[PATCH 4.9 000/130] 4.9.124-stable review

Greg Kroah-Hartman
2018-08-23T08:02:06Z

This is the start of the stable review cycle for the 4.9.124 release.
There are 130 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat Aug 25 07:48:45 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.124-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 4.9.124-rc1

Jann Horn <jannh@google.com>
reiserfs: fix broken xattr handling (heap corruption, bad retval)

Esben Haabendal <eha@deif.com>
i2c: imx: Fix race condition in dma read

Lukas Wunner <lukas@wunner.de>
PCI: pciehp: Fix unprotected list iteration in IRQ handler

Lukas Wunner <lukas@wunner.de>
PCI: pciehp: Fix use-after-free on unplug

Myron Stowe <myron.stowe@redhat.com>
PCI: Skip MPS logic for Virtual Functions (VFs)

Lukas Wunner <lukas@wunner.de>
PCI: hotplug: Don't leak pci_slot on registration failure

Sergei Shtylyov <sergei.shtylyov@cogentembedded.com>
PCI: OF: Fix I/O space page leak

John David Anglin <dave.anglin@bell.net>
parisc: Remove unnecessary barriers from spinlock.h

Willem de Bruijn <willemb@google.com>
packet: refine ring v3 block size test to hold one frame

Florian Westphal <fw@strlen.de>
netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state

Eric Dumazet <edumazet@google.com>
xfrm_user: prevent leaking 2 bytes of kernel memory

John David Anglin <dave.anglin@bell.net>
parisc: Remove ordered stores from syscall.S

Jeremy Cline <jcline@redhat.com>
ext4: fix spectre gadget in ext4_mb_regular_allocator()

Paolo Bonzini <pbonzini@redhat.com>
KVM: irqfd: fix race between EPOLLHUP and irq_bypass_register_consumer

Randy Dunlap <rdunlap@infradead.org>
tcp: identify cryptic messages as TCP seq # bugs

Stefan Wahren <stefan.wahren@i2se.com>
net: qca_spi: Fix log level if probe fails

Stefan Wahren <stefan.wahren@i2se.com>
net: qca_spi: Make sure the QCA7000 reset is triggered

Stefan Wahren <stefan.wahren@i2se.com>
net: qca_spi: Avoid packet drop during initial sync

Sergei Shtylyov <sergei.shtylyov@cogentembedded.com>
PCI: versatile: Fix I/O space page leak

David Lechner <david@lechnology.com>
net: usb: rtl8150: demote allmulti message to dev_dbg()

Randy Dunlap <rdunlap@infradead.org>
net/ethernet/freescale/fman: fix cross-build error

Dan Carpenter <dan.carpenter@oracle.com>
drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply()

Wei Yongjun <weiyongjun1@huawei.com>
pinctrl: nsp: Fix potential NULL dereference

Dan Carpenter <dan.carpenter@oracle.com>
pinctrl: nsp: off by ones in nsp_pinmux_enable()

Yuchung Cheng <ycheng@google.com>
tcp: remove DELAYED ACK events in DCTCP

Dan Carpenter <dan.carpenter@oracle.com>
qlogic: check kstrtoul() for errors

Willem de Bruijn <willemb@google.com>
packet: reset network header if packet shorter than ll reserved space

Laura Abbott <labbott@redhat.com>
tools: build: Use HOSTLDFLAGS with fixdep

Alexander Duyck <alexander.h.duyck@intel.com>
ixgbe: Be more careful when modifying MAC filters

Adam Ford <aford173@gmail.com>
ARM: dts: am3517.dtsi: Disable reference to OMAP3 OTG controller

Nishanth Menon <nm@ti.com>
ARM: DRA7/OMAP5: Enable ACTLR[0] (Enable invalidates of BTB) for secondary cores

Steven Rostedt (VMware) <rostedt@goodmis.org>
ARM: 8780/1: ftrace: Only set kernel memory back to read-only after boot

Kamal Heib <kamalheib1@gmail.com>
RDMA/mlx5: Fix memory leak in mlx5_ib_create_srq() error path

Dave Jiang <dave.jiang@intel.com>
nfit: fix unchecked dereference in acpi_nfit_ctl

Kim Phillips <kim.phillips@arm.com>
perf llvm-utils: Remove bashism from kernel include fetch script

Vikas Gupta <vikas.gupta@broadcom.com>
bnxt_en: Fix for system hang if request_irq fails

Michael Chan <michael.chan@broadcom.com>
bnxt_en: Always set output parameters in bnxt_get_max_rings().

