Message-Id: <20200213151842.259660170@linuxfoundation.org>
Date:   Thu, 13 Feb 2020 07:19:04 -0800
From:   Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To:     linux-kernel@...r.kernel.org
Cc:     Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        torvalds@...ux-foundation.org, akpm@...ux-foundation.org,
        linux@...ck-us.net, shuah@...nel.org, patches@...nelci.org,
        ben.hutchings@...ethink.co.uk, lkft-triage@...ts.linaro.org,
        stable@...r.kernel.org
Subject: [PATCH 4.9 000/116] 4.9.214-stable review

This is the start of the stable review cycle for the 4.9.214 release.
There are 116 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat, 15 Feb 2020 15:16:40 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.214-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@...uxfoundation.org>
    Linux 4.9.214-rc1

Nicolai Stange <nstange@...e.de>
    libertas: make lbs_ibss_join_existing() return error code on rates overflow

Nicolai Stange <nstange@...e.de>
    libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held

Qing Xu <m1s5p6688@...il.com>
    mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()

Qing Xu <m1s5p6688@...il.com>
    mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()

Mike Snitzer <snitzer@...hat.com>
    dm: fix potential for q->make_request_fn NULL pointer

Anand Lodnoor <anand.lodnoor@...adcom.com>
    scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state

Geert Uytterhoeven <geert+renesas@...der.be>
    pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B

Alexey Kardashevskiy <aik@...abs.ru>
    powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW

Zhengyuan Liu <liuzhengyuan@...inos.cn>
    tools/power/acpi: fix compilation error

Alexandre Belloni <alexandre.belloni@...tlin.com>
    ARM: dts: at91: sama5d3: define clock rate range for tcb1

Alexandre Belloni <alexandre.belloni@...tlin.com>
    ARM: dts: at91: sama5d3: fix maximum peripheral clock rates

Jose Abreu <Jose.Abreu@...opsys.com>
    ARC: [plat-axs10x]: Add missing multicast filter number to GMAC node

Andy Shevchenko <andriy.shevchenko@...ux.intel.com>
    rtc: cmos: Stop using shared IRQ

Paul Kocialkowski <paul.kocialkowski@...tlin.com>
    rtc: hym8563: Return -EINVAL if the time is known to be invalid

Robert Milkowski <rmilkowski@...il.com>
    NFSv4: try lease recovery on NFS4ERR_EXPIRED

Geert Uytterhoeven <geert+renesas@...der.be>
    nfs: NFS_SWAP should depend on SWAP

Logan Gunthorpe <logang@...tatee.com>
    PCI: Don't disable bridge BARs when assigning bus resources

Bean Huo <beanhuo@...ron.com>
    scsi: ufs: Fix ufshcd_probe_hba() reture value in case ufshcd_scsi_add_wlus() fails

Håkon Bugge <haakon.bugge@...cle.com>
    RDMA/netlink: Do not always generate an ACK for some netlink operations

Ranjani Sridharan <ranjani.sridharan@...ux.intel.com>
    ASoC: pcm: update FE/BE trigger order based on the command

David Howells <dhowells@...hat.com>
    rxrpc: Fix service call disconnection

Song Liu <songliubraving@...com>
    perf/core: Fix mlock accounting in perf_mmap()

Konstantin Khlebnikov <khlebnikov@...dex-team.ru>
    clocksource: Prevent double add_timer_on() for watchdog_timer

Ronnie Sahlberg <lsahlber@...hat.com>
    cifs: fail i/o on soft mounts if sessionsetup errors out

Miaohe Lin <linmiaohe@...wei.com>
    KVM: nVMX: vmread should not set rflags to specify success in case of #PF

Sean Christopherson <sean.j.christopherson@...el.com>
    KVM: VMX: Add non-canonical check on writes to RTIT address MSRs

Sean Christopherson <sean.j.christopherson@...el.com>
    KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM

Josef Bacik <josef@...icpanda.com>
    btrfs: flush write bio if we loop in extent_write_cache_pages

Marios Pomonis <pomonis@...gle.com>
    KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks

Wayne Lin <Wayne.Lin@....com>
    drm/dp_mst: Remove VCPI while disabling topology mgr

Claudiu Beznea <claudiu.beznea@...rochip.com>
    drm: atmel-hlcdc: enable clock before configuring timing engine

Filipe Manana <fdmanana@...e.com>
    Btrfs: fix race between adding and putting tree mod seq elements and nodes

