This is the start of the stable review cycle for the 4.9.220 release. There are 125 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 24 Apr 2020 09:48:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.220-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.220-rc1 Samuel Neves <sneves@xxxxxxxxx> x86/vdso: Fix lsl operand order Evalds Iodzevics <evalds.iodzevics@xxxxxxxxx> x86/microcode/intel: replace sync_core() with native_cpuid_reg(eax) Borislav Petkov <bp@xxxxxxx> x86/CPU: Add native CPUID variants returning a single datum Wen Yang <wenyang@xxxxxxxxxxxxxxxxx> mtd: phram: fix a double free issue in error path Dan Carpenter <dan.carpenter@xxxxxxxxxx> mtd: lpddr: Fix a double free in probe() Paul E. McKenney <paulmck@xxxxxxxxxx> locktorture: Print ratio of acquisitions, not failures Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx> tty: evh_bytechan: Fix out of bounds accesses Dan Carpenter <dan.carpenter@xxxxxxxxxx> fbdev: potential information leak in do_fb_ioctl() Adrian Huang <ahuang12@xxxxxxxxxx> iommu/amd: Fix the configuration of GCR3 table root pointer Dan Carpenter <dan.carpenter@xxxxxxxxxx> libnvdimm: Out of bounds read in __nd_ioctl() Jan Kara <jack@xxxxxxx> ext2: fix debug reference to ext2_xattr_cache Randy Dunlap <rdunlap@xxxxxxxxxxxxx> ext2: fix empty body warnings when -Wextra is used Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFS: Fix memory leaks in nfs_pageio_stop_mirroring() David Hildenbrand <david@xxxxxxxxxx> KVM: s390: vsie: Fix possible race when shadowing region 3 tables Vegard Nossum <vegard.nossum@xxxxxxxxxx> compiler.h: fix error in BUILD_BUG_ON() reporting Qian Cai <cai@xxxxxx> percpu_counter: fix a data race at vm_committed_as Eric Sandeen <sandeen@xxxxxxxxxx> ext4: do not commit super on read-only bdev Nathan Chancellor <natechancellor@xxxxxxxxx> powerpc/maple: Fix declaration made after definition Alexander Gordeev <agordeev@xxxxxxxxxxxxx> s390/cpuinfo: fix wrong output when CPU0 is offline Misono Tomohiro <misono.tomohiro@xxxxxxxxxxxxxx> NFS: direct.c: Fix memory leak of dreq when nfs_get_lock_context fails Sowjanya Komatineni <skomatineni@xxxxxxxxxx> clk: tegra: Fix Tegra PMC clock out parents Dmitry Osipenko <digetx@xxxxxxxxx> power: supply: bq27xxx_battery: Silence deferred-probe error Claudiu Beznea <claudiu.beznea@xxxxxxxxxxxxx> clk: at91: usb: continue if clk_hw_round_rate() return zero Frank Rowand <frank.rowand@xxxxxxxx> of: unittest: kmemleak in of_unittest_platform_populate() Arnd Bergmann <arnd@xxxxxxxx> arm64: cpu_errata: include required headers Rob Herring <robh@xxxxxxxxxx> of: fix missing kobject init for !SYSFS && OF_DYNAMIC config Chris Lew <clew@xxxxxxxxxxxxxx> soc: qcom: smem: Use le32_to_cpu for comparison Lior David <qca_liord@xxxxxxxxxxxxxxxx> wil6210: fix length check in __wmi_send Mohit Aggarwal <maggarwa@xxxxxxxxxxxxxx> rtc: pm8xxx: Fix issue in RTC write path Dedy Lansky <dlansky@xxxxxxxxxxxxxx> wil6210: rate limit wil_rx_refill error Subhash Jadavani <subhashj@xxxxxxxxxxxxxx> scsi: ufs: ufs-qcom: remove broken hci version quirk Venkat Gopalakrishnan <venkatg@xxxxxxxxxxxxxx> scsi: ufs: make sure all interrupts are processed Dedy Lansky <dlansky@xxxxxxxxxxxxxx> wil6210: fix temperature debugfs Hamad Kadmany <hkadmany@xxxxxxxxxxxxxx> wil6210: increase firmware ready timeout Timur Tabi <timur@xxxxxxxxxxxxxx> Revert "gpio: set up initial state from .get_direction()" Joe Moriarty <joe.moriarty@xxxxxxxxxx> drm: NULL pointer dereference [null-pointer-deref] (CWE 476) problem Nathan Chancellor <natechancellor@xxxxxxxxx> video: fbdev: sis: Remove unnecessary parentheses and commented code Frank Rowand <frank.rowand@xxxxxxxx> of: unittest: kmemleak on changeset destroy Takashi Iwai <tiwai@xxxxxxx> ALSA: hda: Don't release card at firmware loading error Li Bin <huawei.libin@xxxxxxxxxx> scsi: sg: add sg_remove_request in sg_common_write Josh Poimboeuf <jpoimboe@xxxxxxxxxx> objtool: Fix switch table detection in .text.unlikely Xiao Yang <yangx.jy@xxxxxxxxxxxxxx> tracing: Fix the race between registering 'snapshot' event trigger and triggering 'snapshot' operation Maurizio Lombardi <mlombard@xxxxxxxxxx> scsi: target: fix hang when multiple threads try to destroy the same iscsi session Maurizio Lombardi <mlombard@xxxxxxxxxx> scsi: target: remove boilerplate code Jim Mattson <jmattson@xxxxxxxxxx> kvm: x86: Host feature SSBD doesn't imply guest feature SPEC_CTRL_SSBD Goldwyn Rodrigues <rgoldwyn@xxxxxxxx> dm flakey: check for null arg_name in parse_features() Jan Kara <jack@xxxxxxx> ext4: do not zeroout extents beyond i_disksize Tuomas Tynkkynen <tuomas.tynkkynen@xxxxxx> mac80211_hwsim: Use kstrndup() in place of kasprintf() Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: check commit root generation in should_ignore_root Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Don't override ignore_ctl_error value from the map Colin Ian King <colin.king@xxxxxxxxxxxxx> ASoC: Intel: mrfld: return error codes when an error occurs Colin Ian King <colin.king@xxxxxxxxxxxxx> ASoC: Intel: mrfld: fix incorrect check on p->sink Josh Triplett <josh@xxxxxxxxxxxxxxxx> ext4: fix incorrect inodes per group in error message Josh Triplett <josh@xxxxxxxxxxxxxxxx> ext4: fix incorrect group count in ext4_fill_super error message zhangyi (F) <yi.zhang@xxxxxxxxxx> jbd2: improve comments about freeing data buffers whose page mapping is NULL Can Guo <cang@xxxxxxxxxxxxxx> scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic Tim Stallard <code@xxxxxxxxxxxxxxxxx> net: ipv6: do not consider routes via gateways for anycast address check Wang Wenhu <wenhu.wang@xxxxxxxx> net: qrtr: send msgs from local of same id as broadcast Taras Chornyi <taras.chornyi@xxxxxxxxxxx> net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin Taehee Yoo <ap420073@xxxxxxxxx> hsr: check protocol version in hsr_newlink() Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> mfd: dln2: Fix sanity checking for endpoints Nathan Chancellor <natechancellor@xxxxxxxxx> misc: echo: Remove unnecessary parentheses and simplify check for zero Laurentiu Tudor <laurentiu.tudor@xxxxxxx> powerpc/fsl_booke: Avoid creating duplicate tlb1 entry Wen Yang <wenyang@xxxxxxxxxxxxxxxxx> ipmi: fix hung processes in __get_guid() Chris Wilson <chris@xxxxxxxxxxxxxxxxxx> drm: Remove PageReserved manipulation from drm_pci_alloc Lyude Paul <lyude@xxxxxxxxxx> drm/dp_mst: Fix clearing payload state on topology disable Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix crash during unmount due to race with delayed inode