This is the start of the stable review cycle for the 4.9.28 release. There are 103 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat May 13 14:11:46 UTC 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.28-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.28-rc1 Ilya Dryomov <idryomov@xxxxxxxxx> block: get rid of blk_integrity_revalidate() Nicolai Hähnle <nicolai.haehnle@xxxxxxx> drm/ttm: fix use-after-free races in vm fault handling Maxim Altshul <maxim.altshul@xxxxxx> wlcore: Add RX_BA_WIN_SIZE_CHANGE_EVENT event Maxim Altshul <maxim.altshul@xxxxxx> wlcore: Pass win_size taken from ieee80211_sta to FW Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx> xen: Revert commits da72ff5bfcb0 and 72a9b186292d Jin Qian <jinqian@xxxxxxxxxx> f2fs: sanity check segment count Jon Mason <jon.mason@xxxxxxxxxxxx> net: mdio-mux: bcm-iproc: call mdiobus_free() in error path Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: don't let ldimm64 leak map addresses on unprivileged Dan Carpenter <dan.carpenter@xxxxxxxxxx> bnxt_en: allocate enough space for ->ntp_fltr_bmap WANG Cong <xiyou.wangcong@xxxxxxxxx> ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf WANG Cong <xiyou.wangcong@xxxxxxxxx> ipv6: initialize route null entry in addrconf_init() Michal Schmidt <mschmidt@xxxxxxxxxx> rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string Alexander Potapenko <glider@xxxxxxxxxx> ipv4, ipv6: ensure raw socket message is big enough to hold an IP header Eric Dumazet <edumazet@xxxxxxxxxx> tcp: do not inherit fastopen_req from parent Daniele Palmas <dnlplm@xxxxxxxxx> net: usb: qmi_wwan: add Telit ME910 support David Ahern <dsahern@xxxxxxxxx> net: ipv6: Do not duplicate DAD on link up Eric Dumazet <edumazet@xxxxxxxxxx> tcp: fix wraparound issue in tcp_lp Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf, arm64: fix jit branch offset related to ldimm64 Yonghong Song <yhs@xxxxxx> bpf: enhance verifier to understand stack pointer arithmetic Eric Dumazet <edumazet@xxxxxxxxxx> tcp: do not underestimate skb->truesize in tcp_trim_head() Jason A. Donenfeld <Jason@xxxxxxxxx> macsec: dynamically allocate space for sglist Dave Aldridge <david.j.aldridge@xxxxxxxxxx> sparc64: fix fault handling in NGbzero.S and GENbzero.S Takashi Iwai <tiwai@xxxxxxx> ALSA: hda - Fix deadlock of controller device lock at unbinding Arnd Bergmann <arnd@xxxxxxxx> staging: emxx_udc: remove incorrect __init annotations Igor Pylypiv <igor.pylypiv@xxxxxxxxx> staging: wlan-ng: add missing byte order conversion Oleg Drokin <green@xxxxxxxxxxxxxx> staging/lustre/llite: move root_squash from sysfs to debugfs James Hughes <james.hughes@xxxxxxxxxxxxxxx> brcmfmac: Make skb header writable before use James Hughes <james.hughes@xxxxxxxxxxxxxxx> brcmfmac: Ensure pointer correctly set if skb data location changes Leonid Yegoshin <Leonid.Yegoshin@xxxxxxxxxx> MIPS: R2-on-R6 MULTU/MADDU/MSUBU emulation bugfix Arnd Bergmann <arnd@xxxxxxxx> scsi: smartpqi: fix time handling Dan Carpenter <dan.carpenter@xxxxxxxxxx> scsi: scsi_dh_emc: return success in clariion_std_inquiry() Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx> scsi: mac_scsi: Fix MAC_SCSI=m option when SCSI=m Bill Kuzeja <William.Kuzeja@xxxxxxxxxxx> scsi: qla2xxx: Fix crash in qla2xxx_eh_abort on bad ptr Tony Lindgren <tony@xxxxxxxxxxx> serial: 8250_omap: Fix probe and remove for PM runtime Stephen Boyd <stephen.boyd@xxxxxxxxxx> phy: qcom-usb-hs: Add depends on EXTCON Heiko Stuebner <heiko@xxxxxxxxx> clk: rockchip: add "," to mux_pll_src_apll_dpll_gpll_usb480m_p on rk3036 Johan Hovold <johan@xxxxxxxxxx> USB: serial: sierra: fix bogus alternate-setting assumption Johan Hovold <johan@xxxxxxxxxx> USB: serial: io_edgeport: fix descriptor error handling Johan Hovold <johan@xxxxxxxxxx> USB: serial: mct_u232: fix modem-status error handling Johan Hovold <johan@xxxxxxxxxx> USB: serial: quatech2: fix control-message error handling Johan Hovold <johan@xxxxxxxxxx> USB: serial: ftdi_sio: fix latency-timer error handling Johan Hovold <johan@xxxxxxxxxx> USB: serial: ark3116: fix open error handling Johan Hovold <johan@xxxxxxxxxx> USB: serial: ti_usb_3410_5052: fix control-message error handling Johan Hovold <johan@xxxxxxxxxx> USB: serial: io_edgeport: fix epic-descriptor handling Johan Hovold <johan@xxxxxxxxxx> USB: serial: ssu100: fix control-message error handling Johan Hovold <johan@xxxxxxxxxx> USB: serial: digi_acceleport: fix incomplete rx sanity check Johan Hovold <johan@xxxxxxxxxx> USB: serial: keyspan_pda: fix receive sanity checks Stephen Boyd <stephen.boyd@xxxxxxxxxx> usb: chipidea: Handle extcon events properly Stephen Boyd <stephen.boyd@xxxxxxxxxx> usb: chipidea: Only read/write OTGSC from one place Krzysztof Kozlowski <krzk@xxxxxxxxxx> usb: host: ohci-exynos: Decrese node refcount on exynos_ehci_get_phy() error paths Krzysztof Kozlowski <krzk@xxxxxxxxxx> usb: host: ehci-exynos: Decrese node refcount on exynos_ehci_get_phy() error paths Nicholas Mc Guire <hofrat@xxxxxxxxx> usb: dwc2: host: use msleep() for long delay Ladi Prosek <lprosek@xxxxxxxxxx> KVM: nVMX: do not leak PML full vmexit to L1 Ladi Prosek <lprosek@xxxxxxxxxx> KVM: nVMX: initialize PML fields in vmcs02 Jim Mattson <jmattson@xxxxxxxxxx> Revert "KVM: nested VMX: disable perf cpuid reporting" Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> x86/platform/intel-mid: Correct MSI IRQ line for watchdog device Masami Hiramatsu <mhiramat@xxxxxxxxxx> kprobes/x86: Fix kernel panic when certain exception-handling addresses are probed Pierre-Louis Bossart <pierre-louis.bossart@xxxxxxxxxxxxxxx> clk: Make x86/ conditional on CONFIG_COMMON_CLK Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx> x86/mpx: Re-add MPX to selftests Makefile Nikola Pajkovsky <npajkovsky@xxxxxxx> x86/pci-calgary: Fix iommu_free() comparison of unsigned expression >= 0 Ruslan Ruslichenko <rruslich@xxxxxxxxx> x86/ioapic: Restore IO-APIC irq_chip retrigger callback Dan Carpenter <dan.carpenter@xxxxxxxxxx> iwlwifi: mvm: writing zero bytes to debugfs causes a crash Sara Sharon <sara.sharon@xxxxxxxxx> iwlwifi: mvm: synchronize firmware DMA paging memory Sara Sharon <sara.sharon@xxxxxxxxx> iwlwifi: mvm: fix references to first_agg_queue in DQA mode Sara Sharon <sara.sharon@xxxxxxxxx> iwlwifi: mvm: fix pending frame counter calculation Johannes Berg <johannes.berg@xxxxxxxxx> iwlwifi: mvm/pcie: adjust A-MSDU tx_cmd length in PCIe Beni Lev <beni.lev@xxxxxxxxx> iwlwifi: mvm: Use aux queue for offchannel frames in dqa Sara Sharon <sara.sharon@xxxxxxxxx> iwlwifi: mvm: fix reorder timer re-arming Sara Sharon <sara.sharon@xxxxxxxxx> iwlwifi: pcie: fix the set of DMA memory mask Kirtika Ruchandani <kirtika.ruchandani@xxxxxxxxx> iwlwifi: pcie: trans: Remove unused 'shift_param' Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx> iwlwifi: pcie: don't increment / decrement a bool Johannes Berg <johannes.berg@xxxxxxxxx> iwlwifi: mvm: overwrite skb info later Luca Coelho <luciano.coelho@xxxxxxxxx> iwlwifi: mvm: don't restart HW if suspend fails with unified image Jürg Billeter <j@xxxxxxxxx> iwlwifi: fix MODULE_FIRMWARE for 6030 Ganapathi Bhat <gbhat@xxxxxxxxxxx> mwifiex: Avoid skipping WEP key deletion for AP Xinming Hu <huxm@xxxxxxxxxxx> mwifiex: remove redundant dma padding in AMSDU Brian Norris <briannorris@xxxxxxxxxxxx> mwifiex: debugfs: Fix (sometimes) off-by-1 SSID print Florian Fainelli <f.fainelli@xxxxxxxxx> ARM: dts: sun7i: lamobo-r1: Fix CPU port RGMII settings Matthijs van Duin <matthijsvanduin@xxxxxxxxx> ARM: OMAP5 / DRA7: Fix HYP mode boot for thumb2 build Jon Mason <jon.mason@xxxxxxxxxxxx> ARM: dts: NSP: GPIO reboot open-source Arnd Bergmann <arnd@xxxxxxxx> leds: ktd2692: avoid harmless maybe-uninitialized warning Catalin Marinas <catalin.marinas@xxxxxxx> arm64: Improve detection of user/non-user mappings in set_pte(_at) Stephen Boyd <sboyd@xxxxxxxxxxxxxx> arm: dts: qcom: Fix ipq board clock rates Geert Uytterhoeven <geert+renesas@xxxxxxxxx> arm64: dts: r8a7795: Mark EthernetAVB device node disabled Liam Breck <liam@xxxxxxxxxxxxxxxxx> power: supply: bq24190_charger: Handle fault before status on interrupt Liam Breck <liam@xxxxxxxxxxxxxxxxx> power: supply: bq24190_charger: Don't read fault register outside irq_handle_thread() Liam Breck <liam@xxxxxxxxxxxxxxxxx> power: supply: bq24190_charger: Call power_supply_changed() for relevant component Liam Breck <liam@xxxxxxxxxxxxxxxxx> power: supply: bq24190_charger: Install irq_handler_thread() at end of probe() Liam Breck <liam@xxxxxxxxxxxxxxxxx> power: supply: bq24190_charger: Call set_mode_host() on pm_resume() Liam Breck <liam@xxxxxxxxxxxxxxxxx> power: supply: bq24190_charger: Fix irq trigger to IRQF_TRIGGER_FALLING Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx> perf/x86/intel/pt: Add format strings for PTWRITE and power event tracing Andrew Donnellan <andrew.donnellan@xxxxxxxxxxx> powerpc: Correctly disable latent entropy GCC plugin on prom_init.o Anton Blanchard <anton@xxxxxxxxx> powerpc/ftrace: Fix confusing help text for DISABLE_MPROFILE_KERNEL Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/powernv: Fix opal_exit tracepoint opcode Aneesh Kumar K.V <aneesh.kumar@xxxxxxxxxxxxxxxxxx> powerpc/mm: Fixup wrong LPCR_VRMASD value Ben Hutchings <ben@xxxxxxxxxxxxxxx> cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores Giedrius Statkevičius <giedrius.statkevicius@xxxxxxxxx> power: supply: lp8788: prevent out of bounds array access Horia Geantă <horia.geanta@xxxxxxx> crypto: caam - fix error path for ctx_dma mapping failure Winkler, Tomas <tomas.winkler@xxxxxxxxx> tmp: use pdev for parent device in tpm_chip_alloc Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx> tpm: fix RC value check in tpm2_seal_trusted Guenter Roeck <linux@xxxxxxxxxxxx> hwmon: (it87) Fix pwm4 detection for IT8620 and IT8628 Vincent Abriou <vincent.abriou@xxxxxx> drm/sti: fix GDP size to support up to UHD resolution Cong Wang <xiyou.wangcong@xxxxxxxxx> 9p: fix a potential acl leak ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/bcm958522er.dts | 1 + arch/arm/boot/dts/bcm958525er.dts | 1 + arch/arm/boot/dts/bcm958525xmc.dts | 1 + arch/arm/boot/dts/bcm958622hr.dts | 1 + arch/arm/boot/dts/bcm958623hr.dts | 1 + arch/arm/boot/dts/bcm958625hr.dts | 1 + arch/arm/boot/dts/bcm988312hr.dts | 1 + arch/arm/boot/dts/qcom-ipq8064.dtsi | 4 +- arch/arm/boot/dts/sun7i-a20-lamobo-r1.dts | 2 +- arch/arm/mach-omap2/omap-headsmp.S | 3 +- arch/arm64/boot/dts/renesas/r8a7795.dtsi | 1 + arch/arm64/include/asm/pgtable.h | 15 +- arch/arm64/net/bpf_jit_comp.c | 8 +- arch/mips/kernel/mips-r2-to-r6-emul.c | 12 +- arch/powerpc/Kconfig | 4 +- arch/powerpc/include/asm/reg.h | 2 +- arch/powerpc/kernel/Makefile | 2 +- arch/powerpc/platforms/powernv/opal-wrappers.S | 2 +- arch/sparc/kernel/head_64.S | 6 + arch/sparc/lib/GENbzero.S | 2 +- arch/sparc/lib/NGbzero.S | 2 +- arch/x86/events/intel/pt.c | 6 + arch/x86/include/asm/xen/events.h | 11 ++ arch/x86/kernel/apic/io_apic.c | 2 + arch/x86/kernel/kprobes/common.h | 2 +- arch/x86/kernel/kprobes/core.c | 6 +- arch/x86/kernel/kprobes/opt.c | 2 +- arch/x86/kernel/pci-calgary_64.c | 2 +- arch/x86/kvm/cpuid.c | 6 - arch/x86/kvm/vmx.c | 17 +- arch/x86/pci/xen.c | 2 +- .../intel-mid/device_libs/platform_mrfld_wdt.c | 2 +- arch/x86/xen/enlighten.c | 21 ++- arch/x86/xen/smp.c | 2 + arch/x86/xen/time.c | 5 + block/blk-integrity.c | 19 +-- block/partition-generic.c | 1 - drivers/char/tpm/tpm-chip.c | 8 +- drivers/char/tpm/tpm.h | 5 + drivers/char/tpm/tpm2-cmd.c | 2 +- drivers/clk/Makefile | 2 + drivers/clk/rockchip/clk-rk3036.c | 2 +- drivers/crypto/caam/caamhash.c | 7 +- drivers/gpu/drm/sti/sti_gdp.c | 12 +- drivers/gpu/drm/ttm/ttm_bo_vm.c | 12 ++ drivers/hwmon/it87.c | 2 +- drivers/leds/leds-ktd2692.c | 8 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 3 +- drivers/net/macsec.c | 29 +++- drivers/net/phy/mdio-mux-bcm-iproc.c | 5 +- drivers/net/usb/qmi_wwan.c | 1 + .../wireless/broadcom/brcm80211/brcmfmac/core.c | 23 +-- drivers/net/wireless/intel/iwlwifi/iwl-6000.