[PATCH 4.9 000/125] 4.9.40-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 4.9.40 release.
There are 125 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu Jul 27 19:19:43 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.40-rc1.gz
or in the git tree and branch at:
  git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 4.9.40-rc1

Greg Hackmann <ghackmann@google.com>
    alarmtimer: don't rate limit one-shot timers

Chunyu Hu <chuhu@redhat.com>
    tracing: Fix kmemleak in instance_rmdir

Sudeep Holla <Sudeep.Holla@arm.com>
    PM / Domains: defer dev_pm_domain_set() until genpd->attach_dev succeeds if present

Jan Kara <jack@suse.cz>
    reiserfs: Don't clear SGID when inheriting ACLs

Bjorn Andersson <bjorn.andersson@linaro.org>
    spmi: Include OF based modalias in device uevent

Stephen Boyd <stephen.boyd@linaro.org>
    of: device: Export of_device_{get_modalias, uvent_modalias} to modules

Prarit Bhargava <prarit@redhat.com>
    acpi/nfit: Fix memory corruption/Unregister mce decoder on failure

Amir Goldstein <amir73il@gmail.com>
    ovl: fix random return value on mount

Jan Kara <jack@suse.cz>
    hfsplus: Don't clear SGID when inheriting ACLs

Bart Van Assche <bart.vanassche@sandisk.com>
    mlx5: Avoid that mlx5_ib_sg_to_klms() overflows the klms[] array

Imre Deak <imre.deak@intel.com>
    drm/mst: Avoid processing partially received up/down message transactions

Imre Deak <imre.deak@intel.com>
    drm/mst: Avoid dereferencing a NULL mstb in drm_dp_mst_handle_up_req()

Imre Deak <imre.deak@intel.com>
    drm/mst: Fix error handling during MST sideband message reception

Ismail, Mustafa <mustafa.ismail@intel.com>
    RDMA/core: Initialize port_num in qp_attr

Yan, Zheng <zyan@redhat.com>
    ceph: fix race in concurrent readdir

Arnd Bergmann <arnd@arndb.de>
    staging: lustre: ko2iblnd: check copy_from_iter/copy_to_iter return code

Teddy Wang <teddy.wang@siliconmotion.com>
    staging: sm750fb: avoid conflicting vesafb

Ian Abbott <abbotti@mev.co.uk>
    staging: comedi: ni_mio_common: fix AO timer off-by-one regression

Michael Gugino <michael.gugino.2@gmail.com>
    staging: rtl8188eu: add TL-WN722N v2 support

Ingo Molnar <mingo@kernel.org>
    Revert "perf/core: Drop kernel samples even though :u is specified"

Jin Yao <yao.jin@linux.intel.com>
    perf annotate: Fix broken arrow at row 0 connecting jmp instruction to its target

Nicholas Bellinger <nab@linux-iscsi.org>
    iser-target: Avoid isert_conn->cm_id dereference in isert_login_recv_done

Jiang Yi <jiangyilism@gmail.com>
    target: Fix COMPARE_AND_WRITE caw_sem leak during se_cmd quiesce

Jan Kara <jack@suse.cz>
    udf: Fix deadlock between writeback and udf_setsize()

NeilBrown <neilb@suse.com>
    NFS: only invalidate dentrys that are clearly invalid.

Jason A. Donenfeld <Jason@zx2c4.com>
    sunrpc: use constant time memory comparison for mac

Moni Shoua <monis@mellanox.com>
    IB/core: Namespace is mandatory input for address resolution

Vladimir Neyelov <vladimirn@mellanox.com>
    IB/iser: Fix connection teardown race condition

Chen Hong <chenhong3@huawei.com>
    Input: i8042 - fix crash at boot time

Maciej W. Rozycki <macro@imgtec.com>
    MIPS: Fix a typo: s/preset/present/ in r2-to-r6 emulation error message

Maciej W. Rozycki <macro@imgtec.com>
    MIPS: Send SIGILL for R6 branches in `__compute_return_epc_for_insn'

