This is the start of the stable review cycle for the 4.9.183 release. There are 117 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat 22 Jun 2019 05:42:15 PM UTC. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.183-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.183-rc1 Alexander Lochmann <alexander.lochmann@xxxxxxxxxxxxxx> Abort file_remove_privs() for non-reg. files Amit Cohen <amitc@xxxxxxxxxxxx> mlxsw: spectrum: Prevent force of 56G Jason Yan <yanaijie@xxxxxxxxxx> scsi: libsas: delete sas port if expander discover failed Lianbo Jiang <lijiang@xxxxxxxxxx> scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask Varun Prakash <varun@xxxxxxxxxxx> scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx> net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs Paul Mackerras <paulus@xxxxxxxxxx> KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu Paul Mackerras <paulus@xxxxxxxxxx> KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list Randy Dunlap <rdunlap@xxxxxxxxxxxxx> ia64: fix build errors by exporting paddr_to_nid() Thomas Richter <tmricht@xxxxxxxxxxxxx> perf record: Fix s390 missing module symbol and warning for non-root users Shawn Landden <shawn@xxxxxxx> perf data: Fix 'strncat may truncate' build failure with recent gcc Sahitya Tummala <stummala@xxxxxxxxxxxxxx> configfs: Fix use-after-free when accessing sd->s_dentry Yingjoe Chen <yingjoe.chen@xxxxxxxxxxxx> i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr Kees Cook <keescook@xxxxxxxxxxxx> net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() Randy Dunlap <rdunlap@xxxxxxxxxxxxx> gpio: fix gpio-adp5588 build errors Peter Zijlstra <peterz@xxxxxxxxxxxxx> perf/ring_buffer: Add ordering to rb->nest increment Yabin Cui <yabinc@xxxxxxxxxx> perf/ring_buffer: Fix exposing a temporarily decreased data_head Frank van der Linden <fllinden@xxxxxxxxxx> x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor Dan Carpenter <dan.carpenter@xxxxxxxxxx> mISDN: make sure device name is NUL terminated Jeffrin Jose T <jeffrin@xxxxxxxxxxxxxxxxxxx> selftests: netfilter: missing error check when setting up veth interface Stephane Eranian <eranian@xxxxxxxxxx> perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "staging: vc04_services: prevent integer overflow in create_pagelist()" John Paul Adrian Glaubitz <glaubitz@xxxxxxxxxxxxxxxxxxx> sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg Eric Dumazet <edumazet@xxxxxxxxxx> neigh: fix use-after-free read in pneigh_get_next Jeremy Sowden <jeremy@xxxxxxxxxx> lapb: fixed leak of control-blocks. Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero Ivan Vecera <ivecera@xxxxxxxxxx> be2net: Fix number of Rx queues used for flow hashing Eric Dumazet <edumazet@xxxxxxxxxx> ax25: fix inconsistent lock state in ax25_destroy_timer Baruch Siach <baruch@xxxxxxxxxx> rtc: pcf8523: don't return invalid date when battery is low Daniele Palmas <dnlplm@xxxxxxxxx> USB: serial: option: add Telit 0x1260 and 0x1261 compositions Jörgen Storvist <jorgen.storvist@xxxxxxxxx> USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode Chris Packham <chris.packham@xxxxxxxxxxxxxxxxxxx> USB: serial: pl2303: add Allied