Peter Zijlstra <peterz@infradead.org>
ARC: Improve cmpxchg syscall implementation

Andrey Ryabinin <aryabinin@virtuozzo.com>
netfilter: nf_conntrack: Fix possible possible crash on module loading.

Russell King <rmk+kernel@armlinux.org.uk>
drm/armada: fix colorkey mode property

Stefan Schmidt <stefan@datenfreihafen.org>
ieee802154: fakelb: switch from BUG_ON() to WARN_ON() on problem

Stefan Schmidt <stefan@datenfreihafen.org>
ieee802154: at86rf230: use __func__ macro for debug messages

Stefan Schmidt <stefan@datenfreihafen.org>
ieee802154: at86rf230: switch from BUG_ON() to WARN_ON() on problem

Davide Caratti <dcaratti@redhat.com>
net/sched: act_tunnel_key: fix NULL dereference when 'goto chain' is used

Daniel Mack <daniel@zonque.org>
ARM: pxa: irq: fix handling of ICMR registers in suspend/resume

Vladimir Zapolskiy <vladimir_zapolskiy@mentor.com>
ravb: fix invalid context bug while changing link options by ethtool

Vladimir Zapolskiy <vladimir_zapolskiy@mentor.com>
ravb: fix invalid context bug while calling auto-negotiation by ethtool

Vladimir Zapolskiy <vladimir_zapolskiy@mentor.com>
sh_eth: fix invalid context bug while changing link options by ethtool

Vladimir Zapolskiy <vladimir_zapolskiy@mentor.com>
sh_eth: fix invalid context bug while calling auto-negotiation by ethtool

Arun Kumar Neelakantam <aneela@codeaurora.org>
net: qrtr: Broadcast messages only from control port

Paul Moore <paul@paul-moore.com>
ipv6: make ipv6_renew_options() interrupt/kernel safe

Florian Westphal <fw@strlen.de>
netfilter: x_tables: set module owner for icmp(6) matches

Lubomir Rintel <lkundrak@v3.sk>
ieee802154: 6lowpan: set IFLA_LINK

Taeung Song <treeze.taeung@gmail.com>
samples/bpf: Check the error of write() and read()

Taeung Song <treeze.taeung@gmail.com>
samples/bpf: add missing <linux/if_vlan.h>

Yuiko Oshino <yuiko.oshino@microchip.com>
smsc75xx: Add workaround for gigabit link up hardware errata.

Zhen Lei <thunder.leizhen@huawei.com>
kasan: fix shadow_size calculation error in kasan_module_alloc

Mathieu Malaterre <malat@debian.org>
tracing: Use __printf markup to silence compiler

Fabio Estevam <fabio.estevam@nxp.com>
ARM: imx_v4_v5_defconfig: Select ULPI support

Fabio Estevam <fabio.estevam@nxp.com>
ARM: imx_v6_v7_defconfig: Select ULPI support

Jason Gerecke <killertofu@gmail.com>
HID: wacom: Correct touch maximum XY of 2nd-gen Intuos

Hangbin Liu <liuhangbin@gmail.com>
ipvlan: call dev_change_flags when ipvlan mode is reset

Josh Poimboeuf <jpoimboe@redhat.com>
objtool: Support GCC 8 '-fnoreorder-functions'

Greg Ungerer <gerg@linux-m68k.org>
m68k: fix "bad page state" oops on ColdFire boot

Dave Jiang <dave.jiang@intel.com>
acpi/nfit: fix cmd_rc for acpi_nfit_ctl to always return a value

Sudarsana Reddy Kalluru <sudarsana.kalluru@cavium.com>
bnx2x: Fix receiving tx-timeout in error or recovery state.

