[PATCH 4.9 00/84] 4.9.46-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 4.9.46 release.
There are 84 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed Aug 30 08:05:10 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.46-rc1.gz
or in the git tree and branch at:
  git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 4.9.46-rc1

Benjamin Herrenschmidt <benh@kernel.crashing.org>
    powerpc/mm: Ensure cpumask update is ordered

Lv Zheng <lv.zheng@intel.com>
    ACPI: EC: Fix regression related to wrong ECDT initialization order

James Morse <james.morse@arm.com>
    ACPI / APEI: Add missing synchronize_rcu() on NOTIFY_SCI removal

Joerg Roedel <jroedel@suse.de>
    ACPI: ioapic: Clear on-stack resource before using it

Dave Jiang <dave.jiang@intel.com>
    ntb: transport shouldn't disable link due to bogus values in SPADs

Logan Gunthorpe <logang@deltatee.com>
    ntb: ntb_test: ensure the link is up before trying to configure the mws

Allen Hubbe <Allen.Hubbe@dell.com>
    ntb: no sleep in ntb_async_tx_submit

Logan Gunthorpe <logang@deltatee.com>
    NTB: ntb_test: fix bug printing ntb_perf results

Logan Gunthorpe <logang@deltatee.com>
    ntb_transport: fix bug calculating num_qps_mw

Logan Gunthorpe <logang@deltatee.com>
    ntb_transport: fix qp count bug

Linus Torvalds <torvalds@linux-foundation.org>
    Clarify (and fix) MAX_LFS_FILESIZE macros

Charles Milette <charlesmilette@gmail.com>
    staging: rtl8188eu: add RNX-N150NUB support

Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
    iio: hid-sensor-trigger: Fix the race with user space powering up sensors

Dragos Bogdan <dragos.bogdan@analog.com>
    iio: imu: adis16480: Fix acceleration scale factor for adis16480

Martijn Coenen <maco@android.com>
    ANDROID: binder: fix proc->tsk check.

Riley Andrews <riandrews@google.com>
    binder: Use wake up hint for synchronous transactions.

Todd Kjos <tkjos@android.com>
    binder: use group leader instead of open thread

Todd Kjos <tkjos@android.com>
    Revert "android: binder: Sanity check at binder ioctl"

Jeffy Chen <jeffy.chen@rock-chips.com>
    Bluetooth: bnep: fix possible might sleep error in bnep_session

Jeffy Chen <jeffy.chen@rock-chips.com>
    Bluetooth: cmtp: fix possible might sleep error in cmtp_session

Jeffy Chen <jeffy.chen@rock-chips.com>
    Bluetooth: hidp: fix possible might sleep error in hidp_session_thread

Florian Westphal <fw@strlen.de>
    netfilter: nat: fix src map lookup

Zhang Bo <bo.zhang@nxp.com>
    Revert "leds: handle suspend/resume in heartbeat trigger"

Vadim Lomovtsev <vlomovts@redhat.com>
    net: sunrpc: svcsock: fix NULL-pointer exception

Eric Biggers <ebiggers@google.com>
    x86/mm: Fix use-after-free of ldt_struct

Nicholas Piggin <npiggin@gmail.com>
    timers: Fix excessive granularity of new timers after a nohz idle

Thomas Gleixner <tglx@linutronix.de>
    perf/x86/intel/rapl: Make package handling more robust

Masami Hiramatsu <mhiramat@kernel.org>
    perf probe: Fix --funcs to show correct symbols for offline module

Mark Rutland <mark.rutland@arm.com>
    perf/core: Fix group {cpu,task} validation

Steven Rostedt (VMware) <rostedt@goodmis.org>
    ftrace: Check for null ret_stack on profile function graph entry function

Chuck Lever <chuck.lever@oracle.com>
    nfsd: Limit end of page list when decoding NFSv4 WRITE

Ronnie Sahlberg <lsahlber@redhat.com>
    cifs: return ENAMETOOLONG for overlong names in cifs_open()/cifs_lookup()

Sachin Prabhu <sprabhu@redhat.com>
    cifs: Fix df output for users with quota limits

Nicholas Piggin <npiggin@gmail.com>
    kbuild: linker script do not match C names unless LD_DEAD_CODE_DATA_ELIMINATION is configured

Steven Rostedt (VMware) <rostedt@goodmis.org>
    tracing: Fix freeing of filter in create_filter() when set_str is false

Chunyu Hu <chuhu@redhat.com>
    tracing: Fix kmemleak in tracing_map_array_free()

Steven Rostedt (VMware) <rostedt@goodmis.org>
    tracing: Call clear_boot_tracer() at lateinit_sync

Koji Matsuoka <koji.matsuoka.xm@renesas.com>
    drm: rcar-du: Fix H/V sync signal polarity configuration

Koji Matsuoka <koji.matsuoka.xm@renesas.com>
    drm: rcar-du: Fix display timing controller parameter

Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
    drm: rcar-du: Fix crash in encoder failure error path

Maarten Lankhorst <maarten.lankhorst@linux.intel.com>
    drm/atomic: If the atomic check fails, return its value first

