This is the start of the stable review cycle for the 4.9.96 release. There are 95 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Tue Apr 24 13:51:53 UTC 2018. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.96-rc1.... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 4.9.96-rc1

Wanpeng Li wanpeng.li@hotmail.com block/mq: fix potential deadlock during cpu hotplug

Greg Thelen gthelen@google.com writeback: safer lock nesting

Amir Goldstein amir73il@gmail.com fanotify: fix logic of events on child

Matthew Wilcox mawilcox@microsoft.com mm/filemap.c: fix NULL pointer in page_cache_tree_insert()

Ian Kent raven@themaw.net autofs: mount point create should honour passed in mode

Al Viro viro@zeniv.linux.org.uk Don't leak MNT_INTERNAL away from internal mounts

Al Viro viro@zeniv.linux.org.uk rpc_pipefs: fix double-dput()

Al Viro viro@zeniv.linux.org.uk orangefs_kill_sb(): deal with allocation failures

Al Viro viro@zeniv.linux.org.uk hypfs_kill_super(): deal with failed allocations

Al Viro viro@zeniv.linux.org.uk jffs2_kill_sb(): deal with failed allocations

Jan Kara jack@suse.cz udf: Fix leak of UTF-16 surrogates into encoded strings

Michael Ellerman mpe@ellerman.id.au powerpc/lib: Fix off-by-one in alternate feature patching

Michael Neuling mikey@neuling.org powerpc/eeh: Fix enabling bridge MMIO windows

Matt Redfearn matt.redfearn@mips.com MIPS: memset.S: Fix clobber of v1 in last_fixup

Matt Redfearn matt.redfearn@mips.com MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup

Matt Redfearn matt.redfearn@mips.com MIPS: memset.S: EVA & fault support for small_memset

Matt Redfearn matt.redfearn@mips.com MIPS: uaccess: Add micromips clobbers to bzero invocation

Rodrigo Rivas Costa rodrigorivascosta@gmail.com HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device

Theodore Ts'o tytso@mit.edu random: add new ioctl RNDRESEEDCRNG

Theodore Ts'o tytso@mit.edu random: crng_reseed() should lock the crng instance that it is modifying

Theodore Ts'o tytso@mit.edu random: set up the NUMA crng instances after the CRNG is fully initialized

Theodore Ts'o tytso@mit.edu random: fix crng_ready() test

David Wang davidwang@zhaoxin.com ALSA: hda - New VIA controller suppor no-snoop path

Takashi Iwai tiwai@suse.de ALSA: rawmidi: Fix missing input substream checks in compat ioctls

Fabián Inostroza soulsonceonfire@gmail.com ALSA: line6: Use correct endpoint type for midi output

Paul Parsons lost.distance@yahoo.com drm/radeon: Fix PCIe lane width calculation

Marc Zyngier marc.zyngier@arm.com drm/rockchip: Clear all interrupts before requesting the IRQ

Alex Deucher alexander.deucher@amd.com drm/amdgpu: Fix PCIe lane width calculation

Bas Nieuwenhuizen basni@chromium.org drm/amdgpu: Fix always_valid bos multiple LRU insertions.

Alex Deucher alexander.deucher@amd.com drm/amdgpu: Add an ATPX quirk for hybrid laptop

Theodore Ts'o tytso@mit.edu ext4: don't allow r/w mounts if metadata blocks overlap the superblock

Takashi Iwai tiwai@suse.de ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation

Takashi Iwai tiwai@suse.de ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls

Takashi Iwai tiwai@suse.de ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams

Takashi Iwai tiwai@suse.de ALSA: pcm: Avoid potential races between OSS ioctls and read/write

Takashi Iwai tiwai@suse.de ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation

Alex Williamson alex.williamson@redhat.com vfio/pci: Virtualize Maximum Read Request Size

Igor Pylypiv igor.pylypiv@gmail.com watchdog: f71808e_wdt: Fix WD_EN register read

Sean Wang sean.wang@mediatek.com dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4

Mikhail Lappo mikhail.lappo@esrlabs.com thermal: imx: Fix race condition in imx_thermal_probe()

Ryo Kodama ryo.kodama.vz@renesas.com pwm: rcar: Fix a condition to prevent mismatch value setting to duty

Boris Brezillon boris.brezillon@bootlin.com clk: bcm2835: De-assert/assert PLL reset signal when appropriate

Arnd Bergmann arnd@arndb.de clk: fix false-positive Wmaybe-uninitialized warning

Richard Genoud richard.genoud@gmail.com clk: mvebu: armada-38x: add support for missing clocks

Ralph Sennhauser ralph.sennhauser@gmail.com clk: mvebu: armada-38x: add support for 1866MHz variants

Alex Smith alex.smith@imgtec.com mmc: jz4740: Fix race condition in IRQ mask update