Nicholas Mc Guire <hofrat@osadl.org>
PCI: xilinx-nwl: Add missing of_node_put()

Nicholas Mc Guire <hofrat@osadl.org>
PCI: xilinx: Add missing of_node_put()

Daniel Borkmann <daniel@iogearbox.net>
bpf, s390: fix potential memleak when later bpf_jit_prog fails

Marek Szyprowski <m.szyprowski@samsung.com>
drm/exynos: decon5433: Fix WINCONx reset value

Marek Szyprowski <m.szyprowski@samsung.com>
drm/exynos: decon5433: Fix per-plane global alpha for XRGB modes

Marek Szyprowski <m.szyprowski@samsung.com>
drm/exynos: gsc: Fix support for NV16/61, YUV420/YVU420 and YUV422 modes

Bob Copeland <me@bobcopeland.com>
nl80211: relax ht operation checks for mesh

BingJing Chang <bingjingc@synology.com>
md/raid10: fix that replacement cannot complete recovery after reassemble

Dan Carpenter <dan.carpenter@oracle.com>
dmaengine: k3dma: Off by one in k3_of_dma_simple_xlate()

Marek Szyprowski <m.szyprowski@samsung.com>
dmaengine: pl330: report BURST residue granularity

Keerthy <j-keerthy@ti.com>
ARM: dts: da850: Fix interrups property for gpio

Andy Lutomirski <luto@kernel.org>
selftests/x86/sigreturn: Do minor cleanups

Andy Lutomirski <luto@kernel.org>
selftests/x86/sigreturn/64: Fix spurious failures on AMD CPUs

Yan, Zheng <zyan@redhat.com>
ceph: fix dentry leak in splice_dentry()

Jann Horn <jannh@google.com>
netfilter: nf_log: fix uninit read in nf_log_proc_dostring

Jiri Olsa <jolsa@kernel.org>
perf bench: Fix numa report output code

Sandipan Das <sandipan@linux.ibm.com>
perf report powerpc: Fix crash if callchain is empty

Thomas Richter <tmricht@linux.ibm.com>
perf test session topology: Fix test on s390

Hans de Goede <hdegoede@redhat.com>
NFC: pn533: Fix wrong GFP flag usage

Ajay Gupta <ajaykuee@gmail.com>
usb: xhci: increase CRS timeout value

Dongjiu Geng <gengdongjiu@huawei.com>
usb: xhci: remove the code build warning

Takashi Iwai <tiwai@suse.de>
ALSA: seq: Fix UBSAN warning at SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT ioctl

Daniel Mack <daniel@zonque.org>
ARM: dts: am437x: make edt-ft5x06 a wakeup source

Michael Trimarchi <michael@amarulasolutions.com>
brcmfmac: stop watchdog before detach and free everything

Tomasz Duszynski <tduszyns@gmail.com>
iio: pressure: bmp280: fix relative humidity unit

Ganesh Goudar <ganeshgr@chelsio.com>
cxgb4: when disabling dcb set txq dcb priority to 0

Sven Eckelmann <sven@narfation.org>
batman-adv: Fix bat_v best gw refcnt after netlink dump

Sven Eckelmann <sven@narfation.org>
batman-adv: Fix bat_ogm_iv best gw refcnt after netlink dump

Casey Schaufler <casey@schaufler-ca.com>
Smack: Mark inode instant in smack_task_to_inode

Hangbin Liu <liuhangbin@gmail.com>
ipv6: mcast: fix unsolicited report interval after receiving querys

Steven Rostedt (VMware) <rostedt@goodmis.org>
locking/lockdep: Do not record IRQ state within lockdep code

Ard Biesheuvel <ard.biesheuvel@linaro.org>
KVM: arm/arm64: Drop resource size check for GICV window

Bartosz Golaszewski <bgolaszewski@baylibre.com>
net: davinci_emac: match the mdio device against its compatible if possible