Telesis VT-Kit3 Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> USB: usb-storage: Add new ID to ums-realtek Marco Zatta <marco@xxxxxxxx> USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. Martin Schiller <ms@xxxxxxxxxx> usb: dwc2: Fix DMA cache alignment issues Murray McAllister <murray.mcallister@xxxxxxxxx> drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() Murray McAllister <murray.mcallister@xxxxxxxxx> drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read Christian Borntraeger <borntraeger@xxxxxxxxxx> KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: x86/pmu: do not mask the value that is written to fixed PMUs Bernd Eckstein <3erndeckstein@xxxxxxxxx> usbnet: ipheth: fix racing condition Kees Cook <keescook@xxxxxxxxxxxx> selftests/timers: Add missing fflush(stdout) calls Colin Ian King <colin.king@xxxxxxxxxxxxx> scsi: bnx2fc: fix incorrect cast to u64 on shift operation Mark Rutland <mark.rutland@xxxxxxx> arm64/mm: Inhibit huge-vmap with ptdump James Smart <jsmart2021@xxxxxxxxx> scsi: lpfc: add check for loss of ndlp when sending RRQ Young Xiao <YangX92@xxxxxxxxxxx> Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var Takashi Iwai <tiwai@xxxxxxx> Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex" Takashi Iwai <tiwai@xxxxxxx> ALSA: seq: Fix race of get-subscription call vs port-delete ioctls Takashi Iwai <tiwai@xxxxxxx> ALSA: seq: Protect in-kernel ioctl calls with mutex Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/uaccess, kcov: Disable stack protector S.j. Wang <shengjiu.wang@xxxxxxx> ASoC: fsl_asrc: Fix the issue about unsupported rate S.j. Wang <shengjiu.wang@xxxxxxx> ASoC: cs42xx8: Add regcache mask dirty Tejun Heo <tj@xxxxxxxxxx> cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() Coly Li <colyli@xxxxxxx> bcache: fix stack corruption by PRECEDING_KEY() Russell King <rmk+kernel@xxxxxxxxxxxxxxx> i2c: acorn: fix i2c warning Hans Verkuil <hans.verkuil@xxxxxxxxx> media: v4l2-ioctl: clear fields in s_parm Jann Horn <jannh@xxxxxxxxxx> ptrace: restore smp_rmb() in __ptrace_may_access() Eric W. Biederman <ebiederm@xxxxxxxxxxxx> signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO Wengang Wang <wen.gang.wang@xxxxxxxxxx> fs/ocfs2: fix race in ocfs2_dentry_attach_lock() Shakeel Butt <shakeelb@xxxxxxxxxx> mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node Hans de Goede <hdegoede@xxxxxxxxxx> libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: oxfw: allow PCM capture for Stanton SCS.1m Takashi Iwai <tiwai@xxxxxxx> ALSA: seq: Cover unsubscribe_port() in list_mutex Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections" Marek Szyprowski <m.szyprowski@xxxxxxxxxxx> ARM: exynos: Fix undefined instruction during Exynos5422 resume Phong Hoang <phong.hoang.wz@xxxxxxxxxxx> pwm: Fix deadlock warning when removing PWM device Krzysztof Kozlowski <krzk@xxxxxxxxxx> ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa Christoph Vogtländer <c.vogtlaender@xxxxxxxxxxxxxxxxxxxxxxxxx> pwm: tiehrpwm: Update shadow register for disabling PWMs Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> dmaengine: idma64: Use actual device for DMA transfers Tony Lindgren <tony@xxxxxxxxxxx> gpio: gpio-omap: add check for off wake capable gpios Kangjie Lu <kjlu@xxxxxxx> PCI: xilinx: Check for __get_free_pages() failure Kangjie Lu <kjlu@xxxxxxx> video: imsttfb: fix potential NULL pointer dereferences Kangjie Lu <kjlu@xxxxxxx> video: hgafb: fix potential NULL pointer dereference Marek Vasut <marek.vasut+renesas@xxxxxxxxx> PCI: rcar: Fix 64bit MSI message address handling Kangjie Lu <kjlu@xxxxxxx> PCI: rcar: Fix a potential NULL pointer dereference Junxiao Chang <junxiao.chang@xxxxxxxxx> platform/x86: intel_pmc_ipc: adding error handling Tyrel Datwyler <tyreld@xxxxxxxxxxxxxxxxxx> PCI: rpadlpar: Fix leaked device_node references in add/remove paths Andrey Smirnov <andrew.smirnov@xxxxxxxxx> ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA Andrey Smirnov <andrew.smirnov@xxxxxxxxx> ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA Andrey Smirnov <andrew.smirnov@xxxxxxxxx> ARM: dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA Andrey Smirnov <andrew.smirnov@xxxxxxxxx> ARM: dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA Andrey Smirnov <andrew.smirnov@xxxxxxxxx> ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA Douglas Anderson <dianders@xxxxxxxxxxxx> clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 Nathan Chancellor <natechancellor@xxxxxxxxx> soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher Enrico Granata <egranata@xxxxxxxxxxxx> platform/chrome: cros_ec_proto: check for NULL transfer function Wenwen Wang <wang6495@xxxxxxx> x86/PCI: Fix PCI IRQ routing table memory leak J. Bruce Fields <bfields@xxxxxxxxxx> nfsd: allow fh_want_write to be called twice Kirill Smelkov <kirr@xxxxxxxxxx> fuse: retrieve: cap requested size to negotiated max_write Jorge Ramirez-Ortiz <jorge.ramirez-ortiz@xxxxxxxxxx> nvmem: core: fix read buffer in place Takashi Iwai <tiwai@xxxxxxx> ALSA: hda - Register irq handler after the chip initialization Lu Baolu <baolu.lu@xxxxxxxxxxxxxxx> iommu/vt-d: Set intel_iommu_gfx_mapped correctly Vladimir Zapolskiy <vz@xxxxxxxxx> watchdog: fix compile time error of pretimeout governors Georg Hofmann <georg@xxxxxxxxxxxxxxx> watchdog: imx2_wdt: Fix set_timeout for big timeout values Maciej Żenczykowski <maze@xxxxxxxxxx> uml: fix a boot splat wrt use of cpu_all_mask YueHaibing <yuehaibing@xxxxxxxxxx> configfs: fix possible use-after-free in configfs_register_group Chao Yu <yuchao0@xxxxxxxxxx> f2fs: fix to do sanity check on valid block count of segment Chao Yu <yuchao0@xxxxxxxxxx> f2fs: fix to clear dirty inode in error path of f2fs_iget() Chao Yu <yuchao0@xxxxxxxxxx> f2fs: fix to avoid panic in do_recover_data() Miroslav Lichvar <mlichvar@xxxxxxxxxx> ntp: Allow TAI-UTC offset to be set to zero Martin Blumenstingl <martin.blumenstingl@xxxxxxxxxxxxxx> pwm: meson: Use the spin-lock only to protect register modifications Josh Poimboeuf <jpoimboe@xxxxxxxxxx> objtool: Don't use ignore flag for fake jumps Matt Redfearn <matt.redfearn@xxxxxxxxxx> drm/bridge: adv7511: Fix low refresh rate selection Stephane Eranian <eranian@xxxxxxxxxx> perf/x86/intel: Allow PEBS multi-entry in watermark mode Tony Lindgren <tony@xxxxxxxxxxx> mfd: twl6040: Fix device init