[PATCH 4.9 00/83] 4.9.181-stable review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 4.9.181 release.
There are 83 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Tue 11 Jun 2019 04:39:58 PM UTC.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.181-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 4.9.181-rc1

Kirill Smelkov <kirr@xxxxxxxxxx>
    fuse: Add FOPEN_STREAM to use stream_open()

Kirill Smelkov <kirr@xxxxxxxxxx>
    fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock

Jiri Slaby <jslaby@xxxxxxx>
    TTY: serial_core, add ->install

Chris Wilson <chris@xxxxxxxxxxxxxxxxxx>
    drm/i915: Fix I915_EXEC_RING_MASK

Christian KÃnig <christian.koenig@xxxxxxx>
    drm/radeon: prefer lower reference dividers

Patrik Jakobsson <patrik.r.jakobsson@xxxxxxxxx>
    drm/gma500/cdv: Check vbt config bits when detecting lvds panels

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    genwqe: Prevent an integer overflow in the ioctl

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Revert "MIPS: perf: ath79: Fix perfcount IRQ assignment"

Paul Burton <paul.burton@xxxxxxxx>
    MIPS: pistachio: Build uImage.gz by default

Jiri Kosina <jkosina@xxxxxxx>
    x86/power: Fix 'nosmt' vs hibernation triple fault during resume

Miklos Szeredi <mszeredi@xxxxxxxxxx>
    fuse: fallocate: fix return with locked inode

John David Anglin <dave.anglin@xxxxxxxx>
    parisc: Use implicit space register selection for loading the coherence index of I/O pdirs

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
    rcu: locking and unlocking need to always be at least barriers

Hangbin Liu <liuhangbin@xxxxxxxxx>
    Revert "fib_rules: return 0 directly if an exactly same rule exists when NLM_F_EXCL not supplied"

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Revert "fib_rules: fix error in backport of e9919a24d302 ("fib_rules: return 0...")"

Olivier Matz <olivier.matz@xxxxxxxxx>
    ipv6: use READ_ONCE() for inet->hdrincl as in ipv4

Olivier Matz <olivier.matz@xxxxxxxxx>
    ipv6: fix EFAULT on sendto with icmpv6 and hdrincl

Paolo Abeni <pabeni@xxxxxxxxxx>
    pktgen: do not sleep with the thread lock held.

Zhu Yanjun <yanjun.zhu@xxxxxxxxxx>
    net: rds: fix memory leak in rds_ib_flush_mr_pool

Erez Alfasi <ereza@xxxxxxxxxxxx>
    net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query

David Ahern <dsahern@xxxxxxxxx>
    neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit

Vivien Didelot <vivien.didelot@xxxxxxxxx>
    ethtool: fix potential userspace buffer overflow

Nadav Amit <namit@xxxxxxxxxx>
    media: uvcvideo: Fix uvc_alloc_entity() allocation alignment

Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
    efi/libstub: Unify command line param parsing

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Revert "x86/build: Move _etext to actual end of .text"

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
    mm: make page ref count overflow check tighter and more explicit

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
    mm: prevent get_user_pages() from overflowing page refcount

Punit Agrawal <punit.agrawal@xxxxxxx>
    mm, gup: ensure real head page is ref-counted when using hugepages

Will Deacon <will.deacon@xxxxxxx>
    mm, gup: remove broken VM_BUG_ON_PAGE compound check for hugepages

Matthew Wilcox <willy@xxxxxxxxxxxxx>
    fs: prevent page refcount overflow in pipe_buf_get

Todd Kjos <tkjos@xxxxxxxxxxx>
    binder: replace "%p" with "%pK"

Ben Hutchings <ben.hutchings@xxxxxxxxxxxxxxx>
    binder: Replace "%p" with "%pK" for stable

Arend van Spriel <arend.vanspriel@xxxxxxxxxxxx>
    brcmfmac: add subtype check for event handling in data path

Arend van Spriel <arend.vanspriel@xxxxxxxxxxxx>
    brcmfmac: assure SSID length from firmware is limited

Arend Van Spriel <arend.vanspriel@xxxxxxxxxxxx>
    brcmfmac: add length checks in scheduled scan result handler