Alexey Brodkin <Alexey.Brodkin@synopsys.com>
ARC: Enable machine_desc->init_per_cpu for !CONFIG_SMP

Max Gurtuvoy <maxg@mellanox.com>
nvmet: reset keep alive timer in controller enable

Dinh Nguyen <dinguyen@kernel.org>
net: stmmac: socfpga: add additional ocp reset line for Stratix10

Li RongQing <lirongqing@baidu.com>
net: propagate dev_get_valid_name return code

Stefan Agner <stefan@agner.ch>
net: hamradio: use eth_broadcast_addr

Govindarajulu Varadarajan <gvaradar@cisco.com>
enic: initialize enic->rfs_h.lock in enic_probe

Sudarsana Reddy Kalluru <sudarsana.kalluru@cavium.com>
qed: Add sanity check for SIMD fastpath handler.

Zhizhou Zhang <zhizhouzhang@asrmicro.com>
arm64: make secondary_start_kernel() notrace

Zhouyang Jia <jiazhouyang09@gmail.com>
xen/scsiback: add error handling for xenbus_printf

Zhouyang Jia <jiazhouyang09@gmail.com>
scsi: xen-scsifront: add error handling for xenbus_printf

Zhouyang Jia <jiazhouyang09@gmail.com>
xen: add error handling for xenbus_printf

Grigor Tovmasyan <Grigor.Tovmasyan@synopsys.com>
usb: gadget: dwc2: fix memory leak in gadget_init()

Chunfeng Yun <chunfeng.yun@mediatek.com>
usb: gadget: composite: fix delayed_status race condition when set_interface

William Wu <william.wu@rock-chips.com>
usb: dwc2: fix isoc split in transfer with no data

John Garry <john.garry@huawei.com>
libahci: Fix possible Spectre-v1 pmp indexing in ahci_led_store()

Vijay Immanuel <vijayi@attalasystems.com>
IB/rxe: Fix missing completion for mem_reg work requests

Alison Wang <alison.wang@nxp.com>
drm: mali-dp: Enable Global SE interrupts mask for DP500

Ray Jui <ray.jui@broadcom.com>
arm64: dts: ns2: Fix I2C controller interrupt type

Ray Jui <ray.jui@broadcom.com>
ARM: dts: Cygnus: Fix PCIe controller interrupt type

Ray Jui <ray.jui@broadcom.com>
ARM: dts: Cygnus: Fix I2C controller interrupt type

Florian Fainelli <f.fainelli@gmail.com>
ARM: dts: NSP: Fix PCIe controllers interrupt types

Florian Fainelli <f.fainelli@gmail.com>
ARM: dts: NSP: Fix i2c controller interrupt type

Fathi Boudra <fathi.boudra@linaro.org>
selftests: sync: add config fragment for testing sync framework

Shuah Khan (Samsung OSG) <shuah@kernel.org>
selftests: zram: return Kselftest Skip code for skipped tests

Shuah Khan (Samsung OSG) <shuah@kernel.org>
selftests: user: return Kselftest Skip code for skipped tests

Shuah Khan (Samsung OSG) <shuah@kernel.org>
selftests: static_keys: return Kselftest Skip code for skipped tests

Shuah Khan (Samsung OSG) <shuah@kernel.org>
selftests: pstore: return Kselftest Skip code for skipped tests

Eric Dumazet <edumazet@google.com>
netfilter: ipv6: nf_defrag: reduce struct net memory waste

Johan Hovold <johan@kernel.org>
usb: dwc3: of-simple: fix use-after-free on remove

Alexey Brodkin <abrodkin@synopsys.com>
ARC: Explicitly add -mmedium-calls to CFLAGS

Andy Lutomirski <luto@kernel.org>
x86/entry/64: Remove %ebx handling from error_entry/exit

-------------

Diffstat:

Makefile | 4 +-
arch/arc/Makefile | 15 +--
arch/arc/include/asm/mach_desc.h | 2 -
arch/arc/kernel/irq.c | 2 +-
arch/arc/kernel/process.c | 47 +++++++--
arch/arm/boot/dts/am3517.dtsi | 5 +
arch/arm/boot/dts/am437x-sk-evm.dts | 2 +
arch/arm/boot/dts/bcm-cygnus.dtsi | 24 ++---
arch/arm/boot/dts/bcm-nsp.dtsi | 32 +++---
arch/arm/boot/dts/da850.dtsi | 6 +-
arch/arm/configs/imx_v4_v5_defconfig | 2 +
arch/arm/configs/imx_v6_v7_defconfig | 2 +
arch/arm/mach-omap2/omap-smp.c | 41 ++++++++
arch/arm/mach-pxa/irq.c | 4 +-
arch/arm/mm/init.c | 9 ++
arch/arm64/boot/dts/broadcom/ns2.dtsi | 4 +-
arch/arm64/kernel/smp.c | 2 +-
arch/m68k/include/asm/mcf_pgalloc.h | 4 +-
arch/parisc/include/asm/spinlock.h | 8 +-
arch/parisc/kernel/syscall.S | 24 ++---
arch/s390/net/bpf_jit_comp.c | 1 +
arch/x86/entry/entry_64.S | 20 +---
drivers/acpi/nfit/core.c | 4 +
drivers/ata/libahci.c | 7 +-
drivers/dma/k3dma.c | 2 +-
drivers/dma/pl330.c | 2 +-
drivers/gpu/drm/arm/malidp_hw.c | 3 +-
drivers/gpu/drm/armada/armada_hw.h | 1 +
drivers/gpu/drm/armada/armada_overlay.c | 30 ++++--
drivers/gpu/drm/exynos/exynos5433_drm_decon.c | 6 +-
drivers/gpu/drm/exynos/exynos_drm_gsc.c | 29 ++++--
drivers/gpu/drm/exynos/regs-gsc.h | 1 +
drivers/gpu/drm/nouveau/nouveau_gem.c | 4 +-
drivers/hid/wacom_wac.c | 10 +-
drivers/i2c/busses/i2c-imx.c | 8 +-
drivers/iio/pressure/bmp280-core.c | 5 +-
drivers/infiniband/hw/mlx5/srq.c | 18 ++--
drivers/infiniband/sw/rxe/rxe_req.c | 3 +
drivers/md/raid10.c | 7 ++
drivers/net/ethernet/broadcom/bnx2x/bnx2x.h | 1 +
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 6 ++
drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 6 ++
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 8 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 2 +-
drivers/net/ethernet/cisco/enic/enic_clsf.c | 3 +-
drivers/net/ethernet/cisco/enic/enic_main.c | 3 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_common.c | 12 ++-
drivers/net/ethernet/qlogic/qed/qed_main.c | 12 ++-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_sysfs.c | 2 +
drivers/net/ethernet/qualcomm/qca_spi.c | 21 ++--
drivers/net/ethernet/renesas/ravb_main.c | 56 +++--------
drivers/net/ethernet/renesas/sh_eth.c | 59 +++--------
drivers/net/ethernet/stmicro/stmmac/Kconfig | 2 +-
.../net/ethernet/stmicro/stmmac/dwmac-socfpga.c | 18 +++-
drivers/net/ethernet/ti/davinci_emac.c | 4 +
drivers/net/hamradio/bpqether.c | 8 +-
drivers/net/ieee802154/at86rf230.c | 15 +--
drivers/net/ieee802154/fakelb.c | 2 +-
drivers/net/ipvlan/ipvlan_main.c | 36 +++++--
drivers/net/usb/rtl8150.c | 2 +-
drivers/net/usb/smsc75xx.c | 62 ++++++++++++
.../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 7 ++
drivers/nfc/pn533/usb.c | 4 +-
