[PATCH 4.9 00/74] 4.9.194-stable review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 4.9.194 release.
There are 74 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat 21 Sep 2019 09:44:25 PM UTC.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.194-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 4.9.194-rc1

Vineet Gupta <Vineet.Gupta1@xxxxxxxxxxxx>
    ARC: export "abort" for modules

Sean Young <sean@xxxxxxxx>
    media: technisat-usb2: break out of loop at end of buffer

Jann Horn <jannh@xxxxxxxxxx>
    floppy: fix usercopy direction

Joerg Roedel <jroedel@xxxxxxx>
    iommu/amd: Fix race in increase_address_space()

Hillf Danton <hdanton@xxxxxxxx>
    keys: Fix missing null pointer check in request_key_auth_describe()

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
    x86/uaccess: Don't leak the AC flags into __get_user() argument evaluation

Wenwen Wang <wenwen@xxxxxxxxxx>
    dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe()

Wenwen Wang <wenwen@xxxxxxxxxx>
    dmaengine: ti: dma-crossbar: Fix a memory leak bug

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
    net: seeq: Fix the function used to release some memory in an error handling path

Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
    tools/power turbostat: fix buffer overrun

Kim Phillips <kim.phillips@xxxxxxx>
    perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops

Josh Hunt <johunt@xxxxxxxxxx>
    perf/x86/intel: Restrict period on Nehalem

Takashi Iwai <tiwai@xxxxxxx>
    sky2: Disable MSI on yet another ASUS boards (P6Xxxx)

zhaoyang <huangzhaoyang@xxxxxxxxx>
    ARM: 8901/1: add a criteria for pfn_valid of arm

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    cifs: Use kzfree() to zero out the password

Ronnie Sahlberg <lsahlber@xxxxxxxxxx>
    cifs: set domainName when a domain-key is used in multiuser

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
    NFSv2: Fix write regression

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
    NFSv2: Fix eof handling

Thomas Jarosch <thomas.jarosch@xxxxxxxxxxxxx>
    netfilter: nf_conntrack_ftp: Fix debug output

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
    x86/apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines

Prashant Malani <pmalani@xxxxxxxxxxxx>
    r8152: Set memory to all 0xFFs on failed reg reads

Sven Eckelmann <sven@xxxxxxxxxxxxx>
    batman-adv: Only read OGM2 tvlv_len after buffer len check

Doug Berger <opendmb@xxxxxxxxx>
    ARM: 8874/1: mm: only adjust sections of valid mm structures

Wenwen Wang <wenwen@xxxxxxxxxx>
    qed: Add cleanup in qed_slowpath_start()

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
    Kconfig: Fix the reference to the IDT77105 Phy driver in the description of ATM_NICSTAR_USE_IDT77105

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
    NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
    NFSv4: Fix return values for nfs4_file_open()

Ilya Leoshkevich <iii@xxxxxxxxxxxxx>
    s390/bpf: use 32-bit index for tail calls

Tony Lindgren <tony@xxxxxxxxxxx>
    ARM: OMAP2+: Fix omap4 errata warning on other SoCs

Ilya Leoshkevich <iii@xxxxxxxxxxxxx>
    s390/bpf: fix lcgr instruction encoding

Tony Lindgren <tony@xxxxxxxxxxx>
    ARM: OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss

Wen Huang <huangwenabc@xxxxxxxxx>
    mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings

Razvan Stefanescu <razvan.stefanescu@xxxxxxxxxxxxx>
    tty/serial: atmel: reschedule TX after RX was started

Chunyan Zhang <chunyan.zhang@xxxxxxxxxx>
    serial: sprd: correct the wrong sequence of arguments

Matt Delco <delco@xxxxxxxxxxxx>
    KVM: coalesced_mmio: add bounds checking

Dongli Zhang <dongli.zhang@xxxxxxxxxx>
    xen-netfront: do not assume sk_buff_head list is empty in error handling

Corey Minyard <cminyard@xxxxxxxxxx>
    x86/boot: Add missing bootparam that breaks boot on some platforms

Aneesh Kumar K.V <aneesh.kumar@xxxxxxxxxxxxx>
    powerpc/mm/radix: Use the right page size for vmemmap mapping

Sean Young <sean@xxxxxxxx>
    media: tm6000: double free if usb disconnect while streaming

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
    USB: usbcore: Fix slab-out-of-bounds bug during device reset

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
    x86/build: Add -Wnoaddress-of-packed-member to REALMODE_CFLAGS, to silence GCC9 build warning

Jean Delvare <jdelvare@xxxxxxx>
    nvmem: Use the same permissions for eeprom as for nvmem

Nishka Dasgupta <nishkadg.linux@xxxxxxxxx>
    drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto

Christophe Leroy <christophe.leroy@xxxxxx>
    crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking.

