arnd Bergmann <arnd@xxxxxxxx> clk: fix false-positive Wmaybe-uninitialized warning Richard Genoud <richard.genoud@xxxxxxxxx> clk: mvebu: armada-38x: add support for missing clocks Ralph Sennhauser <ralph.sennhauser@xxxxxxxxx> clk: mvebu: armada-38x: add support for 1866MHz variants Alex Smith <alex.smith@xxxxxxxxxx> mmc: jz4740: Fix race condition in IRQ mask update Lu Baolu <baolu.lu@xxxxxxxxxxxxxxx> iommu/vt-d: Fix a potential memory leak Krzysztof Mazur <krzysiek@xxxxxxxxxxxx> um: Use POSIX ucontext_t instead of struct ucontext Jason A. Donenfeld <Jason@xxxxxxxxx> um: Compile with modern headers Dan Williams <dan.j.williams@xxxxxxxxx> nfit, address-range-scrub: fix scrub in-progress reporting Dan Williams <dan.j.williams@xxxxxxxxx> libnvdimm, namespace: use a safe lookup for dimm device name Maxime Jayat <maxime.jayat@xxxxxxxxxxxxxxxxx> dmaengine: at_xdmac: fix rare residue corruption Bart Van Assche <bart.vanassche@xxxxxxx> IB/srp: Fix completion vector assignment algorithm Bart Van Assche <bart.vanassche@xxxxxxx> IB/srp: Fix srp_abort() Takashi Iwai <tiwai@xxxxxxx> ALSA: pcm: Fix UAF at PCM release via PCM timer access Bart Van Assche <bart.vanassche@xxxxxxx> RDMA/rxe: Fix an out-of-bounds read Roland Dreier <roland@xxxxxxxxxxxxxxx> RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device Theodore Ts'o <tytso@xxxxxxx> ext4: fail ext4_iget for root directory if unallocated Theodore Ts'o <tytso@xxxxxxx> ext4: add validity checks for bitmap block numbers Eryu Guan <guaneryu@xxxxxxxxx> ext4: protect i_disksize update by i_data_sem in direct write path Theodore Ts'o <tytso@xxxxxxx> ext4: don't update checksum of new initialized bitmaps Theodore Ts'o <tytso@xxxxxxx> jbd2: if the journal is aborted then don't allow update of the log tail Theodore Ts'o <tytso@xxxxxxx> random: use a tighter cap in credit_entropy_bits_safe() Aniruddha Banerjee <aniruddhab@xxxxxxxxxx> irqchip/gic: Take lock when updating irq type Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx> thunderbolt: Resume control channel after hibernation image is created James Kelly <jamespeterkelly@xxxxxxxxx> ASoC: ssm2602: Replace reg_default_raw with reg_default Aaron Ma <aaron.ma@xxxxxxxxxxxxx> HID: core: Fix size as type u32 Aaron Ma <aaron.ma@xxxxxxxxxxxxx> HID: Fix hid_report_len usage Nicholas Piggin <npiggin@xxxxxxxxx> powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops Nicholas Piggin <npiggin@xxxxxxxxx> powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently Nicholas Piggin <npiggin@xxxxxxxxx> powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write() Aaron Ma <aaron.ma@xxxxxxxxxxxxx> HID: i2c-hid: fix size check and type usage Steve French <stfrench@xxxxxxxxxxxxx> smb3: Fix root directory when server returns inode number of zero Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: dwc3: pci: Properly cleanup resource Zhengjun Xing <zhengjun.xing@xxxxxxxxxxxxxxx> USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw Yavuz, Tuba <tuba@xxxxxxxxxxx> USB: gadget: f_midi: fixing a possible double-free in f_midi Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx> ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status() Hans de Goede <hdegoede@xxxxxxxxxx> ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E Dan Carpenter <dan.carpenter@xxxxxxxxxx> regmap: Fix reversed bounds check in regmap_raw_write() Jason Andryuk <jandryuk@xxxxxxxxx> xen-netfront: Fix hang on device removal Maxime Chevallier <maxime.chevallier@xxxxxxxxxxx> spi: Fix scatterlist elements size in spi_map_buf Santiago Esteban <Santiago.Esteban@xxxxxxxxxxxxx> ARM: dts: at91: sama5d4: fix pinctrl compatible string Marek Szyprowski <m.szyprowski@xxxxxxxxxxx> ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250 Nicolas Ferre <nicolas.ferre@xxxxxxxxxxxxx> ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property Felipe Balbi <felipe.balbi@xxxxxxxxxxxxxxx> usb: gadget: udc: core: update usb_ep_queue() documentation Heinrich Schuchardt <xypron.glpk@xxxxxx> usb: musb: gadget: misplaced out of bounds