This is the start of the stable review cycle for the 4.9.124 release. There are 130 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat Aug 25 07:48:45 UTC 2018. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.124-rc1... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 4.9.124-rc1

Jann Horn jannh@google.com reiserfs: fix broken xattr handling (heap corruption, bad retval)

Esben Haabendal eha@deif.com i2c: imx: Fix race condition in dma read

Lukas Wunner lukas@wunner.de PCI: pciehp: Fix unprotected list iteration in IRQ handler

Lukas Wunner lukas@wunner.de PCI: pciehp: Fix use-after-free on unplug

Myron Stowe myron.stowe@redhat.com PCI: Skip MPS logic for Virtual Functions (VFs)

Lukas Wunner lukas@wunner.de PCI: hotplug: Don't leak pci_slot on registration failure

Sergei Shtylyov sergei.shtylyov@cogentembedded.com PCI: OF: Fix I/O space page leak

John David Anglin dave.anglin@bell.net parisc: Remove unnecessary barriers from spinlock.h

Willem de Bruijn willemb@google.com packet: refine ring v3 block size test to hold one frame

Florian Westphal fw@strlen.de netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state

Eric Dumazet edumazet@google.com xfrm_user: prevent leaking 2 bytes of kernel memory

John David Anglin dave.anglin@bell.net parisc: Remove ordered stores from syscall.S

Jeremy Cline jcline@redhat.com ext4: fix spectre gadget in ext4_mb_regular_allocator()

Paolo Bonzini pbonzini@redhat.com KVM: irqfd: fix race between EPOLLHUP and irq_bypass_register_consumer

Randy Dunlap rdunlap@infradead.org tcp: identify cryptic messages as TCP seq # bugs

Stefan Wahren stefan.wahren@i2se.com net: qca_spi: Fix log level if probe fails

Stefan Wahren stefan.wahren@i2se.com net: qca_spi: Make sure the QCA7000 reset is triggered

Stefan Wahren stefan.wahren@i2se.com net: qca_spi: Avoid packet drop during initial sync

Sergei Shtylyov sergei.shtylyov@cogentembedded.com PCI: versatile: Fix I/O space page leak

David Lechner david@lechnology.com net: usb: rtl8150: demote allmulti message to dev_dbg()

Randy Dunlap rdunlap@infradead.org net/ethernet/freescale/fman: fix cross-build error

Dan Carpenter dan.carpenter@oracle.com drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply()

Wei Yongjun weiyongjun1@huawei.com pinctrl: nsp: Fix potential NULL dereference

Dan Carpenter dan.carpenter@oracle.com pinctrl: nsp: off by ones in nsp_pinmux_enable()

Yuchung Cheng ycheng@google.com tcp: remove DELAYED ACK events in DCTCP

Dan Carpenter dan.carpenter@oracle.com qlogic: check kstrtoul() for errors

Willem de Bruijn willemb@google.com packet: reset network header if packet shorter than ll reserved space

Laura Abbott labbott@redhat.com tools: build: Use HOSTLDFLAGS with fixdep

Alexander Duyck alexander.h.duyck@intel.com ixgbe: Be more careful when modifying MAC filters

Adam Ford aford173@gmail.com ARM: dts: am3517.dtsi: Disable reference to OMAP3 OTG controller

Nishanth Menon nm@ti.com ARM: DRA7/OMAP5: Enable ACTLR[0] (Enable invalidates of BTB) for secondary cores

Steven Rostedt (VMware) rostedt@goodmis.org ARM: 8780/1: ftrace: Only set kernel memory back to read-only after boot

Kamal Heib kamalheib1@gmail.com RDMA/mlx5: Fix memory leak in mlx5_ib_create_srq() error path

Dave Jiang dave.jiang@intel.com nfit: fix unchecked dereference in acpi_nfit_ctl

Kim Phillips kim.phillips@arm.com perf llvm-utils: Remove bashism from kernel include fetch script

Vikas Gupta vikas.gupta@broadcom.com bnxt_en: Fix for system hang if request_irq fails

Michael Chan michael.chan@broadcom.com bnxt_en: Always set output parameters in bnxt_get_max_rings().

Peter Zijlstra peterz@infradead.org ARC: Improve cmpxchg syscall implementation

Andrey Ryabinin aryabinin@virtuozzo.com netfilter: nf_conntrack: Fix possible possible crash on module loading.

