This is the start of the stable review cycle for the 4.9.46 release. There are 84 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Aug 30 08:05:10 UTC 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.46-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.46-rc1 Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx> powerpc/mm: Ensure cpumask update is ordered Lv Zheng <lv.zheng@xxxxxxxxx> ACPI: EC: Fix regression related to wrong ECDT initialization order James Morse <james.morse@xxxxxxx> ACPI / APEI: Add missing synchronize_rcu() on NOTIFY_SCI removal Joerg Roedel <jroedel@xxxxxxx> ACPI: ioapic: Clear on-stack resource before using it Dave Jiang <dave.jiang@xxxxxxxxx> ntb: transport shouldn't disable link due to bogus values in SPADs Logan Gunthorpe <logang@xxxxxxxxxxxx> ntb: ntb_test: ensure the link is up before trying to configure the mws Allen Hubbe <Allen.Hubbe@xxxxxxxx> ntb: no sleep in ntb_async_tx_submit Logan Gunthorpe <logang@xxxxxxxxxxxx> NTB: ntb_test: fix bug printing ntb_perf results Logan Gunthorpe <logang@xxxxxxxxxxxx> ntb_transport: fix bug calculating num_qps_mw Logan Gunthorpe <logang@xxxxxxxxxxxx> ntb_transport: fix qp count bug Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> Clarify (and fix) MAX_LFS_FILESIZE macros Charles Milette <charlesmilette@xxxxxxxxx> staging: rtl8188eu: add RNX-N150NUB support Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx> iio: hid-sensor-trigger: Fix the race with user space powering up sensors Dragos Bogdan <dragos.bogdan@xxxxxxxxxx> iio: imu: adis16480: Fix acceleration scale factor for adis16480 Martijn Coenen <maco@xxxxxxxxxxx> ANDROID: binder: fix proc->tsk check. Riley Andrews <riandrews@xxxxxxxxxx> binder: Use wake up hint for synchronous transactions. Todd Kjos <tkjos@xxxxxxxxxxx> binder: use group leader instead of open thread Todd Kjos <tkjos@xxxxxxxxxxx> Revert "android: binder: Sanity check at binder ioctl" Jeffy Chen <jeffy.chen@xxxxxxxxxxxxxx> Bluetooth: bnep: fix possible might sleep error in bnep_session Jeffy Chen <jeffy.chen@xxxxxxxxxxxxxx> Bluetooth: cmtp: fix possible might sleep error in cmtp_session Jeffy Chen <jeffy.chen@xxxxxxxxxxxxxx> Bluetooth: hidp: fix possible might sleep error in hidp_session_thread Florian Westphal <fw@xxxxxxxxx> netfilter: nat: fix src map lookup Zhang Bo <bo.zhang@xxxxxxx> Revert "leds: handle suspend/resume in heartbeat trigger" Vadim Lomovtsev <vlomovts@xxxxxxxxxx> net: sunrpc: svcsock: fix NULL-pointer exception Eric Biggers <ebiggers@xxxxxxxxxx> x86/mm: Fix use-after-free of ldt_struct Nicholas Piggin <npiggin@xxxxxxxxx> timers: Fix excessive granularity of new timers after a nohz idle Thomas Gleixner <tglx@xxxxxxxxxxxxx> perf/x86/intel/rapl: Make package handling more robust Masami Hiramatsu <mhiramat@xxxxxxxxxx> perf probe: Fix --funcs to show correct symbols for offline module Mark Rutland <mark.rutland@xxxxxxx> perf/core: Fix group {cpu,task} validation Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> ftrace: Check for null ret_stack on profile function graph entry function Chuck Lever <chuck.lever@xxxxxxxxxx> nfsd: Limit end of page list when decoding NFSv4 WRITE Ronnie Sahlberg <lsahlber@xxxxxxxxxx> cifs: return ENAMETOOLONG for overlong names in cifs_open()/cifs_lookup() Sachin Prabhu <sprabhu@xxxxxxxxxx> cifs: Fix df output for users with quota limits Nicholas Piggin <npiggin@xxxxxxxxx> kbuild: linker script do not match C names unless LD_DEAD_CODE_DATA_ELIMINATION is configured Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> tracing: Fix freeing of filter in create_filter() when set_str is false Chunyu Hu <chuhu@xxxxxxxxxx> tracing: Fix kmemleak in tracing_map_array_free() Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> tracing: Call clear_boot_tracer() at lateinit_sync Koji Matsuoka <koji.matsuoka.xm@xxxxxxxxxxx> drm: rcar-du: Fix H/V sync signal polarity configuration Koji Matsuoka <koji.matsuoka.xm@xxxxxxxxxxx> drm: rcar-du: Fix display timing controller parameter Laurent Pinchart <laurent.pinchart+renesas@xxxxxxxxxxxxxxxx> drm: rcar-du: Fix crash in encoder failure error path Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx> drm/atomic: If the atomic check fails, return its value first Chris Wilson <chris@xxxxxxxxxxxxxxxxxx> drm: Release driver tracking before making the object available again Pavel Tatashin <pasha.tatashin@xxxxxxxxxx> mm/memblock.c: reversed logic in memblock_discard() Eric Biggers <ebiggers@xxxxxxxxxx> fork: fix incorrect fput of ->exe_file causing use-after-free Eric Biggers <ebiggers@xxxxxxxxxx> mm/madvise.c: fix freeing of locked page with MADV_FREE Ulf Hansson <ulf.hansson@xxxxxxxxxx> i2c: designware: Fix system suspend Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx> mm, shmem: fix handling /sys/kernel/mm/transparent_hugepage/shmem_enabled Alexey Brodkin <Alexey.Brodkin@xxxxxxxxxxxx> ARCv2: PAE40: Explicitly set MSB counterpart of SLC region ops addresses Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: firewire: fix NULL pointer dereference when releasing uninitialized data of iso-resource Takashi Iwai <tiwai@xxxxxxx> ALSA: hda - Add stereo mic quirk for Lenovo G50-70 (17aa:3978) Takashi Iwai <tiwai@xxxxxxx> ALSA: core: Fix unexpected error at replacing user TLV Joakim Tjernlund <joakim.tjernlund@xxxxxxxxxxxx> ALSA: usb-audio: Add delay quirk for H650e/Jabra 550a USB headsets Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: x86: block guest protection keys unless the host has them enabled Heiko Carstens <heiko.carstens@xxxxxxxxxx> KVM: s390: sthyi: fix specification exception detection Heiko Carstens <heiko.carstens@xxxxxxxxxx> KVM: s390: sthyi: fix sthyi inline assembly Masaki Ota <masaki.ota@xxxxxxxxxxx> Input: ALPS - fix two-finger scroll breakage in right side on ALPS touchpad KT Liao <kt.liao@xxxxxxxxxx> Input: elan_i2c - add ELAN0602 ACPI ID to support Lenovo Yoga310 Aaron Ma <aaron.ma@xxxxxxxxxxxxx> Input: trackpoint - add new trackpoint firmware ID Edward Cree <ecree@xxxxxxxxxxxxxx> bpf/verifier: fix min/max handling in BPF_SUB Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: fix mixed signed/unsigned derived min/max value bounds Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf, verifier: fix alu ops against map_value{, _adj} register types Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: adjust verifier heuristics John Fastabend <john.fastabend@xxxxxxxxx> bpf, verifier: add additional patterns to evaluate_reg_imm_alu Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> net_sched: fix order of queue length updates in qdisc_replace() Xin Long <lucien.xin@xxxxxxxxx> net: sched: fix NULL pointer dereference when action calls some targets Colin Ian King <colin.king@xxxxxxxxxxxxx> irda: do not leak initialized list.dev to userspace Huy Nguyen <huyn@xxxxxxxxxxxx> net/mlx4_core: Enable 4K UAR if SRIOV module parameter is not enabled Neal Cardwell <ncardwell@xxxxxxxxxx> tcp: when rearming RTO, if RTO time is in past then fire RTO ASAP Wei Wang <weiwan@xxxxxxxxxx> ipv6: repair fib6 tree in failure case Wei Wang <weiwan@xxxxxxxxxx> ipv6: reset fn->rr_ptr when replacing route Eric Dumazet <edumazet@xxxxxxxxxx> tipc: fix use-after-free Alexander Potapenko <glider@xxxxxxxxxx> sctp: fully initialize the IPv6 address in sctp_v6_to_addr() Colin Ian King <colin.king@xxxxxxxxxxxxx> nfp: fix infinite loop on umapping cleanup Eric Dumazet <edumazet@xxxxxxxxxx> ipv4: better IP_MAX_MTU enforcement Eric Dumazet <edumazet@xxxxxxxxxx> ptr_ring: use kmalloc_array() Liping Zhang <zlpnobody@xxxxxxxxx> openvswitch: fix skb_panic due to the incorrect actions attrlen Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: fix bpf_trace_printk on 32 bit archs Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> net_sched: remove warning from qdisc_hash_add Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> net_sched/sfq: update hierarchical backlog when drop packet Eric Dumazet <edumazet@xxxxxxxxxx> ipv4: fix NULL dereference in free_fib_info_rcu() Eric Dumazet <edumazet@xxxxxxxxxx> dccp: defer ccid_hc_tx_delete() at dismantle time Eric Dumazet <edumazet@xxxxxxxxxx> dccp: purge write queue in dccp_destroy_sock() Eric Dumazet <edumazet@xxxxxxxxxx> af_key: do not use GFP_KERNEL in atomic contexts Tushar Dave <tushar.n.dave@xxxxxxxxxx> sparc64: remove unnecessary log message ------------- Diffstat: Makefile | 4 +- arch/arc/include/asm/cache.h | 2 + arch/arc/mm/cache.c | 13 +- arch/powerpc/include/asm/mmu_context.h | 20 +- arch/powerpc/include/asm/pgtable-be-types.h | 1 + arch/powerpc/include/asm/pgtable-types.h | 1 + arch/s390/kvm/sthyi.c | 7 +- arch/sparc/kernel/pci_sun4v.c | 2 - arch/x86/events/intel/rapl.c | 58 +++--- arch/x86/include/asm/mmu_context.h | 4 +- arch/x86/kvm/cpuid.c | 2 +- drivers/acpi/apei/ghes.c | 1 + drivers/acpi/ec.c | 17 +- drivers/acpi/internal.h | 1 - drivers/acpi/ioapic.c | 6 + drivers/acpi/scan.c | 1 - drivers/android/binder.c | 19 +- drivers/gpu/drm/drm_atomic.c | 5 +- drivers/gpu/drm/drm_gem.c | 6 +- drivers/gpu/drm/rcar-du/rcar_du_crtc.c | 6 +- drivers/gpu/drm/rcar-du/rcar_du_kms.c | 10 +- drivers/i2c/busses/i2c-designware-platdrv.c | 14 +- .../iio/common/hid-sensors/hid-sensor-trigger.c | 8 +- drivers/iio/imu/adis16480.c | 2 +- drivers/input/mouse/alps.c | 41 +++- drivers/input/mouse/alps.h | 8 + drivers/input/mouse/elan_i2c_core.c | 1 + drivers/input/mouse/trackpoint.c | 3 +- drivers/input/mouse/trackpoint.h | 3 +- drivers/leds/trigger/ledtrig-heartbeat.c | 31 ---- drivers/net/ethernet/mellanox/mlx4/main.c | 4 +- .../net/ethernet/netronome/nfp/nfp_net_common.c | 3 +- drivers/ntb/ntb_transport.c | 62 ++----- drivers/staging/rtl8188eu/os_dep/usb_intf.c | 1 + fs/cifs/dir.c | 18 +- fs/cifs/smb2pdu.c | 4 +- fs/nfsd/nfs4xdr.c | 6 +- include/asm-generic/vmlinux.lds.h | 38 ++-- include/linux/bpf_verifier.h | 1 + include/linux/cpuhotplug.h | 1 - include/linux/fs.h | 4 +- include/linux/ptr_ring.h | 9 +- include/linux/skb_array.h | 3 +- include/net/ip.h | 4 +- include/net/sch_generic.h | 5 +- kernel/bpf/verifier.c | 206 ++++++++++++++++++--- kernel/events/core.c | 39 ++-- kernel/fork.c | 1 + kernel/time/timer.c | 50 ++++- kernel/trace/bpf_trace.c | 34 +++- kernel/trace/ftrace.c | 4 + kernel/trace/trace.c | 2 +- kernel/trace/trace_events_filter.c | 4 + kernel/trace/tracing_map.c | 11 +- mm/madvise.c | 2 +- mm/memblock.c | 2 +- mm/shmem.c | 4 +- net/bluetooth/bnep/core.c | 11 +- net/bluetooth/cmtp/core.c | 17 +- net/bluetooth/hidp/core.c | 33 ++-- net/dccp/proto.c | 19 +- net/ipv4/fib_semantics.c | 12 +- net/ipv4/route.c | 2 +- net/ipv4/tcp_input.c | 3 +- net/ipv6/ip6_fib.c | 26 +-- net/irda/af_irda.c | 2 +- net/key/af_key.c | 48 ++--- net/netfilter/nf_nat_core.c | 17 +- net/openvswitch/actions.c | 1 + net/openvswitch/datapath.c | 7 +- net/openvswitch/datapath.h | 2 + net/sched/act_ipt.c | 2 + net/sched/sch_api.c | 3 - net/sched/sch_sfq.c | 5 +- net/sctp/ipv6.c | 2 + net/sunrpc/svcsock.c | 22 ++- net/tipc/netlink_compat.c | 6 +- sound/core/control.c | 2 +- sound/firewire/iso-resources.c | 7 +- sound/pci/hda/patch_conexant.c | 1 + sound/usb/quirks.c | 9 +- tools/perf/util/probe-event.c | 25 +-- tools/testing/selftests/ntb/ntb_test.sh | 6 +- 83 files changed, 711 insertions(+), 398 deletions(-)