workers Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/64/tm: Don't let userspace set regs->trap via sigreturn Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set Simon Gander <simon@xxxxxxxxxx> hfsplus: fix crash and filesystem corruption when deleting files Oliver O'Halloran <oohall@xxxxxxxxx> cpufreq: powernv: Fix use-after-free Eric Biggers <ebiggers@xxxxxxxxxx> kmod: make request_module() return an error when autoloading is disabled Hans de Goede <hdegoede@xxxxxxxxxx> Input: i8042 - add Acer Aspire 5738z to nomux list Michael Mueller <mimu@xxxxxxxxxxxxx> s390/diag: fix display of diagnose call statistics Changwei Ge <chge@xxxxxxxxxxxxxxxxx> ocfs2: no need try to truncate file beyond i_size Qian Cai <cai@xxxxxx> ext4: fix a data race at inode->i_blocks Nathan Chancellor <natechancellor@xxxxxxxxx> rtc: omap: Use define directive for PIN_CONFIG_ACTIVE_HIGH Fredrik Strupe <fredrik@xxxxxxxxxx> arm64: armv8_deprecated: Fix undef_hook mask for thumb setend Steffen Maier <maier@xxxxxxxxxxxxx> scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point Shetty, Harshini X (EXT-Sony Mobile) <Harshini.X.Shetty@xxxxxxxx> dm verity fec: fix memory leak in verity_fec_dtr Alexander Duyck <alexander.h.duyck@xxxxxxxxxxxxxxx> mm: Use fixed constant in page_frag_alloc instead of size + 1 Anssi Hannula <anssi.hannula@xxxxxxxxxx> tools: gpio: Fix out-of-tree build regression Zhenzhong Duan <zhenzhong.duan@xxxxxxxxxx> x86/speculation: Remove redundant arch_smt_update() invocation Takashi Iwai <tiwai@xxxxxxx> ALSA: hda: Initialize power_state field properly Rosioru Dragos <dragos.rosioru@xxxxxxx> crypto: mxs-dcp - fix scatterlist linearization for hash Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: drop block from cache on error in relocation Vitaly Kuznetsov <vkuznets@xxxxxxxxxx> KVM: VMX: fix crash cleanup when KVM wasn't used Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: VMX: Always VMCLEAR in-use VMCSes during crash with kexec support Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: x86: Allocate new rmap and large page tracking when moving memslot David Hildenbrand <david@xxxxxxxxxx> KVM: s390: vsie: Fix delivery of addressing exceptions David Hildenbrand <david@xxxxxxxxxx> KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/entry/32: Add missing ASM_CLAC to general_protection entry Eric W. Biederman <ebiederm@xxxxxxxxxxxx> signal: Extend exec_id to 64bits Remi Pommarel <repk@xxxxxxxxxxxx> ath9k: Handle txpower changes even when TPC is disabled Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> MIPS: OCTEON: irq: Fix potential NULL pointer dereference Sungbo Eo <mans0n@xxxxxxxxxx> irqchip/versatile-fpga: Apply clear-mask earlier Yang Xu <xuyang2018.jy@xxxxxxxxxxxxxx> KEYS: reaching the keys quotas correctly Martin Blumenstingl <martin.blumenstingl@xxxxxxxxxxxxxx> thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n Jan Engelhardt <jengelh@xxxxxxx> acpi/x86: ignore unspecified bit positions in the ACPI global lock field Benoit Parrot <bparrot@xxxxxx> media: ti-vpe: cal: fix disable_irqs to only the intended target Takashi Iwai <tiwai@xxxxxxx> ALSA: pcm: oss: Fix regression by buffer overflow fix Takashi Iwai <tiwai@xxxxxxx> ALSA: ice1724: Fix invalid access for enumerated ctl items