This is the start of the stable review cycle for the 4.9.103 release. There are 96 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat May 26 09:35:42 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.103-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.103-rc1 Colin Ian King <colin.king@xxxxxxxxxxxxx> rtc: tx4939: avoid unintended sign extension on a 24 bit shift Alexandre Belloni <alexandre.belloni@xxxxxxxxxxx> rtc: hctosys: Ensure system time doesn't overflow time_t Bryan O'Donoghue <pure.logic@xxxxxxxxxxxxxxxxx> rtc: snvs: Fix usage of snvs_rtc_enable Vignesh R <vigneshr@xxxxxx> serial: 8250: Don't service RX FIFO if interrupts are disabled Geert Uytterhoeven <geert+renesas@xxxxxxxxx> serial: arc_uart: Fix out-of-bounds access through DT alias Geert Uytterhoeven <geert+renesas@xxxxxxxxx> serial: fsl_lpuart: Fix out-of-bounds access through DT alias Geert Uytterhoeven <geert+renesas@xxxxxxxxx> serial: imx: Fix out-of-bounds access through serial port index Geert Uytterhoeven <geert+renesas@xxxxxxxxx> serial: mxs-auart: Fix out-of-bounds access through serial port index Geert Uytterhoeven <geert+renesas@xxxxxxxxx> serial: samsung: Fix out-of-bounds access through serial port index Geert Uytterhoeven <geert+renesas@xxxxxxxxx> serial: xuartps: Fix out-of-bounds access through DT alias Colin Ian King <colin.king@xxxxxxxxxxxxx> media: cx25821: prevent out-of-bounds read on array card Hans Verkuil <hverkuil@xxxxxxxxx> media: vivid: fix incorrect capabilities for radio Masami Hiramatsu <mhiramat@xxxxxxxxxx> media: vb2: Fix videobuf2 to map correct area Arnd Bergmann <arnd@xxxxxxxx> media: s3c-camif: fix out-of-bounds array access Brad Love <brad@xxxxxxxxxxxxxxxx> media: cx23885: Override 888 ImpactVCBe crystal frequency Mauro Carvalho Chehab <mchehab@xxxxxxxxxx> media: dmxdev: fix error code for invalid ioctls Andrzej Hajda <a.hajda@xxxxxxxxxxx> clk: samsung: exynos3250: Fix PLL rates Andrzej Hajda <a.hajda@xxxxxxxxxxx> clk: samsung: exynos5250: Fix PLL rates Andrzej Hajda <a.hajda@xxxxxxxxxxx> clk: samsung: exynos5433: Fix PLL rates Andrzej Hajda <a.hajda@xxxxxxxxxxx> clk: samsung: exynos5260: Fix PLL rates Andrzej Hajda <a.hajda@xxxxxxxxxxx> clk: samsung: exynos7: Fix PLL rates Andrzej Hajda <a.hajda@xxxxxxxxxxx> clk: samsung: s3c2410: Fix PLL rates Shawn Lin <shawn.lin@xxxxxxxxxxxxxx> clk: rockchip: Prevent calculating mmc phase if clock rate is zero Brad Love <brad@xxxxxxxxxxxxxxxx> media: cx23885: Set subdev host data to clk_freq pointer Marcel Ziswiler <marcel@xxxxxxxxxxxx> clk: tegra: Fix pll_u rate configuration Shawn Lin <shawn.lin@xxxxxxxxxxxxxx> clk: Don't show the incorrect clock phase Shawn Lin <shawn.lin@xxxxxxxxxxxxxx> clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228 Sylwester Nawrocki <s.nawrocki@xxxxxxxxxxx> ASoC: samsung: i2s: Ensure the RCLK rate is properly determined Ranjani Sridharan <ranjani.sridharan@xxxxxxxxxxxxxxx> ASoC: topology: create TLV data for dapm widgets Dan Carpenter <dan.carpenter@xxxxxxxxxx> ASoC: au1x: Fix timeout tests in au1xac97c_ac97_read() James Smart <jsmart2021@xxxxxxxxx> scsi: lpfc: Fix frequency of Release WQE CQEs James Smart <jsmart2021@xxxxxxxxx> scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP testing James Smart <jsmart2021@xxxxxxxxx> scsi: lpfc: Fix issue_lip if link is