4.9.103-stable review

This is the start of the stable review cycle for the 4.9.103 release. There are 96 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat May 26 09:35:42 UTC 2018. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.103-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.9.103-rc1

Colin Ian King <[email protected]>
rtc: tx4939: avoid unintended sign extension on a 24 bit shift

Alexandre Belloni <[email protected]>
rtc: hctosys: Ensure system time doesn't overflow time_t

Bryan O'Donoghue <[email protected]>
rtc: snvs: Fix usage of snvs_rtc_enable

Vignesh R <[email protected]>
serial: 8250: Don't service RX FIFO if interrupts are disabled

Geert Uytterhoeven <[email protected]>
serial: arc_uart: Fix out-of-bounds access through DT alias

Geert Uytterhoeven <[email protected]>
serial: fsl_lpuart: Fix out-of-bounds access through DT alias

Geert Uytterhoeven <[email protected]>
serial: imx: Fix out-of-bounds access through serial port index

Geert Uytterhoeven <[email protected]>
serial: mxs-auart: Fix out-of-bounds access through serial port index

Geert Uytterhoeven <[email protected]>
serial: samsung: Fix out-of-bounds access through serial port index

Geert Uytterhoeven <[email protected]>
serial: xuartps: Fix out-of-bounds access through DT alias

Colin Ian King <[email protected]>
media: cx25821: prevent out-of-bounds read on array card

Hans Verkuil <[email protected]>
media: vivid: fix incorrect capabilities for radio

Masami Hiramatsu <[email protected]>
media: vb2: Fix videobuf2 to map correct area

Arnd Bergmann <[email protected]>
media: s3c-camif: fix out-of-bounds array access

Brad Love <[email protected]>
media: cx23885: Override 888 ImpactVCBe crystal frequency

Mauro Carvalho Chehab <[email protected]>
media: dmxdev: fix error code for invalid ioctls

Andrzej Hajda <[email protected]>
clk: samsung: exynos3250: Fix PLL rates

Andrzej Hajda <[email protected]>
clk: samsung: exynos5250: Fix PLL rates

Andrzej Hajda <[email protected]>
clk: samsung: exynos5433: Fix PLL rates

Andrzej Hajda <[email protected]>
clk: samsung: exynos5260: Fix PLL rates

Andrzej Hajda <[email protected]>
clk: samsung: exynos7: Fix PLL rates

Andrzej Hajda <[email protected]>
clk: samsung: s3c2410: Fix PLL rates

Shawn Lin <[email protected]>
clk: rockchip: Prevent calculating mmc phase if clock rate is zero

Brad Love <[email protected]>
media: cx23885: Set subdev host data to clk_freq pointer

Marcel Ziswiler <[email protected]>
clk: tegra: Fix pll_u rate configuration

Shawn Lin <[email protected]>
clk: Don't show the incorrect clock phase

Shawn Lin <[email protected]>
clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228

Sylwester Nawrocki <[email protected]>
ASoC: samsung: i2s: Ensure the RCLK rate is properly determined

Ranjani Sridharan <[email protected]>
ASoC: topology: create TLV data for dapm widgets

Dan Carpenter <[email protected]>
ASoC: au1x: Fix timeout tests in au1xac97c_ac97_read()

James Smart <[email protected]>
scsi: lpfc: Fix frequency of Release WQE CQEs

James Smart <[email protected]>
scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP testing

James Smart <[email protected]>
scsi: lpfc: Fix issue_lip if link is disabled

Wilfried Weissmann <[email protected]>
scsi: mvsas: fix wrong endianness of sgpio api

Dave Carroll <[email protected]>
scsi: aacraid: Insure command thread is not recursively stopped

Jeremy Cline <[email protected]>
scsi: sd: Keep disk read-only when re-reading partition

Hannes Reinecke <[email protected]>
scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM

Manish Rangankar <[email protected]>
scsi: qla4xxx: skip error recovery in case of register disconnect.

