This is the start of the stable review cycle for the 4.9.103 release. There are 96 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat May 26 09:35:42 UTC 2018. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.103-rc1... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 4.9.103-rc1

Colin Ian King colin.king@canonical.com rtc: tx4939: avoid unintended sign extension on a 24 bit shift

Alexandre Belloni alexandre.belloni@bootlin.com rtc: hctosys: Ensure system time doesn't overflow time_t

Bryan O'Donoghue pure.logic@nexus-software.ie rtc: snvs: Fix usage of snvs_rtc_enable

Vignesh R vigneshr@ti.com serial: 8250: Don't service RX FIFO if interrupts are disabled

Geert Uytterhoeven geert+renesas@glider.be serial: arc_uart: Fix out-of-bounds access through DT alias

Geert Uytterhoeven geert+renesas@glider.be serial: fsl_lpuart: Fix out-of-bounds access through DT alias

Geert Uytterhoeven geert+renesas@glider.be serial: imx: Fix out-of-bounds access through serial port index

Geert Uytterhoeven geert+renesas@glider.be serial: mxs-auart: Fix out-of-bounds access through serial port index

Geert Uytterhoeven geert+renesas@glider.be serial: samsung: Fix out-of-bounds access through serial port index

Geert Uytterhoeven geert+renesas@glider.be serial: xuartps: Fix out-of-bounds access through DT alias

Colin Ian King colin.king@canonical.com media: cx25821: prevent out-of-bounds read on array card

Hans Verkuil hverkuil@xs4all.nl media: vivid: fix incorrect capabilities for radio

Masami Hiramatsu mhiramat@kernel.org media: vb2: Fix videobuf2 to map correct area

Arnd Bergmann arnd@arndb.de media: s3c-camif: fix out-of-bounds array access

Brad Love brad@nextdimension.cc media: cx23885: Override 888 ImpactVCBe crystal frequency

Mauro Carvalho Chehab mchehab@kernel.org media: dmxdev: fix error code for invalid ioctls

Andrzej Hajda a.hajda@samsung.com clk: samsung: exynos3250: Fix PLL rates

Andrzej Hajda a.hajda@samsung.com clk: samsung: exynos5250: Fix PLL rates

Andrzej Hajda a.hajda@samsung.com clk: samsung: exynos5433: Fix PLL rates

Andrzej Hajda a.hajda@samsung.com clk: samsung: exynos5260: Fix PLL rates

Andrzej Hajda a.hajda@samsung.com clk: samsung: exynos7: Fix PLL rates

Andrzej Hajda a.hajda@samsung.com clk: samsung: s3c2410: Fix PLL rates

Shawn Lin shawn.lin@rock-chips.com clk: rockchip: Prevent calculating mmc phase if clock rate is zero

Brad Love brad@nextdimension.cc media: cx23885: Set subdev host data to clk_freq pointer

Marcel Ziswiler marcel@ziswiler.com clk: tegra: Fix pll_u rate configuration

Shawn Lin shawn.lin@rock-chips.com clk: Don't show the incorrect clock phase

Shawn Lin shawn.lin@rock-chips.com clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228

Sylwester Nawrocki s.nawrocki@samsung.com ASoC: samsung: i2s: Ensure the RCLK rate is properly determined

Ranjani Sridharan ranjani.sridharan@linux.intel.com ASoC: topology: create TLV data for dapm widgets

Dan Carpenter dan.carpenter@oracle.com ASoC: au1x: Fix timeout tests in au1xac97c_ac97_read()

James Smart jsmart2021@gmail.com scsi: lpfc: Fix frequency of Release WQE CQEs

James Smart jsmart2021@gmail.com scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP testing

James Smart jsmart2021@gmail.com scsi: lpfc: Fix issue_lip if link is disabled

Wilfried Weissmann wilfried.weissmann@gmx.at scsi: mvsas: fix wrong endianness of sgpio api

Dave Carroll david.carroll@microsemi.com scsi: aacraid: Insure command thread is not recursively stopped

Jeremy Cline jeremy@jcline.org scsi: sd: Keep disk read-only when re-reading partition

Hannes Reinecke hare@suse.de scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM

Manish Rangankar manish.rangankar@cavium.com scsi: qla4xxx: skip error recovery in case of register disconnect.