disabled Wilfried Weissmann <wilfried.weissmann@xxxxxx> scsi: mvsas: fix wrong endianness of sgpio api Dave Carroll <david.carroll@xxxxxxxxxxxxx> scsi: aacraid: Insure command thread is not recursively stopped Jeremy Cline <jeremy@xxxxxxxxxx> scsi: sd: Keep disk read-only when re-reading partition Hannes Reinecke <hare@xxxxxxx> scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM Manish Rangankar <manish.rangankar@xxxxxxxxxx> scsi: qla4xxx: skip error recovery in case of register disconnect. Meelis Roos <mroos@xxxxxxxx> scsi: aacraid: fix shutdown crash when init fails Michael Kelley (EOSG) <Michael.H.Kelley@xxxxxxxxxxxxx> scsi: storvsc: Increase cmd_per_lun for higher speed devices Bart Van Assche <bart.vanassche@xxxxxxx> scsi: qla2xxx: Avoid triggering undefined behavior in qla2x00_mbx_completion() Dan Carpenter <dan.carpenter@xxxxxxxxxx> scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo() Dan Carpenter <dan.carpenter@xxxxxxxxxx> scsi: sym53c8xx_2: iterator underflow in sym_getsync() Chad Dupuis <chad.dupuis@xxxxxxxxxx> scsi: bnx2fc: Fix check in SCSI completion handler for timed out request Sujit Reddy Thumma <sthumma@xxxxxxxxxxxxxx> scsi: ufs: Enable quirk to ignore sending WRITE_SAME command Arnd Bergmann <arnd@xxxxxxxx> scsi: fas216: fix sense buffer initialization Peter Robinson <pbrobinson@xxxxxxxxx> crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss NeilBrown <neilb@xxxxxxxx> staging: lustre: lmv: correctly iput lmo_root Colin Ian King <colin.king@xxxxxxxxxxxxx> staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr NeilBrown <neilb@xxxxxxxx> staging: lustre: fix bug in osc_enter_cache_try Larry Finger <Larry.Finger@xxxxxxxxxxxx> Bluetooth: btusb: Add device ID for RTL8822BE Brad Love <brad@xxxxxxxxxxxxxxxx> media: em28xx: USB bulk packet size fix Chris Dickens <christopher.a.dickens@xxxxxxxxx> usb: gadget: composite: fix incorrect handling of OS desc requests Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> usb: gadget: udc: change comparison to bitshift when dealing with a mask Lars-Peter Clausen <lars@xxxxxxxxxx> usb: gadget: ffs: Execute copy_to_user() with USER_DS set Lars-Peter Clausen <lars@xxxxxxxxxx> usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS Minas Harutyunyan <hminas@xxxxxxxxxxxx> usb: dwc2: host: Fix transaction errors in host mode Grigor Tovmasyan <Grigor.Tovmasyan@xxxxxxxxxxxx> usb: dwc2: Fix interval type issue Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> xhci: zero usb device slot_id member when disabling and freeing a xhci slot Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: dwc3: Add SoftReset PHY synchonization delay Nobutaka Okabe <nob77413@xxxxxxxxx> ALSA: usb-audio: Add native DSD support for Luxman DA-06 Vicente Bergas <vicencb@xxxxxxxxx> Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB Giuseppe Lippolis <giu.lippolis@xxxxxxxxx> net-usb: add qmi_wwan if on lte modem wistron neweb d18q1 Torsten Hilbrich <torsten.hilbrich@xxxxxxxxxxx> net/usb/qmi_wwan.c: Add USB id for lt4120 modem Fredrik Noring <noring@xxxxxxxxxx> USB: OHCI: Fix NULL dereference in HCDs using HCD_LOCAL_MEM Dominik Bozek <dominikx.bozek@xxxxxxxxx> usb: cdc_acm: prevent race at write to acm while system resumes Vardan Mikayelyan <mvardan@xxxxxxxxxxxx> usb: dwc2: Fix dwc2_hsotg_core_init_disconnected() Stefan