This is the start of the stable review cycle for the 4.9.209 release. There are 91 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon, 13 Jan 2020 09:46:17 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.209-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.209-rc1 Daniele Palmas <dnlplm@xxxxxxxxx> USB: serial: option: add Telit ME910G1 0x110a composition Johan Hovold <johan@xxxxxxxxxx> USB: core: fix check for duplicate endpoints Eric Dumazet <edumazet@xxxxxxxxxx> vlan: fix memory leak in vlan_dev_set_egress_priority Petr Machata <petrm@xxxxxxxxxxxx> net: sch_prio: When ungrafting, replace with FIFO Eric Dumazet <edumazet@xxxxxxxxxx> vlan: vlan_changelink() should propagate errors Hangbin Liu <liuhangbin@xxxxxxxxx> vxlan: fix tos value before xmit Pengcheng Yang <yangpc@xxxxxxxxxx> tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK Xin Long <lucien.xin@xxxxxxxxx> sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY Eric Dumazet <edumazet@xxxxxxxxxx> pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM Eric Dumazet <edumazet@xxxxxxxxxx> net: usb: lan78xx: fix possible skb leak Chen-Yu Tsai <wens@xxxxxxxx> net: stmmac: dwmac-sunxi: Allow all RGMII modes Eric Dumazet <edumazet@xxxxxxxxxx> macvlan: do not assume mac_header is set in macvlan_broadcast() Chan Shu Tak, Alex <alexchan@xxxxxxxxxxx> llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c) Helge Deller <deller@xxxxxx> parisc: Fix compiler warnings in debug_core.c Yang Yingliang <yangyingliang@xxxxxxxxxx> block: fix memleak when __blk_rq_map_user_iov() is failed Jose Abreu <Jose.Abreu@xxxxxxxxxxxx> net: stmmac: RX buffer size must be 16 byte aligned Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx> perf/x86/intel: Fix PT PMI handling Thomas Hebb <tommyhebb@xxxxxxxxx> kconfig: don't crash on NULL expressions in expr_eq() Andreas Kemnade <andreas@xxxxxxxxxxxx> regulator: rn5t618: fix module aliases Shengjiu Wang <shengjiu.wang@xxxxxxx> ASoC: wm8962: fix lambda value Aditya Pakki <pakki001@xxxxxxx> rfkill: Fix incorrect check to avoid NULL pointer dereference Cristian Birsan <cristian.birsan@xxxxxxxxxxxxx> net: usb: lan78xx: Fix error message format specifier Manish Chopra <manishc@xxxxxxxxxxx> bnx2x: Fix logic to get total no. of PFs per engine Manish Chopra <manishc@xxxxxxxxxxx> bnx2x: Do not handle requests from VFs after parity Mike Rapoport <rppt@xxxxxxxxxxxxx> powerpc: Ensure that swiotlb buffer is allocated from low memory Daniel T. Lee <danieltimlee@xxxxxxxxx> samples: bpf: Replace symbol compare of trace_event Tomi Valkeinen <tomi.valkeinen@xxxxxx> ARM: dts: am437x-gp/epos-evm: fix panel compatible Chuhong Yuan <hslester96@xxxxxxxxx> spi: spi-cavium-thunderx: Add missing pci_release_regions() Phil Sutter <phil@xxxxxx> netfilter: uapi: Avoid undefined left-shift in xt_sctp.h Sudeep Holla <sudeep.holla@xxxxxxx> ARM: vexpress: Set-up shared OPP table instead of individual for each CPU Arvind Sankar <nivedita@xxxxxxxxxxxx> efi/gop: Fix memory leak in __gop_query32/64() Arvind Sankar <nivedita@xxxxxxxxxxxx> efi/gop: Return EFI_SUCCESS if a usable GOP was found Arvind Sankar <nivedita@xxxxxxxxxxxx> efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs Florian Westphal <fw@xxxxxxxxx> netfilter: ctnetlink: netns exit must wait for callbacks Marco Elver <elver@xxxxxxxxxx> locking/spinlock/debug: Fix various data races Aleksandr Yashkin <a.yashkin@xxxxxxxxxxxxxxxxxx> pstore/ram: Write new dumps to start of recycled zones Dmitry Vyukov <dvyukov@xxxxxxxxxx> locking/x86: Remove the unused atomic_inc_short() methd SeongJae Park <sjpark@xxxxxxxxx> xen/blkback: Avoid unmapping unmapped grant pages Heiko Carstens <heiko.carstens@xxxxxxxxxx> s390/smp: fix physical to logical CPU map for SMT Eric Dumazet <edumazet@xxxxxxxxxx> net: add annotations on hh->hh_len lockless accesses Masashi Honma <masashi.honma@xxxxxxxxx> ath9k_htc: Discard undersized packets Masashi Honma <masashi.honma@xxxxxxxxx> ath9k_htc: Modify byte order for an error message David Howells <dhowells@xxxxxxxxxx> rxrpc: Fix possible NULL pointer access in ICMP handling Suzuki K Poulose <suzuki.poulose@xxxxxxx> coresight: etb10: Do not call smp_processor_id from preemptible Suzuki K Poulose <suzuki.poulose@xxxxxxx> coresight: tmc-etf: Do not call smp_processor_id from preemptible Daniel Axtens <dja@xxxxxxxxxx> powerpc/pseries/hvconsole: Fix stack overread via udbg Imre Deak <imre.deak@xxxxxxxxx> drm/mst: Fix MST sideband up-reply failure handling Al Viro <viro@xxxxxxxxxxxxxxxxxx> fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP Leo Yan <leo.yan@xxxxxxxxxx> tty: serial: msm_serial: Fix lockup for sysrq and oops Navid Emamdoost <navid.emamdoost@xxxxxxxxx> media: usb: fix memory leak in af9005_identify_state Stephan Gerhold <stephan@xxxxxxxxxxx> regulator: ab8500: Remove AB8505 USB regulator Colin Ian King <colin.king@xxxxxxxxxxxxx> media: flexcop-usb: ensure -EIO is returned on error condition Navid Emamdoost <navid.emamdoost@xxxxxxxxx> Bluetooth: Fix memory leak in hci_connect_le_scan Dan Carpenter <dan.carpenter@xxxxxxxxxx> Bluetooth: delete a stray unlock Oliver Neukum <oneukum@xxxxxxxx> Bluetooth: btusb: fix PM leak in error case of setup Omar Sandoval <osandov@xxxxxx> xfs: don't check for AG deadlock for realtime files in bunmapi Scott Mayhew <smayhew@xxxxxxxxxx> nfsd4: fix up replay_matches_cache() Leonard Crestez <leonard.crestez@xxxxxxx> PM / devfreq: Check NULL governor in available_governors_show Catalin Marinas <catalin.marinas@xxxxxxx> arm64: Revert support for execute-only user mappings Wen Yang <wenyang@xxxxxxxxxxxxxxxxx> ftrace: Avoid potential division by zero in function profiler Colin Ian King <colin.king@xxxxxxxxxxxxx> ALSA: cs4236: fix error return comparison of an unsigned integer Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> tracing: Have the histogram compare functions convert to u64 first Russell King <rmk+kernel@xxxxxxxxxxxxxxx> gpiolib: fix up emulated open drain outputs Florian Fainelli <f.fainelli@xxxxxxxxx> ata: ahci_brcm: Fix AHCI resources management Florian Fainelli <f.fainelli@xxxxxxxxx> ata: ahci_brcm: Allow