David Sterba <dsterba@...e.com>
    btrfs: remove trivial locking wrappers of tree mod log

Josef Bacik <josef@...icpanda.com>
    btrfs: free block groups after free'ing fs trees

Anand Jain <anand.jain@...cle.com>
    btrfs: use bool argument in free_root_pointers()

Filipe Manana <fdmanana@...e.com>
    Btrfs: fix assertion failure on fsync with NO_HOLES enabled

Eric Biggers <ebiggers@...gle.com>
    ext4: fix deadlock allocating crypto bounce page from mempool

Trond Myklebust <trondmy@...il.com>
    NFS: Directory page cache pages need to be locked when read

Thomas Meyer <thomas@...3r.de>
    NFS: Fix bool initialization/comparison

Trond Myklebust <trondmy@...il.com>
    NFS: Fix memory leaks and corruption in readdir

Benjamin Coddington <bcodding@...hat.com>
    NFS: switch back to to ->iterate()

Eric Dumazet <edumazet@...gle.com>
    bonding/alb: properly access headers in bond_alb_xmit()

Florian Fainelli <f.fainelli@...il.com>
    net: systemport: Avoid RBUF stuck in Wake-on-LAN mode

Andreas Kemnade <andreas@...nade.info>
    mfd: rn5t618: Mark ADC control register volatile

Marco Felsch <m.felsch@...gutronix.de>
    mfd: da9062: Fix watchdog compatible string

Dan Carpenter <dan.carpenter@...cle.com>
    ubi: Fix an error pointer dereference in error handling code

Sascha Hauer <s.hauer@...gutronix.de>
    ubi: fastmap: Fix inverted logic in seen selfcheck

Arnd Bergmann <arnd@...db.de>
    nfsd: fix jiffies/time_t mixup in LRU list

Arnd Bergmann <arnd@...db.de>
    nfsd: fix delay timer on 32-bit architectures

Prabhath Sajeepa <psajeepa@...estorage.com>
    IB/mlx5: Fix outstanding_pi index for GSI qps

Nathan Chancellor <natechancellor@...il.com>
    net: tulip: Adjust indentation in {dmfe, uli526x}_init_module

Nathan Chancellor <natechancellor@...il.com>
    net: smc911x: Adjust indentation in smc911x_phy_configure

Nathan Chancellor <natechancellor@...il.com>
    ppp: Adjust indentation into ppp_async_input

Nathan Chancellor <natechancellor@...il.com>
    NFC: pn544: Adjust indentation in pn544_hci_check_presence

Nathan Chancellor <natechancellor@...il.com>
    powerpc/44x: Adjust indentation in ibm4xx_denali_fixup_memsize

Nathan Chancellor <natechancellor@...il.com>
    ext2: Adjust indentation in ext2_fill_super

Nathan Chancellor <natechancellor@...il.com>
    scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free

Nathan Chancellor <natechancellor@...il.com>
    scsi: csiostor: Adjust indentation in csio_device_reset

Bart Van Assche <bvanassche@....org>
    scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type

Stephen Warren <swarren@...dia.com>
    clk: tegra: Mark fuse clock as critical

Sean Christopherson <sean.j.christopherson@...el.com>
    KVM: x86: Free wbinvd_dirty_mask if vCPU creation fails

Sean Christopherson <sean.j.christopherson@...el.com>
    KVM: PPC: Book3S PR: Free shared page if mmu initialization fails

Sean Christopherson <sean.j.christopherson@...el.com>
    KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails

Marios Pomonis <pomonis@...gle.com>
    KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks

Marios Pomonis <pomonis@...gle.com>
    KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks

Marios Pomonis <pomonis@...gle.com>
    KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c

Marios Pomonis <pomonis@...gle.com>
    KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks

Marios Pomonis <pomonis@...gle.com>
    KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks

Marios Pomonis <pomonis@...gle.com>
    KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks

Marios Pomonis <pomonis@...gle.com>
    KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks

Marios Pomonis <pomonis@...gle.com>
    KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks

Marios Pomonis <pomonis@...gle.com>
    KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks

Marios Pomonis <pomonis@...gle.com>
    KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks

Roberto Bergantinos Corpas <rbergant@...hat.com>
    sunrpc: expiry_time should be seconds not timeval

Brian Norris <briannorris@...omium.org>
    mwifiex: fix unbalanced locking in mwifiex_process_country_ie()

Stephen Warren <swarren@...dia.com>
    ARM: tegra: Enable PLLP bypass during Tegra124 LP1

