[PATCH 4.9 00/70] 4.9.128-stable review

From: Greg Kroah-Hartman
Date: Mon Sep 17 2018 - 18:53:06 EST


This is the start of the stable review cycle for the 4.9.128 release.
There are 70 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed Sep 19 21:16:09 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.128-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.9.128-rc1

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
mm: get rid of vmacache_flush_all() entirely

Ian Kent <raven@xxxxxxxxxx>
autofs: fix autofs_sbi() does not check super block type

Wei Yongjun <weiyongjun1@xxxxxxxxxx>
mtd: ubi: wl: Fix error return code in ubi_wl_init()

Eric Dumazet <edumazet@xxxxxxxxxx>
netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
xhci: Fix use-after-free in xhci_free_virt_device

Parav Pandit <parav@xxxxxxxxxxxx>
RDMA/cma: Do not ignore net namespace for unbound cm_id

Paul Burton <paul.burton@xxxxxxxxxx>
MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
NFSv4.1: Fix a potential layoutget/layoutrecall deadlock

Chao Yu <yuchao0@xxxxxxxxxx>
f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize

Zumeng Chen <zumeng.chen@xxxxxxxxx>
mfd: ti_am335x_tscadc: Fix struct clk memory leak

Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
iommu/ipmmu-vmsa: Fix allocation in atomic context

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
f2fs: Fix uninitialized return in f2fs_ioc_shutdown()

Katsuhiro Suzuki <suzuki.katsuhiro@xxxxxxxxxxxxx>
media: helene: fix xtal frequency setting at power on

Mauricio Faria de Oliveira <mfo@xxxxxxxxxxxxx>
partitions/aix: fix usage of uninitialized lv_info and lvname structures

Mauricio Faria de Oliveira <mfo@xxxxxxxxxxxxx>
partitions/aix: append null character to print data from disk

Sylwester Nawrocki <s.nawrocki@xxxxxxxxxxx>
media: s5p-mfc: Fix buffer look up in s5p_mfc_handle_frame_{new, copy_time} functions

Nick Dyer <nick.dyer@xxxxxxxxxxx>
Input: atmel_mxt_ts - only use first T9 instance

Petr Machata <petrm@xxxxxxxxxxxx>
net: dcb: For wild-card lookups, use priority -1, not 0

Nicholas Mc Guire <hofrat@xxxxxxxxx>
MIPS: generic: fix missing of_node_put()

Nicholas Mc Guire <hofrat@xxxxxxxxx>
MIPS: Octeon: add missing of_node_put()

Chao Yu <yuchao0@xxxxxxxxxx>
f2fs: fix to do sanity check with reserved blkaddr of inline inode

Peter Rosin <peda@xxxxxxxxxx>
tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)

Linus Walleij <linus.walleij@xxxxxxxxxx>
tpm_tis_spi: Pass the SPI IRQ down to the driver

Chao Yu <yuchao0@xxxxxxxxxx>
f2fs: fix to skip GC if type in SSA and SIT is inconsistent

Chao Yu <yuchao0@xxxxxxxxxx>
f2fs: try grabbing node page lock aggressively in sync scenario

Yelena Krivosheev <yelena@xxxxxxxxxxx>
net: mvneta: fix mtu change on port without link

Anton Vasilyev <vasilyev@xxxxxxxxx>
gpio: ml-ioh: Fix buffer underwrite on probe error path

Joerg Roedel <jroedel@xxxxxxx>
x86/mm: Remove in_nmi() warning from vmalloc_fault()

Marcel Holtmann <marcel@xxxxxxxxxxxx>
Bluetooth: hidp: Fix handling of strncpy for hid->name information

Surabhi Vishnoi <svishnoi@xxxxxxxxxxxxxx>
ath10k: disable bundle mgmt tx completion event support

Anton Vasilyev <vasilyev@xxxxxxxxx>
scsi: 3ware: fix return 0 on the error path of probe

Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
ata: libahci: Correct setting of DEVSLP register

Paul Burton <paul.burton@xxxxxxxx>
MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET

Loic Poulain <loic.poulain@xxxxxxxxxx>
wlcore: Set rx_status boottime_ns field on rx

Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx>
ath10k: prevent active scans on potential unusable channels

Felix Fietkau <nbd@xxxxxxxx>
ath9k_hw: fix channel maximum power level test

Felix Fietkau <nbd@xxxxxxxx>
ath9k: report tx status on EOSP

Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
macintosh/via-pmu: Add missing mmio accessors