Chris Wilson <chris@chris-wilson.co.uk>
    drm: Release driver tracking before making the object available again

Pavel Tatashin <pasha.tatashin@oracle.com>
    mm/memblock.c: reversed logic in memblock_discard()

Eric Biggers <ebiggers@google.com>
    fork: fix incorrect fput of ->exe_file causing use-after-free

Eric Biggers <ebiggers@google.com>
    mm/madvise.c: fix freeing of locked page with MADV_FREE

Ulf Hansson <ulf.hansson@linaro.org>
    i2c: designware: Fix system suspend

Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
    mm, shmem: fix handling /sys/kernel/mm/transparent_hugepage/shmem_enabled

Alexey Brodkin <Alexey.Brodkin@synopsys.com>
    ARCv2: PAE40: Explicitly set MSB counterpart of SLC region ops addresses

Takashi Sakamoto <o-takashi@sakamocchi.jp>
    ALSA: firewire: fix NULL pointer dereference when releasing uninitialized data of iso-resource

Takashi Iwai <tiwai@suse.de>
    ALSA: hda - Add stereo mic quirk for Lenovo G50-70 (17aa:3978)

Takashi Iwai <tiwai@suse.de>
    ALSA: core: Fix unexpected error at replacing user TLV

Joakim Tjernlund <joakim.tjernlund@infinera.com>
    ALSA: usb-audio: Add delay quirk for H650e/Jabra 550a USB headsets

Paolo Bonzini <pbonzini@redhat.com>
    KVM: x86: block guest protection keys unless the host has them enabled

Heiko Carstens <heiko.carstens@de.ibm.com>
    KVM: s390: sthyi: fix specification exception detection

Heiko Carstens <heiko.carstens@de.ibm.com>
    KVM: s390: sthyi: fix sthyi inline assembly

Masaki Ota <masaki.ota@jp.alps.com>
    Input: ALPS - fix two-finger scroll breakage in right side on ALPS touchpad

KT Liao <kt.liao@emc.com.tw>
    Input: elan_i2c - add ELAN0602 ACPI ID to support Lenovo Yoga310

Aaron Ma <aaron.ma@canonical.com>
    Input: trackpoint - add new trackpoint firmware ID

Edward Cree <ecree@solarflare.com>
    bpf/verifier: fix min/max handling in BPF_SUB

Daniel Borkmann <daniel@iogearbox.net>
    bpf: fix mixed signed/unsigned derived min/max value bounds

Daniel Borkmann <daniel@iogearbox.net>
    bpf, verifier: fix alu ops against map_value{, _adj} register types

Daniel Borkmann <daniel@iogearbox.net>
    bpf: adjust verifier heuristics

John Fastabend <john.fastabend@gmail.com>
    bpf, verifier: add additional patterns to evaluate_reg_imm_alu

Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
    net_sched: fix order of queue length updates in qdisc_replace()

Xin Long <lucien.xin@gmail.com>
    net: sched: fix NULL pointer dereference when action calls some targets

Colin Ian King <colin.king@canonical.com>
    irda: do not leak initialized list.dev to userspace

Huy Nguyen <huyn@mellanox.com>
    net/mlx4_core: Enable 4K UAR if SRIOV module parameter is not enabled

Neal Cardwell <ncardwell@google.com>
    tcp: when rearming RTO, if RTO time is in past then fire RTO ASAP

Wei Wang <weiwan@google.com>
    ipv6: repair fib6 tree in failure case

Wei Wang <weiwan@google.com>
    ipv6: reset fn->rr_ptr when replacing route

Eric Dumazet <edumazet@google.com>
    tipc: fix use-after-free

Alexander Potapenko <glider@google.com>
    sctp: fully initialize the IPv6 address in sctp_v6_to_addr()

Colin Ian King <colin.king@canonical.com>
    nfp: fix infinite loop on umapping cleanup

Eric Dumazet <edumazet@google.com>
    ipv4: better IP_MAX_MTU enforcement

Eric Dumazet <edumazet@google.com>
    ptr_ring: use kmalloc_array()

Liping Zhang <zlpnobody@gmail.com>
    openvswitch: fix skb_panic due to the incorrect actions attrlen

Daniel Borkmann <daniel@iogearbox.net>
    bpf: fix bpf_trace_printk on 32 bit archs

Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
    net_sched: remove warning from qdisc_hash_add

Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
    net_sched/sfq: update hierarchical backlog when drop packet

Eric Dumazet <edumazet@google.com>
    ipv4: fix NULL dereference in free_fib_info_rcu()

Eric Dumazet <edumazet@google.com>
    dccp: defer ccid_hc_tx_delete() at dismantle time

Eric Dumazet <edumazet@google.com>
    dccp: purge write queue in dccp_destroy_sock()

Eric Dumazet <edumazet@google.com>
    af_key: do not use GFP_KERNEL in atomic contexts

Tushar Dave <tushar.n.dave@oracle.com>
    sparc64: remove unnecessary log message


