[PATCH 4.9 00/70] 4.9.128-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 4.9.128 release.
There are 70 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed Sep 19 21:16:09 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.128-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 4.9.128-rc1

Linus Torvalds <torvalds@linux-foundation.org>
    mm: get rid of vmacache_flush_all() entirely

Ian Kent <raven@themaw.net>
    autofs: fix autofs_sbi() does not check super block type

Wei Yongjun <weiyongjun1@huawei.com>
    mtd: ubi: wl: Fix error return code in ubi_wl_init()

Eric Dumazet <edumazet@google.com>
    netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user

Mathias Nyman <mathias.nyman@linux.intel.com>
    xhci: Fix use-after-free in xhci_free_virt_device

Parav Pandit <parav@mellanox.com>
    RDMA/cma: Do not ignore net namespace for unbound cm_id

Paul Burton <paul.burton@imgtec.com>
    MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON

Trond Myklebust <trond.myklebust@hammerspace.com>
    NFSv4.1: Fix a potential layoutget/layoutrecall deadlock

Chao Yu <yuchao0@huawei.com>
    f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize

Zumeng Chen <zumeng.chen@gmail.com>
    mfd: ti_am335x_tscadc: Fix struct clk memory leak

Geert Uytterhoeven <geert+renesas@glider.be>
    iommu/ipmmu-vmsa: Fix allocation in atomic context

Dan Carpenter <dan.carpenter@oracle.com>
    f2fs: Fix uninitialized return in f2fs_ioc_shutdown()

Katsuhiro Suzuki <suzuki.katsuhiro@socionext.com>
    media: helene: fix xtal frequency setting at power on

Mauricio Faria de Oliveira <mfo@canonical.com>
    partitions/aix: fix usage of uninitialized lv_info and lvname structures

Mauricio Faria de Oliveira <mfo@canonical.com>
    partitions/aix: append null character to print data from disk

Sylwester Nawrocki <s.nawrocki@samsung.com>
    media: s5p-mfc: Fix buffer look up in s5p_mfc_handle_frame_{new, copy_time} functions

Nick Dyer <nick.dyer@itdev.co.uk>
    Input: atmel_mxt_ts - only use first T9 instance

Petr Machata <petrm@mellanox.com>
    net: dcb: For wild-card lookups, use priority -1, not 0

Nicholas Mc Guire <hofrat@osadl.org>
    MIPS: generic: fix missing of_node_put()

Nicholas Mc Guire <hofrat@osadl.org>
    MIPS: Octeon: add missing of_node_put()

Chao Yu <yuchao0@huawei.com>
    f2fs: fix to do sanity check with reserved blkaddr of inline inode

Peter Rosin <peda@axentia.se>
    tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)

Linus Walleij <linus.walleij@linaro.org>
    tpm_tis_spi: Pass the SPI IRQ down to the driver

Chao Yu <yuchao0@huawei.com>
    f2fs: fix to skip GC if type in SSA and SIT is inconsistent

Chao Yu <yuchao0@huawei.com>
    f2fs: try grabbing node page lock aggressively in sync scenario

Yelena Krivosheev <yelena@marvell.com>
    net: mvneta: fix mtu change on port without link

Anton Vasilyev <vasilyev@ispras.ru>
    gpio: ml-ioh: Fix buffer underwrite on probe error path

Joerg Roedel <jroedel@suse.de>
    x86/mm: Remove in_nmi() warning from vmalloc_fault()

Marcel Holtmann <marcel@holtmann.org>
    Bluetooth: hidp: Fix handling of strncpy for hid->name information

Surabhi Vishnoi <svishnoi@codeaurora.org>
    ath10k: disable bundle mgmt tx completion event support

Anton Vasilyev <vasilyev@ispras.ru>
    scsi: 3ware: fix return 0 on the error path of probe

Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
    ata: libahci: Correct setting of DEVSLP register

Paul Burton <paul.burton@mips.com>
    MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET

Loic Poulain <loic.poulain@linaro.org>
    wlcore: Set rx_status boottime_ns field on rx

Sven Eckelmann <sven.eckelmann@openmesh.com>
    ath10k: prevent active scans on potential unusable channels

Felix Fietkau <nbd@nbd.name>
    ath9k_hw: fix channel maximum power level test

Felix Fietkau <nbd@nbd.name>
    ath9k: report tx status on EOSP

Finn Thain <fthain@telegraphics.com.au>
    macintosh/via-pmu: Add missing mmio accessors

Olga Kornievskaia <kolga@netapp.com>
    NFSv4.0 fix client reference leak in callback