Takashi Iwai <tiwai@xxxxxxx> ALSA: hda: Fix potential access overflow in beep helper Takashi Iwai <tiwai@xxxxxxx> ALSA: hda: Add driver blacklist Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Add mixer workaround for TRX40 and co Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: gadget: composite: Inform controller driver of self-powered Sriharsha Allenki <sallenki@xxxxxxxxxxxxxx> usb: gadget: f_fs: Fix use after free issue as part of queue failure 이경택 <gt82.lee@xxxxxxxxxxx> ASoC: topology: use name_prefix for new kcontrol 이경택 <gt82.lee@xxxxxxxxxxx> ASoC: dpcm: allow start or stop during pause for backend 이경택 <gt82.lee@xxxxxxxxxxx> ASoC: dapm: connect virtual mux with default value 이경택 <gt82.lee@xxxxxxxxxxx> ASoC: fix regwmask YueHaibing <yuehaibing@xxxxxxxxxx> misc: rtsx: set correct pcr_ops for rts522A Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: track reloc roots based on their commit root bytenr Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: remove a BUG_ON() from merge_reloc_roots() Boqun Feng <boqun.feng@xxxxxxxxx> locking/lockdep: Avoid recursion in lockdep_count_{for,back}ward_deps() Arvind Sankar <nivedita@xxxxxxxxxxxx> x86/boot: Use unsigned comparison for addresses Bob Peterson <rpeterso@xxxxxxxxxx> gfs2: Don't demote a glock until its revokes are written John Garry <john.garry@xxxxxxxxxx> libata: Remove extra scsi_host_put() in ata_scsi_add_hosts() Andy Lutomirski <luto@xxxxxxxxxx> selftests/x86/ptrace_syscall_32: Fix no-vDSO segfault Michael Wang <yun.wang@xxxxxxxxxxxxxxxxx> sched: Avoid scale real weight down to zero Sungbo Eo <mans0n@xxxxxxxxxx> irqchip/versatile-fpga: Handle chained IRQs properly Alain Volmat <avolmat@xxxxxx> i2c: st: fix missing struct parameter description Xu Wang <vulab@xxxxxxxxxxx> qlcnic: Fix bad kzalloc null test Zheng Wei <wei.zheng@xxxxxxxx> net: vxge: fix wrong __VA_ARGS__ usage Ondrej Jirman <megous@xxxxxxxxxx> bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads ------------- Diffstat: Makefile | 4 +- arch/arm64/kernel/armv8_deprecated.c | 2 +- arch/arm64/kernel/cpu_errata.c | 2 + arch/mips/cavium-octeon/octeon-irq.c | 3 + arch/powerpc/kernel/signal_64.c | 4 +- arch/powerpc/mm/tlb_nohash_low.S | 12 +++- arch/powerpc/platforms/maple/setup.c | 34 +++++----- arch/s390/kernel/diag.c | 2 +- arch/s390/kernel/processor.c | 5 +- arch/s390/kvm/vsie.c | 1 + arch/s390/mm/gmap.c | 7 +- arch/x86/boot/compressed/head_32.S | 2 +- arch/x86/boot/compressed/head_64.S | 4 +- arch/x86/entry/entry_32.S | 1 + arch/x86/include/asm/microcode_intel.h | 2 +- arch/x86/include/asm/processor.h | 18 +++++ arch/x86/include/asm/vgtod.h | 2 +- arch/x86/kernel/acpi/boot.c | 2 +- arch/x86/kvm/cpuid.c | 3 +- arch/x86/kvm/vmx.c | 79 +++++++--------------- arch/x86/kvm/x86.c | 11 +++ drivers/ata/libata-pmp.c | 1 + drivers/ata/libata-scsi.c | 9 +-- drivers/bus/sunxi-rsb.c | 2 +- drivers/char/ipmi/ipmi_msghandler.c | 4 +- drivers/clk/at91/clk-usb.c | 3 + drivers/clk/tegra/clk-tegra-pmc.c | 12 ++-- drivers/cpufreq/powernv-cpufreq.c | 6 ++ drivers/crypto/mxs-dcp.c | 58 ++++++++-------- drivers/gpio/gpiolib.c | 31 ++------- drivers/gpu/drm/drm_dp_mst_topology.c | 15 ++-- drivers/gpu/drm/drm_pci.c | 25 +------ drivers/i2c/busses/i2c-st.c | 1 + drivers/input/serio/i8042-x86ia64io.h | 11 +++ drivers/iommu/amd_iommu_types.h | 2 +- drivers/irqchip/irq-versatile-fpga.c | 18 +++-- drivers/md/dm-flakey.c | 5 ++ drivers/md/dm-verity-fec.c | 1 + drivers/media/platform/ti-vpe/cal.c | 16 ++--- drivers/mfd/dln2.c | 9 ++- drivers/mfd/rts5227.c | 1 + drivers/misc/echo/echo.c | 2 +- drivers/mtd/devices/phram.c | 15 ++-- drivers/mtd/lpddr/lpddr_cmds.c | 1 - drivers/net/ethernet/neterion/vxge/vxge-config.h | 2 +- drivers/net/ethernet/neterion/vxge/vxge-main.h | 14 ++-- .