Christophe Leroy <christophe.leroy@xxxxxx>
    crypto: talitos - Do not modify req->cryptlen on decryption.

Christophe Leroy <christophe.leroy@xxxxxx>
    crypto: talitos - fix ECB algs ivsize

Christophe Leroy <christophe.leroy@xxxxxx>
    crypto: talitos - check data blocksize in ablkcipher.

Christophe Leroy <christophe.leroy@xxxxxx>
    crypto: talitos - fix CTR alg blocksize

Christophe Leroy <christophe.leroy@xxxxxx>
    crypto: talitos - check AES key size

Muchun Song <smuchun@xxxxxxxxx>
    driver core: Fix use-after-free and double free on glue directory

Xiaolei Li <xiaolei.li@xxxxxxxxxxxx>
    mtd: rawnand: mtk: Fix wrongly assigned OOB buffer pointer issue

Douglas Anderson <dianders@xxxxxxxxxxxx>
    clk: rockchip: Don't yell about bad mmc phases when getting

Paul Burton <paul.burton@xxxxxxxx>
    MIPS: VDSO: Use same -m%-float cflag as the kernel proper

Paul Burton <paul.burton@xxxxxxxx>
    MIPS: VDSO: Prevent use of smp_processor_id()

Paolo Bonzini <pbonzini@xxxxxxxxxx>
    KVM: nVMX: handle page fault in vmread

Fuqian Huang <huangfq.daxian@xxxxxxxxx>
    KVM: x86: work around leak of uninitialized stack contents

Thomas Huth <thuth@xxxxxxxxxx>
    KVM: s390: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl

Yunfeng Ye <yeyunfeng@xxxxxxxxxx>
    genirq: Prevent NULL pointer dereference in resend_irqs()

Filipe Manana <fdmanana@xxxxxxxx>
    Btrfs: fix assertion failure during fsync and use of stale transaction

Kent Gibson <warthog618@xxxxxxxxx>
    gpio: fix line flag validation in lineevent_create

Kent Gibson <warthog618@xxxxxxxxx>
    gpio: fix line flag validation in linehandle_create

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Revert "MIPS: SiByte: Enable swiotlb for SWARM, LittleSur and BigSur"

Yang Yingliang <yangyingliang@xxxxxxxxxx>
    tun: fix use-after-free when register netdev failed

Xin Long <lucien.xin@xxxxxxxxx>
    tipc: add NULL pointer check before calling kfree_rcu

Neal Cardwell <ncardwell@xxxxxxxxxx>
    tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR

Xin Long <lucien.xin@xxxxxxxxx>
    sctp: use transport pf_retrans in sctp_do_8_2_transport_strike

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
    sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()'

Cong Wang <xiyou.wangcong@xxxxxxxxx>
    sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero

Shmulik Ladkani <shmulik@xxxxxxxxxxxxxxxx>
    net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list

Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
    net: Fix null de-reference of device refcount

Eric Biggers <ebiggers@xxxxxxxxxx>
    isdn/capi: check message length in capi_write()

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
    ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()'

BjÃrn Mork <bjorn@xxxxxxx>
    cdc_ether: fix rndis support for Mediatek based smartphones

Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
    bridge/mdb: remove wrong use of NLM_F_MULTI


-------------

Diffstat:

 Makefile                                       |  4 +-
 arch/arc/kernel/traps.c                        |  1 +
 arch/arm/mach-omap2/omap4-common.c             |  3 ++
 arch/arm/mach-omap2/omap_hwmod_7xx_data.c      |  3 +-
 arch/arm/mm/init.c                             |  8 ++-
 arch/mips/Kconfig                              |  3 --
 arch/mips/include/asm/smp.h                    | 12 ++++-
 arch/mips/sibyte/common/Makefile               |  1 -
 arch/mips/sibyte/common/dma.c                  | 14 ------
 arch/mips/vdso/Makefile                        |  4 +-
 arch/powerpc/mm/pgtable-radix.c                | 16 +++---
 arch/s390/kvm/interrupt.c                      | 10 ++++
 arch/s390/kvm/kvm-s390.c                       |  2 +-
 arch/s390/net/bpf_jit_comp.c                   | 12 +++--
 arch/x86/Makefile                              |  1 +
 arch/x86/events/amd/ibs.c                      | 13 +++--
 arch/x86/events/intel/core.c                   |  6 +++
 arch/x86/include/asm/bootparam_utils.h         |  1 +
 arch/x86/include/asm/perf_event.h              | 12 +++--
 arch/x86/include/asm/uaccess.h                 |  4 +-
 arch/x86/kernel/apic/io_apic.c                 |  8 ++-
 arch/x86/kvm/vmx.c                             |  7 ++-
 arch/x86/kvm/x86.c                             |  7 +++
 drivers/atm/Kconfig                            |  2 +-
 drivers/base/core.c                            | 53 +++++++++++++++++++-
 drivers/block/floppy.c                         |  4 +-
 drivers/clk/rockchip/clk-mmc-phase.c           |  4 +-
 drivers/crypto/talitos.c                       | 67 +++++++++++++++++++-------
 drivers/dma/omap-dma.c                         |  4 +-
 drivers/dma/ti-dma-crossbar.c                  |  4 +-
 drivers/gpio/gpiolib.c                         | 20 +++++---
 drivers/gpu/drm/mediatek/mtk_drm_drv.c         |  5 +-
 drivers/iommu/amd_iommu.c                      | 16 ++++--
 drivers/isdn/capi/capi.c                       | 10 +++-
 drivers/media/usb/dvb-usb/technisat-usb2.c     | 22 ++++-----
 drivers/media/usb/tm6000/tm6000-dvb.c          |  3 ++
 drivers/mtd/nand/mtk_nand.c                    | 21 ++++----
 drivers/net/ethernet/marvell/sky2.c            |  7 +++
 drivers/net/ethernet/qlogic/qed/qed_main.c     |  4 +-
 drivers/net/ethernet/seeq/sgiseeq.c            |  7 +--
 drivers/net/tun.c                              | 16 ++++--
 drivers/net/usb/cdc_ether.c                    | 13 +++--
 drivers/net/usb/r8152.c                        |  5 +-
 drivers/net/wireless/marvell/mwifiex/ie.c      |  3 ++
 drivers/net/wireless/marvell/mwifiex/uap_cmd.c |  9 +++-
 drivers/net/xen-netfront.c                     |  2 +-
 drivers/nvmem/core.c                           | 15 ++++--
 drivers/tty/serial/atmel_serial.c              |  1 -
 drivers/tty/serial/sprd_serial.c               |  2 +-
 drivers/usb/core/config.c                      | 12 +++--
 fs/btrfs/tree-log.c                            |  8 +--
 fs/cifs/connect.c                              | 22 +++++++++
 fs/nfs/nfs4file.c                              | 12 ++---
 fs/nfs/pagelist.c                              |  2 +-
 fs/nfs/proc.c                                  |  7 ++-
 include/uapi/linux/isdn/capicmd.h              |  1 +
 kernel/irq/resend.c                            |  2 +
 net/batman-adv/bat_v_ogm.c                     | 18 ++++---
 net/bridge/br_mdb.c                            |  2 +-
 net/core/dev.c                                 |  2 +
 net/core/skbuff.c                              | 19 ++++++++
 net/ipv4/tcp_input.c                           |  2 +-
 net/ipv6/ping.c                                |  2 +-
 net/netfilter/nf_conntrack_ftp.c               |  2 +-
 net/sched/sch_hhf.c                            |  2 +-
 net/sctp/protocol.c                            |  2 +-
 net/sctp/sm_sideeffect.c                       |  2 +-
 net/tipc/name_distr.c                          |  3 +-
 security/keys/request_key_auth.c               |  6 +++
 tools/power/x86/turbostat/turbostat.c          |  2 +-
 virt/kvm/coalesced_mmio.c                      | 17 ++++---
 71 files changed, 446 insertions(+), 172 deletions(-)