This is the start of the stable review cycle for the 4.9.228 release. There are 128 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 21 Jun 2020 14:15:50 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.228-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.228-rc1 Adrian Hunter <adrian.hunter@xxxxxxxxx> perf symbols: Fix debuginfo search for Ubuntu Masami Hiramatsu <mhiramat@xxxxxxxxxx> perf probe: Do not show the skipped events H. Nikolaus Schaller <hns@xxxxxxxxxxxxx> w1: omap-hdq: cleanup to add missing newline for some dev_dbg Miquel Raynal <miquel.raynal@xxxxxxxxxxx> mtd: rawnand: pasemi: Fix the probe error path Álvaro Fernández Rojas <noltari@xxxxxxxxx> mtd: rawnand: brcmnand: fix hamming oob layout NeilBrown <neilb@xxxxxxx> sunrpc: clean up properly in gss_mech_unregister() NeilBrown <neilb@xxxxxxx> sunrpc: svcauth_gss_register_pseudoflavor must reject duplicate registrations. Masahiro Yamada <masahiroy@xxxxxxxxxx> kbuild: force to build vmlinux if CONFIG_MODVERSION=y Michael Ellerman <mpe@xxxxxxxxxxxxxx> drivers/macintosh: Fix memleak in windfarm_pm112 driver Dmitry Osipenko <digetx@xxxxxxxxx> ARM: tegra: Correct PL310 Auxiliary Control Register initialization Douglas Anderson <dianders@xxxxxxxxxxxx> kernel/cpu_pm: Fix uninitted local in cpu_pm Al Viro <viro@xxxxxxxxxxxxxxxxxx> sparc64: fix misuses of access_process_vm() in genregs32_[sg]et() Al Viro <viro@xxxxxxxxxxxxxxxxxx> sparc32: fix register window handling in genregs32_[gs]et() Jonathan Bakker <xc-racer2@xxxxxxx> pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs Anders Roxell <anders.roxell@xxxxxxxxxx> power: vexpress: add suppress_bind_attrs to true Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> igb: Report speed and duplex as unknown when device is runtime suspended Larry Finger <Larry.Finger@xxxxxxxxxxxx> b43_legacy: Fix connection problem with WPA3 Larry Finger <Larry.Finger@xxxxxxxxxxxx> b43: Fix connection problem with WPA3 Larry Finger <Larry.Finger@xxxxxxxxxxxx> b43legacy: Fix case where channel status is corrupted Chuhong Yuan <hslester96@xxxxxxxxx> media: go7007: fix a miss of snd_card_free Christian Lamparter <chunkeey@xxxxxxxxx> carl9170: remove P2P_GO support Punit Agrawal <punit1.agrawal@xxxxxxxxxxxxx> e1000e: Relax condition to trigger reset for ME workaround Ashok Raj <ashok.raj@xxxxxxxxx> PCI: Program MPS for RCiEP devices Giuliano Procida <gprocida@xxxxxxxxxx> blk-mq: move blk_mq_update_nr_hw_queues synchronize_rcu call Omar Sandoval <osandov@xxxxxx> btrfs: fix error handling when submitting direct I/O bio Eric Biggers <ebiggers@xxxxxxxxxx> ext4: fix race between ext4_sync_parent() and rename() Harshad Shirwadkar <harshadshirwadkar@xxxxxxxxx> ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max Roberto Sassu <roberto.sassu@xxxxxxxxxx> evm: Fix possible memory leak in evm_calc_hmac_or_hash() Roberto Sassu <roberto.sassu@xxxxxxxxxx> ima: Directly assign the ima_default_policy pointer to ima_rules Krzysztof Struczynski <krzysztof.struczynski@xxxxxxxxxx> ima: Fix ima digest hash table key calculation Andrea Arcangeli <aarcange@xxxxxxxxxx> mm: thp: make the THP mapcount atomic against __split_huge_pmd_locked() Marcos Paulo de Souza <mpdesouza@xxxxxxxx> btrfs: send: emit file capabilities after chown Qiushi Wu <wu000273@xxxxxxx> cpuidle: Fix three reference count leaks Serge Semin <Sergey.Semin@xxxxxxxxxxxxxxxxxxxx> spi: dw: Return any value retrieved from the dma_transfer