Russell King rmk+kernel@armlinux.org.uk drm/armada: fix colorkey mode property

Stefan Schmidt stefan@datenfreihafen.org ieee802154: fakelb: switch from BUG_ON() to WARN_ON() on problem

Stefan Schmidt stefan@datenfreihafen.org ieee802154: at86rf230: use __func__ macro for debug messages

Stefan Schmidt stefan@datenfreihafen.org ieee802154: at86rf230: switch from BUG_ON() to WARN_ON() on problem

Davide Caratti dcaratti@redhat.com net/sched: act_tunnel_key: fix NULL dereference when 'goto chain' is used

Daniel Mack daniel@zonque.org ARM: pxa: irq: fix handling of ICMR registers in suspend/resume

Vladimir Zapolskiy vladimir_zapolskiy@mentor.com ravb: fix invalid context bug while changing link options by ethtool

Vladimir Zapolskiy vladimir_zapolskiy@mentor.com ravb: fix invalid context bug while calling auto-negotiation by ethtool

Vladimir Zapolskiy vladimir_zapolskiy@mentor.com sh_eth: fix invalid context bug while changing link options by ethtool

Vladimir Zapolskiy vladimir_zapolskiy@mentor.com sh_eth: fix invalid context bug while calling auto-negotiation by ethtool

Arun Kumar Neelakantam aneela@codeaurora.org net: qrtr: Broadcast messages only from control port

Paul Moore paul@paul-moore.com ipv6: make ipv6_renew_options() interrupt/kernel safe

Florian Westphal fw@strlen.de netfilter: x_tables: set module owner for icmp(6) matches

Lubomir Rintel lkundrak@v3.sk ieee802154: 6lowpan: set IFLA_LINK

Taeung Song treeze.taeung@gmail.com samples/bpf: Check the error of write() and read()

Taeung Song treeze.taeung@gmail.com samples/bpf: add missing <linux/if_vlan.h>

Yuiko Oshino yuiko.oshino@microchip.com smsc75xx: Add workaround for gigabit link up hardware errata.

Zhen Lei thunder.leizhen@huawei.com kasan: fix shadow_size calculation error in kasan_module_alloc

Mathieu Malaterre malat@debian.org tracing: Use __printf markup to silence compiler

Fabio Estevam fabio.estevam@nxp.com ARM: imx_v4_v5_defconfig: Select ULPI support

Fabio Estevam fabio.estevam@nxp.com ARM: imx_v6_v7_defconfig: Select ULPI support

Jason Gerecke killertofu@gmail.com HID: wacom: Correct touch maximum XY of 2nd-gen Intuos

Hangbin Liu liuhangbin@gmail.com ipvlan: call dev_change_flags when ipvlan mode is reset

Josh Poimboeuf jpoimboe@redhat.com objtool: Support GCC 8 '-fnoreorder-functions'

Greg Ungerer gerg@linux-m68k.org m68k: fix "bad page state" oops on ColdFire boot

Dave Jiang dave.jiang@intel.com acpi/nfit: fix cmd_rc for acpi_nfit_ctl to always return a value

Sudarsana Reddy Kalluru sudarsana.kalluru@cavium.com bnx2x: Fix receiving tx-timeout in error or recovery state.

Nicholas Mc Guire hofrat@osadl.org PCI: xilinx-nwl: Add missing of_node_put()

Nicholas Mc Guire hofrat@osadl.org PCI: xilinx: Add missing of_node_put()

Daniel Borkmann daniel@iogearbox.net bpf, s390: fix potential memleak when later bpf_jit_prog fails

Marek Szyprowski m.szyprowski@samsung.com drm/exynos: decon5433: Fix WINCONx reset value

Marek Szyprowski m.szyprowski@samsung.com drm/exynos: decon5433: Fix per-plane global alpha for XRGB modes

Marek Szyprowski m.szyprowski@samsung.com drm/exynos: gsc: Fix support for NV16/61, YUV420/YVU420 and YUV422 modes

Bob Copeland me@bobcopeland.com nl80211: relax ht operation checks for mesh

BingJing Chang bingjingc@synology.com md/raid10: fix that replacement cannot complete recovery after reassemble

Dan Carpenter dan.carpenter@oracle.com dmaengine: k3dma: Off by one in k3_of_dma_simple_xlate()

Marek Szyprowski m.szyprowski@samsung.com dmaengine: pl330: report BURST residue granularity

Keerthy j-keerthy@ti.com ARM: dts: da850: Fix interrups property for gpio

Andy Lutomirski luto@kernel.org selftests/x86/sigreturn: Do minor cleanups

Andy Lutomirski luto@kernel.org selftests/x86/sigreturn/64: Fix spurious failures on AMD CPUs

Yan, Zheng zyan@redhat.com ceph: fix dentry leak in splice_dentry()

