[PATCH 4.9 00/39] 4.9.63-stable review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 4.9.63 release.
There are 39 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat Nov 18 17:42:01 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.63-rc1.gz
or in the git tree and branch at:
  git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 4.9.63-rc1

Willy Tarreau <w@xxxxxx>
    misc: panel: properly restore atomic counter on error path

Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
    qla2xxx: Fix incorrect tcm_qla2xxx_free_cmd use during TMR ABORT (v2)

Bart Van Assche <bart.vanassche@xxxxxxxxxxx>
    target/iscsi: Fix iSCSI task reassignment handling

Chi-hsien Lin <Chi-Hsien.Lin@xxxxxxxxxxx>
    brcmfmac: remove setting IBSS mode when stopping AP

Bilal Amarni <bilal.amarni@xxxxxxxxx>
    security/keys: add CONFIG_KEYS_COMPAT to Kconfig

Florian Westphal <fw@xxxxxxxxx>
    netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable"

Florian Westphal <fw@xxxxxxxxx>
    netfilter: nat: avoid use of nf_conn_nat extension

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Revert "ARM: dts: imx53-qsb-common: fix FEC pinmux config"

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: seq: Cancel pending autoload work at unbinding device

Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
    Input: ims-psu - check if CDC union descriptor is sane

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
    usb: usbtest: fix NULL pointer dereference

Johannes Berg <johannes.berg@xxxxxxxxx>
    mac80211: don't compare TKIP TX MIC key in reinstall prevention

Jason A. Donenfeld <Jason@xxxxxxxxx>
    mac80211: use constant time comparison with keys

Johannes Berg <johannes.berg@xxxxxxxxx>
    mac80211: accept key reinstall without changing anything

Guillaume Nault <g.nault@xxxxxxxxxxxx>
    ppp: fix race in ppp device destruction

Cong Wang <xiyou.wangcong@xxxxxxxxx>
    net_sched: avoid matching qdisc with zero handle

Xin Long <lucien.xin@xxxxxxxxx>
    sctp: reset owner sk for data chunks on out queues when migrating a sock

Julien Gomes <julien@xxxxxxxxxx>
    tun: allow positive return values on dev_get_valid_name() call

Xin Long <lucien.xin@xxxxxxxxx>
    ip6_gre: update dst pmtu if dev mtu has been updated by toobig in __gre6_xmit

Xin Long <lucien.xin@xxxxxxxxx>
    ip6_gre: only increase err_count for some certain type icmpv6 in ip6gre_err

Xin Long <lucien.xin@xxxxxxxxx>
    ipip: only increase err_count for some certain type icmp in ipip_err

Girish Moodalbail <girish.moodalbail@xxxxxxxxxx>
    tap: double-free in error path in tap_open()

Andrei Vagin <avagin@xxxxxxxxxx>
    net/unix: don't show information about sockets from other namespaces

Eric Dumazet <edumazet@xxxxxxxxxx>
    tcp/dccp: fix other lockdep splats accessing ireq_opt

Eric Dumazet <edumazet@xxxxxxxxxx>
    tcp/dccp: fix lockdep splat in inet_csk_route_req()

Laszlo Toth <laszlth@xxxxxxxxx>
    sctp: full support for ipv6 ip_nonlocal_bind & IP_FREEBIND

Eric Dumazet <edumazet@xxxxxxxxxx>
    ipv6: flowlabel: do not leave opt->tot_len with garbage

Craig Gallek <kraig@xxxxxxxxxx>
    soreuseport: fix initialization race

Eric Dumazet <edumazet@xxxxxxxxxx>
    packet: avoid panic in packet_getsockopt()

Eric Dumazet <edumazet@xxxxxxxxxx>
    tcp/dccp: fix ireq->opt races

Xin Long <lucien.xin@xxxxxxxxx>
    sctp: add the missing sock_owned_by_user check in sctp_icmp_redirect

Cong Wang <xiyou.wangcong@xxxxxxxxx>
    tun: call dev_get_valid_name() before register_netdevice()

Guillaume Nault <g.nault@xxxxxxxxxxxx>
    l2tp: check ps->sock before running pppol2tp_session_ioctl()

