This is the start of the stable review cycle for the 4.9.131 release. There are 94 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu Oct 4 13:24:37 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.131-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.131-rc1 Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx> i2c: i801: Allow ACPI AML access I/O ports not reserved for SMBus Marc Zyngier <marc.zyngier@xxxxxxx> arm/arm64: smccc-1.1: Handle function result as parameters Marc Zyngier <marc.zyngier@xxxxxxx> arm/arm64: smccc-1.1: Make return values unsigned long Rex Zhu <Rex.Zhu@xxxxxxx> drm/amdgpu: Update power state at the end of smu hw_init. Rex Zhu <Rex.Zhu@xxxxxxx> drm/amdgpu: Enable/disable gfx PG feature in rlc safe mode Dan Carpenter <dan.carpenter@xxxxxxxxxx> hwmon: (adt7475) Make adt7475_read_word() return errors Lothar Felten <lothar.felten@xxxxxxxxx> hwmon: (ina2xx) fix sysfs shunt resistor read access Bo Chen <chenbo@xxxxxxx> e1000: ensure to free old tx/rx rings in set_ringparam() Bo Chen <chenbo@xxxxxxx> e1000: check on netif_running() before calling e1000_up() Huazhong Tan <tanhuazhong@xxxxxxxxxx> net: hns: fix skb->truesize underestimation Huazhong Tan <tanhuazhong@xxxxxxxxxx> net: hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES Anson Huang <Anson.Huang@xxxxxxx> thermal: of-thermal: disable passive polling when thermal zone is disabled Tomer Tayar <Tomer.Tayar@xxxxxxxxxx> qed: Wait for MCP halt and resume commands to take place Tomer Tayar <Tomer.Tayar@xxxxxxxxxx> qed: Wait for ready indication before rereading the shmem Theodore Ts'o <tytso@xxxxxxx> ext4: never move the system.data xattr out of the inode body Dave Martin <Dave.Martin@xxxxxxx> arm64: KVM: Tighten guest core register access from userspace Ira Weiny <ira.weiny@xxxxxxxxx> IB/hfi1: Fix SL array bounds check Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx> serial: imx: restore handshaking irq for imx1 Vincent Pelletier <plr.vincent@xxxxxxxxx> scsi: target: iscsi: Use bin2hex instead of a re-implementation Michael J. Ruhl <michael.j.ruhl@xxxxxxxxx> IB/hfi1: Fix context recovery when PBC has an UnsupportedVL Michael J. Ruhl <michael.j.ruhl@xxxxxxxxx> IB/hfi1: Invalid user input can result in crash Bart Van Assche <bvanassche@xxxxxxx> IB/srp: Avoid that sg_reset -d ${srp_device} triggers an infinite loop Aaron Ma <aaron.ma@xxxxxxxxxxxxx> Input: elantech - enable middle button of touchpad on ThinkPad P72 Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: remove LPM management from usb_driver_claim_interface() Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx> Revert "usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt()" Oliver Neukum <oneukum@xxxxxxxx> USB: usbdevfs: restore warning for nonsensical flags Oliver Neukum <oneukum@xxxxxxxx> USB: usbdevfs: sanitize flags more ming_qian <ming_qian@xxxxxxxxxxxxxx> media: uvcvideo: Support realtek's UVC 1.5 device Alexey Dobriyan <adobriyan@xxxxxxxxx> slub: make ->cpu_partial unsigned int Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: handle NULL config in usb_find_alt_setting() Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: fix error handling in usb_driver_claim_interface() Yu Zhao <yuzhao@xxxxxxxxxx> regulator: fix crash caused by null driver data Geert Uytterhoeven <geert+renesas@xxxxxxxxx> spi: rspi: Fix interrupted DMA transfers Geert Uytterhoeven <geert+renesas@xxxxxxxxx> spi: rspi: Fix invalid SPI use during system suspend Hiromitsu Yamasaki <hiromitsu.yamasaki.ym@xxxxxxxxxxx> spi: sh-msiof: Fix handling of write value for SISTR register Gaku Inami <gaku.inami.xw@xxxxxxxxxxxxxx> spi: sh-msiof: Fix invalid SPI use during system suspend Marcel Ziswiler <marcel.ziswiler@xxxxxxxxxxx> spi: tegra20-slink: explicitly enable/disable clock Christophe Leroy <christophe.leroy@xxxxxx> serial: cpm_uart: return immediately from console poll Stefan Agner <stefan@xxxxxxxx> tty: serial: lpuart: avoid leaking struct tty_struct Andy Whitcroft <apw@xxxxxxxxxxxxx> floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl Kevin Hilman <khilman@xxxxxxxxxxxx> ARM: dts: dra7: fix DCAN node addresses Johan Hovold <johan@xxxxxxxxxx> EDAC: Fix memleak in module init error path J. Bruce Fields <bfields@xxxxxxxxxx> nfsd: fix corrupted reply to badly ordered compound Nadav Amit <namit@xxxxxxxxxx> gpio: Fix wrong rounding in gpio-menz127 Jessica Yu <jeyu@xxxxxxxxxx> module: exclude SHN_UNDEF symbols from kallsyms api Liam Girdwood <liam.r.girdwood@xxxxxxxxxxxxxxx> ASoC: dapm: Fix potential DAI widget pointer deref when linking DAIs Johan Hovold <johan@xxxxxxxxxx> EDAC, i7core: Fix memleaks and use-after-free on probe and remove Shivasharan S <shivasharan.srikanteshwara@xxxxxxxxxxxx> scsi: megaraid_sas: Update controller info during resume Zhouyang Jia <jiazhouyang09@xxxxxxxxx> scsi: bnx2i: add error handling for ioremap_nocache Kan Liang <kan.liang@xxxxxxxxxxxxxxx> perf/x86/intel/lbr: Fix incomplete LBR call stack Zhouyang Jia <jiazhouyang09@xxxxxxxxx> HID: hid-ntrig: add error handling for sysfs_create_group Ethan Tuttle <ethan@xxxxxxxxxxxxxxx> ARM: mvebu: declare asm symbols as character arrays in pmsu.c Tony Lindgren <tony@xxxxxxxxxxx> wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout() Dan Carpenter <dan.carpenter@xxxxxxxxxx> rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication() Jernej Skrabec <jernej.skrabec@xxxxxxxx> drm/sun4i: Fix releasing node when enumerating enpoints Brandon Maier <brandon.maier@xxxxxxxxxxxxxxxxxxx> net: phy: xgmiitorgmii: Check phy_driver ready before accessing Ben Greear <greearb@xxxxxxxxxxxxxxx> ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock Brandon Maier <brandon.maier@xxxxxxxxxxxxxxxxxxx> net: phy: xgmiitorgmii: Check read_status results Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge Zhouyang Jia <jiazhouyang09@xxxxxxxxx> media: tm6000: add error handling for dvb_register_adapter Zhouyang Jia <jiazhouyang09@xxxxxxxxx> drivers/tty: add error handling for pcmcia_loop_config Alistair Strachan <astrachan@xxxxxxxxxx> staging: android: ashmem: Fix mmap size validation Javier Martinez Canillas <javierm@xxxxxxxxxx> media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial data Akinobu Mita <akinobu.mita@xxxxxxxxx> media: soc_camera: ov772x: correct setting of banding filter Akinobu Mita <akinobu.mita@xxxxxxxxx> media: s3c-camif: ignore -ENOIOCTLCMD from v4l2_subdev_call for s_power Nicholas Mc Guire <hofrat@xxxxxxxxx> ALSA: snd-aoa: add