Maciej W. Rozycki <macro@imgtec.com>
    MIPS: Send SIGILL for linked branches in `__compute_return_epc_for_insn'

Maciej W. Rozycki <macro@imgtec.com>
    MIPS: Rename `sigill_r6' to `sigill_r2r6' in `__compute_return_epc_for_insn'

Maciej W. Rozycki <macro@imgtec.com>
    MIPS: Send SIGILL for BPOSGE32 in `__compute_return_epc_for_insn'

Maciej W. Rozycki <macro@imgtec.com>
    MIPS: math-emu: Prevent wrong ISA mode instruction emulation

Maciej W. Rozycki <macro@imgtec.com>
    MIPS: Fix unaligned PC interpretation in `compute_return_epc'

Maciej W. Rozycki <macro@imgtec.com>
    MIPS: Actually decode JALX in `__compute_return_epc_for_insn'

James Hogan <james.hogan@imgtec.com>
    MIPS: Save static registers before sysmips

Maciej W. Rozycki <macro@linux-mips.org>
    MIPS: Fix MIPS I ISA /proc/cpuinfo reporting

Seunghun Han <kkamagui@gmail.com>
    x86/ioapic: Pass the correct data to unmask_ioapic_irq()

Seunghun Han <kkamagui@gmail.com>
    x86/acpi: Prevent out of bound access caused by broken ACPI tables

Lv Zheng <lv.zheng@intel.com>
    Revert "ACPI / EC: Enable event freeze mode..." to fix a regression

Lv Zheng <lv.zheng@intel.com>
    ACPI / EC: Drop EC noirq hooks to fix a regression

Richard Weinberger <richard@nod.at>
    ubifs: Don't leak kernel memory to the MTD

James Hogan <james.hogan@imgtec.com>
    MIPS: Negate error syscall return in trace

James Hogan <james.hogan@imgtec.com>
    MIPS: Fix mips_atomic_set() with EVA

James Hogan <james.hogan@imgtec.com>
    MIPS: Fix mips_atomic_set() retry condition

Dan Carpenter <dan.carpenter@oracle.com>
    ftrace: Fix uninitialized variable in match_records()

Marta Rybczynska <mrybczyn@kalray.eu>
    nvme-rdma: remove race conditions from IB signalling

Alex Williamson <alex.williamson@redhat.com>
    vfio: New external user group/file match

Alex Williamson <alex.williamson@redhat.com>
    vfio: Fix group release deadlock

Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
    ovl: drop CAP_SYS_RESOURCE from saved mounter's credentials

John Brooks <john@fastquake.com>
    drm/ttm: Fix use-after-free in ttm_bo_clean_mm

Jaegeuk Kim <jaegeuk@kernel.org>
    f2fs: Don't clear SGID when inheriting ACLs

Jin Qian <jinqian@android.com>
    f2fs: sanity check size of nat and sit cache

Jan Kara <jack@suse.cz>
    xfs: Don't clear SGID when inheriting ACLs

Corey Minyard <cminyard@mvista.com>
    ipmi:ssif: Add missing unlock in error branch

Tony Camuso <tcamuso@redhat.com>
    ipmi: use rcu lock around call to intf->handlers->sender()

Mario Kleiner <mario.kleiner.de@gmail.com>
    drm/radeon: Fix eDP for single-display iMac10,1 (v2)

Alex Deucher <alexander.deucher@amd.com>
    drm/radeon/ci: disable mclk switching for high refresh rates (v2)

Tom St Denis <tom.stdenis@amd.com>
    drm/amd/amdgpu: Return error if initiating read out of range on vram

Jiri Olsa <jolsa@kernel.org>
    s390/syscalls: Fix out of bounds arguments access

Xiao Ni <xni@redhat.com>
    Raid5 should update rdev->sectors after reshape

Jan Kara <jack@suse.cz>
    ext2: Don't clear SGID when inheriting ACLs

Toshi Kani <toshi.kani@hpe.com>
    libnvdimm: fix badblock range handling of ARS range

