[PATCH 4.9 00/55] 4.9.226-rc3 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 4.9.226 release.
There are 55 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu, 04 Jun 2020 18:12:28 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.226-rc3.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 4.9.226-rc3

Benjamin Block <bblock@xxxxxxxxxxxxx>
    scsi: zfcp: fix request object use-after-free in send path causing wrong traces

Salil Mehta <salil.mehta@xxxxxxxxxx>
    net: hns: Fixes the missing put_device in positive leg for roce reset

Guoqing Jiang <gqjiang@xxxxxxxx>
    sc16is7xx: move label 'err_spi' to correct section

Liviu Dudau <liviu@xxxxxxxxxxx>
    mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap()

Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
    net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
    genirq/generic_pending: Do not lose pending affinity update

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
    netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build

Qiushi Wu <wu000273@xxxxxxx>
    bonding: Fix reference count leak in bond_sysfs_slave_add.

Qiushi Wu <wu000273@xxxxxxx>
    qlcnic: fix missing release in qlcnic_83xx_interrupt_test.

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
    netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code

Phil Sutter <phil@xxxxxx>
    netfilter: ipset: Fix subcounter update skip

Michael Braun <michael-dev@xxxxxxxxxxxxx>
    netfilter: nft_reject_bridge: enable reject with bridge vlan

Xin Long <lucien.xin@xxxxxxxxx>
    ip_vti: receive ipip packet by calling ip_tunnel_rcv

Jeremy Sowden <jeremy@xxxxxxxxxx>
    vti4: eliminated some duplicate code.

Xin Long <lucien.xin@xxxxxxxxx>
    xfrm: fix a NULL-ptr deref in xfrm_local_error

Xin Long <lucien.xin@xxxxxxxxx>
    xfrm: fix a warning in xfrm_policy_insert_list

Xin Long <lucien.xin@xxxxxxxxx>
    xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input

Alexander Dahl <post@xxxxxxxxxxx>
    x86/dma: Fix max PFN arithmetic overflow on 32 bit systems

Linus LÃssing <ll@xxxxxxxxxxxxxxxxxx>
    mac80211: mesh: fix discovery timer re-arming issue / crash

Helge Deller <deller@xxxxxx>
    parisc: Fix kernel panic in mem_init()

Qiushi Wu <wu000273@xxxxxxx>
    iommu: Fix reference count leak in iommu_group_alloc.

Arnd Bergmann <arnd@xxxxxxxx>
    include/asm-generic/topology.h: guard cpumask_of_node() macro argument

Alexander Potapenko <glider@xxxxxxxxxx>
    fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()

Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
    mm: remove VM_BUG_ON(PageSlab()) from page_mapcount()

Jerry Lee <leisurelysw24@xxxxxxxxx>
    libceph: ignore pool overlay and cache logic on redirects

Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
    exec: Always set cap_ambient in cap_bprm_set_creds

Chris Chiu <chiu@xxxxxxxxxxxx>
    ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC

Changming Liu <liu.changm@xxxxxxxxxxxxxxxx>
    ALSA: hwdep: fix a left shifting 1 by 31 UB bug

Robert Beckett <bob.beckett@xxxxxxxxxxxxx>
    ARM: dts/imx6q-bx50v3: Set display interface clock parents

Sebastian Reichel <sebastian.reichel@xxxxxxxxxxxxxxx>
    ARM: dts: imx6q-bx50v3: Add internal switch

Martyn Welch <martyn.welch@xxxxxxxxxxxxxxx>
    ARM: dts: imx: Correct B850v3 clock assignment

Kaike Wan <kaike.wan@xxxxxxxxx>
    IB/qib: Call kobject_put() when kobject_init_and_add() fails

Wei Yongjun <weiyongjun1@xxxxxxxxxx>
    Input: synaptics-rmi4 - fix error return code in rmi_driver_probe()

Kevin Locke <kevin@xxxxxxxxxxxxxxx>
    Input: i8042 - add ThinkPad S230u to i8042 reset list

Åukasz Patron <priv.luk@xxxxxxxxx>
    Input: xpad - add custom init packet for Xbox One S controllers

Brendan Shanks <bshanks@xxxxxxxxxxxxxxx>
    Input: evdev - call input_flush_device() on release(), not flush()

James Hilliard <james.hilliard1@xxxxxxxxx>
    Input: usbtouchscreen - add support for BonXeon TP

Steve French <stfrench@xxxxxxxxxxxxx>
    cifs: Fix null pointer check in cifs_read

Masahiro Yamada <masahiroy@xxxxxxxxxx>
    usb: gadget: legacy: fix redundant initialization warnings

Lei Xue <carmark.dlut@xxxxxxxxx>
    cachefiles: Fix race between read_waiter and read_copier involving op->to_do

Bob Peterson <rpeterso@xxxxxxxxxx>
    gfs2: move privileged user check to gfs2_quota_lock_check

Chuhong Yuan <hslester96@xxxxxxxxx>
    net: microchip: encx24j600: add missed kthread_stop

Stephen Warren <swarren@xxxxxxxxxx>
    gpio: tegra: mask GPIO IRQs during IRQ shutdown

Kalderon, Michal <Michal.Kalderon@xxxxxxxxxx>
    IB/cma: Fix reference count leak when no ipv4 addresses are set

Dmitry V. Levin <ldv@xxxxxxxxxxxx>
    uapi: fix linux/if_pppol2tp.h userspace compilation errors

Qiushi Wu <wu000273@xxxxxxx>
    net/mlx4_core: fix a memory leak bug.

