[PATCH 4.9 00/95] 4.9.96-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 4.9.96 release.
There are 95 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Tue Apr 24 13:51:53 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.96-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 4.9.96-rc1

Wanpeng Li <wanpeng.li@hotmail.com>
    block/mq: fix potential deadlock during cpu hotplug

Greg Thelen <gthelen@google.com>
    writeback: safer lock nesting

Amir Goldstein <amir73il@gmail.com>
    fanotify: fix logic of events on child

Matthew Wilcox <mawilcox@microsoft.com>
    mm/filemap.c: fix NULL pointer in page_cache_tree_insert()

Ian Kent <raven@themaw.net>
    autofs: mount point create should honour passed in mode

Al Viro <viro@zeniv.linux.org.uk>
    Don't leak MNT_INTERNAL away from internal mounts

Al Viro <viro@zeniv.linux.org.uk>
    rpc_pipefs: fix double-dput()

Al Viro <viro@zeniv.linux.org.uk>
    orangefs_kill_sb(): deal with allocation failures

Al Viro <viro@zeniv.linux.org.uk>
    hypfs_kill_super(): deal with failed allocations

Al Viro <viro@zeniv.linux.org.uk>
    jffs2_kill_sb(): deal with failed allocations

Jan Kara <jack@suse.cz>
    udf: Fix leak of UTF-16 surrogates into encoded strings

Michael Ellerman <mpe@ellerman.id.au>
    powerpc/lib: Fix off-by-one in alternate feature patching

Michael Neuling <mikey@neuling.org>
    powerpc/eeh: Fix enabling bridge MMIO windows

Matt Redfearn <matt.redfearn@mips.com>
    MIPS: memset.S: Fix clobber of v1 in last_fixup

Matt Redfearn <matt.redfearn@mips.com>
    MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup

Matt Redfearn <matt.redfearn@mips.com>
    MIPS: memset.S: EVA & fault support for small_memset

Matt Redfearn <matt.redfearn@mips.com>
    MIPS: uaccess: Add micromips clobbers to bzero invocation

Rodrigo Rivas Costa <rodrigorivascosta@gmail.com>
    HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device

Theodore Ts'o <tytso@mit.edu>
    random: add new ioctl RNDRESEEDCRNG

Theodore Ts'o <tytso@mit.edu>
    random: crng_reseed() should lock the crng instance that it is modifying

Theodore Ts'o <tytso@mit.edu>
    random: set up the NUMA crng instances after the CRNG is fully initialized

Theodore Ts'o <tytso@mit.edu>
    random: fix crng_ready() test

David Wang <davidwang@zhaoxin.com>
    ALSA: hda - New VIA controller suppor no-snoop path

Takashi Iwai <tiwai@suse.de>
    ALSA: rawmidi: Fix missing input substream checks in compat ioctls

Fabián Inostroza <soulsonceonfire@gmail.com>
    ALSA: line6: Use correct endpoint type for midi output

Paul Parsons <lost.distance@yahoo.com>
    drm/radeon: Fix PCIe lane width calculation

Marc Zyngier <marc.zyngier@arm.com>
    drm/rockchip: Clear all interrupts before requesting the IRQ

Alex Deucher <alexander.deucher@amd.com>
    drm/amdgpu: Fix PCIe lane width calculation

Bas Nieuwenhuizen <basni@chromium.org>
    drm/amdgpu: Fix always_valid bos multiple LRU insertions.

Alex Deucher <alexander.deucher@amd.com>
    drm/amdgpu: Add an ATPX quirk for hybrid laptop

Theodore Ts'o <tytso@mit.edu>
    ext4: don't allow r/w mounts if metadata blocks overlap the superblock

Takashi Iwai <tiwai@suse.de>
    ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation

Takashi Iwai <tiwai@suse.de>
    ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls

Takashi Iwai <tiwai@suse.de>
    ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams

Takashi Iwai <tiwai@suse.de>
    ALSA: pcm: Avoid potential races between OSS ioctls and read/write

Takashi Iwai <tiwai@suse.de>
    ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation

Alex Williamson <alex.williamson@redhat.com>
    vfio/pci: Virtualize Maximum Read Request Size

