[PATCH 4.9 000/103] 4.9.28-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 4.9.28 release.
There are 103 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat May 13 14:11:46 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.28-rc1.gz
or in the git tree and branch at:
  git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 4.9.28-rc1

Ilya Dryomov <idryomov@gmail.com>
    block: get rid of blk_integrity_revalidate()

Nicolai Hähnle <nicolai.haehnle@amd.com>
    drm/ttm: fix use-after-free races in vm fault handling

Maxim Altshul <maxim.altshul@ti.com>
    wlcore: Add RX_BA_WIN_SIZE_CHANGE_EVENT event

Maxim Altshul <maxim.altshul@ti.com>
    wlcore: Pass win_size taken from ieee80211_sta to FW

Boris Ostrovsky <boris.ostrovsky@oracle.com>
    xen: Revert commits da72ff5bfcb0 and 72a9b186292d

Jin Qian <jinqian@google.com>
    f2fs: sanity check segment count

Jon Mason <jon.mason@broadcom.com>
    net: mdio-mux: bcm-iproc: call mdiobus_free() in error path

Daniel Borkmann <daniel@iogearbox.net>
    bpf: don't let ldimm64 leak map addresses on unprivileged

Dan Carpenter <dan.carpenter@oracle.com>
    bnxt_en: allocate enough space for ->ntp_fltr_bmap

WANG Cong <xiyou.wangcong@gmail.com>
    ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf

WANG Cong <xiyou.wangcong@gmail.com>
    ipv6: initialize route null entry in addrconf_init()

Michal Schmidt <mschmidt@redhat.com>
    rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string

Alexander Potapenko <glider@google.com>
    ipv4, ipv6: ensure raw socket message is big enough to hold an IP header

Eric Dumazet <edumazet@google.com>
    tcp: do not inherit fastopen_req from parent

Daniele Palmas <dnlplm@gmail.com>
    net: usb: qmi_wwan: add Telit ME910 support

David Ahern <dsahern@gmail.com>
    net: ipv6: Do not duplicate DAD on link up

Eric Dumazet <edumazet@google.com>
    tcp: fix wraparound issue in tcp_lp

Daniel Borkmann <daniel@iogearbox.net>
    bpf, arm64: fix jit branch offset related to ldimm64

Yonghong Song <yhs@fb.com>
    bpf: enhance verifier to understand stack pointer arithmetic

Eric Dumazet <edumazet@google.com>
    tcp: do not underestimate skb->truesize in tcp_trim_head()

Jason A. Donenfeld <Jason@zx2c4.com>
    macsec: dynamically allocate space for sglist

Dave Aldridge <david.j.aldridge@oracle.com>
    sparc64: fix fault handling in NGbzero.S and GENbzero.S

Takashi Iwai <tiwai@suse.de>
    ALSA: hda - Fix deadlock of controller device lock at unbinding

Arnd Bergmann <arnd@arndb.de>
    staging: emxx_udc: remove incorrect __init annotations

Igor Pylypiv <igor.pylypiv@gmail.com>
    staging: wlan-ng: add missing byte order conversion

Oleg Drokin <green@linuxhacker.ru>
    staging/lustre/llite: move root_squash from sysfs to debugfs

James Hughes <james.hughes@raspberrypi.org>
    brcmfmac: Make skb header writable before use

James Hughes <james.hughes@raspberrypi.org>
    brcmfmac: Ensure pointer correctly set if skb data location changes

Leonid Yegoshin <Leonid.Yegoshin@imgtec.com>
    MIPS: R2-on-R6 MULTU/MADDU/MSUBU emulation bugfix

Arnd Bergmann <arnd@arndb.de>
    scsi: smartpqi: fix time handling

Dan Carpenter <dan.carpenter@oracle.com>
    scsi: scsi_dh_emc: return success in clariion_std_inquiry()

Finn Thain <fthain@telegraphics.com.au>
    scsi: mac_scsi: Fix MAC_SCSI=m option when SCSI=m

Bill Kuzeja <William.Kuzeja@stratus.com>
    scsi: qla2xxx: Fix crash in qla2xxx_eh_abort on bad ptr

Tony Lindgren <tony@atomide.com>
    serial: 8250_omap: Fix probe and remove for PM runtime

Stephen Boyd <stephen.boyd@linaro.org>
    phy: qcom-usb-hs: Add depends on EXTCON