callback Haibo Chen <haibo.chen@xxxxxxx> mmc: sdhci-esdhc-imx: fix the mask for tuning start point Xie XiuQi <xiexiuqi@xxxxxxxxxx> ixgbe: fix signed-integer-overflow warning Ulf Hansson <ulf.hansson@xxxxxxxxxx> staging: greybus: sdio: Respect the cmd->busy_timeout from the mmc core YuanJunQing <yuanjunqing66@xxxxxxx> MIPS: Fix IRQ tracing when call handle_fpe() and handle_msa_fpe() Jiaxun Yang <jiaxun.yang@xxxxxxxxxxx> PCI: Don't disable decoding when mmio_always_on is set Alexander Sverdlin <alexander.sverdlin@xxxxxxxxx> macvlan: Skip loopback packets in RX handler Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx> m68k: mac: Don't call via_flush_cache() on Mac IIfx Arvind Sankar <nivedita@xxxxxxxxxxxx> x86/mm: Stop printing BRK addresses Serge Semin <Sergey.Semin@xxxxxxxxxxxxxxxxxxxx> mips: Add udelay lpj numbers adjustment Arvind Sankar <nivedita@xxxxxxxxxxxx> x86/boot: Correct relocation destination on old linkers Pali Rohár <pali@xxxxxxxxxx> mwifiex: Fix memory corruption in dump_station Dan Carpenter <dan.carpenter@xxxxxxxxxx> rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() Guoqing Jiang <guoqing.jiang@xxxxxxxxxxxxxxx> md: don't flush workqueue unconditionally in md_open Daniel Thompson <daniel.thompson@xxxxxxxxxx> kgdb: Fix spurious true from in_dbg_master() Serge Semin <Sergey.Semin@xxxxxxxxxxxxxxxxxxxx> mips: cm: Fix an invalid error code of INTVN_*_ERR Jiaxun Yang <jiaxun.yang@xxxxxxxxxxx> MIPS: Truncate link address into 32bit for 32bit kernel Jeremy Kerr <jk@xxxxxxxxxx> powerpc/spufs: fix copy_to_user while atomic Yunjian Wang <wangyunjian@xxxxxxxxxx> net: allwinner: Fix use correct return type for ndo_start_xmit() Wei Yongjun <weiyongjun1@xxxxxxxxxx> net: lpc-enet: fix error return code in lpc_mii_init() Jann Horn <jannh@xxxxxxxxxx> exit: Move preemption fixup up, move blocking operations down Nathan Chancellor <natechancellor@xxxxxxxxx> lib/mpi: Fix 64-bit MIPS build with Clang Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported Tiezhu Yang <yangtiezhu@xxxxxxxxxxx> MIPS: Make sparse_init() using top-down allocation Kieran Bingham <kieran.bingham+renesas@xxxxxxxxxxxxxxxx> media: platform: fcp: Set appropriate DMA parameters Colin Ian King <colin.king@xxxxxxxxxxxxx> media: dvb: return -EREMOTEIO on i2c transfer failure. Jitao Shi <jitao.shi@xxxxxxxxxxxx> dt-bindings: display: mediatek: control dpi pins mode to avoid leakage Kees Cook <keescook@xxxxxxxxxxxx> e1000: Distribute switch variables for initialization Christoph Hellwig <hch@xxxxxx> staging: android: ion: use vmap instead of vm_map_ram Jia-Ju Bai <baijiaju1990@xxxxxxxxx> net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() Jon Doron <arilou@xxxxxxxxx> x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit Linus Walleij <linus.walleij@xxxxxxxxxx> ARM: 8978/1: mm: make act_mm() respect THREAD_SIZE Filipe Manana <fdmanana@xxxxxxxx> btrfs: do not ignore error from btrfs_next_leaf() when inserting checksums Serge Semin <Sergey.Semin@xxxxxxxxxxxxxxxxxxxx> clocksource: dw_apb_timer_of: Fix missing clockevent timers Serge Semin <Sergey.Semin@xxxxxxxxxxxxxxxxxxxx> spi: dw: Enable interrupts in accordance with DMA xfer mode Douglas Anderson <dianders@xxxxxxxxxxxx> kgdb: Prevent infinite recursive entries to the debugger Hsin-Yu Chao <hychao@xxxxxxxxxxxx> Bluetooth: Add SCO fallback for invalid LMP parameters error Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> spi: dw: Zero DMA Tx and