Igor Pylypiv <igor.pylypiv@gmail.com>
    watchdog: f71808e_wdt: Fix WD_EN register read

Sean Wang <sean.wang@mediatek.com>
    dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4

Mikhail Lappo <mikhail.lappo@esrlabs.com>
    thermal: imx: Fix race condition in imx_thermal_probe()

Ryo Kodama <ryo.kodama.vz@renesas.com>
    pwm: rcar: Fix a condition to prevent mismatch value setting to duty

Boris Brezillon <boris.brezillon@bootlin.com>
    clk: bcm2835: De-assert/assert PLL reset signal when appropriate

Arnd Bergmann <arnd@arndb.de>
    clk: fix false-positive Wmaybe-uninitialized warning

Richard Genoud <richard.genoud@gmail.com>
    clk: mvebu: armada-38x: add support for missing clocks

Ralph Sennhauser <ralph.sennhauser@gmail.com>
    clk: mvebu: armada-38x: add support for 1866MHz variants

Alex Smith <alex.smith@imgtec.com>
    mmc: jz4740: Fix race condition in IRQ mask update

Lu Baolu <baolu.lu@linux.intel.com>
    iommu/vt-d: Fix a potential memory leak

Krzysztof Mazur <krzysiek@podlesie.net>
    um: Use POSIX ucontext_t instead of struct ucontext

Jason A. Donenfeld <Jason@zx2c4.com>
    um: Compile with modern headers

Dan Williams <dan.j.williams@intel.com>
    nfit, address-range-scrub: fix scrub in-progress reporting

Dan Williams <dan.j.williams@intel.com>
    libnvdimm, namespace: use a safe lookup for dimm device name

Maxime Jayat <maxime.jayat@mobile-devices.fr>
    dmaengine: at_xdmac: fix rare residue corruption

Bart Van Assche <bart.vanassche@wdc.com>
    IB/srp: Fix completion vector assignment algorithm

Bart Van Assche <bart.vanassche@wdc.com>
    IB/srp: Fix srp_abort()

Takashi Iwai <tiwai@suse.de>
    ALSA: pcm: Fix UAF at PCM release via PCM timer access

Bart Van Assche <bart.vanassche@wdc.com>
    RDMA/rxe: Fix an out-of-bounds read

Roland Dreier <roland@purestorage.com>
    RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device

Theodore Ts'o <tytso@mit.edu>
    ext4: fail ext4_iget for root directory if unallocated

Theodore Ts'o <tytso@mit.edu>
    ext4: add validity checks for bitmap block numbers

Eryu Guan <guaneryu@gmail.com>
    ext4: protect i_disksize update by i_data_sem in direct write path

Theodore Ts'o <tytso@mit.edu>
    ext4: don't update checksum of new initialized bitmaps

Theodore Ts'o <tytso@mit.edu>
    jbd2: if the journal is aborted then don't allow update of the log tail

Theodore Ts'o <tytso@mit.edu>
    random: use a tighter cap in credit_entropy_bits_safe()

Aniruddha Banerjee <aniruddhab@nvidia.com>
    irqchip/gic: Take lock when updating irq type

Mika Westerberg <mika.westerberg@linux.intel.com>
    thunderbolt: Resume control channel after hibernation image is created

James Kelly <jamespeterkelly@gmail.com>
    ASoC: ssm2602: Replace reg_default_raw with reg_default

Aaron Ma <aaron.ma@canonical.com>
    HID: core: Fix size as type u32

Aaron Ma <aaron.ma@canonical.com>
    HID: Fix hid_report_len usage

Nicholas Piggin <npiggin@gmail.com>
    powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops

Nicholas Piggin <npiggin@gmail.com>
    powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently

Nicholas Piggin <npiggin@gmail.com>
    powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write()

Aaron Ma <aaron.ma@canonical.com>
    HID: i2c-hid: fix size check and type usage

Steve French <stfrench@microsoft.com>
    smb3: Fix root directory when server returns inode number of zero

Thinh Nguyen <Thinh.Nguyen@synopsys.com>
    usb: dwc3: pci: Properly cleanup resource

Zhengjun Xing <zhengjun.xing@linux.intel.com>
    USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw

Yavuz, Tuba <tuba@ece.ufl.edu>
    USB: gadget: f_midi: fixing a possible double-free in f_midi

Mika Westerberg <mika.westerberg@linux.intel.com>
    ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status()

Hans de Goede <hdegoede@redhat.com>
    ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E

Dan Carpenter <dan.carpenter@oracle.com>
    regmap: Fix reversed bounds check in regmap_raw_write()

Jason Andryuk <jandryuk@gmail.com>
    xen-netfront: Fix hang on device removal

Maxime Chevallier <maxime.chevallier@bootlin.com>
    spi: Fix scatterlist elements size in spi_map_buf

Santiago Esteban <Santiago.Esteban@microchip.com>
    ARM: dts: at91: sama5d4: fix pinctrl compatible string

Marek Szyprowski <m.szyprowski@samsung.com>
    ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250

Nicolas Ferre <nicolas.ferre@microchip.com>
    ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property

Felipe Balbi <felipe.balbi@linux.intel.com>
    usb: gadget: udc: core: update usb_ep_queue() documentation

Heinrich Schuchardt <xypron.glpk@gmx.de>
    usb: musb: gadget: misplaced out of bounds check

Vlastimil Babka <vbabka@suse.cz>
    mm, slab: reschedule cache_reap() on the same CPU

Eric Biggers <ebiggers@google.com>
    ipc/shm: fix use-after-free of shm file via remap_file_pages()

Takashi Iwai <tiwai@suse.de>
    resource: fix integer overflow at reallocation

Andrew Morton <akpm@linux-foundation.org>
    fs/reiserfs/journal.c: add missing resierfs_warning() arg

Richard Weinberger <richard@nod.at>
    ubi: Reject MLC NAND

Romain Izard <romain.izard.pro@gmail.com>
    ubi: Fix error for write access

Richard Weinberger <richard@nod.at>
    ubi: fastmap: Don't flush fastmap work on detach

Richard Weinberger <richard@nod.at>
    ubifs: Check ubifs_wbuf_sync() return code

Tejun Heo <tj@kernel.org>
    tty: make n_tty_read() always abort if hangup is in progress


-------------

Diffstat:

 Makefile                                         |   4 +-
 arch/arm/boot/dts/at91sam9g25.dtsi               |   2 +-
 arch/arm/boot/dts/exynos5250.dtsi                |   8 +-
 arch/arm/boot/dts/sama5d4.dtsi                   |   2 +-
 arch/mips/include/asm/uaccess.h                  |  11 +-
 arch/mips/lib/memset.S                           |  11 +-
 arch/powerpc/include/asm/barrier.h               |   3 +-
 arch/powerpc/include/asm/synch.h                 |   4 -
 arch/powerpc/kernel/eeh_pe.c                     |   3 +-
 arch/powerpc/lib/feature-fixups.c                |   2 +-
 arch/powerpc/platforms/powernv/opal-nvram.c      |  11 +-
 arch/s390/hypfs/inode.c                          |   2 +-
 arch/um/os-Linux/file.c                          |   1 +
 arch/um/os-Linux/signal.c                        |   3 +-
 arch/x86/um/stub_segv.c                          |   3 +-
 block/blk-mq.c                                   |   4 +-
 drivers/acpi/nfit/core.c                         |   5 +-
 drivers/acpi/video_detect.c                      |   9 ++
 drivers/base/regmap/regmap.c                     |   2 +-
 drivers/char/random.c                            |  75 +++++----
 drivers/clk/bcm/clk-bcm2835.c                    |   8 +-
 drivers/clk/mvebu/armada-38x.c                   |  15 +-
 drivers/clk/renesas/clk-sh73a0.c                 |   6 +-
 drivers/dma/at_xdmac.c                           |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c |   1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c      |   6 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c           |   2 +-
 drivers/gpu/drm/amd/amdgpu/si_dpm.c              |   4 +-
 drivers/gpu/drm/radeon/si_dpm.c                  |   4 +-
 drivers/gpu/drm/rockchip/rockchip_drm_vop.c      |  23 +--
 drivers/hid/hid-core.c                           |  10 +-
 drivers/hid/hid-input.c                          |   3 +-
 drivers/hid/hid-multitouch.c                     |   5 +-
 drivers/hid/hid-rmi.c                            |   4 +-
 drivers/hid/hidraw.c                             |   5 +
 drivers/hid/i2c-hid/i2c-hid.c                    |  13 +-
 drivers/hid/wacom_sys.c                          |   2 +-
 drivers/infiniband/core/ucma.c                   |   3 +
 drivers/infiniband/sw/rxe/rxe_verbs.c            |   5 +-
 drivers/infiniband/ulp/srp/ib_srp.c              |  18 +--
 drivers/iommu/intel-svm.c                        |   1 +
 drivers/irqchip/irq-gic-common.c                 |   9 +-
 drivers/mmc/host/jz4740_mmc.c                    |   2 +-
 drivers/mtd/ubi/block.c                          |   2 +-
 drivers/mtd/ubi/build.c                          |  11 ++
 drivers/mtd/ubi/fastmap-wl.c                     |   1 -
 drivers/net/xen-netfront.c                       |   7 +-
 drivers/nvdimm/namespace_devs.c                  |   4 +-
 drivers/pci/hotplug/acpiphp_glue.c               |  23 ++-
 drivers/pwm/pwm-rcar.c                           |   8 +-
 drivers/spi/spi.c                                |  10 +-
 drivers/thermal/imx_thermal.c                    |   6 +-
 drivers/thunderbolt/nhi.c                        |   1 +
 drivers/tty/n_tty.c                              |   6 +
 drivers/tty/tty_io.c                             |   9 ++
 drivers/usb/core/generic.c                       |   9 +-
 drivers/usb/dwc3/dwc3-pci.c                      |   2 +-
 drivers/usb/gadget/function/f_midi.c             |   3 +-
 drivers/usb/gadget/u_f.h                         |   2 +
 drivers/usb/gadget/udc/core.c                    |   3 +
 drivers/usb/musb/musb_gadget_ep0.c               |  14 +-
 drivers/vfio/pci/vfio_pci_config.c               |  29 +++-
 drivers/watchdog/f71808e_wdt.c                   |   2 +-
 fs/autofs4/root.c                                |   2 +-
 fs/cifs/cifsglob.h                               |   1 +
 fs/cifs/inode.c                                  |  33 ++++
 fs/ext4/balloc.c                                 |  19 ++-
 fs/ext4/ialloc.c                                 |  54 ++-----
 fs/ext4/inode.c                                  |  11 +-
 fs/ext4/super.c                                  |   6 +
 fs/fs-writeback.c                                |   7 +-
 fs/jbd2/journal.c                                |   5 +-
 fs/jffs2/super.c                                 |   2 +-
 fs/namespace.c                                   |   3 +-
 fs/notify/fanotify/fanotify.c                    |  34 ++---
 fs/orangefs/super.c                              |   5 +
 fs/reiserfs/journal.c                            |   2 +-
 fs/ubifs/super.c                                 |  14 +-
 fs/udf/unicode.c                                 |   6 +
 include/dt-bindings/clock/mt2701-clk.h           |   3 +-
 include/linux/backing-dev-defs.h                 |   5 +
 include/linux/backing-dev.h                      |  30 ++--
 include/linux/hid.h                              |   6 +-
 include/linux/tty.h                              |   1 +
 include/sound/pcm_oss.h                          |   1 +
 include/uapi/linux/random.h                      |   3 +
 ipc/shm.c                                        |  23 ++-
 kernel/resource.c                                |   3 +-
 mm/filemap.c                                     |   9 +-
 mm/page-writeback.c                              |  18 +--
 mm/slab.c                                        |   3 +-
 net/sunrpc/rpc_pipe.c                            |   1 +
 sound/core/oss/pcm_oss.c                         | 186 ++++++++++++++++++-----
 sound/core/pcm.c                                 |   8 +-
 sound/core/rawmidi_compat.c                      |  18 ++-
 sound/pci/hda/hda_intel.c                        |   3 +-
 sound/soc/codecs/ssm2602.c                       |  19 ++-
 sound/usb/line6/midi.c                           |   2 +-
 98 files changed, 694 insertions(+), 322 deletions(-)