Vishal Verma <vishal.l.verma@intel.com>
    libnvdimm, btt: fix btt_rw_page not returning errors

Devin Heitmueller <dheitmueller@kernellabs.com>
    cx88: Fix regression in initial video standard setting

Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
    x86/xen: allow userspace access during hypercalls

Mikulas Patocka <mpatocka@redhat.com>
    md: don't use flush_signals in userspace processes

Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
    usb: renesas_usbhs: gadget: disable all eps when the driver stops

Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
    usb: renesas_usbhs: fix usbhsc_resume() for !USBHSF_RUNTIME_PWCTRL

Johan Hovold <johan@kernel.org>
    USB: cdc-acm: add device-id for quirky printer

Colin Ian King <colin.king@canonical.com>
    usb: storage: return on error to avoid a null pointer dereference

Devin Heitmueller <dheitmueller@kernellabs.com>
    mxl111sf: Fix driver to use heap allocate buffers for USB messages

Jiahau Chang <jiahau@gmail.com>
    xhci: Bad Ethernet performance plugged in ASM1042A host

Mathias Nyman <mathias.nyman@linux.intel.com>
    xhci: Fix NULL pointer dereference when cleaning up streams for removed host

Mathias Nyman <mathias.nyman@linux.intel.com>
    xhci: fix 20000ms port resume timeout

Julian Anastasov <ja@ssi.bg>
    ipvs: SNAT packet replies only for NATed connections

Chen Yu <yu.c.chen@intel.com>
    PCI/PM: Restore the status of PCI devices across hibernation

Shawn Lin <shawn.lin@rock-chips.com>
    PCI: rockchip: Use normal register bank for config accessors

Bjorn Helgaas <bhelgaas@google.com>
    PCI: Work around poweroff & suspend-to-RAM issue on Macbook Pro 11

Herbert Xu <herbert@gondor.apana.org.au>
    af_key: Fix sadb_x_ipsecrequest parsing

Benjamin Herrenschmidt <benh@kernel.crashing.org>
    powerpc/mm/radix: Properly clear process table entry

Oliver O'Halloran <oohall@gmail.com>
    powerpc/asm: Mark cr0 as clobbered in mftb()

Anton Blanchard <anton@samba.org>
    powerpc: Fix emulation of mfocrf in emulate_step()

Anton Blanchard <anton@samba.org>
    powerpc: Fix emulation of mcrf in emulate_step()

Michael Ellerman <mpe@ellerman.id.au>
    powerpc/64: Fix atomic64_inc_not_zero() to return an int

Balbir Singh <bsingharora@gmail.com>
    powerpc/pseries: Fix passing of pp0 in updatepp() and updateboltedpp()

Bart Van Assche <bart.vanassche@sandisk.com>
    xen/scsiback: Fix a TMR related use-after-free

Nicholas Bellinger <nab@linux-iscsi.org>
    iscsi-target: Add login_keys_workaround attribute for non RFC initiators

Ewan D. Milne <emilne@redhat.com>
    scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state

Maurizio Lombardi <mlombard@redhat.com>
    scsi: ses: do not add a device to an enclosure if enclosure_add_links() fails.

Krzysztof Kozlowski <krzk@kernel.org>
    PM / Domains: Fix unsafe iteration over modified list of domains

Krzysztof Kozlowski <krzk@kernel.org>
    PM / Domains: Fix unsafe iteration over modified list of domain providers

Krzysztof Kozlowski <krzk@kernel.org>
    PM / Domains: Fix unsafe iteration over modified list of device links

Satish Babu Patakokila <sbpata@codeaurora.org>
    ASoC: compress: Derive substream from stream based on direction

Matwey V Kornilov <matwey@sai.msu.ru>
    igb: Explicitly select page 0 at initialization