Agner <stefan@xxxxxxxx> usb: gadget: fsl_udc_core: fix ep valid checks Manu Gautam <mgautam@xxxxxxxxxxxxxx> usb: gadget: core: Fix use-after-free of usb_request Roger Quadros <rogerq@xxxxxx> usb: dwc3: omap: don't miss events during suspend/resume Brian Norris <briannorris@xxxxxxxxxxxx> usb: dwc3: Undo PHY init if soft reset fails John Keeping <john@xxxxxxxxxxxx> usb: gadget: f_uac2: fix bFirstInterface in composite gadget Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> x86/kexec: Avoid double free_page() upon do_kexec_load() failure Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> hfsplus: stop workqueue when fill_super() failed Johannes Berg <johannes.berg@xxxxxxxxx> cfg80211: limit wiphy names to 128 bytes Jens Remus <jremus@xxxxxxxxxxxxx> scsi: zfcp: fix infinite iteration on ERP ready list Alexander Potapenko <glider@xxxxxxxxxx> scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() Jason Yan <yanaijie@xxxxxxxxxx> scsi: libsas: defer ata device eh commands to libata Martin Schwidefsky <schwidefsky@xxxxxxxxxx> s390: use expoline thunks in the BPF JIT Martin Schwidefsky <schwidefsky@xxxxxxxxxx> s390: extend expoline to BC instructions Martin Schwidefsky <schwidefsky@xxxxxxxxxx> s390: move spectre sysfs attribute code Martin Schwidefsky <schwidefsky@xxxxxxxxxx> s390/kernel: use expoline for indirect branches Martin Schwidefsky <schwidefsky@xxxxxxxxxx> s390/ftrace: use expoline for indirect branches Martin Schwidefsky <schwidefsky@xxxxxxxxxx> s390/lib: use expoline for indirect branches Martin Schwidefsky <schwidefsky@xxxxxxxxxx> s390/crc32-vx: use expoline for indirect branches Martin Schwidefsky <schwidefsky@xxxxxxxxxx> s390: move expoline assembler macros to a header Martin Schwidefsky <schwidefsky@xxxxxxxxxx> s390: add assembler macros for CPU alternatives Al Viro <viro@xxxxxxxxxxxxxxxxxx> ext2: fix a block leak hpreg@xxxxxxxxxx <hpreg@xxxxxxxxxx> vmxnet3: use DMA memory barriers where required hpreg@xxxxxxxxxx <hpreg@xxxxxxxxxx> vmxnet3: set the DMA mask before the first DMA map operation Eric Dumazet <edumazet@xxxxxxxxxx> tcp: purge write queue in tcp_connect_init() Eric Dumazet <edumazet@xxxxxxxxxx> sock_diag: fix use-after-free read in __sk_free Willem de Bruijn <willemb@xxxxxxxxxx> packet: in packet_snd start writing at link layer allocation Willem de Bruijn <willemb@xxxxxxxxxx> net: test tailroom before appending to linear skb Tarick Bedeir <tarick@xxxxxxxxxx> net/mlx4_core: Fix error handling in mlx4_init_port_info. ------------- Diffstat: Makefile | 4 +- arch/s390/crypto/crc32be-vx.S | 5 +- arch/s390/crypto/crc32le-vx.S | 4 +- arch/s390/include/asm/alternative-asm.h | 108 +++++++++++++ arch/s390/include/asm/nospec-insn.h | 195 +++++++++++++++++++++++ arch/s390/kernel/Makefile | 1 + arch/s390/kernel/asm-offsets.c | 1 + arch/s390/kernel/base.S | 24 +-- arch/s390/kernel/entry.S | 105 +++--------- arch/s390/kernel/mcount.S | 14 +- arch/s390/kernel/nospec-branch.c | 43 +++-- arch/s390/kernel/nospec-sysfs.c | 21 +++ arch/s390/kernel/reipl.S | 7 +- arch/s390/kernel/swsusp.S | 9 +- arch/s390/lib/mem.S | 9 +- arch/s390/net/bpf_jit.S | 16 +- arch/s390/net/bpf_jit_comp.c | 63 +++++++- arch/x86/kernel/machine_kexec_32.c | 6 +- arch/x86/kernel/machine_kexec_64.c | 4 +- drivers/bluetooth/btusb.c | 6 + drivers/clk/clk.c | 3 + drivers/clk/rockchip/clk-mmc-phase.c | 23 +++ drivers/clk/rockchip/clk-rk3228.c | 2 +- drivers/clk/samsung/clk-exynos3250.c | 4 +- drivers/clk/samsung/clk-exynos5250.c | 8 +- drivers/clk/samsung/clk-exynos5260.c | 2 +- drivers/clk/samsung/clk-exynos5433.c | 12 +- drivers/clk/samsung/clk-exynos7.c | 2 +- drivers/clk/samsung/clk-s3c2410.c | 16 +- drivers/clk/tegra/clk-pll.c | 2 + drivers/crypto/sunxi-ss/sun4i-ss-core.c | 1 + drivers/media/dvb-core/dmxdev.c | 2 +- drivers/media/pci/cx23885/cx23885-cards.c | 4 + drivers/media/pci/cx23885/cx23885-core.c | 10 ++ drivers/media/pci/cx25821/cx25821-core.c | 7 +- drivers/media/platform/s3c-camif/camif-capture.c | 7 +- drivers/media/platform/vivid/vivid-ctrls.c | 2 + drivers/media/usb/em28xx/em28xx.h | 2 +- drivers/media/v4l2-core/videobuf2-vmalloc.c | 2 +- drivers/message/fusion/mptctl.c | 2 + drivers/net/ethernet/mellanox/mlx4/main.c | 4 +- drivers/net/usb/qmi_wwan.c | 4 + drivers/net/vmxnet3/vmxnet3_drv.c | 72 ++++++--- drivers/rtc/hctosys.c | 5 + drivers/rtc/rtc-snvs.c | 15 +- drivers/rtc/rtc-tx4939.c | 6 +- drivers/s390/scsi/zfcp_dbf.c | 23 ++- drivers/s390/scsi/zfcp_ext.h | 5 +- drivers/s390/scsi/zfcp_scsi.c | 14 +- drivers/scsi/aacraid/commsup.c | 4 +- drivers/scsi/aacraid/linit.c | 5 +- drivers/scsi/arm/fas216.c | 2 +- drivers/scsi/bnx2fc/bnx2fc_io.c | 1 + drivers/scsi/libsas/sas_scsi_host.c | 33 ++-- drivers/scsi/lpfc/lpfc_attr.c | 5 + drivers/scsi/lpfc/lpfc_hbadisc.c | 5 +- drivers/scsi/lpfc/lpfc_sli.c | 2 + drivers/scsi/mpt3sas/mpt3sas_scsih.c | 2 +- drivers/scsi/mvsas/mv_94xx.c | 23 +-- drivers/scsi/qla2xxx/qla_isr.c | 6 +- drivers/scsi/qla4xxx/ql4_def.h | 2 + drivers/scsi/qla4xxx/ql4_os.c | 46 ++++++ drivers/scsi/sd.c | 3 +- drivers/scsi/sg.c | 2 +- drivers/scsi/storvsc_drv.c | 2 +- drivers/scsi/sym53c8xx_2/sym_hipd.c | 2 +- drivers/scsi/ufs/ufshcd.c | 2 + drivers/staging/lustre/lustre/include/obd.h | 2 +- drivers/staging/lustre/lustre/lmv/lmv_obd.c | 2 +- drivers/staging/lustre/lustre/osc/osc_cache.c | 2 +- drivers/staging/rtl8192u/r8192U_core.c | 2 + drivers/tty/serial/8250/8250_port.c | 3 +- drivers/tty/serial/arc_uart.c | 5 + drivers/tty/serial/fsl_lpuart.c | 4 + drivers/tty/serial/imx.c | 6 + drivers/tty/serial/mxs-auart.c | 4 + drivers/tty/serial/samsung.c | 4 + drivers/tty/serial/xilinx_uartps.c | 2 +- drivers/usb/class/cdc-acm.c | 9 +- drivers/usb/dwc2/core.h | 2 +- drivers/usb/dwc2/gadget.c | 12 +- drivers/usb/dwc2/hcd.c | 14 +- drivers/usb/dwc3/core.c | 16 +- drivers/usb/dwc3/core.h | 2 + drivers/usb/dwc3/dwc3-omap.c | 16 ++ drivers/usb/gadget/composite.c | 40 +++-- drivers/usb/gadget/function/f_fs.c | 6 +- drivers/usb/gadget/function/f_uac2.c | 2 + drivers/usb/gadget/udc/core.c | 2 +- drivers/usb/gadget/udc/fsl_udc_core.c | 4 +- drivers/usb/gadget/udc/goku_udc.h | 2 +- drivers/usb/host/ohci-hcd.c | 3 +- drivers/usb/host/xhci-mem.c | 2 + fs/ext2/inode.c | 10 -- fs/hfsplus/super.c | 1 + include/linux/usb/composite.h | 3 + include/uapi/linux/nl80211.h | 2 + net/core/sock.c | 2 +- net/ipv4/ip_output.c | 3 +- net/ipv4/tcp_output.c | 7 +- net/ipv6/ip6_output.c | 3 +- net/packet/af_packet.c | 4 +- net/wireless/core.c | 3 + sound/soc/au1x/ac97c.c | 6 +- sound/soc/samsung/i2s.c | 13 +- sound/soc/soc-topology.c | 3 + sound/usb/quirks.c | 29 ++-- 107 files changed, 975 insertions(+), 335 deletions(-)