Eric Dumazet <edumazet@xxxxxxxxxx>
    tcp: fix tcp_mtu_probe() vs highest_sack

Eric Dumazet <edumazet@xxxxxxxxxx>
    net: call cgroup_sk_alloc() earlier in sk_clone_lock()

Jason A. Donenfeld <Jason@xxxxxxxxx>
    netlink: do not set cb_running if dump's start() errs

Eric Dumazet <edumazet@xxxxxxxxxx>
    ipv6: addrconf: increment ifp refcount before ipv6_del_addr()

Craig Gallek <kraig@xxxxxxxxxx>
    tun/tap: sanitize TUNSETSNDBUF input

Alexey Kodanev <alexey.kodanev@xxxxxxxxxx>
    gso: fix payload length when gso_size is zero


-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm/boot/dts/imx53-qsb-common.dtsi            |  20 +--
 arch/powerpc/Kconfig                               |   5 -
 arch/s390/Kconfig                                  |   3 -
 arch/sparc/Kconfig                                 |   3 -
 arch/x86/Kconfig                                   |   4 -
 drivers/input/misc/ims-pcu.c                       |  16 ++-
 drivers/misc/panel.c                               |  23 +++-
 drivers/net/macvtap.c                              |  20 +--
 drivers/net/ppp/ppp_generic.c                      |  20 +++
 drivers/net/tun.c                                  |   7 +
 .../broadcom/brcm80211/brcmfmac/cfg80211.c         |   3 -
 drivers/scsi/qla2xxx/tcm_qla2xxx.c                 |  33 -----
 drivers/target/iscsi/iscsi_target.c                |  19 +--
 drivers/usb/misc/usbtest.c                         |   5 +-
 include/linux/netdevice.h                          |   3 +
 include/net/inet_sock.h                            |   8 +-
 include/net/netfilter/nf_conntrack.h               |   3 +-
 include/net/netfilter/nf_nat.h                     |   1 -
 include/net/tcp.h                                  |   6 +-
 include/target/target_core_base.h                  |   1 +
 net/core/dev.c                                     |   6 +-
 net/core/sock.c                                    |   3 +-
 net/core/sock_reuseport.c                          |  12 +-
 net/dccp/ipv4.c                                    |  13 +-
 net/ipv4/cipso_ipv4.c                              |  24 +---
 net/ipv4/gre_offload.c                             |   2 +-
 net/ipv4/inet_connection_sock.c                    |   9 +-
 net/ipv4/inet_hashtables.c                         |   5 +-
 net/ipv4/ipip.c                                    |  59 ++++++---
 net/ipv4/syncookies.c                              |   2 +-
 net/ipv4/tcp_input.c                               |   2 +-
 net/ipv4/tcp_ipv4.c                                |  21 +--
 net/ipv4/tcp_output.c                              |   3 +-
 net/ipv4/udp.c                                     |   5 +-
 net/ipv4/udp_offload.c                             |   2 +-
 net/ipv6/addrconf.c                                |   1 +
 net/ipv6/ip6_flowlabel.c                           |   1 +
 net/ipv6/ip6_gre.c                                 |  20 ++-
 net/ipv6/ip6_offload.c                             |   2 +-
 net/ipv6/ip6_output.c                              |   4 +-
 net/l2tp/l2tp_ppp.c                                |   3 +
 net/mac80211/key.c                                 |  54 +++++++-
 net/netfilter/nf_conntrack_core.c                  |   2 +-
 net/netfilter/nf_nat_core.c                        | 146 ++++++++-------------
 net/netlink/af_netlink.c                           |  13 +-
 net/packet/af_packet.c                             |  24 ++--
 net/sched/sch_api.c                                |   2 +
 net/sctp/input.c                                   |   2 +-
 net/sctp/ipv6.c                                    |   6 +-
 net/sctp/socket.c                                  |  32 +++++
 net/unix/diag.c                                    |   2 +
 security/keys/Kconfig                              |   4 +
 sound/core/seq/seq_device.c                        |   3 +
 54 files changed, 403 insertions(+), 293 deletions(-)