Thomas Hellstrom <thellstrom@xxxxxxxxxx>
    drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set

Kees Cook <keescook@xxxxxxxxxxxx>
    gcc-plugins: Fix build failures under Darwin host

Roberto Bergantinos Corpas <rbergant@xxxxxxxxxx>
    CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    staging: vc04_services: prevent integer overflow in create_pagelist()

Jonathan Corbet <corbet@xxxxxxx>
    docs: Fix conf.py for Sphinx 2.0

Zhenliang Wei <weizhenliang@xxxxxxxxxx>
    kernel/signal.c: trace_signal_deliver when signal_group_exit

Jiri Slaby <jslaby@xxxxxxx>
    memcg: make it work on sparse non-0-node systems

Joe Burmeister <joe.burmeister@xxxxxxxxxxxxx>
    tty: max310x: Fix external crystal register setup

Jorge Ramirez-Ortiz <jorge.ramirez-ortiz@xxxxxxxxxx>
    tty: serial: msm_serial: Fix XON/XOFF

Lyude Paul <lyude@xxxxxxxxxx>
    drm/nouveau/i2c: Disable i2c bus access after ->fini()

Kailang Yang <kailang@xxxxxxxxxxx>
    ALSA: hda/realtek - Set default power save node to 0

Ravi Bangoria <ravi.bangoria@xxxxxxxxxxxxx>
    powerpc/perf: Fix MMCRA corruption by bhrb_filter

Filipe Manana <fdmanana@xxxxxxxx>
    Btrfs: fix race updating log root item during fsync

Steffen Maier <maier@xxxxxxxxxxxxx>
    scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)

Steffen Maier <maier@xxxxxxxxxxxxx>
    scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove

Mauro Carvalho Chehab <mchehab+samsung@xxxxxxxxxx>
    media: smsusb: better handle optional alignment

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
    media: usb: siano: Fix false-positive "uninitialized variable" warning

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
    media: usb: siano: Fix general protection fault in smsusb

Oliver Neukum <oneukum@xxxxxxxx>
    USB: rio500: fix memory leak in close after disconnect

Oliver Neukum <oneukum@xxxxxxxx>
    USB: rio500: refuse more than one device at a time

Maximilian Luz <luzmaximilian@xxxxxxxxx>
    USB: Add LPM quirk for Surface Dock GigE adapter

Oliver Neukum <oneukum@xxxxxxxx>
    USB: sisusbvga: fix oops in error path of sisusb_probe

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
    USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor

Shuah Khan <skhan@xxxxxxxxxxxxxxxxxxx>
    usbip: usbip_host: fix stub_dev lock context imbalance regression

Shuah Khan <skhan@xxxxxxxxxxxxxxxxxxx>
    usbip: usbip_host: fix BUG: sleeping function called from invalid context

Carsten Schmid <carsten_schmid@xxxxxxxxxx>
    usb: xhci: avoid null pointer deref when bos field is NULL

Andrey Smirnov <andrew.smirnov@xxxxxxxxx>
    xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()

Fabio Estevam <festevam@xxxxxxxxx>
    xhci: Use %zu for printing size_t type

Henry Lin <henryl@xxxxxxxxxx>
    xhci: update bounce buffer with correct sg num

Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
    include/linux/bitops.h: sanitize rotate primitives

James Clarke <jrtc27@xxxxxxxxxx>
    sparc64: Fix regression in non-hypervisor TLB flush xcall

Junwei Hu <hujunwei4@xxxxxxxxxx>
    tipc: fix modprobe tipc failed after switch order of device registration

David S. Miller <davem@xxxxxxxxxxxxx>
    Revert "tipc: fix modprobe tipc failed after switch order of device registration"

Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
    xen/pciback: Don't disable PCI_COMMAND on PCI device reset.

Daniel Axtens <dja@xxxxxxxxxx>
    crypto: vmx - ghash: do nosimd fallback manually

Antoine Tenart <antoine.tenart@xxxxxxxxxxx>
    net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value

Jisheng Zhang <Jisheng.Zhang@xxxxxxxxxxxxx>
    net: mvneta: Fix err code path of probe

Rasmus Villemoes <rasmus.villemoes@xxxxxxxxx>
    net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT

Eric Dumazet <edumazet@xxxxxxxxxx>
    ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST

Eric Dumazet <edumazet@xxxxxxxxxx>
    ipv4/igmp: fix another memory leak in igmpv3_del_delrec()

Michael Chan <michael.chan@xxxxxxxxxxxx>
    bnxt_en: Fix aggregation buffer leak under OOM condition.