drivers/nvme/target/core.c | 8 ++
drivers/pci/host/pci-versatile.c | 2 +-
drivers/pci/host/pcie-xilinx-nwl.c | 2 +-
drivers/pci/host/pcie-xilinx.c | 1 +
drivers/pci/hotplug/pci_hotplug_core.c | 9 ++
drivers/pci/hotplug/pciehp.h | 1 +
drivers/pci/hotplug/pciehp_core.c | 7 ++
drivers/pci/hotplug/pciehp_hpc.c | 18 +---
drivers/pci/pci.c | 38 +++++++
drivers/pci/probe.c | 4 +
drivers/pinctrl/bcm/pinctrl-nsp-mux.c | 6 +-
drivers/scsi/xen-scsifront.c | 33 ++++--
drivers/usb/dwc2/gadget.c | 7 +-
drivers/usb/dwc2/hcd_intr.c | 3 +-
drivers/usb/dwc3/dwc3-of-simple.c | 3 +-
drivers/usb/gadget/composite.c | 3 +
drivers/usb/host/xhci-tegra.c | 2 +-
drivers/usb/host/xhci.c | 7 +-
drivers/xen/manage.c | 18 +++-
drivers/xen/xen-scsiback.c | 16 ++-
fs/ceph/inode.c | 1 +
fs/ext4/mballoc.c | 4 +-
fs/reiserfs/xattr.c | 4 +-
include/linux/fsl/guts.h | 1 +
include/linux/pci.h | 2 +
include/net/ipv6.h | 9 +-
include/net/net_namespace.h | 1 +
include/net/netns/ipv6.h | 1 -
include/net/tc_act/tc_tunnel_key.h | 1 -
include/net/tcp.h | 2 -
kernel/locking/lockdep.c | 12 +--
kernel/trace/trace.c | 5 +
mm/kasan/kasan.c | 5 +-
net/batman-adv/bat_iv_ogm.c | 4 +-
net/batman-adv/bat_v.c | 4 +-
net/core/dev.c | 4 +-
net/ieee802154/6lowpan/core.c | 6 ++
net/ipv4/netfilter/ip_tables.c | 1 +
net/ipv4/tcp.c | 4 +-
net/ipv4/tcp_dctcp.c | 25 -----
net/ipv4/tcp_output.c | 4 -
net/ipv6/calipso.c | 9 +-
net/ipv6/exthdrs.c | 111 ++++++---------------
net/ipv6/ipv6_sockglue.c | 27 +++--
net/ipv6/mcast.c | 9 +-
net/ipv6/netfilter/ip6_tables.c | 1 +
net/ipv6/netfilter/nf_conntrack_reasm.c | 6 +-
net/netfilter/nf_conntrack_core.c | 2 +-
net/netfilter/nf_conntrack_proto_dccp.c | 8 +-
net/netfilter/nf_log.c | 4 +
net/packet/af_packet.c | 12 ++-
net/qrtr/qrtr.c | 4 +
net/sched/act_tunnel_key.c | 6 +-
net/wireless/nl80211.c | 19 +---
net/xfrm/xfrm_user.c | 8 +-
samples/bpf/parse_varlen.c | 6 +-
samples/bpf/test_overhead_user.c | 19 +++-
security/smack/smack_lsm.c | 1 +
sound/core/seq/seq_clientmgr.c | 3 +-
tools/build/Makefile | 2 +-
tools/objtool/elf.c | 41 +++++---
tools/perf/arch/powerpc/util/skip-callchain-idx.c | 2 +-
tools/perf/bench/numa.c | 5 +-
tools/perf/tests/topology.c | 1 +
tools/perf/util/llvm-utils.c | 6 +-
.../selftests/pstore/pstore_post_reboot_tests | 5 +-
.../selftests/static_keys/test_static_keys.sh | 13 +++
tools/testing/selftests/sync/config | 4 +
tools/testing/selftests/user/test_user_copy.sh | 7 ++
tools/testing/selftests/x86/sigreturn.c | 59 ++++++-----
tools/testing/selftests/zram/zram.sh | 5 +-
tools/testing/selftests/zram/zram_lib.sh | 5 +-
virt/kvm/arm/vgic/vgic-v3.c | 5 -
virt/kvm/eventfd.c | 11 +-
137 files changed, 893 insertions(+), 572 deletions(-)