Heiko Stuebner <heiko@sntech.de>
    clk: rockchip: add "," to mux_pll_src_apll_dpll_gpll_usb480m_p on rk3036

Johan Hovold <johan@kernel.org>
    USB: serial: sierra: fix bogus alternate-setting assumption

Johan Hovold <johan@kernel.org>
    USB: serial: io_edgeport: fix descriptor error handling

Johan Hovold <johan@kernel.org>
    USB: serial: mct_u232: fix modem-status error handling

Johan Hovold <johan@kernel.org>
    USB: serial: quatech2: fix control-message error handling

Johan Hovold <johan@kernel.org>
    USB: serial: ftdi_sio: fix latency-timer error handling

Johan Hovold <johan@kernel.org>
    USB: serial: ark3116: fix open error handling

Johan Hovold <johan@kernel.org>
    USB: serial: ti_usb_3410_5052: fix control-message error handling

Johan Hovold <johan@kernel.org>
    USB: serial: io_edgeport: fix epic-descriptor handling

Johan Hovold <johan@kernel.org>
    USB: serial: ssu100: fix control-message error handling

Johan Hovold <johan@kernel.org>
    USB: serial: digi_acceleport: fix incomplete rx sanity check

Johan Hovold <johan@kernel.org>
    USB: serial: keyspan_pda: fix receive sanity checks

Stephen Boyd <stephen.boyd@linaro.org>
    usb: chipidea: Handle extcon events properly

Stephen Boyd <stephen.boyd@linaro.org>
    usb: chipidea: Only read/write OTGSC from one place

Krzysztof Kozlowski <krzk@kernel.org>
    usb: host: ohci-exynos: Decrese node refcount on exynos_ehci_get_phy() error paths

Krzysztof Kozlowski <krzk@kernel.org>
    usb: host: ehci-exynos: Decrese node refcount on exynos_ehci_get_phy() error paths

Nicholas Mc Guire <hofrat@osadl.org>
    usb: dwc2: host: use msleep() for long delay

Ladi Prosek <lprosek@redhat.com>
    KVM: nVMX: do not leak PML full vmexit to L1

Ladi Prosek <lprosek@redhat.com>
    KVM: nVMX: initialize PML fields in vmcs02

Jim Mattson <jmattson@google.com>
    Revert "KVM: nested VMX: disable perf cpuid reporting"

Andy Shevchenko <andriy.shevchenko@linux.intel.com>
    x86/platform/intel-mid: Correct MSI IRQ line for watchdog device

Masami Hiramatsu <mhiramat@kernel.org>
    kprobes/x86: Fix kernel panic when certain exception-handling addresses are probed

Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
    clk: Make x86/ conditional on CONFIG_COMMON_CLK

Dave Hansen <dave.hansen@linux.intel.com>
    x86/mpx: Re-add MPX to selftests Makefile

Nikola Pajkovsky <npajkovsky@suse.cz>
    x86/pci-calgary: Fix iommu_free() comparison of unsigned expression >= 0

Ruslan Ruslichenko <rruslich@cisco.com>
    x86/ioapic: Restore IO-APIC irq_chip retrigger callback

Dan Carpenter <dan.carpenter@oracle.com>
    iwlwifi: mvm: writing zero bytes to debugfs causes a crash

Sara Sharon <sara.sharon@intel.com>
    iwlwifi: mvm: synchronize firmware DMA paging memory

Sara Sharon <sara.sharon@intel.com>
    iwlwifi: mvm: fix references to first_agg_queue in DQA mode

Sara Sharon <sara.sharon@intel.com>
    iwlwifi: mvm: fix pending frame counter calculation

Johannes Berg <johannes.berg@intel.com>
    iwlwifi: mvm/pcie: adjust A-MSDU tx_cmd length in PCIe

Beni Lev <beni.lev@intel.com>
    iwlwifi: mvm: Use aux queue for offchannel frames in dqa

Sara Sharon <sara.sharon@intel.com>
    iwlwifi: mvm: fix reorder timer re-arming

Sara Sharon <sara.sharon@intel.com>
    iwlwifi: pcie: fix the set of DMA memory mask

Kirtika Ruchandani <kirtika.ruchandani@gmail.com>
    iwlwifi: pcie: trans: Remove unused 'shift_param'

