This is the start of the stable review cycle for the 4.9.39 release. There are 72 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri Jul 21 10:23:57 UTC 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.39-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.39-rc1 Haozhong Zhang <haozhong.zhang@xxxxxxxxx> kvm: vmx: allow host to access guest MSR_IA32_BNDCFGS Jim Mattson <jmattson@xxxxxxxxxx> kvm: vmx: Check value written to IA32_BNDCFGS Jim Mattson <jmattson@xxxxxxxxxx> kvm: x86: Guest BNDCFGS requires guest MPX support Jim Mattson <jmattson@xxxxxxxxxx> kvm: vmx: Do not disable intercepts for BNDCFGS Pavankumar Kondeti <pkondeti@xxxxxxxxxxxxxx> tracing: Use SOFTIRQ_OFFSET for softirq dectection for more accurate results Dan Carpenter <dan.carpenter@xxxxxxxxxx> PM / QoS: return -EINVAL for bogus strings Thomas Gleixner <tglx@xxxxxxxxxxxxx> PM / wakeirq: Convert to SRCU Peter Zijlstra <peterz@xxxxxxxxxxxxx> sched/topology: Fix overlapping sched_group_mask Lauro Ramos Venancio <lvenanci@xxxxxxxxxx> sched/topology: Optimize build_group_mask() Peter Zijlstra <peterz@xxxxxxxxxxxxx> sched/topology: Fix building of overlapping sched-groups Peter Zijlstra <peterz@xxxxxxxxxxxxx> sched/fair, cpumask: Export for_each_cpu_wrap() Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "sched/core: Optimize SCHED_SMT" Horia Geantă <horia.geanta@xxxxxxx> crypto: caam - fix signals handling David Gstir <david@xxxxxxxxxxxxx> crypto: caam - properly set IV after {en,de}crypt Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> crypto: sha1-ssse3 - Disable avx2 Gilad Ben-Yossef <gilad@xxxxxxxxxxxxx> crypto: atmel - only treat EBUSY as transient if backlog Martin Hicks <mort@xxxxxxxx> crypto: talitos - Extend max key length for SHA384/512-HMAC and AEAD Helge Deller <deller@xxxxxx> mm: fix overflow check in expand_upwards() Andy Lutomirski <luto@xxxxxxxxxx> selftests/capabilities: Fix the test_execve test Eric W. Biederman <ebiederm@xxxxxxxxxxxx> mnt: Make propagate_umount less slow for overlapping mount propagation trees Eric W. Biederman <ebiederm@xxxxxxxxxxxx> mnt: In propgate_umount handle visiting mounts in any order Eric W. Biederman <ebiederm@xxxxxxxxxxxx> mnt: In umount propagation reparent in a separate pass Johan Hovold <johan@xxxxxxxxxx> nvmem: core: fix leaks on registration errors Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx> rcu: Add memory barriers for NOCB leader wakeup Adam Borowski <kilobyte@xxxxxxxxxx> vt: fix unchecked __put_user() in tioclinux ioctls Marc Zyngier <marc.zyngier@xxxxxxx> ARM64: dts: marvell: armada37xx: Fix timer interrupt specifiers Kees Cook <keescook@xxxxxxxxxxxx> exec: Limit arg stack to at most 75% of _STK_LIM Kees Cook <keescook@xxxxxxxxxxxx> s390: reduce ELF_ET_DYN_BASE Kees Cook <keescook@xxxxxxxxxxxx> powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB Kees Cook <keescook@xxxxxxxxxxxx> arm64: move ELF_ET_DYN_BASE to 4GB / 4MB Kees Cook <keescook@xxxxxxxxxxxx> arm: move ELF_ET_DYN_BASE to 4MB Kees Cook <keescook@xxxxxxxxxxxx> binfmt_elf: use ELF_ET_DYN_BASE only for PIE Cyril Bur <cyrilbur@xxxxxxxxx> checkpatch: silence perl 5.26.0 unescaped left brace warnings Sahitya Tummala <stummala@xxxxxxxxxxxxxx> fs/dcache.c: fix spin