Meelis Roos <[email protected]>
scsi: aacraid: fix shutdown crash when init fails

Michael Kelley (EOSG) <[email protected]>
scsi: storvsc: Increase cmd_per_lun for higher speed devices

Bart Van Assche <[email protected]>
scsi: qla2xxx: Avoid triggering undefined behavior in qla2x00_mbx_completion()

Dan Carpenter <[email protected]>
scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo()

Dan Carpenter <[email protected]>
scsi: sym53c8xx_2: iterator underflow in sym_getsync()

Chad Dupuis <[email protected]>
scsi: bnx2fc: Fix check in SCSI completion handler for timed out request

Sujit Reddy Thumma <[email protected]>
scsi: ufs: Enable quirk to ignore sending WRITE_SAME command

Arnd Bergmann <[email protected]>
scsi: fas216: fix sense buffer initialization

Peter Robinson <[email protected]>
crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss

NeilBrown <[email protected]>
staging: lustre: lmv: correctly iput lmo_root

Colin Ian King <[email protected]>

    staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr

NeilBrown <[email protected]>
staging: lustre: fix bug in osc_enter_cache_try

Larry Finger <[email protected]>
Bluetooth: btusb: Add device ID for RTL8822BE

Brad Love <[email protected]>
media: em28xx: USB bulk packet size fix

Chris Dickens <[email protected]>
usb: gadget: composite: fix incorrect handling of OS desc requests

Wolfram Sang <[email protected]>
usb: gadget: udc: change comparison to bitshift when dealing with a mask

Lars-Peter Clausen <[email protected]>
usb: gadget: ffs: Execute copy_to_user() with USER_DS set

Lars-Peter Clausen <[email protected]>
usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS

Minas Harutyunyan <[email protected]>
usb: dwc2: host: Fix transaction errors in host mode

Grigor Tovmasyan <[email protected]>
usb: dwc2: Fix interval type issue

Mathias Nyman <[email protected]>
xhci: zero usb device slot_id member when disabling and freeing a xhci slot

Thinh Nguyen <[email protected]>
usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields

Thinh Nguyen <[email protected]>
usb: dwc3: Add SoftReset PHY synchonization delay

Nobutaka Okabe <[email protected]>
ALSA: usb-audio: Add native DSD support for Luxman DA-06

Vicente Bergas <[email protected]>
Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB

Giuseppe Lippolis <[email protected]>
net-usb: add qmi_wwan if on lte modem wistron neweb d18q1

Torsten Hilbrich <[email protected]>
net/usb/qmi_wwan.c: Add USB id for lt4120 modem

Fredrik Noring <[email protected]>
USB: OHCI: Fix NULL dereference in HCDs using HCD_LOCAL_MEM

Dominik Bozek <[email protected]>
usb: cdc_acm: prevent race at write to acm while system resumes

Vardan Mikayelyan <[email protected]>
usb: dwc2: Fix dwc2_hsotg_core_init_disconnected()

Stefan Agner <[email protected]>
usb: gadget: fsl_udc_core: fix ep valid checks

Manu Gautam <[email protected]>
usb: gadget: core: Fix use-after-free of usb_request

Roger Quadros <[email protected]>
usb: dwc3: omap: don't miss events during suspend/resume

Brian Norris <[email protected]>
usb: dwc3: Undo PHY init if soft reset fails

John Keeping <[email protected]>
usb: gadget: f_uac2: fix bFirstInterface in composite gadget

Tetsuo Handa <[email protected]>
x86/kexec: Avoid double free_page() upon do_kexec_load() failure

Tetsuo Handa <[email protected]>
hfsplus: stop workqueue when fill_super() failed

Johannes Berg <[email protected]>
cfg80211: limit wiphy names to 128 bytes

Jens Remus <[email protected]>
scsi: zfcp: fix infinite iteration on ERP ready list

Alexander Potapenko <[email protected]>
scsi: sg: allocate with __GFP_ZERO in sg_build_indirect()

Jason Yan <[email protected]>
scsi: libsas: defer ata device eh commands to libata

Martin Schwidefsky <[email protected]>
s390: use expoline thunks in the BPF JIT

Martin Schwidefsky <[email protected]>
s390: extend expoline to BC instructions

Martin Schwidefsky <[email protected]>
s390: move spectre sysfs attribute code

Martin Schwidefsky <[email protected]>
s390/kernel: use expoline for indirect branches

Martin Schwidefsky <[email protected]>
s390/ftrace: use expoline for indirect branches

Martin Schwidefsky <[email protected]>
s390/lib: use expoline for indirect branches