Qiushi Wu <wu000273@xxxxxxx>
    net: sun: fix missing release regions in cas_init_one().

Moshe Shemesh <moshe@xxxxxxxxxxxx>
    net/mlx5: Add command entry handling completion

Manivannan Sadhasivam <manivannan.sadhasivam@xxxxxxxxxx>
    net: qrtr: Fix passing invalid reference to qrtr_local_enqueue()

Moshe Shemesh <moshe@xxxxxxxxxxxx>
    net/mlx5e: Update netdev txq on completions during closure

Jere LeppÃnen <jere.leppanen@xxxxxxxxx>
    sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed

Roman Mashak <mrv@xxxxxxxxxxxx>
    net sched: fix reporting the first-time use timestamp

Yuqi Jin <jinyuqi@xxxxxxxxxx>
    net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()"

Vadim Fedorenko <vfedorenko@xxxxxxxx>
    net: ipip: fix wrong address family in init error path

Eric Dumazet <edumazet@xxxxxxxxxx>
    ax25: fix setsockopt(SO_BINDTODEVICE)


-------------

Diffstat:

 Makefile                                           |  4 +-
 arch/arm/boot/dts/imx6q-b450v3.dts                 |  7 --
 arch/arm/boot/dts/imx6q-b650v3.dts                 |  7 --
 arch/arm/boot/dts/imx6q-b850v3.dts                 | 11 ----
 arch/arm/boot/dts/imx6q-bx50v3.dtsi                | 77 ++++++++++++++++++++++
 arch/parisc/mm/init.c                              |  2 +-
 arch/x86/include/asm/dma.h                         |  2 +-
 drivers/gpio/gpio-tegra.c                          |  1 +
 drivers/infiniband/hw/qib/qib_sysfs.c              |  9 +--
 drivers/input/evdev.c                              | 19 ++----
 drivers/input/joystick/xpad.c                      | 12 ++++
 drivers/input/rmi4/rmi_driver.c                    |  3 +-
 drivers/input/serio/i8042-x86ia64io.h              |  7 ++
 drivers/input/touchscreen/usbtouchscreen.c         |  1 +
 drivers/iommu/iommu.c                              |  2 +-
 drivers/net/bonding/bond_sysfs_slave.c             |  4 +-
 drivers/net/ethernet/hisilicon/hns/hns_dsaf_main.c |  3 +
 drivers/net/ethernet/mellanox/mlx4/fw.c            |  2 +-
 drivers/net/ethernet/mellanox/mlx5/core/cmd.c      | 15 +++++
 drivers/net/ethernet/mellanox/mlx5/core/en_tx.c    |  6 +-
 drivers/net/ethernet/microchip/encx24j600.c        |  5 +-
 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c    |  4 +-
 drivers/net/ethernet/sun/cassini.c                 |  3 +-
 drivers/s390/scsi/zfcp_fsf.c                       | 10 ++-
 drivers/tty/serial/sc16is7xx.c                     |  2 +
 drivers/usb/gadget/legacy/inode.c                  |  3 +-
 fs/binfmt_elf.c                                    |  2 +-
 fs/cachefiles/rdwr.c                               |  2 +-
 fs/cifs/file.c                                     |  2 +-
 fs/gfs2/quota.c                                    |  3 +-
 fs/gfs2/quota.h                                    |  3 +-
 include/asm-generic/topology.h                     |  2 +-
 include/linux/mlx5/driver.h                        |  1 +
 include/linux/mm.h                                 | 15 ++++-
 include/linux/netfilter/nf_conntrack_pptp.h        |  2 +-
 include/net/act_api.h                              |  3 +-
 include/rdma/ib_addr.h                             |  6 +-
 include/uapi/linux/l2tp.h                          |  7 +-
 kernel/irq/migration.c                             | 26 ++++++--
 mm/vmalloc.c                                       |  2 +-
 net/ax25/af_ax25.c                                 |  6 +-
 net/bridge/netfilter/nft_reject_bridge.c           |  6 ++
 net/ceph/osd_client.c                              |  4 +-
 net/core/rtnetlink.c                               |  2 +-
 net/ipv4/ip_vti.c                                  | 75 +++++++++++----------
 net/ipv4/ipip.c                                    |  2 +-
 net/ipv4/netfilter/nf_nat_pptp.c                   |  7 +-
 net/ipv4/route.c                                   | 14 ++--
 net/mac80211/mesh_hwmp.c                           |  7 ++
 net/netfilter/ipset/ip_set_list_set.c              |  2 +-
 net/netfilter/nf_conntrack_pptp.c                  | 62 +++++++++--------
 net/qrtr/qrtr.c                                    |  2 +-
 net/sctp/sm_statefuns.c                            |  9 +--
 net/xfrm/xfrm_input.c                              |  2 +-
 net/xfrm/xfrm_output.c                             |  3 +-
 net/xfrm/xfrm_policy.c                             |  7 +-
 security/commoncap.c                               |  1 +
 sound/core/hwdep.c                                 |  4 +-
 sound/usb/mixer.c                                  |  8 +++
 59 files changed, 338 insertions(+), 182 deletions(-)