Lu Baolu baolu.lu@linux.intel.com iommu/vt-d: Fix a potential memory leak

Krzysztof Mazur krzysiek@podlesie.net um: Use POSIX ucontext_t instead of struct ucontext

Jason A. Donenfeld Jason@zx2c4.com um: Compile with modern headers

Dan Williams dan.j.williams@intel.com nfit, address-range-scrub: fix scrub in-progress reporting

Dan Williams dan.j.williams@intel.com libnvdimm, namespace: use a safe lookup for dimm device name

Maxime Jayat maxime.jayat@mobile-devices.fr dmaengine: at_xdmac: fix rare residue corruption

Bart Van Assche bart.vanassche@wdc.com IB/srp: Fix completion vector assignment algorithm

Bart Van Assche bart.vanassche@wdc.com IB/srp: Fix srp_abort()

Takashi Iwai tiwai@suse.de ALSA: pcm: Fix UAF at PCM release via PCM timer access

Bart Van Assche bart.vanassche@wdc.com RDMA/rxe: Fix an out-of-bounds read

Roland Dreier roland@purestorage.com RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device

Theodore Ts'o tytso@mit.edu ext4: fail ext4_iget for root directory if unallocated

Theodore Ts'o tytso@mit.edu ext4: add validity checks for bitmap block numbers

Eryu Guan guaneryu@gmail.com ext4: protect i_disksize update by i_data_sem in direct write path

Theodore Ts'o tytso@mit.edu ext4: don't update checksum of new initialized bitmaps

Theodore Ts'o tytso@mit.edu jbd2: if the journal is aborted then don't allow update of the log tail

Theodore Ts'o tytso@mit.edu random: use a tighter cap in credit_entropy_bits_safe()

Aniruddha Banerjee aniruddhab@nvidia.com irqchip/gic: Take lock when updating irq type

Mika Westerberg mika.westerberg@linux.intel.com thunderbolt: Resume control channel after hibernation image is created

James Kelly jamespeterkelly@gmail.com ASoC: ssm2602: Replace reg_default_raw with reg_default

Aaron Ma aaron.ma@canonical.com HID: core: Fix size as type u32

Aaron Ma aaron.ma@canonical.com HID: Fix hid_report_len usage

Nicholas Piggin npiggin@gmail.com powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops

Nicholas Piggin npiggin@gmail.com powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently

Nicholas Piggin npiggin@gmail.com powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write()

Aaron Ma aaron.ma@canonical.com HID: i2c-hid: fix size check and type usage

Steve French stfrench@microsoft.com smb3: Fix root directory when server returns inode number of zero

Thinh Nguyen Thinh.Nguyen@synopsys.com usb: dwc3: pci: Properly cleanup resource

Zhengjun Xing zhengjun.xing@linux.intel.com USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw

Yavuz, Tuba tuba@ece.ufl.edu USB: gadget: f_midi: fixing a possible double-free in f_midi

Mika Westerberg mika.westerberg@linux.intel.com ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status()

Hans de Goede hdegoede@redhat.com ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E

Dan Carpenter dan.carpenter@oracle.com regmap: Fix reversed bounds check in regmap_raw_write()

Jason Andryuk jandryuk@gmail.com xen-netfront: Fix hang on device removal

Maxime Chevallier maxime.chevallier@bootlin.com spi: Fix scatterlist elements size in spi_map_buf

Santiago Esteban Santiago.Esteban@microchip.com ARM: dts: at91: sama5d4: fix pinctrl compatible string

Marek Szyprowski m.szyprowski@samsung.com ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250

Nicolas Ferre nicolas.ferre@microchip.com ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property

Felipe Balbi felipe.balbi@linux.intel.com usb: gadget: udc: core: update usb_ep_queue() documentation

Heinrich Schuchardt xypron.glpk@gmx.de usb: musb: gadget: misplaced out of bounds check

Vlastimil Babka vbabka@suse.cz mm, slab: reschedule cache_reap() on the same CPU

Eric Biggers ebiggers@google.com ipc/shm: fix use-after-free of shm file via remap_file_pages()

Takashi Iwai tiwai@suse.de resource: fix integer overflow at reallocation

Andrew Morton akpm@linux-foundation.org fs/reiserfs/journal.c: add missing resierfs_warning() arg

Richard Weinberger richard@nod.at ubi: Reject MLC NAND

Romain Izard romain.izard.pro@gmail.com ubi: Fix error for write access

Richard Weinberger richard@nod.at ubi: fastmap: Don't flush fastmap work on detach

Richard Weinberger richard@nod.at ubifs: Check ubifs_wbuf_sync() return code

Tejun Heo tj@kernel.org tty: make n_tty_read() always abort if hangup is in progress

-------------

Diffstat:

Makefile | 4 +- arch/arm/boot/dts/at91sam9g25.dtsi | 2 +- arch/arm/boot/dts/exynos5250.dtsi | 8 +- arch/arm/boot/dts/sama5d4.dtsi | 2 +- arch/mips/include/asm/uaccess.h | 11 +- arch/mips/lib/memset.S | 11 +- arch/powerpc/include/asm/barrier.h | 3 +- arch/powerpc/include/asm/synch.h | 4 - arch/powerpc/kernel/eeh_pe.c | 3 +- arch/powerpc/lib/feature-fixups.c | 2 +- arch/powerpc/platforms/powernv/opal-nvram.c | 11 +- arch/s390/hypfs/inode.c | 2 +- arch/um/os-Linux/file.c | 1 + arch/um/os-Linux/signal.c | 3 +- arch/x86/um/stub_segv.c | 3 +- block/blk-mq.c | 4 +- drivers/acpi/nfit/core.c | 5 +- drivers/acpi/video_detect.c | 9 ++ drivers/base/regmap/regmap.c | 2 +- drivers/char/random.c | 75 +++++---- drivers/clk/bcm/clk-bcm2835.c | 8 +- drivers/clk/mvebu/armada-38x.c | 15 +- drivers/clk/renesas/clk-sh73a0.c | 6 +- drivers/dma/at_xdmac.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 2 +- drivers/gpu/drm/amd/amdgpu/si_dpm.c | 4 +- drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/rockchip/rockchip_drm_vop.c | 23 +-- drivers/hid/hid-core.c | 10 +- drivers/hid/hid-input.c | 3 +- drivers/hid/hid-multitouch.c | 5 +- drivers/hid/hid-rmi.c | 4 +- drivers/hid/hidraw.c | 5 + drivers/hid/i2c-hid/i2c-hid.c | 13 +- drivers/hid/wacom_sys.c | 2 +- drivers/infiniband/core/ucma.c | 3 + drivers/infiniband/sw/rxe/rxe_verbs.c | 5 +- drivers/infiniband/ulp/srp/ib_srp.c | 18 +-- drivers/iommu/intel-svm.c | 1 + drivers/irqchip/irq-gic-common.c | 9 +- drivers/mmc/host/jz4740_mmc.c | 2 +- drivers/mtd/ubi/block.c | 2 +- drivers/mtd/ubi/build.c | 11 ++ drivers/mtd/ubi/fastmap-wl.c | 1 - drivers/net/xen-netfront.c | 7 +- drivers/nvdimm/namespace_devs.c | 4 +- drivers/pci/hotplug/acpiphp_glue.c | 23 ++- drivers/pwm/pwm-rcar.c | 8 +- drivers/spi/spi.c | 10 +- drivers/thermal/imx_thermal.c | 6 +- drivers/thunderbolt/nhi.c | 1 + drivers/tty/n_tty.c | 6 + drivers/tty/tty_io.c | 9 ++ drivers/usb/core/generic.c | 9 +- drivers/usb/dwc3/dwc3-pci.c | 2 +- drivers/usb/gadget/function/f_midi.c | 3 +- drivers/usb/gadget/u_f.h | 2 + drivers/usb/gadget/udc/core.c | 3 + drivers/usb/musb/musb_gadget_ep0.c | 14 +- drivers/vfio/pci/vfio_pci_config.c | 29 +++- drivers/watchdog/f71808e_wdt.c | 2 +- fs/autofs4/root.c | 2 +- fs/cifs/cifsglob.h | 1 + fs/cifs/inode.c | 33 ++++ fs/ext4/balloc.c | 19 ++- fs/ext4/ialloc.c | 54 ++----- fs/ext4/inode.c | 11 +- fs/ext4/super.c | 6 + fs/fs-writeback.c | 7 +- fs/jbd2/journal.c | 5 +- fs/jffs2/super.c | 2 +- fs/namespace.c | 3 +- fs/notify/fanotify/fanotify.c | 34 ++--- fs/orangefs/super.c | 5 + fs/reiserfs/journal.c | 2 +- fs/ubifs/super.c | 14 +- fs/udf/unicode.c | 6 + include/dt-bindings/clock/mt2701-clk.h | 3 +- include/linux/backing-dev-defs.h | 5 + include/linux/backing-dev.h | 30 ++-- include/linux/hid.h | 6 +- include/linux/tty.h | 1 + include/sound/pcm_oss.h | 1 + include/uapi/linux/random.h | 3 + ipc/shm.c | 23 ++- kernel/resource.c | 3 +- mm/filemap.c | 9 +- mm/page-writeback.c | 18 +-- mm/slab.c | 3 +- net/sunrpc/rpc_pipe.c | 1 + sound/core/oss/pcm_oss.c | 186 ++++++++++++++++++----- sound/core/pcm.c | 8 +- sound/core/rawmidi_compat.c | 18 ++- sound/pci/hda/hda_intel.c | 3 +- sound/soc/codecs/ssm2602.c | 19 ++- sound/usb/line6/midi.c | 2 +- 98 files changed, 694 insertions(+), 322 deletions(-)