of_node_put() in error path Vasily Gorbik <gor@xxxxxxxxxxxxx> s390/extmem: fix gcc 8 stringop-overflow warning Thomas Gleixner <tglx@xxxxxxxxxxxxx> alarmtimer: Prevent overflow for relative nanosleep Alexey Kardashevskiy <aik@xxxxxxxxx> powerpc/powernv/ioda2: Reduce upper limit for DMA window size Julia Lawall <Julia.Lawall@xxxxxxx> usb: wusbcore: security: cast sizeof to int for comparison Breno Leitao <leitao@xxxxxxxxxx> scsi: ibmvscsi: Improve strings handling Bart Van Assche <bart.vanassche@xxxxxxx> scsi: klist: Make it safe to use klists in atomic context Bart Van Assche <bart.vanassche@xxxxxxx> scsi: target/iscsi: Make iscsit_ta_authentication() respect the output buffer size Jan Beulich <JBeulich@xxxxxxxx> x86/entry/64: Add two more instruction suffixes Dave Gerlach <d-gerlach@xxxxxx> ARM: hwmod: RTC: Don't assume lock/unlock will be called with irq enabled Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> x86/tsc: Add missing header to tsc_msr.c Alexey Khoroshilov <khoroshilov@xxxxxxxxx> media: fsl-viu: fix error handling in viu_of_probe() Hari Bathini <hbathini@xxxxxxxxxxxxx> powerpc/kdump: Handle crashkernel memory reservation failure Sylwester Nawrocki <s.nawrocki@xxxxxxxxxxx> media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt() Dan Carpenter <dan.carpenter@xxxxxxxxxx> IB/core: type promotion bug in rdma_rw_init_one_mr() Guoqing Jiang <gqjiang@xxxxxxxx> md-cluster: clear another node's suspend_area after the copy is finished Benjamin Tissoires <benjamin.tissoires@xxxxxxxxxx> power: remove possible deadlock when unregistering power_supply Vasily Gorbik <gor@xxxxxxxxxxxxx> s390/mm: correct allocate_pgste proc_handler callback Michael Scott <michael@xxxxxxxxxxxxxxxxxxxxxxx> 6lowpan: iphc: reset mac_header after decompress to fix panic Johan Hovold <johan@xxxxxxxxxx> USB: serial: kobil_sct: fix modem-status error handling Jian-Hong Pan <jian-hong@xxxxxxxxxxxx> Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 Zhen Lei <thunder.leizhen@xxxxxxxxxx> iommu/amd: make sure TLB to be flushed before IOVA freed Sudeep Holla <sudeep.holla@xxxxxxx> power: vexpress: fix corruption in notifier registration Anton Vasilyev <vasilyev@xxxxxxxxx> uwb: hwa-rc: fix memory leak at probe Colin Ian King <colin.king@xxxxxxxxxxxxx> staging: rts5208: fix missing error check on call to rtsx_write_register Dan Williams <dan.j.williams@xxxxxxxxx> x86/numa_emulation: Fix emulated-to-physical node mapping Dan Carpenter <dan.carpenter@xxxxxxxxxx> vmci: type promotion bug in qp_host_get_user_memory() Matt Ranostay <matt.ranostay@xxxxxxxxxxxx> tsl2550: fix lux1_input error in low light Stafford Horne <shorne@xxxxxxxxx> crypto: skcipher - Fix -Wstringop-truncation warnings ------------- Diffstat: Documentation/hwmon/ina2xx | 2 +- Makefile | 4 +- arch/arm/boot/dts/dra7.dtsi | 4 +- arch/arm/mach-mvebu/pmsu.c | 6 +- arch/arm/mach-omap2/omap_hwmod_reset.c | 12 ++- arch/arm64/kvm/guest.c | 45 ++++++++++ arch/powerpc/kernel/machine_kexec.c | 7 +- arch/powerpc/platforms/powernv/pci-ioda.c | 2 +- arch/s390/mm/extmem.c | 4 +- arch/s390/mm/pgalloc.c | 2 +- arch/x86/entry/entry_64.S | 4 +- arch/x86/events/intel/lbr.c | 32 ++++++-- arch/x86/events/perf_event.h | 1 + arch/x86/kernel/tsc_msr.c | 1 + arch/x86/mm/numa_emulation.c | 2 +- crypto/ablkcipher.c | 2 + crypto/blkcipher.c | 1 + drivers/block/floppy.c | 3 + drivers/bluetooth/btusb.c | 1 + drivers/edac/edac_mc_sysfs.c | 6 +- drivers/edac/i7core_edac.c | 22 +++-- drivers/gpio/gpio-menz127.c | 4 +- drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c | 11 ++- drivers/gpu/drm/amd/amdgpu/kv_dpm.c | 4 +- drivers/gpu/drm/amd/amdgpu/si_dpm.c | 3 +- drivers/gpu/drm/sun4i/sun4i_drv.c | 3 +- drivers/hid/hid-ntrig.c | 2 + drivers/hwmon/adt7475.c | 14 ++-- drivers/hwmon/ina2xx.c | 13 ++- drivers/i2c/busses/i2c-i801.c | 9 +- drivers/infiniband/core/rw.c | 2 +- drivers/infiniband/hw/hfi1/pio.c | 9 +- drivers/infiniband/hw/hfi1/user_sdma.c | 2 +- drivers/infiniband/hw/hfi1/verbs.c | 8 +- drivers/infiniband/ulp/srp/ib_srp.c | 6 +- drivers/input/mouse/elantech.c | 2 + drivers/iommu/amd_iommu.c | 2 +- drivers/md/md-cluster.c | 19 +++-- drivers/media/i2c/soc_camera/ov772x.c | 2 +- drivers/media/platform/exynos4-is/fimc-isp-video.c | 11 ++- drivers/media/platform/fsl-viu.c | 38 +++++---- drivers/media/platform/omap3isp/isp.c | 2 +- drivers/media/platform/s3c-camif/camif-capture.c | 2 + drivers/media/usb/tm6000/tm6000-dvb.c | 5 ++ drivers/media/usb/uvc/uvc_video.c | 24 ++++-- drivers/misc/tsl2550.c | 2 +- drivers/misc/vmw_vmci/vmci_queue_pair.c | 4 +- drivers/net/ethernet/hisilicon/hns/hnae.h | 6 +- drivers/net/ethernet/hisilicon/hns/hns_enet.c | 2 +- drivers/net/ethernet/intel/e1000/e1000_ethtool.c | 7 +- drivers/net/ethernet/qlogic/qed/qed_mcp.c | 96 ++++++++++++++++++---- drivers/net/ethernet/qlogic/qed/qed_reg_addr.h | 1 + drivers/net/phy/xilinx_gmii2rgmii.c | 10 ++- drivers/net/wireless/ath/ath10k/htt_rx.c | 5 +- drivers/net/wireless/rndis_wlan.c | 2 + drivers/net/wireless/ti/wlcore/cmd.c | 6 ++ drivers/power/reset/vexpress-poweroff.c | 12 ++- drivers/power/supply/power_supply_core.c | 11 ++- drivers/regulator/core.c | 2 +- drivers/scsi/bnx2i/bnx2i_hwi.c | 2 + drivers/scsi/ibmvscsi/ibmvscsi.c | 4 +- drivers/scsi/megaraid/megaraid_sas_base.c | 3 + drivers/spi/spi-rspi.c | 34 +++++++- drivers/spi/spi-sh-msiof.c | 28 ++++++- drivers/spi/spi-tegra20-slink.c | 31 +++++-- drivers/staging/android/ashmem.c | 6 ++ drivers/staging/rts5208/sd.c | 2 +- drivers/target/iscsi/iscsi_target_auth.c | 15 +--- drivers/target/iscsi/iscsi_target_tpg.c | 3 +- drivers/thermal/of-thermal.c | 7 +- drivers/tty/serial/8250/serial_cs.c | 6 +- drivers/tty/serial/cpm_uart/cpm_uart_core.c | 10 ++- drivers/tty/serial/fsl_lpuart.c | 3 +- drivers/tty/serial/imx.c | 8 ++ drivers/usb/class/cdc-wdm.c | 2 +- drivers/usb/core/devio.c | 24 +++++- drivers/usb/core/driver.c | 28 +++---- drivers/usb/core/usb.c | 2 + drivers/usb/serial/kobil_sct.c | 12 ++- drivers/usb/wusbcore/security.c | 2 +- drivers/uwb/hwa-rc.c | 1 + fs/ext4/xattr.c | 5 ++ fs/nfsd/nfs4proc.c | 1 + include/linux/arm-smccc.h | 38 +++++---- include/linux/platform_data/ina2xx.h | 2 +- include/linux/power_supply.h | 1 + include/linux/slub_def.h | 3 +- kernel/module.c | 6 +- kernel/time/alarmtimer.c | 3 +- lib/klist.c | 10 ++- mm/slub.c | 6 +- net/6lowpan/iphc.c | 1 + sound/aoa/core/gpio-feature.c | 4 +- sound/pci/hda/hda_intel.c | 3 +- sound/soc/soc-dapm.c | 7 ++ 95 files changed, 630 insertions(+), 219 deletions(-)