Martin Schwidefsky <[email protected]>
s390/crc32-vx: use expoline for indirect branches

Martin Schwidefsky <[email protected]>
s390: move expoline assembler macros to a header

Martin Schwidefsky <[email protected]>
s390: add assembler macros for CPU alternatives

Al Viro <[email protected]>
ext2: fix a block leak

[email protected] <[email protected]>
vmxnet3: use DMA memory barriers where required

[email protected] <[email protected]>
vmxnet3: set the DMA mask before the first DMA map operation

Eric Dumazet <[email protected]>
tcp: purge write queue in tcp_connect_init()

Eric Dumazet <[email protected]>
sock_diag: fix use-after-free read in __sk_free

Willem de Bruijn <[email protected]>
packet: in packet_snd start writing at link layer allocation

Willem de Bruijn <[email protected]>
net: test tailroom before appending to linear skb

Tarick Bedeir <[email protected]>
net/mlx4_core: Fix error handling in mlx4_init_port_info.

-------------

Diffstat:

 Makefile                                         |   4 +-
 arch/s390/crypto/crc32be-vx.S                    |   5 +-
 arch/s390/crypto/crc32le-vx.S                    |   4 +-
 arch/s390/include/asm/alternative-asm.h          | 108 +++++++++++++
 arch/s390/include/asm/nospec-insn.h              | 195 +++++++++++++++++++++++
 arch/s390/kernel/Makefile                        |   1 +
 arch/s390/kernel/asm-offsets.c                   |   1 +
 arch/s390/kernel/base.S                          |  24 +--
 arch/s390/kernel/entry.S                         | 105 +++---------
 arch/s390/kernel/mcount.S                        |  14 +-
 arch/s390/kernel/nospec-branch.c                 |  43 +++--
 arch/s390/kernel/nospec-sysfs.c                  |  21 +++
 arch/s390/kernel/reipl.S                         |   7 +-
 arch/s390/kernel/swsusp.S                        |   9 +-
 arch/s390/lib/mem.S                              |   9 +-
 arch/s390/net/bpf_jit.S                          |  16 +-
 arch/s390/net/bpf_jit_comp.c                     |  63 +++++++-
 arch/x86/kernel/machine_kexec_32.c               |   6 +-
 arch/x86/kernel/machine_kexec_64.c               |   4 +-
 drivers/bluetooth/btusb.c                        |   6 +
 drivers/clk/clk.c                                |   3 +
 drivers/clk/rockchip/clk-mmc-phase.c             |  23 +++
 drivers/clk/rockchip/clk-rk3228.c                |   2 +-
 drivers/clk/samsung/clk-exynos3250.c             |   4 +-
 drivers/clk/samsung/clk-exynos5250.c             |   8 +-
 drivers/clk/samsung/clk-exynos5260.c             |   2 +-
 drivers/clk/samsung/clk-exynos5433.c             |  12 +-
 drivers/clk/samsung/clk-exynos7.c                |   2 +-
 drivers/clk/samsung/clk-s3c2410.c                |  16 +-
 drivers/clk/tegra/clk-pll.c                      |   2 +
 drivers/crypto/sunxi-ss/sun4i-ss-core.c          |   1 +
 drivers/media/dvb-core/dmxdev.c                  |   2 +-
 drivers/media/pci/cx23885/cx23885-cards.c        |   4 +
 drivers/media/pci/cx23885/cx23885-core.c         |  10 ++
 drivers/media/pci/cx25821/cx25821-core.c         |   7 +-
 drivers/media/platform/s3c-camif/camif-capture.c |   7 +-
 drivers/media/platform/vivid/vivid-ctrls.c       |   2 +
 drivers/media/usb/em28xx/em28xx.h                |   2 +-
 drivers/media/v4l2-core/videobuf2-vmalloc.c      |   2 +-
 drivers/message/fusion/mptctl.c                  |   2 +
 drivers/net/ethernet/mellanox/mlx4/main.c        |   4 +-
 drivers/net/usb/qmi_wwan.c                       |   4 +
 drivers/net/vmxnet3/vmxnet3_drv.c                |  72 ++++++---
 drivers/rtc/hctosys.c                            |   5 +
 drivers/rtc/rtc-snvs.c                           |  15 +-