-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arc/include/asm/cache.h                       |   2 +
 arch/arc/mm/cache.c                                |  13 +-
 arch/powerpc/include/asm/mmu_context.h             |  20 +-
 arch/powerpc/include/asm/pgtable-be-types.h        |   1 +
 arch/powerpc/include/asm/pgtable-types.h           |   1 +
 arch/s390/kvm/sthyi.c                              |   7 +-
 arch/sparc/kernel/pci_sun4v.c                      |   2 -
 arch/x86/events/intel/rapl.c                       |  58 +++---
 arch/x86/include/asm/mmu_context.h                 |   4 +-
 arch/x86/kvm/cpuid.c                               |   2 +-
 drivers/acpi/apei/ghes.c                           |   1 +
 drivers/acpi/ec.c                                  |  17 +-
 drivers/acpi/internal.h                            |   1 -
 drivers/acpi/ioapic.c                              |   6 +
 drivers/acpi/scan.c                                |   1 -
 drivers/android/binder.c                           |  19 +-
 drivers/gpu/drm/drm_atomic.c                       |   5 +-
 drivers/gpu/drm/drm_gem.c                          |   6 +-
 drivers/gpu/drm/rcar-du/rcar_du_crtc.c             |   6 +-
 drivers/gpu/drm/rcar-du/rcar_du_kms.c              |  10 +-
 drivers/i2c/busses/i2c-designware-platdrv.c        |  14 +-
 .../iio/common/hid-sensors/hid-sensor-trigger.c    |   8 +-
 drivers/iio/imu/adis16480.c                        |   2 +-
 drivers/input/mouse/alps.c                         |  41 +++-
 drivers/input/mouse/alps.h                         |   8 +
 drivers/input/mouse/elan_i2c_core.c                |   1 +
 drivers/input/mouse/trackpoint.c                   |   3 +-
 drivers/input/mouse/trackpoint.h                   |   3 +-
 drivers/leds/trigger/ledtrig-heartbeat.c           |  31 ----
 drivers/net/ethernet/mellanox/mlx4/main.c          |   4 +-
 .../net/ethernet/netronome/nfp/nfp_net_common.c    |   3 +-
 drivers/ntb/ntb_transport.c                        |  62 ++-----
 drivers/staging/rtl8188eu/os_dep/usb_intf.c        |   1 +
 fs/cifs/dir.c                                      |  18 +-
 fs/cifs/smb2pdu.c                                  |   4 +-
 fs/nfsd/nfs4xdr.c                                  |   6 +-
 include/asm-generic/vmlinux.lds.h                  |  38 ++--
 include/linux/bpf_verifier.h                       |   1 +
 include/linux/cpuhotplug.h                         |   1 -
 include/linux/fs.h                                 |   4 +-
 include/linux/ptr_ring.h                           |   9 +-
 include/linux/skb_array.h                          |   3 +-
 include/net/ip.h                                   |   4 +-
 include/net/sch_generic.h                          |   5 +-
 kernel/bpf/verifier.c                              | 206 ++++++++++++++++++---
 kernel/events/core.c                               |  39 ++--
 kernel/fork.c                                      |   1 +
 kernel/time/timer.c                                |  50 ++++-
 kernel/trace/bpf_trace.c                           |  34 +++-
 kernel/trace/ftrace.c                              |   4 +
 kernel/trace/trace.c                               |   2 +-
 kernel/trace/trace_events_filter.c                 |   4 +
 kernel/trace/tracing_map.c                         |  11 +-
 mm/madvise.c                                       |   2 +-
 mm/memblock.c                                      |   2 +-
 mm/shmem.c                                         |   4 +-
 net/bluetooth/bnep/core.c                          |  11 +-
 net/bluetooth/cmtp/core.c                          |  17 +-
 net/bluetooth/hidp/core.c                          |  33 ++--
 net/dccp/proto.c                                   |  19 +-
 net/ipv4/fib_semantics.c                           |  12 +-
 net/ipv4/route.c                                   |   2 +-
 net/ipv4/tcp_input.c                               |   3 +-
 net/ipv6/ip6_fib.c                                 |  26 +--
 net/irda/af_irda.c                                 |   2 +-
 net/key/af_key.c                                   |  48 ++---
 net/netfilter/nf_nat_core.c                        |  17 +-
 net/openvswitch/actions.c                          |   1 +
 net/openvswitch/datapath.c                         |   7 +-
 net/openvswitch/datapath.h                         |   2 +
 net/sched/act_ipt.c                                |   2 +
 net/sched/sch_api.c                                |   3 -
 net/sched/sch_sfq.c                                |   5 +-
 net/sctp/ipv6.c                                    |   2 +
 net/sunrpc/svcsock.c                               |  22 ++-
 net/tipc/netlink_compat.c                          |   6 +-
 sound/core/control.c                               |   2 +-
 sound/firewire/iso-resources.c                     |   7 +-
 sound/pci/hda/patch_conexant.c                     |   1 +
 sound/usb/quirks.c                                 |   9 +-
 tools/perf/util/probe-event.c                      |  25 +--
 tools/testing/selftests/ntb/ntb_test.sh            |   6 +-
 83 files changed, 711 insertions(+), 398 deletions(-)