optional reset controller to be used Florian Fainelli <f.fainelli@xxxxxxxxx> ata: libahci_platform: Export again ahci_platform_<en/dis>able_phys() Arnd Bergmann <arnd@xxxxxxxx> compat_ioctl: block: handle Persistent Reservations Lukas Wunner <lukas@xxxxxxxxx> dmaengine: Fix access to uninitialized dma_slave_caps Amir Goldstein <amir73il@xxxxxxxxx> locks: print unsigned ino in /proc/locks Shakeel Butt <shakeelb@xxxxxxxxxx> memcg: account security cred as well to kmemcg Chanho Min <chanho.min@xxxxxxx> mm/zsmalloc.c: fix the migrated zspage statistics. Paul Burton <paulburton@xxxxxxxxxx> MIPS: Avoid VDSO ABI breakage due to global register variable Takashi Iwai <tiwai@xxxxxxx> ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code Sasha Levin <sashal@xxxxxxxxxx> Revert "perf report: Add warning when libunwind not compiled in" Daniel Vetter <daniel.vetter@xxxxxxxx> drm: limit to INT_MAX in create_blob ioctl Christian Brauner <christian.brauner@xxxxxxxxxx> taskstats: fix data-race Brian Foster <bfoster@xxxxxxxxxx> xfs: fix mount failure crash on invalid iclog memory access Andy Whitcroft <apw@xxxxxxxxxxxxx> PM / hibernate: memory_bm_find_bit(): Tighten node optimisation Juergen Gross <jgross@xxxxxxxx> xen/balloon: fix ballooned page accounting without hotplug enabled Paul Durrant <pdurrant@xxxxxxxxxx> xen-blkback: prevent premature module unload Parav Pandit <parav@xxxxxxxxxxxx> IB/mlx4: Follow mirror sequence of device add during device removal Thomas Richter <tmricht@xxxxxxxxxxxxx> s390/cpum_sf: Avoid SBD overflow condition in irq handler Thomas Richter <tmricht@xxxxxxxxxxxxx> s390/cpum_sf: Adjust sampling interval to avoid hitting sample limits Zhiqiang Liu <liuzhiqiang26@xxxxxxxxxx> md: raid1: check rdev before reference in raid1_sync_request func EJ Hsu <ejh@xxxxxxxxxx> usb: gadget: fix wrong endpoint desc Jason Yan <yanaijie@xxxxxxxxxx> scsi: libsas: stop discovering if oob mode is disconnected Dan Carpenter <dan.carpenter@xxxxxxxxxx> scsi: iscsi: qla4xxx: fix double free in probe Roman Bolshakov <r.bolshakov@xxxxxxxxx> scsi: qla2xxx: Don't call qlt_async_event twice Bo Wu <wubo40@xxxxxxxxxx> scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func Chuhong Yuan <hslester96@xxxxxxxxx> RDMA/cma: add missed unregister_pernet_subsys in init failure Leonard Crestez <leonard.crestez@xxxxxxx> PM / devfreq: Don't fail devfreq_dev_release if not in list ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/am437x-gp-evm.dts | 2 +- arch/arm/boot/dts/am43x-epos-evm.dts | 2 +- arch/arm/mach-vexpress/spc.c | 12 ++- arch/arm64/include/asm/pgtable-prot.h | 5 +- arch/arm64/include/asm/pgtable.h | 10 +- arch/arm64/mm/fault.c | 2 +- arch/mips/include/asm/thread_info.h | 20 +++- arch/parisc/include/asm/cmpxchg.h | 10 +- arch/powerpc/mm/mem.c | 8 ++ arch/powerpc/platforms/pseries/hvconsole.c | 2 +- arch/s390/kernel/perf_cpum_sf.c | 22 +++-- arch/s390/kernel/smp.c | 80 +++++++++++----- arch/tile/lib/atomic_asm_32.S | 3 +- arch/x86/events/core.c | 9 +- arch/x86/include/asm/atomic.h | 13 --- block/blk-map.c | 2 +- block/compat_ioctl.c | 9 ++ drivers/ata/ahci_brcm.c | 112 ++++++++++++++++------ drivers/ata/libahci_platform.c | 6 +- drivers/block/xen-blkback/blkback.c | 2 + drivers/block/xen-blkback/xenbus.c | 10 ++ drivers/bluetooth/btusb.c | 3 +- drivers/devfreq/devfreq.c | 8 +- drivers/firewire/net.c | 6 +- drivers/firmware/efi/libstub/gop.c | 80 ++++------------ drivers/gpio/gpiolib.c | 8 ++ drivers/gpu/drm/drm_dp_mst_topology.c | 6 +- drivers/gpu/drm/drm_property.c | 2 +- drivers/hwtracing/coresight/coresight-etb10.c | 4 +- drivers/hwtracing/coresight/coresight-tmc-etf.c | 4 +- drivers/infiniband/core/cma.c | 1 + drivers/infiniband/hw/mlx4/main.c | 9 +- drivers/md/raid1.c | 2 +- drivers/media/usb/b2c2/flexcop-usb.c | 2 +- drivers/media/usb/dvb-usb/af9005.c | 5 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 12 ++- drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.h | 1 + drivers/net/ethernet/broadcom/bnx2x/bnx2x_vfpf.c | 12 +++ drivers/net/ethernet/stmicro/stmmac/dwmac-sunxi.c | 2 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 2 +- drivers/net/macvlan.c | 2 +- drivers/net/usb/lan78xx.c | 11 +-- drivers/net/vxlan.c | 4 +- drivers/net/wireless/ath/ath9k/htc_drv_txrx.c | 23 ++++- drivers/regulator/ab8500.c | 17 ---- drivers/regulator/rn5t618-regulator.c | 1 + drivers/scsi/libsas/sas_discover.c | 11 ++- drivers/scsi/lpfc/lpfc_bsg.c | 15 +-- drivers/scsi/qla2xxx/qla_isr.c | 4 - drivers/scsi/qla4xxx/ql4_os.c | 1 - drivers/spi/spi-cavium-thunderx.c | 2 + drivers/tty/hvc/hvc_vio.c | 16 +++- drivers/tty/serial/msm_serial.c | 13 ++- drivers/usb/core/config.c | 70 +++++++++++--- drivers/usb/gadget/function/f_ecm.c | 6 +- drivers/usb/gadget/function/f_rndis.c | 1 + drivers/usb/serial/option.c | 2 + drivers/xen/balloon.c | 3 +- fs/compat_ioctl.c | 3 +- fs/locks.c | 2 +- fs/nfsd/nfs4state.c | 15 ++- fs/pstore/ram.c | 11 +++ fs/xfs/libxfs/xfs_bmap.c | 2 +- fs/xfs/xfs_log.c | 2 + include/linux/ahci_platform.h | 2 + include/linux/dmaengine.h | 5 +- include/linux/if_ether.h | 8 ++ include/linux/regulator/ab8500.h | 1 - include/net/neighbour.h | 2 +- include/uapi/linux/netfilter/xt_sctp.h | 6 +- kernel/cred.c | 6 +- kernel/locking/spinlock_debug.c | 32 +++---- kernel/power/snapshot.c | 9 +- kernel/taskstats.c | 30 +++--- kernel/trace/ftrace.c | 6 +- kernel/trace/tracing_map.c | 4 +- mm/mmap.c | 6 -- mm/zsmalloc.c | 5 + net/8021q/vlan.h | 1 + net/8021q/vlan_dev.c | 3 +- net/8021q/vlan_netlink.c | 19 ++-- net/bluetooth/hci_conn.c | 4 +- net/bluetooth/l2cap_core.c | 4 +- net/core/neighbour.c | 4 +- net/ethernet/eth.c | 7 +- net/ipv4/tcp_input.c | 5 +- net/llc/llc_station.c | 4 +- net/netfilter/nf_conntrack_netlink.c | 3 + net/rfkill/core.c | 7 +- net/rxrpc/peer_event.c | 3 + net/sched/sch_fq.c | 2 +- net/sched/sch_prio.c | 10 +- net/sctp/sm_sideeffect.c | 28 ++++-- samples/bpf/trace_event_user.c | 4 +- scripts/kconfig/expr.c | 7 ++ sound/isa/cs423x/cs4236.c | 3 +- sound/pci/ice1712/ice1724.c | 9 +- sound/soc/codecs/wm8962.c | 4 +- tools/perf/builtin-report.c | 7 -- 101 files changed, 658 insertions(+), 355 deletions(-)