Meelis Roos mroos@linux.ee scsi: aacraid: fix shutdown crash when init fails

Michael Kelley (EOSG) Michael.H.Kelley@microsoft.com scsi: storvsc: Increase cmd_per_lun for higher speed devices

Bart Van Assche bart.vanassche@wdc.com scsi: qla2xxx: Avoid triggering undefined behavior in qla2x00_mbx_completion()

Dan Carpenter dan.carpenter@oracle.com scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo()

Dan Carpenter dan.carpenter@oracle.com scsi: sym53c8xx_2: iterator underflow in sym_getsync()

Chad Dupuis chad.dupuis@cavium.com scsi: bnx2fc: Fix check in SCSI completion handler for timed out request

Sujit Reddy Thumma sthumma@codeaurora.org scsi: ufs: Enable quirk to ignore sending WRITE_SAME command

Arnd Bergmann arnd@arndb.de scsi: fas216: fix sense buffer initialization

Peter Robinson pbrobinson@gmail.com crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss

NeilBrown neilb@suse.com staging: lustre: lmv: correctly iput lmo_root

Colin Ian King colin.king@canonical.com staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr

NeilBrown neilb@suse.com staging: lustre: fix bug in osc_enter_cache_try

Larry Finger Larry.Finger@lwfinger.net Bluetooth: btusb: Add device ID for RTL8822BE

Brad Love brad@nextdimension.cc media: em28xx: USB bulk packet size fix

Chris Dickens christopher.a.dickens@gmail.com usb: gadget: composite: fix incorrect handling of OS desc requests

Wolfram Sang wsa+renesas@sang-engineering.com usb: gadget: udc: change comparison to bitshift when dealing with a mask

Lars-Peter Clausen lars@metafoo.de usb: gadget: ffs: Execute copy_to_user() with USER_DS set

Lars-Peter Clausen lars@metafoo.de usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS

Minas Harutyunyan hminas@synopsys.com usb: dwc2: host: Fix transaction errors in host mode

Grigor Tovmasyan Grigor.Tovmasyan@synopsys.com usb: dwc2: Fix interval type issue

Mathias Nyman mathias.nyman@linux.intel.com xhci: zero usb device slot_id member when disabling and freeing a xhci slot

Thinh Nguyen Thinh.Nguyen@synopsys.com usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields

Thinh Nguyen Thinh.Nguyen@synopsys.com usb: dwc3: Add SoftReset PHY synchonization delay

Nobutaka Okabe nob77413@gmail.com ALSA: usb-audio: Add native DSD support for Luxman DA-06

Vicente Bergas vicencb@gmail.com Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB

Giuseppe Lippolis giu.lippolis@gmail.com net-usb: add qmi_wwan if on lte modem wistron neweb d18q1

Torsten Hilbrich torsten.hilbrich@secunet.com net/usb/qmi_wwan.c: Add USB id for lt4120 modem

Fredrik Noring noring@nocrew.org USB: OHCI: Fix NULL dereference in HCDs using HCD_LOCAL_MEM

Dominik Bozek dominikx.bozek@intel.com usb: cdc_acm: prevent race at write to acm while system resumes

Vardan Mikayelyan mvardan@synopsys.com usb: dwc2: Fix dwc2_hsotg_core_init_disconnected()

Stefan Agner stefan@agner.ch usb: gadget: fsl_udc_core: fix ep valid checks

Manu Gautam mgautam@codeaurora.org usb: gadget: core: Fix use-after-free of usb_request

Roger Quadros rogerq@ti.com usb: dwc3: omap: don't miss events during suspend/resume

Brian Norris briannorris@chromium.org usb: dwc3: Undo PHY init if soft reset fails

John Keeping john@metanate.com usb: gadget: f_uac2: fix bFirstInterface in composite gadget

Tetsuo Handa penguin-kernel@I-love.SAKURA.ne.jp x86/kexec: Avoid double free_page() upon do_kexec_load() failure

Tetsuo Handa penguin-kernel@I-love.SAKURA.ne.jp hfsplus: stop workqueue when fill_super() failed

Johannes Berg johannes.berg@intel.com cfg80211: limit wiphy names to 128 bytes

Jens Remus jremus@linux.ibm.com scsi: zfcp: fix infinite iteration on ERP ready list