Jan Kara <jack@suse.cz>
    btrfs: Don't clear SGID when inheriting ACLs

Arnd Bergmann <arnd@arndb.de>
    wlcore: fix 64K page support

Jason A. Donenfeld <Jason@zx2c4.com>
    Bluetooth: use constant time memory comparison for secret values

Adrian Hunter <adrian.hunter@intel.com>
    perf intel-pt: Clear FUP flag on error

Adrian Hunter <adrian.hunter@intel.com>
    perf intel-pt: Use FUP always when scanning for an IP

Adrian Hunter <adrian.hunter@intel.com>
    perf intel-pt: Ensure never to set 'last_ip' when packet 'count' is zero

Adrian Hunter <adrian.hunter@intel.com>
    perf intel-pt: Fix last_ip usage

Adrian Hunter <adrian.hunter@intel.com>
    perf intel-pt: Ensure IP is zero when state is INTEL_PT_STATE_NO_IP

Adrian Hunter <adrian.hunter@intel.com>
    perf intel-pt: Fix missing stack clear

Adrian Hunter <adrian.hunter@intel.com>
    perf intel-pt: Improve sample timestamp

Adrian Hunter <adrian.hunter@intel.com>
    perf intel-pt: Move decoder error setting into one condition

Mateusz Jurczyk <mjurczyk@google.com>
    NFC: Add sockaddr length checks before accessing sa_family in bind handlers

Mateusz Jurczyk <mjurczyk@google.com>
    nfc: Fix the sockaddr length sanitization in llcp_sock_connect

Mateusz Jurczyk <mjurczyk@google.com>
    nfc: Ensure presence of required attributes in the activate_target handler

Johan Hovold <johan@kernel.org>
    NFC: nfcmrvl: fix firmware-management initialisation

Johan Hovold <johan@kernel.org>
    NFC: nfcmrvl: use nfc-device for firmware download

Johan Hovold <johan@kernel.org>
    NFC: nfcmrvl: do not use device-managed resources

Johan Hovold <johan@kernel.org>
    NFC: nfcmrvl_uart: add missing tty-device sanity check

Johan Hovold <johan@kernel.org>
    NFC: fix broken device allocation

Miaoqing Pan <miaoqing@codeaurora.org>
    ath9k: fix an invalid pointer dereference in ath9k_rng_stop()

Miaoqing Pan <miaoqing@codeaurora.org>
    ath9k: fix tx99 bus error

Miaoqing Pan <miaoqing@codeaurora.org>
    ath9k: fix tx99 use after free

Viresh Kumar <viresh.kumar@linaro.org>
    thermal: cpu_cooling: Avoid accessing potentially freed structures

Johan Hovold <johan@kernel.org>
    thermal: max77620: fix device-node reference imbalance

Mauro Carvalho Chehab <mchehab@kernel.org>
    s5p-jpeg: don't return a random width/height

Mike Snitzer <snitzer@redhat.com>
    dm mpath: cleanup -Wbool-operation warning in choose_pgpath()

Arnd Bergmann <arnd@arndb.de>
    ir-core: fix gcc-7 warning on bool arithmetic

Linus Torvalds <torvalds@linux-foundation.org>
    disable new gcc-7.1.1 warnings for now


-------------

Diffstat:

 Makefile                                           |  7 +-
 arch/mips/include/asm/branch.h                     |  5 +-
 arch/mips/kernel/branch.c                          | 71 +++++++++-----------
 arch/mips/kernel/proc.c                            |  2 +-
 arch/mips/kernel/ptrace.c                          |  2 +-
 arch/mips/kernel/scall32-o32.S                     |  2 +-
 arch/mips/kernel/scall64-64.S                      |  2 +-
 arch/mips/kernel/scall64-n32.S                     |  2 +-
 arch/mips/kernel/scall64-o32.S                     |  2 +-
 arch/mips/kernel/syscall.c                         | 15 ++++-
 arch/mips/math-emu/cp1emu.c                        | 38 +++++++++++
 arch/powerpc/include/asm/atomic.h                  |  4 +-
 arch/powerpc/include/asm/reg.h                     |  2 +-
 arch/powerpc/lib/sstep.c                           | 19 +++++-
 arch/powerpc/mm/mmu_context_book3s64.c             | 12 +++-
 arch/powerpc/platforms/pseries/lpar.c              | 11 ++-
 arch/s390/include/asm/syscall.h                    |  6 ++
 arch/x86/include/asm/xen/hypercall.h               |  3 +
 arch/x86/kernel/acpi/boot.c                        |  8 +++
 arch/x86/kernel/apic/io_apic.c                     |  2 +-
 arch/x86/pci/fixup.c                               | 32 +++++++++
 drivers/acpi/ec.c                                  | 21 +-----
 drivers/acpi/nfit/core.c                           | 10 ++-
 drivers/base/power/domain.c                        | 20 +++---
 drivers/char/ipmi/ipmi_msghandler.c                |  5 ++
 drivers/char/ipmi/ipmi_ssif.c                      |  5 ++
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |  3 +
 drivers/gpu/drm/drm_dp_mst_topology.c              | 41 +++++++++---
 drivers/gpu/drm/radeon/atombios_encoders.c         | 13 +++-
 drivers/gpu/drm/radeon/ci_dpm.c                    |  6 ++
 drivers/gpu/drm/ttm/ttm_bo.c                       |  4 +-
 drivers/infiniband/core/addr.c                     |  6 +-
 drivers/infiniband/core/cma.c                      |  2 +
 drivers/infiniband/hw/mlx5/mr.c                    |  2 +-
 drivers/infiniband/ulp/iser/iscsi_iser.c           | 11 +++
 drivers/infiniband/ulp/isert/ib_isert.c            |  2 +-
 drivers/input/serio/i8042.c                        | 12 +++-
 drivers/md/dm-mpath.c                              |  4 +-
 drivers/md/raid1.c                                 |  5 +-
 drivers/md/raid5.c                                 |  9 +--
 drivers/media/pci/cx88/cx88-cards.c                |  9 ++-
 drivers/media/pci/cx88/cx88-video.c                |  2 +-
 drivers/media/platform/s5p-jpeg/jpeg-core.c        |  8 +--
 drivers/media/rc/imon.c                            |  2 +-
 drivers/media/usb/dvb-usb-v2/mxl111sf-i2c.c        |  4 +-
 drivers/media/usb/dvb-usb-v2/mxl111sf.c            | 32 +++++----
 drivers/media/usb/dvb-usb-v2/mxl111sf.h            |  8 ++-
 drivers/misc/enclosure.c                           | 14 ++--
 drivers/net/ethernet/intel/igb/e1000_82575.c       |  1 +
 drivers/net/wireless/ath/ath9k/ar9003_phy.c        |  2 -
 drivers/net/wireless/ath/ath9k/rng.c               |  4 +-
 drivers/net/wireless/ath/ath9k/tx99.c              | 13 ++--
 drivers/net/wireless/ti/wlcore/spi.c               |  6 +-
 drivers/nfc/nfcmrvl/fw_dnld.c                      |  7 +-
 drivers/nfc/nfcmrvl/main.c                         | 35 +++++-----
 drivers/nfc/nfcmrvl/uart.c                         |  8 +--
 drivers/nvdimm/btt.c                               |  9 ++-
 drivers/nvdimm/core.c                              |  7 +-
 drivers/nvme/host/rdma.c                           | 20 +++---
 drivers/of/device.c                                |  2 +
 drivers/pci/host/pcie-rockchip.c                   | 13 ++--
 drivers/pci/pci-driver.c                           |  1 +
 drivers/scsi/scsi_scan.c                           |  5 +-