Josef Bacik <josef@...icpanda.com>
    btrfs: set trans->drity in btrfs_commit_transaction

Chuhong Yuan <hslester96@...il.com>
    crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill

Herbert Xu <herbert@...dor.apana.org.au>
    crypto: api - Fix race condition in crypto_spawn_alg

Tudor Ambarus <tudor.ambarus@...rochip.com>
    crypto: atmel-aes - Fix counter overflow in CTR mode

Herbert Xu <herbert@...dor.apana.org.au>
    crypto: pcrypt - Do not clear MAY_SLEEP flag in original request

Herbert Xu <herbert@...dor.apana.org.au>
    padata: Remove broken queue flushing

Joe Thornber <ejt@...hat.com>
    dm space map common: fix to ensure new block isn't already in use

Michael Ellerman <mpe@...erman.id.au>
    of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc

Sven Van Asbroeck <thesven73@...il.com>
    power: supply: ltc2941-battery-gauge: fix use-after-free

Quinn Tran <qutran@...vell.com>
    scsi: qla2xxx: Fix mtcp dump collection failure

Herbert Xu <herbert@...dor.apana.org.au>
    crypto: api - Check spawn->alg under lock in crypto_drop_spawn

Zhihao Cheng <chengzhihao1@...wei.com>
    ubifs: Fix deadlock in concurrent bulk-read and writepage

Hyunchul Lee <cheol.lee@....com>
    ubifs: Change gfp flags in page allocation for bulk read

Yurii Monakov <monakov.y@...il.com>
    PCI: keystone: Fix link training retries initiation

Linus Walleij <linus.walleij@...aro.org>
    mmc: spi: Toggle SPI polarity, do not hardcode it

Pingfan Liu <kernelfans@...il.com>
    powerpc/pseries: Advance pfn if section is not present in lmb_is_removable()

Gustavo A. R. Silva <gustavo@...eddedor.com>
    lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more()

Helen Koike <helen.koike@...labora.com>
    media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments

John Hubbard <jhubbard@...dia.com>
    media/v4l2-core: set pages dirty upon releasing DMA buffers

Takashi Iwai <tiwai@...e.de>
    ALSA: dummy: Fix PCM format loop in proc output

Bryan O'Donoghue <bryan.odonoghue@...aro.org>
    usb: gadget: f_ecm: Use atomic_t to track in-flight request

Bryan O'Donoghue <bryan.odonoghue@...aro.org>
    usb: gadget: f_ncm: Use atomic_t to track in-flight request

Roger Quadros <rogerq@...com>
    usb: gadget: legacy: set max_speed to super-speed

Navid Emamdoost <navid.emamdoost@...il.com>
    brcmfmac: Fix memory leak in brcmf_usbdev_qinit

Oliver Neukum <oneukum@...e.com>
    mfd: dln2: More sanity checking for endpoints

Will Deacon <will@...nel.org>
    media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors

Eric Dumazet <edumazet@...gle.com>
    tcp: clear tp->segs_{in|out} in tcp_disconnect()

Eric Dumazet <edumazet@...gle.com>
    tcp: clear tp->data_segs{in|out} in tcp_disconnect()

Eric Dumazet <edumazet@...gle.com>
    tcp: clear tp->delivered in tcp_disconnect()

Eric Dumazet <edumazet@...gle.com>
    tcp: clear tp->total_retrans in tcp_disconnect()

David Howells <dhowells@...hat.com>
    rxrpc: Fix NULL pointer deref due to call->conn being cleared on disconnect

David Howells <dhowells@...hat.com>
    rxrpc: Fix insufficient receive notification generation

Cong Wang <xiyou.wangcong@...il.com>
    net_sched: fix an OOB access in cls_tcindex

Eric Dumazet <edumazet@...gle.com>
    net: hsr: fix possible NULL deref in hsr_handle_frame()

Taehee Yoo <ap420073@...il.com>
    gtp: use __GFP_NOWARN to avoid memalloc warning

Eric Dumazet <edumazet@...gle.com>
    cls_rsvp: fix rsvp_policy

Nobuhiro Iwamatsu <nobuhiro1.iwamatsu@...hiba.co.jp>
    ASoC: qcom: Fix of-node refcount unbalance to link->codec_of_node

Arnd Bergmann <arnd@...db.de>
    sparc32: fix struct ipc64_perm type definition

Pawan Gupta <pawan.kumar.gupta@...ux.intel.com>
    x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR

Johan Hovold <johan@...nel.org>
    media: iguanair: fix endpoint sanity check


-------------

Diffstat:

 Makefile                                           |    4 +-
 arch/arc/boot/dts/axs10x_mb.dtsi                   |    1 +
 arch/arm/boot/dts/sama5d3.dtsi                     |   28 +-
 arch/arm/boot/dts/sama5d3_can.dtsi                 |    4 +-
 arch/arm/boot/dts/sama5d3_tcb1.dtsi                |    1 +
 arch/arm/boot/dts/sama5d3_uart.dtsi                |    4 +-
 arch/arm/mach-tegra/sleep-tegra30.S                |   11 +
 arch/powerpc/Kconfig                               |    1 +
 arch/powerpc/boot/4xx.c                            |    2 +-
 arch/powerpc/kvm/book3s_hv.c                       |    4 +-
 arch/powerpc/kvm/book3s_pr.c                       |    4 +-
 arch/powerpc/platforms/pseries/hotplug-memory.c    |    4 +-
 arch/powerpc/platforms/pseries/iommu.c             |   43 +-
 arch/sparc/include/uapi/asm/ipcbuf.h               |   22 +-
 arch/x86/kernel/cpu/tsx.c                          |   13 +-
 arch/x86/kvm/emulate.c                             |   28 +-
 arch/x86/kvm/hyperv.c                              |   11 +-
 arch/x86/kvm/ioapic.c                              |   15 +-
 arch/x86/kvm/lapic.c                               |   14 +-
 arch/x86/kvm/mtrr.c                                |    9 +-
 arch/x86/kvm/pmu.h                                 |   18 +-
 arch/x86/kvm/pmu_intel.c                           |   24 +-
 arch/x86/kvm/vmx.c                                 |    4 +-
 arch/x86/kvm/vmx/vmx.c                             | 8033 ++++++++++++++++++++
 arch/x86/kvm/x86.c                                 |   22 +-
 crypto/algapi.c                                    |   22 +-
 crypto/api.c                                       |    3 +-
 crypto/internal.h                                  |    1 -
 crypto/pcrypt.c                                    |    1 -
 drivers/clk/tegra/clk-tegra-periph.c               |    6 +-
 drivers/crypto/atmel-aes.c                         |   37 +-
 drivers/crypto/picoxcell_crypto.c                  |   15 +-
 drivers/gpu/drm/atmel-hlcdc/atmel_hlcdc_crtc.c     |    8 +-
 drivers/gpu/drm/drm_dp_mst_topology.c              |   12 +
 drivers/infiniband/core/addr.c                     |    2 +-
 drivers/infiniband/core/sa_query.c                 |    4 +-
 drivers/infiniband/hw/mlx5/gsi.c                   |    3 +-
 drivers/md/dm.c                                    |    9 +-
 drivers/md/persistent-data/dm-space-map-common.c   |   27 +
 drivers/md/persistent-data/dm-space-map-common.h   |    2 +
 drivers/md/persistent-data/dm-space-map-disk.c     |    6 +-
 drivers/md/persistent-data/dm-space-map-metadata.c |    5 +-
 drivers/media/rc/iguanair.c                        |    2 +-
 drivers/media/usb/uvc/uvc_driver.c                 |   12 +
 drivers/media/v4l2-core/videobuf-dma-sg.c          |    5 +-
 drivers/mfd/da9062-core.c                          |    2 +-
 drivers/mfd/dln2.c                                 |   13 +-
 drivers/mfd/rn5t618.c                              |    1 +
 drivers/mmc/host/mmc_spi.c                         |   11 +-
 drivers/mtd/ubi/fastmap.c                          |   23 +-
 drivers/net/bonding/bond_alb.c                     |   44 +-
 drivers/net/ethernet/broadcom/bcmsysport.c         |    3 +
 drivers/net/ethernet/dec/tulip/dmfe.c              |    7 +-
 drivers/net/ethernet/dec/tulip/uli526x.c           |    4 +-
 drivers/net/ethernet/smsc/smc911x.c                |    2 +-
 drivers/net/gtp.c                                  |    6 +-
 drivers/net/ppp/ppp_async.c                        |   18 +-
 .../net/wireless/broadcom/brcm80211/brcmfmac/usb.c |    1 +
 drivers/net/wireless/marvell/libertas/cfg.c        |    2 +
 drivers/net/wireless/marvell/mwifiex/scan.c        |    7 +
 drivers/net/wireless/marvell/mwifiex/sta_ioctl.c   |    1 +
 drivers/net/wireless/marvell/mwifiex/wmm.c         |    4 +
 drivers/nfc/pn544/pn544.c                          |    2 +-