Alexander Potapenko glider@google.com scsi: sg: allocate with __GFP_ZERO in sg_build_indirect()

Jason Yan yanaijie@huawei.com scsi: libsas: defer ata device eh commands to libata

Martin Schwidefsky schwidefsky@de.ibm.com s390: use expoline thunks in the BPF JIT

Martin Schwidefsky schwidefsky@de.ibm.com s390: extend expoline to BC instructions

Martin Schwidefsky schwidefsky@de.ibm.com s390: move spectre sysfs attribute code

Martin Schwidefsky schwidefsky@de.ibm.com s390/kernel: use expoline for indirect branches

Martin Schwidefsky schwidefsky@de.ibm.com s390/ftrace: use expoline for indirect branches

Martin Schwidefsky schwidefsky@de.ibm.com s390/lib: use expoline for indirect branches

Martin Schwidefsky schwidefsky@de.ibm.com s390/crc32-vx: use expoline for indirect branches

Martin Schwidefsky schwidefsky@de.ibm.com s390: move expoline assembler macros to a header

Martin Schwidefsky schwidefsky@de.ibm.com s390: add assembler macros for CPU alternatives

Al Viro viro@zeniv.linux.org.uk ext2: fix a block leak

hpreg@vmware.com hpreg@vmware.com vmxnet3: use DMA memory barriers where required

hpreg@vmware.com hpreg@vmware.com vmxnet3: set the DMA mask before the first DMA map operation

Eric Dumazet edumazet@google.com tcp: purge write queue in tcp_connect_init()

Eric Dumazet edumazet@google.com sock_diag: fix use-after-free read in __sk_free

Willem de Bruijn willemb@google.com packet: in packet_snd start writing at link layer allocation

Willem de Bruijn willemb@google.com net: test tailroom before appending to linear skb

Tarick Bedeir tarick@google.com net/mlx4_core: Fix error handling in mlx4_init_port_info.

-------------

Diffstat:

Makefile | 4 +- arch/s390/crypto/crc32be-vx.S | 5 +- arch/s390/crypto/crc32le-vx.S | 4 +- arch/s390/include/asm/alternative-asm.h | 108 +++++++++++++ arch/s390/include/asm/nospec-insn.h | 195 +++++++++++++++++++++++ arch/s390/kernel/Makefile | 1 + arch/s390/kernel/asm-offsets.c | 1 + arch/s390/kernel/base.S | 24 +-- arch/s390/kernel/entry.S | 105 +++--------- arch/s390/kernel/mcount.S | 14 +- arch/s390/kernel/nospec-branch.c | 43 +++-- arch/s390/kernel/nospec-sysfs.c | 21 +++ arch/s390/kernel/reipl.S | 7 +- arch/s390/kernel/swsusp.S | 9 +- arch/s390/lib/mem.S | 9 +- arch/s390/net/bpf_jit.S | 16 +- arch/s390/net/bpf_jit_comp.c | 63 +++++++- arch/x86/kernel/machine_kexec_32.c | 6 +- arch/x86/kernel/machine_kexec_64.c | 4 +- drivers/bluetooth/btusb.c | 6 + drivers/clk/clk.c | 3 + drivers/clk/rockchip/clk-mmc-phase.c | 23 +++ drivers/clk/rockchip/clk-rk3228.c | 2 +- drivers/clk/samsung/clk-exynos3250.c | 4 +- drivers/clk/samsung/clk-exynos5250.c | 8 +- drivers/clk/samsung/clk-exynos5260.c | 2 +- drivers/clk/samsung/clk-exynos5433.c | 12 +- drivers/clk/samsung/clk-exynos7.c | 2 +- drivers/clk/samsung/clk-s3c2410.c | 16 +- drivers/clk/tegra/clk-pll.c | 2 + drivers/crypto/sunxi-ss/sun4i-ss-core.c | 1 + drivers/media/dvb-core/dmxdev.c | 2 +- drivers/media/pci/cx23885/cx23885-cards.c | 4 + drivers/media/pci/cx23885/cx23885-core.c | 10 ++ drivers/media/pci/cx25821/cx25821-core.c | 7 +- drivers/media/platform/s3c-camif/camif-capture.c | 7 +- drivers/media/platform/vivid/vivid-ctrls.c | 2 + drivers/media/usb/em28xx/em28xx.h | 2 +- drivers/media/v4l2-core/videobuf2-vmalloc.c | 2 +- drivers/message/fusion/mptctl.c | 2 + drivers/net/ethernet/mellanox/mlx4/main.c | 4 +- drivers/net/usb/qmi_wwan.c | 4 + drivers/net/vmxnet3/vmxnet3_drv.c | 72 ++++++--- drivers/rtc/hctosys.c | 5 + drivers/rtc/rtc-snvs.c | 15 +- drivers/rtc/rtc-tx4939.c | 6 +- drivers/s390/scsi/zfcp_dbf.c | 23 ++- drivers/s390/scsi/zfcp_ext.h | 5 +- drivers/s390/scsi/zfcp_scsi.c | 14 +- drivers/scsi/aacraid/commsup.c | 4 +- drivers/scsi/aacraid/linit.c | 5 +- drivers/scsi/arm/fas216.c | 2 +- drivers/scsi/bnx2fc/bnx2fc_io.c | 1 + drivers/scsi/libsas/sas_scsi_host.c | 33 ++-- drivers/scsi/lpfc/lpfc_attr.c | 5 + drivers/scsi/lpfc/lpfc_hbadisc.c | 5 +- drivers/scsi/lpfc/lpfc_sli.c | 2 + drivers/scsi/mpt3sas/mpt3sas_scsih.c | 2 +- drivers/scsi/mvsas/mv_94xx.c | 23 +-- drivers/scsi/qla2xxx/qla_isr.c | 6 +- drivers/scsi/qla4xxx/ql4_def.h | 2 + drivers/scsi/qla4xxx/ql4_os.c | 46 ++++++ drivers/scsi/sd.c | 3 +- drivers/scsi/sg.c | 2 +- drivers/scsi/storvsc_drv.c | 2 +- drivers/scsi/sym53c8xx_2/sym_hipd.c | 2 +- drivers/scsi/ufs/ufshcd.c | 2 + drivers/staging/lustre/lustre/include/obd.h | 2 +- drivers/staging/lustre/lustre/lmv/lmv_obd.c | 2 +- drivers/staging/lustre/lustre/osc/osc_cache.c | 2 +- drivers/staging/rtl8192u/r8192U_core.c | 2 + drivers/tty/serial/8250/8250_port.c | 3 +- drivers/tty/serial/arc_uart.c | 5 + drivers/tty/serial/fsl_lpuart.c | 4 + drivers/tty/serial/imx.c | 6 + drivers/tty/serial/mxs-auart.c | 4 + drivers/tty/serial/samsung.c | 4 + drivers/tty/serial/xilinx_uartps.c | 2 +- drivers/usb/class/cdc-acm.c | 9 +- drivers/usb/dwc2/core.h | 2 +- drivers/usb/dwc2/gadget.c | 12 +- drivers/usb/dwc2/hcd.c | 14 +- drivers/usb/dwc3/core.c | 16 +- drivers/usb/dwc3/core.h | 2 + drivers/usb/dwc3/dwc3-omap.c | 16 ++ drivers/usb/gadget/composite.c | 40 +++-- drivers/usb/gadget/function/f_fs.c | 6 +- drivers/usb/gadget/function/f_uac2.c | 2 + drivers/usb/gadget/udc/core.c | 2 +- drivers/usb/gadget/udc/fsl_udc_core.c | 4 +- drivers/usb/gadget/udc/goku_udc.h | 2 +- drivers/usb/host/ohci-hcd.c | 3 +- drivers/usb/host/xhci-mem.c | 2 + fs/ext2/inode.c | 10 -- fs/hfsplus/super.c | 1 + include/linux/usb/composite.h | 3 + include/uapi/linux/nl80211.h | 2 + net/core/sock.c | 2 +- net/ipv4/ip_output.c | 3 +- net/ipv4/tcp_output.c | 7 +- net/ipv6/ip6_output.c | 3 +- net/packet/af_packet.c | 4 +- net/wireless/core.c | 3 + sound/soc/au1x/ac97c.c | 6 +- sound/soc/samsung/i2s.c | 13 +- sound/soc/soc-topology.c | 3 + sound/usb/quirks.c | 29 ++-- 107 files changed, 975 insertions(+), 335 deletions(-)