Emmanuel Grumbach <emmanuel.grumbach@intel.com>
    iwlwifi: pcie: don't increment / decrement a bool

Johannes Berg <johannes.berg@intel.com>
    iwlwifi: mvm: overwrite skb info later

Luca Coelho <luciano.coelho@intel.com>
    iwlwifi: mvm: don't restart HW if suspend fails with unified image

Jürg Billeter <j@bitron.ch>
    iwlwifi: fix MODULE_FIRMWARE for 6030

Ganapathi Bhat <gbhat@marvell.com>
    mwifiex: Avoid skipping WEP key deletion for AP

Xinming Hu <huxm@marvell.com>
    mwifiex: remove redundant dma padding in AMSDU

Brian Norris <briannorris@chromium.org>
    mwifiex: debugfs: Fix (sometimes) off-by-1 SSID print

Florian Fainelli <f.fainelli@gmail.com>
    ARM: dts: sun7i: lamobo-r1: Fix CPU port RGMII settings

Matthijs van Duin <matthijsvanduin@gmail.com>
    ARM: OMAP5 / DRA7: Fix HYP mode boot for thumb2 build

Jon Mason <jon.mason@broadcom.com>
    ARM: dts: NSP: GPIO reboot open-source

Arnd Bergmann <arnd@arndb.de>
    leds: ktd2692: avoid harmless maybe-uninitialized warning

Catalin Marinas <catalin.marinas@arm.com>
    arm64: Improve detection of user/non-user mappings in set_pte(_at)

Stephen Boyd <sboyd@codeaurora.org>
    arm: dts: qcom: Fix ipq board clock rates

Geert Uytterhoeven <geert+renesas@glider.be>
    arm64: dts: r8a7795: Mark EthernetAVB device node disabled

Liam Breck <liam@networkimprov.net>
    power: supply: bq24190_charger: Handle fault before status on interrupt

Liam Breck <liam@networkimprov.net>
    power: supply: bq24190_charger: Don't read fault register outside irq_handle_thread()

Liam Breck <liam@networkimprov.net>
    power: supply: bq24190_charger: Call power_supply_changed() for relevant component

Liam Breck <liam@networkimprov.net>
    power: supply: bq24190_charger: Install irq_handler_thread() at end of probe()

Liam Breck <liam@networkimprov.net>
    power: supply: bq24190_charger: Call set_mode_host() on pm_resume()

Liam Breck <liam@networkimprov.net>
    power: supply: bq24190_charger: Fix irq trigger to IRQF_TRIGGER_FALLING

Alexander Shishkin <alexander.shishkin@linux.intel.com>
    perf/x86/intel/pt: Add format strings for PTWRITE and power event tracing

Andrew Donnellan <andrew.donnellan@au1.ibm.com>
    powerpc: Correctly disable latent entropy GCC plugin on prom_init.o

Anton Blanchard <anton@samba.org>
    powerpc/ftrace: Fix confusing help text for DISABLE_MPROFILE_KERNEL

Michael Ellerman <mpe@ellerman.id.au>
    powerpc/powernv: Fix opal_exit tracepoint opcode

Aneesh Kumar K.V <aneesh.kumar@linux.vnet.ibm.com>
    powerpc/mm: Fixup wrong LPCR_VRMASD value

Ben Hutchings <ben@decadent.org.uk>
    cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores

Giedrius Statkevičius <giedrius.statkevicius@gmail.com>
    power: supply: lp8788: prevent out of bounds array access

Horia Geantă <horia.geanta@nxp.com>
    crypto: caam - fix error path for ctx_dma mapping failure

Winkler, Tomas <tomas.winkler@intel.com>
    tmp: use pdev for parent device in tpm_chip_alloc

Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
    tpm: fix RC value check in tpm2_seal_trusted

Guenter Roeck <linux@roeck-us.net>
    hwmon: (it87) Fix pwm4 detection for IT8620 and IT8628

Vincent Abriou <vincent.abriou@st.com>
    drm/sti: fix GDP size to support up to UHD resolution