 drivers/of/Kconfig                                 |    4 +
 drivers/of/address.c                               |    6 +-
 drivers/pci/host/pci-keystone-dw.c                 |    2 +-
 drivers/pci/setup-bus.c                            |   20 +-
 drivers/pinctrl/sh-pfc/pfc-r8a7778.c               |    4 +-
 drivers/power/supply/ltc2941-battery-gauge.c       |    2 +-
 drivers/rtc/rtc-cmos.c                             |    2 +-
 drivers/rtc/rtc-hym8563.c                          |    2 +-
 drivers/scsi/csiostor/csio_scsi.c                  |    2 +-
 drivers/scsi/megaraid/megaraid_sas_base.c          |    3 +-
 drivers/scsi/megaraid/megaraid_sas_fusion.c        |    3 +-
 drivers/scsi/megaraid/megaraid_sas_fusion.h        |    1 +
 drivers/scsi/qla2xxx/qla_mbx.c                     |    3 +-
 drivers/scsi/qla2xxx/qla_nx.c                      |    7 +-
 drivers/scsi/qla4xxx/ql4_os.c                      |    2 +-
 drivers/scsi/ufs/ufshcd.c                          |    3 +-
 drivers/usb/gadget/function/f_ecm.c                |   16 +-
 drivers/usb/gadget/function/f_ncm.c                |   17 +-
 drivers/usb/gadget/legacy/cdc2.c                   |    2 +-
 drivers/usb/gadget/legacy/g_ffs.c                  |    2 +-
 drivers/usb/gadget/legacy/multi.c                  |    2 +-
 drivers/usb/gadget/legacy/ncm.c                    |    2 +-
 fs/btrfs/ctree.c                                   |   64 +-
 fs/btrfs/ctree.h                                   |    6 +-
 fs/btrfs/delayed-ref.c                             |    8 +-
 fs/btrfs/disk-io.c                                 |   20 +-
 fs/btrfs/extent_io.c                               |    8 +
 fs/btrfs/tests/btrfs-tests.c                       |    1 -
 fs/btrfs/transaction.c                             |    8 +
 fs/btrfs/tree-log.c                                |    7 +-
 fs/cifs/smb2pdu.c                                  |   10 +-
 fs/ext2/super.c                                    |    6 +-
 fs/ext4/page-io.c                                  |   19 +-
 fs/nfs/Kconfig                                     |    2 +-
 fs/nfs/callback_proc.c                             |    2 +-
 fs/nfs/dir.c                                       |   92 +-
 fs/nfs/nfs4client.c                                |    2 +-
 fs/nfs/nfs4proc.c                                  |    5 +
 fs/nfs/pnfs.c                                      |    2 +-
 fs/nfsd/nfs4layouts.c                              |    2 +-
 fs/nfsd/nfs4state.c                                |    2 +-
 fs/nfsd/state.h                                    |    2 +-
 fs/ubifs/file.c                                    |    6 +-
 include/media/v4l2-rect.h                          |    8 +-
 kernel/events/core.c                               |   10 +-
 kernel/padata.c                                    |   46 +-
 kernel/time/clocksource.c                          |   11 +-
 lib/test_kasan.c                                   |    1 +
 net/hsr/hsr_slave.c                                |    2 +
 net/ipv4/tcp.c                                     |    6 +
 net/rxrpc/ar-internal.h                            |    1 +
 net/rxrpc/call_object.c                            |    4 +-
 net/rxrpc/conn_client.c                            |    3 +-
 net/rxrpc/conn_object.c                            |    3 +-
 net/rxrpc/input.c                                  |    3 +-
 net/rxrpc/output.c                                 |   26 +-
 net/sched/cls_rsvp.h                               |    6 +-
 net/sched/cls_tcindex.c                            |   40 +-
 net/sunrpc/auth_gss/svcauth_gss.c                  |    4 +
 sound/drivers/dummy.c                              |    2 +-
 sound/soc/qcom/apq8016_sbc.c                       |    3 +-
 sound/soc/soc-pcm.c                                |   95 +-
 tools/power/acpi/Makefile.config                   |    2 +-
 126 files changed, 8833 insertions(+), 481 deletions(-)

Powered by blists - more mailing lists