 drivers/rtc/rtc-tx4939.c                         |   6 +-
 drivers/s390/scsi/zfcp_dbf.c                     |  23 ++-
 drivers/s390/scsi/zfcp_ext.h                     |   5 +-
 drivers/s390/scsi/zfcp_scsi.c                    |  14 +-
 drivers/scsi/aacraid/commsup.c                   |   4 +-
 drivers/scsi/aacraid/linit.c                     |   5 +-
 drivers/scsi/arm/fas216.c                        |   2 +-
 drivers/scsi/bnx2fc/bnx2fc_io.c                  |   1 +
 drivers/scsi/libsas/sas_scsi_host.c              |  33 ++--
 drivers/scsi/lpfc/lpfc_attr.c                    |   5 +
 drivers/scsi/lpfc/lpfc_hbadisc.c                 |   5 +-
 drivers/scsi/lpfc/lpfc_sli.c                     |   2 +
 drivers/scsi/mpt3sas/mpt3sas_scsih.c             |   2 +-
 drivers/scsi/mvsas/mv_94xx.c                     |  23 +--
 drivers/scsi/qla2xxx/qla_isr.c                   |   6 +-
 drivers/scsi/qla4xxx/ql4_def.h                   |   2 +
 drivers/scsi/qla4xxx/ql4_os.c                    |  46 ++++++
 drivers/scsi/sd.c                                |   3 +-
 drivers/scsi/sg.c                                |   2 +-
 drivers/scsi/storvsc_drv.c                       |   2 +-
 drivers/scsi/sym53c8xx_2/sym_hipd.c              |   2 +-
 drivers/scsi/ufs/ufshcd.c                        |   2 +
 drivers/staging/lustre/lustre/include/obd.h      |   2 +-
 drivers/staging/lustre/lustre/lmv/lmv_obd.c      |   2 +-
 drivers/staging/lustre/lustre/osc/osc_cache.c    |   2 +-
 drivers/staging/rtl8192u/r8192U_core.c           |   2 +
 drivers/tty/serial/8250/8250_port.c              |   3 +-
 drivers/tty/serial/arc_uart.c                    |   5 +
 drivers/tty/serial/fsl_lpuart.c                  |   4 +
 drivers/tty/serial/imx.c                         |   6 +
 drivers/tty/serial/mxs-auart.c                   |   4 +
 drivers/tty/serial/samsung.c                     |   4 +
 drivers/tty/serial/xilinx_uartps.c               |   2 +-
 drivers/usb/class/cdc-acm.c                      |   9 +-
 drivers/usb/dwc2/core.h                          |   2 +-
 drivers/usb/dwc2/gadget.c                        |  12 +-
 drivers/usb/dwc2/hcd.c                           |  14 +-
 drivers/usb/dwc3/core.c                          |  16 +-
 drivers/usb/dwc3/core.h                          |   2 +
 drivers/usb/dwc3/dwc3-omap.c                     |  16 ++
 drivers/usb/gadget/composite.c                   |  40 +++--
 drivers/usb/gadget/function/f_fs.c               |   6 +-
 drivers/usb/gadget/function/f_uac2.c             |   2 +
 drivers/usb/gadget/udc/core.c                    |   2 +-
 drivers/usb/gadget/udc/fsl_udc_core.c            |   4 +-
 drivers/usb/gadget/udc/goku_udc.h                |   2 +-
 drivers/usb/host/ohci-hcd.c                      |   3 +-
 drivers/usb/host/xhci-mem.c                      |   2 +
 fs/ext2/inode.c                                  |  10 --
 fs/hfsplus/super.c                               |   1 +
 include/linux/usb/composite.h                    |   3 +
 include/uapi/linux/nl80211.h                     |   2 +
 net/core/sock.c                                  |   2 +-
 net/ipv4/ip_output.c                             |   3 +-
 net/ipv4/tcp_output.c                            |   7 +-
 net/ipv6/ip6_output.c                            |   3 +-
 net/packet/af_packet.c                           |   4 +-
 net/wireless/core.c                              |   3 +
 sound/soc/au1x/ac97c.c                           |   6 +-
 sound/soc/samsung/i2s.c                          |  13 +-
 sound/soc/soc-topology.c                         |   3 +
 sound/usb/quirks.c                               |  29 ++--
 107 files changed, 975 insertions(+), 335 deletions(-)