Rx configurations on stack Arthur Kiyanovski <akiyano@xxxxxxxxxx> net: ena: fix error returning in ena_com_get_hash_function() Julien Thierry <jthierry@xxxxxxxxxx> objtool: Ignore empty alternatives Brad Love <brad@xxxxxxxxxxxxxxxx> media: si2157: Better check for running tuner in init Ard Biesheuvel <ardb@xxxxxxxxxx> ACPI: GED: use correct trigger type field in _Exx / _Lxx handling Colin Ian King <colin.king@xxxxxxxxxxxxx> media: dvb_frontend: ensure that inital front end status initialized Xiaolong Huang <butterflyhuangxx@xxxxxxxxx> can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices Chris Wilson <chris@xxxxxxxxxxxxxxxxxx> agp/intel: Reinforce the barrier after GTT updates Barret Rhoden <brho@xxxxxxxxxx> perf: Add cond_resched() to task_function_call() OGAWA Hirofumi <hirofumi@xxxxxxxxxxxxxxxxxx> fat: don't allow to mount if the FAT length == 0 Wang Hai <wanghai38@xxxxxxxxxx> mm/slub: fix a memory leak in sysfs_slab_add() Casey Schaufler <casey@xxxxxxxxxxxxxxxx> Smack: slab-out-of-bounds in vsscanf Qiujun Huang <hqjagain@xxxxxxxxx> ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb Qiujun Huang <hqjagain@xxxxxxxxx> ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb Qiujun Huang <hqjagain@xxxxxxxxx> ath9k: Fix use-after-free Write in ath9k_htc_rx_msg Qiujun Huang <hqjagain@xxxxxxxxx> ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx Marc Zyngier <maz@xxxxxxxxxx> KVM: arm64: Make vcpu_cp1x() work on Big Endian hosts Xing Li <lixing@xxxxxxxxxxx> KVM: MIPS: Fix VPN2_MASK definition for variable cpu_vmbits Xing Li <lixing@xxxxxxxxxxx> KVM: MIPS: Define KVM_ENTRYHI_ASID to cpu_asid_mask(&boot_cpu_data) Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: nVMX: Consult only the "basic" exit reason when routing nested exit Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: nSVM: leave ASID aside in copy_vmcb_control_area Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> video: fbdev: w100fb: Fix a potential double free. Eric W. Biederman <ebiederm@xxxxxxxxxxxx> proc: Use new_inode not new_inode_pseudo Yuxuan Shui <yshuiv7@xxxxxxxxx> ovl: initialize error in ovl_copy_xattr Lukas Wunner <lukas@xxxxxxxxx> spi: bcm2835: Fix controller unregister order Lukas Wunner <lukas@xxxxxxxxx> spi: pxa2xx: Fix controller unregister order Lukas Wunner <lukas@xxxxxxxxx> spi: Fix controller unregister order Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> spi: No need to assign dummy value in spi_unregister_controller() Lukas Wunner <lukas@xxxxxxxxx> spi: dw: Fix controller unregister order Sasha Levin <sashal@xxxxxxxxxx> spi: dw: fix possible race condition Anthony Steinhauser <asteinhauser@xxxxxxxxxx> x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches. Anthony Steinhauser <asteinhauser@xxxxxxxxxx> x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. Thomas Lendacky <Thomas.Lendacky@xxxxxxx> x86/speculation: Add support for STIBP always-on preferred mode Waiman Long <longman@xxxxxxxxxx> x86/speculation: Change misspelled STIPB to STIBP Michał Mirosław <mirq-linux@xxxxxxxxxxxx> ALSA: pcm: disallow linking stream to itself Justin Chen <justinpopo6@xxxxxxxxx> spi: bcm-qspi: when tx/rx buffer is NULL set to 0 Lukas Wunner <lukas@xxxxxxxxx> spi: bcm2835aux: Fix controller unregister order Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() Tejun Heo <tj@xxxxxxxxxx> cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> ACPI: PM: Avoid using power resources if