Olga Kornievskaia <kolga@xxxxxxxxxx>
NFSv4.0 fix client reference leak in callback

Christophe Leroy <christophe.leroy@xxxxxx>
perf tools: Allow overriding MAX_NR_CPUS at compile time

Yunlong Song <yunlong.song@xxxxxxxxxx>
f2fs: do not set free of current section

Anton Vasilyev <vasilyev@xxxxxxxxx>
tty: rocket: Fix possible buffer overwrite on register_PCI

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
uio: potential double frees if __uio_register_device() fails

Anton Vasilyev <vasilyev@xxxxxxxxx>
misc: ti-st: Fix memory leak in the error path of probe()

Gaurav Kohli <gkohli@xxxxxxxxxxxxxx>
timers: Clear timer_base::must_forward_clk with timer_base::lock held

BingJing Chang <bingjingc@xxxxxxxxxxxx>
md/raid5: fix data corruption of replacements after originals dropped

Mike Christie <mchristi@xxxxxxxxxx>
scsi: target: fix __transport_register_session locking

Arun Parameswaran <arun.parameswaran@xxxxxxxxxxxx>
net: phy: Fix the register offsets in Broadcom iProc mdio mux driver

Dmitry Osipenko <digetx@xxxxxxxxx>
gpio: tegra: Move driver registration to subsys_init level

Johan Hedberg <johan.hedberg@xxxxxxxxx>
Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV

Florian Fainelli <f.fainelli@xxxxxxxxx>
ethtool: Remove trailing semicolon for static inline

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
misc: mic: SCIF Fix scif_get_new_port() error handling

Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
ARC: [plat-axs*]: Enable SWAP

Johannes Weiner <hannes@xxxxxxxxxxx>
mm: remove seemingly spurious reclaimability check from laptop_mode gating

Mel Gorman <mgorman@xxxxxxx>
mm, vmscan: clear PGDAT_WRITEBACK when zone is balanced

Prateek Sood <prsood@xxxxxxxxxxxxxx>
locking/osq_lock: Fix osq_lock queue corruption

Michal Hocko <mhocko@xxxxxxxxxx>
selinux: use GFP_NOWAIT in the AVC kmem_caches

Prateek Sood <prsood@xxxxxxxxxxxxxx>
locking/rwsem-xadd: Fix missed wakeup due to reordering of load

Johannes Berg <johannes.berg@xxxxxxxxx>
nl80211: fix null-ptr dereference on invalid mesh configuration

Tejun Heo <tj@xxxxxxxxxx>
block,blkcg: use __GFP_NOWARN for best-effort allocations in blkcg

Kees Cook <keescook@xxxxxxxxxxxx>
IB/rxe: do not copy extra stack memory to skb

Daniel Micay <danielmicay@xxxxxxxxx>
staging/rts5208: Fix read overflow in memcpy

Jia-Ju Bai <baijiaju1990@xxxxxxx>
staging: rt5208: Fix a sleep-in-atomic bug in xd_copy_page

Vegard Nossum <vegard.nossum@xxxxxxxxxx>
kthread: fix boot hang (regression) on MIPS/OpenRISC

Vegard Nossum <vegard.nossum@xxxxxxxxxx>
kthread: Fix use-after-free if kthread fork fails

Ritesh Harjani <riteshh@xxxxxxxxxxxxxx>
cfq: Give a chance for arming slice idle timer in case of group_idle

Takashi Iwai <tiwai@xxxxxxx>
ALSA: hda - Fix cancel_work_sync() stall from jackpoll work

Pierre Morel <pmorel@xxxxxxxxxxxxx>
KVM: s390: vsie: copy wrapping keys to right place

Felipe Balbi <felipe.balbi@xxxxxxxxxxxxxxx>
i2c: i801: fix DNV's SMBCTRL register offset

Shubhrajyoti Datta <shubhrajyoti.datta@xxxxxxxxxx>
i2c: xiic: Make the start and the byte count write atomic


-------------

Diffstat:

Makefile | 4 ++--
arch/arc/configs/axs101_defconfig | 1 -
arch/arc/configs/axs103_defconfig | 1 -
arch/arc/configs/axs103_smp_defconfig | 1 -
arch/mips/cavium-octeon/octeon-platform.c | 2 ++
arch/mips/generic/init.c | 1 +
arch/mips/include/asm/io.h | 8 +++----
arch/mips/kernel/process.c | 1 -
arch/mips/mm/c-r4k.c | 6 +++--
arch/openrisc/kernel/process.c | 2 --
arch/s390/kvm/vsie.c | 3 ++-
arch/x86/mm/fault.c | 2 --
block/blk-cgroup.c | 9 ++++----
block/cfq-iosched.c | 6 +++--
block/partitions/aix.c | 13 +++++++----
drivers/ata/libahci.c | 2 ++
drivers/bluetooth/Kconfig | 1 +
drivers/char/tpm/tpm_i2c_infineon.c | 8 +++----
drivers/char/tpm/tpm_tis_spi.c | 9 +++++++-
drivers/gpio/gpio-ml-ioh.c | 3 ++-
drivers/gpio/gpio-tegra.c | 2 +-
drivers/i2c/busses/i2c-i801.c | 7 +++++-
drivers/i2c/busses/i2c-xiic.c | 4 ++++
drivers/infiniband/core/cma.c | 13 ++++++++---
drivers/infiniband/sw/rxe/rxe_resp.c | 4 +++-
drivers/input/touchscreen/atmel_mxt_ts.c | 7 +++---
drivers/iommu/ipmmu-vmsa.c | 9 ++++----
drivers/macintosh/via-pmu.c | 9 ++++----
drivers/md/raid5.c | 6 +++++
drivers/media/dvb-frontends/helene.c | 5 +++-
drivers/media/platform/s5p-mfc/s5p_mfc.c | 23 ++++++++++---------
drivers/mfd/ti_am335x_tscadc.c | 3 +--
drivers/misc/mic/scif/scif_api.c | 20 ++++++++--------
drivers/misc/ti-st/st_kim.c | 4 ++--
drivers/mtd/ubi/wl.c | 8 +++++--
drivers/net/ethernet/marvell/mvneta.c | 1 -
drivers/net/phy/mdio-mux-bcm-iproc.c | 20 ++++++++++++----
drivers/net/wireless/ath/ath10k/mac.c | 7 ++++++
drivers/net/wireless/ath/ath10k/wmi-tlv.c | 5 ++++
drivers/net/wireless/ath/ath10k/wmi-tlv.h | 5 ++++
drivers/net/wireless/ath/ath9k/hw.c | 7 ++++--
drivers/net/wireless/ath/ath9k/xmit.c | 3 ++-
drivers/net/wireless/ti/wlcore/rx.c | 8 +++++--
drivers/scsi/3w-9xxx.c | 6 ++++-
drivers/scsi/3w-sas.c | 3 +++
drivers/scsi/3w-xxxx.c | 2 ++
drivers/staging/rts5208/rtsx_scsi.c | 2 +-
drivers/staging/rts5208/xd.c | 2 +-
drivers/target/target_core_transport.c | 5 ++--
drivers/tty/rocket.c | 2 +-
drivers/uio/uio.c | 3 +--
drivers/usb/host/xhci.c | 3 +++
fs/autofs4/autofs_i.h | 4 +++-
fs/autofs4/inode.c | 1 -
fs/f2fs/file.c | 2 +-
fs/f2fs/gc.c | 8 ++++++-
fs/f2fs/inline.c | 21 +++++++++++++++++
fs/f2fs/node.c | 4 +++-
fs/f2fs/segment.h | 3 +++
fs/f2fs/super.c | 21 +++++++++++++++--
fs/nfs/callback_proc.c | 4 ++--
fs/nfs/callback_xdr.c | 11 ++++++---
include/linux/mm_types.h | 2 +-
include/linux/sched.h | 2 +-
include/linux/vm_event_item.h | 1 -
include/linux/vmacache.h | 5 ----
include/uapi/linux/ethtool.h | 4 ++--
kernel/fork.c | 17 ++++++++++----
kernel/locking/osq_lock.c | 13 +++++++++++
kernel/locking/rwsem-xadd.c | 27 ++++++++++++++++++++++
kernel/time/timer.c | 29 ++++++++++++-----------
mm/debug.c | 4 ++--
mm/vmacache.c | 38 -------------------------------
mm/vmscan.c | 3 ++-
net/bluetooth/hidp/core.c | 2 +-
net/dcb/dcbnl.c | 11 +++++----
net/netfilter/x_tables.c | 4 ++--
net/wireless/nl80211.c | 3 +++
security/selinux/avc.c | 14 +++++-------
sound/pci/hda/hda_codec.c | 3 ++-
tools/perf/perf.h | 2 ++
81 files changed, 358 insertions(+), 196 deletions(-)