This is the start of the stable review cycle for the 4.9.235 release. There are 78 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 03 Sep 2020 15:09:01 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.235-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.235-rc1 Hector Martin <marcan@xxxxxxxxx> ALSA: usb-audio: Update documentation comment for MS2109 quirk Peilin Ye <yepeilin.cs@xxxxxxxxx> HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: check the right error variable in btrfs_del_dir_entries_in_log Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> usb: storage: Add unusual_uas entry for Sony PSZ drives Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> USB: gadget: u_f: Unbreak offset calculation in VLAs Brooke Basile <brookebasile@xxxxxxxxx> USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() Brooke Basile <brookebasile@xxxxxxxxx> USB: gadget: u_f: add overflow checks to VLA macros Kees Cook <keescook@xxxxxxxxxxxx> overflow.h: Add allocation size calculation helpers Tang Bin <tangbin@xxxxxxxxxxxxxxxxxxxx> usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe() Cyril Roelandt <tipecaml@xxxxxxxxx> USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> USB: quirks: Add no-lpm quirk for another Raydium touchscreen Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: uas: Add quirk for PNY Pro Elite Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: yurex: Fix bad gfp argument Heikki Krogerus <heikki.krogerus@xxxxxxxxxxxxxxx> device property: Fix the secondary firmware node handling in set_primary_fwnode() Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> PM: sleep: core: Fix the handling of pending runtime resume requests Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> xhci: Do warm-reset when both CAS and XDEV_RESUME are set Thomas Gleixner <tglx@xxxxxxxxxxxxx> XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information. Jan Kara <jack@xxxxxxx> writeback: Fix sync livelock due to b_dirty_time processing Jan Kara <jack@xxxxxxx> writeback: Avoid skipping inode writeback Jan Kara <jack@xxxxxxx> writeback: Protect inode->i_io_list with inode->i_lock Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx> serial: 8250: change lock order in serial8250_do_startup() Lukas Wunner <lukas@xxxxxxxxx> serial: pl011: Don't leak amba_ports entry on driver register error Lukas Wunner <lukas@xxxxxxxxx> serial: pl011: Fix oops on -EPROBE_DEFER Tamseel Shams <m.shams@xxxxxxxxxxx> serial: samsung: Removes the IRQ not found warning George Kennedy <george.kennedy@xxxxxxxxxx> vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize() Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> vt: defer kfree() of vc_screenbuf in vc_do_resize() Evgeny Novikov <novikov@xxxxxxxxx> USB: lvtest: return proper error code in probe George Kennedy <george.kennedy@xxxxxxxxxx> fbcon: prevent user font height or width change from causing potential out-of-bounds access Filipe Manana <fdmanana@xxxxxxxx> btrfs: fix space cache memory leak after transaction abort Hans de Goede <hdegoede@xxxxxxxxxx> HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands Athira Rajeev <atrajeev@xxxxxxxxxxxxxxxxxx> powerpc/perf: Fix soft lockups due to missed interrupt accounting Sumera Priyadarsini <sylphrenadin@xxxxxxxxx> net: gianfar: Add of_node_put() before goto statement Adrian Hunter <adrian.hunter@xxxxxxxxx> scsi: ufs: Improve interrupt handling for shared interrupts Stanley Chu <stanley.chu@xxxxxxxxxxxx> scsi: ufs: Fix possible infinite loop in ufshcd_hold Vineeth Vijayan <vneethv@xxxxxxxxxxxxx> s390/cio: add cond_resched() in the slow_eval_known_fn() loop Xianting Tian <xianting_tian@xxxxxxx> fs: prevent BUG_ON in submit_bh_wbc() zhangyi (F) <yi.zhang@xxxxxxxxxx> jbd2: abort journal if free a async write error metadata buffer Lukas Czerner <lczerner@xxxxxxxxxx> jbd2: make sure jh