lockup issue on nlru->lock Sahitya Tummala <stummala@xxxxxxxxxxxxxx> mm/list_lru.c: fix list_lru_count_node() to be race free Marcin Nowakowski <marcin.nowakowski@xxxxxxxxxx> kernel/extable.c: mark core_kernel_text notrace Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx> thp, mm: fix crash due race in MADV_FREE handling Ben Hutchings <ben@xxxxxxxxxxxxxxx> tools/lib/lockdep: Reduce MAX_LOCK_DEPTH to avoid overflowing lock_chain/: Depth Helge Deller <deller@xxxxxx> parisc/mm: Ensure IRQs are off in switch_mm() Thomas Bogendoerfer <tsbogend@xxxxxxxxxxxxxxxx> parisc: DMA API: return error instead of BUG_ON for dma ops on non dma devs Eric Biggers <ebiggers@xxxxxxxxxx> parisc: use compat_sys_keyctl() Helge Deller <deller@xxxxxx> parisc: Report SIGSEGV instead of SIGBUS when running out of stack Suzuki K Poulose <suzuki.poulose@xxxxxxx> irqchip/gic-v3: Fix out-of-bound access in gic_set_affinity Srinivas Dasari <dasaris@xxxxxxxxxxxxxxxx> cfg80211: Check if NAN service ID is of expected size Srinivas Dasari <dasaris@xxxxxxxxxxxxxxxx> cfg80211: Check if PMKID attribute is of expected size Srinivas Dasari <dasaris@xxxxxxxxxxxxxxxx> cfg80211: Validate frequencies nested in NL80211_ATTR_SCAN_FREQUENCIES Srinivas Dasari <dasaris@xxxxxxxxxxxxxxxx> cfg80211: Define nla_policy for NL80211_ATTR_LOCAL_MESH_POWER_MODE Bert Kenward <bkenward@xxxxxxxxxxxxxx> sfc: don't read beyond unicast address list Peter S. Housel <housel@xxxxxxx> brcmfmac: Fix glom_skb leak in brcmf_sdiod_recv_chain Christophe Jaillet <christophe.jaillet@xxxxxxxxxx> brcmfmac: Fix a memory leak in error handling path in 'brcmf_cfg80211_attach' Arend van Spriel <arend.vanspriel@xxxxxxxxxxxx> brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx> rds: tcp: use sock_create_lite() to create the accept socket Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx> vrf: fix bug_on triggered by rx when destroying a vrf David Ahern <dsahern@xxxxxxxxx> net: ipv6: Compare lwstate in detecting duplicate nexthops Alban Browaeys <alban.browaeys@xxxxxxxxx> net: core: Fix slab-out-of-bounds in netdev_stats_to_stats64 Jiri Benc <jbenc@xxxxxxxxxx> vxlan: fix hlist corruption Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> ipv6: dad: don't remove dynamic addresses if link is down Gal Pressman <galp@xxxxxxxxxxxx> net/mlx5e: Fix TX carrier errors report in get stats ndo Derek Chickles <derek.chickles@xxxxxxxxxx> liquidio: fix bug in soft reset failure detection Mohamad Haj Yahia <mohamad@xxxxxxxxxxxx> net/mlx5: Cancel delayed recovery work when unloading the driver Michal Kubeček <mkubecek@xxxxxxx> net: handle NAPI_GRO_FREE_STOLEN_HEAD case also in napi_frags_finish() Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: prevent leaking pointer via xadd on unpriviledged Dan Carpenter <dan.carpenter@xxxxxxxxxx> rocker: move dereference before free Eduardo Valentin <eduval@xxxxxxxxxx> bridge: mdb: fix leak on complete_info ptr on fail path Eric Dumazet <edumazet@xxxxxxxxxx> net: prevent sign extension in dev_get_stats() WANG Cong <xiyou.wangcong@xxxxxxxxx> tcp: reset sk_rx_dst in tcp_disconnect() Richard Cochran <richardcochran@xxxxxxxxx> net: dp83640: Avoid NULL pointer dereference. WANG Cong <xiyou.wangcong@xxxxxxxxx> ipv6: avoid unregistering inet6_dev for loopback Zach Brown <zach.brown@xxxxxx> net/phy: micrel: configure intterupts after autoneg workaround Gao Feng <gfree.wind@xxxxxxxxxxx> net: sched: Fix one possible panic when no destroy callback Eric Dumazet <edumazet@xxxxxxxxxx> net_sched: fix error recovery at qdisc creation Vineeth Remanan Pillai <vineethp@xxxxxxxxxx> xen-netfront: Rework the fix for Rx stall during OOM and network stress ------------- Diffstat: Makefile | 4 +- arch/arm/include/asm/elf.h | 8 +- arch/arm64/boot/dts/marvell/armada-37xx.dtsi | 12 +- arch/arm64/include/asm/elf.h | 12 +- arch/parisc/include/asm/dma-mapping.h | 11 +- arch/parisc/include/asm/mmu_context.h | 15 +- arch/parisc/kernel/syscall_table.S | 2 +- arch/parisc/mm/fault.c | 2 +- arch/powerpc/include/asm/elf.h | 13 +- arch/s390/include/asm/elf.h | 15 +- arch/x86/crypto/sha1_ssse3_glue.c | 2 +- arch/x86/include/asm/elf.h | 13 +- arch/x86/include/asm/msr-index.h | 2 + arch/x86/kvm/cpuid.h | 8 + arch/x86/kvm/vmx.c | 10 +- drivers/base/power/sysfs.c | 2 + drivers/base/power/wakeup.c | 32 ++-- drivers/crypto/atmel-sha.c | 4 +- drivers/crypto/caam/caamalg.c | 20 +- drivers/crypto/caam/caamhash.c | 2 +- drivers/crypto/caam/key_gen.c | 2 +- drivers/crypto/talitos.c | 7 +- drivers/irqchip/irq-gic-v3.c | 3 + .../ethernet/cavium/liquidio/cn23xx_pf_device.c | 2 +- .../net/ethernet/cavium/liquidio/cn66xx_device.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 2 - drivers/net/ethernet/mellanox/mlx5/core/health.c | 15 +- drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +- drivers/net/ethernet/rocker/rocker_ofdpa.c | 2 +- drivers/net/ethernet/sfc/ef10.c | 8 +- drivers/net/phy/dp83640.c | 2 +- drivers/net/phy/micrel.c | 2 + drivers/net/vrf.c | 11 +- drivers/net/vxlan.c | 30 ++- .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c | 7 +- .../broadcom/brcm80211/brcmfmac/cfg80211.c | 8 +- drivers/net/xen-netfront.c | 14 +- drivers/nvmem/core.c | 13 +- drivers/parisc/ccio-dma.c | 12 ++ drivers/parisc/dino.c | 5 +- drivers/parisc/lba_pci.c | 6 +- drivers/parisc/sba_iommu.c | 14 ++ drivers/tty/vt/vt.c | 6 +- fs/binfmt_elf.c | 59 +++++- fs/dcache.c | 5 +- fs/exec.c | 11 +- fs/mount.h | 1 + fs/namespace.c | 1 + fs/pnode.c | 212 ++++++++++++++++----- include/linux/cpumask.h | 17 ++ include/linux/list_lru.h | 1 + include/linux/mlx5/driver.h | 1 + include/net/ip6_route.h | 8 + include/net/vxlan.h | 10 +- kernel/bpf/verifier.c | 5 + kernel/extable.c | 2 +- kernel/rcu/tree_plugin.h | 2 + kernel/sched/core.c | 43 ++--- kernel/sched/fair.c | 53 +----- kernel/sched/sched.h | 23 +-- kernel/trace/trace.c | 2 +- lib/cpumask.c | 32 ++++ mm/huge_memory.c | 2 +- mm/list_lru.c | 14 +- mm/mmap.c | 2 +- net/bridge/br_mdb.c | 3 +- net/core/dev.c | 30 ++- net/ipv4/tcp.c | 2 + net/ipv6/addrconf.c | 23 +-- net/ipv6/ip6_fib.c | 5 +- net/ipv6/route.c | 8 +- net/rds/tcp_listen.c | 2 +- net/sched/sch_api.c | 3 + net/sched/sch_hhf.c | 8 +- net/sched/sch_mq.c | 10 +- net/sched/sch_mqprio.c | 19 +- net/sched/sch_sfq.c | 3 +- net/wireless/nl80211.c | 10 +- scripts/checkpatch.pl | 6 +- tools/lib/lockdep/uinclude/linux/lockdep.h | 2 +- tools/testing/selftests/capabilities/test_execve.c | 7 +- 81 files changed, 656 insertions(+), 355 deletions(-)