errors for ACCCTL register Binbin Wu <binbin.wu@xxxxxxxxx> mfd: intel-lpss: Set the device in reset state when init Daniel Gomez <dagmcr@xxxxxxxxx> mfd: tps65912-spi: Add missing of table registration Amit Kucheria <amit.kucheria@xxxxxxxxxx> drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER Cyrill Gorcunov <gorcunov@xxxxxxxxx> kernel/sys.c: prctl: fix false positive in validate_prctl_map() Qian Cai <cai@xxxxxx> mm/slab.c: fix an infinite loop in leaks_show() Yue Hu <huyue2@xxxxxxxxxx> mm/cma_debug.c: fix the break condition in cma_maxchunk_get() Yue Hu <huyue2@xxxxxxxxxx> mm/cma.c: fix crash on CMA allocation if bitmap allocation fails Linxu Fang <fanglinxu@xxxxxxxxxx> mem-hotplug: fix node spanned pages when we have a node with only ZONE_MOVABLE Mike Kravetz <mike.kravetz@xxxxxxxxxx> hugetlbfs: on restore reserve error path retain subpool reservation Arnd Bergmann <arnd@xxxxxxxx> ARM: prevent tracing IPI_CPU_BACKTRACE Li Rongqing <lirongqing@xxxxxxxxx> ipc: prevent lockup on alloc_msg and free_msg Christian Brauner <christian@xxxxxxxxxx> sysctl: return -EINVAL if val violates minmax Hou Tao <houtao1@xxxxxxxxxx> fs/fat/file.c: issue flush after the writeback of FAT Kangjie Lu <kjlu@xxxxxxx> rapidio: fix a NULL pointer dereference when create_workqueue() fails ------------- Diffstat: Makefile | 4 +-- arch/arm/boot/dts/exynos5420-arndale-octa.dts | 2 ++ arch/arm/boot/dts/imx6qdl.dtsi | 2 +- arch/arm/boot/dts/imx6sl.dtsi | 2 +- arch/arm/boot/dts/imx6sx.dtsi | 2 +- arch/arm/boot/dts/imx6ul.dtsi | 2 +- arch/arm/boot/dts/imx7s.dtsi | 4 +-- arch/arm/include/asm/hardirq.h | 1 + arch/arm/kernel/smp.c | 6 +++- arch/arm/mach-exynos/suspend.c | 19 ++++++++++++ arch/arm64/mm/mmu.c | 11 +++++-- arch/ia64/mm/numa.c | 1 + arch/powerpc/include/asm/kvm_host.h | 1 + arch/powerpc/kvm/book3s.c | 1 + arch/powerpc/kvm/book3s_hv.c | 9 +----- arch/powerpc/kvm/book3s_rtas.c | 14 ++++----- arch/s390/kvm/kvm-s390.c | 35 +++++++++++++--------- arch/um/kernel/time.c | 2 +- arch/x86/events/intel/core.c | 2 +- arch/x86/events/intel/ds.c | 28 ++++++++--------- arch/x86/kernel/cpu/amd.c | 7 +++-- arch/x86/kvm/pmu_intel.c | 13 ++++---- arch/x86/pci/irq.c | 10 +++++-- drivers/ata/libata-core.c | 9 ++++-- drivers/clk/rockchip/clk-rk3288.c | 11 +++++++ drivers/dma/idma64.c | 6 ++-- drivers/dma/idma64.h | 2 ++ drivers/gpio/Kconfig | 1 + drivers/gpio/gpio-omap.c | 25 +++++++++++----- drivers/gpu/drm/bridge/adv7511/adv7511_drv.c | 6 ++-- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 7 ++++- drivers/i2c/busses/i2c-acorn.c | 1 + drivers/i2c/i2c-dev.c | 1 + drivers/iommu/intel-iommu.c | 7 +++-- drivers/isdn/mISDN/socket.c | 5 ++-- drivers/md/bcache/bset.c | 16 ++++++++-- drivers/md/bcache/bset.h | 34 ++++++++++++--------- drivers/media/v4l2-core/v4l2-ioctl.c | 17 ++++++++++- drivers/mfd/intel-lpss.c | 3 ++ drivers/mfd/tps65912-spi.c | 1 + drivers/mfd/twl6040.c | 13 +++++++- drivers/misc/kgdbts.c | 4 +-- drivers/net/ethernet/dec/tulip/de4x5.c | 1 - drivers/net/ethernet/emulex/benet/be_ethtool.c | 2 +- drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 4 +++ drivers/net/ethernet/renesas/sh_eth.c | 4 +++ drivers/net/usb/ipheth.c | 3 +- drivers/nvmem/core.c | 15 ++++++---- drivers/pci/host/pcie-rcar.c | 10 +++++-- drivers/pci/host/pcie-xilinx.c | 12 ++++++-- drivers/pci/hotplug/rpadlpar_core.c | 4 +++ drivers/platform/chrome/cros_ec_proto.c | 11 +++++++ drivers/platform/x86/intel_pmc_ipc.c | 6 +++- drivers/pwm/core.c | 10 +++---- drivers/pwm/pwm-meson.c | 25 +++++++++++----- drivers/pwm/pwm-tiehrpwm.c | 2 ++ drivers/pwm/sysfs.c | 14 +-------- drivers/rapidio/rio_cm.c | 8 +++++ drivers/rtc/rtc-pcf8523.c | 32 +++++++++++++++----- drivers/scsi/bnx2fc/bnx2fc_hwi.c | 2 +- drivers/scsi/cxgbi/libcxgbi.c | 4 +++ drivers/scsi/libsas/sas_expander.c | 2 ++ drivers/scsi/lpfc/lpfc_els.c | 5 +++- drivers/scsi/smartpqi/smartpqi_init.c | 2 +- drivers/soc/mediatek/mtk-pmic-wrap.c | 2 +- drivers/spi/spi-pxa2xx.c | 7 +---- .../interface/vchiq_arm/vchiq_2835_arm.c | 9 ------ drivers/thermal/qcom/tsens.c | 3 +- drivers/tty/serial/8250/8250_dw.c | 4 +-- drivers/tty/serial/sunhv.c | 2 +- drivers/usb/core/quirks.c | 3 ++ drivers/usb/dwc2/hcd.c | 10 +++++-- drivers/usb/serial/option.c | 6 ++++ drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 3 ++ drivers/usb/storage/unusual_realtek.h | 5 ++++ drivers/video/fbdev/hgafb.c | 2 ++ drivers/video/fbdev/imsttfb.c | 5 ++++ drivers/watchdog/Kconfig | 1 + drivers/watchdog/imx2_wdt.c | 4 ++- fs/configfs/dir.c | 31 +++++++++++-------- fs/f2fs/inode.c | 1 + fs/f2fs/recovery.c | 10 ++++++- fs/f2fs/segment.h | 3 +- fs/fat/file.c | 11 +++++-- fs/fuse/dev.c | 2 +- fs/inode.c | 9 ++++-- fs/nfsd/vfs.h | 5 +++- fs/ocfs2/dcache.c | 12 ++++++++ include/linux/cgroup.h | 10 +++++-- include/linux/pwm.h | 5 ---- include/net/bluetooth/hci_core.h | 3 -- ipc/mqueue.c | 10 +++++-- ipc/msgutil.c | 6 ++++ kernel/Makefile | 1 + kernel/cred.c | 9 ++++++ kernel/events/ring_buffer.c | 33 +++++++++++++++++--- kernel/ptrace.c | 20 +++++++++++-- kernel/sys.c | 2 +- kernel/sysctl.c | 6 ++-- kernel/time/ntp.c | 2 +- mm/cma.c | 4 ++- mm/cma_debug.c | 2 +- mm/hugetlb.c | 21 +++++++++---- mm/list_lru.c | 2 +- mm/page_alloc.c | 6 ++-- mm/slab.c | 6 +++- net/ax25/ax25_route.c | 2 ++ net/bluetooth/hci_conn.c | 8 ----- net/core/neighbour.c | 7 +++++ net/ipv6/ip6_flowlabel.c | 7 +++-- net/lapb/lapb_iface.c | 1 + sound/core/seq/seq_clientmgr.c | 10 ++----- sound/core/seq/seq_ports.c | 15 ++++++---- sound/core/seq/seq_ports.h | 5 ++-- sound/firewire/oxfw/oxfw.c | 3 -- sound/pci/hda/hda_intel.c | 6 ++-- sound/soc/codecs/cs42xx8.c | 1 + sound/soc/fsl/fsl_asrc.c | 4 +-- tools/objtool/check.c | 8 +++-- tools/perf/arch/s390/util/machine.c | 9 ++++-- tools/perf/util/data-convert-bt.c | 2 +- tools/testing/selftests/netfilter/nft_nat.sh | 6 +++- tools/testing/selftests/timers/adjtick.c | 1 + tools/testing/selftests/timers/leapcrash.c | 1 + tools/testing/selftests/timers/mqueue-lat.c | 1 + tools/testing/selftests/timers/nanosleep.c | 1 + tools/testing/selftests/timers/nsleep-lat.c | 1 + tools/testing/selftests/timers/raw_skew.c | 1 + tools/testing/selftests/timers/set-tai.c | 1 + tools/testing/selftests/timers/set-tz.c | 2 ++ tools/testing/selftests/timers/threadtest.c | 1 + tools/testing/selftests/timers/valid-adjtimex.c | 2 ++ 133 files changed, 646 insertions(+), 284 deletions(-)