Cong Wang <xiyou.wangcong@gmail.com>
    9p: fix a potential acl leak


-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm/boot/dts/bcm958522er.dts                  |   1 +
 arch/arm/boot/dts/bcm958525er.dts                  |   1 +
 arch/arm/boot/dts/bcm958525xmc.dts                 |   1 +
 arch/arm/boot/dts/bcm958622hr.dts                  |   1 +
 arch/arm/boot/dts/bcm958623hr.dts                  |   1 +
 arch/arm/boot/dts/bcm958625hr.dts                  |   1 +
 arch/arm/boot/dts/bcm988312hr.dts                  |   1 +
 arch/arm/boot/dts/qcom-ipq8064.dtsi                |   4 +-
 arch/arm/boot/dts/sun7i-a20-lamobo-r1.dts          |   2 +-
 arch/arm/mach-omap2/omap-headsmp.S                 |   3 +-
 arch/arm64/boot/dts/renesas/r8a7795.dtsi           |   1 +
 arch/arm64/include/asm/pgtable.h                   |  15 +-
 arch/arm64/net/bpf_jit_comp.c                      |   8 +-
 arch/mips/kernel/mips-r2-to-r6-emul.c              |  12 +-
 arch/powerpc/Kconfig                               |   4 +-
 arch/powerpc/include/asm/reg.h                     |   2 +-
 arch/powerpc/kernel/Makefile                       |   2 +-
 arch/powerpc/platforms/powernv/opal-wrappers.S     |   2 +-
 arch/sparc/kernel/head_64.S                        |   6 +
 arch/sparc/lib/GENbzero.S                          |   2 +-
 arch/sparc/lib/NGbzero.S                           |   2 +-
 arch/x86/events/intel/pt.c                         |   6 +
 arch/x86/include/asm/xen/events.h                  |  11 ++
 arch/x86/kernel/apic/io_apic.c                     |   2 +
 arch/x86/kernel/kprobes/common.h                   |   2 +-
 arch/x86/kernel/kprobes/core.c                     |   6 +-
 arch/x86/kernel/kprobes/opt.c                      |   2 +-
 arch/x86/kernel/pci-calgary_64.c                   |   2 +-
 arch/x86/kvm/cpuid.c                               |   6 -
 arch/x86/kvm/vmx.c                                 |  17 +-
 arch/x86/pci/xen.c                                 |   2 +-
 .../intel-mid/device_libs/platform_mrfld_wdt.c     |   2 +-
 arch/x86/xen/enlighten.c                           |  21 ++-
 arch/x86/xen/smp.c                                 |   2 +
 arch/x86/xen/time.c                                |   5 +
 block/blk-integrity.c                              |  19 +--
 block/partition-generic.c                          |   1 -
 drivers/char/tpm/tpm-chip.c                        |   8 +-
 drivers/char/tpm/tpm.h                             |   5 +
 drivers/char/tpm/tpm2-cmd.c                        |   2 +-
 drivers/clk/Makefile                               |   2 +
 drivers/clk/rockchip/clk-rk3036.c                  |   2 +-
 drivers/crypto/caam/caamhash.c                     |   7 +-
 drivers/gpu/drm/sti/sti_gdp.c                      |  12 +-
 drivers/gpu/drm/ttm/ttm_bo_vm.c                    |  12 ++
 drivers/hwmon/it87.c                               |   2 +-
 drivers/leds/leds-ktd2692.c                        |   8 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |   3 +-
 drivers/net/macsec.c                               |  29 +++-
 drivers/net/phy/mdio-mux-bcm-iproc.c               |   5 +-
 drivers/net/usb/qmi_wwan.c                         |   1 +
 .../wireless/broadcom/brcm80211/brcmfmac/core.c    |  23 +--
 drivers/net/wireless/intel/iwlwifi/iwl-6000.c      |   2 +-
 drivers/net/wireless/intel/iwlwifi/mvm/d3.c        |  13 +-
 drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c   |   2 +
 drivers/net/wireless/intel/iwlwifi/mvm/fw-dbg.c    |   4 +
 drivers/net/wireless/intel/iwlwifi/mvm/fw.c        |  23 ++-
 drivers/net/wireless/intel/iwlwifi/mvm/rxmq.c      |   3 +-
 drivers/net/wireless/intel/iwlwifi/mvm/sta.c       |  31 ++--
 drivers/net/wireless/intel/iwlwifi/mvm/tx.c        |  80 ++++-----
 drivers/net/wireless/intel/iwlwifi/pcie/internal.h |   2 +-
 drivers/net/wireless/intel/iwlwifi/pcie/trans.c    |  16 +-