there are none for D0 Ard Biesheuvel <ardb@xxxxxxxxxx> ACPI: GED: add support for _Exx / _Lxx handler methods Qiushi Wu <wu000273@xxxxxxx> ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe() Qiushi Wu <wu000273@xxxxxxx> ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile() Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Fix inconsistent card PM state after resume Chuhong Yuan <hslester96@xxxxxxxxx> ALSA: es1688: Add the missed snd_card_free() Ard Biesheuvel <ardb@xxxxxxxxxx> efi/efivars: Add missing kobject_put() in sysfs entry creation error path Hill Ma <maahiuzeon@xxxxxxxxx> x86/reboot/quirks: Add MacBook6,1 reboot quirk Anthony Steinhauser <asteinhauser@xxxxxxxxxx> x86/speculation: Prevent rogue cross-process SSBD shutdown Xiaochun Lee <lixc17@xxxxxxxxxx> x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs Bob Haarman <inglorion@xxxxxxxxxx> x86_64: Fix jiffies ODR violation Masashi Honma <masashi.honma@xxxxxxxxx> ath9k_htc: Silence undersized packet warnings Thomas Falcon <tlfalcon@xxxxxxxxxxxxx> drivers/net/ibmvnic: Update VNIC protocol version reporting Jens Axboe <axboe@xxxxxxxxx> sched/fair: Don't NUMA balance for kthreads Fredrik Strupe <fredrik@xxxxxxxxxx> ARM: 8977/1: ptrace: Fix mask for thumb breakpoint hook Su Kang Yin <cantona@xxxxxxxxxxx> crypto: talitos - fix ECB and CBC algs ivsize Johannes Thumshirn <jthumshirn@xxxxxxx> scsi: return correct blkprep status code in case scsi_init_io() fails. Ido Schimmel <idosch@xxxxxxxxxxxx> vxlan: Avoid infinite loop when suppressing NS messages with invalid options Hangbin Liu <liuhangbin@xxxxxxxxx> ipv6: fix IPV6_ADDRFORM operation logic ------------- Diffstat: .../bindings/display/mediatek/mediatek,dpi.txt | 6 + Documentation/virtual/kvm/api.txt | 2 + Makefile | 17 +- arch/arm/kernel/ptrace.c | 4 +- arch/arm/mach-tegra/tegra.c | 4 +- arch/arm/mm/proc-macros.S | 3 +- arch/arm64/include/asm/kvm_host.h | 6 +- arch/m68k/include/asm/mac_via.h | 1 + arch/m68k/mac/config.c | 21 +- arch/m68k/mac/via.c | 6 +- arch/mips/Makefile | 13 +- arch/mips/boot/compressed/Makefile | 2 +- arch/mips/include/asm/kvm_host.h | 6 +- arch/mips/kernel/genex.S | 6 +- arch/mips/kernel/mips-cm.c | 6 +- arch/mips/kernel/setup.c | 10 + arch/mips/kernel/time.c | 70 +++++++ arch/mips/kernel/vmlinux.lds.S | 2 +- arch/powerpc/platforms/cell/spufs/file.c | 113 ++++++---- arch/sparc/kernel/ptrace_32.c | 228 +++++++++------------ arch/sparc/kernel/ptrace_64.c | 17 +- arch/x86/boot/compressed/head_32.S | 5 +- arch/x86/boot/compressed/head_64.S | 1 + arch/x86/include/asm/cpufeatures.h | 2 +- arch/x86/include/asm/nospec-branch.h | 1 + arch/x86/kernel/cpu/bugs.c | 94 ++++++--- arch/x86/kernel/process.c | 28 +-- arch/x86/kernel/process.h | 2 +- arch/x86/kernel/reboot.c | 8 + arch/x86/kernel/time.c | 4 - arch/x86/kernel/vmlinux.lds.S | 4 +- arch/x86/kvm/svm.c | 2 +- arch/x86/kvm/vmx.c | 2 +- arch/x86/mm/init.c | 2 - arch/x86/pci/fixup.c | 4 + block/blk-mq.c | 8 +- drivers/acpi/cppc_acpi.c | 4 +- drivers/acpi/device_pm.c | 2 +- drivers/acpi/evged.c | 22 +- drivers/acpi/scan.c | 28 ++- drivers/acpi/sysfs.c | 4 +- drivers/char/agp/intel-gtt.c | 4 +- drivers/clocksource/dw_apb_timer_of.c | 6 +- drivers/cpuidle/sysfs.c | 6 +- drivers/crypto/talitos.c | 2 +- drivers/firmware/efi/efivars.c | 4 +- drivers/macintosh/windfarm_pm112.c | 21 +- drivers/md/md.c | 3 +- drivers/media/dvb-core/dvb_frontend.c | 2 +- drivers/media/platform/rcar-fcp.c | 5 + drivers/media/tuners/si2157.c | 15 +- drivers/media/usb/dvb-usb/dibusb-mb.c | 2 +- drivers/media/usb/go7007/snd-go7007.c | 35 ++-- drivers/mmc/host/sdhci-esdhc-imx.c | 2 +- drivers/mtd/nand/brcmnand/brcmnand.c | 11 +- drivers/mtd/nand/pasemi_nand.c | 4 +- drivers/net/can/usb/kvaser_usb.c | 6 +- drivers/net/ethernet/allwinner/sun4i-emac.c | 4 +- drivers/net/ethernet/amazon/ena/ena_com.c | 6 +- drivers/net/ethernet/ibm/ibmvnic.c | 8 +- drivers/net/ethernet/intel/e1000/e1000_main.c | 4 +- drivers/net/ethernet/intel/e1000e/e1000.h | 1 - drivers/net/ethernet/intel/e1000e/netdev.c | 12 +- drivers/net/ethernet/intel/igb/igb_ethtool.c | 3 +- drivers/net/ethernet/intel/ixgbe/ixgbe_common.c | 2 +- drivers/net/ethernet/nxp/lpc_eth.c | 3 +- drivers/net/macvlan.c | 4 + drivers/net/vmxnet3/vmxnet3_ethtool.c | 2 + drivers/net/vxlan.c | 4 + drivers/net/wireless/ath/ath9k/hif_usb.c | 58 ++++-- drivers/net/wireless/ath/ath9k/hif_usb.h | 6 + drivers/net/wireless/ath/ath9k/htc_drv_init.c | 10 +- drivers/net/wireless/ath/ath9k/htc_drv_txrx.c | 6 +- drivers/net/wireless/ath/ath9k/htc_hst.c | 3 + drivers/net/wireless/ath/ath9k/wmi.c | 5 +- drivers/net/wireless/ath/ath9k/wmi.h | 3 +- drivers/net/wireless/ath/carl9170/fw.c | 4 +- drivers/net/wireless/ath/carl9170/main.c | 21 +- drivers/net/wireless/broadcom/b43/main.c | 2 +- drivers/net/wireless/broadcom/b43legacy/main.c | 1 + drivers/net/wireless/broadcom/b43legacy/xmit.c | 1 + drivers/net/wireless/marvell/mwifiex/cfg80211.c | 14 +- drivers/net/wireless/realtek/rtlwifi/usb.c | 8 +- drivers/pci/probe.c | 24 ++- drivers/pinctrl/samsung/pinctrl-exynos.c | 9 + drivers/power/reset/vexpress-poweroff.c | 1 + drivers/scsi/scsi_lib.c | 4 +- drivers/spi/spi-bcm-qspi.c | 8 +- drivers/spi/spi-bcm2835.c | 4 +- drivers/spi/spi-bcm2835aux.c | 4 +- drivers/spi/spi-dw-mid.c | 16 +- drivers/spi/spi-dw.c | 14 +- drivers/spi/spi-pxa2xx.c | 4 +- drivers/spi/spi.c | 5 +- drivers/staging/android/ion/ion_heap.c | 4 +- drivers/staging/greybus/sdio.c | 10 +- drivers/video/fbdev/w100fb.c | 2 + drivers/w1/masters/omap_hdq.c | 10 +- fs/btrfs/file-item.c | 6 +- fs/btrfs/inode.c | 6 +- fs/btrfs/send.c | 67 ++++++ fs/ext4/ext4_extents.h | 9 +- fs/ext4/fsync.c | 28 ++- fs/fat/inode.c | 6 + fs/fs-writeback.c | 1 + fs/nilfs2/segment.c | 2 + fs/overlayfs/copy_up.c | 2 +- fs/proc/inode.c | 2 +- fs/proc/self.c | 2 +- fs/proc/thread_self.c | 2 +- include/linux/kgdb.h | 2 +- include/linux/sunrpc/gss_api.h | 1 + include/linux/sunrpc/svcauth_gss.h | 3 +- include/uapi/linux/dvb/frontend.h | 1 + include/uapi/linux/kvm.h | 2 + kernel/cpu_pm.c | 4 +- kernel/debug/debug_core.c | 1 + kernel/events/core.c | 23 ++- kernel/exit.c | 25 ++- kernel/sched/fair.c | 2 +- lib/mpi/longlong.h | 2 +- mm/huge_memory.c | 31 ++- mm/slub.c | 4 +- net/bluetooth/hci_event.c | 1 + net/ipv6/ipv6_sockglue.c | 13 +- net/netfilter/nft_nat.c | 4 +- net/sunrpc/auth_gss/gss_mech_switch.c | 12 +- net/sunrpc/auth_gss/svcauth_gss.c | 18 +- security/integrity/evm/evm_crypto.c | 2 +- security/integrity/ima/ima.h | 7 +- security/integrity/ima/ima_policy.c | 3 +- security/smack/smackfs.c | 10 + sound/core/pcm_native.c | 5 + sound/isa/es1688/es1688.c | 4 +- sound/usb/card.c | 20 +- sound/usb/usbaudio.h | 2 +- tools/objtool/check.c | 6 + tools/perf/builtin-probe.c | 3 + tools/perf/util/dso.c | 16 ++ tools/perf/util/dso.h | 1 + tools/perf/util/probe-finder.c | 1 + tools/perf/util/symbol.c | 2 + 142 files changed, 1010 insertions(+), 566 deletions(-)