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 2 +- drivers/net/wireless/ath/ath9k/main.c | 3 + drivers/net/wireless/ath/wil6210/debugfs.c | 7 +- drivers/net/wireless/ath/wil6210/interrupt.c | 22 +++++- drivers/net/wireless/ath/wil6210/main.c | 2 +- drivers/net/wireless/ath/wil6210/txrx.c | 4 +- drivers/net/wireless/ath/wil6210/wmi.c | 2 +- drivers/net/wireless/mac80211_hwsim.c | 12 ++-- drivers/nvdimm/bus.c | 6 +- drivers/of/base.c | 3 - drivers/of/unittest.c | 11 ++- drivers/power/supply/bq27xxx_battery.c | 5 +- drivers/rtc/rtc-omap.c | 4 +- drivers/rtc/rtc-pm8xxx.c | 49 +++++++++++--- drivers/s390/scsi/zfcp_erp.c | 2 +- drivers/scsi/sg.c | 4 +- drivers/scsi/ufs/ufs-qcom.c | 2 +- drivers/scsi/ufs/ufshcd.c | 32 ++++++--- drivers/soc/qcom/smem.c | 2 +- drivers/target/iscsi/iscsi_target.c | 79 +++++++--------------- drivers/target/iscsi/iscsi_target.h | 1 - drivers/target/iscsi/iscsi_target_configfs.c | 5 +- drivers/target/iscsi/iscsi_target_login.c | 5 +- drivers/tty/ehv_bytechan.c | 21 +++++- drivers/usb/gadget/composite.c | 9 +++ drivers/usb/gadget/function/f_fs.c | 1 + drivers/video/fbdev/core/fbmem.c | 2 +- drivers/video/fbdev/sis/init301.c | 4 +- fs/btrfs/async-thread.c | 8 +++ fs/btrfs/async-thread.h | 2 + fs/btrfs/disk-io.c | 13 ++++ fs/btrfs/relocation.c | 39 +++++++---- fs/exec.c | 2 +- fs/ext2/xattr.c | 8 +-- fs/ext4/extents.c | 8 +-- fs/ext4/inode.c | 2 +- fs/ext4/super.c | 9 +-- fs/gfs2/glock.c | 3 + fs/hfsplus/attributes.c | 4 ++ fs/jbd2/commit.c | 7 +- fs/nfs/direct.c | 2 + fs/nfs/pagelist.c | 17 +++-- fs/ocfs2/alloc.c | 4 ++ include/linux/compiler.h | 2 +- include/linux/devfreq_cooling.h | 2 +- include/linux/percpu_counter.h | 4 +- include/linux/sched.h | 4 +- include/net/ip6_route.h | 1 + include/target/iscsi/iscsi_target_core.h | 2 +- kernel/cpu.c | 5 +- kernel/kmod.c | 4 +- kernel/locking/lockdep.c | 4 ++ kernel/locking/locktorture.c | 8 +-- kernel/sched/sched.h | 8 ++- kernel/signal.c | 2 +- kernel/trace/trace_events_trigger.c | 10 +-- mm/page_alloc.c | 8 +-- net/hsr/hsr_netlink.c | 9 ++- net/ipv4/devinet.c | 13 ++-- net/qrtr/qrtr.c | 7 +- security/keys/key.c | 2 +- security/keys/keyctl.c | 4 +- sound/core/oss/pcm_plugin.c | 32 ++++++--- sound/pci/hda/hda_beep.c | 6 +- sound/pci/hda/hda_codec.c | 1 + sound/pci/hda/hda_intel.c | 35 ++++++---- sound/pci/ice1712/prodigy_hifi.c | 4 +- sound/soc/intel/atom/sst-atom-controls.c | 2 +- sound/soc/intel/atom/sst/sst_pci.c | 2 +- sound/soc/soc-dapm.c | 8 ++- sound/soc/soc-ops.c | 4 +- sound/soc/soc-pcm.c | 6 +- sound/soc/soc-topology.c | 2 +- sound/usb/mixer.c | 2 +- sound/usb/mixer_maps.c | 28 ++++++++ tools/gpio/Makefile | 2 +- tools/objtool/check.c | 5 +- tools/testing/selftests/x86/ptrace_syscall.c | 8 ++- 124 files changed, 685 insertions(+), 454 deletions(-)