 drivers/net/wireless/intel/iwlwifi/pcie/tx.c       |  23 ++-
 drivers/net/wireless/marvell/mwifiex/11n_aggr.c    |  19 +--
 drivers/net/wireless/marvell/mwifiex/debugfs.c     |   3 +-
 drivers/net/wireless/marvell/mwifiex/sta_ioctl.c   |   2 -
 drivers/net/wireless/ti/wl18xx/event.c             |  28 ++++
 drivers/net/wireless/ti/wl18xx/event.h             |   1 +
 drivers/net/wireless/ti/wl18xx/main.c              |   3 +-
 drivers/net/wireless/ti/wlcore/acx.c               |   5 +-
 drivers/net/wireless/ti/wlcore/acx.h               |   3 +-
 drivers/net/wireless/ti/wlcore/main.c              |   6 +-
 drivers/phy/Kconfig                                |   1 +
 drivers/power/supply/bq24190_charger.c             | 182 +++++++++------------
 drivers/power/supply/lp8788-charger.c              |   2 +-
 drivers/scsi/Kconfig                               |   2 +-
 drivers/scsi/device_handler/scsi_dh_emc.c          |   2 +-
 drivers/scsi/qla2xxx/qla_os.c                      |   3 +-
 drivers/scsi/smartpqi/smartpqi_init.c              |   8 +-
 drivers/staging/emxx_udc/emxx_udc.c                |   4 +-
 drivers/staging/lustre/lustre/llite/lproc_llite.c  |  27 +--
 drivers/staging/wlan-ng/p80211netdev.c             |   2 +-
 drivers/tty/serial/8250/8250_omap.c                |   8 +-
 drivers/usb/chipidea/ci.h                          |   3 -
 drivers/usb/chipidea/core.c                        |  32 ----
 drivers/usb/chipidea/otg.c                         |  80 ++++++++-
 drivers/usb/dwc2/core.c                            |   2 +-
 drivers/usb/host/ehci-exynos.c                     |   2 +
 drivers/usb/host/ohci-exynos.c                     |   2 +
 drivers/usb/serial/ark3116.c                       |  25 ++-
 drivers/usb/serial/digi_acceleport.c               |  38 +++--
 drivers/usb/serial/ftdi_sio.c                      |   7 +-
 drivers/usb/serial/io_edgeport.c                   |  48 ++++--
 drivers/usb/serial/keyspan_pda.c                   |  19 ++-
 drivers/usb/serial/mct_u232.c                      |   6 +-
 drivers/usb/serial/quatech2.c                      |  24 +--
 drivers/usb/serial/sierra.c                        |  28 +---
 drivers/usb/serial/ssu100.c                        |  31 +++-
 drivers/usb/serial/ti_usb_3410_5052.c              |  12 +-
 drivers/xen/events/events_base.c                   |  26 ++-
 drivers/xen/platform-pci.c                         |  64 ++++++++
 fs/9p/acl.c                                        |   2 +
 fs/block_dev.c                                     |   1 -
 fs/f2fs/super.c                                    |   7 +
 include/linux/f2fs_fs.h                            |   6 +
 include/linux/genhd.h                              |   2 -
 include/linux/usb/chipidea.h                       |   2 +
 include/net/addrconf.h                             |   2 +
 include/net/ip6_route.h                            |   1 +
 include/xen/xen.h                                  |   3 +-
 kernel/bpf/verifier.c                              |  32 +++-
 lib/test_bpf.c                                     |  45 +++++
 net/core/rtnetlink.c                               |   2 +-
 net/ipv4/raw.c                                     |   3 +
 net/ipv4/tcp_lp.c                                  |   6 +-
 net/ipv4/tcp_minisocks.c                           |   1 +
 net/ipv4/tcp_output.c                              |  19 ++-
 net/ipv6/addrconf.c                                |   8 +-
 net/ipv6/raw.c                                     |   2 +
 net/ipv6/route.c                                   |  39 +++--
 samples/bpf/test_verifier.c                        |  18 +-
 sound/pci/hda/hda_intel.c                          |  13 ++
 tools/power/cpupower/utils/helpers/cpuid.c         |   1 +
 tools/testing/selftests/x86/Makefile               |   2 +-
 125 files changed, 940 insertions(+), 539 deletions(-)