Jann Horn jannh@google.com netfilter: nf_log: fix uninit read in nf_log_proc_dostring

Jiri Olsa jolsa@kernel.org perf bench: Fix numa report output code

Sandipan Das sandipan@linux.ibm.com perf report powerpc: Fix crash if callchain is empty

Thomas Richter tmricht@linux.ibm.com perf test session topology: Fix test on s390

Hans de Goede hdegoede@redhat.com NFC: pn533: Fix wrong GFP flag usage

Ajay Gupta ajaykuee@gmail.com usb: xhci: increase CRS timeout value

Dongjiu Geng gengdongjiu@huawei.com usb: xhci: remove the code build warning

Takashi Iwai tiwai@suse.de ALSA: seq: Fix UBSAN warning at SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT ioctl

Daniel Mack daniel@zonque.org ARM: dts: am437x: make edt-ft5x06 a wakeup source

Michael Trimarchi michael@amarulasolutions.com brcmfmac: stop watchdog before detach and free everything

Tomasz Duszynski tduszyns@gmail.com iio: pressure: bmp280: fix relative humidity unit

Ganesh Goudar ganeshgr@chelsio.com cxgb4: when disabling dcb set txq dcb priority to 0

Sven Eckelmann sven@narfation.org batman-adv: Fix bat_v best gw refcnt after netlink dump

Sven Eckelmann sven@narfation.org batman-adv: Fix bat_ogm_iv best gw refcnt after netlink dump

Casey Schaufler casey@schaufler-ca.com Smack: Mark inode instant in smack_task_to_inode

Hangbin Liu liuhangbin@gmail.com ipv6: mcast: fix unsolicited report interval after receiving querys

Steven Rostedt (VMware) rostedt@goodmis.org locking/lockdep: Do not record IRQ state within lockdep code

Ard Biesheuvel ard.biesheuvel@linaro.org KVM: arm/arm64: Drop resource size check for GICV window

Bartosz Golaszewski bgolaszewski@baylibre.com net: davinci_emac: match the mdio device against its compatible if possible

Alexey Brodkin Alexey.Brodkin@synopsys.com ARC: Enable machine_desc->init_per_cpu for !CONFIG_SMP

Max Gurtuvoy maxg@mellanox.com nvmet: reset keep alive timer in controller enable

Dinh Nguyen dinguyen@kernel.org net: stmmac: socfpga: add additional ocp reset line for Stratix10

Li RongQing lirongqing@baidu.com net: propagate dev_get_valid_name return code

Stefan Agner stefan@agner.ch net: hamradio: use eth_broadcast_addr

Govindarajulu Varadarajan gvaradar@cisco.com enic: initialize enic->rfs_h.lock in enic_probe

Sudarsana Reddy Kalluru sudarsana.kalluru@cavium.com qed: Add sanity check for SIMD fastpath handler.

Zhizhou Zhang zhizhouzhang@asrmicro.com arm64: make secondary_start_kernel() notrace

Zhouyang Jia jiazhouyang09@gmail.com xen/scsiback: add error handling for xenbus_printf

Zhouyang Jia jiazhouyang09@gmail.com scsi: xen-scsifront: add error handling for xenbus_printf

Zhouyang Jia jiazhouyang09@gmail.com xen: add error handling for xenbus_printf

Grigor Tovmasyan Grigor.Tovmasyan@synopsys.com usb: gadget: dwc2: fix memory leak in gadget_init()

Chunfeng Yun chunfeng.yun@mediatek.com usb: gadget: composite: fix delayed_status race condition when set_interface

William Wu william.wu@rock-chips.com usb: dwc2: fix isoc split in transfer with no data

John Garry john.garry@huawei.com libahci: Fix possible Spectre-v1 pmp indexing in ahci_led_store()

Vijay Immanuel vijayi@attalasystems.com IB/rxe: Fix missing completion for mem_reg work requests

Alison Wang alison.wang@nxp.com drm: mali-dp: Enable Global SE interrupts mask for DP500

Ray Jui ray.jui@broadcom.com arm64: dts: ns2: Fix I2C controller interrupt type

Ray Jui ray.jui@broadcom.com ARM: dts: Cygnus: Fix PCIe controller interrupt type

Ray Jui ray.jui@broadcom.com ARM: dts: Cygnus: Fix I2C controller interrupt type

Florian Fainelli f.fainelli@gmail.com ARM: dts: NSP: Fix PCIe controllers interrupt types

Florian Fainelli f.fainelli@gmail.com ARM: dts: NSP: Fix i2c controller interrupt type

Fathi Boudra fathi.boudra@linaro.org selftests: sync: add config fragment for testing sync framework