have b_transaction set in refile/unfile_buffer Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> usb: gadget: f_tcm: Fix some resource leaks in some error paths Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: rcar: in slave mode, clear NACK earlier Zhi Chen <zhichen@xxxxxxxxxxxxxx> Revert "ath10k: fix DMA related firmware crashes on multiple devices" Andrey Konovalov <andreyknvl@xxxxxxxxxx> efi: provide empty efi_enter_virtual_mode implementation Changming Liu <charley.ashbringer@xxxxxxxxx> USB: sisusbvga: Fix a potential UB casued by left shifting a negative value Arnd Bergmann <arnd@xxxxxxxx> powerpc/spufs: add CONFIG_COREDUMP dependency David Brazdil <dbrazdil@xxxxxxxxxx> KVM: arm64: Fix symbol dependency in __hyp_call_panic_nvhe Evgeny Novikov <novikov@xxxxxxxxx> media: davinci: vpif_capture: fix potential double free Jason Baron <jbaron@xxxxxxxxxx> EDAC/ie31200: Fallback if host bridge device is already initialized Javed Hasan <jhasan@xxxxxxxxxxx> scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() Xiubo Li <xiubli@xxxxxxxxxx> ceph: fix potential mdsc use-after-free crash Jing Xiangfeng <jingxiangfeng@xxxxxxxxxx> scsi: iscsi: Do not put host in iscsi_set_flashnode_param() Chris Wilson <chris@xxxxxxxxxxxxxxxxxx> locking/lockdep: Fix overflow in presentation of average lock-time Aditya Pakki <pakki001@xxxxxxx> drm/nouveau: Fix reference count leak in nouveau_connector_detect Aditya Pakki <pakki001@xxxxxxx> drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open Hans Verkuil <hverkuil-cisco@xxxxxxxxx> cec-api: prevent leaking memory through hole in structure Peng Fan <fanpeng@xxxxxxxxxxx> mips/vdso: Fix resource leaks in genvdso.c Reto Schneider <code@xxxxxxxxxxxxxxxxx> rtlwifi: rtl8192cu: Prevent leaking urb Qiushi Wu <wu000273@xxxxxxx> PCI: Fix pci_create_slot() reference count leak Aditya Pakki <pakki001@xxxxxxx> omapfb: fix multiple reference count leaks due to pm_runtime_get_sync Desnes A. Nunes do Rosario <desnesn@xxxxxxxxxxxxx> selftests/powerpc: Purge extra count_pmc() calls of ebb selftests Dick Kennedy <dick.kennedy@xxxxxxxxxxxx> scsi: lpfc: Fix shost refcount mismatch when deleting vport Navid Emamdoost <navid.emamdoost@xxxxxxxxx> drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails Navid Emamdoost <navid.emamdoost@xxxxxxxxx> drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config Navid Emamdoost <navid.emamdoost@xxxxxxxxx> drm/amd/display: fix ref count leak in amdgpu_drm_ioctl Navid Emamdoost <navid.emamdoost@xxxxxxxxx> drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms Aditya Pakki <pakki001@xxxxxxx> drm/radeon: fix multiple reference count leak Qiushi Wu <wu000273@xxxxxxx> drm/amdkfd: Fix reference count leaks. Robin Murphy <robin.murphy@xxxxxxx> iommu/iova: Don't BUG on invalid PFNs Bodo Stroesser <bstroesser@xxxxxxxxxxxxxx> scsi: target: tcmu: Fix crash on ARM during cmd completion Jia-Ju Bai <baijiaju@xxxxxxxxxxxxxxx> media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() Stephan Gerhold <stephan@xxxxxxxxxxx> arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep Qiushi Wu <wu000273@xxxxxxx> ASoC: tegra: Fix reference count leaks. Randy Dunlap <rdunlap@xxxxxxxxxxxxx> ALSA: pci: delete repeated words in comments Mark Tomlinson <mark.tomlinson@xxxxxxxxxxxxxxxxxxx> gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY Mahesh Bandewar <maheshb@xxxxxxxxxx> ipvlan: fix device features Cong Wang <xiyou.wangcong@xxxxxxxxx> tipc: fix uninit skb->data in tipc_nl_compat_dumpit() Miaohe Lin <linmiaohe@xxxxxxxxxx> net: Fix potential wrong skb->protocol in skb_vlan_untag() Jarod Wilson <jarod@xxxxxxxxxx> bonding: show saner speed for broadcast mode Cong Wang <xiyou.wangcong@xxxxxxxxx> bonding: fix a potential double-unregister ------------- Diffstat: Makefile | 4 +- arch/arm64/boot/dts/qcom/msm8916-pins.dtsi | 2 +- arch/arm64/kvm/hyp/switch.c | 2 +- arch/mips/vdso/genvdso.c | 10 +++ arch/powerpc/perf/core-book3s.c | 4 ++ arch/powerpc/platforms/cell/Kconfig | 1 + drivers/base/core.c | 12 ++-- drivers/base/power/main.c | 16 +++-- drivers/edac/ie31200_edac.c | 50 ++++++++++++- drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 16 +++-- drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 20 ++++-- drivers/gpu/drm/nouveau/nouveau_connector.c | 4 +- drivers/gpu/drm/nouveau/nouveau_fbcon.c | 4 +- drivers/gpu/drm/radeon/radeon_connectors.c | 20 ++++-- drivers/hid/i2c-hid/i2c-hid-core.c | 22 +++--- drivers/hid/usbhid/hiddev.c | 4 ++ drivers/i2c/busses/i2c-rcar.c | 1 + drivers/iommu/iova.c | 4 +- drivers/md/dm-table.c | 10 +-- drivers/media/pci/ttpci/av7110.c | 5 +- drivers/media/platform/davinci/vpif_capture.c | 2 - drivers/net/bonding/bond_main.c | 24 +++++-- drivers/net/ethernet/freescale/gianfar.c | 4 +- drivers/net/ipvlan/ipvlan_main.c | 25 +++++-- drivers/net/wireless/ath/ath10k/hw.h | 2 +- drivers/net/wireless/realtek/rtlwifi/usb.c | 5 +- drivers/pci/slot.c | 6 +- drivers/s390/cio/css.c | 5 ++ drivers/scsi/fcoe/fcoe_ctlr.c | 2 +- drivers/scsi/lpfc/lpfc_vport.c | 26 +++---- drivers/scsi/scsi_transport_iscsi.c | 2 +- drivers/scsi/ufs/ufshcd.c | 11 +-- drivers/staging/media/cec/cec-api.c | 8 ++- drivers/target/target_core_user.c | 9 ++- drivers/tty/serial/8250/8250_port.c | 9 ++- drivers/tty/serial/amba-pl011.c | 16 +++-- drivers/tty/serial/samsung.c | 8 ++- drivers/tty/vt/vt.c | 5 +- drivers/tty/vt/vt_ioctl.c | 12 +++- drivers/usb/core/quirks.c | 2 + drivers/usb/gadget/function/f_ncm.c | 81 +++++++++++++++++---- drivers/usb/gadget/function/f_tcm.c | 7 +- drivers/usb/gadget/u_f.h | 38 +++++++--- drivers/usb/host/ohci-exynos.c | 5 +- drivers/usb/host/xhci-hub.c | 19 ++--- drivers/usb/misc/lvstest.c | 2 +- drivers/usb/misc/sisusbvga/sisusb.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/storage/unusual_devs.h | 2 +- drivers/usb/storage/unusual_uas.h | 14 ++++ drivers/video/console/fbcon.c | 25 ++++++- drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/dsi.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/dss.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/hdmi4.c | 5 +- drivers/video/fbdev/omap2/omapfb/dss/hdmi5.c | 5 +- drivers/video/fbdev/omap2/omapfb/dss/venc.c | 7 +- drivers/xen/events/events_base.c | 16 ++--- fs/btrfs/disk-io.c | 1 + fs/btrfs/free-space-cache.c | 2 +- fs/btrfs/tree-log.c | 10 +-- fs/buffer.c | 9 +++ fs/ceph/mds_client.c | 14 +++- fs/ext4/super.c | 7 -- fs/fs-writeback.c | 83 ++++++++++++---------- fs/jbd2/transaction.c | 26 +++++++ include/linux/efi.h | 4 ++ include/linux/fs.h | 8 ++- include/linux/overflow.h | 73 +++++++++++++++++++ include/trace/events/writeback.h | 13 ++-- kernel/locking/lockdep_proc.c | 2 +- net/core/skbuff.c | 4 +- net/ipv6/ip6_tunnel.c | 10 ++- net/tipc/netlink_compat.c | 12 +++- sound/pci/cs46xx/cs46xx_lib.c | 2 +- sound/pci/cs46xx/dsp_spos_scb_lib.c | 2 +- sound/pci/hda/hda_codec.c | 2 +- sound/pci/hda/hda_generic.c | 2 +- sound/pci/hda/patch_sigmatel.c | 2 +- sound/pci/ice1712/prodigy192.c | 2 +- sound/pci/oxygen/xonar_dg.c | 2 +- sound/soc/tegra/tegra30_ahub.c | 4 +- sound/soc/tegra/tegra30_i2s.c | 4 +- sound/usb/quirks-table.h | 4 +- .../powerpc/pmu/ebb/back_to_back_ebbs_test.c | 2 - .../selftests/powerpc/pmu/ebb/cycles_test.c | 2 - .../powerpc/pmu/ebb/cycles_with_freeze_test.c | 2 - .../powerpc/pmu/ebb/cycles_with_mmcr2_test.c | 2 - tools/testing/selftests/powerpc/pmu/ebb/ebb.c | 2 - .../powerpc/pmu/ebb/ebb_on_willing_child_test.c | 2 - .../powerpc/pmu/ebb/lost_exception_test.c | 1 - .../selftests/powerpc/pmu/ebb/multi_counter_test.c | 7 -- .../powerpc/pmu/ebb/multi_ebb_procs_test.c | 2 - .../selftests/powerpc/pmu/ebb/pmae_handling_test.c | 2 - .../powerpc/pmu/ebb/pmc56_overflow_test.c | 2 - 98 files changed, 710 insertions(+), 276 deletions(-)