Christophe Leroy <christophe.leroy@c-s.fr>
    perf tools: Allow overriding MAX_NR_CPUS at compile time

Yunlong Song <yunlong.song@huawei.com>
    f2fs: do not set free of current section

Anton Vasilyev <vasilyev@ispras.ru>
    tty: rocket: Fix possible buffer overwrite on register_PCI

Dan Carpenter <dan.carpenter@oracle.com>
    uio: potential double frees if __uio_register_device() fails

Anton Vasilyev <vasilyev@ispras.ru>
    misc: ti-st: Fix memory leak in the error path of probe()

Gaurav Kohli <gkohli@codeaurora.org>
    timers: Clear timer_base::must_forward_clk with timer_base::lock held

BingJing Chang <bingjingc@synology.com>
    md/raid5: fix data corruption of replacements after originals dropped

Mike Christie <mchristi@redhat.com>
    scsi: target: fix __transport_register_session locking

Arun Parameswaran <arun.parameswaran@broadcom.com>
    net: phy: Fix the register offsets in Broadcom iProc mdio mux driver

Dmitry Osipenko <digetx@gmail.com>
    gpio: tegra: Move driver registration to subsys_init level

Johan Hedberg <johan.hedberg@intel.com>
    Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV

Florian Fainelli <f.fainelli@gmail.com>
    ethtool: Remove trailing semicolon for static inline

Dan Carpenter <dan.carpenter@oracle.com>
    misc: mic: SCIF Fix scif_get_new_port() error handling

Alexey Brodkin <abrodkin@synopsys.com>
    ARC: [plat-axs*]: Enable SWAP

Johannes Weiner <hannes@cmpxchg.org>
    mm: remove seemingly spurious reclaimability check from laptop_mode gating

Mel Gorman <mgorman@suse.de>
    mm, vmscan: clear PGDAT_WRITEBACK when zone is balanced

Prateek Sood <prsood@codeaurora.org>
    locking/osq_lock: Fix osq_lock queue corruption

Michal Hocko <mhocko@kernel.org>
    selinux: use GFP_NOWAIT in the AVC kmem_caches

Prateek Sood <prsood@codeaurora.org>
    locking/rwsem-xadd: Fix missed wakeup due to reordering of load

Johannes Berg <johannes.berg@intel.com>
    nl80211: fix null-ptr dereference on invalid mesh configuration

Tejun Heo <tj@kernel.org>
    block,blkcg: use __GFP_NOWARN for best-effort allocations in blkcg

Kees Cook <keescook@chromium.org>
    IB/rxe: do not copy extra stack memory to skb

Daniel Micay <danielmicay@gmail.com>
    staging/rts5208: Fix read overflow in memcpy

Jia-Ju Bai <baijiaju1990@163.com>
    staging: rt5208: Fix a sleep-in-atomic bug in xd_copy_page

Vegard Nossum <vegard.nossum@oracle.com>
    kthread: fix boot hang (regression) on MIPS/OpenRISC

Vegard Nossum <vegard.nossum@oracle.com>
    kthread: Fix use-after-free if kthread fork fails

Ritesh Harjani <riteshh@codeaurora.org>
    cfq: Give a chance for arming slice idle timer in case of group_idle

Takashi Iwai <tiwai@suse.de>
    ALSA: hda - Fix cancel_work_sync() stall from jackpoll work

Pierre Morel <pmorel@linux.ibm.com>
    KVM: s390: vsie: copy wrapping keys to right place

Felipe Balbi <felipe.balbi@linux.intel.com>
    i2c: i801: fix DNV's SMBCTRL register offset

Shubhrajyoti Datta <shubhrajyoti.datta@xilinx.com>
    i2c: xiic: Make the start and the byte count write atomic


-------------

Diffstat:

 Makefile                                  |  4 ++--
 arch/arc/configs/axs101_defconfig         |  1 -
 arch/arc/configs/axs103_defconfig         |  1 -
 arch/arc/configs/axs103_smp_defconfig     |  1 -
 arch/mips/cavium-octeon/octeon-platform.c |  2 ++
 arch/mips/generic/init.c                  |  1 +
 arch/mips/include/asm/io.h                |  8 +++----
 arch/mips/kernel/process.c                |  1 -
 arch/mips/mm/c-r4k.c                      |  6 +++--
 arch/openrisc/kernel/process.c            |  2 --
 arch/s390/kvm/vsie.c                      |  3 ++-
 arch/x86/mm/fault.c                       |  2 --
 block/blk-cgroup.c                        |  9 ++++----
 block/cfq-iosched.c                       |  6 +++--
 block/partitions/aix.c                    | 13 +++++++----
 drivers/ata/libahci.c                     |  2 ++
 drivers/bluetooth/Kconfig                 |  1 +
 drivers/char/tpm/tpm_i2c_infineon.c       |  8 +++----
 drivers/char/tpm/tpm_tis_spi.c            |  9 +++++++-
 drivers/gpio/gpio-ml-ioh.c                |  3 ++-
 drivers/gpio/gpio-tegra.c                 |  2 +-
 drivers/i2c/busses/i2c-i801.c             |  7 +++++-
 drivers/i2c/busses/i2c-xiic.c             |  4 ++++
 drivers/infiniband/core/cma.c             | 13 ++++++++---
 drivers/infiniband/sw/rxe/rxe_resp.c      |  4 +++-
 drivers/input/touchscreen/atmel_mxt_ts.c  |  7 +++---
 drivers/iommu/ipmmu-vmsa.c                |  9 ++++----
 drivers/macintosh/via-pmu.c               |  9 ++++----
 drivers/md/raid5.c                        |  6 +++++
 drivers/media/dvb-frontends/helene.c      |  5 +++-
 drivers/media/platform/s5p-mfc/s5p_mfc.c  | 23 ++++++++++---------
 drivers/mfd/ti_am335x_tscadc.c            |  3 +--
 drivers/misc/mic/scif/scif_api.c          | 20 ++++++++--------
 drivers/misc/ti-st/st_kim.c               |  4 ++--
 drivers/mtd/ubi/wl.c                      |  8 +++++--
 drivers/net/ethernet/marvell/mvneta.c     |  1 -
 drivers/net/phy/mdio-mux-bcm-iproc.c      | 20 ++++++++++++----
 drivers/net/wireless/ath/ath10k/mac.c     |  7 ++++++
 drivers/net/wireless/ath/ath10k/wmi-tlv.c |  5 ++++
 drivers/net/wireless/ath/ath10k/wmi-tlv.h |  5 ++++
 drivers/net/wireless/ath/ath9k/hw.c       |  7 ++++--
 drivers/net/wireless/ath/ath9k/xmit.c     |  3 ++-
 drivers/net/wireless/ti/wlcore/rx.c       |  8 +++++--
 drivers/scsi/3w-9xxx.c                    |  6 ++++-
 drivers/scsi/3w-sas.c                     |  3 +++
 drivers/scsi/3w-xxxx.c                    |  2 ++
 drivers/staging/rts5208/rtsx_scsi.c       |  2 +-
 drivers/staging/rts5208/xd.c              |  2 +-
 drivers/target/target_core_transport.c    |  5 ++--
 drivers/tty/rocket.c                      |  2 +-
 drivers/uio/uio.c                         |  3 +--
 drivers/usb/host/xhci.c                   |  3 +++
 fs/autofs4/autofs_i.h                     |  4 +++-
 fs/autofs4/inode.c                        |  1 -
 fs/f2fs/file.c                            |  2 +-
 fs/f2fs/gc.c                              |  8 ++++++-
 fs/f2fs/inline.c                          | 21 +++++++++++++++++
 fs/f2fs/node.c                            |  4 +++-
 fs/f2fs/segment.h                         |  3 +++
 fs/f2fs/super.c                           | 21 +++++++++++++++--
 fs/nfs/callback_proc.c                    |  4 ++--
 fs/nfs/callback_xdr.c                     | 11 ++++++---
 include/linux/mm_types.h                  |  2 +-
 include/linux/sched.h                     |  2 +-
 include/linux/vm_event_item.h             |  1 -
 include/linux/vmacache.h                  |  5 ----
 include/uapi/linux/ethtool.h              |  4 ++--
 kernel/fork.c                             | 17 ++++++++++----
 kernel/locking/osq_lock.c                 | 13 +++++++++++
 kernel/locking/rwsem-xadd.c               | 27 ++++++++++++++++++++++
 kernel/time/timer.c                       | 29 ++++++++++++-----------
 mm/debug.c                                |  4 ++--
 mm/vmacache.c                             | 38 -------------------------------
 mm/vmscan.c                               |  3 ++-
 net/bluetooth/hidp/core.c                 |  2 +-
 net/dcb/dcbnl.c                           | 11 +++++----
 net/netfilter/x_tables.c                  |  4 ++--
 net/wireless/nl80211.c                    |  3 +++
 security/selinux/avc.c                    | 14 +++++-------
 sound/pci/hda/hda_codec.c                 |  3 ++-
 tools/perf/perf.h                         |  2 ++
 81 files changed, 358 insertions(+), 196 deletions(-)