check Vlastimil Babka <vbabka@xxxxxxx> mm, slab: reschedule cache_reap() on the same CPU Eric Biggers <ebiggers@xxxxxxxxxx> ipc/shm: fix use-after-free of shm file via remap_file_pages() Takashi Iwai <tiwai@xxxxxxx> resource: fix integer overflow at reallocation Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> fs/reiserfs/journal.c: add missing resierfs_warning() arg Richard Weinberger <richard@xxxxxx> ubi: Reject MLC NAND Romain Izard <romain.izard.pro@xxxxxxxxx> ubi: Fix error for write access Richard Weinberger <richard@xxxxxx> ubi: fastmap: Don't flush fastmap work on detach Richard Weinberger <richard@xxxxxx> ubifs: Check ubifs_wbuf_sync() return code Tejun Heo <tj@xxxxxxxxxx> tty: make n_tty_read() always abort if hangup is in progress ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/at91sam9g25.dtsi | 2 +- arch/arm/boot/dts/exynos5250.dtsi | 8 +- arch/arm/boot/dts/sama5d4.dtsi | 2 +- arch/mips/include/asm/uaccess.h | 11 +- arch/mips/lib/memset.S | 11 +- arch/powerpc/include/asm/barrier.h | 3 +- arch/powerpc/include/asm/synch.h | 4 - arch/powerpc/kernel/eeh_pe.c | 3 +- arch/powerpc/lib/feature-fixups.c | 2 +- arch/powerpc/platforms/powernv/opal-nvram.c | 11 +- arch/s390/hypfs/inode.c | 2 +- arch/um/os-Linux/file.c | 1 + arch/um/os-Linux/signal.c | 3 +- arch/x86/um/stub_segv.c | 3 +- block/blk-mq.c | 4 +- drivers/acpi/nfit/core.c | 5 +- drivers/acpi/video_detect.c | 9 ++ drivers/base/regmap/regmap.c | 2 +- drivers/char/random.c | 75 +++++---- drivers/clk/bcm/clk-bcm2835.c | 8 +- drivers/clk/mvebu/armada-38x.c | 15 +- drivers/clk/renesas/clk-sh73a0.c | 6 +- drivers/dma/at_xdmac.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 2 +- drivers/gpu/drm/amd/amdgpu/si_dpm.c | 4 +- drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/rockchip/rockchip_drm_vop.c | 23 +-- drivers/hid/hid-core.c | 10 +- drivers/hid/hid-input.c | 3 +- drivers/hid/hid-multitouch.c | 5 +- drivers/hid/hid-rmi.c | 4 +- drivers/hid/hidraw.c | 5 + drivers/hid/i2c-hid/i2c-hid.c | 13 +- drivers/hid/wacom_sys.c | 2 +- drivers/infiniband/core/ucma.c | 3 + drivers/infiniband/sw/rxe/rxe_verbs.c | 5 +- drivers/infiniband/ulp/srp/ib_srp.c | 18 +-- drivers/iommu/intel-svm.c | 1 + drivers/irqchip/irq-gic-common.c | 9 +- drivers/mmc/host/jz4740_mmc.c | 2 +- drivers/mtd/ubi/block.c | 2 +- drivers/mtd/ubi/build.c | 11 ++ drivers/mtd/ubi/fastmap-wl.c | 1 - drivers/net/xen-netfront.c | 7 +- drivers/nvdimm/namespace_devs.c | 4 +- drivers/pci/hotplug/acpiphp_glue.c | 23 ++- drivers/pwm/pwm-rcar.c | 8 +- drivers/spi/spi.c | 10 +- drivers/thermal/imx_thermal.c | 6 +- drivers/thunderbolt/nhi.c | 1 + drivers/tty/n_tty.c | 6 + drivers/tty/tty_io.c | 9 ++ drivers/usb/core/generic.c | 9 +- drivers/usb/dwc3/dwc3-pci.c | 2 +- drivers/usb/gadget/function/f_midi.c | 3 +- drivers/usb/gadget/u_f.h | 2 + drivers/usb/gadget/udc/core.c | 3 + drivers/usb/musb/musb_gadget_ep0.c | 14 +- drivers/vfio/pci/vfio_pci_config.c | 29 +++- drivers/watchdog/f71808e_wdt.c | 2 +- fs/autofs4/root.c | 2 +- fs/cifs/cifsglob.h | 1 + fs/cifs/inode.c | 33 ++++ fs/ext4/balloc.c | 19 ++- fs/ext4/ialloc.c | 54 ++----- fs/ext4/inode.c | 11 +- fs/ext4/super.c | 6 + fs/fs-writeback.c | 7 +- fs/jbd2/journal.c | 5 +- fs/jffs2/super.c | 2 +- fs/namespace.c | 3 +- fs/notify/fanotify/fanotify.c | 34 ++--- fs/orangefs/super.c | 5 + fs/reiserfs/journal.c | 2 +- fs/ubifs/super.c | 14 +- fs/udf/unicode.c | 6 + include/dt-bindings/clock/mt2701-clk.h | 3 +- include/linux/backing-dev-defs.h | 5 + include/linux/backing-dev.h | 30 ++-- include/linux/hid.h | 6 +- include/linux/tty.h | 1 + include/sound/pcm_oss.h | 1 + include/uapi/linux/random.h | 3 + ipc/shm.c | 23 ++- kernel/resource.c | 3 +- mm/filemap.c | 9 +- mm/page-writeback.c | 18 +-- mm/slab.c | 3 +- net/sunrpc/rpc_pipe.c | 1 + sound/core/oss/pcm_oss.c | 186 ++++++++++++++++++----- sound/core/pcm.c | 8 +- sound/core/rawmidi_compat.c | 18 ++- sound/pci/hda/hda_intel.c | 3 +- sound/soc/codecs/ssm2602.c | 19 ++- sound/usb/line6/midi.c | 2 +- 98 files changed, 694 insertions(+), 322 deletions(-)