 drivers/scsi/scsi_sysfs.c                          |  8 ++-
 drivers/spmi/spmi.c                                | 12 ++++
 drivers/staging/comedi/drivers/ni_mio_common.c     |  3 +-
 .../staging/lustre/lnet/klnds/o2iblnd/o2iblnd_cb.c | 19 ++++--
 drivers/staging/rtl8188eu/os_dep/usb_intf.c        |  1 +
 drivers/staging/sm750fb/sm750.c                    | 24 +++++++
 drivers/target/iscsi/iscsi_target_configfs.c       |  2 +
 drivers/target/iscsi/iscsi_target_nego.c           |  6 +-
 drivers/target/iscsi/iscsi_target_parameters.c     | 41 ++++++++----
 drivers/target/iscsi/iscsi_target_parameters.h     |  2 +-
 drivers/target/iscsi/iscsi_target_tpg.c            | 19 ++++++
 drivers/target/iscsi/iscsi_target_tpg.h            |  1 +
 drivers/target/target_core_transport.c             |  9 +++
 drivers/thermal/cpu_cooling.c                      |  4 +-
 drivers/thermal/max77620_thermal.c                 | 10 ++-
 drivers/usb/class/cdc-acm.c                        |  3 +
 drivers/usb/host/pci-quirks.c                      | 54 +++++++++++++++
 drivers/usb/host/pci-quirks.h                      |  2 +
 drivers/usb/host/xhci-hub.c                        |  3 +
 drivers/usb/host/xhci-pci.c                        |  6 ++
 drivers/usb/host/xhci-ring.c                       | 11 +--
 drivers/usb/host/xhci.c                            |  6 ++
 drivers/usb/host/xhci.h                            |  1 +
 drivers/usb/renesas_usbhs/common.c                 |  4 +-
 drivers/usb/renesas_usbhs/mod_gadget.c             | 31 +++++++--
 drivers/usb/storage/isd200.c                       |  5 +-
 drivers/vfio/vfio.c                                | 46 ++++++++++++-
 drivers/xen/xen-scsiback.c                         | 33 +++------
 fs/btrfs/acl.c                                     | 13 ++--
 fs/ceph/dir.c                                      |  5 ++
 fs/ext2/acl.c                                      | 36 ++++++----
 fs/f2fs/acl.c                                      |  2 +-
 fs/f2fs/segment.c                                  |  7 ++
 fs/hfsplus/posix_acl.c                             | 30 +++++----
 fs/nfs/dir.c                                       | 12 ++--
 fs/nfs/inode.c                                     |  4 +-
 fs/overlayfs/super.c                               |  9 ++-
 fs/reiserfs/xattr_acl.c                            | 12 ++--
 fs/ubifs/journal.c                                 | 10 +--
 fs/udf/inode.c                                     |  4 +-
 fs/xfs/xfs_acl.c                                   |  6 +-
 fs/xfs/xfs_acl.h                                   |  1 +
 fs/xfs/xfs_iops.c                                  |  4 +-
 include/linux/vfio.h                               |  2 +
 include/scsi/scsi_device.h                         |  1 +
 include/target/iscsi/iscsi_target_core.h           |  9 +++
 kernel/events/core.c                               | 21 ------
 kernel/time/alarmtimer.c                           |  3 +-
 kernel/trace/ftrace.c                              |  2 +-
 kernel/trace/trace.c                               |  1 +
 net/bluetooth/smp.c                                | 35 +++++-----
 net/key/af_key.c                                   | 47 +++++++------
 net/netfilter/ipvs/ip_vs_core.c                    | 19 ++++--
 net/nfc/core.c                                     | 31 +++++----
 net/nfc/llcp_sock.c                                |  9 +--
 net/nfc/nci/core.c                                 |  3 +-
 net/nfc/netlink.c                                  |  4 +-
 net/sunrpc/auth_gss/gss_krb5_crypto.c              |  3 +-
 sound/soc/soc-compress.c                           |  6 +-
 tools/perf/ui/browser.c                            |  2 +-
 .../perf/util/intel-pt-decoder/intel-pt-decoder.c  | 78 +++++++++++++++++-----
 virt/kvm/vfio.c                                    | 27 +++++---
 125 files changed, 1026 insertions(+), 438 deletions(-)