Shuah Khan (Samsung OSG) shuah@kernel.org selftests: zram: return Kselftest Skip code for skipped tests

Shuah Khan (Samsung OSG) shuah@kernel.org selftests: user: return Kselftest Skip code for skipped tests

Shuah Khan (Samsung OSG) shuah@kernel.org selftests: static_keys: return Kselftest Skip code for skipped tests

Shuah Khan (Samsung OSG) shuah@kernel.org selftests: pstore: return Kselftest Skip code for skipped tests

Eric Dumazet edumazet@google.com netfilter: ipv6: nf_defrag: reduce struct net memory waste

Johan Hovold johan@kernel.org usb: dwc3: of-simple: fix use-after-free on remove

Alexey Brodkin abrodkin@synopsys.com ARC: Explicitly add -mmedium-calls to CFLAGS

Andy Lutomirski luto@kernel.org x86/entry/64: Remove %ebx handling from error_entry/exit

-------------

Diffstat:

Makefile | 4 +- arch/arc/Makefile | 15 +-- arch/arc/include/asm/mach_desc.h | 2 - arch/arc/kernel/irq.c | 2 +- arch/arc/kernel/process.c | 47 +++++++-- arch/arm/boot/dts/am3517.dtsi | 5 + arch/arm/boot/dts/am437x-sk-evm.dts | 2 + arch/arm/boot/dts/bcm-cygnus.dtsi | 24 ++--- arch/arm/boot/dts/bcm-nsp.dtsi | 32 +++--- arch/arm/boot/dts/da850.dtsi | 6 +- arch/arm/configs/imx_v4_v5_defconfig | 2 + arch/arm/configs/imx_v6_v7_defconfig | 2 + arch/arm/mach-omap2/omap-smp.c | 41 ++++++++ arch/arm/mach-pxa/irq.c | 4 +- arch/arm/mm/init.c | 9 ++ arch/arm64/boot/dts/broadcom/ns2.dtsi | 4 +- arch/arm64/kernel/smp.c | 2 +- arch/m68k/include/asm/mcf_pgalloc.h | 4 +- arch/parisc/include/asm/spinlock.h | 8 +- arch/parisc/kernel/syscall.S | 24 ++--- arch/s390/net/bpf_jit_comp.c | 1 + arch/x86/entry/entry_64.S | 20 +--- drivers/acpi/nfit/core.c | 4 + drivers/ata/libahci.c | 7 +- drivers/dma/k3dma.c | 2 +- drivers/dma/pl330.c | 2 +- drivers/gpu/drm/arm/malidp_hw.c | 3 +- drivers/gpu/drm/armada/armada_hw.h | 1 + drivers/gpu/drm/armada/armada_overlay.c | 30 ++++-- drivers/gpu/drm/exynos/exynos5433_drm_decon.c | 6 +- drivers/gpu/drm/exynos/exynos_drm_gsc.c | 29 ++++-- drivers/gpu/drm/exynos/regs-gsc.h | 1 + drivers/gpu/drm/nouveau/nouveau_gem.c | 4 +- drivers/hid/wacom_wac.c | 10 +- drivers/i2c/busses/i2c-imx.c | 8 +- drivers/iio/pressure/bmp280-core.c | 5 +- drivers/infiniband/hw/mlx5/srq.c | 18 ++-- drivers/infiniband/sw/rxe/rxe_req.c | 3 + drivers/md/raid10.c | 7 ++ drivers/net/ethernet/broadcom/bnx2x/bnx2x.h | 1 + drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 6 ++ drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 6 ++ drivers/net/ethernet/broadcom/bnxt/bnxt.c | 8 +- drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 2 +- drivers/net/ethernet/cisco/enic/enic_clsf.c | 3 +- drivers/net/ethernet/cisco/enic/enic_main.c | 3 +- drivers/net/ethernet/intel/ixgbe/ixgbe_common.c | 12 ++- drivers/net/ethernet/qlogic/qed/qed_main.c | 12 ++- drivers/net/ethernet/qlogic/qlcnic/qlcnic_sysfs.c | 2 + drivers/net/ethernet/qualcomm/qca_spi.c | 21 ++-- drivers/net/ethernet/renesas/ravb_main.c | 56 +++-------- drivers/net/ethernet/renesas/sh_eth.c | 59 +++-------- drivers/net/ethernet/stmicro/stmmac/Kconfig | 2 +- .../net/ethernet/stmicro/stmmac/dwmac-socfpga.c | 18 +++- drivers/net/ethernet/ti/davinci_emac.c | 4 + drivers/net/hamradio/bpqether.c | 8 +- drivers/net/ieee802154/at86rf230.c | 15 +-- drivers/net/ieee802154/fakelb.c | 2 +- drivers/net/ipvlan/ipvlan_main.c | 36 +++++-- drivers/net/usb/rtl8150.c | 2 +- drivers/net/usb/smsc75xx.c | 62 ++++++++++++ .../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 7 ++ drivers/nfc/pn533/usb.c | 4 +- drivers/nvme/target/core.c | 8 ++ drivers/pci/host/pci-versatile.c | 2 +- drivers/pci/host/pcie-xilinx-nwl.c | 2 +- drivers/pci/host/pcie-xilinx.c | 1 + drivers/pci/hotplug/pci_hotplug_core.c | 9 ++ drivers/pci/hotplug/pciehp.h | 1 + drivers/pci/hotplug/pciehp_core.c | 7 ++ drivers/pci/hotplug/pciehp_hpc.c | 18 +--- drivers/pci/pci.c | 38 +++++++ drivers/pci/probe.c | 4 + drivers/pinctrl/bcm/pinctrl-nsp-mux.c | 6 +- drivers/scsi/xen-scsifront.c | 33 ++++-- drivers/usb/dwc2/gadget.c | 7 +- drivers/usb/dwc2/hcd_intr.c | 3 +- drivers/usb/dwc3/dwc3-of-simple.c | 3 +- drivers/usb/gadget/composite.c | 3 + drivers/usb/host/xhci-tegra.c | 2 +- drivers/usb/host/xhci.c | 7 +- drivers/xen/manage.c | 18 +++- drivers/xen/xen-scsiback.c | 16 ++- fs/ceph/inode.c | 1 + fs/ext4/mballoc.c | 4 +- fs/reiserfs/xattr.c | 4 +- include/linux/fsl/guts.h | 1 + include/linux/pci.h | 2 + include/net/ipv6.h | 9 +- include/net/net_namespace.h | 1 + include/net/netns/ipv6.h | 1 - include/net/tc_act/tc_tunnel_key.h | 1 - include/net/tcp.h | 2 - kernel/locking/lockdep.c | 12 +-- kernel/trace/trace.c | 5 + mm/kasan/kasan.c | 5 +- net/batman-adv/bat_iv_ogm.c | 4 +- net/batman-adv/bat_v.c | 4 +- net/core/dev.c | 4 +- net/ieee802154/6lowpan/core.c | 6 ++ net/ipv4/netfilter/ip_tables.c | 1 + net/ipv4/tcp.c | 4 +- net/ipv4/tcp_dctcp.c | 25 ----- net/ipv4/tcp_output.c | 4 - net/ipv6/calipso.c | 9 +- net/ipv6/exthdrs.c | 111 ++++++--------------- net/ipv6/ipv6_sockglue.c | 27 +++-- net/ipv6/mcast.c | 9 +- net/ipv6/netfilter/ip6_tables.c | 1 + net/ipv6/netfilter/nf_conntrack_reasm.c | 6 +- net/netfilter/nf_conntrack_core.c | 2 +- net/netfilter/nf_conntrack_proto_dccp.c | 8 +- net/netfilter/nf_log.c | 4 + net/packet/af_packet.c | 12 ++- net/qrtr/qrtr.c | 4 + net/sched/act_tunnel_key.c | 6 +- net/wireless/nl80211.c | 19 +--- net/xfrm/xfrm_user.c | 8 +- samples/bpf/parse_varlen.c | 6 +- samples/bpf/test_overhead_user.c | 19 +++- security/smack/smack_lsm.c | 1 + sound/core/seq/seq_clientmgr.c | 3 +- tools/build/Makefile | 2 +- tools/objtool/elf.c | 41 +++++--- tools/perf/arch/powerpc/util/skip-callchain-idx.c | 2 +- tools/perf/bench/numa.c | 5 +- tools/perf/tests/topology.c | 1 + tools/perf/util/llvm-utils.c | 6 +- .../selftests/pstore/pstore_post_reboot_tests | 5 +- .../selftests/static_keys/test_static_keys.sh | 13 +++ tools/testing/selftests/sync/config | 4 + tools/testing/selftests/user/test_user_copy.sh | 7 ++ tools/testing/selftests/x86/sigreturn.c | 59 ++++++----- tools/testing/selftests/zram/zram.sh | 5 +- tools/testing/selftests/zram/zram_lib.sh | 5 +- virt/kvm/arm/vgic/vgic-v3.c | 5 - virt/kvm/eventfd.c | 11 +- 137 files changed, 893 insertions(+), 572 deletions(-)