Chris Packham <chris.packham@xxxxxxxxxxxxxxxxxxx>
    tipc: Avoid copying bytes beyond the supplied data

Kloetzke Jan <Jan.Kloetzke@xxxxxxx>
    usbnet: fix kernel crash after disconnect

Jisheng Zhang <Jisheng.Zhang@xxxxxxxxxxxxx>
    net: stmmac: fix reset gpio free missing

Eric Dumazet <edumazet@xxxxxxxxxx>
    net-gro: fix use-after-free read in napi_gro_frags()

Andy Duan <fugang.duan@xxxxxxx>
    net: fec: fix the clk mismatch in failed_reset path

Eric Dumazet <edumazet@xxxxxxxxxx>
    llc: fix skb leak in llc_build_and_send_ui_pkt()

Mike Manning <mmanning@xxxxxxxxxxxxxxxxxxx>
    ipv6: Consider sk_bound_dev_if when binding a raw socket to an address


-------------

Diffstat:

 Documentation/conf.py                              |   2 +-
 Makefile                                           |   4 +-
 arch/mips/ath79/setup.c                            |   6 +
 arch/mips/pistachio/Platform                       |   1 +
 arch/powerpc/perf/core-book3s.c                    |   6 +-
 arch/powerpc/perf/power8-pmu.c                     |   3 +
 arch/powerpc/perf/power9-pmu.c                     |   3 +
 arch/sparc/mm/ultra.S                              |   4 +-
 arch/x86/kernel/vmlinux.lds.S                      |   6 +-
 arch/x86/power/cpu.c                               |  10 +
 arch/x86/power/hibernate_64.c                      |  33 ++
 drivers/android/binder.c                           |  36 +-
 drivers/crypto/vmx/ghash.c                         | 213 +++++-------
 drivers/firmware/efi/libstub/arm-stub.c            |  23 +-
 drivers/firmware/efi/libstub/arm64-stub.c          |   4 +-
 drivers/firmware/efi/libstub/efi-stub-helper.c     |  19 +-
 drivers/firmware/efi/libstub/efistub.h             |   2 +
 drivers/gpu/drm/gma500/cdv_intel_lvds.c            |   3 +
 drivers/gpu/drm/gma500/intel_bios.c                |   3 +
 drivers/gpu/drm/gma500/psb_drv.h                   |   1 +
 drivers/gpu/drm/nouveau/include/nvkm/subdev/i2c.h  |   2 +
 drivers/gpu/drm/nouveau/nvkm/subdev/i2c/aux.c      |  26 +-
 drivers/gpu/drm/nouveau/nvkm/subdev/i2c/aux.h      |   2 +
 drivers/gpu/drm/nouveau/nvkm/subdev/i2c/base.c     |  15 +
 drivers/gpu/drm/nouveau/nvkm/subdev/i2c/bus.c      |  21 +-
 drivers/gpu/drm/nouveau/nvkm/subdev/i2c/bus.h      |   1 +
 drivers/gpu/drm/radeon/radeon_display.c            |   4 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_drv.c                |   8 +-
 drivers/irqchip/irq-ath79-misc.c                   |  11 -
 drivers/media/usb/siano/smsusb.c                   |  33 +-
 drivers/media/usb/uvc/uvc_driver.c                 |   2 +-
 drivers/misc/genwqe/card_dev.c                     |   2 +
 drivers/misc/genwqe/card_utils.c                   |   4 +
 drivers/net/dsa/mv88e6xxx/chip.c                   |   2 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |   2 +
 drivers/net/ethernet/freescale/fec_main.c          |   2 +-
 drivers/net/ethernet/marvell/mvneta.c              |   4 +-
 drivers/net/ethernet/marvell/mvpp2.c               |  10 +-
 drivers/net/ethernet/mellanox/mlx4/en_ethtool.c    |   4 +-
 drivers/net/ethernet/mellanox/mlx4/port.c          |   5 -
 drivers/net/ethernet/stmicro/stmmac/stmmac_mdio.c  |   3 +-
 drivers/net/usb/usbnet.c                           |   6 +
 .../broadcom/brcm80211/brcmfmac/cfg80211.c         |  16 +-
 .../wireless/broadcom/brcm80211/brcmfmac/core.c    |   5 +-
 .../wireless/broadcom/brcm80211/brcmfmac/fweh.h    |  16 +-
 .../wireless/broadcom/brcm80211/brcmfmac/msgbuf.c  |   2 +-
 drivers/parisc/ccio-dma.c                          |   4 +-
 drivers/parisc/sba_iommu.c                         |   3 +-