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 13 +- drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c | 2 + drivers/net/wireless/intel/iwlwifi/mvm/fw-dbg.c | 4 + drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 23 ++- drivers/net/wireless/intel/iwlwifi/mvm/rxmq.c | 3 +- drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 31 ++-- drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 80 ++++----- drivers/net/wireless/intel/iwlwifi/pcie/internal.h | 2 +- drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 16 +- drivers/net/wireless/intel/iwlwifi/pcie/tx.c | 23 ++- drivers/net/wireless/marvell/mwifiex/11n_aggr.c | 19 +-- drivers/net/wireless/marvell/mwifiex/debugfs.c | 3 +- drivers/net/wireless/marvell/mwifiex/sta_ioctl.c | 2 - drivers/net/wireless/ti/wl18xx/event.c | 28 ++++ drivers/net/wireless/ti/wl18xx/event.h | 1 + drivers/net/wireless/ti/wl18xx/main.c | 3 +- drivers/net/wireless/ti/wlcore/acx.c | 5 +- drivers/net/wireless/ti/wlcore/acx.h | 3 +- drivers/net/wireless/ti/wlcore/main.c | 6 +- drivers/phy/Kconfig | 1 + drivers/power/supply/bq24190_charger.c | 182 +++++++++------------ drivers/power/supply/lp8788-charger.c | 2 +- drivers/scsi/Kconfig | 2 +- drivers/scsi/device_handler/scsi_dh_emc.c | 2 +- drivers/scsi/qla2xxx/qla_os.c | 3 +- drivers/scsi/smartpqi/smartpqi_init.c | 8 +- drivers/staging/emxx_udc/emxx_udc.c | 4 +- drivers/staging/lustre/lustre/llite/lproc_llite.c | 27 +-- drivers/staging/wlan-ng/p80211netdev.c | 2 +- drivers/tty/serial/8250/8250_omap.c | 8 +- drivers/usb/chipidea/ci.h | 3 - drivers/usb/chipidea/core.c | 32 ---- drivers/usb/chipidea/otg.c | 80 ++++++++- drivers/usb/dwc2/core.c | 2 +- drivers/usb/host/ehci-exynos.c | 2 + drivers/usb/host/ohci-exynos.c | 2 + drivers/usb/serial/ark3116.c | 25 ++- drivers/usb/serial/digi_acceleport.c | 38 +++-- drivers/usb/serial/ftdi_sio.c | 7 +- drivers/usb/serial/io_edgeport.c | 48 ++++-- drivers/usb/serial/keyspan_pda.c | 19 ++- drivers/usb/serial/mct_u232.c | 6 +- drivers/usb/serial/quatech2.c | 24 +-- drivers/usb/serial/sierra.c | 28 +--- drivers/usb/serial/ssu100.c | 31 +++- drivers/usb/serial/ti_usb_3410_5052.c | 12 +- drivers/xen/events/events_base.c | 26 ++- drivers/xen/platform-pci.c | 64 ++++++++ fs/9p/acl.c | 2 + fs/block_dev.c | 1 - fs/f2fs/super.c | 7 + include/linux/f2fs_fs.h | 6 + include/linux/genhd.h | 2 - include/linux/usb/chipidea.h | 2 + include/net/addrconf.h | 2 + include/net/ip6_route.h | 1 + include/xen/xen.h | 3 +- kernel/bpf/verifier.c | 32 +++- lib/test_bpf.c | 45 +++++ net/core/rtnetlink.c | 2 +- net/ipv4/raw.c | 3 + net/ipv4/tcp_lp.c | 6 +- net/ipv4/tcp_minisocks.c | 1 + net/ipv4/tcp_output.c | 19 ++- net/ipv6/addrconf.c | 8 +- net/ipv6/raw.c | 2 + net/ipv6/route.c | 39 +++-- samples/bpf/test_verifier.c | 18 +- sound/pci/hda/hda_intel.c | 13 ++ tools/power/cpupower/utils/helpers/cpuid.c | 1 + tools/testing/selftests/x86/Makefile | 2 +- 125 files changed, 940 insertions(+), 539 deletions(-)