 drivers/s390/scsi/zfcp_ext.h                       |   1 +
 drivers/s390/scsi/zfcp_scsi.c                      |   9 +
 drivers/s390/scsi/zfcp_sysfs.c                     |  55 +++-
 drivers/s390/scsi/zfcp_unit.c                      |   8 +-
 .../interface/vchiq_arm/vchiq_2835_arm.c           |   9 +
 drivers/tty/serial/max310x.c                       |   2 +-
 drivers/tty/serial/msm_serial.c                    |   5 +-
 drivers/tty/serial/serial_core.c                   |  24 +-
 drivers/usb/core/config.c                          |   4 +-
 drivers/usb/core/quirks.c                          |   3 +
 drivers/usb/host/xhci-ring.c                       |  17 +-
 drivers/usb/host/xhci.c                            |  24 +-
 drivers/usb/misc/rio500.c                          |  41 ++-
 drivers/usb/misc/sisusbvga/sisusb.c                |  15 +-
 drivers/usb/usbip/stub_dev.c                       |  75 +++--
 drivers/xen/xen-pciback/pciback_ops.c              |   2 -
 drivers/xen/xenbus/xenbus_dev_frontend.c           |   2 +-
 fs/btrfs/tree-log.c                                |   8 +-
 fs/cifs/file.c                                     |   4 +-
 fs/fuse/dev.c                                      |  12 +-
 fs/fuse/file.c                                     |   6 +-
 fs/open.c                                          |  18 +
 fs/pipe.c                                          |   4 +-
 fs/read_write.c                                    |   5 +-
 fs/splice.c                                        |  12 +-
 include/linux/bitops.h                             |  16 +-
 include/linux/cpu.h                                |   4 +
 include/linux/efi.h                                |   2 +-
 include/linux/fs.h                                 |   4 +
 include/linux/list_lru.h                           |   1 +
 include/linux/mm.h                                 |   6 +-
 include/linux/pipe_fs_i.h                          |  10 +-
 include/linux/rcupdate.h                           |   6 +-
 include/uapi/drm/i915_drm.h                        |   2 +-
 include/uapi/linux/fuse.h                          |   2 +
 include/uapi/linux/tipc_config.h                   |  10 +-
 kernel/cpu.c                                       |   4 +-
 kernel/power/hibernate.c                           |   9 +
 kernel/signal.c                                    |   2 +
 kernel/trace/trace.c                               |   6 +-
 mm/gup.c                                           |  54 ++-
 mm/hugetlb.c                                       |  16 +-
 mm/list_lru.c                                      |   8 +-
 net/core/dev.c                                     |   2 +-
 net/core/ethtool.c                                 |   5 +-
 net/core/fib_rules.c                               |   7 +-
 net/core/neighbour.c                               |   9 +-
 net/core/pktgen.c                                  |  11 +
 net/ipv4/igmp.c                                    |  47 ++-
 net/ipv6/raw.c                                     |  27 +-
 net/llc/llc_output.c                               |   2 +
 net/rds/ib_rdma.c                                  |  10 +-
 net/tipc/core.c                                    |  32 +-
 net/tipc/subscr.c                                  |  14 +-
 net/tipc/subscr.h                                  |   5 +-
 scripts/coccinelle/api/stream_open.cocci           | 363 +++++++++++++++++++++
 scripts/gcc-plugins/gcc-common.h                   |   4 +
 sound/pci/hda/patch_realtek.c                      |   2 +-
 106 files changed, 1223 insertions(+), 441 deletions(-)